diff --git a/README.md b/README.md
index 6df9a18038..b522762f10 100644
--- a/README.md
+++ b/README.md
@@ -38,6 +38,7 @@ The SAF CLI is the successor to [Heimdall Tools](https://github.com/mitre/heimda
       * [HDF to Checklist](#hdf-to-checklist)
       * [HDF to CSV](#hdf-to-csv)
       * [HDF to Condensed JSON](#hdf-to-condensed-json)
+      * [HDF to HTML](#hdf-to-html)
 
 ### Convert Other Formats to HDF
 
@@ -435,6 +436,38 @@ convert hdf2condensed         Condensed format used by some community members
     $ saf convert hdf2condensed -i rhel7-results.json -o rhel7-condensed.json
 ```
 [top](#convert-hdf-to-other-formats)
+#### HDF to HTML
+```
+convert hdf2html             Translate an HDF file into a Heimdall Report HTML file
+
+  USAGE
+    $ saf convert hdf2html -i <hdf-scan-results-json>... -o <output-html> [-t <output-type>] [-h]
+
+  FLAGS
+    -h, --help
+        Show CLI help.
+
+    -i, --input=<value>...
+        (required) Input HDF JSON file
+
+    -o, --output=<value>
+        (required) Output HTML file
+
+    -t, --type=<option>
+        [default: Administrator] The report type to generate
+        Report types differ with the information they include
+        Executive: Profile Info + Statuses + Compliance Level
+        Manager: Executive + Test Results and Details
+        Administrator: Manager + Test Code
+        <options: executive|manager|administrator>
+
+  DESCRIPTION
+    Translate an HDF file into a Heimdall Report HTML file
+
+  EXAMPLES
+    $ saf convert hdf2html -i hdf_input.json -o report.html -t manager 
+```
+[top](#convert-hdf-to-other-formats)
 
 ---
 ### Convert To HDF
diff --git a/src/commands/convert/hdf2html.ts b/src/commands/convert/hdf2html.ts
new file mode 100644
index 0000000000..bb3cc547fa
--- /dev/null
+++ b/src/commands/convert/hdf2html.ts
@@ -0,0 +1,48 @@
+import {Command, Flags} from '@oclif/core'
+import fs from 'fs'
+import path from 'path'
+import {FromHDFToHTMLMapper as Mapper} from '@mitre/hdf-converters'
+import _ from 'lodash'
+
+// All selectable export types for an HTML export
+enum FileExportTypes {
+  Executive = 'Executive',
+  Manager = 'Manager',
+  Administrator = 'Administrator'
+}
+
+export default class HDF2HTML extends Command {
+  static usage = 'convert hdf2html -i <hdf-scan-results-json>... -o <output-html> [-t <output-type>] [-h]'
+
+  static description = 'Translate an HDF file into a Heimdall Report HTML file'
+
+  static examples = ['saf convert hdf2html -i hdf_input.json -o report.html -t manager']
+
+  static flags = {
+    help: Flags.help({char: 'h'}),
+    input: Flags.string({char: 'i', required: true, multiple: true, description: 'Input HDF JSON file'}),
+    output: Flags.string({char: 'o', required: true, description: 'Output HTML file'}),
+    type: Flags.string({char: 't', default: FileExportTypes.Administrator,
+      description: 'The report type to generate\nReport types differ with the information they include\nExecutive: Profile Info + Statuses + Compliance Level\nManager: Executive + Test Results and Details\nAdministrator: Manager + Test Code',
+      options: ['executive', 'manager', 'administrator']}),
+  }
+
+  async run() {
+    const {flags} = await this.parse(HDF2HTML)
+
+    const files = []
+
+    let i = 0
+    for (const file of flags.input) {
+      // Create unique fileID for html reference
+      const fileID = `${i++}`
+
+      const data = fs.readFileSync(file, 'utf8')
+      const fileName = path.basename(file)
+      files.push({data, fileName, fileID})
+    }
+
+    const converter = await new Mapper(files, _.startCase(flags.type) as FileExportTypes).toHTML()
+    fs.writeFileSync(flags.output, converter)
+  }
+}
diff --git a/src/commands/convert/splunk2hdf.ts b/src/commands/convert/splunk2hdf.ts
index b33ab17b95..3e6406762a 100644
--- a/src/commands/convert/splunk2hdf.ts
+++ b/src/commands/convert/splunk2hdf.ts
@@ -1,5 +1,5 @@
 import {Command, Flags} from '@oclif/core'
-import {SplunkMapper} from '@mitre/hdf-converters/lib/src/splunk-mapper'
+import {SplunkMapper} from '@mitre/hdf-converters'
 import {table} from 'table'
 import {createWinstonLogger} from '../../utils/logging'
 import _ from 'lodash'
diff --git a/test/commands/convert/hdf2html.test.ts b/test/commands/convert/hdf2html.test.ts
new file mode 100644
index 0000000000..3fa4d0f7ac
--- /dev/null
+++ b/test/commands/convert/hdf2html.test.ts
@@ -0,0 +1,45 @@
+import {expect, test} from '@oclif/test'
+import tmp from 'tmp'
+import path from 'path'
+import fs from 'fs'
+import { omitHtmlChangingfields as omitHtmlChangingFields } from '../utils'
+
+describe('Test hdf2html triple_overlay_profile_example with default (administrator) report type', () => {
+  const tmpobj = tmp.dirSync({unsafeCleanup: true})
+
+  test
+    .stdout()
+    .command(['convert hdf2html', '-i', path.resolve('./test/sample_data/HDF/input/triple_overlay_profile_example.json'), '-o', `${tmpobj.name}/triple_overlay_profile_example.html`])
+    .it('hdf-converter output test', () => {
+      const converted = omitHtmlChangingFields(fs.readFileSync(`${tmpobj.name}/triple_overlay_profile_example.html`, 'utf8'))
+      const sample = omitHtmlChangingFields(fs.readFileSync(path.resolve('./test/sample_data/html/triple_overlay_profile_example.htm'), 'utf8'))
+      expect(converted).to.eql(sample)
+    })
+})
+
+describe('Test hdf2html with manager report type and two input files', () => {
+  const tmpobj = tmp.dirSync({unsafeCleanup: true})
+
+  test
+    .stdout()
+    .command(['convert hdf2html', '-i', path.resolve('./test/sample_data/HDF/input/red_hat_good.json'), path.resolve('./test/sample_data/HDF/input/vSphere8_report.json'), '-o', `${tmpobj.name}/combined_output.html`, '-t', 'manager'])
+    .it('hdf-converter output test', () => {
+      const converted = omitHtmlChangingFields(fs.readFileSync(`${tmpobj.name}/combined_output.html`, 'utf8'))
+      const sample = omitHtmlChangingFields(fs.readFileSync(path.resolve('./test/sample_data/html/combined_output.htm'), 'utf8'))
+      expect(converted).to.eql(sample)
+    })
+})
+
+describe('Test hdf2html with executive report type', () => {
+  const tmpobj = tmp.dirSync({unsafeCleanup: true})
+
+  test
+    .stdout()
+    .command(['convert hdf2html', '-i', path.resolve('./test/sample_data/HDF/input/red_hat_good.json'), '-o', `${tmpobj.name}/red_hat_good.html`, '-t', 'executive'])
+    .it('hdf-converter output test', () => {
+      const converted = omitHtmlChangingFields(fs.readFileSync(`${tmpobj.name}/red_hat_good.html`, 'utf8'))
+      const sample = omitHtmlChangingFields(fs.readFileSync(path.resolve('./test/sample_data/html/red_hat_good.htm'), 'utf8'))
+      expect(converted).to.eql(sample)
+    })
+})
+
diff --git a/test/commands/utils.ts b/test/commands/utils.ts
index e0552bc839..a3e5093cc3 100644
--- a/test/commands/utils.ts
+++ b/test/commands/utils.ts
@@ -32,3 +32,8 @@ export function omitChecklistChangingFields(input: string) {
   // remove UUIDs
   return input.replaceAll(/[0-9a-fA-F]{8}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{4}\b-[0-9a-fA-F]{12}/gm, '')
 }
+
+export function omitHtmlChangingfields(input: string) {
+  return input.replace(/(tailwindcss .+ \|)/, 'TAILWIND VERSION')
+    .replace(/TW Elements \d+\.\d+\.\d+/, 'TW ELEMENTS VERSION')
+}
\ No newline at end of file
diff --git a/test/sample_data/html/combined_output.htm b/test/sample_data/html/combined_output.htm
new file mode 100644
index 0000000000..ce19e7585f
--- /dev/null
+++ b/test/sample_data/html/combined_output.htm
@@ -0,0 +1,356074 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Manager Report</title>
+    <style>
+      /*! tailwindcss v3.4.7 | MIT License | https://tailwindcss.com*/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}:host,html{-webkit-text-size-adjust:100%;font-feature-settings:normal;-webkit-tap-highlight-color:transparent;font-family:Roboto,sans-serif;font-variation-settings:normal;line-height:1.5;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-feature-settings:normal;font-family:ui-monospace,monospace;font-size:1em;font-variation-settings:normal}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-collapse:collapse;border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-feature-settings:inherit;color:inherit;font-family:inherit;font-size:100%;font-variation-settings:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{color:#9ca3af;opacity:1}input::placeholder,textarea::placeholder{color:#9ca3af;opacity:1}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{height:auto;max-width:100%}[hidden]{display:none}input[type=range]::-webkit-slider-thumb{appearance:none;-moz-appearance:none;-webkit-appearance:none;background:#3b71ca;border:0;border-radius:9999px;cursor:pointer;height:1rem;width:1rem}input[type=range]:disabled::-webkit-slider-thumb,input[type=range]:disabled:focus::-webkit-slider-thumb{background:#a3a3a3}input[type=range]:disabled:active::-webkit-slider-thumb{background:#a3a3a3}input[type=range]::-moz-range-thumb{appearance:none;-moz-appearance:none;-webkit-appearance:none;background:#3b71ca;border:0;border-radius:9999px;cursor:pointer;height:1rem;width:1rem}input[type=range]:disabled::-moz-range-thumb{background:#a3a3a3}input[type=range]::-moz-range-progress{background:#3061af}input[type=range]::-ms-fill-lower{background:#3061af}input[type=range]:focus{outline:none}input[type=range]:focus::-webkit-slider-thumb{background:#3061af}input[type=range]:active::-webkit-slider-thumb{background:#285192}*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }.collapse{visibility:collapse}.relative{position:relative}.top-0{top:0}.z-10{z-index:10}.mx-2{margin-left:.5rem;margin-right:.5rem}.mx-4{margin-left:1rem;margin-right:1rem}.mx-6{margin-left:1.5rem;margin-right:1.5rem}.my-1{margin-bottom:.25rem;margin-top:.25rem}.my-2{margin-bottom:.5rem;margin-top:.5rem}.my-3{margin-bottom:.75rem;margin-top:.75rem}.my-4{margin-bottom:1rem;margin-top:1rem}.-mr-1{margin-right:-.25rem}.mb-0{margin-bottom:0}.mb-2{margin-bottom:.5rem}.ml-auto{margin-left:auto}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.block{display:block}.inline-block{display:inline-block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.h-1{height:.25rem}.h-5{height:1.25rem}.h-6{height:1.5rem}.w-1\/2{width:50%}.w-24{width:6rem}.w-28{width:7rem}.w-32{width:8rem}.w-36{width:9rem}.w-40{width:10rem}.w-5{width:1.25rem}.w-56{width:14rem}.w-6{width:1.5rem}.w-64{width:16rem}.w-full{width:100%}.min-w-full{min-width:100%}.shrink{flex-shrink:1}.shrink-0{flex-shrink:0}.border-separate{border-collapse:separate}.border-spacing-x-2{--tw-border-spacing-x:0.5rem;border-spacing:var(--tw-border-spacing-x) var(--tw-border-spacing-y)}.rotate-\[-180deg\]{--tw-rotate:-180deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.grid-flow-row{grid-auto-flow:row}.grid-flow-col{grid-auto-flow:column}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.flex-wrap{flex-wrap:wrap}.items-center{align-items:center}.justify-between{justify-content:space-between}.gap-x-2{-moz-column-gap:.5rem;column-gap:.5rem}.gap-x-6{-moz-column-gap:1.5rem;column-gap:1.5rem}.gap-y-1{row-gap:.25rem}.gap-y-2{row-gap:.5rem}.overflow-hidden{overflow:hidden}.whitespace-pre-line{white-space:pre-line}.whitespace-pre-wrap{white-space:pre-wrap}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-full{border-radius:9999px}.rounded-xl{border-radius:.75rem}.rounded-t-xl{border-top-left-radius:.75rem;border-top-right-radius:.75rem}.border{border-width:1px}.border-4{border-width:4px}.border-b{border-bottom-width:1px}.border-r{border-right-width:1px}.border-black{--tw-border-opacity:1;border-color:rgb(0 0 0/var(--tw-border-opacity))}.border-gray-300{--tw-border-opacity:1;border-color:rgb(209 213 219/var(--tw-border-opacity))}.bg-gray-100{--tw-bg-opacity:1;background-color:rgb(243 244 246/var(--tw-bg-opacity))}.bg-gray-300{--tw-bg-opacity:1;background-color:rgb(209 213 219/var(--tw-bg-opacity))}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.fill-\[\#336dec\]{fill:#336dec}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-1{padding-bottom:.25rem;padding-top:.25rem}.py-2{padding-bottom:.5rem;padding-top:.5rem}.py-3{padding-bottom:.75rem;padding-top:.75rem}.py-4{padding-bottom:1rem;padding-top:1rem}.py-6{padding-top:1.5rem}.pb-6,.py-6{padding-bottom:1.5rem}.pl-3{padding-left:.75rem}.pl-4{padding-left:1rem}.pl-8{padding-left:2rem}.pr-1{padding-right:.25rem}.pt-1{padding-top:.25rem}.text-left{text-align:left}.text-center{text-align:center}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.text-black{--tw-text-opacity:1;color:rgb(0 0 0/var(--tw-text-opacity))}.text-gray-400{--tw-text-opacity:1;color:rgb(156 163 175/var(--tw-text-opacity))}.text-red-700{--tw-text-opacity:1;color:rgb(185 28 28/var(--tw-text-opacity))}.underline{text-decoration-line:underline}.shadow-lg{--tw-shadow:0 10px 15px -3px rgba(0,0,0,.1),0 4px 6px -4px rgba(0,0,0,.1);--tw-shadow-colored:0 10px 15px -3px var(--tw-shadow-color),0 4px 6px -4px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.transition{transition-duration:.15s;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1)}.transition-transform{transition-duration:.15s;transition-property:transform;transition-timing-function:cubic-bezier(.4,0,.2,1)}.duration-200{transition-duration:.2s}.ease-in-out{transition-timing-function:cubic-bezier(.4,0,.2,1)}.\[overflow-anchor\:none\]{overflow-anchor:none}.odd\:bg-gray-100:nth-child(odd){--tw-bg-opacity:1;background-color:rgb(243 244 246/var(--tw-bg-opacity))}.even\:bg-white:nth-child(2n){--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.hover\:z-\[2\]:hover{z-index:2}.focus\:z-\[3\]:focus{z-index:3}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:mr-0{margin-right:0}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:rotate-0{--tw-rotate:0deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:fill-\[\#212529\]{fill:#212529}@media (prefers-reduced-motion:reduce){.motion-reduce\:transition-none{transition-property:none}}@media (min-width:640px){.sm\:block{display:block}.sm\:grid{display:grid}.sm\:hidden{display:none}.sm\:w-40{width:10rem}.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:grid-cols-\[10\%_90\%\]{grid-template-columns:10% 90%}.sm\:break-words{overflow-wrap:break-word}.sm\:font-normal{font-weight:400}.sm\:no-underline{text-decoration-line:none}}@media (min-width:768px){.md\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}@media (min-width:1024px){.lg\:sticky{position:sticky}.lg\:block{display:block}.lg\:grid{display:grid}.lg\:hidden{display:none}.lg\:w-32{width:8rem}.lg\:w-36{width:9rem}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.lg\:break-normal{overflow-wrap:normal;word-break:normal}.lg\:pl-9{padding-left:2.25rem}}@media (min-width:1280px){.xl\:w-52{width:13rem}.xl\:grid-flow-col{grid-auto-flow:column}.xl\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.xl\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}}@media print{.print\:block{display:block}.print\:hidden{display:none}.print\:border-none{border-style:none}.print\:border-black{--tw-border-opacity:1;border-color:rgb(0 0 0/var(--tw-border-opacity))}.print\:bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.print\:text-left{text-align:left}.print\:text-2xl{font-size:1.5rem;line-height:2rem}}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:bg-blue-200:not([data-te-collapse-collapsed]){--tw-bg-opacity:1;background-color:rgb(191 219 254/var(--tw-bg-opacity))}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:text-blue-900:not([data-te-collapse-collapsed]){--tw-text-opacity:1;color:rgb(30 58 138/var(--tw-text-opacity))}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:\[box-shadow\:inset_0_-1px_0_rgba\(229\2c 231\2c 235\)\]:not([data-te-collapse-collapsed]){box-shadow:inset 0 -1px 0 #e5e7eb}.\[\&\[data-te-dropdown-show\]\]\:grid[data-te-dropdown-show]{display:grid}
+    </style>
+    <style>
+      .border-low {
+        --tw-border-opacity: 1;
+        border-color: rgb(243 67 53 / var(--tw-border-opacity));
+      }
+      .border-medium {
+        --tw-border-opacity: 1;
+        border-color: rgb(255 235 59 / var(--tw-border-opacity));
+      }
+      .border-high {
+        --tw-border-opacity: 1;
+        border-color: rgb(76 176 79 / var(--tw-border-opacity));
+      }
+    </style>
+  </head>
+
+  <body>
+    <!-- Navbar -->
+    <!-- WARNING: Tailwind Elements interactive components get disabled on Android's HTML viewer; use a browser instead -->
+    <nav
+      class="relative top-0 z-10 min-w-full border-b border-gray-300 bg-gray-100 px-3 py-3 shadow-lg print:hidden lg:sticky"
+    >
+      <!-- Heimdall report -->
+      <a href="#" class="px-3 py-2 text-lg font-medium">Heimdall Report</a>
+      <!-- Profile info link -->
+      <button role="button" aria-label="Jump to profile info card">
+        <a href="#profileInfo" class="px-3 py-2 text-sm" aria-current="page">
+          Profile Info
+        </a>
+      </button>
+      <!-- Result sets dropdown menu -->
+      <div class="inline-block" data-te-dropdown-ref>
+        <!-- Button def -->
+        <button
+          type="button"
+          class="inline-flex px-3 py-2 text-sm"
+          data-te-dropdown-toggle-ref
+          href="#resultSetsList"
+          role="button"
+          aria-controls="resultSetsList"
+          aria-expanded="false"
+          aria-label="Toggle navigation dropdown"
+        >
+          Result Sets
+          <svg
+            class="-mr-1 h-5 w-5 text-gray-400"
+            viewBox="0 0 20 20"
+            fill="currentColor"
+            role="img"
+            aria-hidden="true"
+          >
+            <path
+              fill-rule="evenodd"
+              d="M5.23 7.21a.75.75 0 011.06.02L10 11.168l3.71-3.938a.75.75 0 111.08 1.04l-4.25 4.5a.75.75 0 01-1.08 0l-4.25-4.5a.75.75 0 01.02-1.06z"
+              clip-rule="evenodd"
+            />
+          </svg>
+        </button>
+        <!-- Menu def -->
+        <div
+          class="z-10 mt-2 hidden grid-cols-1 sm:grid-cols-2 md:grid-cols-3 lg:grid-cols-4 [&[data-te-dropdown-show]]:grid"
+          id="resultSetsList"
+          data-te-dropdown-menu-ref
+          aria-labelledby="resultSetsList"
+        >
+          <!-- Generate links for every result set -->
+          <div
+            class="block w-56 break-words border border-gray-300 bg-white px-4 py-3 text-sm shadow-lg"
+          >
+            <a href="#0" data-te-dropdown-item-ref>red_hat_good.json</a>
+          </div>
+          <div
+            class="block w-56 break-words border border-gray-300 bg-white px-4 py-3 text-sm shadow-lg"
+          >
+            <a href="#1" data-te-dropdown-item-ref>vSphere8_report.json</a>
+          </div>
+        </div>
+      </div>
+      <!-- Toggle result set accordion collapse state -->
+      <button
+        class="px-3 py-2 text-sm"
+        type="button"
+        data-te-collapse-init
+        data-te-target=".multi-collapse-outer"
+        aria-expanded="true"
+        aria-controls="result-accordion-body"
+      >
+        Toggle Result Sets Expansion
+      </button>
+      <!-- Toggle result accordion collapse state -->
+      <button
+        class="px-3 py-2 text-sm"
+        type="button"
+        data-te-collapse-init
+        data-te-target=".multi-collapse-inner"
+        aria-expanded="true"
+        aria-controls="result-accordion-body"
+      >
+        Toggle Results Expansion
+      </button>
+      <span class="px-3 py-2 text-sm">
+        (To Expand All, Refresh Browser Page)
+      </span>
+    </nav>
+
+    <!-- Profile status card -->
+    <div class="px-4 py-6">
+      <div
+        class="min-w-full rounded-xl border border-gray-300 bg-gray-100 px-4 py-2 print:border-black print:bg-white"
+      >
+        <h5 class="mb-2 text-xl font-bold">Profile Status</h5>
+        <div class="grid grid-flow-row justify-between xl:grid-flow-col">
+          <!-- Status counts -->
+          <div class="px-2 py-2">
+            <div class="font-bold">Count</div>
+            <div class="pt-1">
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                Passed: 367 (1173
+                individual checks passed)
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                Failed: 100
+                (28 individual checks
+                passed, 164 failed out of
+                192 total checks)
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Not Applicable: 38
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Not Reviewed: 77
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(121, 134, 203)" d="M13 14H11V9H13M13 18H11V16H13M1 21H23L12 2L1 21Z"/></svg></span>
+                Profile Error: 1
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="black" d="M17,16V14H7V16H17M19,3A2,2 0 0,1 21,5V19A2,2 0 0,1 19,21H5C3.89,21 3,20.1 3,19V5C3,3.89 3.89,3 5,3H19M17,10V8H7V10H17Z"/></svg></span>
+                Total: 583
+              </div>
+            </div>
+          </div>
+
+          <!-- Severity report -->
+          <div class="px-2 py-2">
+            <div class="font-bold">Severity</div>
+            <div class="pt-1">
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                None: 38
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Low: 44
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Medium: 463
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                High: 38
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden">
+                  <svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(244, 67, 54)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg>
+                </span>
+                Critical: 0
+              </div>
+            </div>
+          </div>
+
+          <!-- Compliance level -->
+          <div class="w-64 px-2 py-2">
+            <div class="font-bold">Compliance</div>
+            <div>
+              <div
+                class="my-1 rounded-full border-4 border-medium text-center text-4xl print:border-none print:text-left print:text-2xl"
+              >
+                67.33%
+              </div>
+              [Passed/(Passed + Failed + Not Reviewed + Profile Error) * 100]
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- Profile info card -->
+    <div class="px-4 pb-6" id="profileInfo">
+      <div
+        class="min-w-full rounded-xl border border-gray-300 bg-gray-100 px-4 py-2 print:border-black print:bg-white"
+      >
+        <h5 class="mb-2 text-xl font-bold">Profile Info</h5>
+        <div class="grid grid-cols-2 md:grid-cols-3 xl:grid-cols-4">
+          <!-- Generate an info report for every profile -->
+          <div class="mx-2 my-2 break-words">
+            <div><strong>Filename:</strong> red_hat_good.json</div>
+            <div><strong>Tool Version:</strong> 4.18.104</div>
+            <div><strong>Platform:</strong> redhat</div>
+            <div><strong>Duration:</strong> 32.419937825</div>
+          </div>
+          <div class="mx-2 my-2 break-words">
+            <div><strong>Filename:</strong> vSphere8_report.json</div>
+            <div><strong>Tool Version:</strong> 5.22.3</div>
+            <div><strong>Platform:</strong> windows_11_enterprise</div>
+            <div><strong>Duration:</strong> 73.759917</div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="overflow-hidden">
+      <!-- Result section -->
+      <!-- If empty, then this should be an executive report HTML export type -->
+      <!-- If not such export type, error has occurred -->
+      <!-- Result set accordion -->
+      <!-- Generate a result set accordion for every result set -->
+      <!-- Outer accordion -->
+      <div
+        class="mx-2 rounded-t-xl border border-gray-300 bg-white print:hidden"
+        id="0"
+      >
+        <div class="mb-0">
+          <!-- Button def -->
+          <button
+            class="group flex w-full items-center rounded-t-xl bg-white px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+            type="button"
+            data-te-collapse-init
+            data-te-target="#collapseable-0"
+            aria-expanded="true"
+            aria-controls="collapseable-0"
+          >
+            red_hat_good.json
+            <span
+              class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+            >
+              <svg
+                xmlns="http://www.w3.org/2000/svg"
+                fill="none"
+                viewBox="0 0 24 24"
+                stroke-width="1.5"
+                stroke="currentColor"
+                class="h-6 w-6"
+                role="img"
+                aria-hidden="true"
+              >
+                <path
+                  stroke-linecap="round"
+                  stroke-linejoin="round"
+                  d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                />
+              </svg>
+            </span>
+          </button>
+        </div>
+
+        <!-- Inner accordion -->
+        <!-- Accordion body def -->
+        <div
+          id="collapseable-0"
+          class="multi-collapse-outer my-4"
+          data-te-collapse-item
+          data-te-collapse-show
+        >
+          <!-- Result header -->
+          <div class="mx-4 rounded-t-xl border border-gray-300 bg-gray-100">
+            <div class="mx-6 my-4 flex w-full shrink">
+              <!-- Status indicator -->
+              <!-- Headers eventually collapse under status column -->
+              <span class="grid w-36 grid-cols-1 sm:w-40">
+                <!-- ID -->
+                <span class="sm:hidden">ID</span>
+                <hr class="h-1 w-32 bg-gray-300 sm:hidden" />
+                <!-- Status indicator -->
+                <span>Status</span>
+                <hr class="h-1 w-32 bg-gray-300 lg:hidden" />
+                <!-- Severity indicator -->
+                <span class="lg:hidden">Severity</span>
+                <hr class="h-1 w-32 bg-gray-300 lg:hidden" />
+                <!-- Control tags -->
+                <span class="lg:hidden">800-53 Controls & CCIs</span>
+              </span>
+              <!-- ID -->
+              <span class="hidden w-28 pl-4 sm:block lg:w-32">ID</span>
+              <!-- Severity indicator -->
+              <span class="hidden w-28 pl-3 lg:block">Severity</span>
+              <!-- Title -->
+              <span class="w-1/2 pl-8 sm:block lg:pl-9">Title</span>
+              <!-- Control tags -->
+              <span class="hidden lg:block lg:w-36 xl:w-52">
+                800-53 Controls & CCIs
+              </span>
+            </div>
+          </div>
+
+          <!-- Generate a result accordion for every result -->
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71973"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71973"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71973</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001744
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71973
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that a file integrity tool verifies the baseline operating system configuration
+at least weekly.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001744
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71973"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71973"
+            >
+              <!-- Result description -->
+              Unauthorized changes to the baseline configuration could make the
+system vulnerable to various attacks or allow unauthorized access to the
+operating system. Changes to operating system configurations can have
+unintended side effects, some of which may be relevant to security.
+
+    Detecting such changes and providing an automated response can help avoid
+unintended, negative consequences that could ultimately affect the security
+state of the operating system. The operating system&#39;s Information Management
+Officer (IMO)&#x2F;Information System Security Officer (ISSO) and System
+Administrators (SAs) must be notified via email and&#x2F;or monitoring system trap
+when there is an unauthorized modification of a configuration item.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package aide is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;etc&#x2F;cron.daily&#x2F;aide is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71973</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that a file integrity tool verifies the baseline operating system configuration
+at least weekly.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized changes to the baseline configuration could make the
+system vulnerable to various attacks or allow unauthorized access to the
+operating system. Changes to operating system configurations can have
+unintended side effects, some of which may be relevant to security.
+
+    Detecting such changes and providing an automated response can help avoid
+unintended, negative consequences that could ultimately affect the security
+state of the operating system. The operating system&#39;s Information Management
+Officer (IMO)&#x2F;Information System Security Officer (ISSO) and System
+Administrators (SAs) must be notified via email and&#x2F;or monitoring system trap
+when there is an unauthorized modification of a configuration item.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 (5), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system routinely checks the baseline configuration for
+unauthorized changes.
+
+    Note: A file integrity tool other than Advanced Intrusion Detection
+Environment (AIDE) may be used, but the tool must be executed at least once per
+week.
+
+    Check to see if AIDE is installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the SA how file integrity checks are
+performed on the system.
+
+    Check for the presence of a cron job running daily or weekly on the system
+that executes AIDE daily to scan for changes to the system baseline. The
+command used in the example will use a daily occurrence.
+
+    Check the cron directories for a script file controlling the execution of
+the file integrity application. For example, if AIDE is installed on the
+system, use the following command:
+
+    # ls -al &#x2F;etc&#x2F;cron.* | grep aide
+    -rwxr-xr-x 1 root root 29 Nov 22 2015 aide
+
+    # grep aide &#x2F;etc&#x2F;crontab &#x2F;var&#x2F;spool&#x2F;cron&#x2F;root
+    &#x2F;etc&#x2F;crontab: 30 04 * * * &#x2F;root&#x2F;aide
+    &#x2F;var&#x2F;spool&#x2F;cron&#x2F;root: 30 04 * * * &#x2F;root&#x2F;aide
+
+    If the file integrity application does not exist, or a script file
+controlling the execution of the file integrity application does not exist,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the file integrity tool to run automatically on the system at
+least weekly. The following example output is generic. It will set cron to run
+AIDE daily, but other file integrity tools may be used:
+
+    # more &#x2F;etc&#x2F;cron.daily&#x2F;aide
+    #!&#x2F;bin&#x2F;bash
+
+    &#x2F;usr&#x2F;sbin&#x2F;aide --check | &#x2F;bin&#x2F;mail -s &quot;$HOSTNAME - Daily aide integrity
+check run&quot; root@sysname.mil</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81017"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81017"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81017</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81017
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must configure the
+au-remote plugin to off-load audit logs using the audisp-remote daemon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81017"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81017"
+            >
+              <!-- Result description -->
+              Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    Without the configuration of the &quot;au-remote&quot; plugin, the audisp-remote
+daemon will not off load the logs from the system being audited.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#39;&#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf&#39; cannot be found. This test cannot be checked in a automated fashion and you must check it manually</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81017</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must configure the
+au-remote plugin to off-load audit logs using the audisp-remote daemon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    Without the configuration of the &quot;au-remote&quot; plugin, the audisp-remote
+daemon will not off load the logs from the system being audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the &quot;au-remote&quot; plugin is configured to always off-load audit logs
+using the audisp-remote daemon:
+
+    # cat &#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf | grep -v &quot;^#&quot;
+
+    active &#x3D; yes
+    direction &#x3D; out
+    path &#x3D; &#x2F;sbin&#x2F;audisp-remote
+    type &#x3D; always
+    format &#x3D; string
+
+    If the &quot;direction&quot; setting is not set to &quot;out&quot;, or the line is
+commented out, this is a finding.
+
+    If the &quot;path&quot; setting is not set to &quot;&#x2F;sbin&#x2F;audisp-remote&quot;, or the line
+is commented out, this is a finding.
+
+    If the &quot;type&quot; setting is not set to &quot;always&quot;, or the line is commented
+out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the &#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf file and add or update the
+following values:
+
+    direction &#x3D; out
+    path &#x3D; &#x2F;sbin&#x2F;audisp-remote
+    type &#x3D; always
+
+    The audit daemon must be restarted for changes to take effect:
+
+    # service auditd restart</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81005"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81005"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81005</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81005
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Red Hat Enterprise Linux operating systems version 7.2 or newer with a
+Basic Input&#x2F;Output System (BIOS) must require authentication upon booting into
+single-user and maintenance modes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81005"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81005"
+            >
+              <!-- Result description -->
+              If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;boot&#x2F;grub2&#x2F;user.cfg</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;boot&#x2F;grub2&#x2F;grub.cfg set superusers is expected to cmp &#x3D;&#x3D; &quot;\&quot;root\&quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81005</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Red Hat Enterprise Linux operating systems version 7.2 or newer with a
+Basic Input&#x2F;Output System (BIOS) must require authentication upon booting into
+single-user and maintenance modes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For systems that use UEFI, this is Not Applicable.
+
+    For systems that are running a version of RHEL prior to 7.2, this is Not
+Applicable.
+
+    Check to see if an encrypted root password is set. On systems that use a
+BIOS, use the following command:
+
+    # grep -iw grub2_password &#x2F;boot&#x2F;grub2&#x2F;user.cfg
+    GRUB2_PASSWORD&#x3D;grub.pbkdf2.sha512.[password_hash]
+
+    If the root password does not begin with &quot;grub.pbkdf2.sha512&quot;, this is a
+finding.
+
+    Verify that the &quot;root&quot; account is set as the &quot;superusers&quot;:
+
+    # grep -iw &quot;superusers&quot; &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+        set superusers&#x3D;&quot;root&quot;
+        export superusers
+
+    If &quot;superusers&quot; is not set to &quot;root&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to encrypt the boot password for root.
+
+    Generate an encrypted grub2 password for root with the following command:
+
+    Note: The hash generated is an example.
+
+    # grub2-setpassword
+    Enter password:
+    Confirm password:
+
+    Edit the &#x2F;boot&#x2F;grub2&#x2F;grub.cfg file and add or modify the following lines in
+the &quot;### BEGIN &#x2F;etc&#x2F;grub.d&#x2F;01_users ###&quot; section:
+
+    set superusers&#x3D;&quot;root&quot;
+    export superusers</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71957"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71957"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71957</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71957
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not allow users to
+override SSH environment variables.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71957"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71957"
+            >
+              <!-- Result description -->
+              Failure to restrict system access to authenticated users negatively
+impacts operating system security.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration PermitUserEnvironment is expected to eq &quot;no&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71957</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not allow users to
+override SSH environment variables.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Failure to restrict system access to authenticated users negatively
+impacts operating system security.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system does not allow users to override environment
+variables to the SSH daemon.
+
+    Check for the value of the &quot;PermitUserEnvironment&quot; keyword with the
+following command:
+
+    # grep -i permituserenvironment &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    PermitUserEnvironment no
+
+    If the &quot;PermitUserEnvironment&quot; keyword is not set to &quot;no&quot;, is missing,
+or is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to not allow users to override environment
+variables to the SSH daemon.
+
+    Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the line for
+&quot;PermitUserEnvironment&quot; keyword and set the value to &quot;no&quot;:
+
+    PermitUserEnvironment no
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-77823"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-77823"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-77823</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-77823
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must require
+authentication upon booting into single-user and maintenance modes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-77823"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-77823"
+            >
+              <!-- Result description -->
+              If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;grep -i execstart &#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;rescue.service&#x60; stdout.strip is expected to match &#x2F;\&#x2F;usr\&#x2F;sbin\&#x2F;sulogin&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-77823</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must require
+authentication upon booting into single-user and maintenance modes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system must require authentication upon booting into
+single-user and maintenance modes.
+
+    Check that the operating system requires authentication upon booting into
+single-user mode with the following command:
+
+    # grep -i execstart &#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;rescue.service | grep -i sulogin
+
+    ExecStart&#x3D;-&#x2F;bin&#x2F;sh -c &quot;&#x2F;usr&#x2F;sbin&#x2F;sulogin; &#x2F;usr&#x2F;bin&#x2F;systemctl --fail
+--no-block default&quot;
+
+    If &quot;ExecStart&quot; does not have &quot;&#x2F;usr&#x2F;sbin&#x2F;sulogin&quot; as an option, this is
+a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to require authentication upon booting into
+single-user and maintenance modes.
+
+    Add or modify the &quot;ExecStart&quot; line in
+&quot;&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;rescue.service&quot; to include &quot;&#x2F;usr&#x2F;sbin&#x2F;sulogin&quot;:
+
+    ExecStart&#x3D;-&#x2F;bin&#x2F;sh -c &quot;&#x2F;usr&#x2F;sbin&#x2F;sulogin; &#x2F;usr&#x2F;bin&#x2F;systemctl --fail
+--no-block default&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72243"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72243"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72243</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72243
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using rhosts authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72243"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72243"
+            >
+              <!-- Result description -->
+              Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration IgnoreRhosts is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72243</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using rhosts authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH daemon does not allow authentication using known hosts
+authentication.
+
+    To determine how the SSH daemon&#39;s &quot;IgnoreRhosts&quot; option is set, run the
+following command:
+
+    # grep -i IgnoreRhosts &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    IgnoreRhosts yes
+
+    If the value is returned as &quot;no&quot;, the returned line is commented out, or
+no output is returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the SSH daemon to not allow authentication using known hosts
+authentication.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;, or uncomment the line
+and set the value to &quot;yes&quot;:
+
+    IgnoreRhosts yes</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-79001"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-79001"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-79001</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-79001
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the finit_module syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-79001"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-79001"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;finit_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;finit_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;finit_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;finit_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-79001</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the finit_module syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;finit_module&quot; syscall occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw finit_module &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S finit_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S finit_module -k module-change
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;finit_module&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;finit_module&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S finit_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S finit_module -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71967"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71967"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71967</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71967
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have the
+rsh-server package installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71967"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71967"
+            >
+              <!-- Result description -->
+              It is detrimental for operating systems to provide, or install by
+default, functionality exceeding requirements or mission objectives. These
+unnecessary capabilities or services are often overlooked and therefore may
+remain unsecured. They increase the risk to the platform by providing
+additional attack vectors.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services, provided by default, may not be
+necessary to support essential organizational operations (e.g., key missions,
+functions).
+
+    The rsh-server service provides an unencrypted remote access service that
+does not provide for the confidentiality and integrity of user passwords or the
+remote session and has very weak authentication.
+
+    If a privileged user were to log on using this service, the privileged user
+password could be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package rsh-server is expected not to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71967</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have the
+rsh-server package installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is detrimental for operating systems to provide, or install by
+default, functionality exceeding requirements or mission objectives. These
+unnecessary capabilities or services are often overlooked and therefore may
+remain unsecured. They increase the risk to the platform by providing
+additional attack vectors.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services, provided by default, may not be
+necessary to support essential organizational operations (e.g., key missions,
+functions).
+
+    The rsh-server service provides an unencrypted remote access service that
+does not provide for the confidentiality and integrity of user passwords or the
+remote session and has very weak authentication.
+
+    If a privileged user were to log on using this service, the privileged user
+password could be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check to see if the rsh-server package is installed with the following
+command:
+
+    # yum list installed rsh-server
+
+    If the rsh-server package is installed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to disable non-essential capabilities by
+removing the rsh-server package from the system with the following command:
+
+    # yum remove rsh-server</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72301"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72301"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72301</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72301
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have the
+Trivial File Transfer Protocol (TFTP) server package installed if not required
+for operational support.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72301"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72301"
+            >
+              <!-- Result description -->
+              If TFTP is required for operational support (such as the transmission
+of router configurations) its use must be documented with the Information
+System Security Officer (ISSO), restricted to only authorized personnel, and
+have access control rules established.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package tftp-server is expected not to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72301</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have the
+Trivial File Transfer Protocol (TFTP) server package installed if not required
+for operational support.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If TFTP is required for operational support (such as the transmission
+of router configurations) its use must be documented with the Information
+System Security Officer (ISSO), restricted to only authorized personnel, and
+have access control rules established.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify a TFTP server has not been installed on the system.
+
+    Check to see if a TFTP server has been installed with the following command:
+
+    # yum list installed tftp-server
+    tftp-server-0.49-9.el7.x86_64.rpm
+
+    If TFTP is installed and the requirement for TFTP is not documented with
+the ISSO, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove the TFTP package from the system with the following command:
+
+# yum remove tftp-server</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72147"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72147"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72147</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72147
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must generate audit
+records for all successful account access events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72147"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72147"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;var&#x2F;log&#x2F;lastlog&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;var&#x2F;log&#x2F;lastlog&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72147</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must generate audit
+records for all successful account access events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-2 d, AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when successful account
+access events occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -i &#x2F;var&#x2F;log&#x2F;lastlog &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;var&#x2F;log&#x2F;lastlog -p wa -k logins
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when successful
+account access events occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;var&#x2F;log&#x2F;lastlog -p wa -k logins
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71921"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71921"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71921</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71921
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured to
+use the shadow file to store only encrypted representations of passwords.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71921"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71921"
+            >
+              <!-- Result description -->
+              Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >login.defs ENCRYPT_METHOD is expected to cmp &#x3D;&#x3D; &quot;SHA512&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71921</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured to
+use the shadow file to store only encrypted representations of passwords.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system&#39;s shadow file is configured to store only encrypted
+representations of passwords. The strength of encryption that must be used to
+hash passwords for all accounts is SHA512.
+
+    Check that the system is configured to create SHA512 hashed passwords with
+the following command:
+
+    # grep -i encrypt &#x2F;etc&#x2F;login.defs
+    ENCRYPT_METHOD SHA512
+
+    If the &quot;&#x2F;etc&#x2F;login.defs&quot; configuration file does not exist or allows for
+password hashes other than SHA512 to be used, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to store only SHA512 encrypted
+representations of passwords.
+
+    Add or update the following line in &quot;&#x2F;etc&#x2F;login.defs&quot;:
+
+    ENCRYPT_METHOD SHA512</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72205"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72205"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72205</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72205
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the unlink syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72205"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72205"
+            >
+              <!-- Result description -->
+              If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;unlink&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;unlink&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;unlink&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;unlink&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72205</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the unlink syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unlink&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw unlink &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S unlink -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S unlink -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;unlink&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unlink&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S unlink -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S unlink -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72111"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72111"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72111</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72111
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the setxattr syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72111"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72111"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;setxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;setxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;setxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;setxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72111</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the setxattr syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setxattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw setxattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S setxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S setxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;setxattr&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setxattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S setxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S setxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71961"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71961"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71961</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71961
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Red Hat Enterprise Linux operating systems prior to version 7.2 with a
+Basic Input&#x2F;Output System (BIOS) must require authentication upon booting into
+single-user and maintenance modes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71961"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71961"
+            >
+              <!-- Result description -->
+              If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There must be only one grub2 superuser, and it must have the value root length is expected to cmp &#x3D;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There must be only one grub2 superuser, and it must have the value root first is expected to cmp &#x3D;&#x3D; &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The grub2 superuser password entry must begin with &#39;password_pbkdf2&#39; is expected to include &quot;password_pbkdf2&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The grub2 superuser password entry must begin with &#39;password_pbkdf2&#39; length is expected to be &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The grub2 superuser account password should be encrypted with pbkdf2. is expected to match &#x2F;password_pbkdf2\sroot\sgrub\.pbkdf2&#x2F;i</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71961</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Red Hat Enterprise Linux operating systems prior to version 7.2 with a
+Basic Input&#x2F;Output System (BIOS) must require authentication upon booting into
+single-user and maintenance modes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For systems that use UEFI, this is Not Applicable.
+    For systems that are running RHEL 7.2 or newer, this is Not Applicable.
+
+    Check to see if an encrypted root password is set. On systems that use a
+BIOS, use the following command:
+
+    # grep -i password_pbkdf2 &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+
+    password_pbkdf2 [superusers-account] [password-hash]
+
+    If the root password entry does not begin with &quot;password_pbkdf2&quot;, this is
+a finding.
+
+    If the &quot;superusers-account&quot; is not set to &quot;root&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to encrypt the boot password for root.
+
+    Generate an encrypted grub2 password for root with the following command:
+
+    Note: The hash generated is an example.
+
+    # grub2-mkpasswd-pbkdf2
+
+    Enter Password:
+    Reenter Password:
+    PBKDF2 hash of your password is
+grub.pbkdf2.sha512.10000.F3A7CFAA5A51EED123BE8238C23B25B2A6909AFC9812F0D45
+
+    Edit &quot;&#x2F;etc&#x2F;grub.d&#x2F;40_custom&quot; and add the following lines below the
+comments:
+
+    # vi &#x2F;etc&#x2F;grub.d&#x2F;40_custom
+
+    set superusers&#x3D;&quot;root&quot;
+
+    password_pbkdf2 root {hash from grub2-mkpasswd-pbkdf2 command}
+
+    Generate a new &quot;grub.conf&quot; file with the new password with the following
+commands:
+
+    # grub2-mkconfig --output&#x3D;&#x2F;tmp&#x2F;grub2.cfg
+    # mv &#x2F;tmp&#x2F;grub2.cfg &#x2F;boot&#x2F;grub2&#x2F;grub.cfg</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72295"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72295"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72295</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72295
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Network interfaces configured on the Red Hat Enterprise Linux
+operating system must not be in promiscuous mode.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72295"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72295"
+            >
+              <!-- Result description -->
+              Network interfaces in promiscuous mode allow for the capture of all
+network traffic visible to the system. If unauthorized individuals can access
+these applications, it may allow then to collect information such as logon IDs,
+passwords, and key exchanges between systems.
+
+    If the system is being used to perform a network troubleshooting function,
+the use of these tools must be documented with the Information System Security
+Officer (ISSO) and restricted to only authorized personnel.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;ip link | grep -i promisc&#x60; stdout.strip is expected to match &#x2F;^$&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72295</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network interfaces configured on the Red Hat Enterprise Linux
+operating system must not be in promiscuous mode.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network interfaces in promiscuous mode allow for the capture of all
+network traffic visible to the system. If unauthorized individuals can access
+these applications, it may allow then to collect information such as logon IDs,
+passwords, and key exchanges between systems.
+
+    If the system is being used to perform a network troubleshooting function,
+the use of these tools must be documented with the Information System Security
+Officer (ISSO) and restricted to only authorized personnel.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify network interfaces are not in promiscuous mode unless approved by
+the ISSO and documented.
+
+    Check for the status with the following command:
+
+    # ip link | grep -i promisc
+
+    If network interfaces are found on the system in promiscuous mode and their
+use has not been approved by the ISSO and documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure network interfaces to turn off promiscuous mode unless approved
+by the ISSO and documented.
+
+    Set the promiscuous mode of an interface to off with the following command:
+
+    #ip link set dev &lt;devicename&gt; multicast off promisc off</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72043"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72043"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72043</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72043
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent files with
+the setuid and setgid bit set from being executed on file systems that are used
+with removable media.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72043"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72043"
+            >
+              <!-- Result description -->
+              The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File system &quot;xfs&quot; does not correspond to removable media. is expected to eq true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72043</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent files with
+the setuid and setgid bit set from being executed on file systems that are used
+with removable media.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify file systems that are used for removable media are mounted with the
+&quot;nosuid&quot; option.
+
+    Check the file systems that are mounted at boot time with the following
+command:
+
+    # more &#x2F;etc&#x2F;fstab
+
+    UUID&#x3D;2bc871e4-e2a3-4f29-9ece-3be60c835222 &#x2F;mnt&#x2F;usbflash vfat
+noauto,owner,ro,nosuid 0 0
+
+    If a file system found in &quot;&#x2F;etc&#x2F;fstab&quot; refers to removable media and it
+does not have the &quot;nosuid&quot; option set, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the &quot;&#x2F;etc&#x2F;fstab&quot; to use the &quot;nosuid&quot; option on
+file systems that are associated with removable media.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72081"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72081"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72081</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000139
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72081
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must shut down upon
+audit processing failure, unless availability is an overriding concern. If
+availability is a concern, the system must alert the designated staff (System
+Administrator [SA] and Information System Security Officer [ISSO] at a minimum)
+in the event of an audit processing failure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000139
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72081"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72081"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+is at risk of failing to process audit logs as required. Without this
+notification, the security personnel may be unaware of an impending failure of
+the audit capability, and system operation may be adversely affected.
+
+    Audit processing failures include software&#x2F;hardware errors, failures in the
+audit capturing mechanisms, and audit storage capacity being reached or
+exceeded.
+
+    This requirement applies to each audit data storage repository (i.e.,
+distinct information system component where audit records are stored), the
+centralized audit storage capacity of organizations (i.e., all audit data
+storage repositories combined), or both.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >2 is expected to match &#x2F;^(1|2)$&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72081</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must shut down upon
+audit processing failure, unless availability is an overriding concern. If
+availability is a concern, the system must alert the designated staff (System
+Administrator [SA] and Information System Security Officer [ISSO] at a minimum)
+in the event of an audit processing failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+is at risk of failing to process audit logs as required. Without this
+notification, the security personnel may be unaware of an impending failure of
+the audit capability, and system operation may be adversely affected.
+
+    Audit processing failures include software&#x2F;hardware errors, failures in the
+audit capturing mechanisms, and audit storage capacity being reached or
+exceeded.
+
+    This requirement applies to each audit data storage repository (i.e.,
+distinct information system component where audit records are stored), the
+centralized audit storage capacity of organizations (i.e., all audit data
+storage repositories combined), or both.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Confirm the audit configuration regarding how auditing processing failures
+are handled.
+
+    Check to see what level &quot;auditctl&quot; is set to with following command:
+
+    # auditctl -s | grep -i &quot;fail&quot;
+
+    failure 2
+
+    If the value of &quot;failure&quot; is set to &quot;2&quot;, the system is configured to
+panic (shut down) in the event of an auditing failure.
+
+    If the value of &quot;failure&quot; is set to &quot;1&quot;, the system is configured to
+only send information to the kernel log regarding the failure.
+
+    If the &quot;failure&quot; setting is not set, this is a CAT I finding.
+
+    If the &quot;failure&quot; setting is set to any value other than &quot;1&quot; or &quot;2&quot;,
+this is a CAT II finding.
+
+    If the &quot;failure&quot; setting is set to &quot;1&quot; but the availability concern is
+not documented or there is no monitoring of the kernel log, this is a CAT III
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to shut down in the event of an audit
+processing failure.
+
+    Add or correct the option to shut down the operating system with the
+following command:
+
+    # auditctl -f 2
+
+    Edit the &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot; file and add the following line:
+
+    -f 2
+
+    If availability has been determined to be more important, and this decision
+is documented with the ISSO, configure the operating system to notify system
+administration staff and ISSO staff in the event of an audit processing failure
+with the following command:
+
+    # auditctl -f 1
+
+    Edit the &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot; file and add the following line:
+
+    -f 1
+
+    Kernel log monitoring must also be configured to properly alert designated
+staff.
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72277"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72277"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72277</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72277
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not contain .shosts
+files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72277"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72277"
+            >
+              <!-- Result description -->
+              The .shosts files are used to configure host-based authentication for
+individual users or the system via SSH. Host-based authentication is not
+sufficient for preventing unauthorized access to the system, as it does not
+require interactive identification and authentication of a connection request,
+or for the use of two-factor authentication.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -name &#39;*.shosts&#39;&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72277</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not contain .shosts
+files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The .shosts files are used to configure host-based authentication for
+individual users or the system via SSH. Host-based authentication is not
+sufficient for preventing unauthorized access to the system, as it does not
+require interactive identification and authentication of a connection request,
+or for the use of two-factor authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify there are no &quot;.shosts&quot; files on the system.
+
+    Check the system for the existence of these files with the following
+command:
+
+    # find &#x2F; -name &#39;*.shosts&#39;
+
+    If any &quot;.shosts&quot; files are found on the system, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove any found &quot;.shosts&quot; files from the system.
+
+# rm &#x2F;[path]&#x2F;[to]&#x2F;[file]&#x2F;.shosts</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72185"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72185"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72185</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72185
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the pam_timestamp_check command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72185"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72185"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;sbin&#x2F;pam_timestamp_check&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;sbin&#x2F;pam_timestamp_check&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72185</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the pam_timestamp_check command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;pam_timestamp_check&quot; command
+occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw &quot;&#x2F;usr&#x2F;sbin&#x2F;pam_timestamp_check&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;pam_timestamp_check -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-pam
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;pam_timestamp_check&quot; command
+occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;pam_timestamp_check -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-pam
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72055"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72055"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72055</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72055
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the cron.allow file, if it exists, is group-owned by root.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72055"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72055"
+            >
+              <!-- Result description -->
+              If the group owner of the &quot;cron.allow&quot; file is not set to root,
+sensitive information could be viewed or edited by unauthorized users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;etc&#x2F;cron.allow group is expected to eq &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72055</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the cron.allow file, if it exists, is group-owned by root.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the group owner of the &quot;cron.allow&quot; file is not set to root,
+sensitive information could be viewed or edited by unauthorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that the &quot;cron.allow&quot; file is group-owned by root.
+
+    Check the group owner of the &quot;cron.allow&quot; file with the following command:
+
+    # ls -al &#x2F;etc&#x2F;cron.allow
+    -rw------- 1 root root 6 Mar  5  2011 &#x2F;etc&#x2F;cron.allow
+
+    If the &quot;cron.allow&quot; file exists and has a group owner other than root,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the group owner on the &quot;&#x2F;etc&#x2F;cron.allow&quot; file to root with the
+following command:
+
+    # chgrp root &#x2F;etc&#x2F;cron.allow</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71997"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71997"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71997</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71997
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be a vendor
+supported release.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71997"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71997"
+            >
+              <!-- Result description -->
+              An operating system release is considered &quot;supported&quot; if the vendor
+continues to provide security patches for the product. With an unsupported
+release, it will not be possible to resolve security issues discovered in the
+system software.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;etc&#x2F;redhat-release content is expected to match &#x2F;Release (6.7*|7.[2-9].*)&#x2F;i</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71997</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be a vendor
+supported release.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An operating system release is considered &quot;supported&quot; if the vendor
+continues to provide security patches for the product. With an unsupported
+release, it will not be possible to resolve security issues discovered in the
+system software.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the version of the operating system is vendor supported.
+
+Check the version of the operating system with the following command:
+
+# cat &#x2F;etc&#x2F;redhat-release
+
+Red Hat Enterprise Linux Server release 7.4 (Maipo)
+
+Current End of Life for RHEL 7.1 is 31 March 2017.
+
+Current End of Life for RHEL 7.2 is 30 November 2017.
+
+Current End of Life for RHEL 7.3 is 30 November 2018.
+
+Current End of Life for RHEL 7.4 is 31 August 2019.
+
+Current End of Life for RHEL 7.5 is 30 April 2020.
+
+Current End of Life for RHEL 7.6 is 31 October 2020.
+
+Current End of Life for RHEL 7.7 is 30 August 2021.
+
+If the release is not supported by the vendor, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Upgrade to a supported version of the operating system.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71907"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71907"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71907</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71907
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are assigned, the new password
+must contain at least one numeric character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71907"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71907"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf dcredit.to_i is expected to cmp &lt; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71907</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are assigned, the new password
+must contain at least one numeric character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: The value to require a number of numeric characters to be set is
+expressed as a negative number in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;.
+
+    Check the value for &quot;dcredit&quot; in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with
+the following command:
+
+    # grep dcredit &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    dcredit &#x3D; -1
+
+    If the value of &quot;dcredit&quot; is not set to a negative value, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to enforce password complexity by requiring
+that at least one numeric character be used by setting the &quot;dcredit&quot; option.
+
+    Add the following line to &#x2F;etc&#x2F;security&#x2F;pwquality.conf (or modify the line
+to have the required value):
+
+    dcredit &#x3D; -1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71991"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71991"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71991</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002696
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71991
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must enable the SELinux
+targeted policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002696
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71991"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71991"
+            >
+              <!-- Result description -->
+              Without verification of the security functions, security functions may
+not operate correctly and the failure may go unnoticed. Security function is
+defined as the hardware, software, and&#x2F;or firmware of the information system
+responsible for enforcing the system security policy and supporting the
+isolation of code and data on which the protection is based. Security
+functionality includes, but is not limited to, establishing system accounts,
+configuring access authorizations (i.e., permissions, privileges), setting
+events to be audited, and setting intrusion detection parameters.
+
+    This requirement applies to operating systems performing security function
+verification&#x2F;testing and&#x2F;or systems and environments that require this
+functionality.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;sestatus&#x60; stdout is expected to match &#x2F;^Loaded\spolicy\sname:\s+targeted\n?$&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71991</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must enable the SELinux
+targeted policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without verification of the security functions, security functions may
+not operate correctly and the failure may go unnoticed. Security function is
+defined as the hardware, software, and&#x2F;or firmware of the information system
+responsible for enforcing the system security policy and supporting the
+isolation of code and data on which the protection is based. Security
+functionality includes, but is not limited to, establishing system accounts,
+configuring access authorizations (i.e., permissions, privileges), setting
+events to be audited, and setting intrusion detection parameters.
+
+    This requirement applies to operating systems performing security function
+verification&#x2F;testing and&#x2F;or systems and environments that require this
+functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), SI-6 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If an HBSS or HIPS is active on the system, this is Not Applicable.
+
+    Verify the operating system verifies correct operation of all security
+functions.
+
+    Check if &quot;SELinux&quot; is active and is enforcing the targeted policy with
+the following command:
+
+    # sestatus
+
+    SELinux status: enabled
+
+    SELinuxfs mount: &#x2F;selinux
+
+    SELinux root directory: &#x2F;etc&#x2F;selinux
+
+    Loaded policy name: targeted
+
+    Current mode: enforcing
+
+    Mode from config file: enforcing
+
+    Policy MLS status: enabled
+
+    Policy deny_unknown status: allowed
+
+    Max kernel policy version: 28
+
+    If the &quot;Loaded policy name&quot; is not set to &quot;targeted&quot;, this is a finding.
+
+    Verify that the &#x2F;etc&#x2F;selinux&#x2F;config file is configured to the
+&quot;SELINUXTYPE&quot; to &quot;targeted&quot;:
+
+    # grep -i &quot;selinuxtype&quot; &#x2F;etc&#x2F;selinux&#x2F;config | grep -v &#39;^#&#39;
+
+    SELINUXTYPE &#x3D; targeted
+
+    If no results are returned or &quot;SELINUXTYPE&quot; is not set to &quot;targeted&quot;,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to verify correct operation of all security
+functions.
+
+    Set the &quot;SELinuxtype&quot; to the &quot;targeted&quot; policy by modifying the
+&quot;&#x2F;etc&#x2F;selinux&#x2F;config&quot; file to have the following line:
+
+    SELINUXTYPE&#x3D;targeted
+
+    A reboot is required for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72045"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72045"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72045</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72045
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent files with
+the setuid and setgid bit set from being executed on file systems that are
+being imported via Network File System (NFS).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72045"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72045"
+            >
+              <!-- Result description -->
+              The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No NFS file systems were found. is expected to eq true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72045</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent files with
+the setuid and setgid bit set from being executed on file systems that are
+being imported via Network File System (NFS).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify file systems that are being NFS imported are configured with the
+&quot;nosuid&quot; option.
+
+    Find the file system(s) that contain the directories being exported with
+the following command:
+
+    # more &#x2F;etc&#x2F;fstab | grep nfs
+
+    UUID&#x3D;e06097bb-cfcd-437b-9e4d-a691f5662a7d &#x2F;store nfs rw,nosuid 0 0
+
+    If a file system found in &quot;&#x2F;etc&#x2F;fstab&quot; refers to NFS and it does not have
+the &quot;nosuid&quot; option set, this is a finding.
+
+    Verify the NFS is mounted with the &quot;nosuid&quot; option:
+
+    # mount | grep nfs | grep nosuid
+    If no results are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the &quot;&#x2F;etc&#x2F;fstab&quot; to use the &quot;nosuid&quot; option on
+file systems that are being imported via NFS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72251"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72251"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72251</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000197
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72251
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon is configured to only use the SSHv2 protocol.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000197
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72251"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72251"
+            >
+              <!-- Result description -->
+              SSHv1 is an insecure implementation of the SSH protocol and has many
+well-known vulnerability exploits. Exploits of the SSH daemon could provide
+immediate root access to the system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The release is 7.8</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72251</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon is configured to only use the SSHv2 protocol.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSHv1 is an insecure implementation of the SSH protocol and has many
+well-known vulnerability exploits. Exploits of the SSH daemon could provide
+immediate root access to the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (c), CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the version of the operating system with the following command:
+
+    # cat &#x2F;etc&#x2F;redhat-release
+
+    If the release is 7.4 or newer this requirement is Not Applicable.
+
+    Verify the SSH daemon is configured to only use the SSHv2 protocol.
+
+    Check that the SSH daemon is configured to only use the SSHv2 protocol with
+the following command:
+
+    # grep -i protocol &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    Protocol 2
+    #Protocol 1,2
+
+    If any protocol line other than &quot;Protocol 2&quot; is uncommented, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove all Protocol lines that reference version &quot;1&quot; in
+&quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this file may be named differently or be in a
+different location if using a version of SSH that is provided by a third-party
+vendor). The &quot;Protocol&quot; line must be as follows:
+
+    Protocol 2
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71945"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71945"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71945</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71945
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must lock the associated
+account after three unsuccessful root logon attempts are made within a
+15-minute period.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71945"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71945"
+            >
+              <!-- Result description -->
+              By limiting the number of failed logon attempts, the risk of
+unauthorized system access via user password guessing, otherwise known as brute
+forcing, is reduced. Limits are imposed by locking the account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include [&quot;auth required pam_faillock.so even_deny_root&quot;, &quot;auth sufficient pam_unix.so try_first_pass&quot;, &quot;auth [default&#x3D;die] pam_faillock.so even_deny_root&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;account required pam_unix.so\naccount sufficient pam_localuser.so\naccount sufficient pam_succeed_if...eed_if.so service in crond quiet use_uid\nsession required pam_unix.so\nsession optional pam_sss.so&quot; to include [&quot;auth required pam_faillock.so even_deny_root&quot;, &quot;auth sufficient pam_unix.so try_first_pass&quot;, &quot;auth [default&#x3D;die] pam_faillock.so even_deny_root&quot;]
+Diff:
+@@ -1,4 +1,28 @@
+-auth required pam_faillock.so even_deny_root
+-auth sufficient pam_unix.so try_first_pass
+-auth [default&#x3D;die] pam_faillock.so even_deny_root
++account required pam_unix.so
++account sufficient pam_localuser.so
++account sufficient pam_succeed_if.so uid &lt; 1000 quiet
++account [default&#x3D;bad success&#x3D;ok user_unknown&#x3D;ignore] pam_sss.so
++account required pam_permit.so
++auth required pam_env.so
++auth [default&#x3D;1 ignore&#x3D;ignore success&#x3D;ok] pam_succeed_if.so uid &gt;&#x3D; 1000 quiet
++auth [default&#x3D;4 ignore&#x3D;ignore success&#x3D;ok] pam_localuser.so
++auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth [success&#x3D;1 default&#x3D;bad] pam_unix.so try_first_pass
++auth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth sufficient pam_faillock.so authsucc deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth requisite pam_succeed_if.so uid &gt;&#x3D; 1000 quiet_success
++auth sufficient pam_sss.so forward_pass
++auth required pam_deny.so
++password requisite pam_pwquality.so try_first_pass local_users_only retry&#x3D;3 authtok_type&#x3D;
++password requisite pam_pwhistory.so use_authtok remember&#x3D;5 retry&#x3D;3
++password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok
++password sufficient pam_sss.so use_authtok
++password required pam_deny.so
++session optional pam_keyinit.so revoke
++session required pam_limits.so
++-session optional pam_systemd.so
++session optional pam_oddjob_mkhomedir.so umask&#x3D;0077
++session [success&#x3D;1 default&#x3D;ignore] pam_succeed_if.so service in crond quiet use_uid
++session required pam_unix.so
++session optional pam_sss.so
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include auth .* pam_faillock.so (preauth|authfail), all with args even_deny_root</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900\nauth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900&quot; to include auth .* pam_faillock.so (preauth|authfail), all with args even_deny_root
+Diff:
+@@ -1,2 +1,3 @@
+-auth .* pam_faillock.so (preauth|authfail)
++auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include [&quot;auth required pam_faillock.so even_deny_root&quot;, &quot;auth sufficient pam_unix.so try_first_pass&quot;, &quot;auth [default&#x3D;die] pam_faillock.so even_deny_root&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;account required pam_unix.so\naccount sufficient pam_localuser.so\naccount sufficient pam_succeed_if...eed_if.so service in crond quiet use_uid\nsession required pam_unix.so\nsession optional pam_sss.so&quot; to include [&quot;auth required pam_faillock.so even_deny_root&quot;, &quot;auth sufficient pam_unix.so try_first_pass&quot;, &quot;auth [default&#x3D;die] pam_faillock.so even_deny_root&quot;]
+Diff:
+@@ -1,4 +1,28 @@
+-auth required pam_faillock.so even_deny_root
+-auth sufficient pam_unix.so try_first_pass
+-auth [default&#x3D;die] pam_faillock.so even_deny_root
++account required pam_unix.so
++account sufficient pam_localuser.so
++account sufficient pam_succeed_if.so uid &lt; 1000 quiet
++account [default&#x3D;bad success&#x3D;ok user_unknown&#x3D;ignore] pam_sss.so
++account required pam_permit.so
++auth required pam_env.so
++auth [default&#x3D;1 ignore&#x3D;ignore success&#x3D;ok] pam_succeed_if.so uid &gt;&#x3D; 1000 quiet
++auth [default&#x3D;4 ignore&#x3D;ignore success&#x3D;ok] pam_localuser.so
++auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth [success&#x3D;1 default&#x3D;bad] pam_unix.so try_first_pass
++auth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth sufficient pam_faillock.so authsucc deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth requisite pam_succeed_if.so uid &gt;&#x3D; 1000 quiet_success
++auth sufficient pam_sss.so forward_pass
++auth required pam_deny.so
++password requisite pam_pwquality.so try_first_pass local_users_only retry&#x3D;3 authtok_type&#x3D;
++password requisite pam_pwhistory.so use_authtok remember&#x3D;5 retry&#x3D;3
++password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok
++password sufficient pam_sss.so use_authtok
++password required pam_deny.so
++session optional pam_keyinit.so revoke
++session required pam_limits.so
++-session optional pam_systemd.so
++session optional pam_oddjob_mkhomedir.so umask&#x3D;0077
++session [success&#x3D;1 default&#x3D;ignore] pam_succeed_if.so service in crond quiet use_uid
++session required pam_unix.so
++session optional pam_sss.so
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include auth .* pam_faillock.so (preauth|authfail), all with args even_deny_root</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900\nauth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900&quot; to include auth .* pam_faillock.so (preauth|authfail), all with args even_deny_root
+Diff:
+@@ -1,2 +1,3 @@
+-auth .* pam_faillock.so (preauth|authfail)
++auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71945</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must lock the associated
+account after three unsuccessful root logon attempts are made within a
+15-minute period.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By limiting the number of failed logon attempts, the risk of
+unauthorized system access via user password guessing, otherwise known as brute
+forcing, is reduced. Limits are imposed by locking the account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system automatically locks the root account until it
+is released by an administrator when three unsuccessful logon attempts in 15
+minutes are made.
+
+    # grep pam_faillock.so &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    If the &quot;even_deny_root&quot; setting is not defined on both lines with the
+&quot;pam_faillock.so&quot; module, is commented out, or is missing from a line, this
+is a finding.
+
+    # grep pam_faillock.so &#x2F;etc&#x2F;pam.d&#x2F;system-auth
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    If the &quot;even_deny_root&quot; setting is not defined on both lines with the
+&quot;pam_faillock.so&quot; module, is commented out, or is missing from a line, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to lock automatically the root account until
+the locked account is released by an administrator when three unsuccessful
+logon attempts in 15 minutes are made.
+
+    Modify the first three lines of the auth section and the first line of the
+account section of the &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; files to match the following lines:
+
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth sufficient pam_unix.so try_first_pass
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71861"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71861"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71861</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71861
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must display the
+approved Standard Mandatory DoD Notice and Consent Banner before granting local
+or remote access to the system via a graphical user logon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71861"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71861"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have GNOME installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71861</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must display the
+approved Standard Mandatory DoD Notice and Consent Banner before granting local
+or remote access to the system via a graphical user logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system displays the approved Standard Mandatory DoD
+Notice and Consent Banner before granting access to the operating system via a
+graphical user logon.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check that the operating system displays the exact approved Standard
+Mandatory DoD Notice and Consent Banner text with the command:
+
+    # grep banner-message-text &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    banner-message-text&#x3D;
+    &#39;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.    -At any time, the USG may inspect and seize data stored on this IS.    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details. &#39;
+
+    Note: The &quot;     &quot; characters are for formatting only. They will not be displayed on the
+GUI.
+
+    If the banner does not match the approved Standard Mandatory DoD Notice and
+Consent Banner, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to display the approved Standard Mandatory
+DoD Notice and Consent Banner before granting access to the system.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Create a database to contain the system-wide graphical user logon settings
+(if it does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;01-banner-message
+
+    Add the following line to the [org&#x2F;gnome&#x2F;login-screen] section of the
+&quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;01-banner-message&quot;:
+
+    [org&#x2F;gnome&#x2F;login-screen]
+
+    banner-message-enable&#x3D;true
+
+    banner-message-text&#x3D;&#39;You are accessing a U.S. Government (USG) Information
+System (IS) that is provided for USG-authorized use only.    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.    -At any time, the USG may inspect and seize data stored on this IS.    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details. &#39;
+
+    Note: The &quot;     &quot; characters are for formatting only. They will not be displayed on the
+GUI.
+
+    Run the following command to update the database:
+    # dconf update</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72217"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72217"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72217</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72217
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must limit the number of
+concurrent sessions to 10 for all accounts and&#x2F;or account types.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72217"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72217"
+            >
+              <!-- Result description -->
+              Operating system management includes the ability to control the number
+of users and user sessions that utilize an operating system. Limiting the
+number of allowed users and sessions per user is helpful in reducing the risks
+related to DoS attacks.
+
+    This requirement addresses concurrent sessions for information system
+accounts and does not address concurrent sessions by single users via multiple
+system accounts. The maximum number of concurrent sessions should be defined
+based on mission needs and the operational environment for each system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Files configuring maxlogins less than or equal to 10 is expected to be positive</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Files configuring maxlogins greater than 10 is expected to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72217</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must limit the number of
+concurrent sessions to 10 for all accounts and&#x2F;or account types.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Operating system management includes the ability to control the number
+of users and user sessions that utilize an operating system. Limiting the
+number of allowed users and sessions per user is helpful in reducing the risks
+related to DoS attacks.
+
+    This requirement addresses concurrent sessions for information system
+accounts and does not address concurrent sessions by single users via multiple
+system accounts. The maximum number of concurrent sessions should be defined
+based on mission needs and the operational environment for each system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system limits the number of concurrent sessions to
+&quot;10&quot; for all accounts and&#x2F;or account types by issuing the following command:
+
+    # grep &quot;maxlogins&quot; &#x2F;etc&#x2F;security&#x2F;limits.conf &#x2F;etc&#x2F;security&#x2F;limits.d&#x2F;*.conf
+
+    * hard maxlogins 10
+
+    This can be set as a global domain (with the * wildcard) but may be set
+differently for multiple domains.
+
+    If the &quot;maxlogins&quot; item is missing, commented out, or the value is not
+set to &quot;10&quot; or less for all domains that have the &quot;maxlogins&quot; item
+assigned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to limit the number of concurrent sessions
+to &quot;10&quot; for all accounts and&#x2F;or account types.
+
+    Add the following line to the top of the &#x2F;etc&#x2F;security&#x2F;limits.conf or in a
+&quot;.conf&quot; file defined in &#x2F;etc&#x2F;security&#x2F;limits.d&#x2F; :
+
+    * hard maxlogins 10</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72047"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72047"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72047</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72047
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all world-writable directories are group-owned by root, sys, bin, or an
+application group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72047"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72047"
+            >
+              <!-- Result description -->
+              If a world-writable directory has the sticky bit set and is not
+group-owned by a privileged Group Identifier (GID), unauthorized users may be
+able to modify files created by others.
+
+    The only authorized public directories are those temporary directories
+supplied with the system or those designed to be temporary file repositories.
+The setting is normally reserved for directories used by the system and by
+users for temporary file storage, (e.g., &#x2F;tmp), and for directories requiring
+global read&#x2F;write access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;var&#x2F;tmp group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;var&#x2F;tmp&#x2F;cloud-init group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;var&#x2F;tmp&#x2F;systemd-private-d24354a1797e4846b9e800d6f612ef8f-chronyd.service-U8pkhb&#x2F;tmp group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;tmp group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;tmp&#x2F;.XIM-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;tmp&#x2F;.Test-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;tmp&#x2F;.ICE-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;tmp&#x2F;.font-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;tmp&#x2F;.X11-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;tmp&#x2F;systemd-private-d24354a1797e4846b9e800d6f612ef8f-chronyd.service-Te8mBP&#x2F;tmp group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72047</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all world-writable directories are group-owned by root, sys, bin, or an
+application group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a world-writable directory has the sticky bit set and is not
+group-owned by a privileged Group Identifier (GID), unauthorized users may be
+able to modify files created by others.
+
+    The only authorized public directories are those temporary directories
+supplied with the system or those designed to be temporary file repositories.
+The setting is normally reserved for directories used by the system and by
+users for temporary file storage, (e.g., &#x2F;tmp), and for directories requiring
+global read&#x2F;write access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all world-writable directories are group-owned by root, sys, bin, or
+an application group.
+
+    Check the system for world-writable directories with the following command:
+
+    Note: The value after -fstype must be replaced with the filesystem type.
+XFS is used as an example.
+
+    # find &#x2F; -xdev -perm -002 -type d -fstype xfs -exec ls -lLd {} \;
+    drwxrwxrwt 2 root root 40 Aug 26 13:07 &#x2F;dev&#x2F;mqueue
+    drwxrwxrwt 2 root root 220 Aug 26 13:23 &#x2F;dev&#x2F;shm
+    drwxrwxrwt 14 root root 4096 Aug 26 13:29 &#x2F;tmp
+
+    If any world-writable directories are not owned by root, sys, bin, or an
+application group associated with the directory, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the group of the world-writable directories to root with the
+following command:
+
+    # chgrp root &lt;directory&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72173"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72173"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72173</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72173
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the umount command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72173"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72173"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged mount commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;bin&#x2F;umount&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;bin&#x2F;umount&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72173</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the umount command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged mount commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;umount&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following series of commands to check the file system rules in
+&quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &quot;&#x2F;usr&#x2F;bin&#x2F;umount&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;umount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;umount&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;umount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72149"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72149"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72149</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72149
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the passwd command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72149"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72149"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;passwd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;passwd&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72149</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the passwd command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;passwd&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;passwd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;passwd -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-passwd
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;passwd&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;passwd -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71927"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71927"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71927</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000198
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71927
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that passwords are restricted to a 24 hours&#x2F;1 day minimum lifetime.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000198
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71927"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71927"
+            >
+              <!-- Result description -->
+              Enforcing a minimum password lifetime helps to prevent repeated
+password changes to defeat the password reuse or history enforcement
+requirement. If users are allowed to immediately and continually change their
+password, the password could be repeatedly changed in a short period of time to
+defeat the organization&#39;s policy regarding password reuse.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;shadow with user &#x3D;&#x3D; &quot;ec2-user&quot; min_days.first.to_i is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71927</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that passwords are restricted to a 24 hours&#x2F;1 day minimum lifetime.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enforcing a minimum password lifetime helps to prevent repeated
+password changes to defeat the password reuse or history enforcement
+requirement. If users are allowed to immediately and continually change their
+password, the password could be repeatedly changed in a short period of time to
+defeat the organization&#39;s policy regarding password reuse.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check whether the minimum time period between password changes for each
+user account is one day or greater.
+
+    # awk -F: &#39;$4 &lt; 1 {print $1 &quot; &quot; $4}&#39; &#x2F;etc&#x2F;shadow
+
+    If any results are returned that are not associated with a system account,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure non-compliant accounts to enforce a 24 hours&#x2F;1 day minimum
+password lifetime:
+
+    # chage -m 1 [user]</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72105"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72105"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72105</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72105
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the chmod syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72105"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72105"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;chmod&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;chmod&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;chmod&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;chmod&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72105</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the chmod syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chmod&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following command:
+
+    # grep -iw chmod &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S chmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S chmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;chmod&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chmod&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S chmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S chmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72255"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72255"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72255</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72255
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH public host key files have mode 0644 or less permissive.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72255"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72255"
+            >
+              <!-- Result description -->
+              If a public host key file is modified by an unauthorized user, the SSH
+service may be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No files have a more permissive mode. is expected to eq true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72255</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH public host key files have mode 0644 or less permissive.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a public host key file is modified by an unauthorized user, the SSH
+service may be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH public host key files have mode &quot;0644&quot; or less permissive.
+
+    Note: SSH public key files may be found in other directories on the system
+depending on the installation.
+
+    The following command will find all SSH public key files on the system:
+
+    # find &#x2F;etc&#x2F;ssh -name &#39;*.pub&#39; -exec ls -lL {} \;
+
+    -rw-r--r-- 1 root root 618 Nov 28 06:43 ssh_host_dsa_key.pub
+    -rw-r--r-- 1 root root 347 Nov 28 06:43 ssh_host_key.pub
+    -rw-r--r-- 1 root root 238 Nov 28 06:43 ssh_host_rsa_key.pub
+
+    If any file has a mode more permissive than &quot;0644&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: SSH public key files may be found in other directories on the system
+depending on the installation.
+
+    Change the mode of public host key files under &quot;&#x2F;etc&#x2F;ssh&quot; to &quot;0644&quot;
+with the following command:
+
+    # chmod 0644 &#x2F;etc&#x2F;ssh&#x2F;*.key.pub</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72087"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72087"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72087</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72087
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the audit system takes appropriate action when the audit storage volume is
+full.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72087"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72087"
+            >
+              <!-- Result description -->
+              Taking appropriate action in case of a filled audit storage volume
+will minimize the possibility of losing audit records.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72087</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the audit system takes appropriate action when the audit storage volume is
+full.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Taking appropriate action in case of a filled audit storage volume
+will minimize the possibility of losing audit records.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the action the operating system takes if the disk the audit records
+are written to becomes full.
+
+    To determine the action that takes place if the disk is full on the remote
+server, use the following command:
+
+    # grep -i disk_full_action &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+    disk_full_action &#x3D; single
+
+    If the value of the &quot;disk_full_action&quot; option is not &quot;syslog&quot;,
+&quot;single&quot;, or &quot;halt&quot;, or the line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the action the operating system takes if the disk the audit
+records are written to becomes full.
+
+    Uncomment or edit the &quot;disk_full_action&quot; option in
+&quot;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&quot; and set it to &quot;syslog&quot;, &quot;single&quot;, or
+&quot;halt&quot;, such as the following line:
+
+    disk_full_action &#x3D; single</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72259"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72259"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72259</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72259
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not permit Generic Security Service Application
+Program Interface (GSSAPI) authentication unless needed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72259"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72259"
+            >
+              <!-- Result description -->
+              GSSAPI authentication is used to provide additional authentication
+mechanisms to applications. Allowing GSSAPI authentication through SSH exposes
+the system&#39;s GSSAPI to remote hosts, increasing the attack surface of the
+system. GSSAPI authentication must be disabled unless needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration GSSAPIAuthentication is expected to cmp &#x3D;&#x3D; &quot;no&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72259</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not permit Generic Security Service Application
+Program Interface (GSSAPI) authentication unless needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >GSSAPI authentication is used to provide additional authentication
+mechanisms to applications. Allowing GSSAPI authentication through SSH exposes
+the system&#39;s GSSAPI to remote hosts, increasing the attack surface of the
+system. GSSAPI authentication must be disabled unless needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH daemon does not permit GSSAPI authentication unless approved.
+
+    Check that the SSH daemon does not permit GSSAPI authentication with the
+following command:
+
+    # grep -i gssapiauth &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    GSSAPIAuthentication no
+
+    If the &quot;GSSAPIAuthentication&quot; keyword is missing, is set to &quot;yes&quot; and
+is not documented with the Information System Security Officer (ISSO), or the
+returned line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Uncomment the &quot;GSSAPIAuthentication&quot; keyword in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;
+(this file may be named differently or be in a different location if using a
+version of SSH that is provided by a third-party vendor) and set the value to
+&quot;no&quot;:
+
+    GSSAPIAuthentication no
+
+    The SSH service must be restarted for changes to take effect.
+
+    If GSSAPI authentication is required, it must be documented, to include the
+location of the configuration file, with the ISSO.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73163"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73163"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73163</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73163
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the audit system takes appropriate action when there is an error sending
+audit records to a remote system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73163"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73163"
+            >
+              <!-- Result description -->
+              Taking appropriate action when there is an error sending audit records
+to a remote system will minimize the possibility of losing audit records.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73163</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the audit system takes appropriate action when there is an error sending
+audit records to a remote system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Taking appropriate action when there is an error sending audit records
+to a remote system will minimize the possibility of losing audit records.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the action the operating system takes if there is an error sending
+audit records to a remote system.
+
+    Check the action that takes place if there is an error sending audit
+records to a remote system with the following command:
+
+    # grep -i network_failure_action &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+    network_failure_action &#x3D; syslog
+
+    If the value of the &quot;network_failure_action&quot; option is not &quot;syslog&quot;,
+&quot;single&quot;, or &quot;halt&quot;, or the line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the action the operating system takes if there is an error
+sending audit records to a remote system.
+
+    Uncomment the &quot;network_failure_action&quot; option in
+&quot;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&quot; and set it to &quot;syslog&quot;, &quot;single&quot;, or
+&quot;halt&quot;.
+
+    network_failure_action &#x3D; syslog</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72289"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72289"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72289</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72289
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect
+messages from being accepted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72289"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72289"
+            >
+              <!-- Result description -->
+              ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages modify the
+host&#39;s route table and are unauthenticated. An illicit ICMP redirect message
+could result in a man-in-the-middle attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.conf.default.accept_redirects value is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72289</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect
+messages from being accepted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages modify the
+host&#39;s route table and are unauthenticated. An illicit ICMP redirect message
+could result in a man-in-the-middle attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system will not accept IPv4 ICMP redirect messages.
+
+    # grep &#39;net.ipv4.conf.default.accept_redirects&#39; &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot; net.ipv4.conf.default.accept_redirects &quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the value of the
+&quot;accept_redirects&quot; variables with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep &#39;net.ipv4.conf.default.accept_redirects&#39;
+    net.ipv4.conf.default.accept_redirects &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to not accept IPv4 ICMP redirect messages by adding the
+following line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the
+&#x2F;etc&#x2F;sysctl.d&#x2F; directory (or modify the line to have the required value):
+
+    net.ipv4.conf.default.accept_redirects &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72099"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72099"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72099</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72099
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the fchown syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72099"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72099"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchown&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchown&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchown&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchown&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72099</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the fchown syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-2 d, AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchown&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw fchown &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fchown&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71943"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71943"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71943</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(121, 134, 203)" d="M13 14H11V9H13M13 18H11V16H13M1 21H23L12 2L1 21Z"/></svg></span>
+                    <span>Profile Error</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002236
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002237
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71943
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured to
+lock accounts for a minimum of 15 minutes after three unsuccessful logon
+attempts within a 15-minute timeframe.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002236
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002237
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71943"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71943"
+            >
+              <!-- Result description -->
+              By limiting the number of failed logon attempts, the risk of
+unauthorized system access via user password guessing, otherwise known as
+brute-forcing, is reduced. Limits are imposed by locking the account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >error</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines </span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >undefined local variable or method &#x60;required_rules&#39; for #&lt;RSpec::ExampleGroups::PAMConfigEtcPamDPasswordAuth_2::Lines:0x00007fb47b50fc08&gt;
+Did you mean?  require_relative</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with arg deny &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with arg fail_interval &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with args unlock_time&#x3D;(0|never) or include auth [default&#x3D;die]|required pam_faillock.so, all with arg unlock_time &lt;&#x3D; 604800 and include auth [default&#x3D;die]|required pam_faillock.so, all with arg unlock_time &gt;&#x3D; 604800</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >error</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines </span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >undefined local variable or method &#x60;required_rules&#39; for #&lt;RSpec::ExampleGroups::PAMConfigEtcPamDSystemAuth_2::Lines:0x00007fb47b5e4250&gt;
+Did you mean?  require_relative</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with arg deny &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with arg fail_interval &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with args unlock_time&#x3D;(0|never) or include auth [default&#x3D;die]|required pam_faillock.so, all with arg unlock_time &lt;&#x3D; 604800 and include auth [default&#x3D;die]|required pam_faillock.so, all with arg unlock_time &gt;&#x3D; 604800</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71943</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured to
+lock accounts for a minimum of 15 minutes after three unsuccessful logon
+attempts within a 15-minute timeframe.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By limiting the number of failed logon attempts, the risk of
+unauthorized system access via user password guessing, otherwise known as
+brute-forcing, is reduced. Limits are imposed by locking the account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 a, AC-7 b, AC-7 b, AC-7 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check that the system locks an account for a minimum of 15 minutes after
+three unsuccessful logon attempts within a period of 15 minutes with the
+following command:
+
+    # grep pam_faillock.so &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    If the &quot;deny&quot; parameter is set to &quot;0&quot; or a value less than &quot;3&quot; on
+both &quot;auth&quot; lines with the &quot;pam_faillock.so&quot; module, or is missing from
+these lines, this is a finding.
+
+    If the &quot;even_deny_root&quot; parameter is not set on both &quot;auth&quot; lines with
+the &quot;pam_faillock.so&quot; module, or is missing from these lines, this is a
+finding.
+
+    If the &quot;fail_interval&quot; parameter is set to &quot;0&quot; or is set to a value
+less than &quot;900&quot; on both &quot;auth&quot; lines with the &quot;pam_faillock.so&quot; module,
+or is missing from these lines, this is a finding.
+
+    If the &quot;unlock_time&quot; parameter is not set to &quot;0&quot;, &quot;never&quot;, or is set
+to a value less than &quot;900&quot; on both &quot;auth&quot; lines with the
+&quot;pam_faillock.so&quot; module, or is missing from these lines, this is a finding.
+
+    Note: The maximum configurable value for &quot;unlock_time&quot; is &quot;604800&quot;.
+
+    If any line referencing the &quot;pam_faillock.so&quot; module is commented out,
+this is a finding.
+
+    # grep pam_faillock.so &#x2F;etc&#x2F;pam.d&#x2F;system-auth
+
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    If the &quot;deny&quot; parameter is set to &quot;0&quot; or a value less than &quot;3&quot; on
+both &quot;auth&quot; lines with the &quot;pam_faillock.so&quot; module, or is missing from
+these lines, this is a finding.
+
+    If the &quot;even_deny_root&quot; parameter is not set on both &quot;auth&quot; lines with
+the &quot;pam_faillock.so&quot; module, or is missing from these lines, this is a
+finding.
+
+    If the &quot;fail_interval&quot; parameter is set to &quot;0&quot; or is set to a value
+less than &quot;900&quot; on both &quot;auth&quot; lines with the &quot;pam_faillock.so&quot; module,
+or is missing from these lines, this is a finding.
+
+    If the &quot;unlock_time&quot; parameter is not set to &quot;0&quot;, &quot;never&quot;, or is set
+to a value less than &quot;900&quot; on both &quot;auth&quot; lines with the
+&quot;pam_faillock.so&quot; module or is missing from these lines, this is a finding.
+
+    Note: The maximum configurable value for &quot;unlock_time&quot; is &quot;604800&quot;.
+    If any line referencing the &quot;pam_faillock.so&quot; module is commented out,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to lock an account for the maximum period
+when three unsuccessful logon attempts in 15 minutes are made.
+
+    Modify the first three lines of the auth section and the first line of the
+account section of the &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; files to match the following lines:
+
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth sufficient pam_unix.so try_first_pass
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73155"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73155"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73155</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73155
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent a user from
+  overriding the screensaver lock-delay setting for the graphical user interface.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73155"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73155"
+            >
+              <!-- Result description -->
+              A session time-out lock is a temporary action taken when a user stops
+  work and moves away from the immediate physical vicinity of the information
+  system but does not log out because of the temporary nature of the absence.
+  Rather than relying on the user to manually lock their operating system session
+  prior to vacating the vicinity, operating systems need to be able to identify
+  when a user&#39;s session has idled and take action to initiate the session lock.
+
+      The session lock is implemented at the point where session activity can be
+  determined and&#x2F;or controlled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The GNOME desktop is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73155</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent a user from
+  overriding the screensaver lock-delay setting for the graphical user interface.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A session time-out lock is a temporary action taken when a user stops
+  work and moves away from the immediate physical vicinity of the information
+  system but does not log out because of the temporary nature of the absence.
+  Rather than relying on the user to manually lock their operating system session
+  prior to vacating the vicinity, operating systems need to be able to identify
+  when a user&#39;s session has idled and take action to initiate the session lock.
+
+      The session lock is implemented at the point where session activity can be
+  determined and&#x2F;or controlled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system prevents a user from overriding a screensaver
+lock after a 15-minute period of inactivity for graphical user interfaces.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    Determine which profile the system database is using with the following
+command:
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Check for the lock delay setting with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+the path is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database
+other than &quot;local&quot; is being used.
+
+    # grep -i lock-delay &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;*
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;lock-delay
+
+    If the command does not return a result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to prevent a user from overriding a
+screensaver lock after a 15-minute period of inactivity for graphical user
+interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+if the system is using another database in &quot;&#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user&quot;, the
+file should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;session
+
+    Add the setting to lock the screensaver lock delay:
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;lock-delay</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72227"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72227"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72227</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72227
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) authentication communications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72227"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72227"
+            >
+              <!-- Result description -->
+              Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >LDAP not enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72227</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) authentication communications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If LDAP is not being utilized, this requirement is Not Applicable.
+
+    Verify the operating system implements cryptography to protect the
+integrity of remote LDAP authentication sessions.
+
+    To determine if LDAP is being used for authentication, use the following
+command:
+
+    # systemctl status sssd.service
+    sssd.service - System Security Services Daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;sssd.service; enabled; vendor
+preset: disabled)
+    Active: active (running) since Wed 2018-06-27 10:58:11 EST; 1h 50min ago
+
+    If the &quot;sssd.service&quot; is &quot;active&quot;, then LDAP is being used.
+
+    Determine the &quot;id_provider&quot; the LDAP is currently using:
+
+    # grep -i &quot;id_provider&quot; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+
+    id_provider &#x3D; ad
+
+    If &quot;id_provider&quot; is set to &quot;ad&quot;, this is Not Applicable.
+
+    Ensure that LDAP is configured to use TLS by using the following command:
+
+    # grep -i &quot;start_tls&quot; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+    ldap_id_use_start_tls &#x3D; true
+
+    If the &quot;ldap_id_use_start_tls&quot; option is not &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to implement cryptography to protect the
+integrity of LDAP authentication sessions.
+
+    Add or modify the following line in &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot;:
+
+    ldap_id_use_start_tls &#x3D; true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72317"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72317"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72317</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72317
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have
+unauthorized IP tunnels configured.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72317"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72317"
+            >
+              <!-- Result description -->
+              IP tunneling mechanisms can be used to bypass network filtering. If
+tunneling is required, it must be documented with the Information System
+Security Officer (ISSO).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have libreswan installed or the ipsec.service isn&#39;t running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72317</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have
+unauthorized IP tunnels configured.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IP tunneling mechanisms can be used to bypass network filtering. If
+tunneling is required, it must be documented with the Information System
+Security Officer (ISSO).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system does not have unauthorized IP tunnels configured.
+
+    Check to see if &quot;libreswan&quot; is installed with the following command:
+
+    # yum list installed libreswan
+    libreswan.x86-64 3.20-5.el7_4
+
+    If &quot;libreswan&quot; is installed, check to see if the &quot;IPsec&quot; service is
+active with the following command:
+
+    # systemctl status ipsec
+    ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;ipsec.service; disabled)
+    Active: inactive (dead)
+
+    If the &quot;IPsec&quot; service is active, check to see if any tunnels are
+configured in &quot;&#x2F;etc&#x2F;ipsec.conf&quot; and &quot;&#x2F;etc&#x2F;ipsec.d&#x2F;&quot; with the following
+commands:
+
+    # grep -iw conn &#x2F;etc&#x2F;ipsec.conf &#x2F;etc&#x2F;ipsec.d&#x2F;*.conf
+
+    If there are indications that a &quot;conn&quot; parameter is configured for a
+tunnel, ask the System Administrator if the tunnel is documented with the ISSO.
+
+    If &quot;libreswan&quot; is installed, &quot;IPsec&quot; is active, and an undocumented
+tunnel is active, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove all unapproved tunnels from the system, or document them
+with the ISSO.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71937"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71937"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71937</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71937
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have accounts
+configured with blank or null passwords.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71937"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71937"
+            >
+              <!-- Result description -->
+              If an account has an empty password, anyone could log on and run
+commands with the privileges of that account. Accounts with empty passwords
+should never be used in operational environments.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;config-util] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;other] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;passwd] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;chfn] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;chsh] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;login] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;remote] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;runuser] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;runuser-l] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;su] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;su-l] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;systemd-user] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;polkit-1] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;crond] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;rhn_register] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;subscription-manager] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;sshd] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;smtp.postfix] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;smtp] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;vlock] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;sudo] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;sudo-i] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;fingerprint-auth] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;smartcard-auth] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;atd] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;sssd-shadowutils] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;auth [success&#x3D;done ignore&#x3D;ignore default&#x3D;die] pam_unix.so nullok try_first_pass\naccount required pam_unix.so&quot; to include .* .* pam_unix.so, all without args nullok
+Diff:
+@@ -1,2 +1,3 @@
+-.* .* pam_unix.so
++auth [success&#x3D;done ignore&#x3D;ignore default&#x3D;die] pam_unix.so nullok try_first_pass
++account required pam_unix.so
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;screen] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth-local] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth-local] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;postlogin] lines is expected to include .* .* pam_unix.so, all without args nullok</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71937</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have accounts
+configured with blank or null passwords.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If an account has an empty password, anyone could log on and run
+commands with the privileges of that account. Accounts with empty passwords
+should never be used in operational environments.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To verify that null passwords cannot be used, run the following command:
+
+    # grep nullok &#x2F;etc&#x2F;pam.d&#x2F;system-auth &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+
+    If this produces any output, it may be possible to log on with accounts
+with empty passwords.
+
+    If null passwords can be used, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If an account is configured for password authentication but does not have
+an assigned password, it may be possible to log on to the account without
+authenticating.
+
+    Remove any instances of the &quot;nullok&quot; option in &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot;
+and &quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; to prevent logons with empty passwords.
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-78995"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-78995"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-78995</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-78995
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the screensaver lock-enabled setting for the graphical user
+interface.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-78995"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-78995"
+            >
+              <!-- Result description -->
+              A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    The ability to enable&#x2F;disable a session lock is given to the user by
+default. Disabling the user’s ability to disengage the graphical user interface
+session lock provides the assurance that all sessions will lock after the
+specified period of time.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The GNOME desktop is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-78995</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the screensaver lock-enabled setting for the graphical user
+interface.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    The ability to enable&#x2F;disable a session lock is given to the user by
+default. Disabling the user’s ability to disengage the graphical user interface
+session lock provides the assurance that all sessions will lock after the
+specified period of time.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system prevents a user from overriding the screensaver
+lock-enabled setting for the graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    Determine which profile the system database is using with the following
+command:
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Check for the lock-enabled setting with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+the path is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database
+other than &quot;local&quot; is being used.
+
+    # grep -i lock-enabled &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;*
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;lock-enabled
+
+    If the command does not return a result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to prevent a user from overriding a
+screensaver lock after a 15-minute period of inactivity for graphical user
+interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+if the system is using another database in &quot;&#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user&quot;, the
+file should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;session
+
+    Add the setting to lock the screensaver lock-enabled setting:
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;lock-enabled</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72137"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72137"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72137</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72137
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the setsebool command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72137"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72137"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;setsebool&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;setsebool&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72137</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the setsebool command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setsebool&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;sbin&#x2F;setsebool &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;setsebool -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-priv_change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setsebool&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;setsebool -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72009"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72009"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72009</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72009
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories have a valid group owner.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72009"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72009"
+            >
+              <!-- Result description -->
+              Files without a valid group owner may be unintentionally inherited if
+a group is assigned the same Group Identifier (GID) as the GID of the files
+without a valid group owner.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype xfs -nogroup&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype ext3 -nogroup&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype ext2 -nogroup&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype ext4 -nogroup&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype msdos -nogroup&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype vfat -nogroup&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype btrfs -nogroup&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype fuseblk -nogroup&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72009</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories have a valid group owner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Files without a valid group owner may be unintentionally inherited if
+a group is assigned the same Group Identifier (GID) as the GID of the files
+without a valid group owner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all files and directories on the system have a valid group.
+
+    Check the owner of all files and directories with the following command:
+
+    Note: The value after -fstype must be replaced with the filesystem type.
+XFS is used as an example.
+
+    # find &#x2F; -fstype xfs -nogroup
+
+    If any files on the system do not have an assigned group, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Either remove all files and directories from the system that do not have a
+valid group, or assign a valid group to all files and directories on the system
+with the &quot;chgrp&quot; command:
+
+    # chgrp &lt;group&gt; &lt;file&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73157"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73157"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73157</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73157
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the session idle-delay setting for the graphical user interface.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73157"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73157"
+            >
+              <!-- Result description -->
+              A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The GNOME desktop is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73157</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the session idle-delay setting for the graphical user interface.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system prevents a user from overriding session idle
+delay after a 15-minute period of inactivity for graphical user interfaces.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    Determine which profile the system database is using with the following
+command:
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Check for the session idle delay setting with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+the path is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database
+other than &quot;local&quot; is being used.
+
+    # grep -i idle-delay &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;*
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;session&#x2F;idle-delay
+
+    If the command does not return a result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to prevent a user from overriding a session
+lock after a 15-minute period of inactivity for graphical user interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+if the system is using another database in &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user, the file
+should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;session
+
+    Add the setting to lock the session idle delay:
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;session&#x2F;idle-delay</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72097"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72097"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72097</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72097
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the chown syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72097"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72097"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;chown&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;chown&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;chown&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;chown&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72097</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the chown syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-2 d, AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chown&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw chown &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S chown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S chown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;chown&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S chown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S chown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72075"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72075"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72075</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72075
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not allow removable
+media to be used as the boot loader unless approved.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72075"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72075"
+            >
+              <!-- Result description -->
+              Malicious users with removable boot media can gain access to a system
+configured to use removable media as the boot loader. If removable media is
+designed to be used as the boot loader, the requirement must be documented with
+the Information System Security Officer (ISSO).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 path is expected to match &#x2F;^\&#x2F;dev\&#x2F;&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033&quot; to match &#x2F;^\&#x2F;dev\&#x2F;&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;^\&#x2F;dev\&#x2F;&#x2F;
++&quot;UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033&quot;
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 path is expected to match &#x2F;^\&#x2F;dev\&#x2F;&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033&quot; to match &#x2F;^\&#x2F;dev\&#x2F;&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;^\&#x2F;dev\&#x2F;&#x2F;
++&quot;UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033&quot;
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72075</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not allow removable
+media to be used as the boot loader unless approved.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Malicious users with removable boot media can gain access to a system
+configured to use removable media as the boot loader. If removable media is
+designed to be used as the boot loader, the requirement must be documented with
+the Information System Security Officer (ISSO).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system is not configured to use a boot loader on removable media.
+
+    Note: GRUB 2 reads its configuration from the &quot;&#x2F;boot&#x2F;grub2&#x2F;grub.cfg&quot; file
+on traditional BIOS-based machines and from the
+&quot;&#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg&quot; file on UEFI machines.
+
+    Check for the existence of alternate boot loader configuration files with
+the following command:
+
+    # find &#x2F; -name grub.cfg
+    &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+
+    If a &quot;grub.cfg&quot; is found in any subdirectories other than &quot;&#x2F;boot&#x2F;grub2&quot;
+and &quot;&#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&quot;, ask the System Administrator if there is
+documentation signed by the ISSO to approve the use of removable media as a
+boot loader.
+
+    Check that the grub configuration file has the set root command in each
+menu entry with the following commands:
+
+    # grep -c menuentry &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+    1
+    # grep &#39;set root&#39; &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+    set root&#x3D;(hd0,1)
+
+    If the system is using an alternate boot loader on removable media, and
+documentation does not exist approving the alternate configuration, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove alternate methods of booting the system from removable
+media or document the configuration to boot from removable media with the ISSO.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72179"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72179"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72179</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72179
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the ssh-keysign command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72179"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72179"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged ssh commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72179</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the ssh-keysign command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged ssh commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;ssh-keysign&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-ssh
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;ssh-keysign&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-ssh
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72305"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72305"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72305</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72305
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that if the Trivial File Transfer Protocol (TFTP) server is required, the TFTP
+daemon is configured to operate in secure mode.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72305"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72305"
+            >
+              <!-- Result description -->
+              Restricting TFTP to a specific directory prevents remote users from
+copying, transferring, or overwriting system files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The TFTP package is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72305</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that if the Trivial File Transfer Protocol (TFTP) server is required, the TFTP
+daemon is configured to operate in secure mode.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restricting TFTP to a specific directory prevents remote users from
+copying, transferring, or overwriting system files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the TFTP daemon is configured to operate in secure mode.
+
+    Check to see if a TFTP server has been installed with the following
+commands:
+
+    # yum list installed tftp-server
+    tftp-server.x86_64 x.x-x.el7 rhel-7-server-rpms
+
+    If a TFTP server is not installed, this is Not Applicable.
+
+    If a TFTP server is installed, check for the server arguments with the
+following command:
+
+    # grep server_args &#x2F;etc&#x2F;xinetd.d&#x2F;tftp
+    server_args &#x3D; -s &#x2F;var&#x2F;lib&#x2F;tftpboot
+
+    If the &quot;server_args&quot; line does not have a &quot;-s&quot; option and a
+subdirectory is not assigned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the TFTP daemon to operate in secure mode by adding the following
+line to &quot;&#x2F;etc&#x2F;xinetd.d&#x2F;tftp&quot; (or modify the line to have the required value):
+
+    server_args &#x3D; -s &#x2F;var&#x2F;lib&#x2F;tftpboot</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71913"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71913"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71913</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71913
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed a minimum of four character classes must be
+changed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71913"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71913"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf minclass.to_i is expected to cmp &gt;&#x3D; 4</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71913</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed a minimum of four character classes must be
+changed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;minclass&quot; option sets the minimum number of required classes of
+characters for the new password (digits, upper-case, lower-case, others).
+
+    Check for the value of the &quot;minclass&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep minclass &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    minclass &#x3D; 4
+
+    If the value of &quot;minclass&quot; is set to less than &quot;4&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to require the change of at least four
+character classes when passwords are changed by setting the &quot;minclass&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf conf&quot; (or modify
+the line to have the required value):
+
+    minclass &#x3D; 4</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73161"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73161"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73161</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73161
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent binary
+files from being executed on file systems that are being imported via Network
+File System (NFS).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73161"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73161"
+            >
+              <!-- Result description -->
+              The &quot;noexec&quot; mount option causes the system to not execute binary
+files. This option must be used for mounting any file system not containing
+approved binary files as they may be incompatible. Executing files from
+untrusted file systems increases the opportunity for unprivileged users to
+attain unauthorized administrative access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No NFS file systems were found. is expected to eq true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73161</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent binary
+files from being executed on file systems that are being imported via Network
+File System (NFS).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;noexec&quot; mount option causes the system to not execute binary
+files. This option must be used for mounting any file system not containing
+approved binary files as they may be incompatible. Executing files from
+untrusted file systems increases the opportunity for unprivileged users to
+attain unauthorized administrative access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify file systems that are being NFS imported are configured with the
+&quot;noexec&quot; option.
+
+    Find the file system(s) that contain the directories being imported with
+the following command:
+
+    # more &#x2F;etc&#x2F;fstab | grep nfs
+
+    UUID&#x3D;e06097bb-cfcd-437b-9e4d-a691f5662a7d &#x2F;store nfs rw,noexec 0 0
+
+    If a file system found in &quot;&#x2F;etc&#x2F;fstab&quot; refers to NFS and it does not have
+the &quot;noexec&quot; option set, and use of NFS imported binaries is not documented
+with the Information System Security Officer (ISSO) as an operational
+requirement, this is a finding.
+
+    Verify the NFS is mounted with the &quot;noexec&quot;option:
+
+    # mount | grep nfs | grep noexec
+    If no results are returned and use of NFS imported binaries is not
+documented with the Information System Security Officer (ISSO) as an
+operational requirement, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the &quot;&#x2F;etc&#x2F;fstab&quot; to use the &quot;noexec&quot; option on
+file systems that are being imported via NFS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72433"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72433"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72433</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (11)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001948
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72433
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must implement
+certificate status checking for PKI authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (11)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001948
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72433"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72433"
+            >
+              <!-- Result description -->
+              Using an authentication device, such as a CAC or token that is
+separate from the information system, ensures that even if the information
+system is compromised, that compromise will not affect credentials stored on
+the authentication device.
+
+    Multifactor solutions that require devices separate from information
+systems gaining access include, for example, hardware tokens providing
+time-based or challenge-response authenticators and smart cards such as the
+U.S. Government Personal Identity Verification card and the DoD Common Access
+Card.
+
+    A privileged account is defined as an information system account with
+authorizations of a privileged user.
+
+    Remote access is access to DoD nonpublic information systems by an
+authorized user (or an information system) communicating through an external,
+non-organization-controlled network. Remote access methods include, for
+example, dial-up, broadband, and wireless.
+
+    This requirement only applies to components where this is specific to the
+function of the device or has the concept of an organizational user (e.g., VPN,
+proxy capability). This does not apply to authentication for the purpose of
+configuring the device itself (management).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected File &#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf to exist</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72433</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must implement
+certificate status checking for PKI authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Using an authentication device, such as a CAC or token that is
+separate from the information system, ensures that even if the information
+system is compromised, that compromise will not affect credentials stored on
+the authentication device.
+
+    Multifactor solutions that require devices separate from information
+systems gaining access include, for example, hardware tokens providing
+time-based or challenge-response authenticators and smart cards such as the
+U.S. Government Personal Identity Verification card and the DoD Common Access
+Card.
+
+    A privileged account is defined as an information system account with
+authorizations of a privileged user.
+
+    Remote access is access to DoD nonpublic information systems by an
+authorized user (or an information system) communicating through an external,
+non-organization-controlled network. Remote access methods include, for
+example, dial-up, broadband, and wireless.
+
+    This requirement only applies to components where this is specific to the
+function of the device or has the concept of an organizational user (e.g., VPN,
+proxy capability). This does not apply to authentication for the purpose of
+configuring the device itself (management).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (11), IA-2 (12), IA-2 (12), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system implements certificate status checking for PKI
+authentication.
+
+    Check to see if Online Certificate Status Protocol (OCSP) is enabled on the
+system with the following command:
+
+    # grep cert_policy &#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf | grep -v &quot;^#&quot;
+
+    cert_policy &#x3D; ca, ocsp_on, signature;
+    cert_policy &#x3D; ca, ocsp_on, signature;
+    cert_policy &#x3D; ca, ocsp_on, signature;
+
+    There should be at least three lines returned.
+
+    If &quot;ocsp_on&quot; is not present in all uncommented &quot;cert_policy&quot; lines in
+&quot;&#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to do certificate status checking for PKI
+authentication.
+
+    Modify all of the &quot;cert_policy&quot; lines in
+&quot;&#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf&quot; to include &quot;ocsp_on&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72175"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72175"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72175</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72175
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the postdrop command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72175"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72175"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged postfix commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;postdrop&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;postdrop&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72175</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the postdrop command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged postfix commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;postdrop&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;sbin&#x2F;postdrop &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;postdrop -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-postfix
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;postdrop&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;postdrop -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-postfix
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72129"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72129"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72129</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72129
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the open_by_handle_at syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72129"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72129"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72129</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the open_by_handle_at syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;open_by_handle_at&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw open_by_handle_at &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S open_by_handle_at -F exit&#x3D;-EPERM -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S open_by_handle_at -F exit&#x3D;-EACCES -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open_by_handle_at -F exit&#x3D;-EPERM -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open_by_handle_at -F exit&#x3D;-EACCES -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;open_by_handle_at&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;open_by_handle_at&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S open_by_handle_at -F exit&#x3D;-EPERM -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S open_by_handle_at -F exit&#x3D;-EACCES -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open_by_handle_at -F exit&#x3D;-EPERM -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open_by_handle_at -F exit&#x3D;-EACCES -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72231"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72231"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72231</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72231
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) communications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72231"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72231"
+            >
+              <!-- Result description -->
+              Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >LDAP not enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72231</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) communications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If LDAP is not being utilized, this requirement is Not Applicable.
+
+    Verify the operating system implements cryptography to protect the
+integrity of remote LDAP access sessions.
+
+    To determine if LDAP is being used for authentication, use the following
+command:
+
+    # systemctl status sssd.service
+    sssd.service - System Security Services Daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;sssd.service; enabled; vendor
+preset: disabled)
+    Active: active (running) since Wed 2018-06-27 10:58:11 EST; 1h 50min ago
+
+    If the &quot;sssd.service&quot; is &quot;active&quot;, then LDAP is being used.
+
+    Determine the &quot;id_provider&quot; that the LDAP is currently using:
+
+    # grep -i &quot;id_provider&quot; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+
+    id_provider &#x3D; ad
+
+    If &quot;id_provider&quot; is set to &quot;ad&quot;, this is Not Applicable.
+
+    Check the path to the X.509 certificate for peer authentication with the
+following command:
+
+    # grep -i tls_cacert &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+
+    ldap_tls_cacert &#x3D; &#x2F;etc&#x2F;pki&#x2F;tls&#x2F;certs&#x2F;ca-bundle.crt
+
+    Verify the &quot;ldap_tls_cacert&quot; option points to a file that contains the
+trusted CA certificate.
+
+    If this file does not exist, or the option is commented out or missing,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to implement cryptography to protect the
+integrity of LDAP remote access sessions.
+
+    Add or modify the following line in &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot;:
+
+    ldap_tls_cacert &#x3D; &#x2F;etc&#x2F;pki&#x2F;tls&#x2F;certs&#x2F;ca-bundle.crt</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72159"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72159"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72159</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72159
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the su command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72159"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72159"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;su&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;su&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72159</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the su command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;su&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;bin&#x2F;su &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;su -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;su&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;su -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72115"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72115"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72115</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72115
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the lsetxattr syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72115"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72115"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lsetxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lsetxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lsetxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lsetxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72115</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the lsetxattr syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lsetxattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw lsetxattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S lsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;lsetxattr&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lsetxattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S lsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-92253"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-92253"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-92253</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-92253
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must use a reverse-path
+filter for IPv4 network traffic when possible by default.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-92253"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-92253"
+            >
+              <!-- Result description -->
+              Enabling reverse path filtering drops packets with source addresses
+that should not have been able to be received on the interface they were
+received on. It should not be used on systems which are routers for complicated
+networks, but is helpful for end hosts and routers serving small networks.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.conf.default.rp_filter value is expected to eq 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-92253</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must use a reverse-path
+filter for IPv4 network traffic when possible by default.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enabling reverse path filtering drops packets with source addresses
+that should not have been able to be received on the interface they were
+received on. It should not be used on systems which are routers for complicated
+networks, but is helpful for end hosts and routers serving small networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system uses a reverse-path filter for IPv4:
+
+    # grep net.ipv4.conf.default.rp_filter &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+    net.ipv4.conf.default.rp_filter &#x3D; 1
+
+    If &quot;net.ipv4.conf.default.rp_filter&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;1&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.conf.default.rp_filter
+    net.ipv4.conf.default.rp_filter &#x3D; 1
+
+    If the returned line does not have a value of &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.default.rp_filter &#x3D; 1
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72223"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72223"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72223</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72223
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with a communication session are
+terminated at the end of the session or after 10 minutes of inactivity from the
+user at a command prompt, except to fulfill documented and validated mission
+requirements.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72223"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72223"
+            >
+              <!-- Result description -->
+              Terminating an idle session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle session will also free up
+resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Environment variable TMOUT is expected to be &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The TMOUT setting is configured properly is expected to be &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72223</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with a communication session are
+terminated at the end of the session or after 10 minutes of inactivity from the
+user at a command prompt, except to fulfill documented and validated mission
+requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Terminating an idle session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle session will also free up
+resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10, AC-12, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system terminates all network connections associated
+with a communications session at the end of the session or based on inactivity.
+
+    Check the value of the system inactivity timeout with the following command:
+
+    # grep -i tmout &#x2F;etc&#x2F;profile.d&#x2F;*
+
+    etc&#x2F;profile.d&#x2F;tmout.sh:TMOUT&#x3D;600
+
+    &#x2F;etc&#x2F;profile.d&#x2F;tmout.sh:readonly TMOUT
+
+    &#x2F;etc&#x2F;profile.d&#x2F;tmout.sh:export TMOUT
+
+    If &quot;TMOUT&quot; is not set to &quot;600&quot; or less in a script located in the
+&#x2F;etc&#x2F;profile.d&#x2F; directory to enforce session termination after inactivity, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to terminate all network connections
+associated with a communications session at the end of the session or after a
+period of inactivity.
+
+    Create a script to enforce the inactivity timeout (for example
+&#x2F;etc&#x2F;profile.d&#x2F;tmout.sh) such as:
+
+    #!&#x2F;bin&#x2F;bash
+
+    TMOUT&#x3D;600
+    readonly TMOUT
+    export TMOUT</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71995"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71995"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71995</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71995
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must define default
+permissions for all authenticated users in such a way that the user can only
+read and modify their own files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71995"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71995"
+            >
+              <!-- Result description -->
+              Setting the most restrictive default permissions ensures that when new
+accounts are created, they do not have unnecessary access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >login.defs UMASK is expected to eq &quot;077&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71995</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must define default
+permissions for all authenticated users in such a way that the user can only
+read and modify their own files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting the most restrictive default permissions ensures that when new
+accounts are created, they do not have unnecessary access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system defines default permissions for all
+authenticated users in such a way that the user can only read and modify their
+own files.
+
+    Check for the value of the &quot;UMASK&quot; parameter in &quot;&#x2F;etc&#x2F;login.defs&quot; file
+with the following command:
+
+    Note: If the value of the &quot;UMASK&quot; parameter is set to &quot;000&quot; in
+&quot;&#x2F;etc&#x2F;login.defs&quot; file, the Severity is raised to a CAT I.
+
+    # grep -i umask &#x2F;etc&#x2F;login.defs
+    UMASK  077
+
+    If the value for the &quot;UMASK&quot; parameter is not &quot;077&quot;, or the &quot;UMASK&quot;
+parameter is missing or is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to define default permissions for all
+authenticated users in such a way that the user can only read and modify their
+own files.
+
+    Add or edit the line for the &quot;UMASK&quot; parameter in &quot;&#x2F;etc&#x2F;login.defs&quot;
+file to &quot;077&quot;:
+
+    UMASK  077</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72071"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72071"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72071</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72071
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the file integrity tool is configured to verify extended attributes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72071"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72071"
+            >
+              <!-- Result description -->
+              Extended attributes in file systems are used to contain arbitrary data
+and file metadata with security implications.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package aide is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >List of monitored files&#x2F;directories without &#39;xattrs&#39; rule is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72071</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the file integrity tool is configured to verify extended attributes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Extended attributes in file systems are used to contain arbitrary data
+and file metadata with security implications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the file integrity tool is configured to verify extended attributes.
+
+    Check to see if Advanced Intrusion Detection Environment (AIDE) is
+installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the System Administrator how file integrity
+checks are performed on the system.
+
+    If there is no application installed to perform file integrity checks, this
+is a finding.
+
+    Note: AIDE is highly configurable at install time. These commands assume
+the &quot;aide.conf&quot; file is under the &quot;&#x2F;etc&quot; directory.
+
+    Use the following command to determine if the file is in another location:
+
+    # find &#x2F; -name aide.conf
+
+    Check the &quot;aide.conf&quot; file to determine if the &quot;xattrs&quot; rule has been
+added to the rule list being applied to the files and directories selection
+lists.
+
+    An example rule that includes the &quot;xattrs&quot; rule follows:
+
+    All&#x3D; p+i+n+u+g+s+m+S+sha512+acl+xattrs+selinux
+    &#x2F;bin All # apply the custom rule to the files in bin
+    &#x2F;sbin All # apply the same custom rule to the files in sbin
+
+    If the &quot;xattrs&quot; rule is not being used on all uncommented selection lines
+in the &quot;&#x2F;etc&#x2F;aide.conf&quot; file, or extended attributes are not being checked by
+another file integrity tool, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the file integrity tool to check file and directory extended
+attributes.
+
+    If AIDE is installed, ensure the &quot;xattrs&quot; rule is present on all
+uncommented file and directory selection lists.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71929"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71929"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71929</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71929
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that passwords for new users are restricted to a 60-day maximum lifetime.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71929"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71929"
+            >
+              <!-- Result description -->
+              Any password, no matter how complex, can eventually be cracked.
+Therefore, passwords need to be changed periodically. If the operating system
+does not limit the lifetime of passwords and force users to change their
+passwords, there is the risk that the operating system passwords could be
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >login.defs PASS_MAX_DAYS.to_i is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71929</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that passwords for new users are restricted to a 60-day maximum lifetime.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any password, no matter how complex, can eventually be cracked.
+Therefore, passwords need to be changed periodically. If the operating system
+does not limit the lifetime of passwords and force users to change their
+passwords, there is the risk that the operating system passwords could be
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If passwords are not being used for authentication, this is Not Applicable.
+
+    Verify the operating system enforces a 60-day maximum password lifetime
+restriction for new user accounts.
+
+    Check for the value of &quot;PASS_MAX_DAYS&quot; in &quot;&#x2F;etc&#x2F;login.defs&quot; with the
+following command:
+
+    # grep -i pass_max_days &#x2F;etc&#x2F;login.defs
+    PASS_MAX_DAYS 60
+
+    If the &quot;PASS_MAX_DAYS&quot; parameter value is not 60 or less, or is commented
+out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to enforce a 60-day maximum password
+lifetime restriction.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;login.defs&quot; (or modify the line to have
+the required value):
+
+    PASS_MAX_DAYS     60</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71985"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71985"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71985</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000778
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001958
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71985
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must disable the file
+system automounter unless required.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000778
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001958
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71985"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71985"
+            >
+              <!-- Result description -->
+              Automatically mounting file systems permits easy introduction of
+unknown devices, thereby facilitating malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service autofs.service is expected not to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service autofs.service is expected not to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service autofs.service is expected not to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71985</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must disable the file
+system automounter unless required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Automatically mounting file systems permits easy introduction of
+unknown devices, thereby facilitating malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, IA-3, IA-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system disables the ability to automount devices.
+
+    Check to see if automounter service is active with the following command:
+
+    # systemctl status autofs
+    autofs.service - Automounts filesystems on demand
+       Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;autofs.service; disabled)
+       Active: inactive (dead)
+
+    If the &quot;autofs&quot; status is set to &quot;active&quot; and is not documented with
+the Information System Security Officer (ISSO) as an operational requirement,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to disable the ability to automount devices.
+
+    Turn off the automount service with the following commands:
+
+    # systemctl stop autofs
+    # systemctl disable autofs
+
+    If &quot;autofs&quot; is required for Network File System (NFS), it must be
+documented with the ISSO.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71993"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71993"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71993</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71993
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the x86 Ctrl-Alt-Delete key sequence is disabled on the command line.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71993"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71993"
+            >
+              <!-- Result description -->
+              A locally logged-on user who presses Ctrl-Alt-Delete, when at the
+console, can reboot the system. If accidentally pressed, as could happen in the
+case of a mixed OS environment, this can create the risk of short-term loss of
+availability of systems due to unintentional reboot. In the GNOME graphical
+environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is
+reduced because the user will be prompted before any action is taken.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service ctrl-alt-del.target is expected not to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service ctrl-alt-del.target is expected not to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71993</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the x86 Ctrl-Alt-Delete key sequence is disabled on the command line.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A locally logged-on user who presses Ctrl-Alt-Delete, when at the
+console, can reboot the system. If accidentally pressed, as could happen in the
+case of a mixed OS environment, this can create the risk of short-term loss of
+availability of systems due to unintentional reboot. In the GNOME graphical
+environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is
+reduced because the user will be prompted before any action is taken.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system is not configured to reboot the system when
+Ctrl-Alt-Delete is pressed.
+
+    Check that the ctrl-alt-del.target is masked and not active with the
+following command:
+
+    # systemctl status ctrl-alt-del.target
+
+    ctrl-alt-del.target
+    Loaded: masked (&#x2F;dev&#x2F;null; bad)
+    Active: inactive (dead)
+
+    If the ctrl-alt-del.target is not masked, this is a finding.
+
+    If the ctrl-alt-del.target is active, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to disable the Ctrl-Alt-Delete sequence for the
+command line with the following command:
+
+    # systemctl mask ctrl-alt-del.target</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72095"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72095"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72095</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-6 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002234
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72095
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all
+executions of privileged functions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-6 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002234
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72095"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72095"
+            >
+              <!-- Result description -->
+              Misuse of privileged functions, either intentionally or
+unintentionally by authorized users, or by unauthorized external entities that
+have compromised information system accounts, is a serious and ongoing concern
+and can have significant adverse impacts on organizations. Auditing the use of
+privileged functions is one way to detect such misuse and identify the risk
+from insider threats and the advanced persistent threat.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: [&quot;always&quot;]
+     got: []
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: [&quot;exit&quot;]
+     got: []
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; fields include? &quot;euid&#x3D;0&quot; arch.uniq is expected to include &quot;b32&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [] to include &quot;b32&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; fields include? &quot;euid&#x3D;0&quot; arch.uniq is expected to include &quot;b64&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [] to include &quot;b64&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; fields include? &quot;egid&#x3D;0&quot; arch.uniq is expected to include &quot;b32&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [] to include &quot;b32&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; fields include? &quot;egid&#x3D;0&quot; arch.uniq is expected to include &quot;b64&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [] to include &quot;b64&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72095</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all
+executions of privileged functions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Misuse of privileged functions, either intentionally or
+unintentionally by authorized users, or by unauthorized external entities that
+have compromised information system accounts, is a serious and ongoing concern
+and can have significant adverse impacts on organizations. Auditing the use of
+privileged functions is one way to detect such misuse and identify the risk
+from insider threats and the advanced persistent threat.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-6 (9), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system audits the execution of privileged functions
+using the following command:
+
+    # grep -iw execve &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S execve -C uid!&#x3D;euid -F euid&#x3D;0 -k setuid
+    -a always,exit -F arch&#x3D;b64 -S execve -C uid!&#x3D;euid -F euid&#x3D;0 -k setuid
+    -a always,exit -F arch&#x3D;b32 -S execve -C gid!&#x3D;egid -F egid&#x3D;0 -k setgid
+    -a always,exit -F arch&#x3D;b64 -S execve -C gid!&#x3D;egid -F egid&#x3D;0 -k setgid
+
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules for &quot;SUID&quot; files are not
+defined, this is a finding.
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules for &quot;SGID&quot; files are not
+defined, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to audit the execution of privileged
+functions.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S execve -C uid!&#x3D;euid -F euid&#x3D;0 -k setuid
+    -a always,exit -F arch&#x3D;b64 -S execve -C uid!&#x3D;euid -F euid&#x3D;0 -k setuid
+    -a always,exit -F arch&#x3D;b32 -S execve -C gid!&#x3D;egid -F egid&#x3D;0 -k setgid
+    -a always,exit -F arch&#x3D;b64 -S execve -C gid!&#x3D;egid -F egid&#x3D;0 -k setgid
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72127"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72127"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72127</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72127
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the openat syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72127"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72127"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72127</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the openat syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;openat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw openat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S openat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S openat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S openat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S openat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;openat&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;openat&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S openat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S openat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S openat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S openat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72167"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72167"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72167</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72167
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the chsh command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72167"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72167"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chsh&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chsh&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72167</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the chsh command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chsh&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;chsh &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chsh -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chsh&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chsh -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73171"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73171"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73171</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73171
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;shadow.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73171"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73171"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;shadow&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;shadow&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73171</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;shadow.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&#x2F;etc&#x2F;shadow.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;shadow &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;shadow -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&#x2F;etc&#x2F;shadow.
+
+    Add or update the following file system rule in
+&quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;shadow -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72297"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72297"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72297</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72297
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured to
+prevent unrestricted mail relaying.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72297"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72297"
+            >
+              <!-- Result description -->
+              If unrestricted mail relaying is permitted, unauthorized senders could
+use this host as a mail relay for the purpose of sending spam or other
+unauthorized activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;postconf -n smtpd_client_restrictions&#x60; stdout.strip is expected to match &#x2F;^smtpd_client_restrictions\s+&#x3D;\s+permit_mynetworks,\s*reject\s*$&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72297</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured to
+prevent unrestricted mail relaying.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If unrestricted mail relaying is permitted, unauthorized senders could
+use this host as a mail relay for the purpose of sending spam or other
+unauthorized activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system is configured to prevent unrestricted mail relaying.
+
+    Determine if &quot;postfix&quot; is installed with the following commands:
+
+    # yum list installed postfix
+    postfix-2.6.6-6.el7.x86_64.rpm
+
+    If postfix is not installed, this is Not Applicable.
+
+    If postfix is installed, determine if it is configured to reject
+connections from unknown or untrusted networks with the following command:
+
+    # postconf -n smtpd_client_restrictions
+    smtpd_client_restrictions &#x3D; permit_mynetworks, reject
+
+    If the &quot;smtpd_client_restrictions&quot; parameter contains any entries other
+than &quot;permit_mynetworks&quot; and &quot;reject&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If &quot;postfix&quot; is installed, modify the &quot;&#x2F;etc&#x2F;postfix&#x2F;main.cf&quot; file to
+restrict client connections to the local network with the following command:
+
+    # postconf -e &#39;smtpd_client_restrictions &#x3D; permit_mynetworks,reject&#39;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72163"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72163"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72163</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72163
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the sudoers file and all files in the &#x2F;etc&#x2F;sudoers.d&#x2F; directory.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72163"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72163"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;sudoers&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;sudoers&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;sudoers.d&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;sudoers.d&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72163</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the sudoers file and all files in the &#x2F;etc&#x2F;sudoers.d&#x2F; directory.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to access the &quot;&#x2F;etc&#x2F;sudoers&quot; file and files
+in the &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;&quot; directory.
+
+    Check for modification of the following files being audited by performing
+the following commands to check the file system rules in
+&quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -i &quot;&#x2F;etc&#x2F;sudoers&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;sudoers -p wa -k privileged-actions
+
+    # grep -i &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;sudoers.d&#x2F; -p wa -k privileged-actions
+
+    If the commands do not return output that match the examples, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to access the &quot;&#x2F;etc&#x2F;sudoers&quot; file and files
+in the &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;&quot; directory.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;sudoers -p wa -k privileged-actions
+
+    -w &#x2F;etc&#x2F;sudoers.d&#x2F; -p wa -k privileged-actions
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72109"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72109"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72109</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72109
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the fchmodat syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72109"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72109"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmodat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmodat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmodat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmodat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72109</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the fchmodat syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchmodat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following command:
+
+    # grep -iw fchmodat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fchmodat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchmodat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fchmodat&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchmodat&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fchmodat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchmodat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71999"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71999"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71999</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71999
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system security patches and
+updates must be installed and up to date.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71999"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71999"
+            >
+              <!-- Result description -->
+              Timely patching is critical for maintaining the operational
+availability, confidentiality, and integrity of information technology (IT)
+systems. However, failure to keep operating system and application software
+patched is a common mistake made by IT professionals. New patches are released
+daily, and it is often difficult for even experienced System Administrators to
+keep abreast of all the new patches. When new weaknesses in an operating system
+exist, patches are usually made available by the vendor to resolve the
+problems. If the most recent security patches and updates are not installed,
+unauthorized users may take advantage of weaknesses in the unpatched software.
+The lack of prompt attention to patching could result in a system compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >List of out-of-date packages is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;bind-export-libs&quot;, &quot;device-mapper&quot;, &quot;device-mapper-libs&quot;, &quot;python-requests&quot;, &quot;systemd&quot;, &quot;puppet5-release&quot;, &quot;systemd-sysv&quot;, &quot;systemd-libs&quot;, &quot;libgudev1&quot;, &quot;rh-amazon-rhui-client&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package bind-export-libs version is expected to eq &quot;9.11.4-16.P2.el7_8.2&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;9.11.4-16.P2.el7_8.2&quot;
+     got: &quot;9.11.4-16.P2.el7&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package device-mapper version is expected to eq &quot;1.02.164-7.el7_8.1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;1.02.164-7.el7_8.1&quot;
+     got: &quot;1.02.164-7.el7&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package device-mapper-libs version is expected to eq &quot;1.02.164-7.el7_8.1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;1.02.164-7.el7_8.1&quot;
+     got: &quot;1.02.164-7.el7&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package python-requests version is expected to eq &quot;2.6.0-9.el7_8&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;2.6.0-9.el7_8&quot;
+     got: &quot;2.6.0-8.el7_7&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package systemd version is expected to eq &quot;219-73.el7_8.5&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;219-73.el7_8.5&quot;
+     got: &quot;219-73.el7.1&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package puppet5-release version is expected to eq &quot;5.0.0-11.el6&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;5.0.0-11.el6&quot;
+     got: &quot;5.0.0-4.el6&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package systemd-sysv version is expected to eq &quot;219-73.el7_8.5&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;219-73.el7_8.5&quot;
+     got: &quot;219-73.el7.1&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package systemd-libs version is expected to eq &quot;219-73.el7_8.5&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;219-73.el7_8.5&quot;
+     got: &quot;219-73.el7.1&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package libgudev1 version is expected to eq &quot;219-73.el7_8.5&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;219-73.el7_8.5&quot;
+     got: &quot;219-73.el7.1&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package rh-amazon-rhui-client version is expected to eq &quot;3.0.26-1.el7&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: &quot;3.0.26-1.el7&quot;
+     got: &quot;3.0.18-1.el7&quot;
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71999</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system security patches and
+updates must be installed and up to date.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Timely patching is critical for maintaining the operational
+availability, confidentiality, and integrity of information technology (IT)
+systems. However, failure to keep operating system and application software
+patched is a common mistake made by IT professionals. New patches are released
+daily, and it is often difficult for even experienced System Administrators to
+keep abreast of all the new patches. When new weaknesses in an operating system
+exist, patches are usually made available by the vendor to resolve the
+problems. If the most recent security patches and updates are not installed,
+unauthorized users may take advantage of weaknesses in the unpatched software.
+The lack of prompt attention to patching could result in a system compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system security patches and updates are installed and
+up to date. Updates are required to be applied with a frequency determined by
+the site or Program Management Office (PMO).
+
+    Obtain the list of available package security updates from Red Hat. The URL
+for updates is https:&#x2F;&#x2F;rhn.redhat.com&#x2F;errata&#x2F;. It is important to note that
+updates provided by Red Hat may not be present on the system if the underlying
+packages are not installed.
+
+    Check that the available package security updates have been installed on
+the system with the following command:
+
+    # yum history list | more
+    Loaded plugins: langpacks, product-id, subscription-manager
+    ID     | Command line             | Date and time    | Action(s)      |
+Altered
+
+-------------------------------------------------------------------------------
+        70 | install aide             | 2016-05-05 10:58 | Install       |
+1
+        69 | update -y                | 2016-05-04 14:34 | Update     |   18 EE
+        68 | install vlc                | 2016-04-21 17:12 | Install        |
+21
+        67 | update -y                | 2016-04-21 17:04 | Update     |     7 EE
+        66 | update -y                | 2016-04-15 16:47 | E, I, U         |
+84 EE
+
+    If package updates have not been performed on the system within the
+timeframe that the site&#x2F;program documentation requires, this is a finding.
+
+    Typical update frequency may be overridden by Information Assurance
+Vulnerability Alert (IAVA) notifications from CYBERCOM.
+
+    If the operating system is in non-compliance with the Information Assurance
+Vulnerability Management (IAVM) process, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Install the operating system patches or updated packages
+available from Red Hat within 30 days or sooner as local policy dictates.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72073"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72073"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72073</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72073
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must use a file
+integrity tool that is configured to use FIPS 140-2 approved cryptographic
+hashes for validating file contents and directories.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72073"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72073"
+            >
+              <!-- Result description -->
+              File integrity tools use cryptographic hashes for verifying file
+contents and directories have not been altered. These hashes must be FIPS 140-2
+approved cryptographic hashes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package aide is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >List of monitored files&#x2F;directories without &#39;sha512&#39; rule is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;&#x2F;root&#x2F;\\..*&quot;, &quot;&#x2F;var&#x2F;log&#x2F;faillog$&quot;, &quot;&#x2F;var&#x2F;log&#x2F;lastlog$&quot;, &quot;&#x2F;var&#x2F;run&#x2F;faillock&quot;, &quot;&#x2F;var&#x2F;log&quot;, &quot;&#x2F;var&#x2F;run&#x2F;utmp$&quot;, &quot;&#x2F;etc&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72073</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must use a file
+integrity tool that is configured to use FIPS 140-2 approved cryptographic
+hashes for validating file contents and directories.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >File integrity tools use cryptographic hashes for verifying file
+contents and directories have not been altered. These hashes must be FIPS 140-2
+approved cryptographic hashes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the file integrity tool is configured to use FIPS 140-2 approved
+cryptographic hashes for validating file contents and directories.
+
+    Note: If RHEL-07-021350 is a finding, this is automatically a finding too
+as the system cannot implement FIPS 140-2 approved cryptographic algorithms and
+hashes.
+
+    Check to see if Advanced Intrusion Detection Environment (AIDE) is
+installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the System Administrator how file integrity
+checks are performed on the system.
+
+    If there is no application installed to perform file integrity checks, this
+is a finding.
+
+    Note: AIDE is highly configurable at install time. These commands assume
+the &quot;aide.conf&quot; file is under the &quot;&#x2F;etc&quot; directory.
+
+    Use the following command to determine if the file is in another location:
+
+    # find &#x2F; -name aide.conf
+
+    Check the &quot;aide.conf&quot; file to determine if the &quot;sha512&quot; rule has been
+added to the rule list being applied to the files and directories selection
+lists.
+
+    An example rule that includes the &quot;sha512&quot; rule follows:
+
+    All&#x3D;p+i+n+u+g+s+m+S+sha512+acl+xattrs+selinux
+    &#x2F;bin All # apply the custom rule to the files in bin
+    &#x2F;sbin All # apply the same custom rule to the files in sbin
+
+    If the &quot;sha512&quot; rule is not being used on all uncommented selection lines
+in the &quot;&#x2F;etc&#x2F;aide.conf&quot; file, or another file integrity tool is not using
+FIPS 140-2 approved cryptographic hashes for validating file contents and
+directories, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the file integrity tool to use FIPS 140-2 cryptographic hashes
+for validating file and directory contents.
+
+    If AIDE is installed, ensure the &quot;sha512&quot; rule is present on all
+uncommented file and directory selection lists.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71863"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71863"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71863</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71863
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner before granting local or
+remote access to the system via a command line user logon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71863"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71863"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The banner text should match the standard banner is expected to cmp &#x3D;&#x3D; &quot;YouareaccessingaU.S.Government(USG)InformationSystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS),youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: YouareaccessingaU.S.Government(USG)InformationSystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS),youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+     got: YouareaccessingaU.S.Government(USG)informationsystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS)youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The banner text should match the limited banner is expected to cmp &#x3D;&#x3D; &quot;I&#39;veread&amp;consenttotermsinISuseragreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: I&#39;veread&amp;consenttotermsinISuseragreem&#39;t.
+     got: YouareaccessingaU.S.Government(USG)informationsystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS)youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71863</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner before granting local or
+remote access to the system via a command line user logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system displays the Standard Mandatory DoD Notice and
+Consent Banner before granting access to the operating system via a command
+line user logon.
+
+    Check to see if the operating system displays a banner at the command line
+logon screen with the following command:
+
+    # more &#x2F;etc&#x2F;issue
+
+    The command should return the following text:
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+
+    If the operating system does not display a graphical logon banner or the
+banner does not match the Standard Mandatory DoD Notice and Consent Banner,
+this is a finding.
+
+    If the text in the &quot;&#x2F;etc&#x2F;issue&quot; file does not match the Standard
+Mandatory DoD Notice and Consent Banner, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to display the Standard Mandatory DoD Notice
+and Consent Banner before granting access to the system via the command line by
+editing the &quot;&#x2F;etc&#x2F;issue&quot; file.
+
+    Replace the default text with the Standard Mandatory DoD Notice and Consent
+Banner. The DoD required text is:
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants.  Such
+communications and work product are private and confidential.  See User
+Agreement for details.&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72319"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72319"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72319</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72319
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not forward IPv6
+source-routed packets.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72319"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72319"
+            >
+              <!-- Result description -->
+              Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv6
+forwarding is enabled and the system is functioning as a router.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv6.conf.all.accept_source_route value is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72319</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not forward IPv6
+source-routed packets.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv6
+forwarding is enabled and the system is functioning as a router.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If IPv6 is not enabled, the key will not exist, and this is Not Applicable.
+
+    Verify the system does not accept IPv6 source-routed packets.
+
+    # grep net.ipv6.conf.all.accept_source_route &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    net.ipv6.conf.all.accept_source_route &#x3D; 0
+
+    If &quot;net.ipv6.conf.all.accept_source_route&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv6.conf.all.accept_source_route
+    net.ipv6.conf.all.accept_source_route &#x3D; 0
+
+    If the returned lines do not have a value of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to the required kernel parameter, if IPv6 is enabled, by
+adding the following line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in
+the &#x2F;etc&#x2F;sysctl.d&#x2F; directory (or modify the line to have the required value):
+
+    net.ipv6.conf.all.accept_source_route &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72229"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72229"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72229</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72229
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) communications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72229"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72229"
+            >
+              <!-- Result description -->
+              Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >LDAP not enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72229</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) communications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If LDAP is not being utilized, this requirement is Not Applicable.
+
+    Verify the operating system implements cryptography to protect the
+integrity of remote LDAP access sessions.
+
+    To determine if LDAP is being used for authentication, use the following
+command:
+
+    # systemctl status sssd.service
+    sssd.service - System Security Services Daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;sssd.service; enabled; vendor
+preset: disabled)
+    Active: active (running) since Wed 2018-06-27 10:58:11 EST; 1h 50min ago
+
+    If the &quot;sssd.service&quot; is &quot;active&quot;, then LDAP is being used.
+
+    Determine the &quot;id_provider&quot; the LDAP is currently using:
+
+    # grep -i &quot;id_provider&quot; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+
+    id_provider &#x3D; ad
+
+    If &quot;id_provider&quot; is set to &quot;ad&quot;, this is Not Applicable.
+
+    Verify the sssd service is configured to require the use of certificates:
+
+    # grep -i tls_reqcert &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+    ldap_tls_reqcert &#x3D; demand
+
+    If the &quot;ldap_tls_reqcert&quot; setting is missing, commented out, or does not
+exist, this is a finding.
+
+    If the &quot;ldap_tls_reqcert&quot; setting is not set to &quot;demand&quot; or &quot;hard&quot;,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to implement cryptography to protect the
+integrity of LDAP remote access sessions.
+
+    Add or modify the following line in &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot;:
+
+    ldap_tls_reqcert &#x3D; demand</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72103"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72103"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72103</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72103
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the fchownat syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72103"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72103"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchownat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchownat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchownat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchownat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72103</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the fchownat syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-2 d, AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchownat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw fchownat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fchownat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchownat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fchownat&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fchownat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchownat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72077"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72077"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72077</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72077
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have the
+telnet-server package installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72077"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72077"
+            >
+              <!-- Result description -->
+              It is detrimental for operating systems to provide, or install by
+default, functionality exceeding requirements or mission objectives. These
+unnecessary capabilities or services are often overlooked and therefore may
+remain unsecured. They increase the risk to the platform by providing
+additional attack vectors.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services, provided by default, may not be
+necessary to support essential organizational operations (e.g., key missions,
+functions).
+
+    Examples of non-essential capabilities include, but are not limited to,
+games, software packages, tools, and demonstration software not related to
+requirements or providing a wide array of functionality not required for every
+mission, but which cannot be disabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package telnet-server is expected not to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72077</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have the
+telnet-server package installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is detrimental for operating systems to provide, or install by
+default, functionality exceeding requirements or mission objectives. These
+unnecessary capabilities or services are often overlooked and therefore may
+remain unsecured. They increase the risk to the platform by providing
+additional attack vectors.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services, provided by default, may not be
+necessary to support essential organizational operations (e.g., key missions,
+functions).
+
+    Examples of non-essential capabilities include, but are not limited to,
+games, software packages, tools, and demonstration software not related to
+requirements or providing a wide array of functionality not required for every
+mission, but which cannot be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system is configured to disable non-essential
+capabilities. The most secure way of ensuring a non-essential capability is
+disabled is to not have the capability installed.
+
+    The telnet service provides an unencrypted remote access service that does
+not provide for the confidentiality and integrity of user passwords or the
+remote session.
+
+    If a privileged user were to log on using this service, the privileged user
+password could be compromised.
+
+    Check to see if the telnet-server package is installed with the following
+command:
+
+    # yum list installed telnet-server
+
+    If the telnet-server package is installed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to disable non-essential capabilities by
+removing the telnet-server package from the system with the following command:
+
+    # yum remove telnet-server</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71949"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71949"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71949</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-11
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002038
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71949
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that users must re-authenticate for privilege escalation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-11
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002038
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71949"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71949"
+            >
+              <!-- Result description -->
+              Without re-authentication, users may access resources or perform tasks
+for which they do not have authorization.
+
+    When operating systems provide the capability to escalate a functional
+capability, it is critical the user reauthenticate.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;grep -ir authenticate &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&#x60; stdout is expected not to match &#x2F;!authenticate&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71949</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that users must re-authenticate for privilege escalation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without re-authentication, users may access resources or perform tasks
+for which they do not have authorization.
+
+    When operating systems provide the capability to escalate a functional
+capability, it is critical the user reauthenticate.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-11, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system requires users to reauthenticate for privilege
+escalation.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers&quot; and &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;
+files with the following command:
+
+    # grep -i authenticate &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*
+
+    If any uncommented line is found with a &quot;!authenticate&quot; tag, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to require users to reauthenticate for
+privilege escalation.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers&quot; file with the following
+command:
+
+    # visudo
+    Remove any occurrences of &quot;!authenticate&quot; tags in the file.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;*&quot; files with the
+following command:
+
+    # grep -i authenticate &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*
+    Remove any occurrences of &quot;!authenticate&quot; tags in the file(s).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72033"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72033"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72033</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72033
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files have mode 0740 or less permissive.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72033"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72033"
+            >
+              <!-- Result description -->
+              Local initialization files are used to configure the user&#39;s shell
+environment upon logon. Malicious modification of these files could compromise
+accounts upon logon.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >#&lt;Set: {&quot;&#x2F;root&#x2F;.bash_logout&quot;, &quot;&#x2F;root&#x2F;.bash_profile&quot;, &quot;&#x2F;root&#x2F;.bashrc&quot;, &quot;&#x2F;root&#x2F;.cshrc&quot;, &quot;&#x2F;root&#x2F;.tcshrc&quot;}&gt; is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;#&lt;Set: {&quot;&#x2F;root&#x2F;.bash_logout&quot;, &quot;&#x2F;root&#x2F;.bash_profile&quot;, &quot;&#x2F;root&#x2F;.bashrc&quot;, &quot;&#x2F;root&#x2F;.cshrc&quot;, &quot;&#x2F;root&#x2F;.tcshrc&quot;}&gt;.empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72033</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files have mode 0740 or less permissive.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Local initialization files are used to configure the user&#39;s shell
+environment upon logon. Malicious modification of these files could compromise
+accounts upon logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that all local initialization files have a mode of &quot;0740&quot; or less
+permissive.
+
+    Check the mode on all local initialization files with the following command:
+
+    Note: The example will be for the &quot;smithj&quot; user, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # ls -al &#x2F;home&#x2F;smithj&#x2F;.[^.]* | more
+
+    -rwxr----- 1 smithj users 896 Mar 10 2011 .profile
+    -rwxr----- 1 smithj users 497 Jan 6 2007 .login
+    -rwxr----- 1 smithj users 886 Jan 6 2007 .something
+
+    If any local initialization files have a mode more permissive than
+&quot;0740&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the mode of the local initialization files to &quot;0740&quot; with the
+following command:
+
+    Note: The example will be for the &quot;smithj&quot; user, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # chmod 0740 &#x2F;home&#x2F;smithj&#x2F;.[^.]*</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71911"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71911"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71911</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71911
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed a minimum of eight of the total number of
+characters must be changed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71911"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71911"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf difok.to_i is expected to cmp &gt;&#x3D; 8</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71911</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed a minimum of eight of the total number of
+characters must be changed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;difok&quot; option sets the number of characters in a password that must
+not be present in the old password.
+
+    Check for the value of the &quot;difok&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep difok &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    difok &#x3D; 8
+
+    If the value of &quot;difok&quot; is set to less than &quot;8&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to require the change of at least eight of
+the total number of characters when passwords are changed by setting the
+&quot;difok&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; (or modify the
+line to have the required value):
+
+    difok &#x3D; 8</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72269"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72269"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72269</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002046
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72269
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must, for networked
+systems, synchronize clocks with a server that is synchronized to one of the
+redundant United States Naval Observatory (USNO) time servers, a time server
+designated for the appropriate DoD network (NIPRNet&#x2F;SIPRNet), and&#x2F;or the Global
+Positioning System (GPS).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002046
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72269"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72269"
+            >
+              <!-- Result description -->
+              Inaccurate time stamps make it more difficult to correlate events and
+can lead to an inaccurate analysis. Determining the correct time a particular
+event occurred on a system is critical when conducting forensic analysis and
+investigating system events. Sources outside the configured acceptable
+allowance (drift) may be inaccurate.
+
+    Synchronizing internal information system clocks provides uniformity of
+time stamps for information systems with multiple system clocks and systems
+connected over a network.
+
+    Organizations should consider endpoints that may not have regular access to
+the authoritative time server (e.g., mobile, teleworking, and tactical
+endpoints).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service chronyd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service chronyd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service chronyd is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >chronyd time sources list is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >chronyd maxpoll values (99&#x3D;maxpoll absent) is expected to all be &lt; 17</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72269</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must, for networked
+systems, synchronize clocks with a server that is synchronized to one of the
+redundant United States Naval Observatory (USNO) time servers, a time server
+designated for the appropriate DoD network (NIPRNet&#x2F;SIPRNet), and&#x2F;or the Global
+Positioning System (GPS).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Inaccurate time stamps make it more difficult to correlate events and
+can lead to an inaccurate analysis. Determining the correct time a particular
+event occurred on a system is critical when conducting forensic analysis and
+investigating system events. Sources outside the configured acceptable
+allowance (drift) may be inaccurate.
+
+    Synchronizing internal information system clocks provides uniformity of
+time stamps for information systems with multiple system clocks and systems
+connected over a network.
+
+    Organizations should consider endpoints that may not have regular access to
+the authoritative time server (e.g., mobile, teleworking, and tactical
+endpoints).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-8 (1) (a), AU-8 (1) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check to see if NTP is running in continuous mode:
+
+    # ps -ef | grep ntp
+
+    If NTP is not running, check to see if &quot;chronyd&quot; is running in continuous
+mode:
+
+    # ps -ef | grep chronyd
+
+    If NTP or &quot;chronyd&quot; is not running, this is a finding.
+
+    If the NTP process is found, then check the &quot;ntp.conf&quot; file for the
+&quot;maxpoll&quot; option setting:
+
+    # grep maxpoll &#x2F;etc&#x2F;ntp.conf
+
+    server 0.rhel.pool.ntp.org iburst maxpoll 10
+
+    If the option is set to &quot;17&quot; or is not set, this is a finding.
+
+    If the file does not exist, check the &quot;&#x2F;etc&#x2F;cron.daily&quot; subdirectory for
+a crontab file controlling the execution of the &quot;ntpd -q&quot; command.
+
+    # grep -i &quot;ntpd -q&quot; &#x2F;etc&#x2F;cron.daily&#x2F;*
+    # ls -al &#x2F;etc&#x2F;cron.* | grep ntp
+
+    ntp
+
+    If a crontab file does not exist in the &quot;&#x2F;etc&#x2F;cron.daily&quot; that executes
+the &quot;ntpd -q&quot; command, this is a finding.
+
+    If the &quot;chronyd&quot; process is found, then check the &quot;chrony.conf&quot; file
+for the &quot;maxpoll&quot; option setting:
+
+    # grep maxpoll &#x2F;etc&#x2F;chrony.conf
+
+    server 0.rhel.pool.ntp.org iburst maxpoll 10
+
+    If the option is not set or the line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the &quot;&#x2F;etc&#x2F;ntp.conf&quot; or &quot;&#x2F;etc&#x2F;chrony.conf&quot; file and add or update
+an entry to define &quot;maxpoll&quot; to &quot;10&quot; as follows:
+
+    server 0.rhel.pool.ntp.org iburst maxpoll 10
+
+    If NTP was running and &quot;maxpoll&quot; was updated, the NTP service must be
+restarted:
+
+    # systemctl restart ntpd
+
+    If NTP was not running, it must be started:
+
+    # systemctl start ntpd
+
+    If &quot;chronyd&quot; was running and &quot;maxpoll&quot; was updated, the service must be
+restarted:
+
+    # systemctl restart chronyd.service
+
+    If &quot;chronyd&quot; was not running, it must be started:
+
+    # systemctl start chronyd.service</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71931"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71931"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71931</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71931
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that existing passwords are restricted to a 60-day maximum lifetime.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71931"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71931"
+            >
+              <!-- Result description -->
+              Any password, no matter how complex, can eventually be cracked.
+Therefore, passwords need to be changed periodically. If the operating system
+does not limit the lifetime of passwords and force users to change their
+passwords, there is the risk that the operating system passwords could be
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;shadow with user &#x3D;&#x3D; &quot;ec2-user&quot; max_days.first.to_i is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71931</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that existing passwords are restricted to a 60-day maximum lifetime.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any password, no matter how complex, can eventually be cracked.
+Therefore, passwords need to be changed periodically. If the operating system
+does not limit the lifetime of passwords and force users to change their
+passwords, there is the risk that the operating system passwords could be
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check whether the maximum time period for existing passwords is restricted
+to 60 days.
+
+    # awk -F: &#39;$5 &gt; 60 {print $1 &quot; &quot; $5}&#39; &#x2F;etc&#x2F;shadow
+
+    If any results are returned that are not associated with a system account,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure non-compliant accounts to enforce a 60-day maximum password
+lifetime restriction.
+
+    # chage -M 60 [user]</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72061"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72061"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72061</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72061
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must use a separate file
+system for &#x2F;var.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72061"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72061"
+            >
+              <!-- Result description -->
+              The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Mount &#x2F;var is expected to be mounted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+Mount &#x2F;var is not mounted
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72061</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must use a separate file
+system for &#x2F;var.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that a separate file system&#x2F;partition has been created for &quot;&#x2F;var&quot;.
+
+    Check that a file system&#x2F;partition has been created for &quot;&#x2F;var&quot; with the
+following command:
+
+    # grep &#x2F;var &#x2F;etc&#x2F;fstab
+    UUID&#x3D;c274f65f    &#x2F;var                    ext4    noatime,nobarrier        1
+2
+
+    If a separate entry for &quot;&#x2F;var&quot; is not in use, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Migrate the &quot;&#x2F;var&quot; path onto a separate file system.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-92255"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-92255"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-92255</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001263
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-92255
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must have a host-based
+intrusion detection tool installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001263
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-92255"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-92255"
+            >
+              <!-- Result description -->
+              Adding host-based intrusion detection tools can provide the capability
+to automatically take actions in response to malicious behavior, which can
+provide additional agility in reacting to network threats. These tools also
+often include a reporting capability to provide network awareness of the
+system, which may not otherwise exist in an organization&#39;s systems management
+regime.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package MFEhiplsm is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package MFEhiplsm&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Processes &#x2F;hipclient&#x2F; is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected Processes &#x2F;hipclient&#x2F; to exist</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-92255</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must have a host-based
+intrusion detection tool installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Adding host-based intrusion detection tools can provide the capability
+to automatically take actions in response to malicious behavior, which can
+provide additional agility in reacting to network threats. These tools also
+often include a reporting capability to provide network awareness of the
+system, which may not otherwise exist in an organization&#39;s systems management
+regime.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-4 (5), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ask the SA or ISSO if a host-based intrusion detection application is
+loaded on the system. Per OPORD 16-0080, the preferred intrusion detection
+system is McAfee HBSS available through the U.S. Cyber Command (USCYBERCOM).
+
+    If another host-based intrusion detection application is in use, such as
+SELinux, this must be documented and approved by the local Authorizing Official.
+
+    Procedure:
+    Examine the system to determine if the Host Intrusion Prevention System
+(HIPS) is installed:
+
+    # rpm -qa | grep MFEhiplsm
+
+    Verify that the McAfee HIPS module is active on the system:
+
+    # ps -ef | grep -i “hipclient”
+
+    If the MFEhiplsm package is not installed, check for another intrusion
+detection system:
+
+    # find &#x2F; -name &lt;daemon name&gt;
+
+    Where &lt;daemon name&gt; is the name of the primary application daemon to
+determine if the application is loaded on the system.
+
+    Determine if the application is active on the system:
+
+    # ps -ef | grep -i &lt;daemon name&gt;
+
+    If the MFEhiplsm package is not installed and an alternate host-based
+intrusion detection application has not been documented for use, this is a
+finding.
+
+    If no host-based intrusion detection system is installed and running on the
+system, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Install and enable the latest McAfee HIPS package, available from
+USCYBERCOM.
+
+    Note: If the system does not support the McAfee HIPS package, install and
+enable a supported intrusion detection system application and document its use
+with the Authorizing Official.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71893"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71893"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71893</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71893
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must initiate a
+screensaver after a 15-minute period of inactivity for graphical user
+interfaces.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71893"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71893"
+            >
+              <!-- Result description -->
+              A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have GNOME installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71893</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must initiate a
+screensaver after a 15-minute period of inactivity for graphical user
+interfaces.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system initiates a screensaver after a 15-minute
+period of inactivity for graphical user interfaces. The screen program must be
+installed to lock sessions on the console.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check to see if GNOME is configured to display a screensaver after a 15
+minute delay with the following command:
+
+    # grep -i idle-delay &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    idle-delay&#x3D;uint32 900
+
+    If the &quot;idle-delay&quot; setting is missing or is not set to &quot;900&quot; or less,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to initiate a screensaver after a 15-minute
+period of inactivity for graphical user interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver
+
+    Edit &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver and add or update the following
+lines:
+
+    [org&#x2F;gnome&#x2F;desktop&#x2F;session]
+    # Set the lock time out to 900 seconds before the session is considered idle
+    idle-delay&#x3D;uint32 900
+
+    You must include the &quot;uint32&quot; along with the integer key values as shown.
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71915"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71915"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71915</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71915
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed the number of repeating consecutive characters
+must not be more than three characters.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71915"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71915"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf maxrepeat.to_i is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71915</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed the number of repeating consecutive characters
+must not be more than three characters.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;maxrepeat&quot; option sets the maximum number of allowed same
+consecutive characters in a new password.
+
+    Check for the value of the &quot;maxrepeat&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep maxrepeat &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    maxrepeat &#x3D; 3
+
+    If the value of &quot;maxrepeat&quot; is set to more than &quot;3&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to require the change of the number of
+repeating consecutive characters when passwords are changed by setting the
+&quot;maxrepeat&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf conf&quot; (or modify
+the line to have the required value):
+
+    maxrepeat &#x3D; 3</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81013"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81013"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81013</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001764
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81013
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the noexec option.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001764
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81013"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81013"
+            >
+              <!-- Result description -->
+              The &quot;noexec&quot; mount option causes the system to not execute binary
+files. This option must be used for mounting any file system not containing
+approved binary files as they may be incompatible. Executing files from
+untrusted file systems increases the opportunity for unprivileged users to
+attain unauthorized administrative access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Mount &#x2F;dev&#x2F;shm options is expected to include &quot;noexec&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;rw&quot;, &quot;nosuid&quot;, &quot;nodev&quot;, &quot;seclabel&quot;] to include &quot;noexec&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81013</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the noexec option.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;noexec&quot; mount option causes the system to not execute binary
+files. This option must be used for mounting any file system not containing
+approved binary files as they may be incompatible. Executing files from
+untrusted file systems increases the opportunity for unprivileged users to
+attain unauthorized administrative access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that the &quot;noexec&quot; option is configured for &#x2F;dev&#x2F;shm:
+
+    # cat &#x2F;etc&#x2F;fstab | grep &#x2F;dev&#x2F;shm
+
+    tmpfs &#x2F;dev&#x2F;shm tmpfs defaults,nodev,nosuid,noexec 0 0
+
+    If any results are returned and the &quot;noexec&quot; option is not listed, this
+is a finding.
+
+    Verify &quot;&#x2F;dev&#x2F;shm&quot; is mounted with the &quot;noexec&quot; option:
+
+    # mount | grep &quot;&#x2F;dev&#x2F;shm&quot; | grep noexec
+
+    If no results are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system so that &#x2F;dev&#x2F;shm is mounted with the
+&quot;noexec&quot; option.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73173"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73173"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73173</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73173
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;opasswd.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73173"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73173"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;security&#x2F;opasswd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;security&#x2F;opasswd&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73173</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;opasswd.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&#x2F;etc&#x2F;opasswd.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;security&#x2F;opasswd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;security&#x2F;opasswd -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&#x2F;etc&#x2F;opasswd.
+
+    Add or update the following file system rule in
+&quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;security&#x2F;opasswd -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect:
+    # systemctl restart auditd</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72117"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72117"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72117</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72117
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the removexattr syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72117"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72117"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;removexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;removexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;removexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;removexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72117</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the removexattr syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;removexattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw removexattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S removexattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S removexattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;removexattr&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;removexattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S removexattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S removexattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71951"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71951"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71951</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71951
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the delay between logon prompts following a failed console logon attempt
+is at least four seconds.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71951"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71951"
+            >
+              <!-- Result description -->
+              Configuring the operating system to implement organization-wide
+security implementation guides and security checklists verifies compliance with
+federal standards and establishes a common security baseline across DoD that
+reflects the most restrictive security posture consistent with operational
+requirements.
+
+    Configuration settings are the set of parameters that can be changed in
+hardware, software, or firmware components of the system that affect the
+security posture and&#x2F;or functionality of the system. Security-related
+parameters are those parameters impacting the security state of the system,
+including the parameters required to satisfy other security control
+requirements. Security-related parameters include, for example, registry
+settings; account, file, and directory permission settings; and settings for
+functions, ports, protocols, services, and remote connections.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >login.defs FAIL_DELAY.to_i is expected to cmp &gt;&#x3D; 4</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71951</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the delay between logon prompts following a failed console logon attempt
+is at least four seconds.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuring the operating system to implement organization-wide
+security implementation guides and security checklists verifies compliance with
+federal standards and establishes a common security baseline across DoD that
+reflects the most restrictive security posture consistent with operational
+requirements.
+
+    Configuration settings are the set of parameters that can be changed in
+hardware, software, or firmware components of the system that affect the
+security posture and&#x2F;or functionality of the system. Security-related
+parameters are those parameters impacting the security state of the system,
+including the parameters required to satisfy other security control
+requirements. Security-related parameters include, for example, registry
+settings; account, file, and directory permission settings; and settings for
+functions, ports, protocols, services, and remote connections.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system enforces a delay of at least four seconds
+between console logon prompts following a failed logon attempt.
+
+    Check the value of the &quot;fail_delay&quot; parameter in the &quot;&#x2F;etc&#x2F;login.defs&quot;
+file with the following command:
+
+    # grep -i fail_delay &#x2F;etc&#x2F;login.defs
+    FAIL_DELAY 4
+
+    If the value of &quot;FAIL_DELAY&quot; is not set to &quot;4&quot; or greater, or the line
+is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to enforce a delay of at least four seconds
+between logon prompts following a failed console logon attempt.
+
+    Modify the &quot;&#x2F;etc&#x2F;login.defs&quot; file to set the &quot;FAIL_DELAY&quot; parameter to
+&quot;4&quot; or greater:
+
+    FAIL_DELAY 4</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72037"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72037"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72037</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72037
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that local initialization files do not execute world-writable programs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72037"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72037"
+            >
+              <!-- Result description -->
+              This control consistently takes a long to run and has been disabled
+          using the disable_slow_controls attribute.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control consistently takes a long to run and has been disabled
+  using the disable_slow_controls attribute.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72037</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that local initialization files do not execute world-writable programs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control consistently takes a long to run and has been disabled
+          using the disable_slow_controls attribute.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that local initialization files do not execute world-writable
+programs.
+
+    Check the system for world-writable files with the following command:
+
+    # find &#x2F; -xdev -perm -002 -type f -exec ls -ld {} \; | more
+
+    For all files listed, check for their presence in the local initialization
+files with the following commands:
+
+    Note: The example will be for a system that is configured to create users&#39;
+home directories in the &quot;&#x2F;home&quot; directory.
+
+    # grep &lt;file&gt; &#x2F;home&#x2F;*&#x2F;.*
+
+    If any local initialization files are found to reference world-writable
+files, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the mode on files being executed by the local initialization files with
+the following command:
+
+    # chmod 0755 &lt;file&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72121"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72121"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72121</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72121
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the lremovexattr syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72121"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72121"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lremovexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lremovexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lremovexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lremovexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72121</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the lremovexattr syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lremovexattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw lremovexattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S lremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;lremovexattr&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lremovexattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S lremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72005"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72005"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72005</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72005
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the root account must be the only account having unrestricted access to
+the system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72005"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72005"
+            >
+              <!-- Result description -->
+              If an account other than root also has a User Identifier (UID) of
+&quot;0&quot;, it has root authority, giving that account unrestricted access to the
+entire operating system. Multiple accounts with a UID of &quot;0&quot; afford an
+opportunity for potential intruders to guess a password for a privileged
+account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;passwd with uid &#x3D;&#x3D; 0 users is expected to cmp &#x3D;&#x3D; &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;passwd with uid &#x3D;&#x3D; 0 entries.length is expected to eq 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72005</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the root account must be the only account having unrestricted access to
+the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If an account other than root also has a User Identifier (UID) of
+&quot;0&quot;, it has root authority, giving that account unrestricted access to the
+entire operating system. Multiple accounts with a UID of &quot;0&quot; afford an
+opportunity for potential intruders to guess a password for a privileged
+account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the system for duplicate UID &quot;0&quot; assignments with the following
+command:
+
+    # awk -F: &#39;$3 &#x3D;&#x3D; 0 {print $1}&#39; &#x2F;etc&#x2F;passwd
+
+    If any accounts other than root have a UID of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the UID of any account on the system, other than root, that has a
+UID of &quot;0&quot;.
+
+    If the account is associated with system commands or applications, the UID
+should be changed to one greater than &quot;0&quot; but less than &quot;1000&quot;. Otherwise,
+assign a UID of greater than &quot;1000&quot; that has not already been assigned.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72253"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72253"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72253</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72253
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon is configured to only use Message Authentication Codes
+(MACs) employing FIPS 140-2 approved cryptographic hash algorithms.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72253"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72253"
+            >
+              <!-- Result description -->
+              DoD information systems are required to use FIPS 140-2 approved
+cryptographic hash functions. The only SSHv2 hash algorithm meeting this
+requirement is SHA.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >hmac-sha2-256 is expected to be in &quot;hmac-sha2-256&quot; and &quot;hmac-sha2-512&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >hmac-sha2-512 is expected to be in &quot;hmac-sha2-256&quot; and &quot;hmac-sha2-512&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72253</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon is configured to only use Message Authentication Codes
+(MACs) employing FIPS 140-2 approved cryptographic hash algorithms.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DoD information systems are required to use FIPS 140-2 approved
+cryptographic hash functions. The only SSHv2 hash algorithm meeting this
+requirement is SHA.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH daemon is configured to only use MACs employing FIPS
+140-2-approved ciphers.
+
+    Note: If RHEL-07-021350 is a finding, this is automatically a finding as
+the system cannot implement FIPS 140-2-approved cryptographic algorithms and
+hashes.
+
+    Check that the SSH daemon is configured to only use MACs employing FIPS
+140-2-approved ciphers with the following command:
+
+    # grep -i macs &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    MACs hmac-sha2-256,hmac-sha2-512
+
+    If any ciphers other than &quot;hmac-sha2-256&quot; or &quot;hmac-sha2-512&quot; are listed
+or the returned line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the line for the
+&quot;MACs&quot; keyword and set its value to &quot;hmac-sha2-256&quot; and&#x2F;or
+&quot;hmac-sha2-512&quot; (this file may be named differently or be in a different
+location if using a version of SSH that is provided by a third-party vendor):
+
+    MACs hmac-sha2-256,hmac-sha2-512
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72049"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72049"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72049</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72049
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must set the umask value
+to 077 for all local interactive user accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72049"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72049"
+            >
+              <!-- Result description -->
+              The umask controls the default access mode assigned to newly created
+files. A umask of 077 limits new files to mode 700 or less permissive. Although
+umask can be represented as a four-digit number, the first digit representing
+special access modes is typically ignored or required to be &quot;0&quot;. This
+requirement applies to the globally configured system defaults and the local
+interactive user defaults for each account on the system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No interactive user initialization files with a less restrictive umask were found. is expected to eq true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No users were found with a less restrictive umask were found. is expected to eq true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72049</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must set the umask value
+to 077 for all local interactive user accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The umask controls the default access mode assigned to newly created
+files. A umask of 077 limits new files to mode 700 or less permissive. Although
+umask can be represented as a four-digit number, the first digit representing
+special access modes is typically ignored or required to be &quot;0&quot;. This
+requirement applies to the globally configured system defaults and the local
+interactive user defaults for each account on the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that the default umask for all local interactive users is &quot;077&quot;.
+
+    Identify the locations of all local interactive user home directories by
+looking at the &quot;&#x2F;etc&#x2F;passwd&quot; file.
+
+    Check all local interactive user initialization files for interactive users
+with the following command:
+
+    Note: The example is for a system that is configured to create users home
+directories in the &quot;&#x2F;home&quot; directory.
+
+    # grep -i umask &#x2F;home&#x2F;*&#x2F;.*
+
+    If any local interactive user initialization files are found to have a
+umask statement that has a value less restrictive than &quot;077&quot;, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove the umask statement from all local interactive user&#39;s initialization
+files.
+
+    If the account is for an application, the requirement for a umask less
+restrictive than &quot;077&quot; can be documented with the Information System Security
+Officer, but the user agreement for access to the account must specify that the
+local interactive user must log on to their account first and then switch the
+user to the application account with the correct option to gain the account&#39;s
+environment variables.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72309"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72309"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72309</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72309
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not be performing
+packet forwarding unless the system is a router.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72309"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72309"
+            >
+              <!-- Result description -->
+              Routing protocol daemons are typically used on routers to exchange
+network topology information with other routers. If this software is used when
+not required, system network information may be unnecessarily transmitted
+across the network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.ip_forward value is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72309</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not be performing
+packet forwarding unless the system is a router.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Routing protocol daemons are typically used on routers to exchange
+network topology information with other routers. If this software is used when
+not required, system network information may be unnecessarily transmitted
+across the network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system is not performing packet forwarding, unless the system is
+a router.
+
+    # grep net.ipv4.ip_forward &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    net.ipv4.ip_forward &#x3D; 0
+
+    If &quot;net.ipv4.ip_forward&quot; is not configured in the &#x2F;etc&#x2F;sysctl.conf file
+or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or does not have a value
+of &quot;0&quot;, this is a finding.
+
+    Check that the operating system does not implement IP forwarding using the
+following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.ip_forward
+    net.ipv4.ip_forward &#x3D; 0
+
+    If IP forwarding value is &quot;1&quot; and the system is hosting any application,
+database, or web servers, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.ip_forward &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81003"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81003"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81003</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81003
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that &#x2F;etc&#x2F;pam.d&#x2F;passwd implements &#x2F;etc&#x2F;pam.d&#x2F;system-auth when changing
+passwords.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81003"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81003"
+            >
+              <!-- Result description -->
+              Pluggable authentication modules (PAM) allow for a modular approach to
+integrating authentication methods. PAM operates in a top-down processing model
+and if the modules are not listed in the correct order, an important security
+function could be bypassed if stack entries are not centralized.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;pam.d&#x2F;passwd substacks system-auth</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81003</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that &#x2F;etc&#x2F;pam.d&#x2F;passwd implements &#x2F;etc&#x2F;pam.d&#x2F;system-auth when changing
+passwords.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Pluggable authentication modules (PAM) allow for a modular approach to
+integrating authentication methods. PAM operates in a top-down processing model
+and if the modules are not listed in the correct order, an important security
+function could be bypassed if stack entries are not centralized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that &#x2F;etc&#x2F;pam.d&#x2F;passwd is configured to use &#x2F;etc&#x2F;pam.d&#x2F;system-auth
+when changing passwords:
+
+    # cat &#x2F;etc&#x2F;pam.d&#x2F;passwd | grep -i substack | grep -i system-auth
+    password     substack     system-auth
+
+    If no results are returned, the line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure PAM to utilize &#x2F;etc&#x2F;pam.d&#x2F;system-auth when changing passwords.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;pam.d&#x2F;passwd&quot; (or modify the line to have
+the required value):
+
+    password     substack    system-auth</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72021"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72021"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72021</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72021
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are group-owned by the home
+directory owners primary group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72021"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72021"
+            >
+              <!-- Result description -->
+              If the Group Identifier (GID) of a local interactive user&#39;s home
+directory is not the same as the primary GID of the user, this would allow
+unauthorized access to the user&#39;s files, and users that share the same group
+may not be able to access files that they legitimately should.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Home directories that are not group-owned by the user&#39;s primary GID is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72021</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are group-owned by the home
+directory owners primary group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the Group Identifier (GID) of a local interactive user&#39;s home
+directory is not the same as the primary GID of the user, this would allow
+unauthorized access to the user&#39;s files, and users that share the same group
+may not be able to access files that they legitimately should.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the assigned home directory of all local interactive users is
+group-owned by that user&#39;s primary GID.
+
+    Check the home directory assignment for all local interactive users on the
+system with the following command:
+
+    # ls -ld $(egrep &#39;:[0-9]{4}&#39; &#x2F;etc&#x2F;passwd | cut -d: -f6)
+
+    -rwxr-x--- 1 smithj users 18 Mar 5 17:06 &#x2F;home&#x2F;smithj
+
+    Check the user&#39;s primary group with the following command:
+
+    # grep users &#x2F;etc&#x2F;group
+
+    users:x:250:smithj,jonesj,jacksons
+
+    If the user home directory referenced in &quot;&#x2F;etc&#x2F;passwd&quot; is not group-owned
+by that user&#39;s primary GID, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the group owner of a local interactive user&#39;s home directory to the
+group found in &quot;&#x2F;etc&#x2F;passwd&quot;. To change the group owner of a local
+interactive user&#39;s home directory, use the following command:
+
+    Note: The example will be for the user &quot;smithj&quot;, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;, and has a primary group of users.
+
+    # chgrp users &#x2F;home&#x2F;smithj</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72183"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72183"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72183</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72183
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the crontab command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72183"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72183"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged commands. The organization must maintain audit trails in sufficient
+detail to reconstruct events to determine the cause and impact of compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;crontab&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;crontab&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72183</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the crontab command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged commands. The organization must maintain audit trails in sufficient
+detail to reconstruct events to determine the cause and impact of compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;crontab&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;bin&#x2F;crontab &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;crontab -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-cron
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;crontab&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;crontab -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-cron
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72083"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72083"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72083</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72083
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must off-load audit
+records onto a different system or media from the system being audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72083"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72083"
+            >
+              <!-- Result description -->
+              Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#39;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&#39; cannot be found. This test cannot be checked in a automated fashion and you must check it manually</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72083</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must off-load audit
+records onto a different system or media from the system being audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system off-loads audit records onto a different system
+or media from the system being audited.
+
+    To determine the remote server that the records are being sent to, use the
+following command:
+
+    # grep -i remote_server &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+    remote_server &#x3D; 10.0.21.1
+
+    If a remote server is not configured, or the line is commented out, ask the
+System Administrator to indicate how the audit logs are off-loaded to a
+different system or media.
+
+    If there is no evidence that the audit logs are being off-loaded to another
+system or media, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to off-load audit records onto a different
+system or media from the system being audited.
+
+    Set the remote server option in &quot;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&quot; with the
+IP address of the log aggregation server.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72245"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72245"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72245</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72245
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must display the date
+and time of the last successful account logon upon an SSH logon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72245"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72245"
+            >
+              <!-- Result description -->
+              Providing users with feedback on when account accesses via SSH last
+occurred facilitates user recognition and reporting of unauthorized account
+use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration PrintLastLog is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72245</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must display the date
+and time of the last successful account logon upon an SSH logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Providing users with feedback on when account accesses via SSH last
+occurred facilitates user recognition and reporting of unauthorized account
+use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify SSH provides users with feedback on when account accesses last
+occurred.
+
+    Check that &quot;PrintLastLog&quot; keyword in the sshd daemon configuration file
+is used and set to &quot;yes&quot; with the following command:
+
+    # grep -i printlastlog &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    PrintLastLog yes
+
+    If the &quot;PrintLastLog&quot; keyword is set to &quot;no&quot;, is missing, or is
+commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure SSH to provide users with feedback on when account accesses last
+occurred by setting the required configuration options in &quot;&#x2F;etc&#x2F;pam.d&#x2F;sshd&quot;
+or in the &quot;sshd_config&quot; file used by the system (&quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;
+will be used in the example) (this file may be named differently or be in a
+different location if using a version of SSH that is provided by a third-party
+vendor).
+
+    Modify the &quot;PrintLastLog&quot; line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; to match the
+following:
+
+    PrintLastLog yes
+
+    The SSH service must be restarted for changes to &quot;sshd_config&quot; to take
+effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71959"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71959"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71959</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71959
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not allow a
+non-certificate trusted host SSH logon to the system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71959"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71959"
+            >
+              <!-- Result description -->
+              Failure to restrict system access to authenticated users negatively
+impacts operating system security.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration HostbasedAuthentication is expected to eq &quot;no&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71959</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not allow a
+non-certificate trusted host SSH logon to the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Failure to restrict system access to authenticated users negatively
+impacts operating system security.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system does not allow a non-certificate trusted host
+SSH logon to the system.
+
+    Check for the value of the &quot;HostbasedAuthentication&quot; keyword with the
+following command:
+
+    # grep -i hostbasedauthentication &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    HostbasedAuthentication no
+
+    If the &quot;HostbasedAuthentication&quot; keyword is not set to &quot;no&quot;, is
+missing, or is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to not allow a non-certificate trusted host
+SSH logon to the system.
+
+    Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the line for
+&quot;HostbasedAuthentication&quot; keyword and set the value to &quot;no&quot;:
+
+    HostbasedAuthentication no
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72285"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72285"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72285</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72285
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not forward
+Internet Protocol version 4 (IPv4) source-routed packets by default.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72285"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72285"
+            >
+              <!-- Result description -->
+              Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv4
+forwarding is enabled and the system is functioning as a router.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.conf.default.accept_source_route value is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72285</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not forward
+Internet Protocol version 4 (IPv4) source-routed packets by default.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv4
+forwarding is enabled and the system is functioning as a router.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system does not accept IPv4 source-routed packets by default.
+
+    # grep net.ipv4.conf.default.accept_source_route &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+    net.ipv4.conf.default.accept_source_route &#x3D; 0
+
+    If &quot; net.ipv4.conf.default.accept_source_route &quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.conf.default.accept_source_route
+    net.ipv4.conf.default.accept_source_route &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.default.accept_source_route &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72025"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72025"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72025</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72025
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories are group-owned by a group of which the home directory owner is a
+member.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72025"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72025"
+            >
+              <!-- Result description -->
+              If a local interactive user&#39;s files are group-owned by a group of
+which the user is not a member, unintended users may be able to access them.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Home directory files with incorrect group ownership or not &#39;root&#39; owned is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72025</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories are group-owned by a group of which the home directory owner is a
+member.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a local interactive user&#39;s files are group-owned by a group of
+which the user is not a member, unintended users may be able to access them.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all files and directories in a local interactive user home directory
+are group-owned by a group the user is a member of.
+
+    Check the group owner of all files and directories in a local interactive
+user&#39;s home directory with the following command:
+
+    Note: The example will be for the user &quot;smithj&quot;, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # ls -lLR &#x2F;&lt;home directory&gt;&#x2F;&lt;users home directory&gt;&#x2F;
+    -rw-r--r-- 1 smithj smithj  18 Mar  5 17:06 file1
+    -rw-r--r-- 1 smithj smithj 193 Mar  5 17:06 file2
+    -rw-r--r-- 1 smithj sa        231 Mar  5 17:06 file3
+
+    If any files are found with an owner different than the group home
+directory user, check to see if the user is a member of that group with the
+following command:
+
+    # grep smithj &#x2F;etc&#x2F;group
+    sa:x:100:juan,shelley,bob,smithj
+    smithj:x:521:smithj
+
+    If the user is not a member of a group that group owns file(s) in a local
+interactive user&#39;s home directory, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the group of a local interactive user&#39;s files and directories to a
+group that the interactive user is a member of. To change the group owner of a
+local interactive user&#39;s files and directories, use the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot; and is a member of the users group.
+
+    # chgrp users &#x2F;home&#x2F;smithj&#x2F;&lt;file&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72187"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72187"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72187</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72187
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the init_module syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72187"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72187"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;init_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;init_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;init_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;init_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72187</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the init_module syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;init_module&quot; syscall occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw init_module &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S init_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S init_module -k module-change
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;init_module&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;init_module&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S init_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S init_module -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72093"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72093"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72093</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72093
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must immediately notify
+the System Administrator (SA) and Information System Security Officer (ISSO)
+(at a minimum) when the threshold for the repository maximum audit record
+storage capacity is reached.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72093"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72093"
+            >
+              <!-- Result description -->
+              If security personnel are not notified immediately when the threshold
+for the repository maximum audit record storage capacity is reached, they are
+unable to expand the audit record storage capacity before records are lost.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Audit Daemon Config action_mail_acct is expected to cmp &#x3D;&#x3D; &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72093</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must immediately notify
+the System Administrator (SA) and Information System Security Officer (ISSO)
+(at a minimum) when the threshold for the repository maximum audit record
+storage capacity is reached.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If security personnel are not notified immediately when the threshold
+for the repository maximum audit record storage capacity is reached, they are
+unable to expand the audit record storage capacity before records are lost.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system immediately notifies the SA and ISSO (at a
+minimum) via email when the threshold for the repository maximum audit record
+storage capacity is reached.
+
+    Check what account the operating system emails when the threshold for the
+repository maximum audit record storage capacity is reached with the following
+command:
+
+    # grep -i action_mail_acct  &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+    action_mail_acct &#x3D; root
+
+    If the value of the &quot;action_mail_acct&quot; keyword is not set to &quot;root&quot; and
+other accounts for security personnel, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to immediately notify the SA and ISSO (at a
+minimum) when the threshold for the repository maximum audit record storage
+capacity is reached.
+
+    Uncomment or edit the &quot;action_mail_acct&quot; keyword in
+&quot;&#x2F;etc&#x2F;audit&#x2F;auditd.conf&quot; and set it to root and any other accounts associated
+with security personnel.
+
+    action_mail_acct &#x3D; root</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72201"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72201"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72201</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72201
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the renameat syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72201"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72201"
+            >
+              <!-- Result description -->
+              If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;renameat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;renameat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;renameat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;renameat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72201</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the renameat syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;renameat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw renameat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S renameat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S renameat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;renameat&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;renameat&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S renameat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S renameat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72035"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72035"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72035</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72035
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user initialization files executable search paths
+contain only paths that resolve to the users home directory.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72035"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72035"
+            >
+              <!-- Result description -->
+              The executable search path (typically the PATH environment variable)
+contains a list of directories for the shell to search to find executables. If
+this path includes the current working directory (other than the user&#39;s home
+directory), executables in these directories may be executed instead of system
+commands. This variable is formatted as a colon-separated list of directories.
+If there is an empty entry, such as a leading or trailing colon or two
+consecutive colons, this is interpreted as the current working directory. If
+deviations from the default system search path for the local interactive user
+are required, they must be documented with the Information System Security
+Officer (ISSO).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Initialization files that include executable search paths that include directories outside their home directories is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72035</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user initialization files executable search paths
+contain only paths that resolve to the users home directory.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The executable search path (typically the PATH environment variable)
+contains a list of directories for the shell to search to find executables. If
+this path includes the current working directory (other than the user&#39;s home
+directory), executables in these directories may be executed instead of system
+commands. This variable is formatted as a colon-separated list of directories.
+If there is an empty entry, such as a leading or trailing colon or two
+consecutive colons, this is interpreted as the current working directory. If
+deviations from the default system search path for the local interactive user
+are required, they must be documented with the Information System Security
+Officer (ISSO).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that all local interactive user initialization files&#39; executable
+search path statements do not contain statements that will reference a working
+directory other than the users&#39; home directory.
+
+    Check the executable search path statement for all local interactive user
+initialization files in the users&#39; home directory with the following commands:
+
+    Note: The example will be for the smithj user, which has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # grep -i path &#x2F;home&#x2F;smithj&#x2F;.*
+    &#x2F;home&#x2F;smithj&#x2F;.bash_profile:PATH&#x3D;$PATH:$HOME&#x2F;.local&#x2F;bin:$HOME&#x2F;bin
+    &#x2F;home&#x2F;smithj&#x2F;.bash_profile:export PATH
+
+    If any local interactive user initialization files have executable search
+path statements that include directories outside of their home directory, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the local interactive user initialization files to change any PATH
+variable statements that reference directories other than their home directory.
+
+    If a local interactive user requires path variables to reference a
+directory owned by the application, it must be documented with the ISSO.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71917"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71917"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71917</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71917
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed the number of repeating characters of the same
+character class must not be more than four characters.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71917"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71917"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf maxclassrepeat.to_i is expected to cmp &lt;&#x3D; 4</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71917</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed the number of repeating characters of the same
+character class must not be more than four characters.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;maxclassrepeat&quot; option sets the maximum number of allowed same
+consecutive characters in the same class in the new password.
+
+    Check for the value of the &quot;maxclassrepeat&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep maxclassrepeat &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    maxclassrepeat &#x3D; 4
+
+    If the value of &quot;maxclassrepeat&quot; is set to more than &quot;4&quot;, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to require the change of the number of
+repeating characters of the same character class when passwords are changed by
+setting the &quot;maxclassrepeat&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; conf (or modify
+the line to have the required value):
+
+    maxclassrepeat &#x3D; 4</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72225"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72225"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72225</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 1
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c
+2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001384
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001385
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001386
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001387
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001388
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72225
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as
+part of, remote access logon prompts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 1
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c
+2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001384
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001385
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001386
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001387
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001388
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72225"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72225"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before
+granting access to the publicly accessible operating system ensures privacy and
+security notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The SSHD Banner is set to the standard banner and has the correct text is expected to cmp &#x3D;&#x3D; &quot;YouareaccessingaU.S.Government(USG)InformationSystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS),youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: YouareaccessingaU.S.Government(USG)InformationSystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS),youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+     got: YouareaccessingaU.S.Government(USG)informationsystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS)youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The SSHD Banner is set to the standard limited banner and has the correct text is expected to cmp &#x3D;&#x3D; &quot;I&#39;veread&amp;consenttotermsinISuseragreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: I&#39;veread&amp;consenttotermsinISuseragreem&#39;t.
+     got: YouareaccessingaU.S.Government(USG)informationsystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS)youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72225</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as
+part of, remote access logon prompts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before
+granting access to the publicly accessible operating system ensures privacy and
+security notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a, AC-8 b, AC-8 c 1, AC-8 c 2, AC-8 c 2, AC-8 c
+2, AC-8 c 3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify any publicly accessible connection to the operating system displays
+the Standard Mandatory DoD Notice and Consent Banner before granting access to
+the system.
+
+    Check for the location of the banner file being used with the following
+command:
+
+    # grep -i banner &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    banner &#x2F;etc&#x2F;issue
+
+    This command will return the banner keyword and the name of the file that
+contains the ssh banner (in this case &quot;&#x2F;etc&#x2F;issue&quot;).
+
+    If the line is commented out, this is a finding.
+
+    View the file specified by the banner keyword to check that it matches the
+text of the Standard Mandatory DoD Notice and Consent Banner:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only. By using this IS (which includes any
+device attached to this IS), you consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+
+    If the system does not display a graphical logon banner or the banner does
+not match the Standard Mandatory DoD Notice and Consent Banner, this is a
+finding.
+
+    If the text in the file does not match the Standard Mandatory DoD Notice
+and Consent Banner, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to display the Standard Mandatory DoD Notice
+and Consent Banner before granting access to the system via the ssh.
+
+    Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment the banner keyword and
+configure it to point to a file that will contain the logon banner (this file
+may be named differently or be in a different location if using a version of
+SSH that is provided by a third-party vendor). An example configuration line is:
+
+    banner &#x2F;etc&#x2F;issue
+
+    Either create the file containing the banner or replace the text in the
+file with the Standard Mandatory DoD Notice and Consent Banner. The DoD
+required text is:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only. By using this IS (which includes any
+device attached to this IS), you consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72257"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72257"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72257</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72257
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH private host key files have mode 0640 or less permissive.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72257"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72257"
+            >
+              <!-- Result description -->
+              If an unauthorized user obtains the private SSH host key file, the
+host could be impersonated.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No files have a more permissive mode. is expected to eq true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72257</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH private host key files have mode 0640 or less permissive.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If an unauthorized user obtains the private SSH host key file, the
+host could be impersonated.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH private host key files have mode &quot;0640&quot; or less permissive.
+
+    The following command will find all SSH private key files on the system and
+list their modes:
+
+    # find &#x2F; -name &#39;*ssh_host*key&#39; | xargs ls -lL
+
+    -rw-r----- 1 root ssh_keys 668 Nov 28 06:43 ssh_host_dsa_key
+    -rw-r----- 1 root ssh_keys 582 Nov 28 06:43 ssh_host_key
+    -rw-r----- 1 root ssh_keys 887 Nov 28 06:43 ssh_host_rsa_key
+
+    If any file has a mode more permissive than &quot;0640&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the mode of SSH private host key files under &quot;&#x2F;etc&#x2F;ssh&quot; to
+&quot;0640&quot; with the following command:
+
+    # chmod 0640 &#x2F;path&#x2F;to&#x2F;file&#x2F;ssh_host*key</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72207"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72207"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72207</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72207
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the unlinkat syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72207"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72207"
+            >
+              <!-- Result description -->
+              If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;unlinkat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;unlinkat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;unlinkat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;unlinkat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72207</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the unlinkat syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unlinkat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw unlinkat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S unlinkat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S unlinkat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;unlinkat&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unlinkat&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S unlinkat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S unlinkat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72059"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72059"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72059</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72059
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that a separate file system is used for user home directories (such as &#x2F;home or
+an equivalent).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72059"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72059"
+            >
+              <!-- Result description -->
+              The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ec2-user with mountpoint &#x2F; is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ec2-user with mountpoint &#x2F; is expected not to match &#x2F;^\&#x2F;$&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&#x2F;&quot; not to match &#x2F;^\&#x2F;$&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;^\&#x2F;$&#x2F;
++&quot;&#x2F;&quot;
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72059</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that a separate file system is used for user home directories (such as &#x2F;home or
+an equivalent).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that a separate file system&#x2F;partition has been created for
+non-privileged local interactive user home directories.
+
+    Check the home directory assignment for all non-privileged users (those
+with a UID greater than 1000) on the system with the following command:
+
+    #cut -d: -f 1,3,6,7 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot; | tr &quot;:&quot;
+&quot;\t&quot;
+
+    adamsj &#x2F;home&#x2F;adamsj &#x2F;bin&#x2F;bash
+    jacksonm &#x2F;home&#x2F;jacksonm &#x2F;bin&#x2F;bash
+    smithj &#x2F;home&#x2F;smithj &#x2F;bin&#x2F;bash
+
+    The output of the command will give the directory&#x2F;partition that contains
+the home directories for the non-privileged users on the system (in this
+example, &#x2F;home) and users&#39; shell. All accounts with a valid shell (such as
+&#x2F;bin&#x2F;bash) are considered interactive users.
+
+    Check that a file system&#x2F;partition has been created for the non-privileged
+interactive users with the following command:
+
+    Note: The partition of &#x2F;home is used in the example.
+
+    # grep &#x2F;home &#x2F;etc&#x2F;fstab
+    UUID&#x3D;333ada18    &#x2F;home                   ext4    noatime,nobarrier,nodev  1
+2
+
+    If a separate entry for the file system&#x2F;partition that contains the
+non-privileged interactive users&#39; home directories does not exist, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Migrate the &quot;&#x2F;home&quot; directory onto a separate file
+system&#x2F;partition.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72113"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72113"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72113</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72113
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the fsetxattr syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72113"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72113"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fsetxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fsetxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fsetxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fsetxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72113</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the fsetxattr syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fsetxattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw fsetxattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fsetxattr&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fsetxattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72287"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72287"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72287</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72287
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not respond to
+Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP)
+echoes sent to a broadcast address.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72287"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72287"
+            >
+              <!-- Result description -->
+              Responding to broadcast (ICMP) echoes facilitates network mapping and
+provides a vector for amplification attacks.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.icmp_echo_ignore_broadcasts value is expected to eq 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72287</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not respond to
+Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP)
+echoes sent to a broadcast address.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Responding to broadcast (ICMP) echoes facilitates network mapping and
+provides a vector for amplification attacks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system does not respond to IPv4 ICMP echoes sent to a broadcast
+address.
+
+    # grep net.ipv4.icmp_echo_ignore_broadcasts &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot; net.ipv4.icmp_echo_ignore_broadcasts&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;1&quot;, this is a finding.
+
+    Check that the operating system implements the
+&quot;icmp_echo_ignore_broadcasts&quot; variable with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.icmp_echo_ignore_broadcasts
+    net.ipv4.icmp_echo_ignore_broadcasts &#x3D; 1
+
+    If the returned line does not have a value of &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.icmp_echo_ignore_broadcasts &#x3D; 1
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72013"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72013"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72013</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72013
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user accounts, upon creation, are assigned a home
+directory.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72013"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72013"
+            >
+              <!-- Result description -->
+              If local interactive users are not assigned a valid home directory,
+there is no place for the storage and control of files they should own.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >login.defs CREATE_HOME is expected to eq &quot;yes&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72013</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user accounts, upon creation, are assigned a home
+directory.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If local interactive users are not assigned a valid home directory,
+there is no place for the storage and control of files they should own.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all local interactive users on the system are assigned a home
+directory upon creation.
+
+    Check to see if the system is configured to create home directories for
+local interactive users with the following command:
+
+    # grep -i create_home &#x2F;etc&#x2F;login.defs
+    CREATE_HOME yes
+
+    If the value for &quot;CREATE_HOME&quot; parameter is not set to &quot;yes&quot;, the line
+is missing, or the line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to assign home directories to all new local
+interactive users by setting the &quot;CREATE_HOME&quot; parameter in
+&quot;&#x2F;etc&#x2F;login.defs&quot; to &quot;yes&quot; as follows.
+
+    CREATE_HOME yes</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72153"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72153"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72153</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72153
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the gpasswd command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72153"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72153"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;gpasswd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;gpasswd&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72153</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the gpasswd command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;gpasswd&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;gpasswd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;gpasswd -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-passwd
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;gpasswd&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;gpasswd -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71933"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71933"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71933</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71933
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that passwords are prohibited from reuse for a minimum of five generations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71933"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71933"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+a password in resisting attempts at guessing and brute-force attacks. If the
+information system or application allows the user to consecutively reuse their
+password when that password has exceeded its defined lifetime, the end result
+is a password that is not changed per policy requirements.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include password (required|requisite|sufficient) pam_(unix|pwhistory).so, any with arg remember &gt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71933</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that passwords are prohibited from reuse for a minimum of five generations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+a password in resisting attempts at guessing and brute-force attacks. If the
+information system or application allows the user to consecutively reuse their
+password when that password has exceeded its defined lifetime, the end result
+is a password that is not changed per policy requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (e), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system prohibits password reuse for a minimum of five
+generations.
+
+    Check for the value of the &quot;remember&quot; argument in
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and &quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; with the following
+command:
+
+    # grep -i remember &#x2F;etc&#x2F;pam.d&#x2F;system-auth &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+
+    password    requisite     pam_pwhistory.so use_authtok remember&#x3D;5 retry&#x3D;3
+
+    If the line containing the &quot;pam_pwhistory.so&quot; line does not have the
+&quot;remember&quot; module argument set, is commented out, or the value of the
+&quot;remember&quot; module argument is set to less than &quot;5&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to prohibit password reuse for a minimum of
+five generations.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; (or modify the line to have the required value):
+
+    password    requisite     pam_pwhistory.so use_authtok remember&#x3D;5 retry&#x3D;3
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81009"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81009"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81009</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001764
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81009
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the nodev option.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001764
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81009"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81009"
+            >
+              <!-- Result description -->
+              The &quot;nodev&quot; mount option causes the system to not interpret
+character or block special devices. Executing character or block special
+devices from untrusted file systems increases the opportunity for unprivileged
+users to attain unauthorized administrative access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Mount &#x2F;dev&#x2F;shm options is expected to include &quot;nodev&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81009</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the nodev option.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;nodev&quot; mount option causes the system to not interpret
+character or block special devices. Executing character or block special
+devices from untrusted file systems increases the opportunity for unprivileged
+users to attain unauthorized administrative access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that the &quot;nodev&quot; option is configured for &#x2F;dev&#x2F;shm:
+
+
+    # cat &#x2F;etc&#x2F;fstab | grep &#x2F;dev&#x2F;shm
+    tmpfs &#x2F;dev&#x2F;shm tmpfs defaults,nodev,nosuid,noexec 0 0
+
+    If any results are returned and the &quot;nodev&quot; option is not listed, this is
+a finding.
+
+    Verify &quot;&#x2F;dev&#x2F;shm&quot; is mounted with the &quot;nodev&quot; option:
+
+    # mount | grep &quot;&#x2F;dev&#x2F;shm&quot; | grep nodev
+
+    If no results are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system so that &#x2F;dev&#x2F;shm is mounted with the
+&quot;nodev&quot; option.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71965"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71965"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71965</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71965
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must uniquely identify
+and must authenticate organizational users (or processes acting on behalf of
+organizational users) using multifactor authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71965"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71965"
+            >
+              <!-- Result description -->
+              To assure accountability and prevent unauthenticated access,
+organizational users must be identified and authenticated to prevent potential
+misuse and compromise of the system.
+
+    Organizational users include organizational employees or individuals the
+organization deems to have equivalent status of employees (e.g., contractors).
+Organizational users (and processes acting on behalf of users) must be uniquely
+identified and authenticated to all accesses, except for the following:
+
+    1) Accesses explicitly identified and documented by the organization.
+Organizations document specific user actions that can be performed on the
+information system without identification or authentication;
+
+    and
+
+    2) Accesses that occur through authorized use of group authenticators
+without individual authentication. Organizations may require unique
+identification of individuals in group accounts (e.g., shared privilege
+accounts) or for detailed accountability of individual activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;authconfig --test | grep -i smartcard&#x60; stdout is expected to match &#x2F;use\sonly\ssmartcard\sfor\slogin\sis\senabled&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;SSSD smartcard support is disabled\n use only smartcard for login is disabled\n smartcard module &#x3D; \&quot;\&quot;\n smartcard removal action &#x3D; \&quot;\&quot;\n&quot; to match &#x2F;use\sonly\ssmartcard\sfor\slogin\sis\senabled&#x2F;
+Diff:
+@@ -1,2 +1,5 @@
+-&#x2F;use\sonly\ssmartcard\sfor\slogin\sis\senabled&#x2F;
++SSSD smartcard support is disabled
++ use only smartcard for login is disabled
++ smartcard module &#x3D; &quot;&quot;
++ smartcard removal action &#x3D; &quot;&quot;
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;authconfig --test | grep -i smartcard&#x60; stdout is expected to match &#x2F;smartcard\smodule\s&#x3D;\s&quot;.+&quot;&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;SSSD smartcard support is disabled\n use only smartcard for login is disabled\n smartcard module &#x3D; \&quot;\&quot;\n smartcard removal action &#x3D; \&quot;\&quot;\n&quot; to match &#x2F;smartcard\smodule\s&#x3D;\s&quot;.+&quot;&#x2F;
+Diff:
+@@ -1,2 +1,5 @@
+-&#x2F;smartcard\smodule\s&#x3D;\s&quot;.+&quot;&#x2F;
++SSSD smartcard support is disabled
++ use only smartcard for login is disabled
++ smartcard module &#x3D; &quot;&quot;
++ smartcard removal action &#x3D; &quot;&quot;
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;authconfig --test | grep -i smartcard&#x60; stdout is expected to match &#x2F;smartcard\sremoval\saction\s&#x3D;\s&quot;.+&quot;&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;SSSD smartcard support is disabled\n use only smartcard for login is disabled\n smartcard module &#x3D; \&quot;\&quot;\n smartcard removal action &#x3D; \&quot;\&quot;\n&quot; to match &#x2F;smartcard\sremoval\saction\s&#x3D;\s&quot;.+&quot;&#x2F;
+Diff:
+@@ -1,2 +1,5 @@
+-&#x2F;smartcard\sremoval\saction\s&#x3D;\s&quot;.+&quot;&#x2F;
++SSSD smartcard support is disabled
++ use only smartcard for login is disabled
++ smartcard module &#x3D; &quot;&quot;
++ smartcard removal action &#x3D; &quot;&quot;
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71965</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must uniquely identify
+and must authenticate organizational users (or processes acting on behalf of
+organizational users) using multifactor authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To assure accountability and prevent unauthenticated access,
+organizational users must be identified and authenticated to prevent potential
+misuse and compromise of the system.
+
+    Organizational users include organizational employees or individuals the
+organization deems to have equivalent status of employees (e.g., contractors).
+Organizational users (and processes acting on behalf of users) must be uniquely
+identified and authenticated to all accesses, except for the following:
+
+    1) Accesses explicitly identified and documented by the organization.
+Organizations document specific user actions that can be performed on the
+information system without identification or authentication;
+
+    and
+
+    2) Accesses that occur through authorized use of group authenticators
+without individual authentication. Organizations may require unique
+identification of individuals in group accounts (e.g., shared privilege
+accounts) or for detailed accountability of individual activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system requires multifactor authentication to uniquely
+identify organizational users using multifactor authentication.
+
+    Check to see if smartcard authentication is enforced on the system:
+
+    # authconfig --test | grep &quot;pam_pkcs11 is enabled&quot;
+
+    If no results are returned, this is a finding.
+
+    # authconfig --test | grep &quot;smartcard removal action&quot;
+
+    If &quot;smartcard removal action&quot; is blank, this is a finding.
+
+    # authconfig --test | grep &quot;smartcard module&quot;
+
+    If &quot;smartcard module&quot; is blank, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to require individuals to be authenticated
+with a multifactor authenticator.
+
+    Enable smartcard logons with the following commands:
+
+    # authconfig --enablesmartcard --smartcardaction&#x3D;0 --update
+    # authconfig --enablerequiresmartcard -update
+
+    Modify the &quot;&#x2F;etc&#x2F;pam_pkcs11&#x2F;pkcs11_eventmgr.conf&quot; file to uncomment the
+following line:
+
+    #&#x2F;usr&#x2F;X11R6&#x2F;bin&#x2F;xscreensaver-command -lock
+
+    Modify the &quot;&#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf&quot; file to use the cackey
+module if required.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72313"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72313"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72313</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72313
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  SNMP community strings on the Red Hat Enterprise Linux operating
+system must be changed from the default.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72313"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72313"
+            >
+              <!-- Result description -->
+              Whether active or not, default Simple Network Management Protocol
+(SNMP) community strings must be changed to maintain security. If the service
+is running with the default authenticators, anyone can gather data about the
+system and the network and use the information to potentially compromise the
+integrity of the system or network(s). It is highly recommended that SNMP
+version 3 user authentication and message encryption be used in place of the
+version 2 community strings.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The &#x60;snmpd.conf&#x60; does not exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72313</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SNMP community strings on the Red Hat Enterprise Linux operating
+system must be changed from the default.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Whether active or not, default Simple Network Management Protocol
+(SNMP) community strings must be changed to maintain security. If the service
+is running with the default authenticators, anyone can gather data about the
+system and the network and use the information to potentially compromise the
+integrity of the system or network(s). It is highly recommended that SNMP
+version 3 user authentication and message encryption be used in place of the
+version 2 community strings.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that a system using SNMP is not using default community strings.
+
+    Check to see if the &quot;&#x2F;etc&#x2F;snmp&#x2F;snmpd.conf&quot; file exists with the following
+command:
+
+    # ls -al &#x2F;etc&#x2F;snmp&#x2F;snmpd.conf
+     -rw-------   1 root root      52640 Mar 12 11:08 snmpd.conf
+
+    If the file does not exist, this is Not Applicable.
+
+    If the file does exist, check for the default community strings with the
+following commands:
+
+    # grep public &#x2F;etc&#x2F;snmp&#x2F;snmpd.conf
+    # grep private &#x2F;etc&#x2F;snmp&#x2F;snmpd.conf
+
+    If either of these commands returns any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the &quot;&#x2F;etc&#x2F;snmp&#x2F;snmpd.conf&quot; file exists, modify any lines
+that contain a community string value of &quot;public&quot; or &quot;private&quot; to another
+string value.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72029"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72029"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72029</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72029
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files for interactive users are owned by the home
+directory user or root.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72029"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72029"
+            >
+              <!-- Result description -->
+              Local initialization files are used to configure the user&#39;s shell
+environment upon logon. Malicious modification of these files could compromise
+accounts upon logon.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Files and Directories not owned by the user or root of the parent home directory is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72029</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files for interactive users are owned by the home
+directory user or root.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Local initialization files are used to configure the user&#39;s shell
+environment upon logon. Malicious modification of these files could compromise
+accounts upon logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the local initialization files of all local interactive users are
+group-owned by that user&#39;s primary Group Identifier (GID).
+
+    Check the home directory assignment for all non-privileged users on the
+system with the following command:
+
+    Note: The example will be for the smithj user, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot; and a primary group of &quot;users&quot;.
+
+    # cut -d: -f 1,4,6 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot;
+    smithj:1000:&#x2F;home&#x2F;smithj
+
+    # grep 1000 &#x2F;etc&#x2F;group
+    users:x:1000:smithj,jonesj,jacksons
+
+    Note: This may miss interactive users that have been assigned a privileged
+User Identifier (UID). Evidence of interactive use may be obtained from a
+number of log files containing system logon information.
+
+    Check the group owner of all local interactive user&#39;s initialization files
+with the following command:
+
+    # ls -al &#x2F;home&#x2F;smithj&#x2F;.[^.]* | more
+
+    -rwxr-xr-x 1 smithj users 896 Mar 10 2011 .profile
+    -rwxr-xr-x 1 smithj users 497 Jan 6 2007 .login
+    -rwxr-xr-x 1 smithj users 886 Jan 6 2007 .something
+
+    If all local interactive user&#39;s initialization files are not group-owned by
+that user&#39;s primary GID, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the owner of the local initialization files for interactive users to
+either the directory owner or root with the following command:
+
+    Note: The example will be for the smithj user, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # chown smithj &#x2F;home&#x2F;smithj&#x2F;.[^.]*</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72417"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72417"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72417</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (11)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001948
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72417
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must have the required
+        packages for multifactor authentication installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (11)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001948
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72417"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72417"
+            >
+              <!-- Result description -->
+              Using an authentication device, such as a CAC or token that is
+        separate from the information system, ensures that even if the information
+        system is compromised, that compromise will not affect credentials stored on
+        the authentication device.
+
+        Multifactor solutions that require devices separate from information
+        systems gaining access include, for example, hardware tokens providing
+        time-based or challenge-response authenticators and smart cards such as the
+        U.S. Government Personal Identity Verification card and the DoD Common Access
+        Card.
+
+        A privileged account is defined as an information system account with
+        authorizations of a privileged user.
+
+        Remote access is access to DoD nonpublic information systems by an
+        authorized user (or an information system) communicating through an external,
+        non-organization-controlled network. Remote access methods include, for
+        example, dial-up, broadband, and wireless.
+
+        This requirement only applies to components where this is specific to the
+        function of the device or has the concept of an organizational user (e.g., VPN,
+        proxy capability). This does not apply to authentication for the purpose of
+        configuring the device itself (management).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package nss-pam-ldapd&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package esc&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package pam_pkcs11&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package pam_krb5&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package opensc&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package pcsc-lite-ccid&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package gdm&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package authconfig-gtk&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package krb5-workstation&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package krb5-pkinit&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package pcsc-lite&#x60; is installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The package is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;System Package pcsc-lite-libs&#x60; is installed</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72417</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must have the required
+        packages for multifactor authentication installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Using an authentication device, such as a CAC or token that is
+        separate from the information system, ensures that even if the information
+        system is compromised, that compromise will not affect credentials stored on
+        the authentication device.
+
+        Multifactor solutions that require devices separate from information
+        systems gaining access include, for example, hardware tokens providing
+        time-based or challenge-response authenticators and smart cards such as the
+        U.S. Government Personal Identity Verification card and the DoD Common Access
+        Card.
+
+        A privileged account is defined as an information system account with
+        authorizations of a privileged user.
+
+        Remote access is access to DoD nonpublic information systems by an
+        authorized user (or an information system) communicating through an external,
+        non-organization-controlled network. Remote access methods include, for
+        example, dial-up, broadband, and wireless.
+
+        This requirement only applies to components where this is specific to the
+        function of the device or has the concept of an organizational user (e.g., VPN,
+        proxy capability). This does not apply to authentication for the purpose of
+        configuring the device itself (management).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (11), IA-2 (12), IA-2 (12), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system has the packages required for multifactor
+authentication installed.
+
+Check for the presence of the packages required to support multifactor
+authentication with the following commands:
+
+# yum list installed esc
+esc-1.1.0-26.el7.noarch.rpm
+
+# yum list installed pam_pkcs11
+pam_pkcs11-0.6.2-14.el7.noarch.rpm
+
+If the &quot;esc&quot; and &quot;pam_pkcs11&quot; packages are not installed, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to implement multifactor authentication by
+installing the required packages.
+
+Install the &quot;esc&quot; and &quot;pam_pkcs11&quot; packages on the system with the
+following command:
+
+# yum install esc pam_pkcs11</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73177"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73177"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73177</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-18 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-18 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001443
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001444
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73177
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all wireless network adapters are disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-18 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-18 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001443
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001444
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73177"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73177"
+            >
+              <!-- Result description -->
+              The use of wireless networking can introduce many different attack
+vectors into the organization&#39;s network. Common attack vectors such as
+malicious association and ad hoc networks will allow an attacker to spoof a
+wireless access point (AP), allowing validated systems to connect to the
+malicious AP and enabling the attacker to monitor and record network traffic.
+These malicious APs can also serve to create a man-in-the-middle attack or be
+used to create a denial of service to valid network resources.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;nmcli device&#x60; stdout.strip is expected not to match &#x2F;wifi connected&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73177</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all wireless network adapters are disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The use of wireless networking can introduce many different attack
+vectors into the organization&#39;s network. Common attack vectors such as
+malicious association and ad hoc networks will allow an attacker to spoof a
+wireless access point (AP), allowing validated systems to connect to the
+malicious AP and enabling the attacker to monitor and record network traffic.
+These malicious APs can also serve to create a man-in-the-middle attack or be
+used to create a denial of service to valid network resources.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-18 (1), AC-18 (1), SC-8, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that there are no wireless interfaces configured on the system.
+
+    This is N&#x2F;A for systems that do not have wireless network adapters.
+
+    Check for the presence of active wireless interfaces with the following
+command:
+
+    # nmcli device
+    DEVICE TYPE STATE
+    eth0 ethernet connected
+    wlp3s0 wifi disconnected
+    lo loopback unmanaged
+
+    If a wireless interface is configured and its use on the system is not
+documented with the Information System Security Officer (ISSO), this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to disable all wireless network interfaces with the
+following command:
+
+    #nmcli radio wifi off</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72027"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72027"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72027</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72027
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories have a mode of 0750 or less permissive.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72027"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72027"
+            >
+              <!-- Result description -->
+              If a local interactive user files have excessive permissions,
+unintended users may be able to access or modify them.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Home directories with excessive permissions is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72027</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories have a mode of 0750 or less permissive.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a local interactive user files have excessive permissions,
+unintended users may be able to access or modify them.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all files and directories contained in a local interactive user home
+directory, excluding local initialization files, have a mode of &quot;0750&quot;.
+
+    Check the mode of all non-initialization files in a local interactive user
+home directory with the following command:
+
+    Files that begin with a &quot;.&quot; are excluded from this requirement.
+
+    Note: The example will be for the user &quot;smithj&quot;, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # ls -lLR &#x2F;home&#x2F;smithj
+    -rwxr-x--- 1 smithj smithj  18 Mar  5 17:06 file1
+    -rwxr----- 1 smithj smithj 193 Mar  5 17:06 file2
+    -rw-r-x--- 1 smithj smithj 231 Mar  5 17:06 file3
+
+    If any files are found with a mode more permissive than &quot;0750&quot;, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the mode on files and directories in the local interactive user home
+directory with the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot; and is a member of the users group.
+
+    # chmod 0750 &#x2F;home&#x2F;smithj&#x2F;&lt;file&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72155"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72155"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72155</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72155
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the chage command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72155"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72155"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chage&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chage&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72155</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the chage command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chage&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;chage &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chage -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-passwd
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chage&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chage -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71905"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71905"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71905</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71905
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one lower-case character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71905"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71905"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf lcredit.to_i is expected to cmp &lt; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71905</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one lower-case character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: The value to require a number of lower-case characters to be set is
+expressed as a negative number in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;.
+
+    Check the value for &quot;lcredit&quot; in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with
+the following command:
+
+    # grep lcredit &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    lcredit &#x3D; -1
+
+    If the value of &quot;lcredit&quot; is not set to a negative value, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to require at least one lower-case character when
+creating or changing a password.
+
+    Add or modify the following line
+    in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;:
+
+    lcredit &#x3D; -1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72281"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72281"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72281</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72281
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  For Red Hat Enterprise Linux operating systems using DNS resolution,
+at least two name servers must be configured.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72281"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72281"
+            >
+              <!-- Result description -->
+              To provide availability for name resolution services, multiple
+redundant name servers are mandated. A failure in name resolution could lead to
+the failure of security functions requiring name resolution, which may include
+time synchronization, centralized authentication, and remote system logging.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system&#39;s nameservers: [&quot;nameserver 172.31.0.2&quot;] is expected not to equal nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The number of nameservers is expected to cmp &gt;&#x3D; 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 2
+     got: 1
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72281</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For Red Hat Enterprise Linux operating systems using DNS resolution,
+at least two name servers must be configured.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To provide availability for name resolution services, multiple
+redundant name servers are mandated. A failure in name resolution could lead to
+the failure of security functions requiring name resolution, which may include
+time synchronization, centralized authentication, and remote system logging.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine whether the system is using local or DNS name resolution with the
+following command:
+
+    # grep hosts &#x2F;etc&#x2F;nsswitch.conf
+    hosts:   files dns
+
+    If the DNS entry is missing from the host&#39;s line in the
+&quot;&#x2F;etc&#x2F;nsswitch.conf&quot; file, the &quot;&#x2F;etc&#x2F;resolv.conf&quot; file must be empty.
+
+    Verify the &quot;&#x2F;etc&#x2F;resolv.conf&quot; file is empty with the following command:
+
+    # ls -al &#x2F;etc&#x2F;resolv.conf
+    -rw-r--r--  1 root root        0 Aug 19 08:31 resolv.conf
+
+    If local host authentication is being used and the &quot;&#x2F;etc&#x2F;resolv.conf&quot;
+file is not empty, this is a finding.
+
+    If the DNS entry is found on the host&#39;s line of the &quot;&#x2F;etc&#x2F;nsswitch.conf&quot;
+file, verify the operating system is configured to use two or more name servers
+for DNS resolution.
+
+    Determine the name servers used by the system with the following command:
+
+    # grep nameserver &#x2F;etc&#x2F;resolv.conf
+    nameserver 192.168.1.2
+    nameserver 192.168.1.3
+
+    If less than two lines are returned that are not commented out, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to use two or more name servers for DNS
+resolution.
+
+    Edit the &quot;&#x2F;etc&#x2F;resolv.conf&quot; file to uncomment or add the two or more
+&quot;nameserver&quot; option lines with the IP address of local authoritative name
+servers. If local host resolution is being performed, the &quot;&#x2F;etc&#x2F;resolv.conf&quot;
+file must be empty. An empty &quot;&#x2F;etc&#x2F;resolv.conf&quot; file can be created as
+follows:
+
+    # echo -n &gt; &#x2F;etc&#x2F;resolv.conf
+
+    And then make the file immutable with the following command:
+
+    # chattr +i &#x2F;etc&#x2F;resolv.conf
+
+    If the &quot;&#x2F;etc&#x2F;resolv.conf&quot; file must be mutable, the required
+configuration must be documented with the Information System Security Officer
+(ISSO) and the file must be verified by the system file integrity tool.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-77825"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-77825"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-77825</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-77825
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must implement virtual
+address space randomization.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-77825"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-77825"
+            >
+              <!-- Result description -->
+              Address space layout randomization (ASLR) makes it more difficult for
+an attacker to predict the location of attack code he or she has introduced
+into a process&#39;s address space during an attempt at exploitation. Additionally,
+ASLR also makes it more difficult for an attacker to know the location of
+existing code in order to repurpose it using return-oriented programming (ROP)
+techniques.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter kernel.randomize_va_space value is expected to eq 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-77825</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must implement virtual
+address space randomization.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Address space layout randomization (ASLR) makes it more difficult for
+an attacker to predict the location of attack code he or she has introduced
+into a process&#39;s address space during an attempt at exploitation. Additionally,
+ASLR also makes it more difficult for an attacker to know the location of
+existing code in order to repurpose it using return-oriented programming (ROP)
+techniques.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system implements virtual address space randomization.
+
+    # grep kernel.randomize_va_space &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    kernel.randomize_va_space &#x3D; 2
+
+    If &quot;kernel.randomize_va_space&quot; is not configured in the &#x2F;etc&#x2F;sysctl.conf
+file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out or does not have a
+value of &quot;2&quot;, this is a finding.
+
+    Check that the operating system implements virtual address space
+randomization with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep kernel.randomize_va_space
+
+    kernel.randomize_va_space &#x3D; 2
+
+    If &quot;kernel.randomize_va_space&quot; does not have a value of &quot;2&quot;, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system implement virtual address space
+randomization.
+
+    Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a config file in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory
+(or modify the line to have the required value):
+
+    kernel.randomize_va_space &#x3D; 2
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-77821"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-77821"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-77821</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001958
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-77821
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the Datagram Congestion Control Protocol (DCCP) kernel module is disabled
+unless required.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001958
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-77821"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-77821"
+            >
+              <!-- Result description -->
+              Disabling DCCP protects the system against exploitation of any flaws
+in the protocol implementation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Module dccp is expected not to be loaded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Module dccp is expected to be blacklisted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-77821</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the Datagram Congestion Control Protocol (DCCP) kernel module is disabled
+unless required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disabling DCCP protects the system against exploitation of any flaws
+in the protocol implementation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system disables the ability to load the DCCP kernel
+module.
+
+    # grep -r dccp &#x2F;etc&#x2F;modprobe.d&#x2F;* | grep -i &quot;&#x2F;bin&#x2F;true&quot; | grep -v &quot;^#&quot;
+
+    install dccp &#x2F;bin&#x2F;true
+
+    If the command does not return any output, or the line is commented out,
+and use of DCCP is not documented with the Information System Security Officer
+(ISSO) as an operational requirement, this is a finding.
+
+    Verify the operating system disables the ability to use the DCCP kernel
+module.
+
+    Check to see if the DCCP kernel module is disabled with the following
+command:
+
+    # grep -i dccp &#x2F;etc&#x2F;modprobe.d&#x2F;* | grep -i &quot;blacklist&quot; | grep -v &quot;^#&quot;
+
+    blacklist dccp
+
+    If the command does not return any output or the output is not &quot;blacklist
+dccp&quot;, and use of the dccp kernel module is not documented with the
+Information System Security Officer (ISSO) as an operational requirement, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to disable the ability to use the DCCP
+kernel module.
+
+    Create a file under &quot;&#x2F;etc&#x2F;modprobe.d&quot; with the following command:
+
+    # touch &#x2F;etc&#x2F;modprobe.d&#x2F;dccp.conf
+
+    Add the following line to the created file:
+
+    install dccp &#x2F;bin&#x2F;true
+
+    Ensure that the DCCP module is blacklisted:
+
+    # vi &#x2F;etc&#x2F;modprobe.d&#x2F;blacklist.conf
+
+    Add or update the line:
+
+    blacklist dccp</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72019"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72019"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72019</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72019
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are owned by their respective
+users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72019"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72019"
+            >
+              <!-- Result description -->
+              If a local interactive user does not own their home directory,
+unauthorized users could access or modify the user&#39;s files, and the users may
+not be able to access their own files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Directory &#x2F;root is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Directory &#x2F;root owner is expected to eq &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Directory &#x2F;home&#x2F;ec2-user is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Directory &#x2F;home&#x2F;ec2-user owner is expected to eq &quot;ec2-user&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72019</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are owned by their respective
+users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a local interactive user does not own their home directory,
+unauthorized users could access or modify the user&#39;s files, and the users may
+not be able to access their own files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the assigned home directory of all local interactive users on the
+system exists.
+
+    Check the home directory assignment for all local interactive users on the
+system with the following command:
+
+    # ls -ld $(egrep &#39;:[0-9]{4}&#39; &#x2F;etc&#x2F;passwd | cut -d: -f6)
+
+    -rwxr-x--- 1 smithj users 18 Mar 5 17:06 &#x2F;home&#x2F;smithj
+
+    If any home directories referenced in &quot;&#x2F;etc&#x2F;passwd&quot; are not owned by the
+interactive user, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the owner of a local interactive user&#39;s home directories to that
+owner. To change the owner of a local interactive user&#39;s home directory, use
+the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # chown smithj &#x2F;home&#x2F;smithj</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71925"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71925"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71925</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000198
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71925
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that passwords for new users are restricted to a 24 hours&#x2F;1 day minimum
+lifetime.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000198
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71925"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71925"
+            >
+              <!-- Result description -->
+              Enforcing a minimum password lifetime helps to prevent repeated
+password changes to defeat the password reuse or history enforcement
+requirement. If users are allowed to immediately and continually change their
+password, the password could be repeatedly changed in a short period of time to
+defeat the organization&#39;s policy regarding password reuse.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >login.defs PASS_MIN_DAYS.to_i is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71925</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that passwords for new users are restricted to a 24 hours&#x2F;1 day minimum
+lifetime.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enforcing a minimum password lifetime helps to prevent repeated
+password changes to defeat the password reuse or history enforcement
+requirement. If users are allowed to immediately and continually change their
+password, the password could be repeatedly changed in a short period of time to
+defeat the organization&#39;s policy regarding password reuse.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system enforces 24 hours&#x2F;1 day as the minimum password
+lifetime for new user accounts.
+
+    Check for the value of &quot;PASS_MIN_DAYS&quot; in &quot;&#x2F;etc&#x2F;login.defs&quot; with the
+following command:
+
+    # grep -i pass_min_days &#x2F;etc&#x2F;login.defs
+    PASS_MIN_DAYS     1
+
+    If the &quot;PASS_MIN_DAYS&quot; parameter value is not &quot;1&quot; or greater, or is
+commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to enforce 24 hours&#x2F;1 day as the minimum
+password lifetime.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;login.defs&quot; (or modify the line to have
+the required value):
+
+    PASS_MIN_DAYS     1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72247"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72247"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72247</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72247
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not permit direct
+logons to the root account using remote access via SSH.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72247"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72247"
+            >
+              <!-- Result description -->
+              Even though the communications channel may be encrypted, an additional
+layer of security is gained by extending the policy of not logging on directly
+as root. In addition, logging on with a user-specific account provides
+individual accountability of actions performed on the system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration PermitRootLogin is expected to cmp &#x3D;&#x3D; &quot;no&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72247</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not permit direct
+logons to the root account using remote access via SSH.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Even though the communications channel may be encrypted, an additional
+layer of security is gained by extending the policy of not logging on directly
+as root. In addition, logging on with a user-specific account provides
+individual accountability of actions performed on the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify remote access using SSH prevents users from logging on directly as
+root.
+
+    Check that SSH prevents users from logging on directly as root with the
+following command:
+
+    # grep -i permitrootlogin &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    PermitRootLogin no
+
+    If the &quot;PermitRootLogin&quot; keyword is set to &quot;yes&quot;, is missing, or is
+commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure SSH to stop users from logging on remotely as the root user.
+
+    Edit the appropriate  &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the
+line for the &quot;PermitRootLogin&quot; keyword and set its value to &quot;no&quot; (this file
+may be named differently or be in a different location if using a version of
+SSH that is provided by a third-party vendor):
+
+    PermitRootLogin no
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72091"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72091"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72091</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72091
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must immediately notify
+the System Administrator (SA) and Information System Security Officer (ISSO)
+(at a minimum) via email when the threshold for the repository maximum audit
+record storage capacity is reached.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72091"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72091"
+            >
+              <!-- Result description -->
+              If security personnel are not notified immediately when the threshold
+for the repository maximum audit record storage capacity is reached, they are
+unable to expand the audit record storage capacity before records are lost.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Audit Daemon Config space_left_action.downcase is expected to cmp &#x3D;&#x3D; &quot;email&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72091</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must immediately notify
+the System Administrator (SA) and Information System Security Officer (ISSO)
+(at a minimum) via email when the threshold for the repository maximum audit
+record storage capacity is reached.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If security personnel are not notified immediately when the threshold
+for the repository maximum audit record storage capacity is reached, they are
+unable to expand the audit record storage capacity before records are lost.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system immediately notifies the SA and ISSO (at a
+minimum) via email when the allocated audit record storage volume reaches 75
+percent of the repository maximum audit record storage capacity.
+
+    Check what action the operating system takes when the threshold for the
+repository maximum audit record storage capacity is reached with the following
+command:
+
+    # grep -i space_left_action  &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+    space_left_action &#x3D; email
+
+    If the value of the &quot;space_left_action&quot; keyword is not set to &quot;email&quot;,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to immediately notify the SA and ISSO (at a
+minimum) when the threshold for the repository maximum audit record storage
+capacity is reached.
+
+    Uncomment or edit the &quot;space_left_action&quot; keyword in
+&quot;&#x2F;etc&#x2F;audit&#x2F;auditd.conf&quot; and set it to &quot;email&quot;.
+
+    space_left_action &#x3D; email</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71963"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71963"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71963</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71963
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Red Hat Enterprise Linux operating systems prior to version 7.2 using
+Unified Extensible Firmware Interface (UEFI) must require authentication upon
+booting into single-user and maintenance modes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71963"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71963"
+            >
+              <!-- Result description -->
+              If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >EFI is not in use</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71963</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Red Hat Enterprise Linux operating systems prior to version 7.2 using
+Unified Extensible Firmware Interface (UEFI) must require authentication upon
+booting into single-user and maintenance modes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For systems that use BIOS, this is Not Applicable.
+    For systems that are running RHEL 7.2 or newer, this is Not Applicable.
+
+    Check to see if an encrypted root password is set. On systems that use
+UEFI, use the following command:
+
+    # grep -i password &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg
+
+    password_pbkdf2 [superusers-account] [password-hash]
+
+    If the root password entry does not begin with &quot;password_pbkdf2&quot;, this is
+a finding.
+
+    If the &quot;superusers-account&quot; is not set to &quot;root&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to encrypt the boot password for root.
+
+    Generate an encrypted grub2 password for root with the following command:
+
+    Note: The hash generated is an example.
+
+    # grub2-mkpasswd-pbkdf2
+
+    Enter Password:
+    Reenter Password:
+    PBKDF2 hash of your password is
+grub.pbkdf2.sha512.10000.F3A7CFAA5A51EED123BE8238C23B25B2A6909AFC9812F0D45
+
+    Edit &quot;&#x2F;etc&#x2F;grub.d&#x2F;40_custom&quot; and add the following lines below the
+comments:
+
+    # vi &#x2F;etc&#x2F;grub.d&#x2F;40_custom
+
+    set superusers&#x3D;&quot;root&quot;
+
+    password_pbkdf2 root {hash from grub2-mkpasswd-pbkdf2 command}
+
+    Generate a new &quot;grub.conf&quot; file with the new password with the following
+commands:
+
+    # grub2-mkconfig --output&#x3D;&#x2F;tmp&#x2F;grub2.cfg
+    # mv &#x2F;tmp&#x2F;grub2.cfg &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72427"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72427"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72427</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (11)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001948
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72427
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must implement
+  multifactor authentication for access to privileged accounts via pluggable
+  authentication modules (PAM).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (11)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001948
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72427"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72427"
+            >
+              <!-- Result description -->
+              Using an authentication device, such as a CAC or token that is
+  separate from the information system, ensures that even if the information
+  system is compromised, that compromise will not affect credentials stored on
+  the authentication device.
+
+      Multifactor solutions that require devices separate from information
+  systems gaining access include, for example, hardware tokens providing
+  time-based or challenge-response authenticators and smart cards such as the
+  U.S. Government Personal Identity Verification card and the DoD Common Access
+  Card.
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Remote access is access to DoD nonpublic information systems by an
+  authorized user (or an information system) communicating through an external,
+  non-organization-controlled network. Remote access methods include, for
+  example, dial-up, broadband, and wireless.
+
+      This requirement only applies to components where this is specific to the
+  function of the device or has the concept of an organizational user (e.g., VPN,
+  proxy capability). This does not apply to authentication for the purpose of
+  configuring the device itself (management).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;grep -i -E &#39;services( )*&#x3D;( )*(.+*)pam&#39; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf&#x60; stdout.strip is expected to include &quot;pam&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72427</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must implement
+  multifactor authentication for access to privileged accounts via pluggable
+  authentication modules (PAM).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Using an authentication device, such as a CAC or token that is
+  separate from the information system, ensures that even if the information
+  system is compromised, that compromise will not affect credentials stored on
+  the authentication device.
+
+      Multifactor solutions that require devices separate from information
+  systems gaining access include, for example, hardware tokens providing
+  time-based or challenge-response authenticators and smart cards such as the
+  U.S. Government Personal Identity Verification card and the DoD Common Access
+  Card.
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Remote access is access to DoD nonpublic information systems by an
+  authorized user (or an information system) communicating through an external,
+  non-organization-controlled network. Remote access methods include, for
+  example, dial-up, broadband, and wireless.
+
+      This requirement only applies to components where this is specific to the
+  function of the device or has the concept of an organizational user (e.g., VPN,
+  proxy capability). This does not apply to authentication for the purpose of
+  configuring the device itself (management).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (11), IA-2 (12), IA-2 (12), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system implements multifactor authentication for
+remote access to privileged accounts via pluggable authentication modules (PAM).
+
+    Check the &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot; file for the authentication services that
+are being used with the following command:
+
+    # grep services &#x2F;etc&#x2F;sssd&#x2F;sssd.conf &#x2F;etc&#x2F;sssd&#x2F;conf.d&#x2F;*.conf
+
+    services &#x3D; nss, pam
+
+    If the &quot;pam&quot; service is not present on all &quot;services&quot; lines, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to implement multifactor authentication for
+remote access to privileged accounts via pluggable authentication modules (PAM).
+
+    Modify all of the services lines in &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot; or in
+configuration files found under &quot;&#x2F;etc&#x2F;sssd&#x2F;conf.d&quot; to include pam.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72221"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72221"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72221</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72221
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must use a FIPS 140-2
+approved cryptographic algorithm for SSH communications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72221"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72221"
+            >
+              <!-- Result description -->
+              Unapproved mechanisms that are used for authentication to the
+cryptographic module are not verified and therefore cannot be relied upon to
+provide confidentiality or integrity, and DoD data may be compromised.
+
+    Operating systems utilizing encryption are required to use FIPS-compliant
+mechanisms for authenticating to cryptographic modules.
+
+    FIPS 140-2 is the current standard for validating that mechanisms used to
+access cryptographic modules utilize authentication that meets DoD
+requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a
+general purpose computing system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;aes128-ctr&quot;, &quot;aes192-ctr&quot;, &quot;aes256-ctr&quot;] is expected to be in &quot;aes128-ctr&quot;, &quot;aes192-ctr&quot;, and &quot;aes256-ctr&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72221</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must use a FIPS 140-2
+approved cryptographic algorithm for SSH communications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unapproved mechanisms that are used for authentication to the
+cryptographic module are not verified and therefore cannot be relied upon to
+provide confidentiality or integrity, and DoD data may be compromised.
+
+    Operating systems utilizing encryption are required to use FIPS-compliant
+mechanisms for authenticating to cryptographic modules.
+
+    FIPS 140-2 is the current standard for validating that mechanisms used to
+access cryptographic modules utilize authentication that meets DoD
+requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a
+general purpose computing system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2), CM-6 b, IA-7, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system uses mechanisms meeting the requirements of
+applicable federal laws, Executive orders, directives, policies, regulations,
+standards, and guidance for authentication to a cryptographic module.
+
+    Note: If RHEL-07-021350 is a finding, this is automatically a finding as
+the system cannot implement FIPS 140-2-approved cryptographic algorithms and
+hashes.
+
+    The location of the &quot;sshd_config&quot; file may vary if a different daemon is
+in use.
+
+    Inspect the &quot;Ciphers&quot; configuration with the following command:
+
+    # grep -i ciphers &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    Ciphers aes128-ctr,aes192-ctr,aes256-ctr
+
+    If any ciphers other than &quot;aes128-ctr&quot;, &quot;aes192-ctr&quot;, or &quot;aes256-ctr&quot;
+are listed, the &quot;Ciphers&quot; keyword is missing, or the returned line is
+commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure SSH to use FIPS 140-2 approved cryptographic algorithms.
+
+    Add the following line (or modify the line to have the required value) to
+the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file (this file may be named differently or be in
+a different location if using a version of SSH that is provided by a
+third-party vendor).
+
+    Ciphers aes128-ctr,aes192-ctr,aes256-ctr
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72131"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72131"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72131</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72131
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the truncate syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72131"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72131"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72131</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the truncate syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;truncate&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw truncate &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S truncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S truncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S truncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S truncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;truncate&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;truncate&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S truncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S truncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S truncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S truncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72199"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72199"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72199</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72199
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the rename syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72199"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72199"
+            >
+              <!-- Result description -->
+              If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;rename&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;rename&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;rename&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;rename&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72199</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the rename syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;rename&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw rename &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S rename -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S rename -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;rename&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;rename&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S rename -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S rename -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72233"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72233"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72233</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72233
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all networked systems have SSH installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72233"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72233"
+            >
+              <!-- Result description -->
+              Without protection of the transmitted information, confidentiality and
+integrity may be compromised because unprotected communications can be
+intercepted and either read or altered.
+
+    This requirement applies to both internal and external networks and all
+types of information system components from which information can be
+transmitted (e.g., servers, mobile devices, notebook computers, printers,
+copiers, scanners, and facsimile machines). Communication paths outside the
+physical protection of a controlled boundary are exposed to the possibility of
+interception and modification.
+
+    Protecting the confidentiality and integrity of organizational information
+can be accomplished by physical means (e.g., employing physical distribution
+systems) or by logical means (e.g., employing cryptographic techniques). If
+physical means of protection are employed, logical means (cryptography) do not
+have to be employed, and vice versa.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package openssh-server is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package openssh-clients is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72233</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all networked systems have SSH installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without protection of the transmitted information, confidentiality and
+integrity may be compromised because unprotected communications can be
+intercepted and either read or altered.
+
+    This requirement applies to both internal and external networks and all
+types of information system components from which information can be
+transmitted (e.g., servers, mobile devices, notebook computers, printers,
+copiers, scanners, and facsimile machines). Communication paths outside the
+physical protection of a controlled boundary are exposed to the possibility of
+interception and modification.
+
+    Protecting the confidentiality and integrity of organizational information
+can be accomplished by physical means (e.g., employing physical distribution
+systems) or by logical means (e.g., employing cryptographic techniques). If
+physical means of protection are employed, logical means (cryptography) do not
+have to be employed, and vice versa.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8, SC-8 (2), SC-8 (1), SC-8 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check to see if sshd is installed with the following command:
+
+# yum list installed \*ssh\*
+libssh2.x86_64 1.4.3-8.el7 @anaconda&#x2F;7.1
+openssh.x86_64 6.6.1p1-11.el7 @anaconda&#x2F;7.1
+openssh-server.x86_64 6.6.1p1-11.el7 @anaconda&#x2F;7.1
+
+If the &quot;SSH server&quot; package is not installed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Install SSH packages onto the host with the following commands:
+
+# yum install openssh-server.x86_64</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72011"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72011"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72011</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72011
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive users have a home directory assigned in the
+&#x2F;etc&#x2F;passwd file.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72011"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72011"
+            >
+              <!-- Result description -->
+              If local interactive users are not assigned a valid home directory,
+there is no place for the storage and control of files they should own.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Directory &#x2F;root is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Directory &#x2F;home&#x2F;ec2-user is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72011</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive users have a home directory assigned in the
+&#x2F;etc&#x2F;passwd file.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If local interactive users are not assigned a valid home directory,
+there is no place for the storage and control of files they should own.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify local interactive users on the system have a home directory assigned.
+
+    Check for missing local interactive user home directories with the
+following command:
+
+    # pwck -r
+    user &#39;lp&#39;: directory &#39;&#x2F;var&#x2F;spool&#x2F;lpd&#39; does not exist
+    user &#39;news&#39;: directory &#39;&#x2F;var&#x2F;spool&#x2F;news&#39; does not exist
+    user &#39;uucp&#39;: directory &#39;&#x2F;var&#x2F;spool&#x2F;uucp&#39; does not exist
+    user &#39;smithj&#39;: directory &#39;&#x2F;home&#x2F;smithj&#39; does not exist
+
+    Ask the System Administrator (SA) if any users found without home
+directories are local interactive users. If the SA is unable to provide a
+response, check for users with a User Identifier (UID) of 1000 or greater with
+the following command:
+
+    # cut -d: -f 1,3 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{2}$|:[0-9]{1,2}$&quot;
+
+    If any interactive users do not have a home directory assigned, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Assign home directories to all local interactive users that
+currently do not have a home directory assigned.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71919"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71919"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71919</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71919
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the PAM system service is configured to store only encrypted
+representations of passwords.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71919"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71919"
+            >
+              <!-- Result description -->
+              Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include password sufficient pam_unix.so sha512</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include password .* pam_unix.so, all without args ^(md5|bigcrypt|sha256|blowfish)$</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71919</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the PAM system service is configured to store only encrypted
+representations of passwords.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the PAM system service is configured to store only encrypted
+representations of passwords. The strength of encryption that must be used to
+hash passwords for all accounts is SHA512.
+
+    Check that the system is configured to create SHA512 hashed passwords with
+the following command:
+
+    # grep password &#x2F;etc&#x2F;pam.d&#x2F;system-auth &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+
+    Outcome should look like following:
+    &#x2F;etc&#x2F;pam.d&#x2F;system-auth-ac:password    sufficient    pam_unix.so sha512
+shadow try_first_pass use_authtok
+    &#x2F;etc&#x2F;pam.d&#x2F;password-auth:password    sufficient    pam_unix.so sha512
+shadow try_first_pass use_authtok
+
+    If the &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and &quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot;
+configuration files allow for password hashes other than SHA512 to be used,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to store only SHA512 encrypted
+representations of passwords.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot;:
+    pam_unix.so sha512 shadow try_first_pass use_authtok
+
+    Add the following line in &quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot;:
+    pam_unix.so sha512 shadow try_first_pass use_authtok
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72165"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72165"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72165</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72165
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the newgrp command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72165"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72165"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;newgrp&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;newgrp&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72165</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the newgrp command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;newgrp&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;newgrp &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;newgrp -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;newgrp&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;newgrp -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72157"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72157"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72157</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72157
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the userhelper command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72157"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72157"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;userhelper&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;userhelper&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72157</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the userhelper command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;userhelper&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;sbin&#x2F;userhelper &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;userhelper -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-passwd
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;userhelper&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;userhelper -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73167"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73167"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73167</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73167
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;gshadow.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73167"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73167"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;gshadow&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;gshadow&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73167</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;gshadow.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;gshadow&quot;.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;gshadow &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;gshadow -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;gshadow&quot;.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;gshadow -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71955"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71955"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71955</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71955
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not allow an
+unrestricted logon to the system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71955"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71955"
+            >
+              <!-- Result description -->
+              Failure to restrict system access to authenticated users negatively
+impacts operating system security.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have GDM installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71955</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not allow an
+unrestricted logon to the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Failure to restrict system access to authenticated users negatively
+impacts operating system security.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system does not allow an unrestricted logon to the
+system via a graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check for the value of the &quot;TimedLoginEnable&quot; parameter in
+&quot;&#x2F;etc&#x2F;gdm&#x2F;custom.conf&quot; file with the following command:
+
+    # grep -i timedloginenable &#x2F;etc&#x2F;gdm&#x2F;custom.conf
+    TimedLoginEnable&#x3D;false
+
+    If the value of &quot;TimedLoginEnable&quot; is not set to &quot;false&quot;, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to not allow an unrestricted account to log
+on to the system via a graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Add or edit the line for the &quot;TimedLoginEnable&quot; parameter in the [daemon]
+section of the &quot;&#x2F;etc&#x2F;gdm&#x2F;custom.conf&quot; file to &quot;false&quot;:
+
+    [daemon]
+    TimedLoginEnable&#x3D;false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72151"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72151"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72151</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72151
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the unix_chkpwd command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72151"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72151"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72151</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the unix_chkpwd command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unix_chkpwd&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw &#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-passwd
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unix_chkpwd&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71987"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71987"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71987</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-2 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002617
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71987
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must remove all software
+components after updated versions have been installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-2 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002617
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71987"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71987"
+            >
+              <!-- Result description -->
+              Previous versions of software components that are not removed from the
+information system after updates have been installed may be exploited by
+adversaries. Some information technology products may remove older versions of
+software automatically from the information system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;yum.conf main.clean_requirements_on_remove is expected to match &#x2F;1|True|yes&#x2F;i</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71987</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must remove all software
+components after updated versions have been installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Previous versions of software components that are not removed from the
+information system after updates have been installed may be exploited by
+adversaries. Some information technology products may remove older versions of
+software automatically from the information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-2 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system removes all software components after updated
+versions have been installed.
+
+    Check if yum is configured to remove unneeded packages with the following
+command:
+
+    # grep -i clean_requirements_on_remove &#x2F;etc&#x2F;yum.conf
+    clean_requirements_on_remove&#x3D;1
+
+    If &quot;clean_requirements_on_remove&quot; is not set to &quot;1&quot;, &quot;True&quot;, or
+&quot;yes&quot;, or is not set in &quot;&#x2F;etc&#x2F;yum.conf&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to remove all software components after
+updated versions have been installed.
+
+    Set the &quot;clean_requirements_on_remove&quot; option to &quot;1&quot; in the
+&quot;&#x2F;etc&#x2F;yum.conf&quot; file:
+
+    clean_requirements_on_remove&#x3D;1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71909"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71909"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71909</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71909
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one special character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71909"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71909"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf ocredit.to_i is expected to cmp &lt; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71909</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one special character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system enforces password complexity by requiring that
+at least one special character be used.
+
+    Note: The value to require a number of special characters to be set is
+expressed as a negative number in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;.
+
+    Check the value for &quot;ocredit&quot; in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with
+the following command:
+
+    # grep ocredit &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    ocredit&#x3D;-1
+
+    If the value of &quot;ocredit&quot; is not set to a negative value, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to enforce password complexity by requiring
+that at least one special character be used by setting the &quot;ocredit&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; (or modify the
+line to have the required value):
+
+    ocredit &#x3D; -1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72085"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72085"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72085</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72085
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must encrypt the
+transfer of audit records off-loaded onto a different system or media from the
+system being audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72085"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72085"
+            >
+              <!-- Result description -->
+              Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72085</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must encrypt the
+transfer of audit records off-loaded onto a different system or media from the
+system being audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system encrypts audit records off-loaded onto a
+different system or media from the system being audited.
+
+    To determine if the transfer is encrypted, use the following command:
+
+    # grep -i enable_krb5 &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+    enable_krb5 &#x3D; yes
+
+    If the value of the &quot;enable_krb5&quot; option is not set to &quot;yes&quot; or the
+line is commented out, ask the System Administrator to indicate how the audit
+logs are off-loaded to a different system or media.
+
+    If there is no evidence that the transfer of the audit logs being
+off-loaded to another system or media is encrypted, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to encrypt the transfer of off-loaded audit
+records onto a different system or media from the system being audited.
+
+    Uncomment the &quot;enable_krb5&quot; option in &quot;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&quot;
+and set it with the following line:
+
+    enable_krb5 &#x3D; yes</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71859"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71859"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71859</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71859
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner before granting local or
+remote access to the system via a graphical user logon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71859"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71859"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The GNOME desktop is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71859</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner before granting local or
+remote access to the system via a graphical user logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system displays the Standard Mandatory DoD Notice and
+Consent Banner before granting access to the operating system via a graphical
+user logon.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check to see if the operating system displays a banner at the logon screen
+with the following command:
+
+    # grep banner-message-enable &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    banner-message-enable&#x3D;true
+
+    If &quot;banner-message-enable&quot; is set to &quot;false&quot; or is missing, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to display the Standard Mandatory DoD Notice
+and Consent Banner before granting access to the system.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Create a database to contain the system-wide graphical user logon settings
+(if it does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;01-banner-message
+
+    Add the following line to the [org&#x2F;gnome&#x2F;login-screen] section of the
+&quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;01-banner-message&quot;:
+
+    [org&#x2F;gnome&#x2F;login-screen]
+    banner-message-enable&#x3D;true
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81019"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81019"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81019</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81019
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must take appropriate
+action when the audisp-remote buffer is full.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81019"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81019"
+            >
+              <!-- Result description -->
+              Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    When the remote buffer is full, audit logs will not be collected and sent
+to the central log server.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audispd.conf overflow_action is expected to match &#x2F;syslog$|single$|halt$&#x2F;i</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81019</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must take appropriate
+action when the audisp-remote buffer is full.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    When the remote buffer is full, audit logs will not be collected and sent
+to the central log server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the audisp daemon is configured to take an appropriate action when
+the internal queue is full:
+
+    # grep &quot;overflow_action&quot; &#x2F;etc&#x2F;audisp&#x2F;audispd.conf
+
+    overflow_action &#x3D; syslog
+
+    If the &quot;overflow_action&quot; option is not &quot;syslog&quot;, &quot;single&quot;, or
+&quot;halt&quot;, or the line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the &#x2F;etc&#x2F;audisp&#x2F;audispd.conf file and add or update the
+&quot;overflow_action&quot; option:
+
+    overflow_action &#x3D; syslog
+
+    The audit daemon must be restarted for changes to take effect:
+
+    # service auditd restart</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-78999"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-78999"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-78999</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-78999
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the create_module syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-78999"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-78999"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;create_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;create_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;create_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;create_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-78999</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the create_module syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;create_module&quot; syscall occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw create_module &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S create_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S create_module -k module-change
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;create_module&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;create_module&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S create_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S create_module -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72241"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72241"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72241</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72241
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with SSH traffic terminate after a
+period of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72241"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72241"
+            >
+              <!-- Result description -->
+              Terminating an idle SSH session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle SSH session will also free
+up resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The release is 7.8</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72241</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with SSH traffic terminate after a
+period of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Terminating an idle SSH session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle SSH session will also free
+up resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10, AC-12, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system automatically terminates a user session after
+inactivity time-outs have expired.
+
+    Check for the value of the &quot;ClientAliveCountMax&quot; keyword with the
+following command:
+
+    # grep -i clientalivecount &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    ClientAliveCountMax 0
+
+    If &quot;ClientAliveCountMax&quot; is not set to &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to terminate automatically a user session
+after inactivity time-outs have expired or at shutdown.
+
+    Add the following line (or modify the line to have the required value) to
+the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file (this file may be named differently or be in
+a different location if using a version of SSH that is provided by a
+third-party vendor):
+
+    ClientAliveCountMax 0
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71849"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71849"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71849</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-6 (10)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001496
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002235
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71849
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the file permissions, ownership, and group membership of system files and
+commands match the vendor values.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-6 (10)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001496
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002235
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71849"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71849"
+            >
+              <!-- Result description -->
+              Discretionary access control is weakened if a user or group has access
+permissions to system files and directories greater than the default.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control consistently takes a long time to run and has been disabled
+    using the disable_slow_controls attribute.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71849</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the file permissions, ownership, and group membership of system files and
+commands match the vendor values.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Discretionary access control is weakened if a user or group has access
+permissions to system files and directories greater than the default.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, AU-9 (3), AC-3 (4), AC-6 (10), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the file permissions, ownership, and group membership of system
+files and commands match the vendor values.
+
+    Check the default file permissions, ownership, and group membership of
+system files and commands with the following command:
+
+    # for i in &#x60;rpm -Va | egrep -i &#39;^\.[M|U|G|.]{8}&#39; | cut -d &quot; &quot; -f4,5&#x60;;do
+for j in &#x60;rpm -qf $i&#x60;;do rpm -ql $j --dump | cut -d &quot; &quot; -f1,5,6,7 | grep
+$i;done;done
+
+    &#x2F;var&#x2F;log&#x2F;gdm 040755 root root
+    &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf 0100640 root root
+    &#x2F;usr&#x2F;bin&#x2F;passwd 0104755 root root
+
+    For each file returned, verify the current permissions, ownership, and
+group membership:
+    # ls -la &lt;filename&gt;
+
+    -rw-------. 1 root root 133 Jan 11 13:25 &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+
+    If the file is more permissive than the default permissions, this is a
+finding.
+
+    If the file is not owned by the default owner and is not documented with
+the Information System Security Officer (ISSO), this is a finding.
+
+    If the file is not a member of the default group and is not documented with
+the Information System Security Officer (ISSO), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the following command to determine which package owns the file:
+
+    # rpm -qf &lt;filename&gt;
+
+    Reset the user and group ownership of files within a package with the
+following command:
+
+    #rpm --setugids &lt;packagename&gt;
+
+
+    Reset the permissions of files within a package with the following command:
+
+    #rpm --setperms &lt;packagename&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72267"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72267"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72267</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72267
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow compression or only allows compression after
+successful authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72267"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72267"
+            >
+              <!-- Result description -->
+              If compression is allowed in an SSH connection prior to
+authentication, vulnerabilities in the compression software could result in
+compromise of the system from an unauthenticated connection, potentially with
+root privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration Compression is expected to cmp &#x3D;&#x3D; &quot;delayed&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72267</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow compression or only allows compression after
+successful authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If compression is allowed in an SSH connection prior to
+authentication, vulnerabilities in the compression software could result in
+compromise of the system from an unauthenticated connection, potentially with
+root privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH daemon performs compression after a user successfully
+authenticates.
+
+    Check that the SSH daemon performs compression after a user successfully
+authenticates with the following command:
+
+    # grep -i compression &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    Compression delayed
+
+    If the &quot;Compression&quot; keyword is set to &quot;yes&quot;, is missing, or the
+returned line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Uncomment the &quot;Compression&quot; keyword in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this
+file may be named differently or be in a different location if using a version
+of SSH that is provided by a third-party vendor) on the system and set the
+value to &quot;delayed&quot; or &quot;no&quot;:
+
+    Compression no
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72211"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72211"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72211</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72211
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the rsyslog daemon does not accept log messages from other servers unless
+the server is being used for log aggregation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72211"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72211"
+            >
+              <!-- Result description -->
+              Unintentionally running a rsyslog server accepting remote messages
+puts the system at increased risk. Malicious rsyslog messages sent to the
+server could exploit vulnerabilities in the server software itself, could
+introduce misleading information in to the system&#39;s logs, or could fill the
+system&#39;s storage leading to a Denial of Service.
+
+    If the system is intended to be a log aggregation server its use must be
+documented with the ISSO.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;etc&#x2F;rsyslog.conf content is expected to match &#x2F;\$ModLoad\s+imtcp.*\n?$&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;etc&#x2F;rsyslog.conf content is expected not to match &#x2F;^\$ModLoad\s+imtcp.*\n?$&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72211</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the rsyslog daemon does not accept log messages from other servers unless
+the server is being used for log aggregation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unintentionally running a rsyslog server accepting remote messages
+puts the system at increased risk. Malicious rsyslog messages sent to the
+server could exploit vulnerabilities in the server software itself, could
+introduce misleading information in to the system&#39;s logs, or could fill the
+system&#39;s storage leading to a Denial of Service.
+
+    If the system is intended to be a log aggregation server its use must be
+documented with the ISSO.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that the system is not accepting &quot;rsyslog&quot; messages from other
+systems unless it is documented as a log aggregation server.
+
+    Check the configuration of &quot;rsyslog&quot; with the following command:
+
+    # grep imtcp &#x2F;etc&#x2F;rsyslog.conf
+    $ModLoad imtcp
+    # grep imudp &#x2F;etc&#x2F;rsyslog.conf
+    $ModLoad imudp
+    # grep imrelp &#x2F;etc&#x2F;rsyslog.conf
+    $ModLoad imrelp
+
+    If any of the above modules are being loaded in the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot;
+file, ask to see the documentation for the system being used for log
+aggregation.
+
+    If the documentation does not exist, or does not specify the server as a
+log aggregation system, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; file to remove the &quot;ModLoad
+imtcp&quot;, &quot;ModLoad imudp&quot;, and &quot;ModLoad imrelp&quot; configuration lines, or
+document the system as being used for log aggregation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72239"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72239"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72239</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72239
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using RSA rhosts
+authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72239"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72239"
+            >
+              <!-- Result description -->
+              Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration RhostsRSAAuthentication is expected to cmp &#x3D;&#x3D; &quot;no&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72239</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using RSA rhosts
+authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the version of the operating system with the following command:
+
+    # cat &#x2F;etc&#x2F;redhat-release
+
+    If the release is 7.4 or newer this requirement is Not Applicable.
+
+    Verify the SSH daemon does not allow authentication using RSA rhosts
+authentication.
+
+    To determine how the SSH daemon&#39;s &quot;RhostsRSAAuthentication&quot; option is
+set, run the following command:
+
+    # grep RhostsRSAAuthentication &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    RhostsRSAAuthentication no
+
+    If the value is returned as &quot;yes&quot;, the returned line is commented out, or
+no output is returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the SSH daemon to not allow authentication using RSA rhosts
+authentication.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;, or uncomment the line
+and set the value to &quot;no&quot;:
+
+    RhostsRSAAuthentication no
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-77819"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-77819"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-77819</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (11)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001948
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-77819
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must uniquely identify
+and must authenticate users using multifactor authentication via a graphical
+user logon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (11)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001948
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-77819"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-77819"
+            >
+              <!-- Result description -->
+              To assure accountability and prevent unauthenticated access, users
+must be identified and authenticated to prevent potential misuse and compromise
+of the system.
+
+    Multifactor solutions that require devices separate from information
+systems gaining access include, for example, hardware tokens providing
+time-based or challenge-response authenticators and smart cards such as the
+U.S. Government Personal Identity Verification card and the DoD Common Access
+Card.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The GNOME desktop is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The pcsc-lite package is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The esc package is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-77819</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must uniquely identify
+and must authenticate users using multifactor authentication via a graphical
+user logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To assure accountability and prevent unauthenticated access, users
+must be identified and authenticated to prevent potential misuse and compromise
+of the system.
+
+    Multifactor solutions that require devices separate from information
+systems gaining access include, for example, hardware tokens providing
+time-based or challenge-response authenticators and smart cards such as the
+U.S. Government Personal Identity Verification card and the DoD Common Access
+Card.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (11), IA-2 (12), IA-2 (12)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system uniquely identifies and authenticates users
+using multifactor authentication via a graphical user logon.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Determine which profile the system database is using with the following
+command:
+
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Note: The example is using the database local for the system, so the path
+is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database other
+than local is being used.
+
+    # grep enable-smartcard-authentication &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+
+    enable-smartcard-authentication&#x3D;true
+
+    If &quot;enable-smartcard-authentication&quot; is set to &quot;false&quot; or the keyword
+is missing, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to uniquely identify and authenticate users
+using multifactor authentication via a graphical user logon.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example is using the database local for the system, so if the
+system is using another database in &quot;&#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user&quot;, the file
+should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-defaults
+
+    Edit &quot;[org&#x2F;gnome&#x2F;login-screen]&quot; and add or update the following line:
+    enable-smartcard-authentication&#x3D;true
+
+    Update the system databases:
+    # dconf update</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72101"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72101"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72101</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72101
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the lchown syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72101"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72101"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lchown&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lchown&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lchown&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;lchown&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72101</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the lchown syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-2 d, AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lchown&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw lchown &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S lchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;lchown&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S lchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72123"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72123"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72123</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72123
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the creat syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72123"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72123"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72123</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the creat syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;creat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw creat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S creat F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S creat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S creat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S creat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;creat&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;creat&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules:
+
+    -a always,exit -F arch&#x3D;b32 -S creat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S creat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S creat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S creat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72041"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72041"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72041</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72041
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that file systems containing user home directories are mounted to prevent files
+with the setuid and setgid bit set from being executed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72041"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72041"
+            >
+              <!-- Result description -->
+              The &quot;nosuid&quot; mount option causes the system to not execute setuid
+and setgid files with owner privileges. This option must be used for mounting
+any file system not containing approved setuid and setguid files. Executing
+files from untrusted file systems increases the opportunity for unprivileged
+users to attain unauthorized administrative access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Mount &#x2F;home options is expected to include &quot;nosuid&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected nil to include &quot;nosuid&quot;, but it does not respond to &#x60;include?&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72041</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that file systems containing user home directories are mounted to prevent files
+with the setuid and setgid bit set from being executed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;nosuid&quot; mount option causes the system to not execute setuid
+and setgid files with owner privileges. This option must be used for mounting
+any file system not containing approved setuid and setguid files. Executing
+files from untrusted file systems increases the opportunity for unprivileged
+users to attain unauthorized administrative access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify file systems that contain user home directories are mounted with the
+&quot;nosuid&quot; option.
+
+    Find the file system(s) that contain the user home directories with the
+following command:
+
+    Note: If a separate file system has not been created for the user home
+directories (user home directories are mounted under &quot;&#x2F;&quot;), this is not a
+finding as the &quot;nosuid&quot; option cannot be used on the &quot;&#x2F;&quot; system.
+
+    # cut -d: -f 1,3,6 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot;
+    smithj:1001:&#x2F;home&#x2F;smithj
+    thomasr:1002:&#x2F;home&#x2F;thomasr
+
+    Check the file systems that are mounted at boot time with the following
+command:
+
+    # more &#x2F;etc&#x2F;fstab
+
+    UUID&#x3D;a411dc99-f2a1-4c87-9e05-184977be8539 &#x2F;home   ext4
+rw,relatime,discard,data&#x3D;ordered,nosuid 0 2
+
+    If a file system found in &quot;&#x2F;etc&#x2F;fstab&quot; refers to the user home directory
+file system and it does not have the &quot;nosuid&quot; option set, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the &quot;&#x2F;etc&#x2F;fstab&quot; to use the &quot;nosuid&quot; option on
+file systems that contain user home directories.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71953"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71953"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71953</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71953
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not allow an
+unattended or automatic logon to the system via a graphical user interface.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71953"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71953"
+            >
+              <!-- Result description -->
+              Failure to restrict system access to authenticated users negatively
+impacts operating system security.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have GDM installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71953</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not allow an
+unattended or automatic logon to the system via a graphical user interface.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Failure to restrict system access to authenticated users negatively
+impacts operating system security.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system does not allow an unattended or automatic logon
+to the system via a graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check for the value of the &quot;AutomaticLoginEnable&quot; in the
+&quot;&#x2F;etc&#x2F;gdm&#x2F;custom.conf&quot; file with the following command:
+
+    # grep -i automaticloginenable &#x2F;etc&#x2F;gdm&#x2F;custom.conf
+    AutomaticLoginEnable&#x3D;false
+
+    If the value of &quot;AutomaticLoginEnable&quot; is not set to &quot;false&quot;, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to not allow an unattended or automatic
+logon to the system via a graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Add or edit the line for the &quot;AutomaticLoginEnable&quot; parameter in the
+[daemon] section of the &quot;&#x2F;etc&#x2F;gdm&#x2F;custom.conf&quot; file to &quot;false&quot;:
+
+    [daemon]
+    AutomaticLoginEnable&#x3D;false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71969"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71969"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71969</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71969
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have the ypserv
+package installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71969"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71969"
+            >
+              <!-- Result description -->
+              Removing the &quot;ypserv&quot; package decreases the risk of the accidental
+(or intentional) activation of NIS or NIS+ services.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package ypserv is expected not to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71969</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have the ypserv
+package installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Removing the &quot;ypserv&quot; package decreases the risk of the accidental
+(or intentional) activation of NIS or NIS+ services.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The NIS service provides an unencrypted authentication service that does
+not provide for the confidentiality and integrity of user passwords or the
+remote session.
+
+    Check to see if the &quot;ypserve&quot; package is installed with the following
+command:
+
+    # yum list installed ypserv
+
+    If the &quot;ypserv&quot; package is installed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to disable non-essential capabilities by
+removing the &quot;ypserv&quot; package from the system with the following command:
+
+    # yum remove ypserv</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72017"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72017"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72017</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72017
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories have mode 0750 or less
+permissive.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72017"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72017"
+            >
+              <!-- Result description -->
+              Excessive permissions on local interactive user home directories may
+allow unauthorized access to user files by other users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Home directories with excessive permissions is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72017</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories have mode 0750 or less
+permissive.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Excessive permissions on local interactive user home directories may
+allow unauthorized access to user files by other users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the assigned home directory of all local interactive users has a
+mode of &quot;0750&quot; or less permissive.
+
+    Check the home directory assignment for all non-privileged users on the
+system with the following command:
+
+    Note: This may miss interactive users that have been assigned a privileged
+User Identifier (UID). Evidence of interactive use may be obtained from a
+number of log files containing system logon information.
+
+    # ls -ld $(egrep &#39;:[0-9]{4}&#39; &#x2F;etc&#x2F;passwd | cut -d: -f6)
+    -rwxr-x--- 1 smithj users  18 Mar  5 17:06 &#x2F;home&#x2F;smithj
+
+    If home directories referenced in &quot;&#x2F;etc&#x2F;passwd&quot; do not have a mode of
+&quot;0750&quot; or less permissive, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the mode of interactive user&#39;s home directories to &quot;0750&quot;. To
+change the mode of a local interactive user&#39;s home directory, use the following
+command:
+
+    Note: The example will be for the user &quot;smithj&quot;.
+
+    # chmod 0750 &#x2F;home&#x2F;smithj</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72191"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72191"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72191</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72191
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the kmod command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72191"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72191"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;kmod&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;kmod&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72191</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the kmod command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;kmod&quot; command occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw kmod &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;usr&#x2F;bin&#x2F;kmod -p x -F auid!&#x3D;4294967295 -k module-change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;kmod&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;usr&#x2F;bin&#x2F;kmod -p x -F auid!&#x3D;4294967295 -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71903"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71903"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71903</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71903
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one upper-case character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71903"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71903"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf ucredit.to_i is expected to cmp &lt; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71903</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one upper-case character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: The value to require a number of upper-case characters to be set is
+expressed as a negative number in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;.
+
+    Check the value for &quot;ucredit&quot; in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with
+the following command:
+
+    # grep ucredit &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    ucredit &#x3D; -1
+
+    If the value of &quot;ucredit&quot; is not set to a negative value, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to enforce password complexity by requiring
+that at least one upper-case character be used by setting the &quot;ucredit&quot;
+option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; (or modify the
+line to have the required value):
+
+    ucredit &#x3D; -1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81021"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81021"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81021</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81021
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must label all
+off-loaded audit logs before sending them to the central log server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81021"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81021"
+            >
+              <!-- Result description -->
+              Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    When audit logs are not labeled before they are sent to a central log
+server, the audit data will not be able to be analyzed and tied back to the
+correct system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audispd.conf name_format is expected to match &#x2F;^hostname$|^fqd$|^numeric$&#x2F;i</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81021</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must label all
+off-loaded audit logs before sending them to the central log server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    When audit logs are not labeled before they are sent to a central log
+server, the audit data will not be able to be analyzed and tied back to the
+correct system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the audisp daemon is configured to label all off-loaded audit logs:
+
+    # grep &quot;name_format&quot; &#x2F;etc&#x2F;audisp&#x2F;audispd.conf
+
+    name_format &#x3D; hostname
+
+    If the &quot;name_format&quot; option is not &quot;hostname&quot;, &quot;fqd&quot;, or &quot;numeric&quot;,
+or the line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the &#x2F;etc&#x2F;audisp&#x2F;audispd.conf file and add or update the
+&quot;name_format&quot; option:
+
+    name_format &#x3D; hostname
+
+    The audit daemon must be restarted for changes to take effect:
+
+    # service auditd restart</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72051"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72051"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72051</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72051
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must have cron logging
+implemented.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72051"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72051"
+            >
+              <!-- Result description -->
+              Cron logging can be used to trace the successful or unsuccessful
+execution of cron jobs. It can also be used to spot intrusions into the use of
+the cron facility by unauthorized and malicious users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;grep cron &#x2F;etc&#x2F;rsyslog.conf&#x60; stdout.strip is expected to match &#x2F;^cron&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72051</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must have cron logging
+implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Cron logging can be used to trace the successful or unsuccessful
+execution of cron jobs. It can also be used to spot intrusions into the use of
+the cron facility by unauthorized and malicious users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that &quot;rsyslog&quot; is configured to log cron events.
+
+    Check the configuration of &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or
+&quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot; files for the cron facility with the following
+command:
+
+    Note: If another logging package is used, substitute the utility
+configuration file for &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or &quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot; files.
+
+    # grep cron &#x2F;etc&#x2F;rsyslog.conf  &#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf
+    cron.* &#x2F;var&#x2F;log&#x2F;cron.log
+
+    If the command does not return a response, check for cron logging all
+facilities by inspecting the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or &quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot;
+files.
+
+    Look for the following entry:
+
+    *.* &#x2F;var&#x2F;log&#x2F;messages
+
+    If &quot;rsyslog&quot; is not logging messages for the cron facility or all
+facilities, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure &quot;rsyslog&quot; to log all cron messages by adding or updating the
+following line to &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or a configuration file in the
+&#x2F;etc&#x2F;rsyslog.d&#x2F; directory:
+
+    cron.* &#x2F;var&#x2F;log&#x2F;cron.log</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72079"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72079"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72079</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000131
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72079
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that auditing is configured to produce records containing information to
+establish what type of events occurred, where the events occurred, the source
+of the events, and the outcome of the events. These audit records must also
+identify individual identities of group account users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000131
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72079"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72079"
+            >
+              <!-- Result description -->
+              Without establishing what type of events occurred, it would be
+difficult to establish, correlate, and investigate the events leading up to an
+outage or attack.
+
+    Audit record content that may be necessary to satisfy this requirement
+includes, for example, time stamps, source and destination addresses,
+user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications,
+filenames involved, and access control or flow control rules invoked.
+
+    Associating event types with detected events in the operating system audit
+logs provides a means of investigating an attack; recognizing resource
+utilization or capacity thresholds; or identifying an improperly configured
+operating system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72079</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that auditing is configured to produce records containing information to
+establish what type of events occurred, where the events occurred, the source
+of the events, and the outcome of the events. These audit records must also
+identify individual identities of group account users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without establishing what type of events occurred, it would be
+difficult to establish, correlate, and investigate the events leading up to an
+outage or attack.
+
+    Audit record content that may be necessary to satisfy this requirement
+includes, for example, time stamps, source and destination addresses,
+user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications,
+filenames involved, and access control or flow control rules invoked.
+
+    Associating event types with detected events in the operating system audit
+logs provides a means of investigating an attack; recognizing resource
+utilization or capacity thresholds; or identifying an improperly configured
+operating system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-2 d, AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system produces audit records containing information
+to establish when (date and time) the events occurred.
+
+    Check to see if auditing is active by issuing the following command:
+
+    # systemctl is-active auditd.service
+    active
+
+    If the &quot;auditd&quot; status is not active, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to produce audit records containing
+information to establish when (date and time) the events occurred.
+
+    Enable the auditd service with the following command:
+
+    # systemctl start auditd.service</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72219"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72219"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72219</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002314
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72219
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured to
+prohibit or restrict the use of functions, ports, protocols, and&#x2F;or services,
+as defined in the Ports, Protocols, and Services Management Component Local
+Service Assessment (PPSM CLSA) and vulnerability assessments.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002314
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72219"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72219"
+            >
+              <!-- Result description -->
+              In order to prevent unauthorized connection of devices, unauthorized
+transfer of information, or unauthorized tunneling (i.e., embedding of data
+types within data types), organizations must disable or restrict unused or
+unnecessary physical and logical ports&#x2F;protocols on information systems.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services provided by default may not be
+necessary to support essential organizational operations. Additionally, it is
+sometimes convenient to provide multiple services from a single component
+(e.g., VPN and IPS); however, doing so increases risk over limiting the
+services provided by any one component.
+
+    To support the requirements and principles of least functionality, the
+operating system must support the organizational requirements, providing only
+essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+services to only those required, authorized, and approved to conduct official
+business or to address authorized quality of life issues.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Firewalld zones are not specified. Check &#39;firewalld_zones&#39; input. is expected to equal false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected false
+     got true
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72219</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured to
+prohibit or restrict the use of functions, ports, protocols, and&#x2F;or services,
+as defined in the Ports, Protocols, and Services Management Component Local
+Service Assessment (PPSM CLSA) and vulnerability assessments.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In order to prevent unauthorized connection of devices, unauthorized
+transfer of information, or unauthorized tunneling (i.e., embedding of data
+types within data types), organizations must disable or restrict unused or
+unnecessary physical and logical ports&#x2F;protocols on information systems.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services provided by default may not be
+necessary to support essential organizational operations. Additionally, it is
+sometimes convenient to provide multiple services from a single component
+(e.g., VPN and IPS); however, doing so increases risk over limiting the
+services provided by any one component.
+
+    To support the requirements and principles of least functionality, the
+operating system must support the organizational requirements, providing only
+essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+services to only those required, authorized, and approved to conduct official
+business or to address authorized quality of life issues.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 b, AC-17 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Inspect the firewall configuration and running services to verify that it
+is configured to prohibit or restrict the use of functions, ports, protocols,
+and&#x2F;or services that are unnecessary or prohibited.
+
+    Check which services are currently active with the following command:
+
+    # firewall-cmd --list-all
+    public (default, active)
+      interfaces: enp0s3
+      sources:
+      services: dhcpv6-client dns http https ldaps rpc-bind ssh
+      ports:
+      masquerade: no
+      forward-ports:
+      icmp-blocks:
+      rich rules:
+
+    Ask the System Administrator for the site or program PPSM CLSA. Verify the
+services allowed by the firewall match the PPSM CLSA.
+
+    If there are additional ports, protocols, or services that are not in the
+PPSM CLSA, or there are ports, protocols, or services that are prohibited by
+the PPSM Category Assurance List (CAL), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Update the host&#39;s firewall settings and&#x2F;or running services to
+comply with the PPSM CLSA for the site or program and the PPSM CAL.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72235"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72235"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72235</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72235
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all networked systems use SSH for confidentiality and integrity of
+transmitted and received information as well as information during preparation
+for transmission.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72235"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72235"
+            >
+              <!-- Result description -->
+              Without protection of the transmitted information, confidentiality and
+integrity may be compromised because unprotected communications can be
+intercepted and either read or altered.
+
+    This requirement applies to both internal and external networks and all
+types of information system components from which information can be
+transmitted (e.g., servers, mobile devices, notebook computers, printers,
+copiers, scanners, and facsimile machines). Communication paths outside the
+physical protection of a controlled boundary are exposed to the possibility of
+interception and modification.
+
+    Protecting the confidentiality and integrity of organizational information
+can be accomplished by physical means (e.g., employing physical distribution
+systems) or by logical means (e.g., employing cryptographic techniques). If
+physical means of protection are employed, then logical means (cryptography) do
+not have to be employed, and vice versa.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service sshd.service is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72235</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all networked systems use SSH for confidentiality and integrity of
+transmitted and received information as well as information during preparation
+for transmission.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without protection of the transmitted information, confidentiality and
+integrity may be compromised because unprotected communications can be
+intercepted and either read or altered.
+
+    This requirement applies to both internal and external networks and all
+types of information system components from which information can be
+transmitted (e.g., servers, mobile devices, notebook computers, printers,
+copiers, scanners, and facsimile machines). Communication paths outside the
+physical protection of a controlled boundary are exposed to the possibility of
+interception and modification.
+
+    Protecting the confidentiality and integrity of organizational information
+can be accomplished by physical means (e.g., employing physical distribution
+systems) or by logical means (e.g., employing cryptographic techniques). If
+physical means of protection are employed, then logical means (cryptography) do
+not have to be employed, and vice versa.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8, SC-8 (2), SC-8 (1), SC-8 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify SSH is loaded and active with the following command:
+
+    # systemctl status sshd
+    sshd.service - OpenSSH server daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;sshd.service; enabled)
+    Active: active (running) since Tue 2015-11-17 15:17:22 EST; 4 weeks 0 days
+ago
+    Main PID: 1348 (sshd)
+    CGroup: &#x2F;system.slice&#x2F;sshd.service
+    1053 &#x2F;usr&#x2F;sbin&#x2F;sshd -D
+
+    If &quot;sshd&quot; does not show a status of &quot;active&quot; and &quot;running&quot;, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the SSH service to automatically start after reboot with the
+following command:
+
+    # systemctl enable sshd.service</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72279"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72279"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72279</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72279
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not contain
+shosts.equiv files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72279"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72279"
+            >
+              <!-- Result description -->
+              The shosts.equiv files are used to configure host-based authentication
+for the system via SSH. Host-based authentication is not sufficient for
+preventing unauthorized access to the system, as it does not require
+interactive identification and authentication of a connection request, or for
+the use of two-factor authentication.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -name shosts.equiv&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72279</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not contain
+shosts.equiv files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The shosts.equiv files are used to configure host-based authentication
+for the system via SSH. Host-based authentication is not sufficient for
+preventing unauthorized access to the system, as it does not require
+interactive identification and authentication of a connection request, or for
+the use of two-factor authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify there are no &quot;shosts.equiv&quot; files on the system.
+
+    Check the system for the existence of these files with the following
+command:
+
+    # find &#x2F; -name shosts.equiv
+
+    If any &quot;shosts.equiv&quot; files are found on the system, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove any found &quot;shosts.equiv&quot; files from the system.
+
+# rm &#x2F;[path]&#x2F;[to]&#x2F;[file]&#x2F;shosts.equiv</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72145"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72145"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72145</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72145
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must generate audit
+records for all unsuccessful account access events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-2 d
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000126
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72145"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72145"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;var&#x2F;run&#x2F;faillock&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;var&#x2F;run&#x2F;faillock&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72145</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must generate audit
+records for all unsuccessful account access events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-2 d, AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when unsuccessful
+account access events occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+commands:
+
+    # grep -i &#x2F;var&#x2F;run&#x2F;faillock &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;var&#x2F;run&#x2F;faillock -p wa -k logins
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when unsuccessful
+account access events occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;var&#x2F;run&#x2F;faillock -p wa -k logins
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-94843"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-94843"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-94843</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-94843
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the x86 Ctrl-Alt-Delete key sequence is disabled in the GUI.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-94843"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-94843"
+            >
+              <!-- Result description -->
+              A locally logged-on user who presses Ctrl-Alt-Delete, when at the
+console, can reboot the system. If accidentally pressed, as could happen in the
+case of a mixed OS environment, this can create the risk of short-term loss of
+availability of systems due to unintentional reboot. In the GNOME graphical
+environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is
+reduced because the user will be prompted before any action is taken.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have GNOME installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-94843</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the x86 Ctrl-Alt-Delete key sequence is disabled in the GUI.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A locally logged-on user who presses Ctrl-Alt-Delete, when at the
+console, can reboot the system. If accidentally pressed, as could happen in the
+case of a mixed OS environment, this can create the risk of short-term loss of
+availability of systems due to unintentional reboot. In the GNOME graphical
+environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is
+reduced because the user will be prompted before any action is taken.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system is not configured to reboot the system when
+Ctrl-Alt-Delete is pressed.
+
+    Check that the ctrl-alt-del.target is masked and not active in the GUI with
+the following command:
+
+    # grep logout &#x2F;etc&#x2F;dconf&#x2F;local.d&#x2F;*
+
+    logout&#x3D;&#39;&#39;
+
+    If &quot;logout&quot; is not set to use two single quotations, or is missing, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to disable the Ctrl-Alt-Delete sequence for the GUI
+with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-disable-CAD
+
+    Add the setting to disable the Ctrl-Alt-Delete sequence for GNOME:
+
+    [org&#x2F;gnome&#x2F;settings-daemon&#x2F;plugins&#x2F;media-keys]
+    logout&#x3D;&#39;&#39;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72249"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72249"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72249</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72249
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using known hosts
+authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72249"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72249"
+            >
+              <!-- Result description -->
+              Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration IgnoreUserKnownHosts is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72249</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using known hosts
+authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH daemon does not allow authentication using known hosts
+authentication.
+
+    To determine how the SSH daemon&#39;s &quot;IgnoreUserKnownHosts&quot; option is set,
+run the following command:
+
+    # grep -i IgnoreUserKnownHosts &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    IgnoreUserKnownHosts yes
+
+    If the value is returned as &quot;no&quot;, the returned line is commented out, or
+no output is returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the SSH daemon to not allow authentication using known hosts
+authentication.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;, or uncomment the line
+and set the value to &quot;yes&quot;:
+
+    IgnoreUserKnownHosts yes
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73159"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73159"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73159</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73159
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, pwquality
+must be used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73159"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73159"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks. &quot;pwquality&quot; enforces complex password construction
+configuration and has the ability to limit brute-force attacks on the system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;passwd] lines is expected to include password (required|requisite) pam_pwquality.so</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;passwd] lines is expected to include password (required|requisite) pam_pwquality.so, all with arg retry &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;passwd] lines is expected to include password (required|requisite) pam_pwquality.so, all with arg retry &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73159</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, pwquality
+must be used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks. &quot;pwquality&quot; enforces complex password construction
+configuration and has the ability to limit brute-force attacks on the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system uses &quot;pwquality&quot; to enforce the password
+complexity rules.
+
+    Check for the use of &quot;pwquality&quot; with the following command:
+
+    # cat &#x2F;etc&#x2F;pam.d&#x2F;system-auth | grep pam_pwquality
+
+    password required pam_pwquality.so retry&#x3D;3
+
+    If the command does not return an uncommented line containing the value
+&quot;pam_pwquality.so&quot;, this is a finding.
+
+    If the value of &quot;retry&quot; is set to &quot;0&quot; or greater than &quot;3&quot;, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to use &quot;pwquality&quot; to enforce password
+complexity rules.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; (or modify the line to
+have the required value):
+
+    password required pam_pwquality.so retry&#x3D;3
+
+    Note: The value of &quot;retry&quot; should be between &quot;1&quot; and &quot;3&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72057"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72057"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72057</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72057
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must disable Kernel core
+dumps unless needed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72057"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72057"
+            >
+              <!-- Result description -->
+              Kernel core dumps may contain the full contents of system memory at
+the time of the crash. Kernel core dumps may consume a considerable amount of
+disk space and may result in denial of service by exhausting the available
+space on the target file system partition.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service kdump.service is expected not to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72057</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must disable Kernel core
+dumps unless needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Kernel core dumps may contain the full contents of system memory at
+the time of the crash. Kernel core dumps may consume a considerable amount of
+disk space and may result in denial of service by exhausting the available
+space on the target file system partition.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that kernel core dumps are disabled unless needed.
+
+    Check the status of the &quot;kdump&quot; service with the following command:
+
+    # systemctl status kdump.service
+    kdump.service - Crash recovery kernel arming
+       Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;kdump.service; enabled)
+       Active: active (exited) since Wed 2015-08-26 13:08:09 EDT; 43min ago
+     Main PID: 1130 (code&#x3D;exited, status&#x3D;0&#x2F;SUCCESS)
+    kernel arming.
+
+    If the &quot;kdump&quot; service is active, ask the System Administrator if the use
+of the service is required and documented with the Information System Security
+Officer (ISSO).
+
+    If the service is active and is not documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If kernel core dumps are not required, disable the &quot;kdump&quot; service with
+the following command:
+
+    # systemctl disable kdump.service
+
+    If kernel core dumps are required, document the need with the ISSO.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72089"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72089"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72089</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72089
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must initiate an action
+to notify the System Administrator (SA) and Information System Security Officer
+ISSO, at a minimum, when allocated audit record storage volume reaches 75% of
+the repository maximum audit record storage capacity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72089"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72089"
+            >
+              <!-- Result description -->
+              If security personnel are not notified immediately when storage volume
+reaches 75 percent utilization, they are unable to plan for audit record
+storage capacity expansion.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Audit Daemon Config space_left.to_i is expected to be &gt;&#x3D; 7676</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72089</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must initiate an action
+to notify the System Administrator (SA) and Information System Security Officer
+ISSO, at a minimum, when allocated audit record storage volume reaches 75% of
+the repository maximum audit record storage capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If security personnel are not notified immediately when storage volume
+reaches 75 percent utilization, they are unable to plan for audit record
+storage capacity expansion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system initiates an action to notify the SA and ISSO
+(at a minimum) when allocated audit record storage volume reaches 75 percent of
+the repository maximum audit record storage capacity.
+
+    Check the system configuration to determine the partition the audit records
+are being written to with the following command:
+
+    # grep -iw log_file &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+    log_file &#x3D; &#x2F;var&#x2F;log&#x2F;audit&#x2F;audit.log
+
+    Check the size of the partition that audit records are written to (with the
+example being &quot;&#x2F;var&#x2F;log&#x2F;audit&#x2F;&quot;):
+
+    # df -h &#x2F;var&#x2F;log&#x2F;audit&#x2F;
+    0.9G &#x2F;var&#x2F;log&#x2F;audit
+
+    If the audit records are not being written to a partition specifically
+created for audit records (in this example &quot;&#x2F;var&#x2F;log&#x2F;audit&quot; is a separate
+partition), determine the amount of space other files in the partition are
+currently occupying with the following command:
+
+    # du -sh &lt;partition&gt;
+    1.8G &#x2F;var
+
+    Determine what the threshold is for the system to take action when 75
+percent of the repository maximum audit record storage capacity is reached:
+
+    # grep -iw space_left &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+    space_left &#x3D; 225
+
+    If the value of the &quot;space_left&quot; keyword is not set to 25 percent of the
+total partition size, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to initiate an action to notify the SA and
+ISSO (at a minimum) when allocated audit record storage volume reaches 75
+percent of the repository maximum audit record storage capacity.
+
+    Check the system configuration to determine the partition the audit records
+are being written to:
+
+    # grep -iw log_file &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+
+    Determine the size of the partition that audit records are written to (with
+the example being &quot;&#x2F;var&#x2F;log&#x2F;audit&#x2F;&quot;):
+
+    # df -h &#x2F;var&#x2F;log&#x2F;audit&#x2F;
+
+    Set the value of the &quot;space_left&quot; keyword in &quot;&#x2F;etc&#x2F;audit&#x2F;auditd.conf&quot;
+to 25 percent of the partition size.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72315"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72315"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72315</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72315
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system access control program
+must be configured to grant or deny system access to specific hosts and
+services.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72315"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72315"
+            >
+              <!-- Result description -->
+              If the systems access control program is not configured with
+appropriate rules for allowing and denying access to system network resources,
+services may be accessible to unauthorized hosts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Firewall Rules with services is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72315</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system access control program
+must be configured to grant or deny system access to specific hosts and
+services.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the systems access control program is not configured with
+appropriate rules for allowing and denying access to system network resources,
+services may be accessible to unauthorized hosts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the &quot;firewalld&quot; package is not installed, ask the System Administrator
+(SA) if another firewall application (such as iptables) is installed. If an
+application firewall is not installed, this is a finding.
+
+    Verify the system&#39;s access control program is configured to grant or deny
+system access to specific hosts.
+
+    Check to see if &quot;firewalld&quot; is active with the following command:
+
+    # systemctl status firewalld
+    firewalld.service - firewalld - dynamic firewall daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;firewalld.service; enabled)
+    Active: active (running) since Sun 2014-04-20 14:06:46 BST; 30s ago
+
+    If &quot;firewalld&quot; is active, check to see if it is configured to grant or
+deny access to specific hosts or services with the following commands:
+
+    # firewall-cmd --get-default-zone
+    public
+
+    # firewall-cmd --list-all --zone&#x3D;public
+    public (active)
+    target: default
+    icmp-block-inversion: no
+    interfaces: eth0
+    sources:
+    services: mdns ssh
+    ports:
+    protocols:
+    masquerade: no
+    forward-ports:
+    icmp-blocks:
+
+    If &quot;firewalld&quot; is not active, determine whether &quot;tcpwrappers&quot; is being
+used by checking whether the &quot;hosts.allow&quot; and &quot;hosts.deny&quot; files are empty
+with the following commands:
+
+    # ls -al &#x2F;etc&#x2F;hosts.allow
+    rw-r----- 1 root root 9 Aug 2 23:13 &#x2F;etc&#x2F;hosts.allow
+
+    # ls -al &#x2F;etc&#x2F;hosts.deny
+    -rw-r----- 1 root root 9 Apr 9 2007 &#x2F;etc&#x2F;hosts.deny
+
+    If &quot;firewalld&quot; and &quot;tcpwrappers&quot; are not installed, configured, and
+active, ask the SA if another access control program (such as iptables) is
+installed and active. Ask the SA to show that the running configuration grants
+or denies access to specific hosts or services.
+
+    If &quot;firewalld&quot; is active and is not configured to grant access to
+specific hosts or &quot;tcpwrappers&quot; is not configured to grant or deny access to
+specific hosts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If &quot;firewalld&quot; is installed and active on the system, configure rules for
+allowing specific services and hosts.
+
+    If &quot;firewalld&quot; is not &quot;active&quot;, enable &quot;tcpwrappers&quot; by configuring
+&quot;&#x2F;etc&#x2F;hosts.allow&quot; and &quot;&#x2F;etc&#x2F;hosts.deny&quot; to allow or deny access to
+specific hosts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72311"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72311"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72311</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72311
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the Network File System (NFS) is configured to use RPCSEC_GSS.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72311"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72311"
+            >
+              <!-- Result description -->
+              When an NFS server is configured to use RPCSEC_SYS, a selected userid
+and groupid are used to handle requests from the remote user. The userid and
+groupid could mistakenly or maliciously be set incorrectly. The RPCSEC_GSS
+method of authentication uses certificates on the server and client systems to
+more securely authenticate the remote mount request.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No NFS file systems were found. is expected to eq true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72311</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the Network File System (NFS) is configured to use RPCSEC_GSS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When an NFS server is configured to use RPCSEC_SYS, a selected userid
+and groupid are used to handle requests from the remote user. The userid and
+groupid could mistakenly or maliciously be set incorrectly. The RPCSEC_GSS
+method of authentication uses certificates on the server and client systems to
+more securely authenticate the remote mount request.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify &quot;AUTH_GSS&quot; is being used to authenticate NFS mounts.
+
+    To check if the system is importing an NFS file system, look for any
+entries in the &quot;&#x2F;etc&#x2F;fstab&quot; file that have a file system type of &quot;nfs&quot; with
+the following command:
+
+    # cat &#x2F;etc&#x2F;fstab | grep nfs
+    192.168.21.5:&#x2F;mnt&#x2F;export &#x2F;data1 nfs4 rw,sync ,soft,sec&#x3D;krb5:krb5i:krb5p
+
+    If the system is mounting file systems via NFS and has the sec option
+without the &quot;krb5:krb5i:krb5p&quot; settings, the &quot;sec&quot; option has the &quot;sys&quot;
+setting, or the &quot;sec&quot; option is missing, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Update the &quot;&#x2F;etc&#x2F;fstab&quot; file so the option &quot;sec&quot; is defined for each
+NFS mounted file system and the &quot;sec&quot; option does not have the &quot;sys&quot;
+setting.
+
+    Ensure the &quot;sec&quot; option is defined as &quot;krb5:krb5i:krb5p&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71975"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71975"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71975</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001744
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71975
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that designated personnel are notified if baseline configurations are changed
+in an unauthorized manner.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001744
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71975"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71975"
+            >
+              <!-- Result description -->
+              Unauthorized changes to the baseline configuration could make the
+system vulnerable to various attacks or allow unauthorized access to the
+operating system. Changes to operating system configurations can have
+unintended side effects, some of which may be relevant to security.
+
+    Detecting such changes and providing an automated response can help avoid
+unintended, negative consequences that could ultimately affect the security
+state of the operating system. The operating system&#39;s Information Management
+Officer (IMO)&#x2F;Information System Security Officer (ISSO) and System
+Administrators (SAs) must be notified via email and&#x2F;or monitoring system trap
+when there is an unauthorized modification of a configuration item.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package aide is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;etc&#x2F;cron.daily&#x2F;aide content is expected to match &#x2F;\&#x2F;bin\&#x2F;mail&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71975</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that designated personnel are notified if baseline configurations are changed
+in an unauthorized manner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized changes to the baseline configuration could make the
+system vulnerable to various attacks or allow unauthorized access to the
+operating system. Changes to operating system configurations can have
+unintended side effects, some of which may be relevant to security.
+
+    Detecting such changes and providing an automated response can help avoid
+unintended, negative consequences that could ultimately affect the security
+state of the operating system. The operating system&#39;s Information Management
+Officer (IMO)&#x2F;Information System Security Officer (ISSO) and System
+Administrators (SAs) must be notified via email and&#x2F;or monitoring system trap
+when there is an unauthorized modification of a configuration item.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 (5), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system notifies designated personnel if baseline
+configurations are changed in an unauthorized manner.
+
+    Note: A file integrity tool other than Advanced Intrusion Detection
+Environment (AIDE) may be used, but the tool must be executed and notify
+specified individuals via email or an alert.
+
+    Check to see if AIDE is installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the SA how file integrity checks are
+performed on the system.
+
+    Check for the presence of a cron job running routinely on the system that
+executes AIDE to scan for changes to the system baseline. The commands used in
+the example will use a daily occurrence.
+
+    Check the cron directories for a &quot;crontab&quot; script file controlling the
+execution of the file integrity application. For example, if AIDE is installed
+on the system, use the following command:
+
+    # ls -al &#x2F;etc&#x2F;cron.* | grep aide
+    -rwxr-xr-x 1 root root 32 Jul 1 2011 aide
+
+    # grep aide &#x2F;etc&#x2F;crontab &#x2F;var&#x2F;spool&#x2F;cron&#x2F;root
+    &#x2F;etc&#x2F;crontab: 30 04 * * * &#x2F;root&#x2F;aide
+    &#x2F;var&#x2F;spool&#x2F;cron&#x2F;root: 30 04 * * * &#x2F;root&#x2F;aide
+
+    AIDE does not have a configuration that will send a notification, so the
+cron job uses the mail application on the system to email the results of the
+file integrity run as in the following example:
+
+    # more &#x2F;etc&#x2F;cron.daily&#x2F;aide
+    #!&#x2F;bin&#x2F;bash
+
+    &#x2F;usr&#x2F;sbin&#x2F;aide --check | &#x2F;bin&#x2F;mail -s &quot;$HOSTNAME - Daily aide integrity
+check run&quot; root@sysname.mil
+
+    If the file integrity application does not notify designated personnel of
+changes, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to notify designated personnel if baseline
+configurations are changed in an unauthorized manner. The AIDE tool can be
+configured to email designated personnel with the use of the cron system.
+
+    The following example output is generic. It will set cron to run AIDE daily
+and to send email at the completion of the analysis.
+
+    # more &#x2F;etc&#x2F;cron.daily&#x2F;aide
+
+    &#x2F;usr&#x2F;sbin&#x2F;aide --check | &#x2F;bin&#x2F;mail -s &quot;$HOSTNAME - Daily aide integrity
+check run&quot; root@sysname.mil</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71983"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71983"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71983</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000778
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001958
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71983
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured to
+disable USB mass storage.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000778
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001958
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71983"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71983"
+            >
+              <!-- Result description -->
+              USB mass storage permits easy introduction of unknown devices, thereby
+facilitating malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Module usb_storage is expected not to be loaded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Module usb_storage is expected to be blacklisted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71983</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured to
+disable USB mass storage.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >USB mass storage permits easy introduction of unknown devices, thereby
+facilitating malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, IA-3, IA-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If there is an HBSS with a Device Control Module and a Data Loss Prevention
+mechanism, this requirement is not applicable.
+
+    Verify the operating system disables the ability to load the USB Storage
+kernel module.
+
+    # grep -r usb-storage &#x2F;etc&#x2F;modprobe.d&#x2F;* | grep -i &quot;&#x2F;bin&#x2F;true&quot; | grep -v
+&quot;^#&quot;
+
+    install usb-storage &#x2F;bin&#x2F;true
+
+    If the command does not return any output, or the line is commented out,
+and use of USB Storage is not documented with the Information System Security
+Officer (ISSO) as an operational requirement, this is a finding.
+
+    Verify the operating system disables the ability to use USB mass storage
+devices.
+
+    Check to see if USB mass storage is disabled with the following command:
+
+    # grep usb-storage &#x2F;etc&#x2F;modprobe.d&#x2F;* | grep -i &quot;blacklist&quot; | grep -v
+&quot;^#&quot;
+    blacklist usb-storage
+
+    If the command does not return any output or the output is not &quot;blacklist
+usb-storage&quot;, and use of USB storage devices is not documented with the
+Information System Security Officer (ISSO) as an operational requirement, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to disable the ability to use the USB
+Storage kernel module.
+
+    Create a file under &quot;&#x2F;etc&#x2F;modprobe.d&quot; with the following command:
+
+    # touch &#x2F;etc&#x2F;modprobe.d&#x2F;usb-storage.conf
+
+    Add the following line to the created file:
+
+    install usb-storage &#x2F;bin&#x2F;true
+
+    Configure the operating system to disable the ability to use USB mass
+storage devices.
+
+    # vi &#x2F;etc&#x2F;modprobe.d&#x2F;blacklist.conf
+
+    Add or update the line:
+
+    blacklist usb-storage</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72135"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72135"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72135</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72135
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the semanage command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72135"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72135"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;semanage&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;semanage&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72135</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the semanage command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;semanage&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;sbin&#x2F;semanage &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;semanage -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-priv_change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;semanage&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;semanage -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72291"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72291"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72291</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72291
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not allow
+interfaces to perform Internet Protocol version 4 (IPv4) Internet Control
+Message Protocol (ICMP) redirects by default.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72291"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72291"
+            >
+              <!-- Result description -->
+              ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages contain
+information from the system&#39;s route table, possibly revealing portions of the
+network topology.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.conf.default.send_redirects value is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72291</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not allow
+interfaces to perform Internet Protocol version 4 (IPv4) Internet Control
+Message Protocol (ICMP) redirects by default.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages contain
+information from the system&#39;s route table, possibly revealing portions of the
+network topology.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system does not allow interfaces to perform IPv4 ICMP redirects
+by default.
+
+    # grep &#39;net.ipv4.conf.default.send_redirects&#39; &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot;net.ipv4.conf.default.send_redirects&quot; is not configured in the
+&quot;&#x2F;etc&#x2F;sysctl.conf&quot; file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out
+or does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the &quot;default send_redirects&quot;
+variables with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep &#39;net.ipv4.conf.default.send_redirects&#39;
+
+    net.ipv4.conf.default.send_redirects &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to not allow interfaces to perform IPv4 ICMP redirects
+by default.
+
+    Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.default.send_redirects &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72023"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72023"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72023</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72023
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories are owned by the owner of the home directory.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72023"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72023"
+            >
+              <!-- Result description -->
+              If local interactive users do not own the files in their directories,
+unauthorized users may be able to access them. Additionally, if files are not
+owned by the user, this could be an indication of system compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Files and directories that are not owned by the user is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72023</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories are owned by the owner of the home directory.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If local interactive users do not own the files in their directories,
+unauthorized users may be able to access them. Additionally, if files are not
+owned by the user, this could be an indication of system compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all files and directories in a local interactive user&#39;s home
+directory are owned by the user.
+
+    Check the owner of all files and directories in a local interactive user&#39;s
+home directory with the following command:
+
+    Note: The example will be for the user &quot;smithj&quot;, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # ls -lLR &#x2F;home&#x2F;smithj
+    -rw-r--r-- 1 smithj smithj  18 Mar  5 17:06 file1
+    -rw-r--r-- 1 smithj smithj 193 Mar  5 17:06 file2
+    -rw-r--r-- 1 smithj smithj 231 Mar  5 17:06 file3
+
+    If any files are found with an owner different than the home directory
+user, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the owner of a local interactive user&#39;s files and directories to
+that owner. To change the owner of a local interactive user&#39;s files and
+directories, use the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # chown smithj &#x2F;home&#x2F;smithj&#x2F;&lt;file or directory&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72237"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72237"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72237</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72237
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with SSH traffic are terminated at the
+end of the session or after 10 minutes of inactivity, except to fulfill
+documented and validated mission requirements.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72237"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72237"
+            >
+              <!-- Result description -->
+              Terminating an idle SSH session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle SSH session will also free
+up resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration ClientAliveInterval.to_i is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration ClientAliveInterval.to_i is expected to cmp &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration ClientAliveInterval is expected not to eq nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72237</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with SSH traffic are terminated at the
+end of the session or after 10 minutes of inactivity, except to fulfill
+documented and validated mission requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Terminating an idle SSH session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle SSH session will also free
+up resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10, AC-12, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system automatically terminates a user session after
+inactivity time-outs have expired.
+
+    Check for the value of the &quot;ClientAliveInterval&quot; keyword with the
+following command:
+
+    # grep -iw clientaliveinterval &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    ClientAliveInterval 600
+
+    If &quot;ClientAliveInterval&quot; is not configured, commented out, or has a value
+of &quot;0&quot;, this is a finding.
+
+    If &quot;ClientAliveInterval&quot; has a value that is greater than &quot;600&quot; and is
+not documented with the Information System Security Officer (ISSO) as an
+operational requirement, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to automatically terminate a user session
+after inactivity time-outs have expired or at shutdown.
+
+    Add the following line (or modify the line to have the required value) to
+the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file (this file may be named differently or be in
+a different location if using a version of SSH that is provided by a
+third-party vendor):
+
+    ClientAliveInterval 600
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71989"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71989"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71989</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002696
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71989
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must enable SELinux.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002696
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71989"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71989"
+            >
+              <!-- Result description -->
+              Without verification of the security functions, security functions may
+not operate correctly and the failure may go unnoticed. Security function is
+defined as the hardware, software, and&#x2F;or firmware of the information system
+responsible for enforcing the system security policy and supporting the
+isolation of code and data on which the protection is based. Security
+functionality includes, but is not limited to, establishing system accounts,
+configuring access authorizations (i.e., permissions, privileges), setting
+events to be audited, and setting intrusion detection parameters.
+
+    This requirement applies to operating systems performing security function
+verification&#x2F;testing and&#x2F;or systems and environments that require this
+functionality.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;getenforce&#x60; stdout.strip is expected to eq &quot;Enforcing&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71989</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must enable SELinux.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without verification of the security functions, security functions may
+not operate correctly and the failure may go unnoticed. Security function is
+defined as the hardware, software, and&#x2F;or firmware of the information system
+responsible for enforcing the system security policy and supporting the
+isolation of code and data on which the protection is based. Security
+functionality includes, but is not limited to, establishing system accounts,
+configuring access authorizations (i.e., permissions, privileges), setting
+events to be audited, and setting intrusion detection parameters.
+
+    This requirement applies to operating systems performing security function
+verification&#x2F;testing and&#x2F;or systems and environments that require this
+functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), SI-6 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If an HBSS or HIPS is active on the system, this is Not Applicable.
+
+    Verify the operating system verifies correct operation of all security
+functions.
+
+    Check if &quot;SELinux&quot; is active and in &quot;Enforcing&quot; mode with the following
+command:
+
+    # getenforce
+    Enforcing
+
+    If &quot;SELinux&quot; is not active and not in &quot;Enforcing&quot; mode, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to verify correct operation of all security
+functions.
+
+    Set the &quot;SELinux&quot; status and the &quot;Enforcing&quot; mode by modifying the
+&quot;&#x2F;etc&#x2F;selinux&#x2F;config&quot; file to have the following line:
+
+    SELINUX&#x3D;enforcing
+
+    A reboot is required for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81015"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81015"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81015</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81015
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured to
+use the au-remote plugin.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81015"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81015"
+            >
+              <!-- Result description -->
+              Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    Without the configuration of the &quot;au-remote&quot; plugin, the audisp-remote
+daemon will not off-load the logs from the system being audited.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#39;&#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf&#39; cannot be found. This test cannot be checked in a automated fashion and you must check it manually</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81015</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured to
+use the au-remote plugin.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    Without the configuration of the &quot;au-remote&quot; plugin, the audisp-remote
+daemon will not off-load the logs from the system being audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the &quot;au-remote&quot; plugin is active on the system:
+
+    # grep &quot;active&quot; &#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf
+
+    active &#x3D; yes
+
+    If the &quot;active&quot; setting is not set to &quot;yes&quot;, or the line is commented
+out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the &#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf file and change the value of
+&quot;active&quot; to &quot;yes&quot;.
+
+    The audit daemon must be restarted for changes to take effect:
+
+    # service auditd restart</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72003"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72003"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72003</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72003
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all Group Identifiers (GIDs) referenced in the &#x2F;etc&#x2F;passwd file are
+defined in the &#x2F;etc&#x2F;group file.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72003"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72003"
+            >
+              <!-- Result description -->
+              If a user is assigned the GID of a group not existing on the system,
+and a group with the GID is subsequently created, the user may have unintended
+rights to any files associated with the group.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 4</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 7</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 12</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 99</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 192</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 81</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 998</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 74</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 89</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 995</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 1000</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 59</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >&#x2F;etc&#x2F;group gids is expected to include 993</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72003</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all Group Identifiers (GIDs) referenced in the &#x2F;etc&#x2F;passwd file are
+defined in the &#x2F;etc&#x2F;group file.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a user is assigned the GID of a group not existing on the system,
+and a group with the GID is subsequently created, the user may have unintended
+rights to any files associated with the group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all GIDs referenced in the &quot;&#x2F;etc&#x2F;passwd&quot; file are defined in the
+&quot;&#x2F;etc&#x2F;group&quot; file.
+
+    Check that all referenced GIDs exist with the following command:
+
+    # pwck -r
+
+    If GIDs referenced in &quot;&#x2F;etc&#x2F;passwd&quot; file are returned as not defined in
+&quot;&#x2F;etc&#x2F;group&quot; file, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to define all GIDs found in the
+&quot;&#x2F;etc&#x2F;passwd&quot; file by modifying the &quot;&#x2F;etc&#x2F;group&quot; file to add any
+non-existent group referenced in the &quot;&#x2F;etc&#x2F;passwd&quot; file, or change the GIDs
+referenced in the &quot;&#x2F;etc&#x2F;passwd&quot; file to a group that exists in
+&quot;&#x2F;etc&#x2F;group&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-92251"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-92251"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-92251</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-92251
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must use a reverse-path
+filter for IPv4 network traffic when possible on all interfaces.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-92251"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-92251"
+            >
+              <!-- Result description -->
+              Enabling reverse path filtering drops packets with source addresses
+that should not have been able to be received on the interface they were
+received on. It should not be used on systems which are routers for complicated
+networks, but is helpful for end hosts and routers serving small networks.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.conf.all.rp_filter value is expected to eq 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-92251</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must use a reverse-path
+filter for IPv4 network traffic when possible on all interfaces.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enabling reverse path filtering drops packets with source addresses
+that should not have been able to be received on the interface they were
+received on. It should not be used on systems which are routers for complicated
+networks, but is helpful for end hosts and routers serving small networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system uses a reverse-path filter for IPv4:
+
+    # grep net.ipv4.conf.all.rp_filter &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+    net.ipv4.conf.all.rp_filter &#x3D; 1
+
+    If &quot;net.ipv4.conf.all.rp_filter&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;1&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.conf.all.rp_filter
+    net.ipv4.conf.all.rp_filter &#x3D; 1
+
+    If the returned line does not have a value of &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.all.rp_filter &#x3D; 1
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72189"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72189"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72189</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72189
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the delete_module syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72189"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72189"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;delete_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;delete_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;delete_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;delete_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72189</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the delete_module syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;delete_module&quot; syscall occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw delete_module &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S delete_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S delete_module -k module-change
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;delete_module&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;delete_module&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S delete_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S delete_module -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73175"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73175"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73175</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73175
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must ignore Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect
+messages.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73175"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73175"
+            >
+              <!-- Result description -->
+              ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages modify the
+host&#39;s route table and are unauthenticated. An illicit ICMP redirect message
+could result in a man-in-the-middle attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.conf.all.accept_redirects value is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73175</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must ignore Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect
+messages.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages modify the
+host&#39;s route table and are unauthenticated. An illicit ICMP redirect message
+could result in a man-in-the-middle attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system ignores IPv4 ICMP redirect messages.
+
+    # grep &#39;net.ipv4.conf.all.accept_redirects&#39; &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot; net.ipv4.conf.all.accept_redirects &quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the &quot;accept_redirects&quot;
+variables with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep &#39;net.ipv4.conf.all.accept_redirects&#39;
+
+    net.ipv4.conf.all.accept_redirects &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to ignore IPv4 ICMP redirect messages by adding the
+following line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the
+&#x2F;etc&#x2F;sysctl.d&#x2F; directory (or modify the line to have the required value):
+
+    net.ipv4.conf.all.accept_redirects &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72261"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72261"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72261</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72261
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not permit Kerberos authentication unless needed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72261"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72261"
+            >
+              <!-- Result description -->
+              Kerberos authentication for SSH is often implemented using Generic
+Security Service Application Program Interface (GSSAPI). If Kerberos is enabled
+through SSH, the SSH daemon provides a means of access to the system&#39;s Kerberos
+implementation. Vulnerabilities in the system&#39;s Kerberos implementation may
+then be subject to exploitation. To reduce the attack surface of the system,
+the Kerberos authentication mechanism within SSH must be disabled for systems
+not using this capability.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration KerberosAuthentication is expected to cmp &#x3D;&#x3D; &quot;no&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72261</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not permit Kerberos authentication unless needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Kerberos authentication for SSH is often implemented using Generic
+Security Service Application Program Interface (GSSAPI). If Kerberos is enabled
+through SSH, the SSH daemon provides a means of access to the system&#39;s Kerberos
+implementation. Vulnerabilities in the system&#39;s Kerberos implementation may
+then be subject to exploitation. To reduce the attack surface of the system,
+the Kerberos authentication mechanism within SSH must be disabled for systems
+not using this capability.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH daemon does not permit Kerberos to authenticate passwords
+unless approved.
+
+    Check that the SSH daemon does not permit Kerberos to authenticate
+passwords with the following command:
+
+    # grep -i kerberosauth &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    KerberosAuthentication no
+
+    If the &quot;KerberosAuthentication&quot; keyword is missing, or is set to &quot;yes&quot;
+and is not documented with the Information System Security Officer (ISSO), or
+the returned line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Uncomment the &quot;KerberosAuthentication&quot; keyword in
+&quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this file may be named differently or be in a
+different location if using a version of SSH that is provided by a third-party
+vendor) and set the value to &quot;no&quot;:
+
+    KerberosAuthentication no
+
+    The SSH service must be restarted for changes to take effect.
+
+    If Kerberos authentication is required, it must be documented, to include
+the location of the configuration file, with the ISSO.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72171"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72171"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72171</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72171
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the mount command and syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72171"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72171"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged mount commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;mount&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;mount&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;mount&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;mount&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with path &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;mount&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with path &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;mount&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72171</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the mount command and syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged mount commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;mount&quot; command and syscall occur.
+
+    Check that the following system call is being audited by performing the
+following series of commands to check the file system rules in
+&quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &quot;mount&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+    -a always,exit -F arch&#x3D;b64 -S mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;mount&quot; syscall, this is a finding.
+
+    If all uses of the &quot;mount&quot; command are not being audited, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;mount&quot; command and syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+    -a always,exit -F arch&#x3D;b64 -S mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81011"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81011"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81011</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001764
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81011
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the nosuid option.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001764
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81011"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81011"
+            >
+              <!-- Result description -->
+              The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Mount &#x2F;dev&#x2F;shm options is expected to include &quot;nosuid&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81011</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the nosuid option.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that the &quot;nosuid&quot; option is configured for &#x2F;dev&#x2F;shm:
+
+    # cat &#x2F;etc&#x2F;fstab | grep &#x2F;dev&#x2F;shm
+
+    tmpfs &#x2F;dev&#x2F;shm tmpfs defaults,nodev,nosuid,noexec 0 0
+
+    If any results are returned and the &quot;nosuid&quot; option is not listed, this
+is a finding.
+
+    Verify &quot;&#x2F;dev&#x2F;shm&quot; is mounted with the &quot;nosuid&quot; option:
+
+    # mount | grep &quot;&#x2F;dev&#x2F;shm&quot; | grep nosuid
+
+    If no results are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system so that &#x2F;dev&#x2F;shm is mounted with the
+&quot;nosuid&quot; option.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72001"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72001"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72001</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72001
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have
+unnecessary accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72001"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72001"
+            >
+              <!-- Result description -->
+              Accounts providing no operational purpose provide additional
+opportunities for system compromise. Unnecessary accounts include user accounts
+for individuals not requiring access to the system and application accounts for
+applications not installed on the system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >root is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >bin is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >daemon is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >adm is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >lp is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >sync is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >shutdown is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >halt is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >mail is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >operator is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >nobody is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >systemd-network is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;systemd-network&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >dbus is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;dbus&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >polkitd is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;polkitd&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >sshd is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;sshd&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >postfix is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;postfix&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >chrony is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;chrony&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ec2-user is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ec2-user&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >tss is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;tss&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >sssd is listed in allowed users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;sssd&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72001</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have
+unnecessary accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Accounts providing no operational purpose provide additional
+opportunities for system compromise. Unnecessary accounts include user accounts
+for individuals not requiring access to the system and application accounts for
+applications not installed on the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all accounts on the system are assigned to an active system,
+application, or user account.
+
+    Obtain the list of authorized system accounts from the Information System
+Security Officer (ISSO).
+
+    Check the system accounts on the system with the following command:
+
+    # more &#x2F;etc&#x2F;passwd
+    root:x:0:0:root:&#x2F;root:&#x2F;bin&#x2F;bash
+    bin:x:1:1:bin:&#x2F;bin:&#x2F;sbin&#x2F;nologin
+    daemon:x:2:2:daemon:&#x2F;sbin:&#x2F;sbin&#x2F;nologin
+    sync:x:5:0:sync:&#x2F;sbin:&#x2F;bin&#x2F;sync
+    shutdown:x:6:0:shutdown:&#x2F;sbin:&#x2F;sbin&#x2F;shutdown
+    halt:x:7:0:halt:&#x2F;sbin:&#x2F;sbin&#x2F;halt
+    games:x:12:100:games:&#x2F;usr&#x2F;games:&#x2F;sbin&#x2F;nologin
+    gopher:x:13:30:gopher:&#x2F;var&#x2F;gopher:&#x2F;sbin&#x2F;nologin
+
+    Accounts such as &quot;games&quot; and &quot;gopher&quot; are not authorized accounts as
+they do not support authorized system functions.
+
+    If the accounts on the system do not match the provided documentation, or
+accounts that do not support an authorized system function are present, this is
+a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system so all accounts on the system are assigned to an
+active system, application, or user account.
+
+    Remove accounts that do not support approved system activities or that
+allow for a normal user to perform administrative-level actions.
+
+    Document all authorized accounts on the system.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-78997"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-78997"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-78997</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-78997
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the screensaver idle-activation-enabled setting for the graphical
+user interface.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-78997"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-78997"
+            >
+              <!-- Result description -->
+              A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    The ability to enable&#x2F;disable a session lock is given to the user by
+default. Disabling the user&#39;s ability to disengage the graphical user interface
+session lock provides the assurance that all sessions will lock after the
+specified period of time.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The GNOME desktop is not installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-78997</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the screensaver idle-activation-enabled setting for the graphical
+user interface.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    The ability to enable&#x2F;disable a session lock is given to the user by
+default. Disabling the user&#39;s ability to disengage the graphical user interface
+session lock provides the assurance that all sessions will lock after the
+specified period of time.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system prevents a user from overriding the screensaver
+idle-activation-enabled setting for the graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    Determine which profile the system database is using with the following
+command:
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Check for the idle-activation-enabled setting with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+the path is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database
+other than &quot;local&quot; is being used.
+
+    # grep -i idle-activation-enabled &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;*
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;idle-activation-enabled
+
+    If the command does not return a result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to prevent a user from overriding a
+screensaver lock after a 15-minute period of inactivity for graphical user
+interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+if the system is using another database in &quot;&#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user&quot;, the
+file should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;session
+
+    Add the setting to lock the screensaver idle-activation-enabled setting:
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;idle-activation-enabled</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72265"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72265"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72265</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72265
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon uses privilege separation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72265"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72265"
+            >
+              <!-- Result description -->
+              SSH daemon privilege separation causes the SSH process to drop root
+privileges when not needed, which would decrease the impact of software
+vulnerabilities in the unprivileged section.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration UsePrivilegeSeparation is expected to cmp &#x3D;&#x3D; &quot;sandbox&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72265</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon uses privilege separation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH daemon privilege separation causes the SSH process to drop root
+privileges when not needed, which would decrease the impact of software
+vulnerabilities in the unprivileged section.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH daemon performs privilege separation.
+
+    Check that the SSH daemon performs privilege separation with the following
+command:
+
+    # grep -i usepriv &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    UsePrivilegeSeparation sandbox
+
+    If the &quot;UsePrivilegeSeparation&quot; keyword is set to &quot;no&quot;, is missing, or
+the returned line is commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Uncomment the &quot;UsePrivilegeSeparation&quot; keyword in
+&quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this file may be named differently or be in a
+different location if using a version of SSH that is provided by a third-party
+vendor) and set the value to &quot;sandbox&quot; or &quot;yes&quot;:
+
+    UsePrivilegeSeparation sandbox
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-73165"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-73165"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-73165</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-73165
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-73165"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-73165"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;group&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;group&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-73165</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;group&quot;.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;group &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;group -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;group&quot;.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;group -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72307"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72307"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72307</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72307
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have an X
+Windows display manager installed unless approved.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72307"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72307"
+            >
+              <!-- Result description -->
+              Internet services that are not required for system or application
+processes must not be active to decrease the attack surface of the system. X
+Windows has a long history of security vulnerabilities and will not be used
+unless approved and documented.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package xorg-x11-server-common is expected not to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72307</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have an X
+Windows display manager installed unless approved.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Internet services that are not required for system or application
+processes must not be active to decrease the attack surface of the system. X
+Windows has a long history of security vulnerabilities and will not be used
+unless approved and documented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that if the system has X Windows System installed, it is authorized.
+
+    Check for the X11 package with the following command:
+
+    # rpm -qa | grep xorg | grep server
+
+    Ask the System Administrator if use of the X Windows System is an
+operational requirement.
+
+    If the use of X Windows on the system is not documented with the
+Information System Security Officer (ISSO), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document the requirement for an X Windows server with the ISSO or remove
+the related packages with the following commands:
+
+    # rpm -e xorg-x11-server-common</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72133"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72133"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72133</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72133
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the ftruncate syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72133"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72133"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72133</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the ftruncate syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;ftruncate&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw ftruncate &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S ftruncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S ftruncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S ftruncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S ftruncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;ftruncate&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;ftruncate&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S ftruncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S ftruncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S ftruncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S ftruncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71941"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71941"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71941</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71941
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must disable account
+identifiers (individuals, groups, roles, and devices) if the password expires.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71941"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71941"
+            >
+              <!-- Result description -->
+              Inactive identifiers pose a risk to systems and applications because
+attackers may exploit an inactive identifier and potentially obtain undetected
+access to the system. Owners of inactive accounts will not notice if
+unauthorized access to their user account has been obtained.
+
+    Operating systems need to track periods of inactivity and disable
+application identifiers after zero days of inactivity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;default&#x2F;useradd INACTIVE is expected to cmp &gt;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;default&#x2F;useradd INACTIVE is expected to cmp &lt;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71941</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must disable account
+identifiers (individuals, groups, roles, and devices) if the password expires.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Inactive identifiers pose a risk to systems and applications because
+attackers may exploit an inactive identifier and potentially obtain undetected
+access to the system. Owners of inactive accounts will not notice if
+unauthorized access to their user account has been obtained.
+
+    Operating systems need to track periods of inactivity and disable
+application identifiers after zero days of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-4 e, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If passwords are not being used for authentication, this is Not Applicable.
+
+    Verify the operating system disables account identifiers (individuals,
+groups, roles, and devices) after the password expires with the following
+command:
+
+    # grep -i inactive &#x2F;etc&#x2F;default&#x2F;useradd
+    INACTIVE&#x3D;0
+
+    If the value is not set to &quot;0&quot;, is commented out, or is not defined, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to disable account identifiers (individuals,
+groups, roles, and devices) after the password expires.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;default&#x2F;useradd&quot; (or modify the line to
+have the required value):
+
+    INACTIVE&#x3D;0</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72213"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72213"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72213</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-3 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001668
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72213
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must use a virus scan
+program.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-3 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001668
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72213"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72213"
+            >
+              <!-- Result description -->
+              Virus scanning software can be used to protect a system from
+penetration from computer viruses and to limit their spread through
+intermediate systems.
+
+    The virus scanning software should be configured to perform scans
+dynamically on accessed files. If this capability is not available, the system
+must be configured to scan, at a minimum, all altered files on the system on a
+daily basis.
+
+    If the system processes inbound SMTP mail, the virus scanner must be
+configured to scan all received mail.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service nails is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;Service nails&#x60; is running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service clamav-daemon.socket is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;Service clamav-daemon.socket&#x60; is running</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72213</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must use a virus scan
+program.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virus scanning software can be used to protect a system from
+penetration from computer viruses and to limit their spread through
+intermediate systems.
+
+    The virus scanning software should be configured to perform scans
+dynamically on accessed files. If this capability is not available, the system
+must be configured to scan, at a minimum, all altered files on the system on a
+daily basis.
+
+    If the system processes inbound SMTP mail, the virus scanner must be
+configured to scan all received mail.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-3 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify an anti-virus solution is installed on the system. The anti-virus
+solution may be bundled with an approved host-based security solution.
+
+    If there is no anti-virus solution installed on the system, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Install an antivirus solution on the system.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72283"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72283"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72283</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72283
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not forward
+Internet Protocol version 4 (IPv4) source-routed packets.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72283"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72283"
+            >
+              <!-- Result description -->
+              Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv4
+forwarding is enabled and the system is functioning as a router.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.conf.all.accept_source_route value is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72283</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not forward
+Internet Protocol version 4 (IPv4) source-routed packets.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv4
+forwarding is enabled and the system is functioning as a router.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system does not accept IPv4 source-routed packets.
+
+    # grep net.ipv4.conf.all.accept_source_route &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    net.ipv4.conf.all.accept_source_route &#x3D; 0
+
+    If &quot; net.ipv4.conf.all.accept_source_route &quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.conf.all.accept_source_route
+    net.ipv4.conf.all.accept_source_route &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.all.accept_source_route &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl -system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72263"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72263"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72263</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72263
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon performs strict mode checking of home directory
+configuration files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72263"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72263"
+            >
+              <!-- Result description -->
+              If other users have access to modify user-specific SSH configuration
+files, they may be able to log on to the system as another user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration StrictModes is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72263</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon performs strict mode checking of home directory
+configuration files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If other users have access to modify user-specific SSH configuration
+files, they may be able to log on to the system as another user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the SSH daemon performs strict mode checking of home directory
+configuration files.
+
+    The location of the &quot;sshd_config&quot; file may vary if a different daemon is
+in use.
+
+    Inspect the &quot;sshd_config&quot; file with the following command:
+
+    # grep -i strictmodes &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    StrictModes yes
+
+    If &quot;StrictModes&quot; is set to &quot;no&quot;, is missing, or the returned line is
+commented out, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Uncomment the &quot;StrictModes&quot; keyword in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this
+file may be named differently or be in a different location if using a version
+of SSH that is provided by a third-party vendor) and set the value to &quot;yes&quot;:
+
+    StrictModes yes
+
+    The SSH service must be restarted for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72065"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72065"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72065</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72065
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must use a separate file
+system for &#x2F;tmp (or equivalent).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72065"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72065"
+            >
+              <!-- Result description -->
+              The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service tmp.mount is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected that &#x60;Service tmp.mount&#x60; is enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File System Table File (fstab) with mount_point &#x3D;&#x3D; &quot;&#x2F;tmp&quot; Should have a device name specified</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected nil to respond to &#x60;empty?&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File System Table File (fstab) with mount_point &#x3D;&#x3D; &quot;&#x2F;tmp&quot; count is expected to cmp &#x3D;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72065</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must use a separate file
+system for &#x2F;tmp (or equivalent).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that a separate file system&#x2F;partition has been created for &quot;&#x2F;tmp&quot;.
+
+    Check that a file system&#x2F;partition has been created for &quot;&#x2F;tmp&quot; with the
+following command:
+
+    # systemctl is-enabled tmp.mount
+    enabled
+
+    If the &quot;tmp.mount&quot; service is not enabled, check to see if &quot;&#x2F;tmp&quot; is
+defined in the fstab with a device and mount point:
+
+    # grep -i &#x2F;tmp &#x2F;etc&#x2F;fstab
+    UUID&#x3D;a411dc99-f2a1-4c87-9e05-184977be8539 &#x2F;tmp   ext4
+rw,relatime,discard,data&#x3D;ordered,nosuid,noexec, 0 0
+
+    If &quot;tmp.mount&quot; service is not enabled and the &quot;&#x2F;tmp&quot; directory is not
+defined in the fstab with a device and mount point, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Start the &quot;tmp.mount&quot; service with the following command:
+
+    # systemctl enable tmp.mount
+
+    OR
+
+    Edit the &quot;&#x2F;etc&#x2F;fstab&quot; file and ensure the &quot;&#x2F;tmp&quot; directory is defined
+in the fstab with a device and mount point.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72107"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72107"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72107</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72107
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the fchmod syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72107"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72107"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmod&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmod&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmod&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmod&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72107</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the fchmod syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchmod&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following command:
+
+    # grep -iw fchmod &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fchmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fchmod&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchmod&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fchmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71935"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71935"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71935</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71935
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that passwords are a minimum of 15 characters in length.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71935"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71935"
+            >
+              <!-- Result description -->
+              The shorter the password, the lower the number of possible
+combinations that need to be tested before the password is compromised.
+
+    Password complexity, or strength, is a measure of the effectiveness of a
+password in resisting attempts at guessing and brute-force attacks. Password
+length is one factor of several that helps to determine strength and how long
+it takes to crack a password. Use of more characters in a password helps to
+exponentially increase the time and&#x2F;or resources required to compromise the
+password.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf minlen.to_i is expected to cmp &gt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71935</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that passwords are a minimum of 15 characters in length.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The shorter the password, the lower the number of possible
+combinations that need to be tested before the password is compromised.
+
+    Password complexity, or strength, is a measure of the effectiveness of a
+password in resisting attempts at guessing and brute-force attacks. Password
+length is one factor of several that helps to determine strength and how long
+it takes to crack a password. Use of more characters in a password helps to
+exponentially increase the time and&#x2F;or resources required to compromise the
+password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system enforces a minimum 15-character password
+length. The &quot;minlen&quot; option sets the minimum number of characters in a new
+password.
+
+    Check for the value of the &quot;minlen&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep minlen &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    minlen &#x3D; 15
+
+    If the command does not return a &quot;minlen&quot; value of 15 or greater, this is
+a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure operating system to enforce a minimum 15-character password
+length.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; (or modify the
+line to have the required value):
+
+    minlen &#x3D; 15</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71947"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71947"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71947</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-11
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002038
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71947
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that users must provide a password for privilege escalation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-11
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002038
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71947"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71947"
+            >
+              <!-- Result description -->
+              Without re-authentication, users may access resources or perform tasks
+for which they do not have authorization.
+
+    When operating systems provide the capability to escalate a functional
+capability, it is critical the user re-authenticate.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;grep -i nopasswd &#x2F;etc&#x2F;sudoers.d&#x2F;90-cloud-init-users&#x60; stdout is expected not to match &#x2F;^[^#]*NOPASSWD&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;ec2-user ALL&#x3D;(ALL) NOPASSWD:ALL\n&quot; not to match &#x2F;^[^#]*NOPASSWD&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;^[^#]*NOPASSWD&#x2F;
++ec2-user ALL&#x3D;(ALL) NOPASSWD:ALL
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;grep -i nopasswd &#x2F;etc&#x2F;sudoers&#x60; stdout is expected not to match &#x2F;^[^#]*NOPASSWD&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71947</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that users must provide a password for privilege escalation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without re-authentication, users may access resources or perform tasks
+for which they do not have authorization.
+
+    When operating systems provide the capability to escalate a functional
+capability, it is critical the user re-authenticate.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-11, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If passwords are not being used for authentication, this is Not Applicable.
+
+    Verify the operating system requires users to supply a password for
+privilege escalation.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers&quot; and &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;
+files with the following command:
+
+    # grep -i nopasswd &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*
+
+    If any uncommented line is found with a &quot;NOPASSWD&quot; tag, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to require users to supply a password for
+privilege escalation.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers&quot; file with the following
+command:
+    # visudo
+
+    Remove any occurrences of &quot;NOPASSWD&quot; tags in the file.
+
+    Check the configuration of the &#x2F;etc&#x2F;sudoers.d&#x2F;* files with the following
+command:
+    # grep -i nopasswd &#x2F;etc&#x2F;sudoers.d&#x2F;*
+
+    Remove any occurrences of &quot;NOPASSWD&quot; tags in the file.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71891"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71891"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71891</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000056
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71891
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must enable a user
+session lock until that user re-establishes access using established
+identification and authentication procedures.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000056
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71891"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71891"
+            >
+              <!-- Result description -->
+              A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    Regardless of where the session lock is determined and implemented, once
+invoked, the session lock must remain in place until the user reauthenticates.
+No other activity aside from reauthentication must unlock the system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have GNOME installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71891</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must enable a user
+session lock until that user re-establishes access using established
+identification and authentication procedures.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    Regardless of where the session lock is determined and implemented, once
+invoked, the session lock must remain in place until the user reauthenticates.
+No other activity aside from reauthentication must unlock the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system enables a user&#39;s session lock until that user
+re-establishes access using established identification and authentication
+procedures. The screen program must be installed to lock sessions on the
+console.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check to see if the screen lock is enabled with the following command:
+
+    # grep -i lock-enabled &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    lock-enabled&#x3D;true
+
+    If the &quot;lock-enabled&quot; setting is missing or is not set to &quot;true&quot;, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to enable a user&#39;s session lock until that
+user re-establishes access using established identification and authentication
+procedures.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following example:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver
+
+    Edit the &quot;[org&#x2F;gnome&#x2F;desktop&#x2F;screensaver]&quot; section of the database file
+and add or update the following lines:
+
+    # Set this to true to lock the screen when the screensaver activates
+    lock-enabled&#x3D;true
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71855"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71855"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71855</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71855
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the cryptographic hash of system files and commands matches vendor values.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71855"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71855"
+            >
+              <!-- Result description -->
+              Without cryptographic integrity protections, system command and files
+can be altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control consistently takes a long to run and has been disabled
+    using the disable_slow_controls attribute.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71855</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the cryptographic hash of system files and commands matches vendor values.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without cryptographic integrity protections, system command and files
+can be altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the cryptographic hash of system files and commands match the vendor
+values.
+
+    Check the cryptographic hash of system files and commands with the
+following command:
+
+    Note: System configuration files (indicated by a &quot;c&quot; in the second
+column) are expected to change over time. Unusual modifications should be
+investigated through the system audit log.
+
+    # rpm -Va --noconfig | grep &#39;^..5&#39;
+
+    If there is any output from the command for system files or binaries, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the following command to determine which package owns the file:
+
+    # rpm -qf &lt;filename&gt;
+
+    The package can be reinstalled from a yum repository using the command:
+
+    # sudo yum reinstall &lt;packagename&gt;
+
+    Alternatively, the package can be reinstalled from trusted media using the
+command:
+
+    # sudo rpm -Uvh &lt;packagename&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72209"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72209"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72209</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72209
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must send rsyslog output
+to a log aggregation server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72209"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72209"
+            >
+              <!-- Result description -->
+              Sending rsyslog output to another system ensures that the logs cannot
+be removed or modified in the event that the system is compromised or has a
+hardware failure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;grep @ &#x2F;etc&#x2F;rsyslog.conf | grep -v &quot;^#&quot;&#x60; stdout.strip is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;&quot;.empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72209</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must send rsyslog output
+to a log aggregation server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Sending rsyslog output to another system ensures that the logs cannot
+be removed or modified in the event that the system is compromised or has a
+hardware failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify &quot;rsyslog&quot; is configured to send all messages to a log aggregation
+server.
+
+    Check the configuration of &quot;rsyslog&quot; with the following command:
+
+    Note: If another logging package is used, substitute the utility
+configuration file for &quot;&#x2F;etc&#x2F;rsyslog.conf&quot;.
+
+    # grep @ &#x2F;etc&#x2F;rsyslog.conf &#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf
+    *.* @@logagg.site.mil
+
+    If there are no lines in the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or
+&quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot; files that contain the &quot;@&quot; or &quot;@@&quot; symbol(s), and
+the lines with the correct symbol(s) to send output to another system do not
+cover all &quot;rsyslog&quot; output, ask the System Administrator to indicate how the
+audit logs are off-loaded to a different system or media.
+
+    If the lines are commented out or there is no evidence that the audit logs
+are being sent to another system, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or an &quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot; file to
+contain a configuration line to send all &quot;rsyslog&quot; output to a log
+aggregation system:
+    *.* @@&lt;log aggregation system name&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71899"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71899"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71899</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71899
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must initiate a session
+lock for the screensaver after a period of inactivity for graphical user
+interfaces.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71899"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71899"
+            >
+              <!-- Result description -->
+              A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have GNOME installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71899</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must initiate a session
+lock for the screensaver after a period of inactivity for graphical user
+interfaces.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system initiates a session lock after a 15-minute
+period of inactivity for graphical user interfaces. The screen program must be
+installed to lock sessions on the console.
+
+    Note: If the system does not have a Graphical User Interface installed,
+this requirement is Not Applicable.
+
+    Check for the session lock settings with the following commands:
+
+    # grep -i idle-activation-enabled &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+
+    idle-activation-enabled&#x3D;true
+
+    If &quot;idle-activation-enabled&quot; is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to initiate a session lock after a 15-minute
+period of inactivity for graphical user interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver
+
+    Add the setting to enable screensaver locking after 15 minutes of
+inactivity:
+
+    [org&#x2F;gnome&#x2F;desktop&#x2F;screensaver]
+
+    idle-activation-enabled&#x3D;true
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71901"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71901"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71901</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71901
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must initiate a session
+lock for graphical user interfaces when the screensaver is activated.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71901"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71901"
+            >
+              <!-- Result description -->
+              A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The system does not have GNOME installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71901</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must initiate a session
+lock for graphical user interfaces when the screensaver is activated.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system initiates a session lock a for graphical user
+interfaces when the screensaver is activated.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    If GNOME is installed, check to see a session lock occurs when the
+screensaver is activated with the following command:
+
+    # grep -i lock-delay &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    lock-delay&#x3D;uint32 5
+
+    If the &quot;lock-delay&quot; setting is missing, or is not set to &quot;5&quot; or less,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to initiate a session lock for graphical
+user interfaces when a screensaver is activated.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver
+
+    Add the setting to enable session locking when a screensaver is activated:
+
+    [org&#x2F;gnome&#x2F;desktop&#x2F;screensaver]
+    lock-delay&#x3D;uint32 5
+
+    The &quot;uint32&quot; must be included along with the integer key values as shown.
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72069"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72069"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72069</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72069
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the file integrity tool is configured to verify Access Control Lists
+(ACLs).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72069"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72069"
+            >
+              <!-- Result description -->
+              ACLs can provide permissions beyond those permitted through the file
+mode and must be verified by file integrity tools.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package aide is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >List of monitored files&#x2F;directories without &#39;acl&#39; rule is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72069</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the file integrity tool is configured to verify Access Control Lists
+(ACLs).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ACLs can provide permissions beyond those permitted through the file
+mode and must be verified by file integrity tools.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the file integrity tool is configured to verify ACLs.
+
+    Check to see if Advanced Intrusion Detection Environment (AIDE) is
+installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the System Administrator how file integrity
+checks are performed on the system.
+
+    If there is no application installed to perform file integrity checks, this
+is a finding.
+
+    Note: AIDE is highly configurable at install time. These commands assume
+the &quot;aide.conf&quot; file is under the &quot;&#x2F;etc&quot; directory.
+
+    Use the following command to determine if the file is in another location:
+
+    # find &#x2F; -name aide.conf
+
+    Check the &quot;aide.conf&quot; file to determine if the &quot;acl&quot; rule has been
+added to the rule list being applied to the files and directories selection
+lists.
+
+    An example rule that includes the &quot;acl&quot; rule is below:
+
+    All&#x3D; p+i+n+u+g+s+m+S+sha512+acl+xattrs+selinux
+    &#x2F;bin All # apply the custom rule to the files in bin
+    &#x2F;sbin All # apply the same custom rule to the files in sbin
+
+    If the &quot;acl&quot; rule is not being used on all uncommented selection lines in
+the &quot;&#x2F;etc&#x2F;aide.conf&quot; file, or ACLs are not being checked by another file
+integrity tool, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the file integrity tool to check file and directory ACLs.
+
+    If AIDE is installed, ensure the &quot;acl&quot; rule is present on all uncommented
+file and directory selection lists.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72063"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72063"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72063</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72063
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must use a separate file
+system for the system audit data path.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72063"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72063"
+            >
+              <!-- Result description -->
+              The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Mount &#x2F;var&#x2F;log&#x2F;audit is expected to be mounted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+Mount &#x2F;var&#x2F;log&#x2F;audit is not mounted
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72063</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must use a separate file
+system for the system audit data path.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine if the operating system is configured to have the
+&quot;&#x2F;var&#x2F;log&#x2F;audit&quot; path is on a separate file system.
+
+    # grep &#x2F;var&#x2F;log&#x2F;audit &#x2F;etc&#x2F;fstab
+
+    If no result is returned, or the operating system is not configured to have
+&quot;&#x2F;var&#x2F;log&#x2F;audit&quot; on a separate file system, this is a finding.
+
+    Verify that &quot;&#x2F;var&#x2F;log&#x2F;audit&quot; is mounted on a separate file system:
+
+    # mount | grep &quot;&#x2F;var&#x2F;log&#x2F;audit&quot;
+
+    If no result is returned, or &quot;&#x2F;var&#x2F;log&#x2F;audit&quot; is not on a separate file
+system, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Migrate the system audit data path onto a separate file system.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72031"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72031"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72031</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72031
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files for local interactive users are be
+group-owned by the users primary group or root.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72031"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72031"
+            >
+              <!-- Result description -->
+              Local initialization files for interactive users are used to configure
+the user&#39;s shell environment upon logon. Malicious modification of these files
+could compromise accounts upon logon.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >#&lt;Set: {}&gt; length is expected to &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72031</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files for local interactive users are be
+group-owned by the users primary group or root.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Local initialization files for interactive users are used to configure
+the user&#39;s shell environment upon logon. Malicious modification of these files
+could compromise accounts upon logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the local initialization files of all local interactive users are
+group-owned by that user&#39;s primary Group Identifier (GID).
+
+    Check the home directory assignment for all non-privileged users on the
+system with the following command:
+
+    Note: The example will be for the smithj user, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot; and a primary group of &quot;users&quot;.
+
+    # cut -d: -f 1,4,6 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot;
+    smithj:1000:&#x2F;home&#x2F;smithj
+
+    # grep 1000 &#x2F;etc&#x2F;group
+    users:x:1000:smithj,jonesj,jacksons
+
+    Note: This may miss interactive users that have been assigned a privileged
+User Identifier (UID). Evidence of interactive use may be obtained from a
+number of log files containing system logon information.
+
+    Check the group owner of all local interactive user&#39;s initialization files
+with the following command:
+
+    # ls -al &#x2F;home&#x2F;smithj&#x2F;.[^.]* | more
+
+    -rwxr-xr-x 1 smithj users 896 Mar 10 2011 .profile
+    -rwxr-xr-x 1 smithj users 497 Jan 6 2007 .login
+    -rwxr-xr-x 1 smithj users 886 Jan 6 2007 .something
+
+    If all local interactive user&#39;s initialization files are not group-owned by
+that user&#39;s primary GID, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the group owner of a local interactive user&#39;s files to the group
+found in &quot;&#x2F;etc&#x2F;passwd&quot; for the user. To change the group owner of a local
+interactive user&#39;s home directory, use the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;, and has a primary group of users.
+
+    # chgrp users &#x2F;home&#x2F;smithj&#x2F;.[^.]*</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71923"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71923"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71923</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71923
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that user and group account administration utilities are configured to store
+only encrypted representations of passwords.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71923"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71923"
+            >
+              <!-- Result description -->
+              Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;cat &#x2F;etc&#x2F;libuser.conf | grep -i sha512&#x60; stdout.strip is expected to match &#x2F;^crypt_style &#x3D; sha512$&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71923</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that user and group account administration utilities are configured to store
+only encrypted representations of passwords.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the user and group account administration utilities are configured
+to store only encrypted representations of passwords. The strength of
+encryption that must be used to hash passwords for all accounts is &quot;SHA512&quot;.
+
+    Check that the system is configured to create &quot;SHA512&quot; hashed passwords
+with the following command:
+
+    # grep -i sha512 &#x2F;etc&#x2F;libuser.conf
+
+    crypt_style &#x3D; sha512
+
+    If the &quot;crypt_style&quot; variable is not set to &quot;sha512&quot;, is not in the
+defaults section, is commented out, or does not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to store only SHA512 encrypted
+representations of passwords.
+
+    Add or update the following line in &quot;&#x2F;etc&#x2F;libuser.conf&quot; in the [defaults]
+section:
+
+    crypt_style &#x3D; sha512</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-81007"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-81007"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-81007</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-81007
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Red Hat Enterprise Linux operating systems version 7.2 or newer using
+Unified Extensible Firmware Interface (UEFI) must require authentication upon
+booting into single-user and maintenance modes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-81007"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-81007"
+            >
+              <!-- Result description -->
+              If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System running BIOS</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-81007</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Red Hat Enterprise Linux operating systems version 7.2 or newer using
+Unified Extensible Firmware Interface (UEFI) must require authentication upon
+booting into single-user and maintenance modes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For systems that use BIOS, this is Not Applicable.
+
+    For systems that are running a version of RHEL prior to 7.2, this is Not
+Applicable.
+
+    Check to see if an encrypted root password is set. On systems that use
+UEFI, use the following command:
+
+    # grep -iw grub2_password &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;user.cfg
+    GRUB2_PASSWORD&#x3D;grub.pbkdf2.sha512.[password_hash]
+
+    If the root password does not begin with &quot;grub.pbkdf2.sha512&quot;, this is a
+finding.
+
+    Verify that the &quot;root&quot; account is set as the &quot;superusers&quot;:
+
+    # grep -iw &quot;superusers&quot; &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg
+        set superusers&#x3D;&quot;root&quot;
+        export superusers
+
+    If &quot;superusers&quot; is not set to &quot;root&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to encrypt the boot password for root.
+
+    Generate an encrypted grub2 password for root with the following command:
+
+    Note: The hash generated is an example.
+
+    # grub2-setpassword
+    Enter password:
+    Confirm password:
+
+    Edit the &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg file and add or modify the following
+lines in the &quot;### BEGIN &#x2F;etc&#x2F;grub.d&#x2F;01_users ###&quot; section:
+
+    set superusers&#x3D;&quot;root&quot;
+    export superusers</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72119"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72119"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72119</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72119
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the fremovexattr syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72119"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72119"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fremovexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fremovexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fremovexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;fremovexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72119</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the fremovexattr syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fremovexattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw fremovexattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fremovexattr&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fremovexattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72197"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72197"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72197</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72197
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;passwd.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72197"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72197"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;passwd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;passwd&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72197</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;passwd.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;passwd&quot;.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;passwd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;passwd -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;passwd&quot;.
+
+    Add or update the following rule &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;passwd -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72125"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72125"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72125</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72125
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the open syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72125"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72125"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72125</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the open syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;open&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw open &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S open -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S open -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;open&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;open&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S open -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S open -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72161"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72161"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72161</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72161
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the sudo command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72161"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72161"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;sudo&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;sudo&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72161</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the sudo command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;sudo&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;bin&#x2F;sudo &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;sudo -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;sudo&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;sudo -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72015"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72015"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72015</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72015
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are defined in the &#x2F;etc&#x2F;passwd
+file.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72015"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72015"
+            >
+              <!-- Result description -->
+              If a local interactive user has a home directory defined that does not
+exist, the user may be given access to the &#x2F; directory as the current working
+directory upon logon. This could create a Denial of Service because the user
+would not be able to access their logon configuration files, and it may give
+them visibility to system files they normally would not be able to access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Directory &#x2F;root is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Directory &#x2F;home&#x2F;ec2-user is expected to exist</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72015</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are defined in the &#x2F;etc&#x2F;passwd
+file.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a local interactive user has a home directory defined that does not
+exist, the user may be given access to the &#x2F; directory as the current working
+directory upon logon. This could create a Denial of Service because the user
+would not be able to access their logon configuration files, and it may give
+them visibility to system files they normally would not be able to access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the assigned home directory of all local interactive users on the
+system exists.
+
+    Check the home directory assignment for all local interactive
+non-privileged users on the system with the following command:
+
+    # cut -d: -f 1,3,6 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot;
+
+    smithj:1001:&#x2F;home&#x2F;smithj
+
+    Note: This may miss interactive users that have been assigned a privileged
+UID. Evidence of interactive use may be obtained from a number of log files
+containing system logon information.
+
+    Check that all referenced home directories exist with the following command:
+
+    # pwck -r
+    user &#39;smithj&#39;: directory &#39;&#x2F;home&#x2F;smithj&#39; does not exist
+
+    If any home directories referenced in &quot;&#x2F;etc&#x2F;passwd&quot; are returned as not
+defined, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create home directories to all local interactive users that currently do
+not have a home directory assigned. Use the following commands to create the
+user home directory assigned in &quot;&#x2F;etc&#x2F; passwd&quot;:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;, a UID of &quot;smithj&quot;, and a Group Identifier (GID) of
+&quot;users&quot; assigned in &quot;&#x2F;etc&#x2F;passwd&quot;.
+
+    # mkdir &#x2F;home&#x2F;smithj
+    # chown smithj &#x2F;home&#x2F;smithj
+    # chgrp users &#x2F;home&#x2F;smithj
+    # chmod 0750 &#x2F;home&#x2F;smithj</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72293"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72293"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72293</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72293
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not send Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72293"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72293"
+            >
+              <!-- Result description -->
+              ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages contain
+information from the system&#39;s route table, possibly revealing portions of the
+network topology.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Kernel Parameter net.ipv4.conf.all.send_redirects value is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72293</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not send Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages contain
+information from the system&#39;s route table, possibly revealing portions of the
+network topology.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the system does not send IPv4 ICMP redirect messages.
+
+    # grep &#39;net.ipv4.conf.all.send_redirects&#39; &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot;net.ipv4.conf.all.send_redirects&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the &quot;all send_redirects&quot;
+variables with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep &#39;net.ipv4.conf.all.send_redirects&#39;
+
+    net.ipv4.conf.all.send_redirects &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the system to not allow interfaces to perform IPv4 ICMP
+redirects.
+
+    Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.all.send_redirects &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72141"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72141"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72141</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72141
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the setfiles command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72141"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72141"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;setfiles&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;setfiles&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72141</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the setfiles command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setfiles&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw &#x2F;usr&#x2F;sbin&#x2F;setfiles &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;setfiles -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-priv_change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setfiles&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;setfiles -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72053"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72053"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72053</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72053
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the cron.allow file, if it exists, is owned by root.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72053"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72053"
+            >
+              <!-- Result description -->
+              If the owner of the &quot;cron.allow&quot; file is not set to root, the
+possibility exists for an unauthorized user to view or to edit sensitive
+information.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;etc&#x2F;cron.allow is expected to be owned by &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72053</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the cron.allow file, if it exists, is owned by root.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the owner of the &quot;cron.allow&quot; file is not set to root, the
+possibility exists for an unauthorized user to view or to edit sensitive
+information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that the &quot;cron.allow&quot; file is owned by root.
+
+    Check the owner of the &quot;cron.allow&quot; file with the following command:
+
+    # ls -al &#x2F;etc&#x2F;cron.allow
+    -rw------- 1 root root 6 Mar  5  2011 &#x2F;etc&#x2F;cron.allow
+
+    If the &quot;cron.allow&quot; file exists and has an owner other than root, this is
+a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Set the owner on the &quot;&#x2F;etc&#x2F;cron.allow&quot; file to root with the following
+command:
+
+    # chown root &#x2F;etc&#x2F;cron.allow</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71897"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71897"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71897</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71897
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must have the screen
+package installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71897"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71897"
+            >
+              <!-- Result description -->
+              :  A session time-out lock is a temporary action taken when a user
+stops work and moves away from the immediate physical vicinity of the
+information system but does not log out because of the temporary nature of the
+absence. Rather than relying on the user to manually lock their operating
+system session prior to vacating the vicinity, operating systems need to be
+able to identify when a user&#39;s session has idled and take action to initiate
+the session lock.
+
+    The screen and tmux packages allow for a session lock to be implemented and
+configured.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package screen is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71897</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must have the screen
+package installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >:  A session time-out lock is a temporary action taken when a user
+stops work and moves away from the immediate physical vicinity of the
+information system but does not log out because of the temporary nature of the
+absence. Rather than relying on the user to manually lock their operating
+system session prior to vacating the vicinity, operating systems need to be
+able to identify when a user&#39;s session has idled and take action to initiate
+the session lock.
+
+    The screen and tmux packages allow for a session lock to be implemented and
+configured.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system has the screen package installed.
+
+    Check to see if the screen package is installed with the following command:
+
+    # yum list installed screen
+    screen-4.3.1-3-x86_64.rpm
+
+    If the screen package is not installed, check to see if the tmux package is
+installed with the following command:
+
+    #yum list installed tmux
+    tmux-1.8-4.el7.x86_64.rpm
+
+    If either the screen package or the tmux package is not installed, this is
+a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Install the screen package to allow the initiation of a session lock after
+a 15-minute period of inactivity.
+
+    Install the screen program (if it is not on the system) with the following
+command:
+
+    # yum install screen
+
+    OR
+
+    Install the tmux program (if it is not on the system) with the following
+command:
+
+    #yum install tmux</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72303"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72303"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72303</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72303
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that remote X connections for interactive users are encrypted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72303"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72303"
+            >
+              <!-- Result description -->
+              Open X displays allow an attacker to capture keystrokes and execute
+commands remotely.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration X11Forwarding is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72303</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that remote X connections for interactive users are encrypted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open X displays allow an attacker to capture keystrokes and execute
+commands remotely.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify remote X connections for interactive users are encrypted.
+
+    Check that remote X connections are encrypted with the following command:
+
+    # grep -i x11forwarding &#x2F;etc&#x2F;ssh&#x2F;sshd_config | grep -v &quot;^#&quot;
+
+    X11Forwarding yes
+
+    If the &quot;X11Forwarding&quot; keyword is set to &quot;no&quot; or is missing, this is a
+finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure SSH to encrypt connections for interactive users.
+
+    Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the line for the
+&quot;X11Forwarding&quot; keyword and set its value to &quot;yes&quot; (this file may be named
+differently or be in a different location if using a version of SSH that is
+provided by a third-party vendor):
+
+    X11Forwarding yes
+
+    The SSH service must be restarted for changes to take effect:
+
+    # systemctl restart sshd</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71979"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71979"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71979</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71979
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent the
+installation of software, patches, service packs, device drivers, or operating
+system components of local packages without verification they have been
+digitally signed using a certificate that is issued by a Certificate Authority
+(CA) that is recognized and approved by the organization.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71979"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71979"
+            >
+              <!-- Result description -->
+              Changes to any software components can have significant effects on the
+overall security of the operating system. This requirement ensures the software
+has not been tampered with and that it has been provided by a trusted vendor.
+
+    Accordingly, patches, service packs, device drivers, or operating system
+components must be signed with a certificate recognized and approved by the
+organization.
+
+    Verifying the authenticity of the software prior to installation validates
+the integrity of the patch or upgrade received from a vendor. This verifies the
+software has not been tampered with and that it has been provided by a trusted
+vendor. Self-signed certificates are disallowed by this requirement. The
+operating system should not have to verify the software again. This requirement
+does not mandate DoD certificates for this purpose; however, the certificate
+used to verify the software must be from an approved CA.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >INI &#x2F;etc&#x2F;yum.conf main.localpkg_gpgcheck </span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71979</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent the
+installation of software, patches, service packs, device drivers, or operating
+system components of local packages without verification they have been
+digitally signed using a certificate that is issued by a Certificate Authority
+(CA) that is recognized and approved by the organization.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Changes to any software components can have significant effects on the
+overall security of the operating system. This requirement ensures the software
+has not been tampered with and that it has been provided by a trusted vendor.
+
+    Accordingly, patches, service packs, device drivers, or operating system
+components must be signed with a certificate recognized and approved by the
+organization.
+
+    Verifying the authenticity of the software prior to installation validates
+the integrity of the patch or upgrade received from a vendor. This verifies the
+software has not been tampered with and that it has been provided by a trusted
+vendor. Self-signed certificates are disallowed by this requirement. The
+operating system should not have to verify the software again. This requirement
+does not mandate DoD certificates for this purpose; however, the certificate
+used to verify the software must be from an approved CA.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system prevents the installation of patches, service
+packs, device drivers, or operating system components of local packages without
+verification that they have been digitally signed using a certificate that is
+recognized and approved by the organization.
+
+    Check that yum verifies the signature of local packages prior to install
+with the following command:
+
+    # grep localpkg_gpgcheck &#x2F;etc&#x2F;yum.conf
+    localpkg_gpgcheck&#x3D;1
+
+    If &quot;localpkg_gpgcheck&quot; is not set to &quot;1&quot;, or if options are missing or
+commented out, ask the System Administrator how the signatures of local
+packages and other operating system components are verified.
+
+    If there is no process to validate the signatures of local packages that is
+approved by the organization, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to verify the signature of local packages
+prior to install by setting the following option in the &quot;&#x2F;etc&#x2F;yum.conf&quot; file:
+
+    localpkg_gpgcheck&#x3D;1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71971"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71971"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71971</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-6 (10)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002235
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71971
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent
+non-privileged users from executing privileged functions to include disabling,
+circumventing, or altering implemented security safeguards&#x2F;countermeasures.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-6 (10)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002235
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71971"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71971"
+            >
+              <!-- Result description -->
+              Preventing non-privileged users from executing privileged functions
+mitigates the risk that unauthorized individuals or processes may gain
+unnecessary access to information or privileges.
+
+    Privileged functions include, for example, establishing accounts,
+performing system integrity checks, or administering cryptographic key
+management activities. Non-privileged users are individuals who do not possess
+appropriate authorizations. Circumventing intrusion detection and prevention
+mechanisms or malicious code protection mechanisms are examples of privileged
+functions that require protection from non-privileged users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;selinuxenabled&#x60; exist? is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;selinuxenabled&#x60; exit_status is expected to eq 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >seusers is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SELinux login __default__ is expected to be in &quot;user_u&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;unconfined_u&#x60; to be in the list: &#x60;[&quot;user_u&quot;]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71971</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent
+non-privileged users from executing privileged functions to include disabling,
+circumventing, or altering implemented security safeguards&#x2F;countermeasures.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Preventing non-privileged users from executing privileged functions
+mitigates the risk that unauthorized individuals or processes may gain
+unnecessary access to information or privileges.
+
+    Privileged functions include, for example, establishing accounts,
+performing system integrity checks, or administering cryptographic key
+management activities. Non-privileged users are individuals who do not possess
+appropriate authorizations. Circumventing intrusion detection and prevention
+mechanisms or malicious code protection mechanisms are examples of privileged
+functions that require protection from non-privileged users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), AC-6 (10), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If an HBSS or HIPS is active on the system, this is Not Applicable.
+
+    Verify the operating system prevents non-privileged users from executing
+privileged functions to include disabling, circumventing, or altering
+implemented security safeguards&#x2F;countermeasures.
+
+    Get a list of authorized users (other than System Administrator and guest
+accounts) for the system.
+
+    Check the list against the system by using the following command:
+
+    # semanage login -l | more
+    Login Name SELinux User MLS&#x2F;MCS Range Service
+    __default__ user_u s0-s0:c0.c1023 *
+    root unconfined_u s0-s0:c0.c1023 *
+    system_u system_u s0-s0:c0.c1023 *
+    joe staff_u s0-s0:c0.c1023 *
+
+    All administrators must be mapped to the &quot;sysadm_u&quot; or &quot;staff_u&quot; users
+role.
+
+    All authorized non-administrative users must be mapped to the &quot;user_u&quot;
+role.
+
+    If they are not mapped in this way, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to prevent non-privileged users from
+executing privileged functions to include disabling, circumventing, or altering
+implemented security safeguards&#x2F;countermeasures.
+
+    Use the following command to map a new user to the &quot;sysdam_u&quot; role:
+
+    #semanage login -a -s sysadm_u &lt;username&gt;
+
+    Use the following command to map an existing user to the &quot;sysdam_u&quot; role:
+
+    #semanage login -m -s sysadm_u &lt;username&gt;
+
+    Use the following command to map a new user to the &quot;staff_u&quot; role:
+
+    #semanage login -a -s staff_u &lt;username&gt;
+
+    Use the following command to map an existing user to the &quot;staff_u&quot; role:
+
+    #semanage login -m -s staff_u &lt;username&gt;
+
+    Use the following command to map a new user to the &quot;user_u&quot; role:
+
+    # semanage login -a -s user_u &lt;username&gt;
+
+    Use the following command to map an existing user to the &quot;user_u&quot; role:
+
+    # semanage login -m -s user_u &lt;username&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71977"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71977"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71977</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71977
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must prevent the
+installation of software, patches, service packs, device drivers, or operating
+system components from a repository without verification they have been
+digitally signed using a certificate that is issued by a Certificate Authority
+(CA) that is recognized and approved by the organization.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71977"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71977"
+            >
+              <!-- Result description -->
+              Changes to any software components can have significant effects on the
+overall security of the operating system. This requirement ensures the software
+has not been tampered with and that it has been provided by a trusted vendor.
+
+    Accordingly, patches, service packs, device drivers, or operating system
+components must be signed with a certificate recognized and approved by the
+organization.
+
+    Verifying the authenticity of the software prior to installation validates
+the integrity of the patch or upgrade received from a vendor. This verifies the
+software has not been tampered with and that it has been provided by a trusted
+vendor. Self-signed certificates are disallowed by this requirement. The
+operating system should not have to verify the software again. This requirement
+does not mandate DoD certificates for this purpose; however, the certificate
+used to verify the software must be from an approved CA.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >INI &#x2F;etc&#x2F;yum.conf main.gpgcheck is expected to cmp &#x3D;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71977</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must prevent the
+installation of software, patches, service packs, device drivers, or operating
+system components from a repository without verification they have been
+digitally signed using a certificate that is issued by a Certificate Authority
+(CA) that is recognized and approved by the organization.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Changes to any software components can have significant effects on the
+overall security of the operating system. This requirement ensures the software
+has not been tampered with and that it has been provided by a trusted vendor.
+
+    Accordingly, patches, service packs, device drivers, or operating system
+components must be signed with a certificate recognized and approved by the
+organization.
+
+    Verifying the authenticity of the software prior to installation validates
+the integrity of the patch or upgrade received from a vendor. This verifies the
+software has not been tampered with and that it has been provided by a trusted
+vendor. Self-signed certificates are disallowed by this requirement. The
+operating system should not have to verify the software again. This requirement
+does not mandate DoD certificates for this purpose; however, the certificate
+used to verify the software must be from an approved CA.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system prevents the installation of patches, service
+packs, device drivers, or operating system components from a repository without
+verification that they have been digitally signed using a certificate that is
+recognized and approved by the organization.
+
+    Check that yum verifies the signature of packages from a repository prior
+to install with the following command:
+
+    # grep gpgcheck &#x2F;etc&#x2F;yum.conf
+    gpgcheck&#x3D;1
+
+    If &quot;gpgcheck&quot; is not set to &quot;1&quot;, or if options are missing or commented
+out, ask the System Administrator how the certificates for patches and other
+operating system components are verified.
+
+    If there is no process to validate certificates that is approved by the
+organization, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to verify the signature of packages from a
+repository prior to install by setting the following option in the
+&quot;&#x2F;etc&#x2F;yum.conf&quot; file:
+
+    gpgcheck&#x3D;1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72273"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72273"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72273</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72273
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must enable an
+application firewall, if available.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72273"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72273"
+            >
+              <!-- Result description -->
+              Firewalls protect computers from network attacks by blocking or
+limiting access to open network ports. Application firewalls limit which
+applications are allowed to communicate over the network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package firewalld is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package iptables is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service firewalld.service is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72273</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must enable an
+application firewall, if available.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Firewalls protect computers from network attacks by blocking or
+limiting access to open network ports. Application firewalls limit which
+applications are allowed to communicate over the network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system enabled an application firewall.
+
+    Check to see if &quot;firewalld&quot; is installed with the following command:
+
+    # yum list installed firewalld
+    firewalld-0.3.9-11.el7.noarch.rpm
+
+    If the &quot;firewalld&quot; package is not installed, ask the System Administrator
+if another firewall application (such as iptables) is installed.
+
+    If an application firewall is not installed, this is a finding.
+
+    Check to see if the firewall is loaded and active with the following
+command:
+
+    # systemctl status firewalld
+    firewalld.service - firewalld - dynamic firewall daemon
+
+       Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;firewalld.service; enabled)
+       Active: active (running) since Tue 2014-06-17 11:14:49 CEST; 5 days ago
+
+    If &quot;firewalld&quot; does not show a status of &quot;loaded&quot; and &quot;active&quot;, this
+is a finding.
+
+    Check the state of the firewall:
+
+    # firewall-cmd --state
+    running
+
+    If &quot;firewalld&quot; does not show a state of &quot;running&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure the operating system&#39;s application firewall is enabled.
+
+    Install the &quot;firewalld&quot; package, if it is not on the system, with the
+following command:
+
+    # yum install firewalld
+
+    Start the firewall via &quot;systemctl&quot; with the following command:
+
+    # systemctl start firewalld</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72299"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72299"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72299</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72299
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must not have a File
+Transfer Protocol (FTP) server package installed unless needed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72299"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72299"
+            >
+              <!-- Result description -->
+              The FTP service provides an unencrypted remote access that does not
+provide for the confidentiality and integrity of user passwords or the remote
+session. If a privileged user were to log on using this service, the privileged
+user password could be compromised. SSH or other encrypted file transfer
+methods must be used in place of this service.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package vsftpd is expected not to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72299</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must not have a File
+Transfer Protocol (FTP) server package installed unless needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The FTP service provides an unencrypted remote access that does not
+provide for the confidentiality and integrity of user passwords or the remote
+session. If a privileged user were to log on using this service, the privileged
+user password could be compromised. SSH or other encrypted file transfer
+methods must be used in place of this service.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify an FTP server has not been installed on the system.
+
+    Check to see if an FTP server has been installed with the following
+commands:
+
+    # yum list installed vsftpd
+
+     vsftpd-3.0.2.el7.x86_64.rpm
+
+    If &quot;vsftpd&quot; is installed and is not documented with the Information
+System Security Officer (ISSO) as an operational requirement, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document the &quot;vsftpd&quot; package with the ISSO as an operational requirement
+or remove it from the system with the following command:
+
+    # yum remove vsftpd</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72177"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72177"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72177</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72177
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the postqueue command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72177"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72177"
+            >
+              <!-- Result description -->
+              Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged postfix commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;postqueue&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;postqueue&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72177</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the postqueue command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged postfix commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;postqueue&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;sbin&#x2F;postqueue &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;postqueue -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-postfix
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;postqueue&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;postqueue -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-postfix
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72067"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72067"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72067</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002476
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72067
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must implement NIST
+FIPS-validated cryptography for the following: to provision digital signatures,
+to generate cryptographic hashes, and to protect data requiring data-at-rest
+protections in accordance with applicable federal laws, Executive Orders,
+directives, policies, regulations, and standards.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002476
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72067"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72067"
+            >
+              <!-- Result description -->
+              Use of weak or untested encryption algorithms undermines the purposes
+of using encryption to protect data. The operating system must implement
+cryptographic modules adhering to the higher standards approved by the federal
+government since this provides assurance they have been tested and validated.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >System Package dracut-fips is expected to be installed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto  is expected to match &#x2F;\bfips&#x3D;1\b&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto &quot; to match &#x2F;\bfips&#x3D;1\b&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;\bfips&#x3D;1\b&#x2F;
++&quot;ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto &quot;
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto  is expected to match &#x2F;\bfips&#x3D;1\b&#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto &quot; to match &#x2F;\bfips&#x3D;1\b&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;\bfips&#x3D;1\b&#x2F;
++&quot;ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto &quot;
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File &#x2F;proc&#x2F;sys&#x2F;crypto&#x2F;fips_enabled content.strip is expected to cmp &#x3D;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72067</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must implement NIST
+FIPS-validated cryptography for the following: to provision digital signatures,
+to generate cryptographic hashes, and to protect data requiring data-at-rest
+protections in accordance with applicable federal laws, Executive Orders,
+directives, policies, regulations, and standards.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of weak or untested encryption algorithms undermines the purposes
+of using encryption to protect data. The operating system must implement
+cryptographic modules adhering to the higher standards approved by the federal
+government since this provides assurance they have been tested and validated.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2), SC-28, SC-13, SC-28 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system implements DoD-approved encryption to protect
+the confidentiality of remote access sessions.
+
+    Check to see if the &quot;dracut-fips&quot; package is installed with the following
+command:
+
+    # yum list installed dracut-fips
+
+    dracut-fips-033-360.el7_2.x86_64.rpm
+
+    If a &quot;dracut-fips&quot; package is installed, check to see if the kernel
+command line is configured to use FIPS mode with the following command:
+
+    Note: GRUB 2 reads its configuration from the &quot;&#x2F;boot&#x2F;grub2&#x2F;grub.cfg&quot; file
+on traditional BIOS-based machines and from the
+&quot;&#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg&quot; file on UEFI machines.
+
+    # grep fips &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+    &#x2F;vmlinuz-3.8.0-0.40.el7.x86_64 root&#x3D;&#x2F;dev&#x2F;mapper&#x2F;rhel-root ro rd.md&#x3D;0
+rd.dm&#x3D;0 rd.lvm.lv&#x3D;rhel&#x2F;swap crashkernel&#x3D;auto rd.luks&#x3D;0 vconsole.keymap&#x3D;us
+rd.lvm.lv&#x3D;rhel&#x2F;root rhgb fips&#x3D;1 quiet
+
+    If the kernel command line is configured to use FIPS mode, check to see if
+the system is in FIPS mode with the following command:
+
+    # cat &#x2F;proc&#x2F;sys&#x2F;crypto&#x2F;fips_enabled
+    1
+
+    If a &quot;dracut-fips&quot; package is not installed, the kernel command line does
+not have a fips entry, or the system has a value of &quot;0&quot; for &quot;fips_enabled&quot;
+in &quot;&#x2F;proc&#x2F;sys&#x2F;crypto&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to implement DoD-approved encryption by
+installing the dracut-fips package.
+
+    To enable strict FIPS compliance, the fips&#x3D;1 kernel option needs to be
+added to the kernel command line during system installation so key generation
+is done with FIPS-approved algorithms and continuous monitoring tests in place.
+
+    Configure the operating system to implement DoD-approved encryption by
+following the steps below:
+
+    The fips&#x3D;1 kernel option needs to be added to the kernel command line
+during system installation so that key generation is done with FIPS-approved
+algorithms and continuous monitoring tests in place. Users should also ensure
+that the system has plenty of entropy during the installation process by moving
+the mouse around, or if no mouse is available, ensuring that many keystrokes
+are typed. The recommended amount of keystrokes is 256 and more. Less than 256
+keystrokes may generate a non-unique key.
+
+    Install the dracut-fips package with the following command:
+
+    # yum install dracut-fips
+
+    Recreate the &quot;initramfs&quot; file with the following command:
+
+    Note: This command will overwrite the existing &quot;initramfs&quot; file.
+
+    # dracut -f
+
+    Modify the kernel command line of the current kernel in the &quot;grub.cfg&quot;
+file by adding the following option to the GRUB_CMDLINE_LINUX key in the
+&quot;&#x2F;etc&#x2F;default&#x2F;grub&quot; file and then rebuild the &quot;grub.cfg&quot; file:
+
+    fips&#x3D;1
+
+    Changes to &quot;&#x2F;etc&#x2F;default&#x2F;grub&quot; require rebuilding the &quot;grub.cfg&quot; file
+as follows:
+
+    On BIOS-based machines, use the following command:
+
+    # grub2-mkconfig -o &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+
+    On UEFI-based machines, use the following command:
+
+    # grub2-mkconfig -o &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg
+
+    If &#x2F;boot or &#x2F;boot&#x2F;efi reside on separate partitions, the kernel parameter
+boot&#x3D;&lt;partition of &#x2F;boot or &#x2F;boot&#x2F;efi&gt; must be added to the kernel command
+line. You can identify a partition by running the df &#x2F;boot or df &#x2F;boot&#x2F;efi
+command:
+
+    # df &#x2F;boot
+    Filesystem 1K-blocks Used Available Use% Mounted on
+    &#x2F;dev&#x2F;sda1 495844 53780 416464 12% &#x2F;boot
+
+    To ensure the &quot;boot&#x3D;&quot; configuration option will work even if device
+naming changes occur between boots, identify the universally unique identifier
+(UUID) of the partition with the following command:
+
+    # blkid &#x2F;dev&#x2F;sda1
+    &#x2F;dev&#x2F;sda1: UUID&#x3D;&quot;05c000f1-a213-759e-c7a2-f11b7424c797&quot; TYPE&#x3D;&quot;ext4&quot;
+
+    For the example above, append the following string to the kernel command
+line:
+
+    boot&#x3D;UUID&#x3D;05c000f1-a213-759e-c7a2-f11b7424c797
+
+    Reboot the system for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72139"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72139"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72139</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72139
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the chcon command.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72139"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72139"
+            >
+              <!-- Result description -->
+              Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chcon&quot; permissions is expected not to cmp &#x3D;&#x3D; []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chcon&quot; action is expected not to include &quot;never&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;x&quot;] is expected to include &quot;x&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72139</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the chcon command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chcon&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;chcon &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chcon -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chcon&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chcon -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72275"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72275"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72275</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72275
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must display the date
+and time of the last successful account logon upon logon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72275"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72275"
+            >
+              <!-- Result description -->
+              Providing users with feedback on when account accesses last occurred
+facilitates user recognition and reporting of unauthorized account use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;postlogin] lines is expected to include session .* pam_lastlog.so showfailed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration PrintLastLog is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72275</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must display the date
+and time of the last successful account logon upon logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Providing users with feedback on when account accesses last occurred
+facilitates user recognition and reporting of unauthorized account use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify users are provided with feedback on when account accesses last
+occurred.
+
+    Check that &quot;pam_lastlog&quot; is used and not silent with the following
+command:
+
+    # grep pam_lastlog &#x2F;etc&#x2F;pam.d&#x2F;postlogin
+    session required pam_lastlog.so showfailed
+
+    If &quot;pam_lastlog&quot; is missing from &quot;&#x2F;etc&#x2F;pam.d&#x2F;postlogin&quot; file, or the
+silent option is present, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to provide users with feedback on when
+account accesses last occurred by setting the required configuration options in
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;postlogin&quot;.
+
+    Add the following line to the top of &quot;&#x2F;etc&#x2F;pam.d&#x2F;postlogin&quot;:
+
+    session required pam_lastlog.so showfailed</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-71939"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-71939"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-71939</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-71939
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using an empty password.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-71939"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-71939"
+            >
+              <!-- Result description -->
+              Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration PermitEmptyPasswords is expected to eq &quot;no&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-71939</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using an empty password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To determine how the SSH daemon&#39;s &quot;PermitEmptyPasswords&quot; option is set,
+run the following command:
+
+    # grep -i PermitEmptyPasswords &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    PermitEmptyPasswords no
+
+    If no line, a commented line, or a line indicating the value &quot;no&quot; is
+returned, the required value is set.
+
+    If the required value is not set, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To explicitly disallow remote logon from accounts with empty passwords, add
+or correct the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+    PermitEmptyPasswords no
+
+    The SSH service must be restarted for changes to take effect.  Any accounts
+with empty passwords should be disabled immediately, and PAM configuration
+should prevent users from being able to assign themselves empty passwords.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72007"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72007"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72007</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72007
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories have a valid owner.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72007"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72007"
+            >
+              <!-- Result description -->
+              Unowned files and directories may be unintentionally inherited if a
+user is assigned the same User Identifier &quot;UID&quot; as the UID of the un-owned
+files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype xfs -nouser&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype ext3 -nouser&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype ext2 -nouser&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype ext4 -nouser&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype msdos -nouser&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype vfat -nouser&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype btrfs -nouser&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Command: &#x60;find &#x2F; -xautofs -fstype fuseblk -nouser&#x60; stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72007</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories have a valid owner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unowned files and directories may be unintentionally inherited if a
+user is assigned the same User Identifier &quot;UID&quot; as the UID of the un-owned
+files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify all files and directories on the system have a valid owner.
+
+    Check the owner of all files and directories with the following command:
+
+    Note: The value after -fstype must be replaced with the filesystem type.
+XFS is used as an example.
+
+    # find &#x2F; -fstype xfs -nouser
+
+    If any files on the system do not have an assigned owner, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Either remove all files and directories from the system that do not have a
+valid user, or assign a valid user to all unowned files and directories on the
+system with the &quot;chown&quot; command:
+
+    # chown &lt;user&gt; &lt;file&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72203"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72203"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72203</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72203
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must audit all uses of
+the rmdir syscall.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002884
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72203"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72203"
+            >
+              <!-- Result description -->
+              If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;rmdir&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;rmdir&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;rmdir&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Auditd Rules with syscall &#x3D;&#x3D; &quot;rmdir&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72203</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must audit all uses of
+the rmdir syscall.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, MA-4 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;rmdir&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw rmdir &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S rmdir -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S rmdir -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;rmdir&quot; syscall, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;rmdir&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S rmdir -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S rmdir -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-72039"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-72039"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-72039</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-72039
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Red Hat Enterprise Linux operating system must be configured so
+that all system device files are correctly labeled to prevent unauthorized
+modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 f
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-11 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000318
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000368
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001812
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001814
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-72039"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-72039"
+            >
+              <!-- Result description -->
+              If an unauthorized or modified device is allowed to exist on the
+system, there is the possibility the system may perform unintended or
+unauthorized operations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >#&lt;Set: {}&gt; length is expected to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-72039</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Red Hat Enterprise Linux operating system must be configured so
+that all system device files are correctly labeled to prevent unauthorized
+modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If an unauthorized or modified device is allowed to exist on the
+system, there is the possibility the system may perform unintended or
+unauthorized operations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that all system device files are correctly labeled to prevent
+unauthorized modification.
+
+    List all device files on the system that are incorrectly labeled with the
+following commands:
+
+    Note: Device files are normally found under &quot;&#x2F;dev&quot;, but applications may
+place device files in other directories and may necessitate a search of the
+entire system.
+
+    #find &#x2F;dev -context *:device_t:* \( -type c -o -type b \) -printf &quot;%p %Z    &quot;
+
+    #find &#x2F;dev -context *:unlabeled_t:* \( -type c -o -type b \) -printf &quot;%p
+%Z    &quot;
+
+    Note: There are device files, such as &quot;&#x2F;dev&#x2F;vmci&quot;, that are used when the
+operating system is a host virtual machine. They will not be owned by a user on
+the system and require the &quot;device_t&quot; label to operate. These device files
+are not a finding.
+
+    If there is output from either of these commands, other than already noted,
+this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the following command to determine which package owns the device file:
+
+    # rpm -qf &lt;filename&gt;
+
+    The package can be reinstalled from a yum repository using the command:
+
+    # sudo yum reinstall &lt;packagename&gt;
+
+    Alternatively, the package can be reinstalled from trusted media using the
+command:
+
+    # sudo rpm -Uvh &lt;packagename&gt;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Result set print report -->
+      <div class="hidden print:block">
+        <!-- File name -->
+        <div class="rounded-t-xl border border-black px-3 py-2">
+          red_hat_good.json
+        </div>
+        <!-- Generate a result report for every result -->
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71973</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that a file integrity tool verifies the baseline operating system configuration
+at least weekly.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001744
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unauthorized changes to the baseline configuration could make the
+system vulnerable to various attacks or allow unauthorized access to the
+operating system. Changes to operating system configurations can have
+unintended side effects, some of which may be relevant to security.
+
+    Detecting such changes and providing an automated response can help avoid
+unintended, negative consequences that could ultimately affect the security
+state of the operating system. The operating system&#39;s Information Management
+Officer (IMO)&#x2F;Information System Security Officer (ISSO) and System
+Administrators (SAs) must be notified via email and&#x2F;or monitoring system trap
+when there is an unauthorized modification of a configuration item.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package aide is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;etc&#x2F;cron.daily&#x2F;aide is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71973</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that a file integrity tool verifies the baseline operating system configuration
+at least weekly.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unauthorized changes to the baseline configuration could make the
+system vulnerable to various attacks or allow unauthorized access to the
+operating system. Changes to operating system configurations can have
+unintended side effects, some of which may be relevant to security.
+
+    Detecting such changes and providing an automated response can help avoid
+unintended, negative consequences that could ultimately affect the security
+state of the operating system. The operating system&#39;s Information Management
+Officer (IMO)&#x2F;Information System Security Officer (ISSO) and System
+Administrators (SAs) must be notified via email and&#x2F;or monitoring system trap
+when there is an unauthorized modification of a configuration item.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 (5), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system routinely checks the baseline configuration for
+unauthorized changes.
+
+    Note: A file integrity tool other than Advanced Intrusion Detection
+Environment (AIDE) may be used, but the tool must be executed at least once per
+week.
+
+    Check to see if AIDE is installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the SA how file integrity checks are
+performed on the system.
+
+    Check for the presence of a cron job running daily or weekly on the system
+that executes AIDE daily to scan for changes to the system baseline. The
+command used in the example will use a daily occurrence.
+
+    Check the cron directories for a script file controlling the execution of
+the file integrity application. For example, if AIDE is installed on the
+system, use the following command:
+
+    # ls -al &#x2F;etc&#x2F;cron.* | grep aide
+    -rwxr-xr-x 1 root root 29 Nov 22 2015 aide
+
+    # grep aide &#x2F;etc&#x2F;crontab &#x2F;var&#x2F;spool&#x2F;cron&#x2F;root
+    &#x2F;etc&#x2F;crontab: 30 04 * * * &#x2F;root&#x2F;aide
+    &#x2F;var&#x2F;spool&#x2F;cron&#x2F;root: 30 04 * * * &#x2F;root&#x2F;aide
+
+    If the file integrity application does not exist, or a script file
+controlling the execution of the file integrity application does not exist,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the file integrity tool to run automatically on the system at
+least weekly. The following example output is generic. It will set cron to run
+AIDE daily, but other file integrity tools may be used:
+
+    # more &#x2F;etc&#x2F;cron.daily&#x2F;aide
+    #!&#x2F;bin&#x2F;bash
+
+    &#x2F;usr&#x2F;sbin&#x2F;aide --check | &#x2F;bin&#x2F;mail -s &quot;$HOSTNAME - Daily aide integrity
+check run&quot; root@sysname.mil</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81017</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must configure the
+au-remote plugin to off-load audit logs using the audisp-remote daemon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    Without the configuration of the &quot;au-remote&quot; plugin, the audisp-remote
+daemon will not off load the logs from the system being audited.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#39;&#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf&#39; cannot be found. This test cannot be checked in a automated fashion and you must check it manually</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81017</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must configure the
+au-remote plugin to off-load audit logs using the audisp-remote daemon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    Without the configuration of the &quot;au-remote&quot; plugin, the audisp-remote
+daemon will not off load the logs from the system being audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the &quot;au-remote&quot; plugin is configured to always off-load audit logs
+using the audisp-remote daemon:
+
+    # cat &#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf | grep -v &quot;^#&quot;
+
+    active &#x3D; yes
+    direction &#x3D; out
+    path &#x3D; &#x2F;sbin&#x2F;audisp-remote
+    type &#x3D; always
+    format &#x3D; string
+
+    If the &quot;direction&quot; setting is not set to &quot;out&quot;, or the line is
+commented out, this is a finding.
+
+    If the &quot;path&quot; setting is not set to &quot;&#x2F;sbin&#x2F;audisp-remote&quot;, or the line
+is commented out, this is a finding.
+
+    If the &quot;type&quot; setting is not set to &quot;always&quot;, or the line is commented
+out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the &#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf file and add or update the
+following values:
+
+    direction &#x3D; out
+    path &#x3D; &#x2F;sbin&#x2F;audisp-remote
+    type &#x3D; always
+
+    The audit daemon must be restarted for changes to take effect:
+
+    # service auditd restart</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81005</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Red Hat Enterprise Linux operating systems version 7.2 or newer with a
+Basic Input&#x2F;Output System (BIOS) must require authentication upon booting into
+single-user and maintenance modes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000213
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;boot&#x2F;grub2&#x2F;user.cfg</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;boot&#x2F;grub2&#x2F;grub.cfg set superusers is expected to cmp &#x3D;&#x3D; &quot;\&quot;root\&quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81005</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Red Hat Enterprise Linux operating systems version 7.2 or newer with a
+Basic Input&#x2F;Output System (BIOS) must require authentication upon booting into
+single-user and maintenance modes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For systems that use UEFI, this is Not Applicable.
+
+    For systems that are running a version of RHEL prior to 7.2, this is Not
+Applicable.
+
+    Check to see if an encrypted root password is set. On systems that use a
+BIOS, use the following command:
+
+    # grep -iw grub2_password &#x2F;boot&#x2F;grub2&#x2F;user.cfg
+    GRUB2_PASSWORD&#x3D;grub.pbkdf2.sha512.[password_hash]
+
+    If the root password does not begin with &quot;grub.pbkdf2.sha512&quot;, this is a
+finding.
+
+    Verify that the &quot;root&quot; account is set as the &quot;superusers&quot;:
+
+    # grep -iw &quot;superusers&quot; &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+        set superusers&#x3D;&quot;root&quot;
+        export superusers
+
+    If &quot;superusers&quot; is not set to &quot;root&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to encrypt the boot password for root.
+
+    Generate an encrypted grub2 password for root with the following command:
+
+    Note: The hash generated is an example.
+
+    # grub2-setpassword
+    Enter password:
+    Confirm password:
+
+    Edit the &#x2F;boot&#x2F;grub2&#x2F;grub.cfg file and add or modify the following lines in
+the &quot;### BEGIN &#x2F;etc&#x2F;grub.d&#x2F;01_users ###&quot; section:
+
+    set superusers&#x3D;&quot;root&quot;
+    export superusers</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71957</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not allow users to
+override SSH environment variables.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Failure to restrict system access to authenticated users negatively
+impacts operating system security.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration PermitUserEnvironment is expected to eq &quot;no&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71957</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not allow users to
+override SSH environment variables.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Failure to restrict system access to authenticated users negatively
+impacts operating system security.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system does not allow users to override environment
+variables to the SSH daemon.
+
+    Check for the value of the &quot;PermitUserEnvironment&quot; keyword with the
+following command:
+
+    # grep -i permituserenvironment &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    PermitUserEnvironment no
+
+    If the &quot;PermitUserEnvironment&quot; keyword is not set to &quot;no&quot;, is missing,
+or is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to not allow users to override environment
+variables to the SSH daemon.
+
+    Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the line for
+&quot;PermitUserEnvironment&quot; keyword and set the value to &quot;no&quot;:
+
+    PermitUserEnvironment no
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-77823</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must require
+authentication upon booting into single-user and maintenance modes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000213
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;grep -i execstart &#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;rescue.service&#x60; stdout.strip is expected to match &#x2F;\&#x2F;usr\&#x2F;sbin\&#x2F;sulogin&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-77823</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must require
+authentication upon booting into single-user and maintenance modes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system must require authentication upon booting into
+single-user and maintenance modes.
+
+    Check that the operating system requires authentication upon booting into
+single-user mode with the following command:
+
+    # grep -i execstart &#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;rescue.service | grep -i sulogin
+
+    ExecStart&#x3D;-&#x2F;bin&#x2F;sh -c &quot;&#x2F;usr&#x2F;sbin&#x2F;sulogin; &#x2F;usr&#x2F;bin&#x2F;systemctl --fail
+--no-block default&quot;
+
+    If &quot;ExecStart&quot; does not have &quot;&#x2F;usr&#x2F;sbin&#x2F;sulogin&quot; as an option, this is
+a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to require authentication upon booting into
+single-user and maintenance modes.
+
+    Add or modify the &quot;ExecStart&quot; line in
+&quot;&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;rescue.service&quot; to include &quot;&#x2F;usr&#x2F;sbin&#x2F;sulogin&quot;:
+
+    ExecStart&#x3D;-&#x2F;bin&#x2F;sh -c &quot;&#x2F;usr&#x2F;sbin&#x2F;sulogin; &#x2F;usr&#x2F;bin&#x2F;systemctl --fail
+--no-block default&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72243</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using rhosts authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration IgnoreRhosts is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72243</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using rhosts authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH daemon does not allow authentication using known hosts
+authentication.
+
+    To determine how the SSH daemon&#39;s &quot;IgnoreRhosts&quot; option is set, run the
+following command:
+
+    # grep -i IgnoreRhosts &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    IgnoreRhosts yes
+
+    If the value is returned as &quot;no&quot;, the returned line is commented out, or
+no output is returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the SSH daemon to not allow authentication using known hosts
+authentication.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;, or uncomment the line
+and set the value to &quot;yes&quot;:
+
+    IgnoreRhosts yes</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-79001</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the finit_module syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;finit_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;finit_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;finit_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;finit_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-79001</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the finit_module syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;finit_module&quot; syscall occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw finit_module &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S finit_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S finit_module -k module-change
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;finit_module&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;finit_module&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S finit_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S finit_module -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71967</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have the
+rsh-server package installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is detrimental for operating systems to provide, or install by
+default, functionality exceeding requirements or mission objectives. These
+unnecessary capabilities or services are often overlooked and therefore may
+remain unsecured. They increase the risk to the platform by providing
+additional attack vectors.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services, provided by default, may not be
+necessary to support essential organizational operations (e.g., key missions,
+functions).
+
+    The rsh-server service provides an unencrypted remote access service that
+does not provide for the confidentiality and integrity of user passwords or the
+remote session and has very weak authentication.
+
+    If a privileged user were to log on using this service, the privileged user
+password could be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package rsh-server is expected not to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71967</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have the
+rsh-server package installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is detrimental for operating systems to provide, or install by
+default, functionality exceeding requirements or mission objectives. These
+unnecessary capabilities or services are often overlooked and therefore may
+remain unsecured. They increase the risk to the platform by providing
+additional attack vectors.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services, provided by default, may not be
+necessary to support essential organizational operations (e.g., key missions,
+functions).
+
+    The rsh-server service provides an unencrypted remote access service that
+does not provide for the confidentiality and integrity of user passwords or the
+remote session and has very weak authentication.
+
+    If a privileged user were to log on using this service, the privileged user
+password could be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check to see if the rsh-server package is installed with the following
+command:
+
+    # yum list installed rsh-server
+
+    If the rsh-server package is installed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to disable non-essential capabilities by
+removing the rsh-server package from the system with the following command:
+
+    # yum remove rsh-server</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72301</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have the
+Trivial File Transfer Protocol (TFTP) server package installed if not required
+for operational support.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 f
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-11 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000318
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000368
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001812
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001814
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If TFTP is required for operational support (such as the transmission
+of router configurations) its use must be documented with the Information
+System Security Officer (ISSO), restricted to only authorized personnel, and
+have access control rules established.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package tftp-server is expected not to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72301</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have the
+Trivial File Transfer Protocol (TFTP) server package installed if not required
+for operational support.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If TFTP is required for operational support (such as the transmission
+of router configurations) its use must be documented with the Information
+System Security Officer (ISSO), restricted to only authorized personnel, and
+have access control rules established.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify a TFTP server has not been installed on the system.
+
+    Check to see if a TFTP server has been installed with the following command:
+
+    # yum list installed tftp-server
+    tftp-server-0.49-9.el7.x86_64.rpm
+
+    If TFTP is installed and the requirement for TFTP is not documented with
+the ISSO, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove the TFTP package from the system with the following command:
+
+# yum remove tftp-server</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72147</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must generate audit
+records for all successful account access events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-2 d
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000126
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;var&#x2F;log&#x2F;lastlog&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;var&#x2F;log&#x2F;lastlog&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72147</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must generate audit
+records for all successful account access events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-2 d, AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when successful account
+access events occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -i &#x2F;var&#x2F;log&#x2F;lastlog &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;var&#x2F;log&#x2F;lastlog -p wa -k logins
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when successful
+account access events occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;var&#x2F;log&#x2F;lastlog -p wa -k logins
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71921</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured to
+use the shadow file to store only encrypted representations of passwords.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000196
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">login.defs ENCRYPT_METHOD is expected to cmp &#x3D;&#x3D; &quot;SHA512&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71921</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured to
+use the shadow file to store only encrypted representations of passwords.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system&#39;s shadow file is configured to store only encrypted
+representations of passwords. The strength of encryption that must be used to
+hash passwords for all accounts is SHA512.
+
+    Check that the system is configured to create SHA512 hashed passwords with
+the following command:
+
+    # grep -i encrypt &#x2F;etc&#x2F;login.defs
+    ENCRYPT_METHOD SHA512
+
+    If the &quot;&#x2F;etc&#x2F;login.defs&quot; configuration file does not exist or allows for
+password hashes other than SHA512 to be used, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to store only SHA512 encrypted
+representations of passwords.
+
+    Add or update the following line in &quot;&#x2F;etc&#x2F;login.defs&quot;:
+
+    ENCRYPT_METHOD SHA512</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72205</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the unlink syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;unlink&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;unlink&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;unlink&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;unlink&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72205</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the unlink syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unlink&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw unlink &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S unlink -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S unlink -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;unlink&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unlink&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S unlink -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S unlink -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72111</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the setxattr syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;setxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;setxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;setxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;setxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72111</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the setxattr syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setxattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw setxattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S setxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S setxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;setxattr&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setxattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S setxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S setxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71961</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Red Hat Enterprise Linux operating systems prior to version 7.2 with a
+Basic Input&#x2F;Output System (BIOS) must require authentication upon booting into
+single-user and maintenance modes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000213
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There must be only one grub2 superuser, and it must have the value root length is expected to cmp &#x3D;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There must be only one grub2 superuser, and it must have the value root first is expected to cmp &#x3D;&#x3D; &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The grub2 superuser password entry must begin with &#39;password_pbkdf2&#39; is expected to include &quot;password_pbkdf2&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The grub2 superuser password entry must begin with &#39;password_pbkdf2&#39; length is expected to be &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The grub2 superuser account password should be encrypted with pbkdf2. is expected to match &#x2F;password_pbkdf2\sroot\sgrub\.pbkdf2&#x2F;i</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71961</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Red Hat Enterprise Linux operating systems prior to version 7.2 with a
+Basic Input&#x2F;Output System (BIOS) must require authentication upon booting into
+single-user and maintenance modes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For systems that use UEFI, this is Not Applicable.
+    For systems that are running RHEL 7.2 or newer, this is Not Applicable.
+
+    Check to see if an encrypted root password is set. On systems that use a
+BIOS, use the following command:
+
+    # grep -i password_pbkdf2 &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+
+    password_pbkdf2 [superusers-account] [password-hash]
+
+    If the root password entry does not begin with &quot;password_pbkdf2&quot;, this is
+a finding.
+
+    If the &quot;superusers-account&quot; is not set to &quot;root&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to encrypt the boot password for root.
+
+    Generate an encrypted grub2 password for root with the following command:
+
+    Note: The hash generated is an example.
+
+    # grub2-mkpasswd-pbkdf2
+
+    Enter Password:
+    Reenter Password:
+    PBKDF2 hash of your password is
+grub.pbkdf2.sha512.10000.F3A7CFAA5A51EED123BE8238C23B25B2A6909AFC9812F0D45
+
+    Edit &quot;&#x2F;etc&#x2F;grub.d&#x2F;40_custom&quot; and add the following lines below the
+comments:
+
+    # vi &#x2F;etc&#x2F;grub.d&#x2F;40_custom
+
+    set superusers&#x3D;&quot;root&quot;
+
+    password_pbkdf2 root {hash from grub2-mkpasswd-pbkdf2 command}
+
+    Generate a new &quot;grub.conf&quot; file with the new password with the following
+commands:
+
+    # grub2-mkconfig --output&#x3D;&#x2F;tmp&#x2F;grub2.cfg
+    # mv &#x2F;tmp&#x2F;grub2.cfg &#x2F;boot&#x2F;grub2&#x2F;grub.cfg</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72295</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Network interfaces configured on the Red Hat Enterprise Linux
+operating system must not be in promiscuous mode.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Network interfaces in promiscuous mode allow for the capture of all
+network traffic visible to the system. If unauthorized individuals can access
+these applications, it may allow then to collect information such as logon IDs,
+passwords, and key exchanges between systems.
+
+    If the system is being used to perform a network troubleshooting function,
+the use of these tools must be documented with the Information System Security
+Officer (ISSO) and restricted to only authorized personnel.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;ip link | grep -i promisc&#x60; stdout.strip is expected to match &#x2F;^$&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72295</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Network interfaces configured on the Red Hat Enterprise Linux
+operating system must not be in promiscuous mode.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Network interfaces in promiscuous mode allow for the capture of all
+network traffic visible to the system. If unauthorized individuals can access
+these applications, it may allow then to collect information such as logon IDs,
+passwords, and key exchanges between systems.
+
+    If the system is being used to perform a network troubleshooting function,
+the use of these tools must be documented with the Information System Security
+Officer (ISSO) and restricted to only authorized personnel.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify network interfaces are not in promiscuous mode unless approved by
+the ISSO and documented.
+
+    Check for the status with the following command:
+
+    # ip link | grep -i promisc
+
+    If network interfaces are found on the system in promiscuous mode and their
+use has not been approved by the ISSO and documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure network interfaces to turn off promiscuous mode unless approved
+by the ISSO and documented.
+
+    Set the promiscuous mode of an interface to off with the following command:
+
+    #ip link set dev &lt;devicename&gt; multicast off promisc off</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72043</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent files with
+the setuid and setgid bit set from being executed on file systems that are used
+with removable media.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File system &quot;xfs&quot; does not correspond to removable media. is expected to eq true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72043</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent files with
+the setuid and setgid bit set from being executed on file systems that are used
+with removable media.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify file systems that are used for removable media are mounted with the
+&quot;nosuid&quot; option.
+
+    Check the file systems that are mounted at boot time with the following
+command:
+
+    # more &#x2F;etc&#x2F;fstab
+
+    UUID&#x3D;2bc871e4-e2a3-4f29-9ece-3be60c835222 &#x2F;mnt&#x2F;usbflash vfat
+noauto,owner,ro,nosuid 0 0
+
+    If a file system found in &quot;&#x2F;etc&#x2F;fstab&quot; refers to removable media and it
+does not have the &quot;nosuid&quot; option set, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the &quot;&#x2F;etc&#x2F;fstab&quot; to use the &quot;nosuid&quot; option on
+file systems that are associated with removable media.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72081</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must shut down upon
+audit processing failure, unless availability is an overriding concern. If
+availability is a concern, the system must alert the designated staff (System
+Administrator [SA] and Information System Security Officer [ISSO] at a minimum)
+in the event of an audit processing failure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000139
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+is at risk of failing to process audit logs as required. Without this
+notification, the security personnel may be unaware of an impending failure of
+the audit capability, and system operation may be adversely affected.
+
+    Audit processing failures include software&#x2F;hardware errors, failures in the
+audit capturing mechanisms, and audit storage capacity being reached or
+exceeded.
+
+    This requirement applies to each audit data storage repository (i.e.,
+distinct information system component where audit records are stored), the
+centralized audit storage capacity of organizations (i.e., all audit data
+storage repositories combined), or both.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">2 is expected to match &#x2F;^(1|2)$&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72081</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must shut down upon
+audit processing failure, unless availability is an overriding concern. If
+availability is a concern, the system must alert the designated staff (System
+Administrator [SA] and Information System Security Officer [ISSO] at a minimum)
+in the event of an audit processing failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+is at risk of failing to process audit logs as required. Without this
+notification, the security personnel may be unaware of an impending failure of
+the audit capability, and system operation may be adversely affected.
+
+    Audit processing failures include software&#x2F;hardware errors, failures in the
+audit capturing mechanisms, and audit storage capacity being reached or
+exceeded.
+
+    This requirement applies to each audit data storage repository (i.e.,
+distinct information system component where audit records are stored), the
+centralized audit storage capacity of organizations (i.e., all audit data
+storage repositories combined), or both.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Confirm the audit configuration regarding how auditing processing failures
+are handled.
+
+    Check to see what level &quot;auditctl&quot; is set to with following command:
+
+    # auditctl -s | grep -i &quot;fail&quot;
+
+    failure 2
+
+    If the value of &quot;failure&quot; is set to &quot;2&quot;, the system is configured to
+panic (shut down) in the event of an auditing failure.
+
+    If the value of &quot;failure&quot; is set to &quot;1&quot;, the system is configured to
+only send information to the kernel log regarding the failure.
+
+    If the &quot;failure&quot; setting is not set, this is a CAT I finding.
+
+    If the &quot;failure&quot; setting is set to any value other than &quot;1&quot; or &quot;2&quot;,
+this is a CAT II finding.
+
+    If the &quot;failure&quot; setting is set to &quot;1&quot; but the availability concern is
+not documented or there is no monitoring of the kernel log, this is a CAT III
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to shut down in the event of an audit
+processing failure.
+
+    Add or correct the option to shut down the operating system with the
+following command:
+
+    # auditctl -f 2
+
+    Edit the &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot; file and add the following line:
+
+    -f 2
+
+    If availability has been determined to be more important, and this decision
+is documented with the ISSO, configure the operating system to notify system
+administration staff and ISSO staff in the event of an audit processing failure
+with the following command:
+
+    # auditctl -f 1
+
+    Edit the &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot; file and add the following line:
+
+    -f 1
+
+    Kernel log monitoring must also be configured to properly alert designated
+staff.
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72277</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not contain .shosts
+files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The .shosts files are used to configure host-based authentication for
+individual users or the system via SSH. Host-based authentication is not
+sufficient for preventing unauthorized access to the system, as it does not
+require interactive identification and authentication of a connection request,
+or for the use of two-factor authentication.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -name &#39;*.shosts&#39;&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72277</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not contain .shosts
+files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The .shosts files are used to configure host-based authentication for
+individual users or the system via SSH. Host-based authentication is not
+sufficient for preventing unauthorized access to the system, as it does not
+require interactive identification and authentication of a connection request,
+or for the use of two-factor authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify there are no &quot;.shosts&quot; files on the system.
+
+    Check the system for the existence of these files with the following
+command:
+
+    # find &#x2F; -name &#39;*.shosts&#39;
+
+    If any &quot;.shosts&quot; files are found on the system, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove any found &quot;.shosts&quot; files from the system.
+
+# rm &#x2F;[path]&#x2F;[to]&#x2F;[file]&#x2F;.shosts</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72185</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the pam_timestamp_check command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;sbin&#x2F;pam_timestamp_check&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;sbin&#x2F;pam_timestamp_check&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72185</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the pam_timestamp_check command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;pam_timestamp_check&quot; command
+occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw &quot;&#x2F;usr&#x2F;sbin&#x2F;pam_timestamp_check&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;pam_timestamp_check -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-pam
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;pam_timestamp_check&quot; command
+occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;pam_timestamp_check -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-pam
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72055</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the cron.allow file, if it exists, is group-owned by root.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the group owner of the &quot;cron.allow&quot; file is not set to root,
+sensitive information could be viewed or edited by unauthorized users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;etc&#x2F;cron.allow group is expected to eq &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72055</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the cron.allow file, if it exists, is group-owned by root.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the group owner of the &quot;cron.allow&quot; file is not set to root,
+sensitive information could be viewed or edited by unauthorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that the &quot;cron.allow&quot; file is group-owned by root.
+
+    Check the group owner of the &quot;cron.allow&quot; file with the following command:
+
+    # ls -al &#x2F;etc&#x2F;cron.allow
+    -rw------- 1 root root 6 Mar  5  2011 &#x2F;etc&#x2F;cron.allow
+
+    If the &quot;cron.allow&quot; file exists and has a group owner other than root,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the group owner on the &quot;&#x2F;etc&#x2F;cron.allow&quot; file to root with the
+following command:
+
+    # chgrp root &#x2F;etc&#x2F;cron.allow</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71997</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be a vendor
+supported release.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An operating system release is considered &quot;supported&quot; if the vendor
+continues to provide security patches for the product. With an unsupported
+release, it will not be possible to resolve security issues discovered in the
+system software.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;etc&#x2F;redhat-release content is expected to match &#x2F;Release (6.7*|7.[2-9].*)&#x2F;i</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71997</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be a vendor
+supported release.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An operating system release is considered &quot;supported&quot; if the vendor
+continues to provide security patches for the product. With an unsupported
+release, it will not be possible to resolve security issues discovered in the
+system software.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the version of the operating system is vendor supported.
+
+Check the version of the operating system with the following command:
+
+# cat &#x2F;etc&#x2F;redhat-release
+
+Red Hat Enterprise Linux Server release 7.4 (Maipo)
+
+Current End of Life for RHEL 7.1 is 31 March 2017.
+
+Current End of Life for RHEL 7.2 is 30 November 2017.
+
+Current End of Life for RHEL 7.3 is 30 November 2018.
+
+Current End of Life for RHEL 7.4 is 31 August 2019.
+
+Current End of Life for RHEL 7.5 is 30 April 2020.
+
+Current End of Life for RHEL 7.6 is 31 October 2020.
+
+Current End of Life for RHEL 7.7 is 30 August 2021.
+
+If the release is not supported by the vendor, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Upgrade to a supported version of the operating system.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71907</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are assigned, the new password
+must contain at least one numeric character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000194
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf dcredit.to_i is expected to cmp &lt; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71907</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are assigned, the new password
+must contain at least one numeric character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Note: The value to require a number of numeric characters to be set is
+expressed as a negative number in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;.
+
+    Check the value for &quot;dcredit&quot; in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with
+the following command:
+
+    # grep dcredit &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    dcredit &#x3D; -1
+
+    If the value of &quot;dcredit&quot; is not set to a negative value, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to enforce password complexity by requiring
+that at least one numeric character be used by setting the &quot;dcredit&quot; option.
+
+    Add the following line to &#x2F;etc&#x2F;security&#x2F;pwquality.conf (or modify the line
+to have the required value):
+
+    dcredit &#x3D; -1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71991</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must enable the SELinux
+targeted policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-6 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002696
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without verification of the security functions, security functions may
+not operate correctly and the failure may go unnoticed. Security function is
+defined as the hardware, software, and&#x2F;or firmware of the information system
+responsible for enforcing the system security policy and supporting the
+isolation of code and data on which the protection is based. Security
+functionality includes, but is not limited to, establishing system accounts,
+configuring access authorizations (i.e., permissions, privileges), setting
+events to be audited, and setting intrusion detection parameters.
+
+    This requirement applies to operating systems performing security function
+verification&#x2F;testing and&#x2F;or systems and environments that require this
+functionality.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;sestatus&#x60; stdout is expected to match &#x2F;^Loaded\spolicy\sname:\s+targeted\n?$&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71991</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must enable the SELinux
+targeted policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without verification of the security functions, security functions may
+not operate correctly and the failure may go unnoticed. Security function is
+defined as the hardware, software, and&#x2F;or firmware of the information system
+responsible for enforcing the system security policy and supporting the
+isolation of code and data on which the protection is based. Security
+functionality includes, but is not limited to, establishing system accounts,
+configuring access authorizations (i.e., permissions, privileges), setting
+events to be audited, and setting intrusion detection parameters.
+
+    This requirement applies to operating systems performing security function
+verification&#x2F;testing and&#x2F;or systems and environments that require this
+functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), SI-6 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If an HBSS or HIPS is active on the system, this is Not Applicable.
+
+    Verify the operating system verifies correct operation of all security
+functions.
+
+    Check if &quot;SELinux&quot; is active and is enforcing the targeted policy with
+the following command:
+
+    # sestatus
+
+    SELinux status: enabled
+
+    SELinuxfs mount: &#x2F;selinux
+
+    SELinux root directory: &#x2F;etc&#x2F;selinux
+
+    Loaded policy name: targeted
+
+    Current mode: enforcing
+
+    Mode from config file: enforcing
+
+    Policy MLS status: enabled
+
+    Policy deny_unknown status: allowed
+
+    Max kernel policy version: 28
+
+    If the &quot;Loaded policy name&quot; is not set to &quot;targeted&quot;, this is a finding.
+
+    Verify that the &#x2F;etc&#x2F;selinux&#x2F;config file is configured to the
+&quot;SELINUXTYPE&quot; to &quot;targeted&quot;:
+
+    # grep -i &quot;selinuxtype&quot; &#x2F;etc&#x2F;selinux&#x2F;config | grep -v &#39;^#&#39;
+
+    SELINUXTYPE &#x3D; targeted
+
+    If no results are returned or &quot;SELINUXTYPE&quot; is not set to &quot;targeted&quot;,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to verify correct operation of all security
+functions.
+
+    Set the &quot;SELinuxtype&quot; to the &quot;targeted&quot; policy by modifying the
+&quot;&#x2F;etc&#x2F;selinux&#x2F;config&quot; file to have the following line:
+
+    SELINUXTYPE&#x3D;targeted
+
+    A reboot is required for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72045</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent files with
+the setuid and setgid bit set from being executed on file systems that are
+being imported via Network File System (NFS).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No NFS file systems were found. is expected to eq true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72045</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent files with
+the setuid and setgid bit set from being executed on file systems that are
+being imported via Network File System (NFS).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify file systems that are being NFS imported are configured with the
+&quot;nosuid&quot; option.
+
+    Find the file system(s) that contain the directories being exported with
+the following command:
+
+    # more &#x2F;etc&#x2F;fstab | grep nfs
+
+    UUID&#x3D;e06097bb-cfcd-437b-9e4d-a691f5662a7d &#x2F;store nfs rw,nosuid 0 0
+
+    If a file system found in &quot;&#x2F;etc&#x2F;fstab&quot; refers to NFS and it does not have
+the &quot;nosuid&quot; option set, this is a finding.
+
+    Verify the NFS is mounted with the &quot;nosuid&quot; option:
+
+    # mount | grep nfs | grep nosuid
+    If no results are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the &quot;&#x2F;etc&#x2F;fstab&quot; to use the &quot;nosuid&quot; option on
+file systems that are being imported via NFS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72251</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon is configured to only use the SSHv2 protocol.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000197
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSHv1 is an insecure implementation of the SSH protocol and has many
+well-known vulnerability exploits. Exploits of the SSH daemon could provide
+immediate root access to the system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The release is 7.8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72251</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon is configured to only use the SSHv2 protocol.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSHv1 is an insecure implementation of the SSH protocol and has many
+well-known vulnerability exploits. Exploits of the SSH daemon could provide
+immediate root access to the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (c), CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the version of the operating system with the following command:
+
+    # cat &#x2F;etc&#x2F;redhat-release
+
+    If the release is 7.4 or newer this requirement is Not Applicable.
+
+    Verify the SSH daemon is configured to only use the SSHv2 protocol.
+
+    Check that the SSH daemon is configured to only use the SSHv2 protocol with
+the following command:
+
+    # grep -i protocol &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    Protocol 2
+    #Protocol 1,2
+
+    If any protocol line other than &quot;Protocol 2&quot; is uncommented, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove all Protocol lines that reference version &quot;1&quot; in
+&quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this file may be named differently or be in a
+different location if using a version of SSH that is provided by a third-party
+vendor). The &quot;Protocol&quot; line must be as follows:
+
+    Protocol 2
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71945</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must lock the associated
+account after three unsuccessful root logon attempts are made within a
+15-minute period.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002238
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By limiting the number of failed logon attempts, the risk of
+unauthorized system access via user password guessing, otherwise known as brute
+forcing, is reduced. Limits are imposed by locking the account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include [&quot;auth required pam_faillock.so even_deny_root&quot;, &quot;auth sufficient pam_unix.so try_first_pass&quot;, &quot;auth [default&#x3D;die] pam_faillock.so even_deny_root&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;account required pam_unix.so\naccount sufficient pam_localuser.so\naccount sufficient pam_succeed_if...eed_if.so service in crond quiet use_uid\nsession required pam_unix.so\nsession optional pam_sss.so&quot; to include [&quot;auth required pam_faillock.so even_deny_root&quot;, &quot;auth sufficient pam_unix.so try_first_pass&quot;, &quot;auth [default&#x3D;die] pam_faillock.so even_deny_root&quot;]
+Diff:
+@@ -1,4 +1,28 @@
+-auth required pam_faillock.so even_deny_root
+-auth sufficient pam_unix.so try_first_pass
+-auth [default&#x3D;die] pam_faillock.so even_deny_root
++account required pam_unix.so
++account sufficient pam_localuser.so
++account sufficient pam_succeed_if.so uid &lt; 1000 quiet
++account [default&#x3D;bad success&#x3D;ok user_unknown&#x3D;ignore] pam_sss.so
++account required pam_permit.so
++auth required pam_env.so
++auth [default&#x3D;1 ignore&#x3D;ignore success&#x3D;ok] pam_succeed_if.so uid &gt;&#x3D; 1000 quiet
++auth [default&#x3D;4 ignore&#x3D;ignore success&#x3D;ok] pam_localuser.so
++auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth [success&#x3D;1 default&#x3D;bad] pam_unix.so try_first_pass
++auth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth sufficient pam_faillock.so authsucc deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth requisite pam_succeed_if.so uid &gt;&#x3D; 1000 quiet_success
++auth sufficient pam_sss.so forward_pass
++auth required pam_deny.so
++password requisite pam_pwquality.so try_first_pass local_users_only retry&#x3D;3 authtok_type&#x3D;
++password requisite pam_pwhistory.so use_authtok remember&#x3D;5 retry&#x3D;3
++password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok
++password sufficient pam_sss.so use_authtok
++password required pam_deny.so
++session optional pam_keyinit.so revoke
++session required pam_limits.so
++-session optional pam_systemd.so
++session optional pam_oddjob_mkhomedir.so umask&#x3D;0077
++session [success&#x3D;1 default&#x3D;ignore] pam_succeed_if.so service in crond quiet use_uid
++session required pam_unix.so
++session optional pam_sss.so
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include auth .* pam_faillock.so (preauth|authfail), all with args even_deny_root</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900\nauth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900&quot; to include auth .* pam_faillock.so (preauth|authfail), all with args even_deny_root
+Diff:
+@@ -1,2 +1,3 @@
+-auth .* pam_faillock.so (preauth|authfail)
++auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include [&quot;auth required pam_faillock.so even_deny_root&quot;, &quot;auth sufficient pam_unix.so try_first_pass&quot;, &quot;auth [default&#x3D;die] pam_faillock.so even_deny_root&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;account required pam_unix.so\naccount sufficient pam_localuser.so\naccount sufficient pam_succeed_if...eed_if.so service in crond quiet use_uid\nsession required pam_unix.so\nsession optional pam_sss.so&quot; to include [&quot;auth required pam_faillock.so even_deny_root&quot;, &quot;auth sufficient pam_unix.so try_first_pass&quot;, &quot;auth [default&#x3D;die] pam_faillock.so even_deny_root&quot;]
+Diff:
+@@ -1,4 +1,28 @@
+-auth required pam_faillock.so even_deny_root
+-auth sufficient pam_unix.so try_first_pass
+-auth [default&#x3D;die] pam_faillock.so even_deny_root
++account required pam_unix.so
++account sufficient pam_localuser.so
++account sufficient pam_succeed_if.so uid &lt; 1000 quiet
++account [default&#x3D;bad success&#x3D;ok user_unknown&#x3D;ignore] pam_sss.so
++account required pam_permit.so
++auth required pam_env.so
++auth [default&#x3D;1 ignore&#x3D;ignore success&#x3D;ok] pam_succeed_if.so uid &gt;&#x3D; 1000 quiet
++auth [default&#x3D;4 ignore&#x3D;ignore success&#x3D;ok] pam_localuser.so
++auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth [success&#x3D;1 default&#x3D;bad] pam_unix.so try_first_pass
++auth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth sufficient pam_faillock.so authsucc deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth requisite pam_succeed_if.so uid &gt;&#x3D; 1000 quiet_success
++auth sufficient pam_sss.so forward_pass
++auth required pam_deny.so
++password requisite pam_pwquality.so try_first_pass local_users_only retry&#x3D;3 authtok_type&#x3D;
++password requisite pam_pwhistory.so use_authtok remember&#x3D;5 retry&#x3D;3
++password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok
++password sufficient pam_sss.so use_authtok
++password required pam_deny.so
++session optional pam_keyinit.so revoke
++session required pam_limits.so
++-session optional pam_systemd.so
++session optional pam_oddjob_mkhomedir.so umask&#x3D;0077
++session [success&#x3D;1 default&#x3D;ignore] pam_succeed_if.so service in crond quiet use_uid
++session required pam_unix.so
++session optional pam_sss.so
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include auth .* pam_faillock.so (preauth|authfail), all with args even_deny_root</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900\nauth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900&quot; to include auth .* pam_faillock.so (preauth|authfail), all with args even_deny_root
+Diff:
+@@ -1,2 +1,3 @@
+-auth .* pam_faillock.so (preauth|authfail)
++auth requisite pam_faillock.so preauth deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
++auth [default&#x3D;die] pam_faillock.so authfail deny&#x3D;3 unlock_time&#x3D;604800 fail_interval&#x3D;900
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71945</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must lock the associated
+account after three unsuccessful root logon attempts are made within a
+15-minute period.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By limiting the number of failed logon attempts, the risk of
+unauthorized system access via user password guessing, otherwise known as brute
+forcing, is reduced. Limits are imposed by locking the account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system automatically locks the root account until it
+is released by an administrator when three unsuccessful logon attempts in 15
+minutes are made.
+
+    # grep pam_faillock.so &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    If the &quot;even_deny_root&quot; setting is not defined on both lines with the
+&quot;pam_faillock.so&quot; module, is commented out, or is missing from a line, this
+is a finding.
+
+    # grep pam_faillock.so &#x2F;etc&#x2F;pam.d&#x2F;system-auth
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    If the &quot;even_deny_root&quot; setting is not defined on both lines with the
+&quot;pam_faillock.so&quot; module, is commented out, or is missing from a line, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to lock automatically the root account until
+the locked account is released by an administrator when three unsuccessful
+logon attempts in 15 minutes are made.
+
+    Modify the first three lines of the auth section and the first line of the
+account section of the &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; files to match the following lines:
+
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth sufficient pam_unix.so try_first_pass
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71861</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must display the
+approved Standard Mandatory DoD Notice and Consent Banner before granting local
+or remote access to the system via a graphical user logon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have GNOME installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71861</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must display the
+approved Standard Mandatory DoD Notice and Consent Banner before granting local
+or remote access to the system via a graphical user logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system displays the approved Standard Mandatory DoD
+Notice and Consent Banner before granting access to the operating system via a
+graphical user logon.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check that the operating system displays the exact approved Standard
+Mandatory DoD Notice and Consent Banner text with the command:
+
+    # grep banner-message-text &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    banner-message-text&#x3D;
+    &#39;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.    -At any time, the USG may inspect and seize data stored on this IS.    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details. &#39;
+
+    Note: The &quot;     &quot; characters are for formatting only. They will not be displayed on the
+GUI.
+
+    If the banner does not match the approved Standard Mandatory DoD Notice and
+Consent Banner, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to display the approved Standard Mandatory
+DoD Notice and Consent Banner before granting access to the system.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Create a database to contain the system-wide graphical user logon settings
+(if it does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;01-banner-message
+
+    Add the following line to the [org&#x2F;gnome&#x2F;login-screen] section of the
+&quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;01-banner-message&quot;:
+
+    [org&#x2F;gnome&#x2F;login-screen]
+
+    banner-message-enable&#x3D;true
+
+    banner-message-text&#x3D;&#39;You are accessing a U.S. Government (USG) Information
+System (IS) that is provided for USG-authorized use only.    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.    -At any time, the USG may inspect and seize data stored on this IS.    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details. &#39;
+
+    Note: The &quot;     &quot; characters are for formatting only. They will not be displayed on the
+GUI.
+
+    Run the following command to update the database:
+    # dconf update</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72217</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must limit the number of
+concurrent sessions to 10 for all accounts and&#x2F;or account types.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000054
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Operating system management includes the ability to control the number
+of users and user sessions that utilize an operating system. Limiting the
+number of allowed users and sessions per user is helpful in reducing the risks
+related to DoS attacks.
+
+    This requirement addresses concurrent sessions for information system
+accounts and does not address concurrent sessions by single users via multiple
+system accounts. The maximum number of concurrent sessions should be defined
+based on mission needs and the operational environment for each system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Files configuring maxlogins less than or equal to 10 is expected to be positive</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Files configuring maxlogins greater than 10 is expected to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72217</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must limit the number of
+concurrent sessions to 10 for all accounts and&#x2F;or account types.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Operating system management includes the ability to control the number
+of users and user sessions that utilize an operating system. Limiting the
+number of allowed users and sessions per user is helpful in reducing the risks
+related to DoS attacks.
+
+    This requirement addresses concurrent sessions for information system
+accounts and does not address concurrent sessions by single users via multiple
+system accounts. The maximum number of concurrent sessions should be defined
+based on mission needs and the operational environment for each system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system limits the number of concurrent sessions to
+&quot;10&quot; for all accounts and&#x2F;or account types by issuing the following command:
+
+    # grep &quot;maxlogins&quot; &#x2F;etc&#x2F;security&#x2F;limits.conf &#x2F;etc&#x2F;security&#x2F;limits.d&#x2F;*.conf
+
+    * hard maxlogins 10
+
+    This can be set as a global domain (with the * wildcard) but may be set
+differently for multiple domains.
+
+    If the &quot;maxlogins&quot; item is missing, commented out, or the value is not
+set to &quot;10&quot; or less for all domains that have the &quot;maxlogins&quot; item
+assigned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to limit the number of concurrent sessions
+to &quot;10&quot; for all accounts and&#x2F;or account types.
+
+    Add the following line to the top of the &#x2F;etc&#x2F;security&#x2F;limits.conf or in a
+&quot;.conf&quot; file defined in &#x2F;etc&#x2F;security&#x2F;limits.d&#x2F; :
+
+    * hard maxlogins 10</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72047</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all world-writable directories are group-owned by root, sys, bin, or an
+application group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a world-writable directory has the sticky bit set and is not
+group-owned by a privileged Group Identifier (GID), unauthorized users may be
+able to modify files created by others.
+
+    The only authorized public directories are those temporary directories
+supplied with the system or those designed to be temporary file repositories.
+The setting is normally reserved for directories used by the system and by
+users for temporary file storage, (e.g., &#x2F;tmp), and for directories requiring
+global read&#x2F;write access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;var&#x2F;tmp group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;var&#x2F;tmp&#x2F;cloud-init group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;var&#x2F;tmp&#x2F;systemd-private-d24354a1797e4846b9e800d6f612ef8f-chronyd.service-U8pkhb&#x2F;tmp group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;tmp group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;tmp&#x2F;.XIM-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;tmp&#x2F;.Test-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;tmp&#x2F;.ICE-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;tmp&#x2F;.font-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;tmp&#x2F;.X11-unix group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;tmp&#x2F;systemd-private-d24354a1797e4846b9e800d6f612ef8f-chronyd.service-Te8mBP&#x2F;tmp group is expected to be in &quot;root&quot;, &quot;sys&quot;, and &quot;bin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72047</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all world-writable directories are group-owned by root, sys, bin, or an
+application group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a world-writable directory has the sticky bit set and is not
+group-owned by a privileged Group Identifier (GID), unauthorized users may be
+able to modify files created by others.
+
+    The only authorized public directories are those temporary directories
+supplied with the system or those designed to be temporary file repositories.
+The setting is normally reserved for directories used by the system and by
+users for temporary file storage, (e.g., &#x2F;tmp), and for directories requiring
+global read&#x2F;write access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all world-writable directories are group-owned by root, sys, bin, or
+an application group.
+
+    Check the system for world-writable directories with the following command:
+
+    Note: The value after -fstype must be replaced with the filesystem type.
+XFS is used as an example.
+
+    # find &#x2F; -xdev -perm -002 -type d -fstype xfs -exec ls -lLd {} \;
+    drwxrwxrwt 2 root root 40 Aug 26 13:07 &#x2F;dev&#x2F;mqueue
+    drwxrwxrwt 2 root root 220 Aug 26 13:23 &#x2F;dev&#x2F;shm
+    drwxrwxrwt 14 root root 4096 Aug 26 13:29 &#x2F;tmp
+
+    If any world-writable directories are not owned by root, sys, bin, or an
+application group associated with the directory, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the group of the world-writable directories to root with the
+following command:
+
+    # chgrp root &lt;directory&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72173</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the umount command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged mount commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;bin&#x2F;umount&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;bin&#x2F;umount&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72173</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the umount command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged mount commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;umount&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following series of commands to check the file system rules in
+&quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &quot;&#x2F;usr&#x2F;bin&#x2F;umount&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;umount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;umount&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;umount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72149</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the passwd command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;passwd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;passwd&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72149</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the passwd command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;passwd&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;passwd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;passwd -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-passwd
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;passwd&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;passwd -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71927</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that passwords are restricted to a 24 hours&#x2F;1 day minimum lifetime.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000198
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Enforcing a minimum password lifetime helps to prevent repeated
+password changes to defeat the password reuse or history enforcement
+requirement. If users are allowed to immediately and continually change their
+password, the password could be repeatedly changed in a short period of time to
+defeat the organization&#39;s policy regarding password reuse.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;shadow with user &#x3D;&#x3D; &quot;ec2-user&quot; min_days.first.to_i is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71927</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that passwords are restricted to a 24 hours&#x2F;1 day minimum lifetime.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Enforcing a minimum password lifetime helps to prevent repeated
+password changes to defeat the password reuse or history enforcement
+requirement. If users are allowed to immediately and continually change their
+password, the password could be repeatedly changed in a short period of time to
+defeat the organization&#39;s policy regarding password reuse.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check whether the minimum time period between password changes for each
+user account is one day or greater.
+
+    # awk -F: &#39;$4 &lt; 1 {print $1 &quot; &quot; $4}&#39; &#x2F;etc&#x2F;shadow
+
+    If any results are returned that are not associated with a system account,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure non-compliant accounts to enforce a 24 hours&#x2F;1 day minimum
+password lifetime:
+
+    # chage -m 1 [user]</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72105</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the chmod syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;chmod&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;chmod&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;chmod&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;chmod&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72105</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the chmod syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chmod&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following command:
+
+    # grep -iw chmod &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S chmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S chmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;chmod&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chmod&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S chmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S chmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72255</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH public host key files have mode 0644 or less permissive.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a public host key file is modified by an unauthorized user, the SSH
+service may be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No files have a more permissive mode. is expected to eq true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72255</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH public host key files have mode 0644 or less permissive.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a public host key file is modified by an unauthorized user, the SSH
+service may be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH public host key files have mode &quot;0644&quot; or less permissive.
+
+    Note: SSH public key files may be found in other directories on the system
+depending on the installation.
+
+    The following command will find all SSH public key files on the system:
+
+    # find &#x2F;etc&#x2F;ssh -name &#39;*.pub&#39; -exec ls -lL {} \;
+
+    -rw-r--r-- 1 root root 618 Nov 28 06:43 ssh_host_dsa_key.pub
+    -rw-r--r-- 1 root root 347 Nov 28 06:43 ssh_host_key.pub
+    -rw-r--r-- 1 root root 238 Nov 28 06:43 ssh_host_rsa_key.pub
+
+    If any file has a mode more permissive than &quot;0644&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Note: SSH public key files may be found in other directories on the system
+depending on the installation.
+
+    Change the mode of public host key files under &quot;&#x2F;etc&#x2F;ssh&quot; to &quot;0644&quot;
+with the following command:
+
+    # chmod 0644 &#x2F;etc&#x2F;ssh&#x2F;*.key.pub</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72087</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the audit system takes appropriate action when the audit storage volume is
+full.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Taking appropriate action in case of a filled audit storage volume
+will minimize the possibility of losing audit records.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72087</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the audit system takes appropriate action when the audit storage volume is
+full.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Taking appropriate action in case of a filled audit storage volume
+will minimize the possibility of losing audit records.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the action the operating system takes if the disk the audit records
+are written to becomes full.
+
+    To determine the action that takes place if the disk is full on the remote
+server, use the following command:
+
+    # grep -i disk_full_action &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+    disk_full_action &#x3D; single
+
+    If the value of the &quot;disk_full_action&quot; option is not &quot;syslog&quot;,
+&quot;single&quot;, or &quot;halt&quot;, or the line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the action the operating system takes if the disk the audit
+records are written to becomes full.
+
+    Uncomment or edit the &quot;disk_full_action&quot; option in
+&quot;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&quot; and set it to &quot;syslog&quot;, &quot;single&quot;, or
+&quot;halt&quot;, such as the following line:
+
+    disk_full_action &#x3D; single</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72259</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not permit Generic Security Service Application
+Program Interface (GSSAPI) authentication unless needed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 f
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-11 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000318
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000368
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001812
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001814
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          GSSAPI authentication is used to provide additional authentication
+mechanisms to applications. Allowing GSSAPI authentication through SSH exposes
+the system&#39;s GSSAPI to remote hosts, increasing the attack surface of the
+system. GSSAPI authentication must be disabled unless needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration GSSAPIAuthentication is expected to cmp &#x3D;&#x3D; &quot;no&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72259</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not permit Generic Security Service Application
+Program Interface (GSSAPI) authentication unless needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">GSSAPI authentication is used to provide additional authentication
+mechanisms to applications. Allowing GSSAPI authentication through SSH exposes
+the system&#39;s GSSAPI to remote hosts, increasing the attack surface of the
+system. GSSAPI authentication must be disabled unless needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH daemon does not permit GSSAPI authentication unless approved.
+
+    Check that the SSH daemon does not permit GSSAPI authentication with the
+following command:
+
+    # grep -i gssapiauth &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    GSSAPIAuthentication no
+
+    If the &quot;GSSAPIAuthentication&quot; keyword is missing, is set to &quot;yes&quot; and
+is not documented with the Information System Security Officer (ISSO), or the
+returned line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Uncomment the &quot;GSSAPIAuthentication&quot; keyword in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;
+(this file may be named differently or be in a different location if using a
+version of SSH that is provided by a third-party vendor) and set the value to
+&quot;no&quot;:
+
+    GSSAPIAuthentication no
+
+    The SSH service must be restarted for changes to take effect.
+
+    If GSSAPI authentication is required, it must be documented, to include the
+location of the configuration file, with the ISSO.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73163</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the audit system takes appropriate action when there is an error sending
+audit records to a remote system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Taking appropriate action when there is an error sending audit records
+to a remote system will minimize the possibility of losing audit records.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73163</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the audit system takes appropriate action when there is an error sending
+audit records to a remote system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Taking appropriate action when there is an error sending audit records
+to a remote system will minimize the possibility of losing audit records.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the action the operating system takes if there is an error sending
+audit records to a remote system.
+
+    Check the action that takes place if there is an error sending audit
+records to a remote system with the following command:
+
+    # grep -i network_failure_action &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+    network_failure_action &#x3D; syslog
+
+    If the value of the &quot;network_failure_action&quot; option is not &quot;syslog&quot;,
+&quot;single&quot;, or &quot;halt&quot;, or the line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the action the operating system takes if there is an error
+sending audit records to a remote system.
+
+    Uncomment the &quot;network_failure_action&quot; option in
+&quot;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&quot; and set it to &quot;syslog&quot;, &quot;single&quot;, or
+&quot;halt&quot;.
+
+    network_failure_action &#x3D; syslog</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72289</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect
+messages from being accepted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages modify the
+host&#39;s route table and are unauthenticated. An illicit ICMP redirect message
+could result in a man-in-the-middle attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.conf.default.accept_redirects value is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72289</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect
+messages from being accepted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages modify the
+host&#39;s route table and are unauthenticated. An illicit ICMP redirect message
+could result in a man-in-the-middle attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system will not accept IPv4 ICMP redirect messages.
+
+    # grep &#39;net.ipv4.conf.default.accept_redirects&#39; &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot; net.ipv4.conf.default.accept_redirects &quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the value of the
+&quot;accept_redirects&quot; variables with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep &#39;net.ipv4.conf.default.accept_redirects&#39;
+    net.ipv4.conf.default.accept_redirects &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to not accept IPv4 ICMP redirect messages by adding the
+following line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the
+&#x2F;etc&#x2F;sysctl.d&#x2F; directory (or modify the line to have the required value):
+
+    net.ipv4.conf.default.accept_redirects &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72099</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the fchown syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-2 d
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000126
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchown&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchown&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchown&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchown&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72099</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the fchown syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-2 d, AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchown&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw fchown &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fchown&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Profile Error
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71943</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured to
+lock accounts for a minimum of 15 minutes after three unsuccessful logon
+attempts within a 15-minute timeframe.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000044
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002236
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002237
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002238
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By limiting the number of failed logon attempts, the risk of
+unauthorized system access via user password guessing, otherwise known as
+brute-forcing, is reduced. Limits are imposed by locking the account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">error</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">undefined local variable or method &#x60;required_rules&#39; for #&lt;RSpec::ExampleGroups::PAMConfigEtcPamDPasswordAuth_2::Lines:0x00007fb47b50fc08&gt;
+Did you mean?  require_relative</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with arg deny &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with arg fail_interval &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with args unlock_time&#x3D;(0|never) or include auth [default&#x3D;die]|required pam_faillock.so, all with arg unlock_time &lt;&#x3D; 604800 and include auth [default&#x3D;die]|required pam_faillock.so, all with arg unlock_time &gt;&#x3D; 604800</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">error</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">undefined local variable or method &#x60;required_rules&#39; for #&lt;RSpec::ExampleGroups::PAMConfigEtcPamDSystemAuth_2::Lines:0x00007fb47b5e4250&gt;
+Did you mean?  require_relative</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with arg deny &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with arg fail_interval &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include auth [default&#x3D;die]|required pam_faillock.so, all with args unlock_time&#x3D;(0|never) or include auth [default&#x3D;die]|required pam_faillock.so, all with arg unlock_time &lt;&#x3D; 604800 and include auth [default&#x3D;die]|required pam_faillock.so, all with arg unlock_time &gt;&#x3D; 604800</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71943</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured to
+lock accounts for a minimum of 15 minutes after three unsuccessful logon
+attempts within a 15-minute timeframe.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By limiting the number of failed logon attempts, the risk of
+unauthorized system access via user password guessing, otherwise known as
+brute-forcing, is reduced. Limits are imposed by locking the account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 a, AC-7 b, AC-7 b, AC-7 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check that the system locks an account for a minimum of 15 minutes after
+three unsuccessful logon attempts within a period of 15 minutes with the
+following command:
+
+    # grep pam_faillock.so &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    If the &quot;deny&quot; parameter is set to &quot;0&quot; or a value less than &quot;3&quot; on
+both &quot;auth&quot; lines with the &quot;pam_faillock.so&quot; module, or is missing from
+these lines, this is a finding.
+
+    If the &quot;even_deny_root&quot; parameter is not set on both &quot;auth&quot; lines with
+the &quot;pam_faillock.so&quot; module, or is missing from these lines, this is a
+finding.
+
+    If the &quot;fail_interval&quot; parameter is set to &quot;0&quot; or is set to a value
+less than &quot;900&quot; on both &quot;auth&quot; lines with the &quot;pam_faillock.so&quot; module,
+or is missing from these lines, this is a finding.
+
+    If the &quot;unlock_time&quot; parameter is not set to &quot;0&quot;, &quot;never&quot;, or is set
+to a value less than &quot;900&quot; on both &quot;auth&quot; lines with the
+&quot;pam_faillock.so&quot; module, or is missing from these lines, this is a finding.
+
+    Note: The maximum configurable value for &quot;unlock_time&quot; is &quot;604800&quot;.
+
+    If any line referencing the &quot;pam_faillock.so&quot; module is commented out,
+this is a finding.
+
+    # grep pam_faillock.so &#x2F;etc&#x2F;pam.d&#x2F;system-auth
+
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    If the &quot;deny&quot; parameter is set to &quot;0&quot; or a value less than &quot;3&quot; on
+both &quot;auth&quot; lines with the &quot;pam_faillock.so&quot; module, or is missing from
+these lines, this is a finding.
+
+    If the &quot;even_deny_root&quot; parameter is not set on both &quot;auth&quot; lines with
+the &quot;pam_faillock.so&quot; module, or is missing from these lines, this is a
+finding.
+
+    If the &quot;fail_interval&quot; parameter is set to &quot;0&quot; or is set to a value
+less than &quot;900&quot; on both &quot;auth&quot; lines with the &quot;pam_faillock.so&quot; module,
+or is missing from these lines, this is a finding.
+
+    If the &quot;unlock_time&quot; parameter is not set to &quot;0&quot;, &quot;never&quot;, or is set
+to a value less than &quot;900&quot; on both &quot;auth&quot; lines with the
+&quot;pam_faillock.so&quot; module or is missing from these lines, this is a finding.
+
+    Note: The maximum configurable value for &quot;unlock_time&quot; is &quot;604800&quot;.
+    If any line referencing the &quot;pam_faillock.so&quot; module is commented out,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to lock an account for the maximum period
+when three unsuccessful logon attempts in 15 minutes are made.
+
+    Modify the first three lines of the auth section and the first line of the
+account section of the &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; files to match the following lines:
+
+    auth required pam_faillock.so preauth silent audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    auth sufficient pam_unix.so try_first_pass
+    auth [default&#x3D;die] pam_faillock.so authfail audit deny&#x3D;3 even_deny_root
+fail_interval&#x3D;900 unlock_time&#x3D;900
+    account required pam_faillock.so
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73155</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent a user from
+  overriding the screensaver lock-delay setting for the graphical user interface.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A session time-out lock is a temporary action taken when a user stops
+  work and moves away from the immediate physical vicinity of the information
+  system but does not log out because of the temporary nature of the absence.
+  Rather than relying on the user to manually lock their operating system session
+  prior to vacating the vicinity, operating systems need to be able to identify
+  when a user&#39;s session has idled and take action to initiate the session lock.
+
+      The session lock is implemented at the point where session activity can be
+  determined and&#x2F;or controlled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The GNOME desktop is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73155</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent a user from
+  overriding the screensaver lock-delay setting for the graphical user interface.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A session time-out lock is a temporary action taken when a user stops
+  work and moves away from the immediate physical vicinity of the information
+  system but does not log out because of the temporary nature of the absence.
+  Rather than relying on the user to manually lock their operating system session
+  prior to vacating the vicinity, operating systems need to be able to identify
+  when a user&#39;s session has idled and take action to initiate the session lock.
+
+      The session lock is implemented at the point where session activity can be
+  determined and&#x2F;or controlled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system prevents a user from overriding a screensaver
+lock after a 15-minute period of inactivity for graphical user interfaces.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    Determine which profile the system database is using with the following
+command:
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Check for the lock delay setting with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+the path is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database
+other than &quot;local&quot; is being used.
+
+    # grep -i lock-delay &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;*
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;lock-delay
+
+    If the command does not return a result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to prevent a user from overriding a
+screensaver lock after a 15-minute period of inactivity for graphical user
+interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+if the system is using another database in &quot;&#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user&quot;, the
+file should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;session
+
+    Add the setting to lock the screensaver lock delay:
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;lock-delay</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72227</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) authentication communications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001453
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">LDAP not enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72227</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) authentication communications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If LDAP is not being utilized, this requirement is Not Applicable.
+
+    Verify the operating system implements cryptography to protect the
+integrity of remote LDAP authentication sessions.
+
+    To determine if LDAP is being used for authentication, use the following
+command:
+
+    # systemctl status sssd.service
+    sssd.service - System Security Services Daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;sssd.service; enabled; vendor
+preset: disabled)
+    Active: active (running) since Wed 2018-06-27 10:58:11 EST; 1h 50min ago
+
+    If the &quot;sssd.service&quot; is &quot;active&quot;, then LDAP is being used.
+
+    Determine the &quot;id_provider&quot; the LDAP is currently using:
+
+    # grep -i &quot;id_provider&quot; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+
+    id_provider &#x3D; ad
+
+    If &quot;id_provider&quot; is set to &quot;ad&quot;, this is Not Applicable.
+
+    Ensure that LDAP is configured to use TLS by using the following command:
+
+    # grep -i &quot;start_tls&quot; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+    ldap_id_use_start_tls &#x3D; true
+
+    If the &quot;ldap_id_use_start_tls&quot; option is not &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to implement cryptography to protect the
+integrity of LDAP authentication sessions.
+
+    Add or modify the following line in &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot;:
+
+    ldap_id_use_start_tls &#x3D; true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72317</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have
+unauthorized IP tunnels configured.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          IP tunneling mechanisms can be used to bypass network filtering. If
+tunneling is required, it must be documented with the Information System
+Security Officer (ISSO).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have libreswan installed or the ipsec.service isn&#39;t running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72317</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have
+unauthorized IP tunnels configured.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">IP tunneling mechanisms can be used to bypass network filtering. If
+tunneling is required, it must be documented with the Information System
+Security Officer (ISSO).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system does not have unauthorized IP tunnels configured.
+
+    Check to see if &quot;libreswan&quot; is installed with the following command:
+
+    # yum list installed libreswan
+    libreswan.x86-64 3.20-5.el7_4
+
+    If &quot;libreswan&quot; is installed, check to see if the &quot;IPsec&quot; service is
+active with the following command:
+
+    # systemctl status ipsec
+    ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;ipsec.service; disabled)
+    Active: inactive (dead)
+
+    If the &quot;IPsec&quot; service is active, check to see if any tunnels are
+configured in &quot;&#x2F;etc&#x2F;ipsec.conf&quot; and &quot;&#x2F;etc&#x2F;ipsec.d&#x2F;&quot; with the following
+commands:
+
+    # grep -iw conn &#x2F;etc&#x2F;ipsec.conf &#x2F;etc&#x2F;ipsec.d&#x2F;*.conf
+
+    If there are indications that a &quot;conn&quot; parameter is configured for a
+tunnel, ask the System Administrator if the tunnel is documented with the ISSO.
+
+    If &quot;libreswan&quot; is installed, &quot;IPsec&quot; is active, and an undocumented
+tunnel is active, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove all unapproved tunnels from the system, or document them
+with the ISSO.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71937</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have accounts
+configured with blank or null passwords.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If an account has an empty password, anyone could log on and run
+commands with the privileges of that account. Accounts with empty passwords
+should never be used in operational environments.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;config-util] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;other] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;passwd] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;chfn] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;chsh] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;login] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;remote] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;runuser] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;runuser-l] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;su] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;su-l] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;systemd-user] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;polkit-1] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;crond] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;rhn_register] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;subscription-manager] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;sshd] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;smtp.postfix] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;smtp] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;vlock] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;sudo] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;sudo-i] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;fingerprint-auth] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;smartcard-auth] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;atd] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;sssd-shadowutils] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;auth [success&#x3D;done ignore&#x3D;ignore default&#x3D;die] pam_unix.so nullok try_first_pass\naccount required pam_unix.so&quot; to include .* .* pam_unix.so, all without args nullok
+Diff:
+@@ -1,2 +1,3 @@
+-.* .* pam_unix.so
++auth [success&#x3D;done ignore&#x3D;ignore default&#x3D;die] pam_unix.so nullok try_first_pass
++account required pam_unix.so
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;screen] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth-local] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth-local] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;password-auth] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;postlogin] lines is expected to include .* .* pam_unix.so, all without args nullok</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71937</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have accounts
+configured with blank or null passwords.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If an account has an empty password, anyone could log on and run
+commands with the privileges of that account. Accounts with empty passwords
+should never be used in operational environments.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">To verify that null passwords cannot be used, run the following command:
+
+    # grep nullok &#x2F;etc&#x2F;pam.d&#x2F;system-auth &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+
+    If this produces any output, it may be possible to log on with accounts
+with empty passwords.
+
+    If null passwords can be used, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If an account is configured for password authentication but does not have
+an assigned password, it may be possible to log on to the account without
+authenticating.
+
+    Remove any instances of the &quot;nullok&quot; option in &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot;
+and &quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; to prevent logons with empty passwords.
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-78995</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the screensaver lock-enabled setting for the graphical user
+interface.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    The ability to enable&#x2F;disable a session lock is given to the user by
+default. Disabling the user’s ability to disengage the graphical user interface
+session lock provides the assurance that all sessions will lock after the
+specified period of time.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The GNOME desktop is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-78995</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the screensaver lock-enabled setting for the graphical user
+interface.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    The ability to enable&#x2F;disable a session lock is given to the user by
+default. Disabling the user’s ability to disengage the graphical user interface
+session lock provides the assurance that all sessions will lock after the
+specified period of time.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system prevents a user from overriding the screensaver
+lock-enabled setting for the graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    Determine which profile the system database is using with the following
+command:
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Check for the lock-enabled setting with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+the path is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database
+other than &quot;local&quot; is being used.
+
+    # grep -i lock-enabled &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;*
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;lock-enabled
+
+    If the command does not return a result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to prevent a user from overriding a
+screensaver lock after a 15-minute period of inactivity for graphical user
+interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+if the system is using another database in &quot;&#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user&quot;, the
+file should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;session
+
+    Add the setting to lock the screensaver lock-enabled setting:
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;lock-enabled</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72137</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the setsebool command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;setsebool&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;setsebool&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72137</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the setsebool command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setsebool&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;sbin&#x2F;setsebool &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;setsebool -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-priv_change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setsebool&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;setsebool -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72009</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories have a valid group owner.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Files without a valid group owner may be unintentionally inherited if
+a group is assigned the same Group Identifier (GID) as the GID of the files
+without a valid group owner.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype xfs -nogroup&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype ext3 -nogroup&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype ext2 -nogroup&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype ext4 -nogroup&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype msdos -nogroup&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype vfat -nogroup&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype btrfs -nogroup&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype fuseblk -nogroup&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72009</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories have a valid group owner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Files without a valid group owner may be unintentionally inherited if
+a group is assigned the same Group Identifier (GID) as the GID of the files
+without a valid group owner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all files and directories on the system have a valid group.
+
+    Check the owner of all files and directories with the following command:
+
+    Note: The value after -fstype must be replaced with the filesystem type.
+XFS is used as an example.
+
+    # find &#x2F; -fstype xfs -nogroup
+
+    If any files on the system do not have an assigned group, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Either remove all files and directories from the system that do not have a
+valid group, or assign a valid group to all files and directories on the system
+with the &quot;chgrp&quot; command:
+
+    # chgrp &lt;group&gt; &lt;file&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73157</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the session idle-delay setting for the graphical user interface.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The GNOME desktop is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73157</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the session idle-delay setting for the graphical user interface.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system prevents a user from overriding session idle
+delay after a 15-minute period of inactivity for graphical user interfaces.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    Determine which profile the system database is using with the following
+command:
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Check for the session idle delay setting with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+the path is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database
+other than &quot;local&quot; is being used.
+
+    # grep -i idle-delay &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;*
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;session&#x2F;idle-delay
+
+    If the command does not return a result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to prevent a user from overriding a session
+lock after a 15-minute period of inactivity for graphical user interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+if the system is using another database in &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user, the file
+should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;session
+
+    Add the setting to lock the session idle delay:
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;session&#x2F;idle-delay</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72097</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the chown syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-2 d
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000126
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;chown&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;chown&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;chown&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;chown&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72097</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the chown syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-2 d, AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chown&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw chown &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S chown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S chown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;chown&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S chown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S chown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72075</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not allow removable
+media to be used as the boot loader unless approved.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 f
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-11 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000318
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000368
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001812
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001814
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Malicious users with removable boot media can gain access to a system
+configured to use removable media as the boot loader. If removable media is
+designed to be used as the boot loader, the requirement must be documented with
+the Information System Security Officer (ISSO).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 to exist</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 path is expected to match &#x2F;^\&#x2F;dev\&#x2F;&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033&quot; to match &#x2F;^\&#x2F;dev\&#x2F;&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;^\&#x2F;dev\&#x2F;&#x2F;
++&quot;UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033&quot;
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 to exist</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033 path is expected to match &#x2F;^\&#x2F;dev\&#x2F;&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033&quot; to match &#x2F;^\&#x2F;dev\&#x2F;&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;^\&#x2F;dev\&#x2F;&#x2F;
++&quot;UUID&#x3D;5a000634-a1fc-467d-8ef4-5fcf5dbc6033&quot;
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72075</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not allow removable
+media to be used as the boot loader unless approved.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Malicious users with removable boot media can gain access to a system
+configured to use removable media as the boot loader. If removable media is
+designed to be used as the boot loader, the requirement must be documented with
+the Information System Security Officer (ISSO).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system is not configured to use a boot loader on removable media.
+
+    Note: GRUB 2 reads its configuration from the &quot;&#x2F;boot&#x2F;grub2&#x2F;grub.cfg&quot; file
+on traditional BIOS-based machines and from the
+&quot;&#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg&quot; file on UEFI machines.
+
+    Check for the existence of alternate boot loader configuration files with
+the following command:
+
+    # find &#x2F; -name grub.cfg
+    &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+
+    If a &quot;grub.cfg&quot; is found in any subdirectories other than &quot;&#x2F;boot&#x2F;grub2&quot;
+and &quot;&#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&quot;, ask the System Administrator if there is
+documentation signed by the ISSO to approve the use of removable media as a
+boot loader.
+
+    Check that the grub configuration file has the set root command in each
+menu entry with the following commands:
+
+    # grep -c menuentry &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+    1
+    # grep &#39;set root&#39; &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+    set root&#x3D;(hd0,1)
+
+    If the system is using an alternate boot loader on removable media, and
+documentation does not exist approving the alternate configuration, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove alternate methods of booting the system from removable
+media or document the configuration to boot from removable media with the ISSO.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72179</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the ssh-keysign command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged ssh commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72179</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the ssh-keysign command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged ssh commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;ssh-keysign&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-ssh
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;ssh-keysign&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;libexec&#x2F;openssh&#x2F;ssh-keysign -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-ssh
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72305</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that if the Trivial File Transfer Protocol (TFTP) server is required, the TFTP
+daemon is configured to operate in secure mode.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Restricting TFTP to a specific directory prevents remote users from
+copying, transferring, or overwriting system files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The TFTP package is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72305</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that if the Trivial File Transfer Protocol (TFTP) server is required, the TFTP
+daemon is configured to operate in secure mode.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Restricting TFTP to a specific directory prevents remote users from
+copying, transferring, or overwriting system files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the TFTP daemon is configured to operate in secure mode.
+
+    Check to see if a TFTP server has been installed with the following
+commands:
+
+    # yum list installed tftp-server
+    tftp-server.x86_64 x.x-x.el7 rhel-7-server-rpms
+
+    If a TFTP server is not installed, this is Not Applicable.
+
+    If a TFTP server is installed, check for the server arguments with the
+following command:
+
+    # grep server_args &#x2F;etc&#x2F;xinetd.d&#x2F;tftp
+    server_args &#x3D; -s &#x2F;var&#x2F;lib&#x2F;tftpboot
+
+    If the &quot;server_args&quot; line does not have a &quot;-s&quot; option and a
+subdirectory is not assigned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the TFTP daemon to operate in secure mode by adding the following
+line to &quot;&#x2F;etc&#x2F;xinetd.d&#x2F;tftp&quot; (or modify the line to have the required value):
+
+    server_args &#x3D; -s &#x2F;var&#x2F;lib&#x2F;tftpboot</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71913</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed a minimum of four character classes must be
+changed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf minclass.to_i is expected to cmp &gt;&#x3D; 4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71913</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed a minimum of four character classes must be
+changed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The &quot;minclass&quot; option sets the minimum number of required classes of
+characters for the new password (digits, upper-case, lower-case, others).
+
+    Check for the value of the &quot;minclass&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep minclass &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    minclass &#x3D; 4
+
+    If the value of &quot;minclass&quot; is set to less than &quot;4&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to require the change of at least four
+character classes when passwords are changed by setting the &quot;minclass&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf conf&quot; (or modify
+the line to have the required value):
+
+    minclass &#x3D; 4</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73161</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent binary
+files from being executed on file systems that are being imported via Network
+File System (NFS).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;noexec&quot; mount option causes the system to not execute binary
+files. This option must be used for mounting any file system not containing
+approved binary files as they may be incompatible. Executing files from
+untrusted file systems increases the opportunity for unprivileged users to
+attain unauthorized administrative access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No NFS file systems were found. is expected to eq true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73161</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent binary
+files from being executed on file systems that are being imported via Network
+File System (NFS).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;noexec&quot; mount option causes the system to not execute binary
+files. This option must be used for mounting any file system not containing
+approved binary files as they may be incompatible. Executing files from
+untrusted file systems increases the opportunity for unprivileged users to
+attain unauthorized administrative access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify file systems that are being NFS imported are configured with the
+&quot;noexec&quot; option.
+
+    Find the file system(s) that contain the directories being imported with
+the following command:
+
+    # more &#x2F;etc&#x2F;fstab | grep nfs
+
+    UUID&#x3D;e06097bb-cfcd-437b-9e4d-a691f5662a7d &#x2F;store nfs rw,noexec 0 0
+
+    If a file system found in &quot;&#x2F;etc&#x2F;fstab&quot; refers to NFS and it does not have
+the &quot;noexec&quot; option set, and use of NFS imported binaries is not documented
+with the Information System Security Officer (ISSO) as an operational
+requirement, this is a finding.
+
+    Verify the NFS is mounted with the &quot;noexec&quot;option:
+
+    # mount | grep nfs | grep noexec
+    If no results are returned and use of NFS imported binaries is not
+documented with the Information System Security Officer (ISSO) as an
+operational requirement, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the &quot;&#x2F;etc&#x2F;fstab&quot; to use the &quot;noexec&quot; option on
+file systems that are being imported via NFS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72433</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must implement
+certificate status checking for PKI authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (11)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001948
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001953
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001954
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Using an authentication device, such as a CAC or token that is
+separate from the information system, ensures that even if the information
+system is compromised, that compromise will not affect credentials stored on
+the authentication device.
+
+    Multifactor solutions that require devices separate from information
+systems gaining access include, for example, hardware tokens providing
+time-based or challenge-response authenticators and smart cards such as the
+U.S. Government Personal Identity Verification card and the DoD Common Access
+Card.
+
+    A privileged account is defined as an information system account with
+authorizations of a privileged user.
+
+    Remote access is access to DoD nonpublic information systems by an
+authorized user (or an information system) communicating through an external,
+non-organization-controlled network. Remote access methods include, for
+example, dial-up, broadband, and wireless.
+
+    This requirement only applies to components where this is specific to the
+function of the device or has the concept of an organizational user (e.g., VPN,
+proxy capability). This does not apply to authentication for the purpose of
+configuring the device itself (management).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected File &#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf to exist</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72433</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must implement
+certificate status checking for PKI authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Using an authentication device, such as a CAC or token that is
+separate from the information system, ensures that even if the information
+system is compromised, that compromise will not affect credentials stored on
+the authentication device.
+
+    Multifactor solutions that require devices separate from information
+systems gaining access include, for example, hardware tokens providing
+time-based or challenge-response authenticators and smart cards such as the
+U.S. Government Personal Identity Verification card and the DoD Common Access
+Card.
+
+    A privileged account is defined as an information system account with
+authorizations of a privileged user.
+
+    Remote access is access to DoD nonpublic information systems by an
+authorized user (or an information system) communicating through an external,
+non-organization-controlled network. Remote access methods include, for
+example, dial-up, broadband, and wireless.
+
+    This requirement only applies to components where this is specific to the
+function of the device or has the concept of an organizational user (e.g., VPN,
+proxy capability). This does not apply to authentication for the purpose of
+configuring the device itself (management).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (11), IA-2 (12), IA-2 (12), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system implements certificate status checking for PKI
+authentication.
+
+    Check to see if Online Certificate Status Protocol (OCSP) is enabled on the
+system with the following command:
+
+    # grep cert_policy &#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf | grep -v &quot;^#&quot;
+
+    cert_policy &#x3D; ca, ocsp_on, signature;
+    cert_policy &#x3D; ca, ocsp_on, signature;
+    cert_policy &#x3D; ca, ocsp_on, signature;
+
+    There should be at least three lines returned.
+
+    If &quot;ocsp_on&quot; is not present in all uncommented &quot;cert_policy&quot; lines in
+&quot;&#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to do certificate status checking for PKI
+authentication.
+
+    Modify all of the &quot;cert_policy&quot; lines in
+&quot;&#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf&quot; to include &quot;ocsp_on&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72175</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the postdrop command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged postfix commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;postdrop&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;postdrop&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72175</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the postdrop command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged postfix commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;postdrop&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;sbin&#x2F;postdrop &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;postdrop -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-postfix
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;postdrop&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;postdrop -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-postfix
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72129</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the open_by_handle_at syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open_by_handle_at&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72129</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the open_by_handle_at syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;open_by_handle_at&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw open_by_handle_at &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S open_by_handle_at -F exit&#x3D;-EPERM -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S open_by_handle_at -F exit&#x3D;-EACCES -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open_by_handle_at -F exit&#x3D;-EPERM -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open_by_handle_at -F exit&#x3D;-EACCES -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;open_by_handle_at&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;open_by_handle_at&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S open_by_handle_at -F exit&#x3D;-EPERM -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S open_by_handle_at -F exit&#x3D;-EACCES -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open_by_handle_at -F exit&#x3D;-EPERM -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open_by_handle_at -F exit&#x3D;-EACCES -F
+auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72231</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) communications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001453
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">LDAP not enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72231</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) communications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If LDAP is not being utilized, this requirement is Not Applicable.
+
+    Verify the operating system implements cryptography to protect the
+integrity of remote LDAP access sessions.
+
+    To determine if LDAP is being used for authentication, use the following
+command:
+
+    # systemctl status sssd.service
+    sssd.service - System Security Services Daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;sssd.service; enabled; vendor
+preset: disabled)
+    Active: active (running) since Wed 2018-06-27 10:58:11 EST; 1h 50min ago
+
+    If the &quot;sssd.service&quot; is &quot;active&quot;, then LDAP is being used.
+
+    Determine the &quot;id_provider&quot; that the LDAP is currently using:
+
+    # grep -i &quot;id_provider&quot; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+
+    id_provider &#x3D; ad
+
+    If &quot;id_provider&quot; is set to &quot;ad&quot;, this is Not Applicable.
+
+    Check the path to the X.509 certificate for peer authentication with the
+following command:
+
+    # grep -i tls_cacert &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+
+    ldap_tls_cacert &#x3D; &#x2F;etc&#x2F;pki&#x2F;tls&#x2F;certs&#x2F;ca-bundle.crt
+
+    Verify the &quot;ldap_tls_cacert&quot; option points to a file that contains the
+trusted CA certificate.
+
+    If this file does not exist, or the option is commented out or missing,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to implement cryptography to protect the
+integrity of LDAP remote access sessions.
+
+    Add or modify the following line in &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot;:
+
+    ldap_tls_cacert &#x3D; &#x2F;etc&#x2F;pki&#x2F;tls&#x2F;certs&#x2F;ca-bundle.crt</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72159</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the su command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;su&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;su&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72159</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the su command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;su&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;bin&#x2F;su &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;su -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;su&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;su -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72115</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the lsetxattr syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lsetxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lsetxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lsetxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lsetxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72115</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the lsetxattr syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lsetxattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw lsetxattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S lsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;lsetxattr&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lsetxattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S lsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-92253</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must use a reverse-path
+filter for IPv4 network traffic when possible by default.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Enabling reverse path filtering drops packets with source addresses
+that should not have been able to be received on the interface they were
+received on. It should not be used on systems which are routers for complicated
+networks, but is helpful for end hosts and routers serving small networks.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.conf.default.rp_filter value is expected to eq 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-92253</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must use a reverse-path
+filter for IPv4 network traffic when possible by default.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Enabling reverse path filtering drops packets with source addresses
+that should not have been able to be received on the interface they were
+received on. It should not be used on systems which are routers for complicated
+networks, but is helpful for end hosts and routers serving small networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system uses a reverse-path filter for IPv4:
+
+    # grep net.ipv4.conf.default.rp_filter &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+    net.ipv4.conf.default.rp_filter &#x3D; 1
+
+    If &quot;net.ipv4.conf.default.rp_filter&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;1&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.conf.default.rp_filter
+    net.ipv4.conf.default.rp_filter &#x3D; 1
+
+    If the returned line does not have a value of &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.default.rp_filter &#x3D; 1
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72223</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with a communication session are
+terminated at the end of the session or after 10 minutes of inactivity from the
+user at a command prompt, except to fulfill documented and validated mission
+requirements.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-12
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002361
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Terminating an idle session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle session will also free up
+resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Environment variable TMOUT is expected to be &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The TMOUT setting is configured properly is expected to be &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72223</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with a communication session are
+terminated at the end of the session or after 10 minutes of inactivity from the
+user at a command prompt, except to fulfill documented and validated mission
+requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Terminating an idle session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle session will also free up
+resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10, AC-12, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system terminates all network connections associated
+with a communications session at the end of the session or based on inactivity.
+
+    Check the value of the system inactivity timeout with the following command:
+
+    # grep -i tmout &#x2F;etc&#x2F;profile.d&#x2F;*
+
+    etc&#x2F;profile.d&#x2F;tmout.sh:TMOUT&#x3D;600
+
+    &#x2F;etc&#x2F;profile.d&#x2F;tmout.sh:readonly TMOUT
+
+    &#x2F;etc&#x2F;profile.d&#x2F;tmout.sh:export TMOUT
+
+    If &quot;TMOUT&quot; is not set to &quot;600&quot; or less in a script located in the
+&#x2F;etc&#x2F;profile.d&#x2F; directory to enforce session termination after inactivity, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to terminate all network connections
+associated with a communications session at the end of the session or after a
+period of inactivity.
+
+    Create a script to enforce the inactivity timeout (for example
+&#x2F;etc&#x2F;profile.d&#x2F;tmout.sh) such as:
+
+    #!&#x2F;bin&#x2F;bash
+
+    TMOUT&#x3D;600
+    readonly TMOUT
+    export TMOUT</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71995</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must define default
+permissions for all authenticated users in such a way that the user can only
+read and modify their own files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting the most restrictive default permissions ensures that when new
+accounts are created, they do not have unnecessary access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">login.defs UMASK is expected to eq &quot;077&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71995</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must define default
+permissions for all authenticated users in such a way that the user can only
+read and modify their own files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting the most restrictive default permissions ensures that when new
+accounts are created, they do not have unnecessary access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system defines default permissions for all
+authenticated users in such a way that the user can only read and modify their
+own files.
+
+    Check for the value of the &quot;UMASK&quot; parameter in &quot;&#x2F;etc&#x2F;login.defs&quot; file
+with the following command:
+
+    Note: If the value of the &quot;UMASK&quot; parameter is set to &quot;000&quot; in
+&quot;&#x2F;etc&#x2F;login.defs&quot; file, the Severity is raised to a CAT I.
+
+    # grep -i umask &#x2F;etc&#x2F;login.defs
+    UMASK  077
+
+    If the value for the &quot;UMASK&quot; parameter is not &quot;077&quot;, or the &quot;UMASK&quot;
+parameter is missing or is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to define default permissions for all
+authenticated users in such a way that the user can only read and modify their
+own files.
+
+    Add or edit the line for the &quot;UMASK&quot; parameter in &quot;&#x2F;etc&#x2F;login.defs&quot;
+file to &quot;077&quot;:
+
+    UMASK  077</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72071</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the file integrity tool is configured to verify extended attributes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Extended attributes in file systems are used to contain arbitrary data
+and file metadata with security implications.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package aide is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">List of monitored files&#x2F;directories without &#39;xattrs&#39; rule is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72071</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the file integrity tool is configured to verify extended attributes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Extended attributes in file systems are used to contain arbitrary data
+and file metadata with security implications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the file integrity tool is configured to verify extended attributes.
+
+    Check to see if Advanced Intrusion Detection Environment (AIDE) is
+installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the System Administrator how file integrity
+checks are performed on the system.
+
+    If there is no application installed to perform file integrity checks, this
+is a finding.
+
+    Note: AIDE is highly configurable at install time. These commands assume
+the &quot;aide.conf&quot; file is under the &quot;&#x2F;etc&quot; directory.
+
+    Use the following command to determine if the file is in another location:
+
+    # find &#x2F; -name aide.conf
+
+    Check the &quot;aide.conf&quot; file to determine if the &quot;xattrs&quot; rule has been
+added to the rule list being applied to the files and directories selection
+lists.
+
+    An example rule that includes the &quot;xattrs&quot; rule follows:
+
+    All&#x3D; p+i+n+u+g+s+m+S+sha512+acl+xattrs+selinux
+    &#x2F;bin All # apply the custom rule to the files in bin
+    &#x2F;sbin All # apply the same custom rule to the files in sbin
+
+    If the &quot;xattrs&quot; rule is not being used on all uncommented selection lines
+in the &quot;&#x2F;etc&#x2F;aide.conf&quot; file, or extended attributes are not being checked by
+another file integrity tool, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the file integrity tool to check file and directory extended
+attributes.
+
+    If AIDE is installed, ensure the &quot;xattrs&quot; rule is present on all
+uncommented file and directory selection lists.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71929</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that passwords for new users are restricted to a 60-day maximum lifetime.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any password, no matter how complex, can eventually be cracked.
+Therefore, passwords need to be changed periodically. If the operating system
+does not limit the lifetime of passwords and force users to change their
+passwords, there is the risk that the operating system passwords could be
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">login.defs PASS_MAX_DAYS.to_i is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71929</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that passwords for new users are restricted to a 60-day maximum lifetime.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any password, no matter how complex, can eventually be cracked.
+Therefore, passwords need to be changed periodically. If the operating system
+does not limit the lifetime of passwords and force users to change their
+passwords, there is the risk that the operating system passwords could be
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If passwords are not being used for authentication, this is Not Applicable.
+
+    Verify the operating system enforces a 60-day maximum password lifetime
+restriction for new user accounts.
+
+    Check for the value of &quot;PASS_MAX_DAYS&quot; in &quot;&#x2F;etc&#x2F;login.defs&quot; with the
+following command:
+
+    # grep -i pass_max_days &#x2F;etc&#x2F;login.defs
+    PASS_MAX_DAYS 60
+
+    If the &quot;PASS_MAX_DAYS&quot; parameter value is not 60 or less, or is commented
+out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to enforce a 60-day maximum password
+lifetime restriction.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;login.defs&quot; (or modify the line to have
+the required value):
+
+    PASS_MAX_DAYS     60</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71985</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must disable the file
+system automounter unless required.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000778
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001958
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Automatically mounting file systems permits easy introduction of
+unknown devices, thereby facilitating malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service autofs.service is expected not to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service autofs.service is expected not to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service autofs.service is expected not to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71985</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must disable the file
+system automounter unless required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Automatically mounting file systems permits easy introduction of
+unknown devices, thereby facilitating malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, IA-3, IA-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system disables the ability to automount devices.
+
+    Check to see if automounter service is active with the following command:
+
+    # systemctl status autofs
+    autofs.service - Automounts filesystems on demand
+       Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;autofs.service; disabled)
+       Active: inactive (dead)
+
+    If the &quot;autofs&quot; status is set to &quot;active&quot; and is not documented with
+the Information System Security Officer (ISSO) as an operational requirement,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to disable the ability to automount devices.
+
+    Turn off the automount service with the following commands:
+
+    # systemctl stop autofs
+    # systemctl disable autofs
+
+    If &quot;autofs&quot; is required for Network File System (NFS), it must be
+documented with the ISSO.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71993</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the x86 Ctrl-Alt-Delete key sequence is disabled on the command line.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A locally logged-on user who presses Ctrl-Alt-Delete, when at the
+console, can reboot the system. If accidentally pressed, as could happen in the
+case of a mixed OS environment, this can create the risk of short-term loss of
+availability of systems due to unintentional reboot. In the GNOME graphical
+environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is
+reduced because the user will be prompted before any action is taken.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service ctrl-alt-del.target is expected not to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service ctrl-alt-del.target is expected not to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71993</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the x86 Ctrl-Alt-Delete key sequence is disabled on the command line.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A locally logged-on user who presses Ctrl-Alt-Delete, when at the
+console, can reboot the system. If accidentally pressed, as could happen in the
+case of a mixed OS environment, this can create the risk of short-term loss of
+availability of systems due to unintentional reboot. In the GNOME graphical
+environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is
+reduced because the user will be prompted before any action is taken.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system is not configured to reboot the system when
+Ctrl-Alt-Delete is pressed.
+
+    Check that the ctrl-alt-del.target is masked and not active with the
+following command:
+
+    # systemctl status ctrl-alt-del.target
+
+    ctrl-alt-del.target
+    Loaded: masked (&#x2F;dev&#x2F;null; bad)
+    Active: inactive (dead)
+
+    If the ctrl-alt-del.target is not masked, this is a finding.
+
+    If the ctrl-alt-del.target is active, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to disable the Ctrl-Alt-Delete sequence for the
+command line with the following command:
+
+    # systemctl mask ctrl-alt-del.target</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72095</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all
+executions of privileged functions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-6 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002234
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Misuse of privileged functions, either intentionally or
+unintentionally by authorized users, or by unauthorized external entities that
+have compromised information system accounts, is a serious and ongoing concern
+and can have significant adverse impacts on organizations. Auditing the use of
+privileged functions is one way to detect such misuse and identify the risk
+from insider threats and the advanced persistent threat.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: [&quot;always&quot;]
+     got: []
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: [&quot;exit&quot;]
+     got: []
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; fields include? &quot;euid&#x3D;0&quot; arch.uniq is expected to include &quot;b32&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [] to include &quot;b32&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; fields include? &quot;euid&#x3D;0&quot; arch.uniq is expected to include &quot;b64&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [] to include &quot;b64&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; fields include? &quot;egid&#x3D;0&quot; arch.uniq is expected to include &quot;b32&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [] to include &quot;b32&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;execve&quot; fields include? &quot;egid&#x3D;0&quot; arch.uniq is expected to include &quot;b64&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [] to include &quot;b64&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72095</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all
+executions of privileged functions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Misuse of privileged functions, either intentionally or
+unintentionally by authorized users, or by unauthorized external entities that
+have compromised information system accounts, is a serious and ongoing concern
+and can have significant adverse impacts on organizations. Auditing the use of
+privileged functions is one way to detect such misuse and identify the risk
+from insider threats and the advanced persistent threat.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-6 (9), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system audits the execution of privileged functions
+using the following command:
+
+    # grep -iw execve &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S execve -C uid!&#x3D;euid -F euid&#x3D;0 -k setuid
+    -a always,exit -F arch&#x3D;b64 -S execve -C uid!&#x3D;euid -F euid&#x3D;0 -k setuid
+    -a always,exit -F arch&#x3D;b32 -S execve -C gid!&#x3D;egid -F egid&#x3D;0 -k setgid
+    -a always,exit -F arch&#x3D;b64 -S execve -C gid!&#x3D;egid -F egid&#x3D;0 -k setgid
+
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules for &quot;SUID&quot; files are not
+defined, this is a finding.
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules for &quot;SGID&quot; files are not
+defined, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to audit the execution of privileged
+functions.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S execve -C uid!&#x3D;euid -F euid&#x3D;0 -k setuid
+    -a always,exit -F arch&#x3D;b64 -S execve -C uid!&#x3D;euid -F euid&#x3D;0 -k setuid
+    -a always,exit -F arch&#x3D;b32 -S execve -C gid!&#x3D;egid -F egid&#x3D;0 -k setgid
+    -a always,exit -F arch&#x3D;b64 -S execve -C gid!&#x3D;egid -F egid&#x3D;0 -k setgid
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72127</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the openat syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;openat&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72127</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the openat syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;openat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw openat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S openat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S openat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S openat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S openat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;openat&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;openat&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S openat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S openat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S openat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S openat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72167</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the chsh command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chsh&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chsh&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72167</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the chsh command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chsh&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;chsh &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chsh -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chsh&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chsh -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73171</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;shadow.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000018
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001403
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;shadow&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;shadow&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73171</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;shadow.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&#x2F;etc&#x2F;shadow.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;shadow &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;shadow -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&#x2F;etc&#x2F;shadow.
+
+    Add or update the following file system rule in
+&quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;shadow -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72297</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured to
+prevent unrestricted mail relaying.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If unrestricted mail relaying is permitted, unauthorized senders could
+use this host as a mail relay for the purpose of sending spam or other
+unauthorized activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;postconf -n smtpd_client_restrictions&#x60; stdout.strip is expected to match &#x2F;^smtpd_client_restrictions\s+&#x3D;\s+permit_mynetworks,\s*reject\s*$&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72297</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured to
+prevent unrestricted mail relaying.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If unrestricted mail relaying is permitted, unauthorized senders could
+use this host as a mail relay for the purpose of sending spam or other
+unauthorized activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system is configured to prevent unrestricted mail relaying.
+
+    Determine if &quot;postfix&quot; is installed with the following commands:
+
+    # yum list installed postfix
+    postfix-2.6.6-6.el7.x86_64.rpm
+
+    If postfix is not installed, this is Not Applicable.
+
+    If postfix is installed, determine if it is configured to reject
+connections from unknown or untrusted networks with the following command:
+
+    # postconf -n smtpd_client_restrictions
+    smtpd_client_restrictions &#x3D; permit_mynetworks, reject
+
+    If the &quot;smtpd_client_restrictions&quot; parameter contains any entries other
+than &quot;permit_mynetworks&quot; and &quot;reject&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If &quot;postfix&quot; is installed, modify the &quot;&#x2F;etc&#x2F;postfix&#x2F;main.cf&quot; file to
+restrict client connections to the local network with the following command:
+
+    # postconf -e &#39;smtpd_client_restrictions &#x3D; permit_mynetworks,reject&#39;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72163</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the sudoers file and all files in the &#x2F;etc&#x2F;sudoers.d&#x2F; directory.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;sudoers&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;sudoers&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;sudoers.d&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;sudoers.d&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72163</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the sudoers file and all files in the &#x2F;etc&#x2F;sudoers.d&#x2F; directory.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to access the &quot;&#x2F;etc&#x2F;sudoers&quot; file and files
+in the &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;&quot; directory.
+
+    Check for modification of the following files being audited by performing
+the following commands to check the file system rules in
+&quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -i &quot;&#x2F;etc&#x2F;sudoers&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;sudoers -p wa -k privileged-actions
+
+    # grep -i &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;sudoers.d&#x2F; -p wa -k privileged-actions
+
+    If the commands do not return output that match the examples, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to access the &quot;&#x2F;etc&#x2F;sudoers&quot; file and files
+in the &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;&quot; directory.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;sudoers -p wa -k privileged-actions
+
+    -w &#x2F;etc&#x2F;sudoers.d&#x2F; -p wa -k privileged-actions
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72109</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the fchmodat syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmodat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmodat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmodat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmodat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72109</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the fchmodat syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchmodat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following command:
+
+    # grep -iw fchmodat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fchmodat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchmodat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fchmodat&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchmodat&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fchmodat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchmodat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71999</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system security patches and
+updates must be installed and up to date.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Timely patching is critical for maintaining the operational
+availability, confidentiality, and integrity of information technology (IT)
+systems. However, failure to keep operating system and application software
+patched is a common mistake made by IT professionals. New patches are released
+daily, and it is often difficult for even experienced System Administrators to
+keep abreast of all the new patches. When new weaknesses in an operating system
+exist, patches are usually made available by the vendor to resolve the
+problems. If the most recent security patches and updates are not installed,
+unauthorized users may take advantage of weaknesses in the unpatched software.
+The lack of prompt attention to patching could result in a system compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">List of out-of-date packages is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;bind-export-libs&quot;, &quot;device-mapper&quot;, &quot;device-mapper-libs&quot;, &quot;python-requests&quot;, &quot;systemd&quot;, &quot;puppet5-release&quot;, &quot;systemd-sysv&quot;, &quot;systemd-libs&quot;, &quot;libgudev1&quot;, &quot;rh-amazon-rhui-client&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package bind-export-libs version is expected to eq &quot;9.11.4-16.P2.el7_8.2&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;9.11.4-16.P2.el7_8.2&quot;
+     got: &quot;9.11.4-16.P2.el7&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package device-mapper version is expected to eq &quot;1.02.164-7.el7_8.1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;1.02.164-7.el7_8.1&quot;
+     got: &quot;1.02.164-7.el7&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package device-mapper-libs version is expected to eq &quot;1.02.164-7.el7_8.1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;1.02.164-7.el7_8.1&quot;
+     got: &quot;1.02.164-7.el7&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package python-requests version is expected to eq &quot;2.6.0-9.el7_8&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;2.6.0-9.el7_8&quot;
+     got: &quot;2.6.0-8.el7_7&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package systemd version is expected to eq &quot;219-73.el7_8.5&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;219-73.el7_8.5&quot;
+     got: &quot;219-73.el7.1&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package puppet5-release version is expected to eq &quot;5.0.0-11.el6&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;5.0.0-11.el6&quot;
+     got: &quot;5.0.0-4.el6&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package systemd-sysv version is expected to eq &quot;219-73.el7_8.5&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;219-73.el7_8.5&quot;
+     got: &quot;219-73.el7.1&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package systemd-libs version is expected to eq &quot;219-73.el7_8.5&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;219-73.el7_8.5&quot;
+     got: &quot;219-73.el7.1&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package libgudev1 version is expected to eq &quot;219-73.el7_8.5&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;219-73.el7_8.5&quot;
+     got: &quot;219-73.el7.1&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package rh-amazon-rhui-client version is expected to eq &quot;3.0.26-1.el7&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: &quot;3.0.26-1.el7&quot;
+     got: &quot;3.0.18-1.el7&quot;
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71999</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system security patches and
+updates must be installed and up to date.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Timely patching is critical for maintaining the operational
+availability, confidentiality, and integrity of information technology (IT)
+systems. However, failure to keep operating system and application software
+patched is a common mistake made by IT professionals. New patches are released
+daily, and it is often difficult for even experienced System Administrators to
+keep abreast of all the new patches. When new weaknesses in an operating system
+exist, patches are usually made available by the vendor to resolve the
+problems. If the most recent security patches and updates are not installed,
+unauthorized users may take advantage of weaknesses in the unpatched software.
+The lack of prompt attention to patching could result in a system compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system security patches and updates are installed and
+up to date. Updates are required to be applied with a frequency determined by
+the site or Program Management Office (PMO).
+
+    Obtain the list of available package security updates from Red Hat. The URL
+for updates is https:&#x2F;&#x2F;rhn.redhat.com&#x2F;errata&#x2F;. It is important to note that
+updates provided by Red Hat may not be present on the system if the underlying
+packages are not installed.
+
+    Check that the available package security updates have been installed on
+the system with the following command:
+
+    # yum history list | more
+    Loaded plugins: langpacks, product-id, subscription-manager
+    ID     | Command line             | Date and time    | Action(s)      |
+Altered
+
+-------------------------------------------------------------------------------
+        70 | install aide             | 2016-05-05 10:58 | Install       |
+1
+        69 | update -y                | 2016-05-04 14:34 | Update     |   18 EE
+        68 | install vlc                | 2016-04-21 17:12 | Install        |
+21
+        67 | update -y                | 2016-04-21 17:04 | Update     |     7 EE
+        66 | update -y                | 2016-04-15 16:47 | E, I, U         |
+84 EE
+
+    If package updates have not been performed on the system within the
+timeframe that the site&#x2F;program documentation requires, this is a finding.
+
+    Typical update frequency may be overridden by Information Assurance
+Vulnerability Alert (IAVA) notifications from CYBERCOM.
+
+    If the operating system is in non-compliance with the Information Assurance
+Vulnerability Management (IAVM) process, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Install the operating system patches or updated packages
+available from Red Hat within 30 days or sooner as local policy dictates.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72073</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must use a file
+integrity tool that is configured to use FIPS 140-2 approved cryptographic
+hashes for validating file contents and directories.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          File integrity tools use cryptographic hashes for verifying file
+contents and directories have not been altered. These hashes must be FIPS 140-2
+approved cryptographic hashes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package aide is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">List of monitored files&#x2F;directories without &#39;sha512&#39; rule is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;&#x2F;root&#x2F;\\..*&quot;, &quot;&#x2F;var&#x2F;log&#x2F;faillog$&quot;, &quot;&#x2F;var&#x2F;log&#x2F;lastlog$&quot;, &quot;&#x2F;var&#x2F;run&#x2F;faillock&quot;, &quot;&#x2F;var&#x2F;log&quot;, &quot;&#x2F;var&#x2F;run&#x2F;utmp$&quot;, &quot;&#x2F;etc&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72073</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must use a file
+integrity tool that is configured to use FIPS 140-2 approved cryptographic
+hashes for validating file contents and directories.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">File integrity tools use cryptographic hashes for verifying file
+contents and directories have not been altered. These hashes must be FIPS 140-2
+approved cryptographic hashes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the file integrity tool is configured to use FIPS 140-2 approved
+cryptographic hashes for validating file contents and directories.
+
+    Note: If RHEL-07-021350 is a finding, this is automatically a finding too
+as the system cannot implement FIPS 140-2 approved cryptographic algorithms and
+hashes.
+
+    Check to see if Advanced Intrusion Detection Environment (AIDE) is
+installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the System Administrator how file integrity
+checks are performed on the system.
+
+    If there is no application installed to perform file integrity checks, this
+is a finding.
+
+    Note: AIDE is highly configurable at install time. These commands assume
+the &quot;aide.conf&quot; file is under the &quot;&#x2F;etc&quot; directory.
+
+    Use the following command to determine if the file is in another location:
+
+    # find &#x2F; -name aide.conf
+
+    Check the &quot;aide.conf&quot; file to determine if the &quot;sha512&quot; rule has been
+added to the rule list being applied to the files and directories selection
+lists.
+
+    An example rule that includes the &quot;sha512&quot; rule follows:
+
+    All&#x3D;p+i+n+u+g+s+m+S+sha512+acl+xattrs+selinux
+    &#x2F;bin All # apply the custom rule to the files in bin
+    &#x2F;sbin All # apply the same custom rule to the files in sbin
+
+    If the &quot;sha512&quot; rule is not being used on all uncommented selection lines
+in the &quot;&#x2F;etc&#x2F;aide.conf&quot; file, or another file integrity tool is not using
+FIPS 140-2 approved cryptographic hashes for validating file contents and
+directories, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the file integrity tool to use FIPS 140-2 cryptographic hashes
+for validating file and directory contents.
+
+    If AIDE is installed, ensure the &quot;sha512&quot; rule is present on all
+uncommented file and directory selection lists.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71863</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner before granting local or
+remote access to the system via a command line user logon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The banner text should match the standard banner is expected to cmp &#x3D;&#x3D; &quot;YouareaccessingaU.S.Government(USG)InformationSystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS),youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: YouareaccessingaU.S.Government(USG)InformationSystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS),youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+     got: YouareaccessingaU.S.Government(USG)informationsystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS)youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The banner text should match the limited banner is expected to cmp &#x3D;&#x3D; &quot;I&#39;veread&amp;consenttotermsinISuseragreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: I&#39;veread&amp;consenttotermsinISuseragreem&#39;t.
+     got: YouareaccessingaU.S.Government(USG)informationsystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS)youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71863</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner before granting local or
+remote access to the system via a command line user logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system displays the Standard Mandatory DoD Notice and
+Consent Banner before granting access to the operating system via a command
+line user logon.
+
+    Check to see if the operating system displays a banner at the command line
+logon screen with the following command:
+
+    # more &#x2F;etc&#x2F;issue
+
+    The command should return the following text:
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+
+    If the operating system does not display a graphical logon banner or the
+banner does not match the Standard Mandatory DoD Notice and Consent Banner,
+this is a finding.
+
+    If the text in the &quot;&#x2F;etc&#x2F;issue&quot; file does not match the Standard
+Mandatory DoD Notice and Consent Banner, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to display the Standard Mandatory DoD Notice
+and Consent Banner before granting access to the system via the command line by
+editing the &quot;&#x2F;etc&#x2F;issue&quot; file.
+
+    Replace the default text with the Standard Mandatory DoD Notice and Consent
+Banner. The DoD required text is:
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants.  Such
+communications and work product are private and confidential.  See User
+Agreement for details.&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72319</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not forward IPv6
+source-routed packets.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv6
+forwarding is enabled and the system is functioning as a router.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv6.conf.all.accept_source_route value is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72319</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not forward IPv6
+source-routed packets.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv6
+forwarding is enabled and the system is functioning as a router.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If IPv6 is not enabled, the key will not exist, and this is Not Applicable.
+
+    Verify the system does not accept IPv6 source-routed packets.
+
+    # grep net.ipv6.conf.all.accept_source_route &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    net.ipv6.conf.all.accept_source_route &#x3D; 0
+
+    If &quot;net.ipv6.conf.all.accept_source_route&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv6.conf.all.accept_source_route
+    net.ipv6.conf.all.accept_source_route &#x3D; 0
+
+    If the returned lines do not have a value of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to the required kernel parameter, if IPv6 is enabled, by
+adding the following line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in
+the &#x2F;etc&#x2F;sysctl.d&#x2F; directory (or modify the line to have the required value):
+
+    net.ipv6.conf.all.accept_source_route &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72229</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) communications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001453
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">LDAP not enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72229</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must implement
+cryptography to protect the integrity of Lightweight Directory Access Protocol
+(LDAP) communications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without cryptographic integrity protections, information can be
+altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If LDAP is not being utilized, this requirement is Not Applicable.
+
+    Verify the operating system implements cryptography to protect the
+integrity of remote LDAP access sessions.
+
+    To determine if LDAP is being used for authentication, use the following
+command:
+
+    # systemctl status sssd.service
+    sssd.service - System Security Services Daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;sssd.service; enabled; vendor
+preset: disabled)
+    Active: active (running) since Wed 2018-06-27 10:58:11 EST; 1h 50min ago
+
+    If the &quot;sssd.service&quot; is &quot;active&quot;, then LDAP is being used.
+
+    Determine the &quot;id_provider&quot; the LDAP is currently using:
+
+    # grep -i &quot;id_provider&quot; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+
+    id_provider &#x3D; ad
+
+    If &quot;id_provider&quot; is set to &quot;ad&quot;, this is Not Applicable.
+
+    Verify the sssd service is configured to require the use of certificates:
+
+    # grep -i tls_reqcert &#x2F;etc&#x2F;sssd&#x2F;sssd.conf
+    ldap_tls_reqcert &#x3D; demand
+
+    If the &quot;ldap_tls_reqcert&quot; setting is missing, commented out, or does not
+exist, this is a finding.
+
+    If the &quot;ldap_tls_reqcert&quot; setting is not set to &quot;demand&quot; or &quot;hard&quot;,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to implement cryptography to protect the
+integrity of LDAP remote access sessions.
+
+    Add or modify the following line in &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot;:
+
+    ldap_tls_reqcert &#x3D; demand</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72103</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the fchownat syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-2 d
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000126
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchownat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchownat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchownat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchownat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72103</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the fchownat syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-2 d, AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchownat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw fchownat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fchownat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchownat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fchownat&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fchownat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchownat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72077</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have the
+telnet-server package installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is detrimental for operating systems to provide, or install by
+default, functionality exceeding requirements or mission objectives. These
+unnecessary capabilities or services are often overlooked and therefore may
+remain unsecured. They increase the risk to the platform by providing
+additional attack vectors.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services, provided by default, may not be
+necessary to support essential organizational operations (e.g., key missions,
+functions).
+
+    Examples of non-essential capabilities include, but are not limited to,
+games, software packages, tools, and demonstration software not related to
+requirements or providing a wide array of functionality not required for every
+mission, but which cannot be disabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package telnet-server is expected not to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72077</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have the
+telnet-server package installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is detrimental for operating systems to provide, or install by
+default, functionality exceeding requirements or mission objectives. These
+unnecessary capabilities or services are often overlooked and therefore may
+remain unsecured. They increase the risk to the platform by providing
+additional attack vectors.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services, provided by default, may not be
+necessary to support essential organizational operations (e.g., key missions,
+functions).
+
+    Examples of non-essential capabilities include, but are not limited to,
+games, software packages, tools, and demonstration software not related to
+requirements or providing a wide array of functionality not required for every
+mission, but which cannot be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system is configured to disable non-essential
+capabilities. The most secure way of ensuring a non-essential capability is
+disabled is to not have the capability installed.
+
+    The telnet service provides an unencrypted remote access service that does
+not provide for the confidentiality and integrity of user passwords or the
+remote session.
+
+    If a privileged user were to log on using this service, the privileged user
+password could be compromised.
+
+    Check to see if the telnet-server package is installed with the following
+command:
+
+    # yum list installed telnet-server
+
+    If the telnet-server package is installed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to disable non-essential capabilities by
+removing the telnet-server package from the system with the following command:
+
+    # yum remove telnet-server</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71949</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that users must re-authenticate for privilege escalation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-11
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002038
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without re-authentication, users may access resources or perform tasks
+for which they do not have authorization.
+
+    When operating systems provide the capability to escalate a functional
+capability, it is critical the user reauthenticate.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;grep -ir authenticate &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&#x60; stdout is expected not to match &#x2F;!authenticate&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71949</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that users must re-authenticate for privilege escalation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without re-authentication, users may access resources or perform tasks
+for which they do not have authorization.
+
+    When operating systems provide the capability to escalate a functional
+capability, it is critical the user reauthenticate.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-11, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system requires users to reauthenticate for privilege
+escalation.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers&quot; and &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;
+files with the following command:
+
+    # grep -i authenticate &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*
+
+    If any uncommented line is found with a &quot;!authenticate&quot; tag, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to require users to reauthenticate for
+privilege escalation.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers&quot; file with the following
+command:
+
+    # visudo
+    Remove any occurrences of &quot;!authenticate&quot; tags in the file.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;*&quot; files with the
+following command:
+
+    # grep -i authenticate &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*
+    Remove any occurrences of &quot;!authenticate&quot; tags in the file(s).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72033</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files have mode 0740 or less permissive.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Local initialization files are used to configure the user&#39;s shell
+environment upon logon. Malicious modification of these files could compromise
+accounts upon logon.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">#&lt;Set: {&quot;&#x2F;root&#x2F;.bash_logout&quot;, &quot;&#x2F;root&#x2F;.bash_profile&quot;, &quot;&#x2F;root&#x2F;.bashrc&quot;, &quot;&#x2F;root&#x2F;.cshrc&quot;, &quot;&#x2F;root&#x2F;.tcshrc&quot;}&gt; is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;#&lt;Set: {&quot;&#x2F;root&#x2F;.bash_logout&quot;, &quot;&#x2F;root&#x2F;.bash_profile&quot;, &quot;&#x2F;root&#x2F;.bashrc&quot;, &quot;&#x2F;root&#x2F;.cshrc&quot;, &quot;&#x2F;root&#x2F;.tcshrc&quot;}&gt;.empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72033</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files have mode 0740 or less permissive.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Local initialization files are used to configure the user&#39;s shell
+environment upon logon. Malicious modification of these files could compromise
+accounts upon logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that all local initialization files have a mode of &quot;0740&quot; or less
+permissive.
+
+    Check the mode on all local initialization files with the following command:
+
+    Note: The example will be for the &quot;smithj&quot; user, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # ls -al &#x2F;home&#x2F;smithj&#x2F;.[^.]* | more
+
+    -rwxr----- 1 smithj users 896 Mar 10 2011 .profile
+    -rwxr----- 1 smithj users 497 Jan 6 2007 .login
+    -rwxr----- 1 smithj users 886 Jan 6 2007 .something
+
+    If any local initialization files have a mode more permissive than
+&quot;0740&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the mode of the local initialization files to &quot;0740&quot; with the
+following command:
+
+    Note: The example will be for the &quot;smithj&quot; user, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # chmod 0740 &#x2F;home&#x2F;smithj&#x2F;.[^.]*</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71911</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed a minimum of eight of the total number of
+characters must be changed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf difok.to_i is expected to cmp &gt;&#x3D; 8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71911</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed a minimum of eight of the total number of
+characters must be changed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The &quot;difok&quot; option sets the number of characters in a password that must
+not be present in the old password.
+
+    Check for the value of the &quot;difok&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep difok &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    difok &#x3D; 8
+
+    If the value of &quot;difok&quot; is set to less than &quot;8&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to require the change of at least eight of
+the total number of characters when passwords are changed by setting the
+&quot;difok&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; (or modify the
+line to have the required value):
+
+    difok &#x3D; 8</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72269</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must, for networked
+systems, synchronize clocks with a server that is synchronized to one of the
+redundant United States Naval Observatory (USNO) time servers, a time server
+designated for the appropriate DoD network (NIPRNet&#x2F;SIPRNet), and&#x2F;or the Global
+Positioning System (GPS).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-8 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-8 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001891
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002046
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Inaccurate time stamps make it more difficult to correlate events and
+can lead to an inaccurate analysis. Determining the correct time a particular
+event occurred on a system is critical when conducting forensic analysis and
+investigating system events. Sources outside the configured acceptable
+allowance (drift) may be inaccurate.
+
+    Synchronizing internal information system clocks provides uniformity of
+time stamps for information systems with multiple system clocks and systems
+connected over a network.
+
+    Organizations should consider endpoints that may not have regular access to
+the authoritative time server (e.g., mobile, teleworking, and tactical
+endpoints).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service chronyd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service chronyd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service chronyd is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">chronyd time sources list is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">chronyd maxpoll values (99&#x3D;maxpoll absent) is expected to all be &lt; 17</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72269</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must, for networked
+systems, synchronize clocks with a server that is synchronized to one of the
+redundant United States Naval Observatory (USNO) time servers, a time server
+designated for the appropriate DoD network (NIPRNet&#x2F;SIPRNet), and&#x2F;or the Global
+Positioning System (GPS).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Inaccurate time stamps make it more difficult to correlate events and
+can lead to an inaccurate analysis. Determining the correct time a particular
+event occurred on a system is critical when conducting forensic analysis and
+investigating system events. Sources outside the configured acceptable
+allowance (drift) may be inaccurate.
+
+    Synchronizing internal information system clocks provides uniformity of
+time stamps for information systems with multiple system clocks and systems
+connected over a network.
+
+    Organizations should consider endpoints that may not have regular access to
+the authoritative time server (e.g., mobile, teleworking, and tactical
+endpoints).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-8 (1) (a), AU-8 (1) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check to see if NTP is running in continuous mode:
+
+    # ps -ef | grep ntp
+
+    If NTP is not running, check to see if &quot;chronyd&quot; is running in continuous
+mode:
+
+    # ps -ef | grep chronyd
+
+    If NTP or &quot;chronyd&quot; is not running, this is a finding.
+
+    If the NTP process is found, then check the &quot;ntp.conf&quot; file for the
+&quot;maxpoll&quot; option setting:
+
+    # grep maxpoll &#x2F;etc&#x2F;ntp.conf
+
+    server 0.rhel.pool.ntp.org iburst maxpoll 10
+
+    If the option is set to &quot;17&quot; or is not set, this is a finding.
+
+    If the file does not exist, check the &quot;&#x2F;etc&#x2F;cron.daily&quot; subdirectory for
+a crontab file controlling the execution of the &quot;ntpd -q&quot; command.
+
+    # grep -i &quot;ntpd -q&quot; &#x2F;etc&#x2F;cron.daily&#x2F;*
+    # ls -al &#x2F;etc&#x2F;cron.* | grep ntp
+
+    ntp
+
+    If a crontab file does not exist in the &quot;&#x2F;etc&#x2F;cron.daily&quot; that executes
+the &quot;ntpd -q&quot; command, this is a finding.
+
+    If the &quot;chronyd&quot; process is found, then check the &quot;chrony.conf&quot; file
+for the &quot;maxpoll&quot; option setting:
+
+    # grep maxpoll &#x2F;etc&#x2F;chrony.conf
+
+    server 0.rhel.pool.ntp.org iburst maxpoll 10
+
+    If the option is not set or the line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the &quot;&#x2F;etc&#x2F;ntp.conf&quot; or &quot;&#x2F;etc&#x2F;chrony.conf&quot; file and add or update
+an entry to define &quot;maxpoll&quot; to &quot;10&quot; as follows:
+
+    server 0.rhel.pool.ntp.org iburst maxpoll 10
+
+    If NTP was running and &quot;maxpoll&quot; was updated, the NTP service must be
+restarted:
+
+    # systemctl restart ntpd
+
+    If NTP was not running, it must be started:
+
+    # systemctl start ntpd
+
+    If &quot;chronyd&quot; was running and &quot;maxpoll&quot; was updated, the service must be
+restarted:
+
+    # systemctl restart chronyd.service
+
+    If &quot;chronyd&quot; was not running, it must be started:
+
+    # systemctl start chronyd.service</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71931</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that existing passwords are restricted to a 60-day maximum lifetime.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any password, no matter how complex, can eventually be cracked.
+Therefore, passwords need to be changed periodically. If the operating system
+does not limit the lifetime of passwords and force users to change their
+passwords, there is the risk that the operating system passwords could be
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;shadow with user &#x3D;&#x3D; &quot;ec2-user&quot; max_days.first.to_i is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71931</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that existing passwords are restricted to a 60-day maximum lifetime.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any password, no matter how complex, can eventually be cracked.
+Therefore, passwords need to be changed periodically. If the operating system
+does not limit the lifetime of passwords and force users to change their
+passwords, there is the risk that the operating system passwords could be
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check whether the maximum time period for existing passwords is restricted
+to 60 days.
+
+    # awk -F: &#39;$5 &gt; 60 {print $1 &quot; &quot; $5}&#39; &#x2F;etc&#x2F;shadow
+
+    If any results are returned that are not associated with a system account,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure non-compliant accounts to enforce a 60-day maximum password
+lifetime restriction.
+
+    # chage -M 60 [user]</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72061</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must use a separate file
+system for &#x2F;var.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Mount &#x2F;var is expected to be mounted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+Mount &#x2F;var is not mounted
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72061</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must use a separate file
+system for &#x2F;var.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that a separate file system&#x2F;partition has been created for &quot;&#x2F;var&quot;.
+
+    Check that a file system&#x2F;partition has been created for &quot;&#x2F;var&quot; with the
+following command:
+
+    # grep &#x2F;var &#x2F;etc&#x2F;fstab
+    UUID&#x3D;c274f65f    &#x2F;var                    ext4    noatime,nobarrier        1
+2
+
+    If a separate entry for &quot;&#x2F;var&quot; is not in use, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Migrate the &quot;&#x2F;var&quot; path onto a separate file system.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-92255</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must have a host-based
+intrusion detection tool installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-4 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001263
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Adding host-based intrusion detection tools can provide the capability
+to automatically take actions in response to malicious behavior, which can
+provide additional agility in reacting to network threats. These tools also
+often include a reporting capability to provide network awareness of the
+system, which may not otherwise exist in an organization&#39;s systems management
+regime.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package MFEhiplsm is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package MFEhiplsm&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Processes &#x2F;hipclient&#x2F; is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected Processes &#x2F;hipclient&#x2F; to exist</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-92255</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must have a host-based
+intrusion detection tool installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Adding host-based intrusion detection tools can provide the capability
+to automatically take actions in response to malicious behavior, which can
+provide additional agility in reacting to network threats. These tools also
+often include a reporting capability to provide network awareness of the
+system, which may not otherwise exist in an organization&#39;s systems management
+regime.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-4 (5), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Ask the SA or ISSO if a host-based intrusion detection application is
+loaded on the system. Per OPORD 16-0080, the preferred intrusion detection
+system is McAfee HBSS available through the U.S. Cyber Command (USCYBERCOM).
+
+    If another host-based intrusion detection application is in use, such as
+SELinux, this must be documented and approved by the local Authorizing Official.
+
+    Procedure:
+    Examine the system to determine if the Host Intrusion Prevention System
+(HIPS) is installed:
+
+    # rpm -qa | grep MFEhiplsm
+
+    Verify that the McAfee HIPS module is active on the system:
+
+    # ps -ef | grep -i “hipclient”
+
+    If the MFEhiplsm package is not installed, check for another intrusion
+detection system:
+
+    # find &#x2F; -name &lt;daemon name&gt;
+
+    Where &lt;daemon name&gt; is the name of the primary application daemon to
+determine if the application is loaded on the system.
+
+    Determine if the application is active on the system:
+
+    # ps -ef | grep -i &lt;daemon name&gt;
+
+    If the MFEhiplsm package is not installed and an alternate host-based
+intrusion detection application has not been documented for use, this is a
+finding.
+
+    If no host-based intrusion detection system is installed and running on the
+system, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Install and enable the latest McAfee HIPS package, available from
+USCYBERCOM.
+
+    Note: If the system does not support the McAfee HIPS package, install and
+enable a supported intrusion detection system application and document its use
+with the Authorizing Official.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71893</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must initiate a
+screensaver after a 15-minute period of inactivity for graphical user
+interfaces.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have GNOME installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71893</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must initiate a
+screensaver after a 15-minute period of inactivity for graphical user
+interfaces.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system initiates a screensaver after a 15-minute
+period of inactivity for graphical user interfaces. The screen program must be
+installed to lock sessions on the console.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check to see if GNOME is configured to display a screensaver after a 15
+minute delay with the following command:
+
+    # grep -i idle-delay &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    idle-delay&#x3D;uint32 900
+
+    If the &quot;idle-delay&quot; setting is missing or is not set to &quot;900&quot; or less,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to initiate a screensaver after a 15-minute
+period of inactivity for graphical user interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver
+
+    Edit &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver and add or update the following
+lines:
+
+    [org&#x2F;gnome&#x2F;desktop&#x2F;session]
+    # Set the lock time out to 900 seconds before the session is considered idle
+    idle-delay&#x3D;uint32 900
+
+    You must include the &quot;uint32&quot; along with the integer key values as shown.
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71915</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed the number of repeating consecutive characters
+must not be more than three characters.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf maxrepeat.to_i is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71915</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed the number of repeating consecutive characters
+must not be more than three characters.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The &quot;maxrepeat&quot; option sets the maximum number of allowed same
+consecutive characters in a new password.
+
+    Check for the value of the &quot;maxrepeat&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep maxrepeat &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    maxrepeat &#x3D; 3
+
+    If the value of &quot;maxrepeat&quot; is set to more than &quot;3&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to require the change of the number of
+repeating consecutive characters when passwords are changed by setting the
+&quot;maxrepeat&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf conf&quot; (or modify
+the line to have the required value):
+
+    maxrepeat &#x3D; 3</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81013</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the noexec option.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001764
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;noexec&quot; mount option causes the system to not execute binary
+files. This option must be used for mounting any file system not containing
+approved binary files as they may be incompatible. Executing files from
+untrusted file systems increases the opportunity for unprivileged users to
+attain unauthorized administrative access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Mount &#x2F;dev&#x2F;shm options is expected to include &quot;noexec&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;rw&quot;, &quot;nosuid&quot;, &quot;nodev&quot;, &quot;seclabel&quot;] to include &quot;noexec&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81013</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the noexec option.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;noexec&quot; mount option causes the system to not execute binary
+files. This option must be used for mounting any file system not containing
+approved binary files as they may be incompatible. Executing files from
+untrusted file systems increases the opportunity for unprivileged users to
+attain unauthorized administrative access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that the &quot;noexec&quot; option is configured for &#x2F;dev&#x2F;shm:
+
+    # cat &#x2F;etc&#x2F;fstab | grep &#x2F;dev&#x2F;shm
+
+    tmpfs &#x2F;dev&#x2F;shm tmpfs defaults,nodev,nosuid,noexec 0 0
+
+    If any results are returned and the &quot;noexec&quot; option is not listed, this
+is a finding.
+
+    Verify &quot;&#x2F;dev&#x2F;shm&quot; is mounted with the &quot;noexec&quot; option:
+
+    # mount | grep &quot;&#x2F;dev&#x2F;shm&quot; | grep noexec
+
+    If no results are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system so that &#x2F;dev&#x2F;shm is mounted with the
+&quot;noexec&quot; option.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73173</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;opasswd.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000018
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001403
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;security&#x2F;opasswd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;security&#x2F;opasswd&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73173</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;opasswd.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&#x2F;etc&#x2F;opasswd.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;security&#x2F;opasswd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;security&#x2F;opasswd -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&#x2F;etc&#x2F;opasswd.
+
+    Add or update the following file system rule in
+&quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;security&#x2F;opasswd -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect:
+    # systemctl restart auditd</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72117</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the removexattr syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;removexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;removexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;removexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;removexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72117</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the removexattr syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;removexattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw removexattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S removexattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S removexattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;removexattr&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;removexattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S removexattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S removexattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71951</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the delay between logon prompts following a failed console logon attempt
+is at least four seconds.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Configuring the operating system to implement organization-wide
+security implementation guides and security checklists verifies compliance with
+federal standards and establishes a common security baseline across DoD that
+reflects the most restrictive security posture consistent with operational
+requirements.
+
+    Configuration settings are the set of parameters that can be changed in
+hardware, software, or firmware components of the system that affect the
+security posture and&#x2F;or functionality of the system. Security-related
+parameters are those parameters impacting the security state of the system,
+including the parameters required to satisfy other security control
+requirements. Security-related parameters include, for example, registry
+settings; account, file, and directory permission settings; and settings for
+functions, ports, protocols, services, and remote connections.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">login.defs FAIL_DELAY.to_i is expected to cmp &gt;&#x3D; 4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71951</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the delay between logon prompts following a failed console logon attempt
+is at least four seconds.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Configuring the operating system to implement organization-wide
+security implementation guides and security checklists verifies compliance with
+federal standards and establishes a common security baseline across DoD that
+reflects the most restrictive security posture consistent with operational
+requirements.
+
+    Configuration settings are the set of parameters that can be changed in
+hardware, software, or firmware components of the system that affect the
+security posture and&#x2F;or functionality of the system. Security-related
+parameters are those parameters impacting the security state of the system,
+including the parameters required to satisfy other security control
+requirements. Security-related parameters include, for example, registry
+settings; account, file, and directory permission settings; and settings for
+functions, ports, protocols, services, and remote connections.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system enforces a delay of at least four seconds
+between console logon prompts following a failed logon attempt.
+
+    Check the value of the &quot;fail_delay&quot; parameter in the &quot;&#x2F;etc&#x2F;login.defs&quot;
+file with the following command:
+
+    # grep -i fail_delay &#x2F;etc&#x2F;login.defs
+    FAIL_DELAY 4
+
+    If the value of &quot;FAIL_DELAY&quot; is not set to &quot;4&quot; or greater, or the line
+is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to enforce a delay of at least four seconds
+between logon prompts following a failed console logon attempt.
+
+    Modify the &quot;&#x2F;etc&#x2F;login.defs&quot; file to set the &quot;FAIL_DELAY&quot; parameter to
+&quot;4&quot; or greater:
+
+    FAIL_DELAY 4</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72037</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that local initialization files do not execute world-writable programs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This control consistently takes a long to run and has been disabled
+          using the disable_slow_controls attribute.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control consistently takes a long to run and has been disabled
+  using the disable_slow_controls attribute.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72037</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that local initialization files do not execute world-writable programs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This control consistently takes a long to run and has been disabled
+          using the disable_slow_controls attribute.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that local initialization files do not execute world-writable
+programs.
+
+    Check the system for world-writable files with the following command:
+
+    # find &#x2F; -xdev -perm -002 -type f -exec ls -ld {} \; | more
+
+    For all files listed, check for their presence in the local initialization
+files with the following commands:
+
+    Note: The example will be for a system that is configured to create users&#39;
+home directories in the &quot;&#x2F;home&quot; directory.
+
+    # grep &lt;file&gt; &#x2F;home&#x2F;*&#x2F;.*
+
+    If any local initialization files are found to reference world-writable
+files, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the mode on files being executed by the local initialization files with
+the following command:
+
+    # chmod 0755 &lt;file&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72121</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the lremovexattr syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lremovexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lremovexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lremovexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lremovexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72121</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the lremovexattr syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lremovexattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw lremovexattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S lremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;lremovexattr&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lremovexattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S lremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72005</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the root account must be the only account having unrestricted access to
+the system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If an account other than root also has a User Identifier (UID) of
+&quot;0&quot;, it has root authority, giving that account unrestricted access to the
+entire operating system. Multiple accounts with a UID of &quot;0&quot; afford an
+opportunity for potential intruders to guess a password for a privileged
+account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;passwd with uid &#x3D;&#x3D; 0 users is expected to cmp &#x3D;&#x3D; &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;passwd with uid &#x3D;&#x3D; 0 entries.length is expected to eq 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72005</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the root account must be the only account having unrestricted access to
+the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If an account other than root also has a User Identifier (UID) of
+&quot;0&quot;, it has root authority, giving that account unrestricted access to the
+entire operating system. Multiple accounts with a UID of &quot;0&quot; afford an
+opportunity for potential intruders to guess a password for a privileged
+account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the system for duplicate UID &quot;0&quot; assignments with the following
+command:
+
+    # awk -F: &#39;$3 &#x3D;&#x3D; 0 {print $1}&#39; &#x2F;etc&#x2F;passwd
+
+    If any accounts other than root have a UID of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the UID of any account on the system, other than root, that has a
+UID of &quot;0&quot;.
+
+    If the account is associated with system commands or applications, the UID
+should be changed to one greater than &quot;0&quot; but less than &quot;1000&quot;. Otherwise,
+assign a UID of greater than &quot;1000&quot; that has not already been assigned.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72253</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon is configured to only use Message Authentication Codes
+(MACs) employing FIPS 140-2 approved cryptographic hash algorithms.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001453
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DoD information systems are required to use FIPS 140-2 approved
+cryptographic hash functions. The only SSHv2 hash algorithm meeting this
+requirement is SHA.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">hmac-sha2-256 is expected to be in &quot;hmac-sha2-256&quot; and &quot;hmac-sha2-512&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">hmac-sha2-512 is expected to be in &quot;hmac-sha2-256&quot; and &quot;hmac-sha2-512&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72253</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon is configured to only use Message Authentication Codes
+(MACs) employing FIPS 140-2 approved cryptographic hash algorithms.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DoD information systems are required to use FIPS 140-2 approved
+cryptographic hash functions. The only SSHv2 hash algorithm meeting this
+requirement is SHA.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH daemon is configured to only use MACs employing FIPS
+140-2-approved ciphers.
+
+    Note: If RHEL-07-021350 is a finding, this is automatically a finding as
+the system cannot implement FIPS 140-2-approved cryptographic algorithms and
+hashes.
+
+    Check that the SSH daemon is configured to only use MACs employing FIPS
+140-2-approved ciphers with the following command:
+
+    # grep -i macs &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    MACs hmac-sha2-256,hmac-sha2-512
+
+    If any ciphers other than &quot;hmac-sha2-256&quot; or &quot;hmac-sha2-512&quot; are listed
+or the returned line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the line for the
+&quot;MACs&quot; keyword and set its value to &quot;hmac-sha2-256&quot; and&#x2F;or
+&quot;hmac-sha2-512&quot; (this file may be named differently or be in a different
+location if using a version of SSH that is provided by a third-party vendor):
+
+    MACs hmac-sha2-256,hmac-sha2-512
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72049</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must set the umask value
+to 077 for all local interactive user accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 f
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-11 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000318
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000368
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001812
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001814
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The umask controls the default access mode assigned to newly created
+files. A umask of 077 limits new files to mode 700 or less permissive. Although
+umask can be represented as a four-digit number, the first digit representing
+special access modes is typically ignored or required to be &quot;0&quot;. This
+requirement applies to the globally configured system defaults and the local
+interactive user defaults for each account on the system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No interactive user initialization files with a less restrictive umask were found. is expected to eq true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No users were found with a less restrictive umask were found. is expected to eq true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72049</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must set the umask value
+to 077 for all local interactive user accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The umask controls the default access mode assigned to newly created
+files. A umask of 077 limits new files to mode 700 or less permissive. Although
+umask can be represented as a four-digit number, the first digit representing
+special access modes is typically ignored or required to be &quot;0&quot;. This
+requirement applies to the globally configured system defaults and the local
+interactive user defaults for each account on the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that the default umask for all local interactive users is &quot;077&quot;.
+
+    Identify the locations of all local interactive user home directories by
+looking at the &quot;&#x2F;etc&#x2F;passwd&quot; file.
+
+    Check all local interactive user initialization files for interactive users
+with the following command:
+
+    Note: The example is for a system that is configured to create users home
+directories in the &quot;&#x2F;home&quot; directory.
+
+    # grep -i umask &#x2F;home&#x2F;*&#x2F;.*
+
+    If any local interactive user initialization files are found to have a
+umask statement that has a value less restrictive than &quot;077&quot;, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove the umask statement from all local interactive user&#39;s initialization
+files.
+
+    If the account is for an application, the requirement for a umask less
+restrictive than &quot;077&quot; can be documented with the Information System Security
+Officer, but the user agreement for access to the account must specify that the
+local interactive user must log on to their account first and then switch the
+user to the application account with the correct option to gain the account&#39;s
+environment variables.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72309</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not be performing
+packet forwarding unless the system is a router.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Routing protocol daemons are typically used on routers to exchange
+network topology information with other routers. If this software is used when
+not required, system network information may be unnecessarily transmitted
+across the network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.ip_forward value is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72309</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not be performing
+packet forwarding unless the system is a router.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Routing protocol daemons are typically used on routers to exchange
+network topology information with other routers. If this software is used when
+not required, system network information may be unnecessarily transmitted
+across the network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system is not performing packet forwarding, unless the system is
+a router.
+
+    # grep net.ipv4.ip_forward &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    net.ipv4.ip_forward &#x3D; 0
+
+    If &quot;net.ipv4.ip_forward&quot; is not configured in the &#x2F;etc&#x2F;sysctl.conf file
+or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or does not have a value
+of &quot;0&quot;, this is a finding.
+
+    Check that the operating system does not implement IP forwarding using the
+following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.ip_forward
+    net.ipv4.ip_forward &#x3D; 0
+
+    If IP forwarding value is &quot;1&quot; and the system is hosting any application,
+database, or web servers, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.ip_forward &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81003</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that &#x2F;etc&#x2F;pam.d&#x2F;passwd implements &#x2F;etc&#x2F;pam.d&#x2F;system-auth when changing
+passwords.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Pluggable authentication modules (PAM) allow for a modular approach to
+integrating authentication methods. PAM operates in a top-down processing model
+and if the modules are not listed in the correct order, an important security
+function could be bypassed if stack entries are not centralized.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;pam.d&#x2F;passwd substacks system-auth</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81003</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that &#x2F;etc&#x2F;pam.d&#x2F;passwd implements &#x2F;etc&#x2F;pam.d&#x2F;system-auth when changing
+passwords.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Pluggable authentication modules (PAM) allow for a modular approach to
+integrating authentication methods. PAM operates in a top-down processing model
+and if the modules are not listed in the correct order, an important security
+function could be bypassed if stack entries are not centralized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that &#x2F;etc&#x2F;pam.d&#x2F;passwd is configured to use &#x2F;etc&#x2F;pam.d&#x2F;system-auth
+when changing passwords:
+
+    # cat &#x2F;etc&#x2F;pam.d&#x2F;passwd | grep -i substack | grep -i system-auth
+    password     substack     system-auth
+
+    If no results are returned, the line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure PAM to utilize &#x2F;etc&#x2F;pam.d&#x2F;system-auth when changing passwords.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;pam.d&#x2F;passwd&quot; (or modify the line to have
+the required value):
+
+    password     substack    system-auth</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72021</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are group-owned by the home
+directory owners primary group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the Group Identifier (GID) of a local interactive user&#39;s home
+directory is not the same as the primary GID of the user, this would allow
+unauthorized access to the user&#39;s files, and users that share the same group
+may not be able to access files that they legitimately should.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Home directories that are not group-owned by the user&#39;s primary GID is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72021</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are group-owned by the home
+directory owners primary group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the Group Identifier (GID) of a local interactive user&#39;s home
+directory is not the same as the primary GID of the user, this would allow
+unauthorized access to the user&#39;s files, and users that share the same group
+may not be able to access files that they legitimately should.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the assigned home directory of all local interactive users is
+group-owned by that user&#39;s primary GID.
+
+    Check the home directory assignment for all local interactive users on the
+system with the following command:
+
+    # ls -ld $(egrep &#39;:[0-9]{4}&#39; &#x2F;etc&#x2F;passwd | cut -d: -f6)
+
+    -rwxr-x--- 1 smithj users 18 Mar 5 17:06 &#x2F;home&#x2F;smithj
+
+    Check the user&#39;s primary group with the following command:
+
+    # grep users &#x2F;etc&#x2F;group
+
+    users:x:250:smithj,jonesj,jacksons
+
+    If the user home directory referenced in &quot;&#x2F;etc&#x2F;passwd&quot; is not group-owned
+by that user&#39;s primary GID, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the group owner of a local interactive user&#39;s home directory to the
+group found in &quot;&#x2F;etc&#x2F;passwd&quot;. To change the group owner of a local
+interactive user&#39;s home directory, use the following command:
+
+    Note: The example will be for the user &quot;smithj&quot;, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;, and has a primary group of users.
+
+    # chgrp users &#x2F;home&#x2F;smithj</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72183</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the crontab command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged commands. The organization must maintain audit trails in sufficient
+detail to reconstruct events to determine the cause and impact of compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;crontab&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;crontab&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72183</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the crontab command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged commands. The organization must maintain audit trails in sufficient
+detail to reconstruct events to determine the cause and impact of compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;crontab&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;bin&#x2F;crontab &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;crontab -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-cron
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;crontab&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;crontab -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-cron
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72083</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must off-load audit
+records onto a different system or media from the system being audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#39;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&#39; cannot be found. This test cannot be checked in a automated fashion and you must check it manually</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72083</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must off-load audit
+records onto a different system or media from the system being audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system off-loads audit records onto a different system
+or media from the system being audited.
+
+    To determine the remote server that the records are being sent to, use the
+following command:
+
+    # grep -i remote_server &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+    remote_server &#x3D; 10.0.21.1
+
+    If a remote server is not configured, or the line is commented out, ask the
+System Administrator to indicate how the audit logs are off-loaded to a
+different system or media.
+
+    If there is no evidence that the audit logs are being off-loaded to another
+system or media, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to off-load audit records onto a different
+system or media from the system being audited.
+
+    Set the remote server option in &quot;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&quot; with the
+IP address of the log aggregation server.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72245</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must display the date
+and time of the last successful account logon upon an SSH logon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Providing users with feedback on when account accesses via SSH last
+occurred facilitates user recognition and reporting of unauthorized account
+use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration PrintLastLog is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72245</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must display the date
+and time of the last successful account logon upon an SSH logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Providing users with feedback on when account accesses via SSH last
+occurred facilitates user recognition and reporting of unauthorized account
+use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify SSH provides users with feedback on when account accesses last
+occurred.
+
+    Check that &quot;PrintLastLog&quot; keyword in the sshd daemon configuration file
+is used and set to &quot;yes&quot; with the following command:
+
+    # grep -i printlastlog &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    PrintLastLog yes
+
+    If the &quot;PrintLastLog&quot; keyword is set to &quot;no&quot;, is missing, or is
+commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure SSH to provide users with feedback on when account accesses last
+occurred by setting the required configuration options in &quot;&#x2F;etc&#x2F;pam.d&#x2F;sshd&quot;
+or in the &quot;sshd_config&quot; file used by the system (&quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;
+will be used in the example) (this file may be named differently or be in a
+different location if using a version of SSH that is provided by a third-party
+vendor).
+
+    Modify the &quot;PrintLastLog&quot; line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; to match the
+following:
+
+    PrintLastLog yes
+
+    The SSH service must be restarted for changes to &quot;sshd_config&quot; to take
+effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71959</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not allow a
+non-certificate trusted host SSH logon to the system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Failure to restrict system access to authenticated users negatively
+impacts operating system security.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration HostbasedAuthentication is expected to eq &quot;no&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71959</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not allow a
+non-certificate trusted host SSH logon to the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Failure to restrict system access to authenticated users negatively
+impacts operating system security.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system does not allow a non-certificate trusted host
+SSH logon to the system.
+
+    Check for the value of the &quot;HostbasedAuthentication&quot; keyword with the
+following command:
+
+    # grep -i hostbasedauthentication &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    HostbasedAuthentication no
+
+    If the &quot;HostbasedAuthentication&quot; keyword is not set to &quot;no&quot;, is
+missing, or is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to not allow a non-certificate trusted host
+SSH logon to the system.
+
+    Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the line for
+&quot;HostbasedAuthentication&quot; keyword and set the value to &quot;no&quot;:
+
+    HostbasedAuthentication no
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72285</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not forward
+Internet Protocol version 4 (IPv4) source-routed packets by default.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv4
+forwarding is enabled and the system is functioning as a router.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.conf.default.accept_source_route value is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72285</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not forward
+Internet Protocol version 4 (IPv4) source-routed packets by default.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv4
+forwarding is enabled and the system is functioning as a router.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system does not accept IPv4 source-routed packets by default.
+
+    # grep net.ipv4.conf.default.accept_source_route &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+    net.ipv4.conf.default.accept_source_route &#x3D; 0
+
+    If &quot; net.ipv4.conf.default.accept_source_route &quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.conf.default.accept_source_route
+    net.ipv4.conf.default.accept_source_route &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.default.accept_source_route &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72025</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories are group-owned by a group of which the home directory owner is a
+member.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a local interactive user&#39;s files are group-owned by a group of
+which the user is not a member, unintended users may be able to access them.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Home directory files with incorrect group ownership or not &#39;root&#39; owned is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72025</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories are group-owned by a group of which the home directory owner is a
+member.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a local interactive user&#39;s files are group-owned by a group of
+which the user is not a member, unintended users may be able to access them.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all files and directories in a local interactive user home directory
+are group-owned by a group the user is a member of.
+
+    Check the group owner of all files and directories in a local interactive
+user&#39;s home directory with the following command:
+
+    Note: The example will be for the user &quot;smithj&quot;, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # ls -lLR &#x2F;&lt;home directory&gt;&#x2F;&lt;users home directory&gt;&#x2F;
+    -rw-r--r-- 1 smithj smithj  18 Mar  5 17:06 file1
+    -rw-r--r-- 1 smithj smithj 193 Mar  5 17:06 file2
+    -rw-r--r-- 1 smithj sa        231 Mar  5 17:06 file3
+
+    If any files are found with an owner different than the group home
+directory user, check to see if the user is a member of that group with the
+following command:
+
+    # grep smithj &#x2F;etc&#x2F;group
+    sa:x:100:juan,shelley,bob,smithj
+    smithj:x:521:smithj
+
+    If the user is not a member of a group that group owns file(s) in a local
+interactive user&#39;s home directory, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the group of a local interactive user&#39;s files and directories to a
+group that the interactive user is a member of. To change the group owner of a
+local interactive user&#39;s files and directories, use the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot; and is a member of the users group.
+
+    # chgrp users &#x2F;home&#x2F;smithj&#x2F;&lt;file&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72187</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the init_module syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;init_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;init_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;init_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;init_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72187</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the init_module syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;init_module&quot; syscall occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw init_module &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S init_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S init_module -k module-change
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;init_module&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;init_module&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S init_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S init_module -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72093</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must immediately notify
+the System Administrator (SA) and Information System Security Officer (ISSO)
+(at a minimum) when the threshold for the repository maximum audit record
+storage capacity is reached.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001855
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If security personnel are not notified immediately when the threshold
+for the repository maximum audit record storage capacity is reached, they are
+unable to expand the audit record storage capacity before records are lost.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Audit Daemon Config action_mail_acct is expected to cmp &#x3D;&#x3D; &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72093</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must immediately notify
+the System Administrator (SA) and Information System Security Officer (ISSO)
+(at a minimum) when the threshold for the repository maximum audit record
+storage capacity is reached.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If security personnel are not notified immediately when the threshold
+for the repository maximum audit record storage capacity is reached, they are
+unable to expand the audit record storage capacity before records are lost.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system immediately notifies the SA and ISSO (at a
+minimum) via email when the threshold for the repository maximum audit record
+storage capacity is reached.
+
+    Check what account the operating system emails when the threshold for the
+repository maximum audit record storage capacity is reached with the following
+command:
+
+    # grep -i action_mail_acct  &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+    action_mail_acct &#x3D; root
+
+    If the value of the &quot;action_mail_acct&quot; keyword is not set to &quot;root&quot; and
+other accounts for security personnel, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to immediately notify the SA and ISSO (at a
+minimum) when the threshold for the repository maximum audit record storage
+capacity is reached.
+
+    Uncomment or edit the &quot;action_mail_acct&quot; keyword in
+&quot;&#x2F;etc&#x2F;audit&#x2F;auditd.conf&quot; and set it to root and any other accounts associated
+with security personnel.
+
+    action_mail_acct &#x3D; root</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72201</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the renameat syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;renameat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;renameat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;renameat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;renameat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72201</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the renameat syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;renameat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw renameat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S renameat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S renameat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;renameat&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;renameat&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S renameat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S renameat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72035</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user initialization files executable search paths
+contain only paths that resolve to the users home directory.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The executable search path (typically the PATH environment variable)
+contains a list of directories for the shell to search to find executables. If
+this path includes the current working directory (other than the user&#39;s home
+directory), executables in these directories may be executed instead of system
+commands. This variable is formatted as a colon-separated list of directories.
+If there is an empty entry, such as a leading or trailing colon or two
+consecutive colons, this is interpreted as the current working directory. If
+deviations from the default system search path for the local interactive user
+are required, they must be documented with the Information System Security
+Officer (ISSO).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Initialization files that include executable search paths that include directories outside their home directories is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72035</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user initialization files executable search paths
+contain only paths that resolve to the users home directory.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The executable search path (typically the PATH environment variable)
+contains a list of directories for the shell to search to find executables. If
+this path includes the current working directory (other than the user&#39;s home
+directory), executables in these directories may be executed instead of system
+commands. This variable is formatted as a colon-separated list of directories.
+If there is an empty entry, such as a leading or trailing colon or two
+consecutive colons, this is interpreted as the current working directory. If
+deviations from the default system search path for the local interactive user
+are required, they must be documented with the Information System Security
+Officer (ISSO).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that all local interactive user initialization files&#39; executable
+search path statements do not contain statements that will reference a working
+directory other than the users&#39; home directory.
+
+    Check the executable search path statement for all local interactive user
+initialization files in the users&#39; home directory with the following commands:
+
+    Note: The example will be for the smithj user, which has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # grep -i path &#x2F;home&#x2F;smithj&#x2F;.*
+    &#x2F;home&#x2F;smithj&#x2F;.bash_profile:PATH&#x3D;$PATH:$HOME&#x2F;.local&#x2F;bin:$HOME&#x2F;bin
+    &#x2F;home&#x2F;smithj&#x2F;.bash_profile:export PATH
+
+    If any local interactive user initialization files have executable search
+path statements that include directories outside of their home directory, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the local interactive user initialization files to change any PATH
+variable statements that reference directories other than their home directory.
+
+    If a local interactive user requires path variables to reference a
+directory owned by the application, it must be documented with the ISSO.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71917</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed the number of repeating characters of the same
+character class must not be more than four characters.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf maxclassrepeat.to_i is expected to cmp &lt;&#x3D; 4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71917</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed the number of repeating characters of the same
+character class must not be more than four characters.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The &quot;maxclassrepeat&quot; option sets the maximum number of allowed same
+consecutive characters in the same class in the new password.
+
+    Check for the value of the &quot;maxclassrepeat&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep maxclassrepeat &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    maxclassrepeat &#x3D; 4
+
+    If the value of &quot;maxclassrepeat&quot; is set to more than &quot;4&quot;, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to require the change of the number of
+repeating characters of the same character class when passwords are changed by
+setting the &quot;maxclassrepeat&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; conf (or modify
+the line to have the required value):
+
+    maxclassrepeat &#x3D; 4</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72225</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as
+part of, remote access logon prompts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 c 1
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 c 2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 c 2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 c
+2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 c 3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000050
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001384
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001385
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001386
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001387
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001388
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before
+granting access to the publicly accessible operating system ensures privacy and
+security notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The SSHD Banner is set to the standard banner and has the correct text is expected to cmp &#x3D;&#x3D; &quot;YouareaccessingaU.S.Government(USG)InformationSystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS),youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: YouareaccessingaU.S.Government(USG)InformationSystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS),youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+     got: YouareaccessingaU.S.Government(USG)informationsystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS)youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The SSHD Banner is set to the standard limited banner and has the correct text is expected to cmp &#x3D;&#x3D; &quot;I&#39;veread&amp;consenttotermsinISuseragreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: I&#39;veread&amp;consenttotermsinISuseragreem&#39;t.
+     got: YouareaccessingaU.S.Government(USG)informationsystem(IS)thatisprovidedforUSG-authorizeduseonly.ByusingthisIS(whichincludesanydeviceattachedtothisIS)youconsenttothefollowingconditions:-TheUSGroutinelyinterceptsandmonitorscommunicationsonthisISforpurposesincluding,butnotlimitedto,penetrationtesting,COMSECmonitoring,networkoperationsanddefense,personnelmisconduct(PM),lawenforcement(LE),andcounterintelligence(CI)investigations.-Atanytime,theUSGmayinspectandseizedatastoredonthisIS.-Communicationsusing,ordatastoredon,thisISarenotprivate,aresubjecttoroutinemonitoring,interception,andsearch,andmaybedisclosedorusedforanyUSG-authorizedpurpose.-ThisISincludessecuritymeasures(e.g.,authenticationandaccesscontrols)toprotectUSGinterests--notforyourpersonalbenefitorprivacy.-Notwithstandingtheabove,usingthisISdoesnotconstituteconsenttoPM,LEorCIinvestigativesearchingormonitoringofthecontentofprivilegedcommunications,orworkproduct,relatedtopersonalrepresentationorservicesbyattorneys,psychotherapists,orclergy,andtheirassistants.Suchcommunicationsandworkproductareprivateandconfidential.SeeUserAgreementfordetails.
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72225</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as
+part of, remote access logon prompts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before
+granting access to the publicly accessible operating system ensures privacy and
+security notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a, AC-8 b, AC-8 c 1, AC-8 c 2, AC-8 c 2, AC-8 c
+2, AC-8 c 3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify any publicly accessible connection to the operating system displays
+the Standard Mandatory DoD Notice and Consent Banner before granting access to
+the system.
+
+    Check for the location of the banner file being used with the following
+command:
+
+    # grep -i banner &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    banner &#x2F;etc&#x2F;issue
+
+    This command will return the banner keyword and the name of the file that
+contains the ssh banner (in this case &quot;&#x2F;etc&#x2F;issue&quot;).
+
+    If the line is commented out, this is a finding.
+
+    View the file specified by the banner keyword to check that it matches the
+text of the Standard Mandatory DoD Notice and Consent Banner:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only. By using this IS (which includes any
+device attached to this IS), you consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+
+    If the system does not display a graphical logon banner or the banner does
+not match the Standard Mandatory DoD Notice and Consent Banner, this is a
+finding.
+
+    If the text in the file does not match the Standard Mandatory DoD Notice
+and Consent Banner, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to display the Standard Mandatory DoD Notice
+and Consent Banner before granting access to the system via the ssh.
+
+    Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment the banner keyword and
+configure it to point to a file that will contain the logon banner (this file
+may be named differently or be in a different location if using a version of
+SSH that is provided by a third-party vendor). An example configuration line is:
+
+    banner &#x2F;etc&#x2F;issue
+
+    Either create the file containing the banner or replace the text in the
+file with the Standard Mandatory DoD Notice and Consent Banner. The DoD
+required text is:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only. By using this IS (which includes any
+device attached to this IS), you consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72257</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH private host key files have mode 0640 or less permissive.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If an unauthorized user obtains the private SSH host key file, the
+host could be impersonated.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No files have a more permissive mode. is expected to eq true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72257</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH private host key files have mode 0640 or less permissive.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If an unauthorized user obtains the private SSH host key file, the
+host could be impersonated.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH private host key files have mode &quot;0640&quot; or less permissive.
+
+    The following command will find all SSH private key files on the system and
+list their modes:
+
+    # find &#x2F; -name &#39;*ssh_host*key&#39; | xargs ls -lL
+
+    -rw-r----- 1 root ssh_keys 668 Nov 28 06:43 ssh_host_dsa_key
+    -rw-r----- 1 root ssh_keys 582 Nov 28 06:43 ssh_host_key
+    -rw-r----- 1 root ssh_keys 887 Nov 28 06:43 ssh_host_rsa_key
+
+    If any file has a mode more permissive than &quot;0640&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the mode of SSH private host key files under &quot;&#x2F;etc&#x2F;ssh&quot; to
+&quot;0640&quot; with the following command:
+
+    # chmod 0640 &#x2F;path&#x2F;to&#x2F;file&#x2F;ssh_host*key</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72207</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the unlinkat syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;unlinkat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;unlinkat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;unlinkat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;unlinkat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72207</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the unlinkat syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unlinkat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw unlinkat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S unlinkat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S unlinkat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;unlinkat&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unlinkat&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S unlinkat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S unlinkat -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72059</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that a separate file system is used for user home directories (such as &#x2F;home or
+an equivalent).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ec2-user with mountpoint &#x2F; is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ec2-user with mountpoint &#x2F; is expected not to match &#x2F;^\&#x2F;$&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&#x2F;&quot; not to match &#x2F;^\&#x2F;$&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;^\&#x2F;$&#x2F;
++&quot;&#x2F;&quot;
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72059</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that a separate file system is used for user home directories (such as &#x2F;home or
+an equivalent).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that a separate file system&#x2F;partition has been created for
+non-privileged local interactive user home directories.
+
+    Check the home directory assignment for all non-privileged users (those
+with a UID greater than 1000) on the system with the following command:
+
+    #cut -d: -f 1,3,6,7 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot; | tr &quot;:&quot;
+&quot;\t&quot;
+
+    adamsj &#x2F;home&#x2F;adamsj &#x2F;bin&#x2F;bash
+    jacksonm &#x2F;home&#x2F;jacksonm &#x2F;bin&#x2F;bash
+    smithj &#x2F;home&#x2F;smithj &#x2F;bin&#x2F;bash
+
+    The output of the command will give the directory&#x2F;partition that contains
+the home directories for the non-privileged users on the system (in this
+example, &#x2F;home) and users&#39; shell. All accounts with a valid shell (such as
+&#x2F;bin&#x2F;bash) are considered interactive users.
+
+    Check that a file system&#x2F;partition has been created for the non-privileged
+interactive users with the following command:
+
+    Note: The partition of &#x2F;home is used in the example.
+
+    # grep &#x2F;home &#x2F;etc&#x2F;fstab
+    UUID&#x3D;333ada18    &#x2F;home                   ext4    noatime,nobarrier,nodev  1
+2
+
+    If a separate entry for the file system&#x2F;partition that contains the
+non-privileged interactive users&#39; home directories does not exist, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Migrate the &quot;&#x2F;home&quot; directory onto a separate file
+system&#x2F;partition.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72113</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the fsetxattr syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fsetxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fsetxattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fsetxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fsetxattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72113</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the fsetxattr syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fsetxattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw fsetxattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fsetxattr&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fsetxattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fsetxattr -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72287</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not respond to
+Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP)
+echoes sent to a broadcast address.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Responding to broadcast (ICMP) echoes facilitates network mapping and
+provides a vector for amplification attacks.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.icmp_echo_ignore_broadcasts value is expected to eq 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72287</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not respond to
+Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP)
+echoes sent to a broadcast address.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Responding to broadcast (ICMP) echoes facilitates network mapping and
+provides a vector for amplification attacks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system does not respond to IPv4 ICMP echoes sent to a broadcast
+address.
+
+    # grep net.ipv4.icmp_echo_ignore_broadcasts &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot; net.ipv4.icmp_echo_ignore_broadcasts&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;1&quot;, this is a finding.
+
+    Check that the operating system implements the
+&quot;icmp_echo_ignore_broadcasts&quot; variable with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.icmp_echo_ignore_broadcasts
+    net.ipv4.icmp_echo_ignore_broadcasts &#x3D; 1
+
+    If the returned line does not have a value of &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.icmp_echo_ignore_broadcasts &#x3D; 1
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72013</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user accounts, upon creation, are assigned a home
+directory.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If local interactive users are not assigned a valid home directory,
+there is no place for the storage and control of files they should own.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">login.defs CREATE_HOME is expected to eq &quot;yes&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72013</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user accounts, upon creation, are assigned a home
+directory.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If local interactive users are not assigned a valid home directory,
+there is no place for the storage and control of files they should own.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all local interactive users on the system are assigned a home
+directory upon creation.
+
+    Check to see if the system is configured to create home directories for
+local interactive users with the following command:
+
+    # grep -i create_home &#x2F;etc&#x2F;login.defs
+    CREATE_HOME yes
+
+    If the value for &quot;CREATE_HOME&quot; parameter is not set to &quot;yes&quot;, the line
+is missing, or the line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to assign home directories to all new local
+interactive users by setting the &quot;CREATE_HOME&quot; parameter in
+&quot;&#x2F;etc&#x2F;login.defs&quot; to &quot;yes&quot; as follows.
+
+    CREATE_HOME yes</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72153</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the gpasswd command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;gpasswd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;gpasswd&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72153</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the gpasswd command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;gpasswd&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;gpasswd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;gpasswd -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-passwd
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;gpasswd&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;gpasswd -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71933</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that passwords are prohibited from reuse for a minimum of five generations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000200
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+a password in resisting attempts at guessing and brute-force attacks. If the
+information system or application allows the user to consecutively reuse their
+password when that password has exceeded its defined lifetime, the end result
+is a password that is not changed per policy requirements.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include password (required|requisite|sufficient) pam_(unix|pwhistory).so, any with arg remember &gt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71933</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that passwords are prohibited from reuse for a minimum of five generations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+a password in resisting attempts at guessing and brute-force attacks. If the
+information system or application allows the user to consecutively reuse their
+password when that password has exceeded its defined lifetime, the end result
+is a password that is not changed per policy requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (e), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system prohibits password reuse for a minimum of five
+generations.
+
+    Check for the value of the &quot;remember&quot; argument in
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and &quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; with the following
+command:
+
+    # grep -i remember &#x2F;etc&#x2F;pam.d&#x2F;system-auth &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+
+    password    requisite     pam_pwhistory.so use_authtok remember&#x3D;5 retry&#x3D;3
+
+    If the line containing the &quot;pam_pwhistory.so&quot; line does not have the
+&quot;remember&quot; module argument set, is commented out, or the value of the
+&quot;remember&quot; module argument is set to less than &quot;5&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to prohibit password reuse for a minimum of
+five generations.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot; (or modify the line to have the required value):
+
+    password    requisite     pam_pwhistory.so use_authtok remember&#x3D;5 retry&#x3D;3
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81009</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the nodev option.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001764
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;nodev&quot; mount option causes the system to not interpret
+character or block special devices. Executing character or block special
+devices from untrusted file systems increases the opportunity for unprivileged
+users to attain unauthorized administrative access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Mount &#x2F;dev&#x2F;shm options is expected to include &quot;nodev&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81009</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the nodev option.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;nodev&quot; mount option causes the system to not interpret
+character or block special devices. Executing character or block special
+devices from untrusted file systems increases the opportunity for unprivileged
+users to attain unauthorized administrative access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that the &quot;nodev&quot; option is configured for &#x2F;dev&#x2F;shm:
+
+
+    # cat &#x2F;etc&#x2F;fstab | grep &#x2F;dev&#x2F;shm
+    tmpfs &#x2F;dev&#x2F;shm tmpfs defaults,nodev,nosuid,noexec 0 0
+
+    If any results are returned and the &quot;nodev&quot; option is not listed, this is
+a finding.
+
+    Verify &quot;&#x2F;dev&#x2F;shm&quot; is mounted with the &quot;nodev&quot; option:
+
+    # mount | grep &quot;&#x2F;dev&#x2F;shm&quot; | grep nodev
+
+    If no results are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system so that &#x2F;dev&#x2F;shm is mounted with the
+&quot;nodev&quot; option.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71965</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must uniquely identify
+and must authenticate organizational users (or processes acting on behalf of
+organizational users) using multifactor authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000766
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To assure accountability and prevent unauthenticated access,
+organizational users must be identified and authenticated to prevent potential
+misuse and compromise of the system.
+
+    Organizational users include organizational employees or individuals the
+organization deems to have equivalent status of employees (e.g., contractors).
+Organizational users (and processes acting on behalf of users) must be uniquely
+identified and authenticated to all accesses, except for the following:
+
+    1) Accesses explicitly identified and documented by the organization.
+Organizations document specific user actions that can be performed on the
+information system without identification or authentication;
+
+    and
+
+    2) Accesses that occur through authorized use of group authenticators
+without individual authentication. Organizations may require unique
+identification of individuals in group accounts (e.g., shared privilege
+accounts) or for detailed accountability of individual activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;authconfig --test | grep -i smartcard&#x60; stdout is expected to match &#x2F;use\sonly\ssmartcard\sfor\slogin\sis\senabled&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;SSSD smartcard support is disabled\n use only smartcard for login is disabled\n smartcard module &#x3D; \&quot;\&quot;\n smartcard removal action &#x3D; \&quot;\&quot;\n&quot; to match &#x2F;use\sonly\ssmartcard\sfor\slogin\sis\senabled&#x2F;
+Diff:
+@@ -1,2 +1,5 @@
+-&#x2F;use\sonly\ssmartcard\sfor\slogin\sis\senabled&#x2F;
++SSSD smartcard support is disabled
++ use only smartcard for login is disabled
++ smartcard module &#x3D; &quot;&quot;
++ smartcard removal action &#x3D; &quot;&quot;
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;authconfig --test | grep -i smartcard&#x60; stdout is expected to match &#x2F;smartcard\smodule\s&#x3D;\s&quot;.+&quot;&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;SSSD smartcard support is disabled\n use only smartcard for login is disabled\n smartcard module &#x3D; \&quot;\&quot;\n smartcard removal action &#x3D; \&quot;\&quot;\n&quot; to match &#x2F;smartcard\smodule\s&#x3D;\s&quot;.+&quot;&#x2F;
+Diff:
+@@ -1,2 +1,5 @@
+-&#x2F;smartcard\smodule\s&#x3D;\s&quot;.+&quot;&#x2F;
++SSSD smartcard support is disabled
++ use only smartcard for login is disabled
++ smartcard module &#x3D; &quot;&quot;
++ smartcard removal action &#x3D; &quot;&quot;
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;authconfig --test | grep -i smartcard&#x60; stdout is expected to match &#x2F;smartcard\sremoval\saction\s&#x3D;\s&quot;.+&quot;&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;SSSD smartcard support is disabled\n use only smartcard for login is disabled\n smartcard module &#x3D; \&quot;\&quot;\n smartcard removal action &#x3D; \&quot;\&quot;\n&quot; to match &#x2F;smartcard\sremoval\saction\s&#x3D;\s&quot;.+&quot;&#x2F;
+Diff:
+@@ -1,2 +1,5 @@
+-&#x2F;smartcard\sremoval\saction\s&#x3D;\s&quot;.+&quot;&#x2F;
++SSSD smartcard support is disabled
++ use only smartcard for login is disabled
++ smartcard module &#x3D; &quot;&quot;
++ smartcard removal action &#x3D; &quot;&quot;
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71965</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must uniquely identify
+and must authenticate organizational users (or processes acting on behalf of
+organizational users) using multifactor authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To assure accountability and prevent unauthenticated access,
+organizational users must be identified and authenticated to prevent potential
+misuse and compromise of the system.
+
+    Organizational users include organizational employees or individuals the
+organization deems to have equivalent status of employees (e.g., contractors).
+Organizational users (and processes acting on behalf of users) must be uniquely
+identified and authenticated to all accesses, except for the following:
+
+    1) Accesses explicitly identified and documented by the organization.
+Organizations document specific user actions that can be performed on the
+information system without identification or authentication;
+
+    and
+
+    2) Accesses that occur through authorized use of group authenticators
+without individual authentication. Organizations may require unique
+identification of individuals in group accounts (e.g., shared privilege
+accounts) or for detailed accountability of individual activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system requires multifactor authentication to uniquely
+identify organizational users using multifactor authentication.
+
+    Check to see if smartcard authentication is enforced on the system:
+
+    # authconfig --test | grep &quot;pam_pkcs11 is enabled&quot;
+
+    If no results are returned, this is a finding.
+
+    # authconfig --test | grep &quot;smartcard removal action&quot;
+
+    If &quot;smartcard removal action&quot; is blank, this is a finding.
+
+    # authconfig --test | grep &quot;smartcard module&quot;
+
+    If &quot;smartcard module&quot; is blank, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to require individuals to be authenticated
+with a multifactor authenticator.
+
+    Enable smartcard logons with the following commands:
+
+    # authconfig --enablesmartcard --smartcardaction&#x3D;0 --update
+    # authconfig --enablerequiresmartcard -update
+
+    Modify the &quot;&#x2F;etc&#x2F;pam_pkcs11&#x2F;pkcs11_eventmgr.conf&quot; file to uncomment the
+following line:
+
+    #&#x2F;usr&#x2F;X11R6&#x2F;bin&#x2F;xscreensaver-command -lock
+
+    Modify the &quot;&#x2F;etc&#x2F;pam_pkcs11&#x2F;pam_pkcs11.conf&quot; file to use the cackey
+module if required.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72313</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>SNMP community strings on the Red Hat Enterprise Linux operating
+system must be changed from the default.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Whether active or not, default Simple Network Management Protocol
+(SNMP) community strings must be changed to maintain security. If the service
+is running with the default authenticators, anyone can gather data about the
+system and the network and use the information to potentially compromise the
+integrity of the system or network(s). It is highly recommended that SNMP
+version 3 user authentication and message encryption be used in place of the
+version 2 community strings.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The &#x60;snmpd.conf&#x60; does not exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72313</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">SNMP community strings on the Red Hat Enterprise Linux operating
+system must be changed from the default.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Whether active or not, default Simple Network Management Protocol
+(SNMP) community strings must be changed to maintain security. If the service
+is running with the default authenticators, anyone can gather data about the
+system and the network and use the information to potentially compromise the
+integrity of the system or network(s). It is highly recommended that SNMP
+version 3 user authentication and message encryption be used in place of the
+version 2 community strings.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that a system using SNMP is not using default community strings.
+
+    Check to see if the &quot;&#x2F;etc&#x2F;snmp&#x2F;snmpd.conf&quot; file exists with the following
+command:
+
+    # ls -al &#x2F;etc&#x2F;snmp&#x2F;snmpd.conf
+     -rw-------   1 root root      52640 Mar 12 11:08 snmpd.conf
+
+    If the file does not exist, this is Not Applicable.
+
+    If the file does exist, check for the default community strings with the
+following commands:
+
+    # grep public &#x2F;etc&#x2F;snmp&#x2F;snmpd.conf
+    # grep private &#x2F;etc&#x2F;snmp&#x2F;snmpd.conf
+
+    If either of these commands returns any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If the &quot;&#x2F;etc&#x2F;snmp&#x2F;snmpd.conf&quot; file exists, modify any lines
+that contain a community string value of &quot;public&quot; or &quot;private&quot; to another
+string value.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72029</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files for interactive users are owned by the home
+directory user or root.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Local initialization files are used to configure the user&#39;s shell
+environment upon logon. Malicious modification of these files could compromise
+accounts upon logon.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Files and Directories not owned by the user or root of the parent home directory is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72029</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files for interactive users are owned by the home
+directory user or root.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Local initialization files are used to configure the user&#39;s shell
+environment upon logon. Malicious modification of these files could compromise
+accounts upon logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the local initialization files of all local interactive users are
+group-owned by that user&#39;s primary Group Identifier (GID).
+
+    Check the home directory assignment for all non-privileged users on the
+system with the following command:
+
+    Note: The example will be for the smithj user, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot; and a primary group of &quot;users&quot;.
+
+    # cut -d: -f 1,4,6 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot;
+    smithj:1000:&#x2F;home&#x2F;smithj
+
+    # grep 1000 &#x2F;etc&#x2F;group
+    users:x:1000:smithj,jonesj,jacksons
+
+    Note: This may miss interactive users that have been assigned a privileged
+User Identifier (UID). Evidence of interactive use may be obtained from a
+number of log files containing system logon information.
+
+    Check the group owner of all local interactive user&#39;s initialization files
+with the following command:
+
+    # ls -al &#x2F;home&#x2F;smithj&#x2F;.[^.]* | more
+
+    -rwxr-xr-x 1 smithj users 896 Mar 10 2011 .profile
+    -rwxr-xr-x 1 smithj users 497 Jan 6 2007 .login
+    -rwxr-xr-x 1 smithj users 886 Jan 6 2007 .something
+
+    If all local interactive user&#39;s initialization files are not group-owned by
+that user&#39;s primary GID, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the owner of the local initialization files for interactive users to
+either the directory owner or root with the following command:
+
+    Note: The example will be for the smithj user, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # chown smithj &#x2F;home&#x2F;smithj&#x2F;.[^.]*</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72417</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must have the required
+        packages for multifactor authentication installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (11)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001948
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001953
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001954
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Using an authentication device, such as a CAC or token that is
+        separate from the information system, ensures that even if the information
+        system is compromised, that compromise will not affect credentials stored on
+        the authentication device.
+
+        Multifactor solutions that require devices separate from information
+        systems gaining access include, for example, hardware tokens providing
+        time-based or challenge-response authenticators and smart cards such as the
+        U.S. Government Personal Identity Verification card and the DoD Common Access
+        Card.
+
+        A privileged account is defined as an information system account with
+        authorizations of a privileged user.
+
+        Remote access is access to DoD nonpublic information systems by an
+        authorized user (or an information system) communicating through an external,
+        non-organization-controlled network. Remote access methods include, for
+        example, dial-up, broadband, and wireless.
+
+        This requirement only applies to components where this is specific to the
+        function of the device or has the concept of an organizational user (e.g., VPN,
+        proxy capability). This does not apply to authentication for the purpose of
+        configuring the device itself (management).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package nss-pam-ldapd&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package esc&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package pam_pkcs11&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package pam_krb5&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package opensc&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package pcsc-lite-ccid&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package gdm&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package authconfig-gtk&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package krb5-workstation&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package krb5-pkinit&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package pcsc-lite&#x60; is installed</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The package is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;System Package pcsc-lite-libs&#x60; is installed</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72417</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must have the required
+        packages for multifactor authentication installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Using an authentication device, such as a CAC or token that is
+        separate from the information system, ensures that even if the information
+        system is compromised, that compromise will not affect credentials stored on
+        the authentication device.
+
+        Multifactor solutions that require devices separate from information
+        systems gaining access include, for example, hardware tokens providing
+        time-based or challenge-response authenticators and smart cards such as the
+        U.S. Government Personal Identity Verification card and the DoD Common Access
+        Card.
+
+        A privileged account is defined as an information system account with
+        authorizations of a privileged user.
+
+        Remote access is access to DoD nonpublic information systems by an
+        authorized user (or an information system) communicating through an external,
+        non-organization-controlled network. Remote access methods include, for
+        example, dial-up, broadband, and wireless.
+
+        This requirement only applies to components where this is specific to the
+        function of the device or has the concept of an organizational user (e.g., VPN,
+        proxy capability). This does not apply to authentication for the purpose of
+        configuring the device itself (management).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (11), IA-2 (12), IA-2 (12), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system has the packages required for multifactor
+authentication installed.
+
+Check for the presence of the packages required to support multifactor
+authentication with the following commands:
+
+# yum list installed esc
+esc-1.1.0-26.el7.noarch.rpm
+
+# yum list installed pam_pkcs11
+pam_pkcs11-0.6.2-14.el7.noarch.rpm
+
+If the &quot;esc&quot; and &quot;pam_pkcs11&quot; packages are not installed, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to implement multifactor authentication by
+installing the required packages.
+
+Install the &quot;esc&quot; and &quot;pam_pkcs11&quot; packages on the system with the
+following command:
+
+# yum install esc pam_pkcs11</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73177</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all wireless network adapters are disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-18 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-18 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001443
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001444
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The use of wireless networking can introduce many different attack
+vectors into the organization&#39;s network. Common attack vectors such as
+malicious association and ad hoc networks will allow an attacker to spoof a
+wireless access point (AP), allowing validated systems to connect to the
+malicious AP and enabling the attacker to monitor and record network traffic.
+These malicious APs can also serve to create a man-in-the-middle attack or be
+used to create a denial of service to valid network resources.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;nmcli device&#x60; stdout.strip is expected not to match &#x2F;wifi connected&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73177</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all wireless network adapters are disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The use of wireless networking can introduce many different attack
+vectors into the organization&#39;s network. Common attack vectors such as
+malicious association and ad hoc networks will allow an attacker to spoof a
+wireless access point (AP), allowing validated systems to connect to the
+malicious AP and enabling the attacker to monitor and record network traffic.
+These malicious APs can also serve to create a man-in-the-middle attack or be
+used to create a denial of service to valid network resources.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-18 (1), AC-18 (1), SC-8, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that there are no wireless interfaces configured on the system.
+
+    This is N&#x2F;A for systems that do not have wireless network adapters.
+
+    Check for the presence of active wireless interfaces with the following
+command:
+
+    # nmcli device
+    DEVICE TYPE STATE
+    eth0 ethernet connected
+    wlp3s0 wifi disconnected
+    lo loopback unmanaged
+
+    If a wireless interface is configured and its use on the system is not
+documented with the Information System Security Officer (ISSO), this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to disable all wireless network interfaces with the
+following command:
+
+    #nmcli radio wifi off</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72027</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories have a mode of 0750 or less permissive.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a local interactive user files have excessive permissions,
+unintended users may be able to access or modify them.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Home directories with excessive permissions is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72027</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories have a mode of 0750 or less permissive.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a local interactive user files have excessive permissions,
+unintended users may be able to access or modify them.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all files and directories contained in a local interactive user home
+directory, excluding local initialization files, have a mode of &quot;0750&quot;.
+
+    Check the mode of all non-initialization files in a local interactive user
+home directory with the following command:
+
+    Files that begin with a &quot;.&quot; are excluded from this requirement.
+
+    Note: The example will be for the user &quot;smithj&quot;, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # ls -lLR &#x2F;home&#x2F;smithj
+    -rwxr-x--- 1 smithj smithj  18 Mar  5 17:06 file1
+    -rwxr----- 1 smithj smithj 193 Mar  5 17:06 file2
+    -rw-r-x--- 1 smithj smithj 231 Mar  5 17:06 file3
+
+    If any files are found with a mode more permissive than &quot;0750&quot;, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the mode on files and directories in the local interactive user home
+directory with the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot; and is a member of the users group.
+
+    # chmod 0750 &#x2F;home&#x2F;smithj&#x2F;&lt;file&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72155</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the chage command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chage&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chage&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72155</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the chage command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chage&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;chage &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chage -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-passwd
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chage&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chage -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71905</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one lower-case character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000193
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf lcredit.to_i is expected to cmp &lt; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71905</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one lower-case character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Note: The value to require a number of lower-case characters to be set is
+expressed as a negative number in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;.
+
+    Check the value for &quot;lcredit&quot; in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with
+the following command:
+
+    # grep lcredit &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    lcredit &#x3D; -1
+
+    If the value of &quot;lcredit&quot; is not set to a negative value, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to require at least one lower-case character when
+creating or changing a password.
+
+    Add or modify the following line
+    in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;:
+
+    lcredit &#x3D; -1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72281</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>For Red Hat Enterprise Linux operating systems using DNS resolution,
+at least two name servers must be configured.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To provide availability for name resolution services, multiple
+redundant name servers are mandated. A failure in name resolution could lead to
+the failure of security functions requiring name resolution, which may include
+time synchronization, centralized authentication, and remote system logging.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system&#39;s nameservers: [&quot;nameserver 172.31.0.2&quot;] is expected not to equal nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The number of nameservers is expected to cmp &gt;&#x3D; 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 2
+     got: 1
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72281</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">For Red Hat Enterprise Linux operating systems using DNS resolution,
+at least two name servers must be configured.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To provide availability for name resolution services, multiple
+redundant name servers are mandated. A failure in name resolution could lead to
+the failure of security functions requiring name resolution, which may include
+time synchronization, centralized authentication, and remote system logging.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine whether the system is using local or DNS name resolution with the
+following command:
+
+    # grep hosts &#x2F;etc&#x2F;nsswitch.conf
+    hosts:   files dns
+
+    If the DNS entry is missing from the host&#39;s line in the
+&quot;&#x2F;etc&#x2F;nsswitch.conf&quot; file, the &quot;&#x2F;etc&#x2F;resolv.conf&quot; file must be empty.
+
+    Verify the &quot;&#x2F;etc&#x2F;resolv.conf&quot; file is empty with the following command:
+
+    # ls -al &#x2F;etc&#x2F;resolv.conf
+    -rw-r--r--  1 root root        0 Aug 19 08:31 resolv.conf
+
+    If local host authentication is being used and the &quot;&#x2F;etc&#x2F;resolv.conf&quot;
+file is not empty, this is a finding.
+
+    If the DNS entry is found on the host&#39;s line of the &quot;&#x2F;etc&#x2F;nsswitch.conf&quot;
+file, verify the operating system is configured to use two or more name servers
+for DNS resolution.
+
+    Determine the name servers used by the system with the following command:
+
+    # grep nameserver &#x2F;etc&#x2F;resolv.conf
+    nameserver 192.168.1.2
+    nameserver 192.168.1.3
+
+    If less than two lines are returned that are not commented out, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to use two or more name servers for DNS
+resolution.
+
+    Edit the &quot;&#x2F;etc&#x2F;resolv.conf&quot; file to uncomment or add the two or more
+&quot;nameserver&quot; option lines with the IP address of local authoritative name
+servers. If local host resolution is being performed, the &quot;&#x2F;etc&#x2F;resolv.conf&quot;
+file must be empty. An empty &quot;&#x2F;etc&#x2F;resolv.conf&quot; file can be created as
+follows:
+
+    # echo -n &gt; &#x2F;etc&#x2F;resolv.conf
+
+    And then make the file immutable with the following command:
+
+    # chattr +i &#x2F;etc&#x2F;resolv.conf
+
+    If the &quot;&#x2F;etc&#x2F;resolv.conf&quot; file must be mutable, the required
+configuration must be documented with the Information System Security Officer
+(ISSO) and the file must be verified by the system file integrity tool.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-77825</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must implement virtual
+address space randomization.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Address space layout randomization (ASLR) makes it more difficult for
+an attacker to predict the location of attack code he or she has introduced
+into a process&#39;s address space during an attempt at exploitation. Additionally,
+ASLR also makes it more difficult for an attacker to know the location of
+existing code in order to repurpose it using return-oriented programming (ROP)
+techniques.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter kernel.randomize_va_space value is expected to eq 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-77825</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must implement virtual
+address space randomization.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Address space layout randomization (ASLR) makes it more difficult for
+an attacker to predict the location of attack code he or she has introduced
+into a process&#39;s address space during an attempt at exploitation. Additionally,
+ASLR also makes it more difficult for an attacker to know the location of
+existing code in order to repurpose it using return-oriented programming (ROP)
+techniques.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system implements virtual address space randomization.
+
+    # grep kernel.randomize_va_space &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    kernel.randomize_va_space &#x3D; 2
+
+    If &quot;kernel.randomize_va_space&quot; is not configured in the &#x2F;etc&#x2F;sysctl.conf
+file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out or does not have a
+value of &quot;2&quot;, this is a finding.
+
+    Check that the operating system implements virtual address space
+randomization with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep kernel.randomize_va_space
+
+    kernel.randomize_va_space &#x3D; 2
+
+    If &quot;kernel.randomize_va_space&quot; does not have a value of &quot;2&quot;, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system implement virtual address space
+randomization.
+
+    Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a config file in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory
+(or modify the line to have the required value):
+
+    kernel.randomize_va_space &#x3D; 2
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-77821</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the Datagram Congestion Control Protocol (DCCP) kernel module is disabled
+unless required.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001958
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Disabling DCCP protects the system against exploitation of any flaws
+in the protocol implementation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Module dccp is expected not to be loaded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Module dccp is expected to be blacklisted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-77821</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the Datagram Congestion Control Protocol (DCCP) kernel module is disabled
+unless required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Disabling DCCP protects the system against exploitation of any flaws
+in the protocol implementation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system disables the ability to load the DCCP kernel
+module.
+
+    # grep -r dccp &#x2F;etc&#x2F;modprobe.d&#x2F;* | grep -i &quot;&#x2F;bin&#x2F;true&quot; | grep -v &quot;^#&quot;
+
+    install dccp &#x2F;bin&#x2F;true
+
+    If the command does not return any output, or the line is commented out,
+and use of DCCP is not documented with the Information System Security Officer
+(ISSO) as an operational requirement, this is a finding.
+
+    Verify the operating system disables the ability to use the DCCP kernel
+module.
+
+    Check to see if the DCCP kernel module is disabled with the following
+command:
+
+    # grep -i dccp &#x2F;etc&#x2F;modprobe.d&#x2F;* | grep -i &quot;blacklist&quot; | grep -v &quot;^#&quot;
+
+    blacklist dccp
+
+    If the command does not return any output or the output is not &quot;blacklist
+dccp&quot;, and use of the dccp kernel module is not documented with the
+Information System Security Officer (ISSO) as an operational requirement, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to disable the ability to use the DCCP
+kernel module.
+
+    Create a file under &quot;&#x2F;etc&#x2F;modprobe.d&quot; with the following command:
+
+    # touch &#x2F;etc&#x2F;modprobe.d&#x2F;dccp.conf
+
+    Add the following line to the created file:
+
+    install dccp &#x2F;bin&#x2F;true
+
+    Ensure that the DCCP module is blacklisted:
+
+    # vi &#x2F;etc&#x2F;modprobe.d&#x2F;blacklist.conf
+
+    Add or update the line:
+
+    blacklist dccp</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72019</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are owned by their respective
+users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a local interactive user does not own their home directory,
+unauthorized users could access or modify the user&#39;s files, and the users may
+not be able to access their own files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Directory &#x2F;root is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Directory &#x2F;root owner is expected to eq &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Directory &#x2F;home&#x2F;ec2-user is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Directory &#x2F;home&#x2F;ec2-user owner is expected to eq &quot;ec2-user&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72019</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are owned by their respective
+users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a local interactive user does not own their home directory,
+unauthorized users could access or modify the user&#39;s files, and the users may
+not be able to access their own files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the assigned home directory of all local interactive users on the
+system exists.
+
+    Check the home directory assignment for all local interactive users on the
+system with the following command:
+
+    # ls -ld $(egrep &#39;:[0-9]{4}&#39; &#x2F;etc&#x2F;passwd | cut -d: -f6)
+
+    -rwxr-x--- 1 smithj users 18 Mar 5 17:06 &#x2F;home&#x2F;smithj
+
+    If any home directories referenced in &quot;&#x2F;etc&#x2F;passwd&quot; are not owned by the
+interactive user, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the owner of a local interactive user&#39;s home directories to that
+owner. To change the owner of a local interactive user&#39;s home directory, use
+the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # chown smithj &#x2F;home&#x2F;smithj</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71925</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that passwords for new users are restricted to a 24 hours&#x2F;1 day minimum
+lifetime.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000198
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Enforcing a minimum password lifetime helps to prevent repeated
+password changes to defeat the password reuse or history enforcement
+requirement. If users are allowed to immediately and continually change their
+password, the password could be repeatedly changed in a short period of time to
+defeat the organization&#39;s policy regarding password reuse.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">login.defs PASS_MIN_DAYS.to_i is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71925</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that passwords for new users are restricted to a 24 hours&#x2F;1 day minimum
+lifetime.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Enforcing a minimum password lifetime helps to prevent repeated
+password changes to defeat the password reuse or history enforcement
+requirement. If users are allowed to immediately and continually change their
+password, the password could be repeatedly changed in a short period of time to
+defeat the organization&#39;s policy regarding password reuse.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system enforces 24 hours&#x2F;1 day as the minimum password
+lifetime for new user accounts.
+
+    Check for the value of &quot;PASS_MIN_DAYS&quot; in &quot;&#x2F;etc&#x2F;login.defs&quot; with the
+following command:
+
+    # grep -i pass_min_days &#x2F;etc&#x2F;login.defs
+    PASS_MIN_DAYS     1
+
+    If the &quot;PASS_MIN_DAYS&quot; parameter value is not &quot;1&quot; or greater, or is
+commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to enforce 24 hours&#x2F;1 day as the minimum
+password lifetime.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;login.defs&quot; (or modify the line to have
+the required value):
+
+    PASS_MIN_DAYS     1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72247</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not permit direct
+logons to the root account using remote access via SSH.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Even though the communications channel may be encrypted, an additional
+layer of security is gained by extending the policy of not logging on directly
+as root. In addition, logging on with a user-specific account provides
+individual accountability of actions performed on the system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration PermitRootLogin is expected to cmp &#x3D;&#x3D; &quot;no&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72247</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not permit direct
+logons to the root account using remote access via SSH.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Even though the communications channel may be encrypted, an additional
+layer of security is gained by extending the policy of not logging on directly
+as root. In addition, logging on with a user-specific account provides
+individual accountability of actions performed on the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify remote access using SSH prevents users from logging on directly as
+root.
+
+    Check that SSH prevents users from logging on directly as root with the
+following command:
+
+    # grep -i permitrootlogin &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    PermitRootLogin no
+
+    If the &quot;PermitRootLogin&quot; keyword is set to &quot;yes&quot;, is missing, or is
+commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure SSH to stop users from logging on remotely as the root user.
+
+    Edit the appropriate  &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the
+line for the &quot;PermitRootLogin&quot; keyword and set its value to &quot;no&quot; (this file
+may be named differently or be in a different location if using a version of
+SSH that is provided by a third-party vendor):
+
+    PermitRootLogin no
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72091</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must immediately notify
+the System Administrator (SA) and Information System Security Officer (ISSO)
+(at a minimum) via email when the threshold for the repository maximum audit
+record storage capacity is reached.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001855
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If security personnel are not notified immediately when the threshold
+for the repository maximum audit record storage capacity is reached, they are
+unable to expand the audit record storage capacity before records are lost.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Audit Daemon Config space_left_action.downcase is expected to cmp &#x3D;&#x3D; &quot;email&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72091</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must immediately notify
+the System Administrator (SA) and Information System Security Officer (ISSO)
+(at a minimum) via email when the threshold for the repository maximum audit
+record storage capacity is reached.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If security personnel are not notified immediately when the threshold
+for the repository maximum audit record storage capacity is reached, they are
+unable to expand the audit record storage capacity before records are lost.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system immediately notifies the SA and ISSO (at a
+minimum) via email when the allocated audit record storage volume reaches 75
+percent of the repository maximum audit record storage capacity.
+
+    Check what action the operating system takes when the threshold for the
+repository maximum audit record storage capacity is reached with the following
+command:
+
+    # grep -i space_left_action  &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+    space_left_action &#x3D; email
+
+    If the value of the &quot;space_left_action&quot; keyword is not set to &quot;email&quot;,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to immediately notify the SA and ISSO (at a
+minimum) when the threshold for the repository maximum audit record storage
+capacity is reached.
+
+    Uncomment or edit the &quot;space_left_action&quot; keyword in
+&quot;&#x2F;etc&#x2F;audit&#x2F;auditd.conf&quot; and set it to &quot;email&quot;.
+
+    space_left_action &#x3D; email</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71963</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Red Hat Enterprise Linux operating systems prior to version 7.2 using
+Unified Extensible Firmware Interface (UEFI) must require authentication upon
+booting into single-user and maintenance modes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000213
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">EFI is not in use</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71963</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Red Hat Enterprise Linux operating systems prior to version 7.2 using
+Unified Extensible Firmware Interface (UEFI) must require authentication upon
+booting into single-user and maintenance modes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For systems that use BIOS, this is Not Applicable.
+    For systems that are running RHEL 7.2 or newer, this is Not Applicable.
+
+    Check to see if an encrypted root password is set. On systems that use
+UEFI, use the following command:
+
+    # grep -i password &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg
+
+    password_pbkdf2 [superusers-account] [password-hash]
+
+    If the root password entry does not begin with &quot;password_pbkdf2&quot;, this is
+a finding.
+
+    If the &quot;superusers-account&quot; is not set to &quot;root&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to encrypt the boot password for root.
+
+    Generate an encrypted grub2 password for root with the following command:
+
+    Note: The hash generated is an example.
+
+    # grub2-mkpasswd-pbkdf2
+
+    Enter Password:
+    Reenter Password:
+    PBKDF2 hash of your password is
+grub.pbkdf2.sha512.10000.F3A7CFAA5A51EED123BE8238C23B25B2A6909AFC9812F0D45
+
+    Edit &quot;&#x2F;etc&#x2F;grub.d&#x2F;40_custom&quot; and add the following lines below the
+comments:
+
+    # vi &#x2F;etc&#x2F;grub.d&#x2F;40_custom
+
+    set superusers&#x3D;&quot;root&quot;
+
+    password_pbkdf2 root {hash from grub2-mkpasswd-pbkdf2 command}
+
+    Generate a new &quot;grub.conf&quot; file with the new password with the following
+commands:
+
+    # grub2-mkconfig --output&#x3D;&#x2F;tmp&#x2F;grub2.cfg
+    # mv &#x2F;tmp&#x2F;grub2.cfg &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72427</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must implement
+  multifactor authentication for access to privileged accounts via pluggable
+  authentication modules (PAM).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (11)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001948
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001953
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001954
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Using an authentication device, such as a CAC or token that is
+  separate from the information system, ensures that even if the information
+  system is compromised, that compromise will not affect credentials stored on
+  the authentication device.
+
+      Multifactor solutions that require devices separate from information
+  systems gaining access include, for example, hardware tokens providing
+  time-based or challenge-response authenticators and smart cards such as the
+  U.S. Government Personal Identity Verification card and the DoD Common Access
+  Card.
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Remote access is access to DoD nonpublic information systems by an
+  authorized user (or an information system) communicating through an external,
+  non-organization-controlled network. Remote access methods include, for
+  example, dial-up, broadband, and wireless.
+
+      This requirement only applies to components where this is specific to the
+  function of the device or has the concept of an organizational user (e.g., VPN,
+  proxy capability). This does not apply to authentication for the purpose of
+  configuring the device itself (management).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;grep -i -E &#39;services( )*&#x3D;( )*(.+*)pam&#39; &#x2F;etc&#x2F;sssd&#x2F;sssd.conf&#x60; stdout.strip is expected to include &quot;pam&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72427</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must implement
+  multifactor authentication for access to privileged accounts via pluggable
+  authentication modules (PAM).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Using an authentication device, such as a CAC or token that is
+  separate from the information system, ensures that even if the information
+  system is compromised, that compromise will not affect credentials stored on
+  the authentication device.
+
+      Multifactor solutions that require devices separate from information
+  systems gaining access include, for example, hardware tokens providing
+  time-based or challenge-response authenticators and smart cards such as the
+  U.S. Government Personal Identity Verification card and the DoD Common Access
+  Card.
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Remote access is access to DoD nonpublic information systems by an
+  authorized user (or an information system) communicating through an external,
+  non-organization-controlled network. Remote access methods include, for
+  example, dial-up, broadband, and wireless.
+
+      This requirement only applies to components where this is specific to the
+  function of the device or has the concept of an organizational user (e.g., VPN,
+  proxy capability). This does not apply to authentication for the purpose of
+  configuring the device itself (management).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (11), IA-2 (12), IA-2 (12), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system implements multifactor authentication for
+remote access to privileged accounts via pluggable authentication modules (PAM).
+
+    Check the &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot; file for the authentication services that
+are being used with the following command:
+
+    # grep services &#x2F;etc&#x2F;sssd&#x2F;sssd.conf &#x2F;etc&#x2F;sssd&#x2F;conf.d&#x2F;*.conf
+
+    services &#x3D; nss, pam
+
+    If the &quot;pam&quot; service is not present on all &quot;services&quot; lines, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to implement multifactor authentication for
+remote access to privileged accounts via pluggable authentication modules (PAM).
+
+    Modify all of the services lines in &quot;&#x2F;etc&#x2F;sssd&#x2F;sssd.conf&quot; or in
+configuration files found under &quot;&#x2F;etc&#x2F;sssd&#x2F;conf.d&quot; to include pam.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72221</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must use a FIPS 140-2
+approved cryptographic algorithm for SSH communications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-7
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000068
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000803
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unapproved mechanisms that are used for authentication to the
+cryptographic module are not verified and therefore cannot be relied upon to
+provide confidentiality or integrity, and DoD data may be compromised.
+
+    Operating systems utilizing encryption are required to use FIPS-compliant
+mechanisms for authenticating to cryptographic modules.
+
+    FIPS 140-2 is the current standard for validating that mechanisms used to
+access cryptographic modules utilize authentication that meets DoD
+requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a
+general purpose computing system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;aes128-ctr&quot;, &quot;aes192-ctr&quot;, &quot;aes256-ctr&quot;] is expected to be in &quot;aes128-ctr&quot;, &quot;aes192-ctr&quot;, and &quot;aes256-ctr&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72221</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must use a FIPS 140-2
+approved cryptographic algorithm for SSH communications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unapproved mechanisms that are used for authentication to the
+cryptographic module are not verified and therefore cannot be relied upon to
+provide confidentiality or integrity, and DoD data may be compromised.
+
+    Operating systems utilizing encryption are required to use FIPS-compliant
+mechanisms for authenticating to cryptographic modules.
+
+    FIPS 140-2 is the current standard for validating that mechanisms used to
+access cryptographic modules utilize authentication that meets DoD
+requirements. This allows for Security Levels 1, 2, 3, or 4 for use on a
+general purpose computing system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2), CM-6 b, IA-7, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system uses mechanisms meeting the requirements of
+applicable federal laws, Executive orders, directives, policies, regulations,
+standards, and guidance for authentication to a cryptographic module.
+
+    Note: If RHEL-07-021350 is a finding, this is automatically a finding as
+the system cannot implement FIPS 140-2-approved cryptographic algorithms and
+hashes.
+
+    The location of the &quot;sshd_config&quot; file may vary if a different daemon is
+in use.
+
+    Inspect the &quot;Ciphers&quot; configuration with the following command:
+
+    # grep -i ciphers &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    Ciphers aes128-ctr,aes192-ctr,aes256-ctr
+
+    If any ciphers other than &quot;aes128-ctr&quot;, &quot;aes192-ctr&quot;, or &quot;aes256-ctr&quot;
+are listed, the &quot;Ciphers&quot; keyword is missing, or the returned line is
+commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure SSH to use FIPS 140-2 approved cryptographic algorithms.
+
+    Add the following line (or modify the line to have the required value) to
+the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file (this file may be named differently or be in
+a different location if using a version of SSH that is provided by a
+third-party vendor).
+
+    Ciphers aes128-ctr,aes192-ctr,aes256-ctr
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72131</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the truncate syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;truncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72131</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the truncate syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;truncate&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw truncate &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S truncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S truncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S truncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S truncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;truncate&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;truncate&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S truncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S truncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S truncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S truncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72199</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the rename syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;rename&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;rename&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;rename&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;rename&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72199</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the rename syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;rename&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw rename &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S rename -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S rename -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;rename&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;rename&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S rename -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S rename -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72233</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all networked systems have SSH installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002420
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002421
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002422
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without protection of the transmitted information, confidentiality and
+integrity may be compromised because unprotected communications can be
+intercepted and either read or altered.
+
+    This requirement applies to both internal and external networks and all
+types of information system components from which information can be
+transmitted (e.g., servers, mobile devices, notebook computers, printers,
+copiers, scanners, and facsimile machines). Communication paths outside the
+physical protection of a controlled boundary are exposed to the possibility of
+interception and modification.
+
+    Protecting the confidentiality and integrity of organizational information
+can be accomplished by physical means (e.g., employing physical distribution
+systems) or by logical means (e.g., employing cryptographic techniques). If
+physical means of protection are employed, logical means (cryptography) do not
+have to be employed, and vice versa.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package openssh-server is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package openssh-clients is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72233</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all networked systems have SSH installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without protection of the transmitted information, confidentiality and
+integrity may be compromised because unprotected communications can be
+intercepted and either read or altered.
+
+    This requirement applies to both internal and external networks and all
+types of information system components from which information can be
+transmitted (e.g., servers, mobile devices, notebook computers, printers,
+copiers, scanners, and facsimile machines). Communication paths outside the
+physical protection of a controlled boundary are exposed to the possibility of
+interception and modification.
+
+    Protecting the confidentiality and integrity of organizational information
+can be accomplished by physical means (e.g., employing physical distribution
+systems) or by logical means (e.g., employing cryptographic techniques). If
+physical means of protection are employed, logical means (cryptography) do not
+have to be employed, and vice versa.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8, SC-8 (2), SC-8 (1), SC-8 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check to see if sshd is installed with the following command:
+
+# yum list installed \*ssh\*
+libssh2.x86_64 1.4.3-8.el7 @anaconda&#x2F;7.1
+openssh.x86_64 6.6.1p1-11.el7 @anaconda&#x2F;7.1
+openssh-server.x86_64 6.6.1p1-11.el7 @anaconda&#x2F;7.1
+
+If the &quot;SSH server&quot; package is not installed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Install SSH packages onto the host with the following commands:
+
+# yum install openssh-server.x86_64</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72011</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive users have a home directory assigned in the
+&#x2F;etc&#x2F;passwd file.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If local interactive users are not assigned a valid home directory,
+there is no place for the storage and control of files they should own.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Directory &#x2F;root is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Directory &#x2F;home&#x2F;ec2-user is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72011</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive users have a home directory assigned in the
+&#x2F;etc&#x2F;passwd file.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If local interactive users are not assigned a valid home directory,
+there is no place for the storage and control of files they should own.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify local interactive users on the system have a home directory assigned.
+
+    Check for missing local interactive user home directories with the
+following command:
+
+    # pwck -r
+    user &#39;lp&#39;: directory &#39;&#x2F;var&#x2F;spool&#x2F;lpd&#39; does not exist
+    user &#39;news&#39;: directory &#39;&#x2F;var&#x2F;spool&#x2F;news&#39; does not exist
+    user &#39;uucp&#39;: directory &#39;&#x2F;var&#x2F;spool&#x2F;uucp&#39; does not exist
+    user &#39;smithj&#39;: directory &#39;&#x2F;home&#x2F;smithj&#39; does not exist
+
+    Ask the System Administrator (SA) if any users found without home
+directories are local interactive users. If the SA is unable to provide a
+response, check for users with a User Identifier (UID) of 1000 or greater with
+the following command:
+
+    # cut -d: -f 1,3 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{2}$|:[0-9]{1,2}$&quot;
+
+    If any interactive users do not have a home directory assigned, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Assign home directories to all local interactive users that
+currently do not have a home directory assigned.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71919</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the PAM system service is configured to store only encrypted
+representations of passwords.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000196
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include password sufficient pam_unix.so sha512</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;system-auth] lines is expected to include password .* pam_unix.so, all without args ^(md5|bigcrypt|sha256|blowfish)$</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71919</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the PAM system service is configured to store only encrypted
+representations of passwords.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the PAM system service is configured to store only encrypted
+representations of passwords. The strength of encryption that must be used to
+hash passwords for all accounts is SHA512.
+
+    Check that the system is configured to create SHA512 hashed passwords with
+the following command:
+
+    # grep password &#x2F;etc&#x2F;pam.d&#x2F;system-auth &#x2F;etc&#x2F;pam.d&#x2F;password-auth
+
+    Outcome should look like following:
+    &#x2F;etc&#x2F;pam.d&#x2F;system-auth-ac:password    sufficient    pam_unix.so sha512
+shadow try_first_pass use_authtok
+    &#x2F;etc&#x2F;pam.d&#x2F;password-auth:password    sufficient    pam_unix.so sha512
+shadow try_first_pass use_authtok
+
+    If the &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; and &quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot;
+configuration files allow for password hashes other than SHA512 to be used,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to store only SHA512 encrypted
+representations of passwords.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot;:
+    pam_unix.so sha512 shadow try_first_pass use_authtok
+
+    Add the following line in &quot;&#x2F;etc&#x2F;pam.d&#x2F;password-auth&quot;:
+    pam_unix.so sha512 shadow try_first_pass use_authtok
+
+    Note: Manual changes to the listed files may be overwritten by the
+&quot;authconfig&quot; program. The &quot;authconfig&quot; program should not be used to update
+the configurations listed in this requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72165</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the newgrp command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;newgrp&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;newgrp&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72165</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the newgrp command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;newgrp&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;newgrp &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;newgrp -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;newgrp&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;newgrp -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72157</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the userhelper command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;userhelper&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;userhelper&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72157</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the userhelper command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;userhelper&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;sbin&#x2F;userhelper &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;userhelper -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-passwd
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;userhelper&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;userhelper -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73167</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;gshadow.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000018
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001403
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;gshadow&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;gshadow&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73167</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;gshadow.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;gshadow&quot;.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;gshadow &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;gshadow -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;gshadow&quot;.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;gshadow -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71955</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not allow an
+unrestricted logon to the system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Failure to restrict system access to authenticated users negatively
+impacts operating system security.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have GDM installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71955</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not allow an
+unrestricted logon to the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Failure to restrict system access to authenticated users negatively
+impacts operating system security.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system does not allow an unrestricted logon to the
+system via a graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check for the value of the &quot;TimedLoginEnable&quot; parameter in
+&quot;&#x2F;etc&#x2F;gdm&#x2F;custom.conf&quot; file with the following command:
+
+    # grep -i timedloginenable &#x2F;etc&#x2F;gdm&#x2F;custom.conf
+    TimedLoginEnable&#x3D;false
+
+    If the value of &quot;TimedLoginEnable&quot; is not set to &quot;false&quot;, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to not allow an unrestricted account to log
+on to the system via a graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Add or edit the line for the &quot;TimedLoginEnable&quot; parameter in the [daemon]
+section of the &quot;&#x2F;etc&#x2F;gdm&#x2F;custom.conf&quot; file to &quot;false&quot;:
+
+    [daemon]
+    TimedLoginEnable&#x3D;false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72151</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the unix_chkpwd command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72151</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the unix_chkpwd command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged password commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unix_chkpwd&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw &#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-passwd
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;unix_chkpwd&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;unix_chkpwd -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-passwd
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71987</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must remove all software
+components after updated versions have been installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-2 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002617
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Previous versions of software components that are not removed from the
+information system after updates have been installed may be exploited by
+adversaries. Some information technology products may remove older versions of
+software automatically from the information system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;yum.conf main.clean_requirements_on_remove is expected to match &#x2F;1|True|yes&#x2F;i</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71987</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must remove all software
+components after updated versions have been installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Previous versions of software components that are not removed from the
+information system after updates have been installed may be exploited by
+adversaries. Some information technology products may remove older versions of
+software automatically from the information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-2 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system removes all software components after updated
+versions have been installed.
+
+    Check if yum is configured to remove unneeded packages with the following
+command:
+
+    # grep -i clean_requirements_on_remove &#x2F;etc&#x2F;yum.conf
+    clean_requirements_on_remove&#x3D;1
+
+    If &quot;clean_requirements_on_remove&quot; is not set to &quot;1&quot;, &quot;True&quot;, or
+&quot;yes&quot;, or is not set in &quot;&#x2F;etc&#x2F;yum.conf&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to remove all software components after
+updated versions have been installed.
+
+    Set the &quot;clean_requirements_on_remove&quot; option to &quot;1&quot; in the
+&quot;&#x2F;etc&#x2F;yum.conf&quot; file:
+
+    clean_requirements_on_remove&#x3D;1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71909</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one special character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001619
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf ocredit.to_i is expected to cmp &lt; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71909</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one special character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system enforces password complexity by requiring that
+at least one special character be used.
+
+    Note: The value to require a number of special characters to be set is
+expressed as a negative number in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;.
+
+    Check the value for &quot;ocredit&quot; in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with
+the following command:
+
+    # grep ocredit &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    ocredit&#x3D;-1
+
+    If the value of &quot;ocredit&quot; is not set to a negative value, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to enforce password complexity by requiring
+that at least one special character be used by setting the &quot;ocredit&quot; option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; (or modify the
+line to have the required value):
+
+    ocredit &#x3D; -1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72085</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must encrypt the
+transfer of audit records off-loaded onto a different system or media from the
+system being audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72085</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must encrypt the
+transfer of audit records off-loaded onto a different system or media from the
+system being audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system encrypts audit records off-loaded onto a
+different system or media from the system being audited.
+
+    To determine if the transfer is encrypted, use the following command:
+
+    # grep -i enable_krb5 &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+    enable_krb5 &#x3D; yes
+
+    If the value of the &quot;enable_krb5&quot; option is not set to &quot;yes&quot; or the
+line is commented out, ask the System Administrator to indicate how the audit
+logs are off-loaded to a different system or media.
+
+    If there is no evidence that the transfer of the audit logs being
+off-loaded to another system or media is encrypted, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to encrypt the transfer of off-loaded audit
+records onto a different system or media from the system being audited.
+
+    Uncomment the &quot;enable_krb5&quot; option in &quot;&#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf&quot;
+and set it with the following line:
+
+    enable_krb5 &#x3D; yes</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71859</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner before granting local or
+remote access to the system via a graphical user logon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The GNOME desktop is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71859</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must display the
+Standard Mandatory DoD Notice and Consent Banner before granting local or
+remote access to the system via a graphical user logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before
+granting access to the operating system ensures privacy and security
+notification verbiage used is consistent with applicable federal laws,
+Executive Orders, directives, policies, regulations, standards, and guidance.
+
+    System use notifications are required only for access via logon interfaces
+with human users and are not required when such human interfaces do not exist.
+
+    The banner must be formatted in accordance with applicable DoD policy. Use
+the following verbiage for operating systems that can accommodate banners of
+1300 characters:
+
+    &quot;You are accessing a U.S. Government (USG) Information System (IS) that is
+provided for USG-authorized use only.
+
+    By using this IS (which includes any device attached to this IS), you
+consent to the following conditions:
+
+    -The USG routinely intercepts and monitors communications on this IS for
+purposes including, but not limited to, penetration testing, COMSEC monitoring,
+network operations and defense, personnel misconduct (PM), law enforcement
+(LE), and counterintelligence (CI) investigations.
+
+    -At any time, the USG may inspect and seize data stored on this IS.
+
+    -Communications using, or data stored on, this IS are not private, are
+subject to routine monitoring, interception, and search, and may be disclosed
+or used for any USG-authorized purpose.
+
+    -This IS includes security measures (e.g., authentication and access
+controls) to protect USG interests--not for your personal benefit or privacy.
+
+    -Notwithstanding the above, using this IS does not constitute consent to
+PM, LE or CI investigative searching or monitoring of the content of privileged
+communications, or work product, related to personal representation or services
+by attorneys, psychotherapists, or clergy, and their assistants. Such
+communications and work product are private and confidential. See User
+Agreement for details.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system displays the Standard Mandatory DoD Notice and
+Consent Banner before granting access to the operating system via a graphical
+user logon.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check to see if the operating system displays a banner at the logon screen
+with the following command:
+
+    # grep banner-message-enable &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    banner-message-enable&#x3D;true
+
+    If &quot;banner-message-enable&quot; is set to &quot;false&quot; or is missing, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to display the Standard Mandatory DoD Notice
+and Consent Banner before granting access to the system.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Create a database to contain the system-wide graphical user logon settings
+(if it does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;01-banner-message
+
+    Add the following line to the [org&#x2F;gnome&#x2F;login-screen] section of the
+&quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;01-banner-message&quot;:
+
+    [org&#x2F;gnome&#x2F;login-screen]
+    banner-message-enable&#x3D;true
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81019</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must take appropriate
+action when the audisp-remote buffer is full.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    When the remote buffer is full, audit logs will not be collected and sent
+to the central log server.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audispd.conf overflow_action is expected to match &#x2F;syslog$|single$|halt$&#x2F;i</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81019</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must take appropriate
+action when the audisp-remote buffer is full.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    When the remote buffer is full, audit logs will not be collected and sent
+to the central log server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the audisp daemon is configured to take an appropriate action when
+the internal queue is full:
+
+    # grep &quot;overflow_action&quot; &#x2F;etc&#x2F;audisp&#x2F;audispd.conf
+
+    overflow_action &#x3D; syslog
+
+    If the &quot;overflow_action&quot; option is not &quot;syslog&quot;, &quot;single&quot;, or
+&quot;halt&quot;, or the line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the &#x2F;etc&#x2F;audisp&#x2F;audispd.conf file and add or update the
+&quot;overflow_action&quot; option:
+
+    overflow_action &#x3D; syslog
+
+    The audit daemon must be restarted for changes to take effect:
+
+    # service auditd restart</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-78999</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the create_module syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;create_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;create_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;create_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;create_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-78999</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the create_module syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;create_module&quot; syscall occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw create_module &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S create_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S create_module -k module-change
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;create_module&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;create_module&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S create_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S create_module -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72241</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with SSH traffic terminate after a
+period of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-12
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002361
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Terminating an idle SSH session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle SSH session will also free
+up resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The release is 7.8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72241</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with SSH traffic terminate after a
+period of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Terminating an idle SSH session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle SSH session will also free
+up resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10, AC-12, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system automatically terminates a user session after
+inactivity time-outs have expired.
+
+    Check for the value of the &quot;ClientAliveCountMax&quot; keyword with the
+following command:
+
+    # grep -i clientalivecount &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    ClientAliveCountMax 0
+
+    If &quot;ClientAliveCountMax&quot; is not set to &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to terminate automatically a user session
+after inactivity time-outs have expired or at shutdown.
+
+    Add the following line (or modify the line to have the required value) to
+the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file (this file may be named differently or be in
+a different location if using a version of SSH that is provided by a
+third-party vendor):
+
+    ClientAliveCountMax 0
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71849</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the file permissions, ownership, and group membership of system files and
+commands match the vendor values.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-6 (10)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001494
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001496
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002235
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Discretionary access control is weakened if a user or group has access
+permissions to system files and directories greater than the default.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control consistently takes a long time to run and has been disabled
+    using the disable_slow_controls attribute.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71849</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the file permissions, ownership, and group membership of system files and
+commands match the vendor values.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Discretionary access control is weakened if a user or group has access
+permissions to system files and directories greater than the default.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, AU-9 (3), AC-3 (4), AC-6 (10), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the file permissions, ownership, and group membership of system
+files and commands match the vendor values.
+
+    Check the default file permissions, ownership, and group membership of
+system files and commands with the following command:
+
+    # for i in &#x60;rpm -Va | egrep -i &#39;^\.[M|U|G|.]{8}&#39; | cut -d &quot; &quot; -f4,5&#x60;;do
+for j in &#x60;rpm -qf $i&#x60;;do rpm -ql $j --dump | cut -d &quot; &quot; -f1,5,6,7 | grep
+$i;done;done
+
+    &#x2F;var&#x2F;log&#x2F;gdm 040755 root root
+    &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf 0100640 root root
+    &#x2F;usr&#x2F;bin&#x2F;passwd 0104755 root root
+
+    For each file returned, verify the current permissions, ownership, and
+group membership:
+    # ls -la &lt;filename&gt;
+
+    -rw-------. 1 root root 133 Jan 11 13:25 &#x2F;etc&#x2F;audisp&#x2F;audisp-remote.conf
+
+    If the file is more permissive than the default permissions, this is a
+finding.
+
+    If the file is not owned by the default owner and is not documented with
+the Information System Security Officer (ISSO), this is a finding.
+
+    If the file is not a member of the default group and is not documented with
+the Information System Security Officer (ISSO), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Run the following command to determine which package owns the file:
+
+    # rpm -qf &lt;filename&gt;
+
+    Reset the user and group ownership of files within a package with the
+following command:
+
+    #rpm --setugids &lt;packagename&gt;
+
+
+    Reset the permissions of files within a package with the following command:
+
+    #rpm --setperms &lt;packagename&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72267</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow compression or only allows compression after
+successful authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If compression is allowed in an SSH connection prior to
+authentication, vulnerabilities in the compression software could result in
+compromise of the system from an unauthenticated connection, potentially with
+root privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration Compression is expected to cmp &#x3D;&#x3D; &quot;delayed&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72267</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow compression or only allows compression after
+successful authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If compression is allowed in an SSH connection prior to
+authentication, vulnerabilities in the compression software could result in
+compromise of the system from an unauthenticated connection, potentially with
+root privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH daemon performs compression after a user successfully
+authenticates.
+
+    Check that the SSH daemon performs compression after a user successfully
+authenticates with the following command:
+
+    # grep -i compression &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    Compression delayed
+
+    If the &quot;Compression&quot; keyword is set to &quot;yes&quot;, is missing, or the
+returned line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Uncomment the &quot;Compression&quot; keyword in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this
+file may be named differently or be in a different location if using a version
+of SSH that is provided by a third-party vendor) on the system and set the
+value to &quot;delayed&quot; or &quot;no&quot;:
+
+    Compression no
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72211</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the rsyslog daemon does not accept log messages from other servers unless
+the server is being used for log aggregation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 f
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-11 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000318
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000368
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001812
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001814
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unintentionally running a rsyslog server accepting remote messages
+puts the system at increased risk. Malicious rsyslog messages sent to the
+server could exploit vulnerabilities in the server software itself, could
+introduce misleading information in to the system&#39;s logs, or could fill the
+system&#39;s storage leading to a Denial of Service.
+
+    If the system is intended to be a log aggregation server its use must be
+documented with the ISSO.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;etc&#x2F;rsyslog.conf content is expected to match &#x2F;\$ModLoad\s+imtcp.*\n?$&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;etc&#x2F;rsyslog.conf content is expected not to match &#x2F;^\$ModLoad\s+imtcp.*\n?$&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72211</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the rsyslog daemon does not accept log messages from other servers unless
+the server is being used for log aggregation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unintentionally running a rsyslog server accepting remote messages
+puts the system at increased risk. Malicious rsyslog messages sent to the
+server could exploit vulnerabilities in the server software itself, could
+introduce misleading information in to the system&#39;s logs, or could fill the
+system&#39;s storage leading to a Denial of Service.
+
+    If the system is intended to be a log aggregation server its use must be
+documented with the ISSO.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that the system is not accepting &quot;rsyslog&quot; messages from other
+systems unless it is documented as a log aggregation server.
+
+    Check the configuration of &quot;rsyslog&quot; with the following command:
+
+    # grep imtcp &#x2F;etc&#x2F;rsyslog.conf
+    $ModLoad imtcp
+    # grep imudp &#x2F;etc&#x2F;rsyslog.conf
+    $ModLoad imudp
+    # grep imrelp &#x2F;etc&#x2F;rsyslog.conf
+    $ModLoad imrelp
+
+    If any of the above modules are being loaded in the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot;
+file, ask to see the documentation for the system being used for log
+aggregation.
+
+    If the documentation does not exist, or does not specify the server as a
+log aggregation system, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; file to remove the &quot;ModLoad
+imtcp&quot;, &quot;ModLoad imudp&quot;, and &quot;ModLoad imrelp&quot; configuration lines, or
+document the system as being used for log aggregation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72239</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using RSA rhosts
+authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration RhostsRSAAuthentication is expected to cmp &#x3D;&#x3D; &quot;no&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72239</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using RSA rhosts
+authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the version of the operating system with the following command:
+
+    # cat &#x2F;etc&#x2F;redhat-release
+
+    If the release is 7.4 or newer this requirement is Not Applicable.
+
+    Verify the SSH daemon does not allow authentication using RSA rhosts
+authentication.
+
+    To determine how the SSH daemon&#39;s &quot;RhostsRSAAuthentication&quot; option is
+set, run the following command:
+
+    # grep RhostsRSAAuthentication &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    RhostsRSAAuthentication no
+
+    If the value is returned as &quot;yes&quot;, the returned line is commented out, or
+no output is returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the SSH daemon to not allow authentication using RSA rhosts
+authentication.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;, or uncomment the line
+and set the value to &quot;no&quot;:
+
+    RhostsRSAAuthentication no
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-77819</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must uniquely identify
+and must authenticate users using multifactor authentication via a graphical
+user logon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (11)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001948
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001953
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001954
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To assure accountability and prevent unauthenticated access, users
+must be identified and authenticated to prevent potential misuse and compromise
+of the system.
+
+    Multifactor solutions that require devices separate from information
+systems gaining access include, for example, hardware tokens providing
+time-based or challenge-response authenticators and smart cards such as the
+U.S. Government Personal Identity Verification card and the DoD Common Access
+Card.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The GNOME desktop is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The pcsc-lite package is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The esc package is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-77819</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must uniquely identify
+and must authenticate users using multifactor authentication via a graphical
+user logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To assure accountability and prevent unauthenticated access, users
+must be identified and authenticated to prevent potential misuse and compromise
+of the system.
+
+    Multifactor solutions that require devices separate from information
+systems gaining access include, for example, hardware tokens providing
+time-based or challenge-response authenticators and smart cards such as the
+U.S. Government Personal Identity Verification card and the DoD Common Access
+Card.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (11), IA-2 (12), IA-2 (12)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system uniquely identifies and authenticates users
+using multifactor authentication via a graphical user logon.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Determine which profile the system database is using with the following
+command:
+
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Note: The example is using the database local for the system, so the path
+is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database other
+than local is being used.
+
+    # grep enable-smartcard-authentication &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+
+    enable-smartcard-authentication&#x3D;true
+
+    If &quot;enable-smartcard-authentication&quot; is set to &quot;false&quot; or the keyword
+is missing, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to uniquely identify and authenticate users
+using multifactor authentication via a graphical user logon.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example is using the database local for the system, so if the
+system is using another database in &quot;&#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user&quot;, the file
+should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-defaults
+
+    Edit &quot;[org&#x2F;gnome&#x2F;login-screen]&quot; and add or update the following line:
+    enable-smartcard-authentication&#x3D;true
+
+    Update the system databases:
+    # dconf update</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72101</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the lchown syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-2 d
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000126
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lchown&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lchown&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lchown&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;lchown&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72101</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the lchown syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-2 d, AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;lchown&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw lchown &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S lchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;lchown&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S lchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S lchown -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72123</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the creat syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;creat&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72123</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the creat syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;creat&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw creat &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S creat F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S creat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S creat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S creat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;creat&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;creat&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules:
+
+    -a always,exit -F arch&#x3D;b32 -S creat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S creat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S creat -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S creat -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72041</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that file systems containing user home directories are mounted to prevent files
+with the setuid and setgid bit set from being executed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;nosuid&quot; mount option causes the system to not execute setuid
+and setgid files with owner privileges. This option must be used for mounting
+any file system not containing approved setuid and setguid files. Executing
+files from untrusted file systems increases the opportunity for unprivileged
+users to attain unauthorized administrative access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Mount &#x2F;home options is expected to include &quot;nosuid&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected nil to include &quot;nosuid&quot;, but it does not respond to &#x60;include?&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72041</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that file systems containing user home directories are mounted to prevent files
+with the setuid and setgid bit set from being executed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;nosuid&quot; mount option causes the system to not execute setuid
+and setgid files with owner privileges. This option must be used for mounting
+any file system not containing approved setuid and setguid files. Executing
+files from untrusted file systems increases the opportunity for unprivileged
+users to attain unauthorized administrative access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify file systems that contain user home directories are mounted with the
+&quot;nosuid&quot; option.
+
+    Find the file system(s) that contain the user home directories with the
+following command:
+
+    Note: If a separate file system has not been created for the user home
+directories (user home directories are mounted under &quot;&#x2F;&quot;), this is not a
+finding as the &quot;nosuid&quot; option cannot be used on the &quot;&#x2F;&quot; system.
+
+    # cut -d: -f 1,3,6 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot;
+    smithj:1001:&#x2F;home&#x2F;smithj
+    thomasr:1002:&#x2F;home&#x2F;thomasr
+
+    Check the file systems that are mounted at boot time with the following
+command:
+
+    # more &#x2F;etc&#x2F;fstab
+
+    UUID&#x3D;a411dc99-f2a1-4c87-9e05-184977be8539 &#x2F;home   ext4
+rw,relatime,discard,data&#x3D;ordered,nosuid 0 2
+
+    If a file system found in &quot;&#x2F;etc&#x2F;fstab&quot; refers to the user home directory
+file system and it does not have the &quot;nosuid&quot; option set, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the &quot;&#x2F;etc&#x2F;fstab&quot; to use the &quot;nosuid&quot; option on
+file systems that contain user home directories.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71953</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not allow an
+unattended or automatic logon to the system via a graphical user interface.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Failure to restrict system access to authenticated users negatively
+impacts operating system security.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have GDM installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71953</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not allow an
+unattended or automatic logon to the system via a graphical user interface.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Failure to restrict system access to authenticated users negatively
+impacts operating system security.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system does not allow an unattended or automatic logon
+to the system via a graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check for the value of the &quot;AutomaticLoginEnable&quot; in the
+&quot;&#x2F;etc&#x2F;gdm&#x2F;custom.conf&quot; file with the following command:
+
+    # grep -i automaticloginenable &#x2F;etc&#x2F;gdm&#x2F;custom.conf
+    AutomaticLoginEnable&#x3D;false
+
+    If the value of &quot;AutomaticLoginEnable&quot; is not set to &quot;false&quot;, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to not allow an unattended or automatic
+logon to the system via a graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Add or edit the line for the &quot;AutomaticLoginEnable&quot; parameter in the
+[daemon] section of the &quot;&#x2F;etc&#x2F;gdm&#x2F;custom.conf&quot; file to &quot;false&quot;:
+
+    [daemon]
+    AutomaticLoginEnable&#x3D;false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71969</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have the ypserv
+package installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Removing the &quot;ypserv&quot; package decreases the risk of the accidental
+(or intentional) activation of NIS or NIS+ services.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package ypserv is expected not to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71969</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have the ypserv
+package installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Removing the &quot;ypserv&quot; package decreases the risk of the accidental
+(or intentional) activation of NIS or NIS+ services.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The NIS service provides an unencrypted authentication service that does
+not provide for the confidentiality and integrity of user passwords or the
+remote session.
+
+    Check to see if the &quot;ypserve&quot; package is installed with the following
+command:
+
+    # yum list installed ypserv
+
+    If the &quot;ypserv&quot; package is installed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to disable non-essential capabilities by
+removing the &quot;ypserv&quot; package from the system with the following command:
+
+    # yum remove ypserv</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72017</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories have mode 0750 or less
+permissive.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Excessive permissions on local interactive user home directories may
+allow unauthorized access to user files by other users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Home directories with excessive permissions is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72017</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories have mode 0750 or less
+permissive.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Excessive permissions on local interactive user home directories may
+allow unauthorized access to user files by other users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the assigned home directory of all local interactive users has a
+mode of &quot;0750&quot; or less permissive.
+
+    Check the home directory assignment for all non-privileged users on the
+system with the following command:
+
+    Note: This may miss interactive users that have been assigned a privileged
+User Identifier (UID). Evidence of interactive use may be obtained from a
+number of log files containing system logon information.
+
+    # ls -ld $(egrep &#39;:[0-9]{4}&#39; &#x2F;etc&#x2F;passwd | cut -d: -f6)
+    -rwxr-x--- 1 smithj users  18 Mar  5 17:06 &#x2F;home&#x2F;smithj
+
+    If home directories referenced in &quot;&#x2F;etc&#x2F;passwd&quot; do not have a mode of
+&quot;0750&quot; or less permissive, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the mode of interactive user&#39;s home directories to &quot;0750&quot;. To
+change the mode of a local interactive user&#39;s home directory, use the following
+command:
+
+    Note: The example will be for the user &quot;smithj&quot;.
+
+    # chmod 0750 &#x2F;home&#x2F;smithj</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72191</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the kmod command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;kmod&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;kmod&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72191</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the kmod command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;kmod&quot; command occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw kmod &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;usr&#x2F;bin&#x2F;kmod -p x -F auid!&#x3D;4294967295 -k module-change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;kmod&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;usr&#x2F;bin&#x2F;kmod -p x -F auid!&#x3D;4294967295 -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71903</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one upper-case character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf ucredit.to_i is expected to cmp &lt; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71903</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, the new
+password must contain at least one upper-case character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks.
+
+    Password complexity is one factor of several that determines how long it
+takes to crack a password. The more complex the password, the greater the
+number of possible combinations that need to be tested before the password is
+compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Note: The value to require a number of upper-case characters to be set is
+expressed as a negative number in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot;.
+
+    Check the value for &quot;ucredit&quot; in &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with
+the following command:
+
+    # grep ucredit &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    ucredit &#x3D; -1
+
+    If the value of &quot;ucredit&quot; is not set to a negative value, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to enforce password complexity by requiring
+that at least one upper-case character be used by setting the &quot;ucredit&quot;
+option.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; (or modify the
+line to have the required value):
+
+    ucredit &#x3D; -1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81021</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must label all
+off-loaded audit logs before sending them to the central log server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    When audit logs are not labeled before they are sent to a central log
+server, the audit data will not be able to be analyzed and tied back to the
+correct system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;audisp&#x2F;audispd.conf name_format is expected to match &#x2F;^hostname$|^fqd$|^numeric$&#x2F;i</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81021</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must label all
+off-loaded audit logs before sending them to the central log server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    When audit logs are not labeled before they are sent to a central log
+server, the audit data will not be able to be analyzed and tied back to the
+correct system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the audisp daemon is configured to label all off-loaded audit logs:
+
+    # grep &quot;name_format&quot; &#x2F;etc&#x2F;audisp&#x2F;audispd.conf
+
+    name_format &#x3D; hostname
+
+    If the &quot;name_format&quot; option is not &quot;hostname&quot;, &quot;fqd&quot;, or &quot;numeric&quot;,
+or the line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the &#x2F;etc&#x2F;audisp&#x2F;audispd.conf file and add or update the
+&quot;name_format&quot; option:
+
+    name_format &#x3D; hostname
+
+    The audit daemon must be restarted for changes to take effect:
+
+    # service auditd restart</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72051</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must have cron logging
+implemented.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Cron logging can be used to trace the successful or unsuccessful
+execution of cron jobs. It can also be used to spot intrusions into the use of
+the cron facility by unauthorized and malicious users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;grep cron &#x2F;etc&#x2F;rsyslog.conf&#x60; stdout.strip is expected to match &#x2F;^cron&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72051</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must have cron logging
+implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Cron logging can be used to trace the successful or unsuccessful
+execution of cron jobs. It can also be used to spot intrusions into the use of
+the cron facility by unauthorized and malicious users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that &quot;rsyslog&quot; is configured to log cron events.
+
+    Check the configuration of &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or
+&quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot; files for the cron facility with the following
+command:
+
+    Note: If another logging package is used, substitute the utility
+configuration file for &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or &quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot; files.
+
+    # grep cron &#x2F;etc&#x2F;rsyslog.conf  &#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf
+    cron.* &#x2F;var&#x2F;log&#x2F;cron.log
+
+    If the command does not return a response, check for cron logging all
+facilities by inspecting the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or &quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot;
+files.
+
+    Look for the following entry:
+
+    *.* &#x2F;var&#x2F;log&#x2F;messages
+
+    If &quot;rsyslog&quot; is not logging messages for the cron facility or all
+facilities, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure &quot;rsyslog&quot; to log all cron messages by adding or updating the
+following line to &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or a configuration file in the
+&#x2F;etc&#x2F;rsyslog.d&#x2F; directory:
+
+    cron.* &#x2F;var&#x2F;log&#x2F;cron.log</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72079</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that auditing is configured to produce records containing information to
+establish what type of events occurred, where the events occurred, the source
+of the events, and the outcome of the events. These audit records must also
+identify individual identities of group account users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-2 d
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000126
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000131
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without establishing what type of events occurred, it would be
+difficult to establish, correlate, and investigate the events leading up to an
+outage or attack.
+
+    Audit record content that may be necessary to satisfy this requirement
+includes, for example, time stamps, source and destination addresses,
+user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications,
+filenames involved, and access control or flow control rules invoked.
+
+    Associating event types with detected events in the operating system audit
+logs provides a means of investigating an attack; recognizing resource
+utilization or capacity thresholds; or identifying an improperly configured
+operating system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72079</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that auditing is configured to produce records containing information to
+establish what type of events occurred, where the events occurred, the source
+of the events, and the outcome of the events. These audit records must also
+identify individual identities of group account users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without establishing what type of events occurred, it would be
+difficult to establish, correlate, and investigate the events leading up to an
+outage or attack.
+
+    Audit record content that may be necessary to satisfy this requirement
+includes, for example, time stamps, source and destination addresses,
+user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications,
+filenames involved, and access control or flow control rules invoked.
+
+    Associating event types with detected events in the operating system audit
+logs provides a means of investigating an attack; recognizing resource
+utilization or capacity thresholds; or identifying an improperly configured
+operating system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-2 d, AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system produces audit records containing information
+to establish when (date and time) the events occurred.
+
+    Check to see if auditing is active by issuing the following command:
+
+    # systemctl is-active auditd.service
+    active
+
+    If the &quot;auditd&quot; status is not active, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to produce audit records containing
+information to establish when (date and time) the events occurred.
+
+    Enable the auditd service with the following command:
+
+    # systemctl start auditd.service</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72219</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured to
+prohibit or restrict the use of functions, ports, protocols, and&#x2F;or services,
+as defined in the Ports, Protocols, and Services Management Component Local
+Service Assessment (PPSM CLSA) and vulnerability assessments.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000382
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002314
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In order to prevent unauthorized connection of devices, unauthorized
+transfer of information, or unauthorized tunneling (i.e., embedding of data
+types within data types), organizations must disable or restrict unused or
+unnecessary physical and logical ports&#x2F;protocols on information systems.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services provided by default may not be
+necessary to support essential organizational operations. Additionally, it is
+sometimes convenient to provide multiple services from a single component
+(e.g., VPN and IPS); however, doing so increases risk over limiting the
+services provided by any one component.
+
+    To support the requirements and principles of least functionality, the
+operating system must support the organizational requirements, providing only
+essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+services to only those required, authorized, and approved to conduct official
+business or to address authorized quality of life issues.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Firewalld zones are not specified. Check &#39;firewalld_zones&#39; input. is expected to equal false</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected false
+     got true
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72219</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured to
+prohibit or restrict the use of functions, ports, protocols, and&#x2F;or services,
+as defined in the Ports, Protocols, and Services Management Component Local
+Service Assessment (PPSM CLSA) and vulnerability assessments.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In order to prevent unauthorized connection of devices, unauthorized
+transfer of information, or unauthorized tunneling (i.e., embedding of data
+types within data types), organizations must disable or restrict unused or
+unnecessary physical and logical ports&#x2F;protocols on information systems.
+
+    Operating systems are capable of providing a wide variety of functions and
+services. Some of the functions and services provided by default may not be
+necessary to support essential organizational operations. Additionally, it is
+sometimes convenient to provide multiple services from a single component
+(e.g., VPN and IPS); however, doing so increases risk over limiting the
+services provided by any one component.
+
+    To support the requirements and principles of least functionality, the
+operating system must support the organizational requirements, providing only
+essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+services to only those required, authorized, and approved to conduct official
+business or to address authorized quality of life issues.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 b, AC-17 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Inspect the firewall configuration and running services to verify that it
+is configured to prohibit or restrict the use of functions, ports, protocols,
+and&#x2F;or services that are unnecessary or prohibited.
+
+    Check which services are currently active with the following command:
+
+    # firewall-cmd --list-all
+    public (default, active)
+      interfaces: enp0s3
+      sources:
+      services: dhcpv6-client dns http https ldaps rpc-bind ssh
+      ports:
+      masquerade: no
+      forward-ports:
+      icmp-blocks:
+      rich rules:
+
+    Ask the System Administrator for the site or program PPSM CLSA. Verify the
+services allowed by the firewall match the PPSM CLSA.
+
+    If there are additional ports, protocols, or services that are not in the
+PPSM CLSA, or there are ports, protocols, or services that are prohibited by
+the PPSM Category Assurance List (CAL), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Update the host&#39;s firewall settings and&#x2F;or running services to
+comply with the PPSM CLSA for the site or program and the PPSM CAL.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72235</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all networked systems use SSH for confidentiality and integrity of
+transmitted and received information as well as information during preparation
+for transmission.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002420
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002421
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002422
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without protection of the transmitted information, confidentiality and
+integrity may be compromised because unprotected communications can be
+intercepted and either read or altered.
+
+    This requirement applies to both internal and external networks and all
+types of information system components from which information can be
+transmitted (e.g., servers, mobile devices, notebook computers, printers,
+copiers, scanners, and facsimile machines). Communication paths outside the
+physical protection of a controlled boundary are exposed to the possibility of
+interception and modification.
+
+    Protecting the confidentiality and integrity of organizational information
+can be accomplished by physical means (e.g., employing physical distribution
+systems) or by logical means (e.g., employing cryptographic techniques). If
+physical means of protection are employed, then logical means (cryptography) do
+not have to be employed, and vice versa.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service sshd.service is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72235</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all networked systems use SSH for confidentiality and integrity of
+transmitted and received information as well as information during preparation
+for transmission.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without protection of the transmitted information, confidentiality and
+integrity may be compromised because unprotected communications can be
+intercepted and either read or altered.
+
+    This requirement applies to both internal and external networks and all
+types of information system components from which information can be
+transmitted (e.g., servers, mobile devices, notebook computers, printers,
+copiers, scanners, and facsimile machines). Communication paths outside the
+physical protection of a controlled boundary are exposed to the possibility of
+interception and modification.
+
+    Protecting the confidentiality and integrity of organizational information
+can be accomplished by physical means (e.g., employing physical distribution
+systems) or by logical means (e.g., employing cryptographic techniques). If
+physical means of protection are employed, then logical means (cryptography) do
+not have to be employed, and vice versa.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8, SC-8 (2), SC-8 (1), SC-8 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify SSH is loaded and active with the following command:
+
+    # systemctl status sshd
+    sshd.service - OpenSSH server daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;sshd.service; enabled)
+    Active: active (running) since Tue 2015-11-17 15:17:22 EST; 4 weeks 0 days
+ago
+    Main PID: 1348 (sshd)
+    CGroup: &#x2F;system.slice&#x2F;sshd.service
+    1053 &#x2F;usr&#x2F;sbin&#x2F;sshd -D
+
+    If &quot;sshd&quot; does not show a status of &quot;active&quot; and &quot;running&quot;, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the SSH service to automatically start after reboot with the
+following command:
+
+    # systemctl enable sshd.service</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72279</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not contain
+shosts.equiv files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The shosts.equiv files are used to configure host-based authentication
+for the system via SSH. Host-based authentication is not sufficient for
+preventing unauthorized access to the system, as it does not require
+interactive identification and authentication of a connection request, or for
+the use of two-factor authentication.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -name shosts.equiv&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72279</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not contain
+shosts.equiv files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The shosts.equiv files are used to configure host-based authentication
+for the system via SSH. Host-based authentication is not sufficient for
+preventing unauthorized access to the system, as it does not require
+interactive identification and authentication of a connection request, or for
+the use of two-factor authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify there are no &quot;shosts.equiv&quot; files on the system.
+
+    Check the system for the existence of these files with the following
+command:
+
+    # find &#x2F; -name shosts.equiv
+
+    If any &quot;shosts.equiv&quot; files are found on the system, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove any found &quot;shosts.equiv&quot; files from the system.
+
+# rm &#x2F;[path]&#x2F;[to]&#x2F;[file]&#x2F;shosts.equiv</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72145</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must generate audit
+records for all unsuccessful account access events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-2 d
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000126
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;var&#x2F;run&#x2F;faillock&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;var&#x2F;run&#x2F;faillock&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72145</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must generate audit
+records for all unsuccessful account access events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-2 d, AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when unsuccessful
+account access events occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+commands:
+
+    # grep -i &#x2F;var&#x2F;run&#x2F;faillock &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;var&#x2F;run&#x2F;faillock -p wa -k logins
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when unsuccessful
+account access events occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;var&#x2F;run&#x2F;faillock -p wa -k logins
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-94843</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the x86 Ctrl-Alt-Delete key sequence is disabled in the GUI.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A locally logged-on user who presses Ctrl-Alt-Delete, when at the
+console, can reboot the system. If accidentally pressed, as could happen in the
+case of a mixed OS environment, this can create the risk of short-term loss of
+availability of systems due to unintentional reboot. In the GNOME graphical
+environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is
+reduced because the user will be prompted before any action is taken.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have GNOME installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-94843</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the x86 Ctrl-Alt-Delete key sequence is disabled in the GUI.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A locally logged-on user who presses Ctrl-Alt-Delete, when at the
+console, can reboot the system. If accidentally pressed, as could happen in the
+case of a mixed OS environment, this can create the risk of short-term loss of
+availability of systems due to unintentional reboot. In the GNOME graphical
+environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is
+reduced because the user will be prompted before any action is taken.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system is not configured to reboot the system when
+Ctrl-Alt-Delete is pressed.
+
+    Check that the ctrl-alt-del.target is masked and not active in the GUI with
+the following command:
+
+    # grep logout &#x2F;etc&#x2F;dconf&#x2F;local.d&#x2F;*
+
+    logout&#x3D;&#39;&#39;
+
+    If &quot;logout&quot; is not set to use two single quotations, or is missing, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to disable the Ctrl-Alt-Delete sequence for the GUI
+with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-disable-CAD
+
+    Add the setting to disable the Ctrl-Alt-Delete sequence for GNOME:
+
+    [org&#x2F;gnome&#x2F;settings-daemon&#x2F;plugins&#x2F;media-keys]
+    logout&#x3D;&#39;&#39;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72249</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using known hosts
+authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration IgnoreUserKnownHosts is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72249</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using known hosts
+authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH daemon does not allow authentication using known hosts
+authentication.
+
+    To determine how the SSH daemon&#39;s &quot;IgnoreUserKnownHosts&quot; option is set,
+run the following command:
+
+    # grep -i IgnoreUserKnownHosts &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    IgnoreUserKnownHosts yes
+
+    If the value is returned as &quot;no&quot;, the returned line is commented out, or
+no output is returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the SSH daemon to not allow authentication using known hosts
+authentication.
+
+    Add the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;, or uncomment the line
+and set the value to &quot;yes&quot;:
+
+    IgnoreUserKnownHosts yes
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73159</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, pwquality
+must be used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks. &quot;pwquality&quot; enforces complex password construction
+configuration and has the ability to limit brute-force attacks on the system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;passwd] lines is expected to include password (required|requisite) pam_pwquality.so</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;passwd] lines is expected to include password (required|requisite) pam_pwquality.so, all with arg retry &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;passwd] lines is expected to include password (required|requisite) pam_pwquality.so, all with arg retry &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73159</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that when passwords are changed or new passwords are established, pwquality
+must be used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources
+required to compromise the password. Password complexity, or strength, is a
+measure of the effectiveness of a password in resisting attempts at guessing
+and brute-force attacks. &quot;pwquality&quot; enforces complex password construction
+configuration and has the ability to limit brute-force attacks on the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system uses &quot;pwquality&quot; to enforce the password
+complexity rules.
+
+    Check for the use of &quot;pwquality&quot; with the following command:
+
+    # cat &#x2F;etc&#x2F;pam.d&#x2F;system-auth | grep pam_pwquality
+
+    password required pam_pwquality.so retry&#x3D;3
+
+    If the command does not return an uncommented line containing the value
+&quot;pam_pwquality.so&quot;, this is a finding.
+
+    If the value of &quot;retry&quot; is set to &quot;0&quot; or greater than &quot;3&quot;, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to use &quot;pwquality&quot; to enforce password
+complexity rules.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;pam.d&#x2F;system-auth&quot; (or modify the line to
+have the required value):
+
+    password required pam_pwquality.so retry&#x3D;3
+
+    Note: The value of &quot;retry&quot; should be between &quot;1&quot; and &quot;3&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72057</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must disable Kernel core
+dumps unless needed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Kernel core dumps may contain the full contents of system memory at
+the time of the crash. Kernel core dumps may consume a considerable amount of
+disk space and may result in denial of service by exhausting the available
+space on the target file system partition.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service kdump.service is expected not to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72057</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must disable Kernel core
+dumps unless needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Kernel core dumps may contain the full contents of system memory at
+the time of the crash. Kernel core dumps may consume a considerable amount of
+disk space and may result in denial of service by exhausting the available
+space on the target file system partition.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that kernel core dumps are disabled unless needed.
+
+    Check the status of the &quot;kdump&quot; service with the following command:
+
+    # systemctl status kdump.service
+    kdump.service - Crash recovery kernel arming
+       Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;kdump.service; enabled)
+       Active: active (exited) since Wed 2015-08-26 13:08:09 EDT; 43min ago
+     Main PID: 1130 (code&#x3D;exited, status&#x3D;0&#x2F;SUCCESS)
+    kernel arming.
+
+    If the &quot;kdump&quot; service is active, ask the System Administrator if the use
+of the service is required and documented with the Information System Security
+Officer (ISSO).
+
+    If the service is active and is not documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If kernel core dumps are not required, disable the &quot;kdump&quot; service with
+the following command:
+
+    # systemctl disable kdump.service
+
+    If kernel core dumps are required, document the need with the ISSO.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72089</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must initiate an action
+to notify the System Administrator (SA) and Information System Security Officer
+ISSO, at a minimum, when allocated audit record storage volume reaches 75% of
+the repository maximum audit record storage capacity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001855
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If security personnel are not notified immediately when storage volume
+reaches 75 percent utilization, they are unable to plan for audit record
+storage capacity expansion.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Audit Daemon Config space_left.to_i is expected to be &gt;&#x3D; 7676</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72089</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must initiate an action
+to notify the System Administrator (SA) and Information System Security Officer
+ISSO, at a minimum, when allocated audit record storage volume reaches 75% of
+the repository maximum audit record storage capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If security personnel are not notified immediately when storage volume
+reaches 75 percent utilization, they are unable to plan for audit record
+storage capacity expansion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system initiates an action to notify the SA and ISSO
+(at a minimum) when allocated audit record storage volume reaches 75 percent of
+the repository maximum audit record storage capacity.
+
+    Check the system configuration to determine the partition the audit records
+are being written to with the following command:
+
+    # grep -iw log_file &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+    log_file &#x3D; &#x2F;var&#x2F;log&#x2F;audit&#x2F;audit.log
+
+    Check the size of the partition that audit records are written to (with the
+example being &quot;&#x2F;var&#x2F;log&#x2F;audit&#x2F;&quot;):
+
+    # df -h &#x2F;var&#x2F;log&#x2F;audit&#x2F;
+    0.9G &#x2F;var&#x2F;log&#x2F;audit
+
+    If the audit records are not being written to a partition specifically
+created for audit records (in this example &quot;&#x2F;var&#x2F;log&#x2F;audit&quot; is a separate
+partition), determine the amount of space other files in the partition are
+currently occupying with the following command:
+
+    # du -sh &lt;partition&gt;
+    1.8G &#x2F;var
+
+    Determine what the threshold is for the system to take action when 75
+percent of the repository maximum audit record storage capacity is reached:
+
+    # grep -iw space_left &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+    space_left &#x3D; 225
+
+    If the value of the &quot;space_left&quot; keyword is not set to 25 percent of the
+total partition size, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to initiate an action to notify the SA and
+ISSO (at a minimum) when allocated audit record storage volume reaches 75
+percent of the repository maximum audit record storage capacity.
+
+    Check the system configuration to determine the partition the audit records
+are being written to:
+
+    # grep -iw log_file &#x2F;etc&#x2F;audit&#x2F;auditd.conf
+
+    Determine the size of the partition that audit records are written to (with
+the example being &quot;&#x2F;var&#x2F;log&#x2F;audit&#x2F;&quot;):
+
+    # df -h &#x2F;var&#x2F;log&#x2F;audit&#x2F;
+
+    Set the value of the &quot;space_left&quot; keyword in &quot;&#x2F;etc&#x2F;audit&#x2F;auditd.conf&quot;
+to 25 percent of the partition size.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72315</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system access control program
+must be configured to grant or deny system access to specific hosts and
+services.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the systems access control program is not configured with
+appropriate rules for allowing and denying access to system network resources,
+services may be accessible to unauthorized hosts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Firewall Rules with services is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72315</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system access control program
+must be configured to grant or deny system access to specific hosts and
+services.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the systems access control program is not configured with
+appropriate rules for allowing and denying access to system network resources,
+services may be accessible to unauthorized hosts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the &quot;firewalld&quot; package is not installed, ask the System Administrator
+(SA) if another firewall application (such as iptables) is installed. If an
+application firewall is not installed, this is a finding.
+
+    Verify the system&#39;s access control program is configured to grant or deny
+system access to specific hosts.
+
+    Check to see if &quot;firewalld&quot; is active with the following command:
+
+    # systemctl status firewalld
+    firewalld.service - firewalld - dynamic firewall daemon
+    Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;firewalld.service; enabled)
+    Active: active (running) since Sun 2014-04-20 14:06:46 BST; 30s ago
+
+    If &quot;firewalld&quot; is active, check to see if it is configured to grant or
+deny access to specific hosts or services with the following commands:
+
+    # firewall-cmd --get-default-zone
+    public
+
+    # firewall-cmd --list-all --zone&#x3D;public
+    public (active)
+    target: default
+    icmp-block-inversion: no
+    interfaces: eth0
+    sources:
+    services: mdns ssh
+    ports:
+    protocols:
+    masquerade: no
+    forward-ports:
+    icmp-blocks:
+
+    If &quot;firewalld&quot; is not active, determine whether &quot;tcpwrappers&quot; is being
+used by checking whether the &quot;hosts.allow&quot; and &quot;hosts.deny&quot; files are empty
+with the following commands:
+
+    # ls -al &#x2F;etc&#x2F;hosts.allow
+    rw-r----- 1 root root 9 Aug 2 23:13 &#x2F;etc&#x2F;hosts.allow
+
+    # ls -al &#x2F;etc&#x2F;hosts.deny
+    -rw-r----- 1 root root 9 Apr 9 2007 &#x2F;etc&#x2F;hosts.deny
+
+    If &quot;firewalld&quot; and &quot;tcpwrappers&quot; are not installed, configured, and
+active, ask the SA if another access control program (such as iptables) is
+installed and active. Ask the SA to show that the running configuration grants
+or denies access to specific hosts or services.
+
+    If &quot;firewalld&quot; is active and is not configured to grant access to
+specific hosts or &quot;tcpwrappers&quot; is not configured to grant or deny access to
+specific hosts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If &quot;firewalld&quot; is installed and active on the system, configure rules for
+allowing specific services and hosts.
+
+    If &quot;firewalld&quot; is not &quot;active&quot;, enable &quot;tcpwrappers&quot; by configuring
+&quot;&#x2F;etc&#x2F;hosts.allow&quot; and &quot;&#x2F;etc&#x2F;hosts.deny&quot; to allow or deny access to
+specific hosts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72311</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the Network File System (NFS) is configured to use RPCSEC_GSS.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When an NFS server is configured to use RPCSEC_SYS, a selected userid
+and groupid are used to handle requests from the remote user. The userid and
+groupid could mistakenly or maliciously be set incorrectly. The RPCSEC_GSS
+method of authentication uses certificates on the server and client systems to
+more securely authenticate the remote mount request.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No NFS file systems were found. is expected to eq true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72311</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the Network File System (NFS) is configured to use RPCSEC_GSS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When an NFS server is configured to use RPCSEC_SYS, a selected userid
+and groupid are used to handle requests from the remote user. The userid and
+groupid could mistakenly or maliciously be set incorrectly. The RPCSEC_GSS
+method of authentication uses certificates on the server and client systems to
+more securely authenticate the remote mount request.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify &quot;AUTH_GSS&quot; is being used to authenticate NFS mounts.
+
+    To check if the system is importing an NFS file system, look for any
+entries in the &quot;&#x2F;etc&#x2F;fstab&quot; file that have a file system type of &quot;nfs&quot; with
+the following command:
+
+    # cat &#x2F;etc&#x2F;fstab | grep nfs
+    192.168.21.5:&#x2F;mnt&#x2F;export &#x2F;data1 nfs4 rw,sync ,soft,sec&#x3D;krb5:krb5i:krb5p
+
+    If the system is mounting file systems via NFS and has the sec option
+without the &quot;krb5:krb5i:krb5p&quot; settings, the &quot;sec&quot; option has the &quot;sys&quot;
+setting, or the &quot;sec&quot; option is missing, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Update the &quot;&#x2F;etc&#x2F;fstab&quot; file so the option &quot;sec&quot; is defined for each
+NFS mounted file system and the &quot;sec&quot; option does not have the &quot;sys&quot;
+setting.
+
+    Ensure the &quot;sec&quot; option is defined as &quot;krb5:krb5i:krb5p&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71975</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that designated personnel are notified if baseline configurations are changed
+in an unauthorized manner.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001744
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unauthorized changes to the baseline configuration could make the
+system vulnerable to various attacks or allow unauthorized access to the
+operating system. Changes to operating system configurations can have
+unintended side effects, some of which may be relevant to security.
+
+    Detecting such changes and providing an automated response can help avoid
+unintended, negative consequences that could ultimately affect the security
+state of the operating system. The operating system&#39;s Information Management
+Officer (IMO)&#x2F;Information System Security Officer (ISSO) and System
+Administrators (SAs) must be notified via email and&#x2F;or monitoring system trap
+when there is an unauthorized modification of a configuration item.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package aide is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;etc&#x2F;cron.daily&#x2F;aide content is expected to match &#x2F;\&#x2F;bin\&#x2F;mail&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71975</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that designated personnel are notified if baseline configurations are changed
+in an unauthorized manner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unauthorized changes to the baseline configuration could make the
+system vulnerable to various attacks or allow unauthorized access to the
+operating system. Changes to operating system configurations can have
+unintended side effects, some of which may be relevant to security.
+
+    Detecting such changes and providing an automated response can help avoid
+unintended, negative consequences that could ultimately affect the security
+state of the operating system. The operating system&#39;s Information Management
+Officer (IMO)&#x2F;Information System Security Officer (ISSO) and System
+Administrators (SAs) must be notified via email and&#x2F;or monitoring system trap
+when there is an unauthorized modification of a configuration item.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 (5), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system notifies designated personnel if baseline
+configurations are changed in an unauthorized manner.
+
+    Note: A file integrity tool other than Advanced Intrusion Detection
+Environment (AIDE) may be used, but the tool must be executed and notify
+specified individuals via email or an alert.
+
+    Check to see if AIDE is installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the SA how file integrity checks are
+performed on the system.
+
+    Check for the presence of a cron job running routinely on the system that
+executes AIDE to scan for changes to the system baseline. The commands used in
+the example will use a daily occurrence.
+
+    Check the cron directories for a &quot;crontab&quot; script file controlling the
+execution of the file integrity application. For example, if AIDE is installed
+on the system, use the following command:
+
+    # ls -al &#x2F;etc&#x2F;cron.* | grep aide
+    -rwxr-xr-x 1 root root 32 Jul 1 2011 aide
+
+    # grep aide &#x2F;etc&#x2F;crontab &#x2F;var&#x2F;spool&#x2F;cron&#x2F;root
+    &#x2F;etc&#x2F;crontab: 30 04 * * * &#x2F;root&#x2F;aide
+    &#x2F;var&#x2F;spool&#x2F;cron&#x2F;root: 30 04 * * * &#x2F;root&#x2F;aide
+
+    AIDE does not have a configuration that will send a notification, so the
+cron job uses the mail application on the system to email the results of the
+file integrity run as in the following example:
+
+    # more &#x2F;etc&#x2F;cron.daily&#x2F;aide
+    #!&#x2F;bin&#x2F;bash
+
+    &#x2F;usr&#x2F;sbin&#x2F;aide --check | &#x2F;bin&#x2F;mail -s &quot;$HOSTNAME - Daily aide integrity
+check run&quot; root@sysname.mil
+
+    If the file integrity application does not notify designated personnel of
+changes, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to notify designated personnel if baseline
+configurations are changed in an unauthorized manner. The AIDE tool can be
+configured to email designated personnel with the use of the cron system.
+
+    The following example output is generic. It will set cron to run AIDE daily
+and to send email at the completion of the analysis.
+
+    # more &#x2F;etc&#x2F;cron.daily&#x2F;aide
+
+    &#x2F;usr&#x2F;sbin&#x2F;aide --check | &#x2F;bin&#x2F;mail -s &quot;$HOSTNAME - Daily aide integrity
+check run&quot; root@sysname.mil</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71983</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured to
+disable USB mass storage.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000778
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001958
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          USB mass storage permits easy introduction of unknown devices, thereby
+facilitating malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Module usb_storage is expected not to be loaded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Module usb_storage is expected to be blacklisted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71983</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured to
+disable USB mass storage.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">USB mass storage permits easy introduction of unknown devices, thereby
+facilitating malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, IA-3, IA-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If there is an HBSS with a Device Control Module and a Data Loss Prevention
+mechanism, this requirement is not applicable.
+
+    Verify the operating system disables the ability to load the USB Storage
+kernel module.
+
+    # grep -r usb-storage &#x2F;etc&#x2F;modprobe.d&#x2F;* | grep -i &quot;&#x2F;bin&#x2F;true&quot; | grep -v
+&quot;^#&quot;
+
+    install usb-storage &#x2F;bin&#x2F;true
+
+    If the command does not return any output, or the line is commented out,
+and use of USB Storage is not documented with the Information System Security
+Officer (ISSO) as an operational requirement, this is a finding.
+
+    Verify the operating system disables the ability to use USB mass storage
+devices.
+
+    Check to see if USB mass storage is disabled with the following command:
+
+    # grep usb-storage &#x2F;etc&#x2F;modprobe.d&#x2F;* | grep -i &quot;blacklist&quot; | grep -v
+&quot;^#&quot;
+    blacklist usb-storage
+
+    If the command does not return any output or the output is not &quot;blacklist
+usb-storage&quot;, and use of USB storage devices is not documented with the
+Information System Security Officer (ISSO) as an operational requirement, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to disable the ability to use the USB
+Storage kernel module.
+
+    Create a file under &quot;&#x2F;etc&#x2F;modprobe.d&quot; with the following command:
+
+    # touch &#x2F;etc&#x2F;modprobe.d&#x2F;usb-storage.conf
+
+    Add the following line to the created file:
+
+    install usb-storage &#x2F;bin&#x2F;true
+
+    Configure the operating system to disable the ability to use USB mass
+storage devices.
+
+    # vi &#x2F;etc&#x2F;modprobe.d&#x2F;blacklist.conf
+
+    Add or update the line:
+
+    blacklist usb-storage</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72135</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the semanage command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;semanage&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;semanage&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72135</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the semanage command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;semanage&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;sbin&#x2F;semanage &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;semanage -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-priv_change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;semanage&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;semanage -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72291</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not allow
+interfaces to perform Internet Protocol version 4 (IPv4) Internet Control
+Message Protocol (ICMP) redirects by default.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages contain
+information from the system&#39;s route table, possibly revealing portions of the
+network topology.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.conf.default.send_redirects value is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72291</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not allow
+interfaces to perform Internet Protocol version 4 (IPv4) Internet Control
+Message Protocol (ICMP) redirects by default.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages contain
+information from the system&#39;s route table, possibly revealing portions of the
+network topology.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system does not allow interfaces to perform IPv4 ICMP redirects
+by default.
+
+    # grep &#39;net.ipv4.conf.default.send_redirects&#39; &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot;net.ipv4.conf.default.send_redirects&quot; is not configured in the
+&quot;&#x2F;etc&#x2F;sysctl.conf&quot; file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out
+or does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the &quot;default send_redirects&quot;
+variables with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep &#39;net.ipv4.conf.default.send_redirects&#39;
+
+    net.ipv4.conf.default.send_redirects &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to not allow interfaces to perform IPv4 ICMP redirects
+by default.
+
+    Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.default.send_redirects &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72023</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories are owned by the owner of the home directory.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If local interactive users do not own the files in their directories,
+unauthorized users may be able to access them. Additionally, if files are not
+owned by the user, this could be an indication of system compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Files and directories that are not owned by the user is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72023</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories contained in local interactive user home
+directories are owned by the owner of the home directory.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If local interactive users do not own the files in their directories,
+unauthorized users may be able to access them. Additionally, if files are not
+owned by the user, this could be an indication of system compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all files and directories in a local interactive user&#39;s home
+directory are owned by the user.
+
+    Check the owner of all files and directories in a local interactive user&#39;s
+home directory with the following command:
+
+    Note: The example will be for the user &quot;smithj&quot;, who has a home directory
+of &quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # ls -lLR &#x2F;home&#x2F;smithj
+    -rw-r--r-- 1 smithj smithj  18 Mar  5 17:06 file1
+    -rw-r--r-- 1 smithj smithj 193 Mar  5 17:06 file2
+    -rw-r--r-- 1 smithj smithj 231 Mar  5 17:06 file3
+
+    If any files are found with an owner different than the home directory
+user, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the owner of a local interactive user&#39;s files and directories to
+that owner. To change the owner of a local interactive user&#39;s files and
+directories, use the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;.
+
+    # chown smithj &#x2F;home&#x2F;smithj&#x2F;&lt;file or directory&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72237</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with SSH traffic are terminated at the
+end of the session or after 10 minutes of inactivity, except to fulfill
+documented and validated mission requirements.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-12
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002361
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Terminating an idle SSH session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle SSH session will also free
+up resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration ClientAliveInterval.to_i is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration ClientAliveInterval.to_i is expected to cmp &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration ClientAliveInterval is expected not to eq nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72237</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all network connections associated with SSH traffic are terminated at the
+end of the session or after 10 minutes of inactivity, except to fulfill
+documented and validated mission requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Terminating an idle SSH session within a short time period reduces the
+window of opportunity for unauthorized personnel to take control of a
+management session enabled on the console or console port that has been left
+unattended. In addition, quickly terminating an idle SSH session will also free
+up resources committed by the managed network element.
+
+    Terminating network connections associated with communications sessions
+includes, for example, de-allocating associated TCP&#x2F;IP address&#x2F;port pairs at
+the operating system level and de-allocating networking assignments at the
+application level if multiple application sessions are using a single operating
+system-level network connection. This does not mean that the operating system
+terminates all sessions or network access; it only ends the inactive session
+and releases the resources associated with that session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10, AC-12, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system automatically terminates a user session after
+inactivity time-outs have expired.
+
+    Check for the value of the &quot;ClientAliveInterval&quot; keyword with the
+following command:
+
+    # grep -iw clientaliveinterval &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    ClientAliveInterval 600
+
+    If &quot;ClientAliveInterval&quot; is not configured, commented out, or has a value
+of &quot;0&quot;, this is a finding.
+
+    If &quot;ClientAliveInterval&quot; has a value that is greater than &quot;600&quot; and is
+not documented with the Information System Security Officer (ISSO) as an
+operational requirement, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to automatically terminate a user session
+after inactivity time-outs have expired or at shutdown.
+
+    Add the following line (or modify the line to have the required value) to
+the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file (this file may be named differently or be in
+a different location if using a version of SSH that is provided by a
+third-party vendor):
+
+    ClientAliveInterval 600
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71989</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must enable SELinux.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-6 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002696
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without verification of the security functions, security functions may
+not operate correctly and the failure may go unnoticed. Security function is
+defined as the hardware, software, and&#x2F;or firmware of the information system
+responsible for enforcing the system security policy and supporting the
+isolation of code and data on which the protection is based. Security
+functionality includes, but is not limited to, establishing system accounts,
+configuring access authorizations (i.e., permissions, privileges), setting
+events to be audited, and setting intrusion detection parameters.
+
+    This requirement applies to operating systems performing security function
+verification&#x2F;testing and&#x2F;or systems and environments that require this
+functionality.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;getenforce&#x60; stdout.strip is expected to eq &quot;Enforcing&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71989</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must enable SELinux.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without verification of the security functions, security functions may
+not operate correctly and the failure may go unnoticed. Security function is
+defined as the hardware, software, and&#x2F;or firmware of the information system
+responsible for enforcing the system security policy and supporting the
+isolation of code and data on which the protection is based. Security
+functionality includes, but is not limited to, establishing system accounts,
+configuring access authorizations (i.e., permissions, privileges), setting
+events to be audited, and setting intrusion detection parameters.
+
+    This requirement applies to operating systems performing security function
+verification&#x2F;testing and&#x2F;or systems and environments that require this
+functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), SI-6 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If an HBSS or HIPS is active on the system, this is Not Applicable.
+
+    Verify the operating system verifies correct operation of all security
+functions.
+
+    Check if &quot;SELinux&quot; is active and in &quot;Enforcing&quot; mode with the following
+command:
+
+    # getenforce
+    Enforcing
+
+    If &quot;SELinux&quot; is not active and not in &quot;Enforcing&quot; mode, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to verify correct operation of all security
+functions.
+
+    Set the &quot;SELinux&quot; status and the &quot;Enforcing&quot; mode by modifying the
+&quot;&#x2F;etc&#x2F;selinux&#x2F;config&quot; file to have the following line:
+
+    SELINUX&#x3D;enforcing
+
+    A reboot is required for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81015</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured to
+use the au-remote plugin.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    Without the configuration of the &quot;au-remote&quot; plugin, the audisp-remote
+daemon will not off-load the logs from the system being audited.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#39;&#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf&#39; cannot be found. This test cannot be checked in a automated fashion and you must check it manually</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81015</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured to
+use the au-remote plugin.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information stored in one location is vulnerable to accidental or
+incidental deletion or alteration.
+
+    Off-loading is a common process in information systems with limited audit
+storage capacity.
+
+    Without the configuration of the &quot;au-remote&quot; plugin, the audisp-remote
+daemon will not off-load the logs from the system being audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the &quot;au-remote&quot; plugin is active on the system:
+
+    # grep &quot;active&quot; &#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf
+
+    active &#x3D; yes
+
+    If the &quot;active&quot; setting is not set to &quot;yes&quot;, or the line is commented
+out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the &#x2F;etc&#x2F;audisp&#x2F;plugins.d&#x2F;au-remote.conf file and change the value of
+&quot;active&quot; to &quot;yes&quot;.
+
+    The audit daemon must be restarted for changes to take effect:
+
+    # service auditd restart</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72003</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all Group Identifiers (GIDs) referenced in the &#x2F;etc&#x2F;passwd file are
+defined in the &#x2F;etc&#x2F;group file.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000764
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a user is assigned the GID of a group not existing on the system,
+and a group with the GID is subsequently created, the user may have unintended
+rights to any files associated with the group.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 12</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 99</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 192</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 81</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 998</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 74</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 89</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 995</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 1000</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 59</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">&#x2F;etc&#x2F;group gids is expected to include 993</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72003</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all Group Identifiers (GIDs) referenced in the &#x2F;etc&#x2F;passwd file are
+defined in the &#x2F;etc&#x2F;group file.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a user is assigned the GID of a group not existing on the system,
+and a group with the GID is subsequently created, the user may have unintended
+rights to any files associated with the group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all GIDs referenced in the &quot;&#x2F;etc&#x2F;passwd&quot; file are defined in the
+&quot;&#x2F;etc&#x2F;group&quot; file.
+
+    Check that all referenced GIDs exist with the following command:
+
+    # pwck -r
+
+    If GIDs referenced in &quot;&#x2F;etc&#x2F;passwd&quot; file are returned as not defined in
+&quot;&#x2F;etc&#x2F;group&quot; file, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to define all GIDs found in the
+&quot;&#x2F;etc&#x2F;passwd&quot; file by modifying the &quot;&#x2F;etc&#x2F;group&quot; file to add any
+non-existent group referenced in the &quot;&#x2F;etc&#x2F;passwd&quot; file, or change the GIDs
+referenced in the &quot;&#x2F;etc&#x2F;passwd&quot; file to a group that exists in
+&quot;&#x2F;etc&#x2F;group&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-92251</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must use a reverse-path
+filter for IPv4 network traffic when possible on all interfaces.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Enabling reverse path filtering drops packets with source addresses
+that should not have been able to be received on the interface they were
+received on. It should not be used on systems which are routers for complicated
+networks, but is helpful for end hosts and routers serving small networks.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.conf.all.rp_filter value is expected to eq 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-92251</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must use a reverse-path
+filter for IPv4 network traffic when possible on all interfaces.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Enabling reverse path filtering drops packets with source addresses
+that should not have been able to be received on the interface they were
+received on. It should not be used on systems which are routers for complicated
+networks, but is helpful for end hosts and routers serving small networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system uses a reverse-path filter for IPv4:
+
+    # grep net.ipv4.conf.all.rp_filter &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+    net.ipv4.conf.all.rp_filter &#x3D; 1
+
+    If &quot;net.ipv4.conf.all.rp_filter&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;1&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.conf.all.rp_filter
+    net.ipv4.conf.all.rp_filter &#x3D; 1
+
+    If the returned line does not have a value of &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.all.rp_filter &#x3D; 1
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72189</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the delete_module syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;delete_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;delete_module&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;delete_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;delete_module&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72189</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the delete_module syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;delete_module&quot; syscall occur.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw delete_module &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S delete_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S delete_module -k module-change
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;delete_module&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;delete_module&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S delete_module -k module-change
+
+    -a always,exit -F arch&#x3D;b64 -S delete_module -k module-change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73175</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must ignore Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect
+messages.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages modify the
+host&#39;s route table and are unauthenticated. An illicit ICMP redirect message
+could result in a man-in-the-middle attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.conf.all.accept_redirects value is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73175</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must ignore Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect
+messages.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages modify the
+host&#39;s route table and are unauthenticated. An illicit ICMP redirect message
+could result in a man-in-the-middle attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system ignores IPv4 ICMP redirect messages.
+
+    # grep &#39;net.ipv4.conf.all.accept_redirects&#39; &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot; net.ipv4.conf.all.accept_redirects &quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the &quot;accept_redirects&quot;
+variables with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep &#39;net.ipv4.conf.all.accept_redirects&#39;
+
+    net.ipv4.conf.all.accept_redirects &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to ignore IPv4 ICMP redirect messages by adding the
+following line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the
+&#x2F;etc&#x2F;sysctl.d&#x2F; directory (or modify the line to have the required value):
+
+    net.ipv4.conf.all.accept_redirects &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72261</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not permit Kerberos authentication unless needed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 f
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-11 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000318
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000368
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001812
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001814
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Kerberos authentication for SSH is often implemented using Generic
+Security Service Application Program Interface (GSSAPI). If Kerberos is enabled
+through SSH, the SSH daemon provides a means of access to the system&#39;s Kerberos
+implementation. Vulnerabilities in the system&#39;s Kerberos implementation may
+then be subject to exploitation. To reduce the attack surface of the system,
+the Kerberos authentication mechanism within SSH must be disabled for systems
+not using this capability.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration KerberosAuthentication is expected to cmp &#x3D;&#x3D; &quot;no&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72261</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not permit Kerberos authentication unless needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Kerberos authentication for SSH is often implemented using Generic
+Security Service Application Program Interface (GSSAPI). If Kerberos is enabled
+through SSH, the SSH daemon provides a means of access to the system&#39;s Kerberos
+implementation. Vulnerabilities in the system&#39;s Kerberos implementation may
+then be subject to exploitation. To reduce the attack surface of the system,
+the Kerberos authentication mechanism within SSH must be disabled for systems
+not using this capability.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH daemon does not permit Kerberos to authenticate passwords
+unless approved.
+
+    Check that the SSH daemon does not permit Kerberos to authenticate
+passwords with the following command:
+
+    # grep -i kerberosauth &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    KerberosAuthentication no
+
+    If the &quot;KerberosAuthentication&quot; keyword is missing, or is set to &quot;yes&quot;
+and is not documented with the Information System Security Officer (ISSO), or
+the returned line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Uncomment the &quot;KerberosAuthentication&quot; keyword in
+&quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this file may be named differently or be in a
+different location if using a version of SSH that is provided by a third-party
+vendor) and set the value to &quot;no&quot;:
+
+    KerberosAuthentication no
+
+    The SSH service must be restarted for changes to take effect.
+
+    If Kerberos authentication is required, it must be documented, to include
+the location of the configuration file, with the ISSO.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72171</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the mount command and syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged mount commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;mount&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;mount&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;mount&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;mount&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with path &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;mount&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with path &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;mount&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72171</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the mount command and syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged mount commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;mount&quot; command and syscall occur.
+
+    Check that the following system call is being audited by performing the
+following series of commands to check the file system rules in
+&quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &quot;mount&quot; &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+    -a always,exit -F arch&#x3D;b64 -S mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;mount&quot; syscall, this is a finding.
+
+    If all uses of the &quot;mount&quot; command are not being audited, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;mount&quot; command and syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+    -a always,exit -F arch&#x3D;b64 -S mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;mount -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-mount
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81011</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the nosuid option.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001764
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Mount &#x2F;dev&#x2F;shm options is expected to include &quot;nosuid&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81011</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must mount &#x2F;dev&#x2F;shm with
+the nosuid option.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;nosuid&quot; mount option causes the system to not execute
+&quot;setuid&quot; and &quot;setgid&quot; files with owner privileges. This option must be used
+for mounting any file system not containing approved &quot;setuid&quot; and &quot;setguid&quot;
+files. Executing files from untrusted file systems increases the opportunity
+for unprivileged users to attain unauthorized administrative access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that the &quot;nosuid&quot; option is configured for &#x2F;dev&#x2F;shm:
+
+    # cat &#x2F;etc&#x2F;fstab | grep &#x2F;dev&#x2F;shm
+
+    tmpfs &#x2F;dev&#x2F;shm tmpfs defaults,nodev,nosuid,noexec 0 0
+
+    If any results are returned and the &quot;nosuid&quot; option is not listed, this
+is a finding.
+
+    Verify &quot;&#x2F;dev&#x2F;shm&quot; is mounted with the &quot;nosuid&quot; option:
+
+    # mount | grep &quot;&#x2F;dev&#x2F;shm&quot; | grep nosuid
+
+    If no results are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system so that &#x2F;dev&#x2F;shm is mounted with the
+&quot;nosuid&quot; option.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72001</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have
+unnecessary accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Accounts providing no operational purpose provide additional
+opportunities for system compromise. Unnecessary accounts include user accounts
+for individuals not requiring access to the system and application accounts for
+applications not installed on the system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">root is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">bin is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">daemon is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">adm is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">lp is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">sync is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">shutdown is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">halt is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">mail is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">operator is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">nobody is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">systemd-network is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;systemd-network&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">dbus is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;dbus&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">polkitd is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;polkitd&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">sshd is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;sshd&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">postfix is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;postfix&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">chrony is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;chrony&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ec2-user is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ec2-user&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">tss is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;tss&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">sssd is listed in allowed users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;sssd&#x60; to be in the list: &#x60;[&quot;root&quot;, &quot;bin&quot;, &quot;daemon&quot;, &quot;adm&quot;, &quot;lp&quot;, &quot;sync&quot;, &quot;shutdown&quot;, &quot;halt&quot;, &quot;mail&quot;, &quot;operator&quot;, &quot;nobody&quot;, &quot;systemd-bus-proxy&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72001</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have
+unnecessary accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Accounts providing no operational purpose provide additional
+opportunities for system compromise. Unnecessary accounts include user accounts
+for individuals not requiring access to the system and application accounts for
+applications not installed on the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all accounts on the system are assigned to an active system,
+application, or user account.
+
+    Obtain the list of authorized system accounts from the Information System
+Security Officer (ISSO).
+
+    Check the system accounts on the system with the following command:
+
+    # more &#x2F;etc&#x2F;passwd
+    root:x:0:0:root:&#x2F;root:&#x2F;bin&#x2F;bash
+    bin:x:1:1:bin:&#x2F;bin:&#x2F;sbin&#x2F;nologin
+    daemon:x:2:2:daemon:&#x2F;sbin:&#x2F;sbin&#x2F;nologin
+    sync:x:5:0:sync:&#x2F;sbin:&#x2F;bin&#x2F;sync
+    shutdown:x:6:0:shutdown:&#x2F;sbin:&#x2F;sbin&#x2F;shutdown
+    halt:x:7:0:halt:&#x2F;sbin:&#x2F;sbin&#x2F;halt
+    games:x:12:100:games:&#x2F;usr&#x2F;games:&#x2F;sbin&#x2F;nologin
+    gopher:x:13:30:gopher:&#x2F;var&#x2F;gopher:&#x2F;sbin&#x2F;nologin
+
+    Accounts such as &quot;games&quot; and &quot;gopher&quot; are not authorized accounts as
+they do not support authorized system functions.
+
+    If the accounts on the system do not match the provided documentation, or
+accounts that do not support an authorized system function are present, this is
+a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system so all accounts on the system are assigned to an
+active system, application, or user account.
+
+    Remove accounts that do not support approved system activities or that
+allow for a normal user to perform administrative-level actions.
+
+    Document all authorized accounts on the system.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-78997</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the screensaver idle-activation-enabled setting for the graphical
+user interface.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    The ability to enable&#x2F;disable a session lock is given to the user by
+default. Disabling the user&#39;s ability to disengage the graphical user interface
+session lock provides the assurance that all sessions will lock after the
+specified period of time.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The GNOME desktop is not installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-78997</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent a user from
+overriding the screensaver idle-activation-enabled setting for the graphical
+user interface.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    The ability to enable&#x2F;disable a session lock is given to the user by
+default. Disabling the user&#39;s ability to disengage the graphical user interface
+session lock provides the assurance that all sessions will lock after the
+specified period of time.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system prevents a user from overriding the screensaver
+idle-activation-enabled setting for the graphical user interface.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    Determine which profile the system database is using with the following
+command:
+    # grep system-db &#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user
+
+    system-db:local
+
+    Check for the idle-activation-enabled setting with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+the path is &quot;&#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&quot;. This path must be modified if a database
+other than &quot;local&quot; is being used.
+
+    # grep -i idle-activation-enabled &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;*
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;idle-activation-enabled
+
+    If the command does not return a result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to prevent a user from overriding a
+screensaver lock after a 15-minute period of inactivity for graphical user
+interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    Note: The example below is using the database &quot;local&quot; for the system, so
+if the system is using another database in &quot;&#x2F;etc&#x2F;dconf&#x2F;profile&#x2F;user&quot;, the
+file should be created under the appropriate subdirectory.
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;locks&#x2F;session
+
+    Add the setting to lock the screensaver idle-activation-enabled setting:
+
+    &#x2F;org&#x2F;gnome&#x2F;desktop&#x2F;screensaver&#x2F;idle-activation-enabled</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72265</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon uses privilege separation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH daemon privilege separation causes the SSH process to drop root
+privileges when not needed, which would decrease the impact of software
+vulnerabilities in the unprivileged section.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration UsePrivilegeSeparation is expected to cmp &#x3D;&#x3D; &quot;sandbox&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72265</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon uses privilege separation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH daemon privilege separation causes the SSH process to drop root
+privileges when not needed, which would decrease the impact of software
+vulnerabilities in the unprivileged section.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH daemon performs privilege separation.
+
+    Check that the SSH daemon performs privilege separation with the following
+command:
+
+    # grep -i usepriv &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    UsePrivilegeSeparation sandbox
+
+    If the &quot;UsePrivilegeSeparation&quot; keyword is set to &quot;no&quot;, is missing, or
+the returned line is commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Uncomment the &quot;UsePrivilegeSeparation&quot; keyword in
+&quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this file may be named differently or be in a
+different location if using a version of SSH that is provided by a third-party
+vendor) and set the value to &quot;sandbox&quot; or &quot;yes&quot;:
+
+    UsePrivilegeSeparation sandbox
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-73165</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000018
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001403
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;group&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;group&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-73165</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;group&quot;.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;group &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;group -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;group&quot;.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;group -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72307</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have an X
+Windows display manager installed unless approved.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Internet services that are not required for system or application
+processes must not be active to decrease the attack surface of the system. X
+Windows has a long history of security vulnerabilities and will not be used
+unless approved and documented.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package xorg-x11-server-common is expected not to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72307</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have an X
+Windows display manager installed unless approved.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Internet services that are not required for system or application
+processes must not be active to decrease the attack surface of the system. X
+Windows has a long history of security vulnerabilities and will not be used
+unless approved and documented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that if the system has X Windows System installed, it is authorized.
+
+    Check for the X11 package with the following command:
+
+    # rpm -qa | grep xorg | grep server
+
+    Ask the System Administrator if use of the X Windows System is an
+operational requirement.
+
+    If the use of X Windows on the system is not documented with the
+Information System Security Officer (ISSO), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document the requirement for an X Windows server with the ISSO or remove
+the related packages with the following commands:
+
+    # rpm -e xorg-x11-server-common</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72133</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the ftruncate syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;ftruncate&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72133</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the ftruncate syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;ftruncate&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw ftruncate &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S ftruncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S ftruncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S ftruncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S ftruncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;ftruncate&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;ftruncate&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S ftruncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S ftruncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S ftruncate -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S ftruncate -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71941</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must disable account
+identifiers (individuals, groups, roles, and devices) if the password expires.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-4 e
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000795
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Inactive identifiers pose a risk to systems and applications because
+attackers may exploit an inactive identifier and potentially obtain undetected
+access to the system. Owners of inactive accounts will not notice if
+unauthorized access to their user account has been obtained.
+
+    Operating systems need to track periods of inactivity and disable
+application identifiers after zero days of inactivity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;default&#x2F;useradd INACTIVE is expected to cmp &gt;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;default&#x2F;useradd INACTIVE is expected to cmp &lt;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71941</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must disable account
+identifiers (individuals, groups, roles, and devices) if the password expires.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Inactive identifiers pose a risk to systems and applications because
+attackers may exploit an inactive identifier and potentially obtain undetected
+access to the system. Owners of inactive accounts will not notice if
+unauthorized access to their user account has been obtained.
+
+    Operating systems need to track periods of inactivity and disable
+application identifiers after zero days of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-4 e, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If passwords are not being used for authentication, this is Not Applicable.
+
+    Verify the operating system disables account identifiers (individuals,
+groups, roles, and devices) after the password expires with the following
+command:
+
+    # grep -i inactive &#x2F;etc&#x2F;default&#x2F;useradd
+    INACTIVE&#x3D;0
+
+    If the value is not set to &quot;0&quot;, is commented out, or is not defined, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to disable account identifiers (individuals,
+groups, roles, and devices) after the password expires.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;default&#x2F;useradd&quot; (or modify the line to
+have the required value):
+
+    INACTIVE&#x3D;0</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72213</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must use a virus scan
+program.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-3 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001668
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Virus scanning software can be used to protect a system from
+penetration from computer viruses and to limit their spread through
+intermediate systems.
+
+    The virus scanning software should be configured to perform scans
+dynamically on accessed files. If this capability is not available, the system
+must be configured to scan, at a minimum, all altered files on the system on a
+daily basis.
+
+    If the system processes inbound SMTP mail, the virus scanner must be
+configured to scan all received mail.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service nails is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;Service nails&#x60; is running</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service clamav-daemon.socket is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;Service clamav-daemon.socket&#x60; is running</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72213</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must use a virus scan
+program.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Virus scanning software can be used to protect a system from
+penetration from computer viruses and to limit their spread through
+intermediate systems.
+
+    The virus scanning software should be configured to perform scans
+dynamically on accessed files. If this capability is not available, the system
+must be configured to scan, at a minimum, all altered files on the system on a
+daily basis.
+
+    If the system processes inbound SMTP mail, the virus scanner must be
+configured to scan all received mail.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-3 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify an anti-virus solution is installed on the system. The anti-virus
+solution may be bundled with an approved host-based security solution.
+
+    If there is no anti-virus solution installed on the system, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Install an antivirus solution on the system.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72283</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not forward
+Internet Protocol version 4 (IPv4) source-routed packets.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv4
+forwarding is enabled and the system is functioning as a router.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.conf.all.accept_source_route value is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72283</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not forward
+Internet Protocol version 4 (IPv4) source-routed packets.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Source-routed packets allow the source of the packet to suggest that
+routers forward the packet along a different path than configured on the
+router, which can be used to bypass network security measures. This requirement
+applies only to the forwarding of source-routed traffic, such as when IPv4
+forwarding is enabled and the system is functioning as a router.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system does not accept IPv4 source-routed packets.
+
+    # grep net.ipv4.conf.all.accept_source_route &#x2F;etc&#x2F;sysctl.conf
+&#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    net.ipv4.conf.all.accept_source_route &#x3D; 0
+
+    If &quot; net.ipv4.conf.all.accept_source_route &quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out, or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the accept source route variable
+with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep net.ipv4.conf.all.accept_source_route
+    net.ipv4.conf.all.accept_source_route &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.all.accept_source_route &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl -system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72263</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon performs strict mode checking of home directory
+configuration files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If other users have access to modify user-specific SSH configuration
+files, they may be able to log on to the system as another user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration StrictModes is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72263</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon performs strict mode checking of home directory
+configuration files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If other users have access to modify user-specific SSH configuration
+files, they may be able to log on to the system as another user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the SSH daemon performs strict mode checking of home directory
+configuration files.
+
+    The location of the &quot;sshd_config&quot; file may vary if a different daemon is
+in use.
+
+    Inspect the &quot;sshd_config&quot; file with the following command:
+
+    # grep -i strictmodes &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+    StrictModes yes
+
+    If &quot;StrictModes&quot; is set to &quot;no&quot;, is missing, or the returned line is
+commented out, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Uncomment the &quot;StrictModes&quot; keyword in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; (this
+file may be named differently or be in a different location if using a version
+of SSH that is provided by a third-party vendor) and set the value to &quot;yes&quot;:
+
+    StrictModes yes
+
+    The SSH service must be restarted for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72065</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must use a separate file
+system for &#x2F;tmp (or equivalent).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service tmp.mount is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected that &#x60;Service tmp.mount&#x60; is enabled</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File System Table File (fstab) with mount_point &#x3D;&#x3D; &quot;&#x2F;tmp&quot; Should have a device name specified</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected nil to respond to &#x60;empty?&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File System Table File (fstab) with mount_point &#x3D;&#x3D; &quot;&#x2F;tmp&quot; count is expected to cmp &#x3D;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72065</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must use a separate file
+system for &#x2F;tmp (or equivalent).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that a separate file system&#x2F;partition has been created for &quot;&#x2F;tmp&quot;.
+
+    Check that a file system&#x2F;partition has been created for &quot;&#x2F;tmp&quot; with the
+following command:
+
+    # systemctl is-enabled tmp.mount
+    enabled
+
+    If the &quot;tmp.mount&quot; service is not enabled, check to see if &quot;&#x2F;tmp&quot; is
+defined in the fstab with a device and mount point:
+
+    # grep -i &#x2F;tmp &#x2F;etc&#x2F;fstab
+    UUID&#x3D;a411dc99-f2a1-4c87-9e05-184977be8539 &#x2F;tmp   ext4
+rw,relatime,discard,data&#x3D;ordered,nosuid,noexec, 0 0
+
+    If &quot;tmp.mount&quot; service is not enabled and the &quot;&#x2F;tmp&quot; directory is not
+defined in the fstab with a device and mount point, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Start the &quot;tmp.mount&quot; service with the following command:
+
+    # systemctl enable tmp.mount
+
+    OR
+
+    Edit the &quot;&#x2F;etc&#x2F;fstab&quot; file and ensure the &quot;&#x2F;tmp&quot; directory is defined
+in the fstab with a device and mount point.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72107</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the fchmod syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmod&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmod&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmod&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fchmod&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72107</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the fchmod syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchmod&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following command:
+
+    # grep -iw fchmod &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fchmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fchmod&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fchmod&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fchmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fchmod -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71935</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that passwords are a minimum of 15 characters in length.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000205
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The shorter the password, the lower the number of possible
+combinations that need to be tested before the password is compromised.
+
+    Password complexity, or strength, is a measure of the effectiveness of a
+password in resisting attempts at guessing and brute-force attacks. Password
+length is one factor of several that helps to determine strength and how long
+it takes to crack a password. Use of more characters in a password helps to
+exponentially increase the time and&#x2F;or resources required to compromise the
+password.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Parse Config File &#x2F;etc&#x2F;security&#x2F;pwquality.conf minlen.to_i is expected to cmp &gt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71935</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that passwords are a minimum of 15 characters in length.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The shorter the password, the lower the number of possible
+combinations that need to be tested before the password is compromised.
+
+    Password complexity, or strength, is a measure of the effectiveness of a
+password in resisting attempts at guessing and brute-force attacks. Password
+length is one factor of several that helps to determine strength and how long
+it takes to crack a password. Use of more characters in a password helps to
+exponentially increase the time and&#x2F;or resources required to compromise the
+password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system enforces a minimum 15-character password
+length. The &quot;minlen&quot; option sets the minimum number of characters in a new
+password.
+
+    Check for the value of the &quot;minlen&quot; option in
+&quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; with the following command:
+
+    # grep minlen &#x2F;etc&#x2F;security&#x2F;pwquality.conf
+    minlen &#x3D; 15
+
+    If the command does not return a &quot;minlen&quot; value of 15 or greater, this is
+a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure operating system to enforce a minimum 15-character password
+length.
+
+    Add the following line to &quot;&#x2F;etc&#x2F;security&#x2F;pwquality.conf&quot; (or modify the
+line to have the required value):
+
+    minlen &#x3D; 15</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71947</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that users must provide a password for privilege escalation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-11
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002038
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without re-authentication, users may access resources or perform tasks
+for which they do not have authorization.
+
+    When operating systems provide the capability to escalate a functional
+capability, it is critical the user re-authenticate.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;grep -i nopasswd &#x2F;etc&#x2F;sudoers.d&#x2F;90-cloud-init-users&#x60; stdout is expected not to match &#x2F;^[^#]*NOPASSWD&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;ec2-user ALL&#x3D;(ALL) NOPASSWD:ALL\n&quot; not to match &#x2F;^[^#]*NOPASSWD&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;^[^#]*NOPASSWD&#x2F;
++ec2-user ALL&#x3D;(ALL) NOPASSWD:ALL
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;grep -i nopasswd &#x2F;etc&#x2F;sudoers&#x60; stdout is expected not to match &#x2F;^[^#]*NOPASSWD&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71947</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that users must provide a password for privilege escalation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without re-authentication, users may access resources or perform tasks
+for which they do not have authorization.
+
+    When operating systems provide the capability to escalate a functional
+capability, it is critical the user re-authenticate.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-11, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If passwords are not being used for authentication, this is Not Applicable.
+
+    Verify the operating system requires users to supply a password for
+privilege escalation.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers&quot; and &quot;&#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;
+files with the following command:
+
+    # grep -i nopasswd &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*
+
+    If any uncommented line is found with a &quot;NOPASSWD&quot; tag, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to require users to supply a password for
+privilege escalation.
+
+    Check the configuration of the &quot;&#x2F;etc&#x2F;sudoers&quot; file with the following
+command:
+    # visudo
+
+    Remove any occurrences of &quot;NOPASSWD&quot; tags in the file.
+
+    Check the configuration of the &#x2F;etc&#x2F;sudoers.d&#x2F;* files with the following
+command:
+    # grep -i nopasswd &#x2F;etc&#x2F;sudoers.d&#x2F;*
+
+    Remove any occurrences of &quot;NOPASSWD&quot; tags in the file.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71891</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must enable a user
+session lock until that user re-establishes access using established
+identification and authentication procedures.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000056
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    Regardless of where the session lock is determined and implemented, once
+invoked, the session lock must remain in place until the user reauthenticates.
+No other activity aside from reauthentication must unlock the system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have GNOME installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71891</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must enable a user
+session lock until that user re-establishes access using established
+identification and authentication procedures.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A session lock is a temporary action taken when a user stops work and
+moves away from the immediate physical vicinity of the information system but
+does not want to log out because of the temporary nature of the absence.
+
+    The session lock is implemented at the point where session activity can be
+determined.
+
+    Regardless of where the session lock is determined and implemented, once
+invoked, the session lock must remain in place until the user reauthenticates.
+No other activity aside from reauthentication must unlock the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system enables a user&#39;s session lock until that user
+re-establishes access using established identification and authentication
+procedures. The screen program must be installed to lock sessions on the
+console.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable.
+
+    Check to see if the screen lock is enabled with the following command:
+
+    # grep -i lock-enabled &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    lock-enabled&#x3D;true
+
+    If the &quot;lock-enabled&quot; setting is missing or is not set to &quot;true&quot;, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to enable a user&#39;s session lock until that
+user re-establishes access using established identification and authentication
+procedures.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following example:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver
+
+    Edit the &quot;[org&#x2F;gnome&#x2F;desktop&#x2F;screensaver]&quot; section of the database file
+and add or update the following lines:
+
+    # Set this to true to lock the screen when the screensaver activates
+    lock-enabled&#x3D;true
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71855</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the cryptographic hash of system files and commands matches vendor values.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001749
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without cryptographic integrity protections, system command and files
+can be altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control consistently takes a long to run and has been disabled
+    using the disable_slow_controls attribute.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71855</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the cryptographic hash of system files and commands matches vendor values.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without cryptographic integrity protections, system command and files
+can be altered by unauthorized users without detection.
+
+    Cryptographic mechanisms used for protecting the integrity of information
+include, for example, signed hash functions using asymmetric cryptography
+enabling distribution of the public key to verify the hash information while
+maintaining the confidentiality of the key used to generate the hash.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the cryptographic hash of system files and commands match the vendor
+values.
+
+    Check the cryptographic hash of system files and commands with the
+following command:
+
+    Note: System configuration files (indicated by a &quot;c&quot; in the second
+column) are expected to change over time. Unusual modifications should be
+investigated through the system audit log.
+
+    # rpm -Va --noconfig | grep &#39;^..5&#39;
+
+    If there is any output from the command for system files or binaries, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Run the following command to determine which package owns the file:
+
+    # rpm -qf &lt;filename&gt;
+
+    The package can be reinstalled from a yum repository using the command:
+
+    # sudo yum reinstall &lt;packagename&gt;
+
+    Alternatively, the package can be reinstalled from trusted media using the
+command:
+
+    # sudo rpm -Uvh &lt;packagename&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72209</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must send rsyslog output
+to a log aggregation server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Sending rsyslog output to another system ensures that the logs cannot
+be removed or modified in the event that the system is compromised or has a
+hardware failure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;grep @ &#x2F;etc&#x2F;rsyslog.conf | grep -v &quot;^#&quot;&#x60; stdout.strip is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;&quot;.empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72209</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must send rsyslog output
+to a log aggregation server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Sending rsyslog output to another system ensures that the logs cannot
+be removed or modified in the event that the system is compromised or has a
+hardware failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify &quot;rsyslog&quot; is configured to send all messages to a log aggregation
+server.
+
+    Check the configuration of &quot;rsyslog&quot; with the following command:
+
+    Note: If another logging package is used, substitute the utility
+configuration file for &quot;&#x2F;etc&#x2F;rsyslog.conf&quot;.
+
+    # grep @ &#x2F;etc&#x2F;rsyslog.conf &#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf
+    *.* @@logagg.site.mil
+
+    If there are no lines in the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or
+&quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot; files that contain the &quot;@&quot; or &quot;@@&quot; symbol(s), and
+the lines with the correct symbol(s) to send output to another system do not
+cover all &quot;rsyslog&quot; output, ask the System Administrator to indicate how the
+audit logs are off-loaded to a different system or media.
+
+    If the lines are commented out or there is no evidence that the audit logs
+are being sent to another system, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify the &quot;&#x2F;etc&#x2F;rsyslog.conf&quot; or an &quot;&#x2F;etc&#x2F;rsyslog.d&#x2F;*.conf&quot; file to
+contain a configuration line to send all &quot;rsyslog&quot; output to a log
+aggregation system:
+    *.* @@&lt;log aggregation system name&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71899</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must initiate a session
+lock for the screensaver after a period of inactivity for graphical user
+interfaces.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have GNOME installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71899</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must initiate a session
+lock for the screensaver after a period of inactivity for graphical user
+interfaces.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system initiates a session lock after a 15-minute
+period of inactivity for graphical user interfaces. The screen program must be
+installed to lock sessions on the console.
+
+    Note: If the system does not have a Graphical User Interface installed,
+this requirement is Not Applicable.
+
+    Check for the session lock settings with the following commands:
+
+    # grep -i idle-activation-enabled &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+
+    idle-activation-enabled&#x3D;true
+
+    If &quot;idle-activation-enabled&quot; is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to initiate a session lock after a 15-minute
+period of inactivity for graphical user interfaces.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver
+
+    Add the setting to enable screensaver locking after 15 minutes of
+inactivity:
+
+    [org&#x2F;gnome&#x2F;desktop&#x2F;screensaver]
+
+    idle-activation-enabled&#x3D;true
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71901</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must initiate a session
+lock for graphical user interfaces when the screensaver is activated.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The system does not have GNOME installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71901</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must initiate a session
+lock for graphical user interfaces when the screensaver is activated.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A session time-out lock is a temporary action taken when a user stops
+work and moves away from the immediate physical vicinity of the information
+system but does not log out because of the temporary nature of the absence.
+Rather than relying on the user to manually lock their operating system session
+prior to vacating the vicinity, operating systems need to be able to identify
+when a user&#39;s session has idled and take action to initiate the session lock.
+
+    The session lock is implemented at the point where session activity can be
+determined and&#x2F;or controlled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system initiates a session lock a for graphical user
+interfaces when the screensaver is activated.
+
+    Note: If the system does not have GNOME installed, this requirement is Not
+Applicable. The screen program must be installed to lock sessions on the
+console.
+
+    If GNOME is installed, check to see a session lock occurs when the
+screensaver is activated with the following command:
+
+    # grep -i lock-delay &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;*
+    lock-delay&#x3D;uint32 5
+
+    If the &quot;lock-delay&quot; setting is missing, or is not set to &quot;5&quot; or less,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to initiate a session lock for graphical
+user interfaces when a screensaver is activated.
+
+    Create a database to contain the system-wide screensaver settings (if it
+does not already exist) with the following command:
+
+    # touch &#x2F;etc&#x2F;dconf&#x2F;db&#x2F;local.d&#x2F;00-screensaver
+
+    Add the setting to enable session locking when a screensaver is activated:
+
+    [org&#x2F;gnome&#x2F;desktop&#x2F;screensaver]
+    lock-delay&#x3D;uint32 5
+
+    The &quot;uint32&quot; must be included along with the integer key values as shown.
+
+    Update the system databases:
+
+    # dconf update
+
+    Users must log out and back in again before the system-wide settings take
+effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72069</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the file integrity tool is configured to verify Access Control Lists
+(ACLs).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ACLs can provide permissions beyond those permitted through the file
+mode and must be verified by file integrity tools.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package aide is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">List of monitored files&#x2F;directories without &#39;acl&#39; rule is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72069</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the file integrity tool is configured to verify Access Control Lists
+(ACLs).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ACLs can provide permissions beyond those permitted through the file
+mode and must be verified by file integrity tools.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the file integrity tool is configured to verify ACLs.
+
+    Check to see if Advanced Intrusion Detection Environment (AIDE) is
+installed on the system with the following command:
+
+    # yum list installed aide
+
+    If AIDE is not installed, ask the System Administrator how file integrity
+checks are performed on the system.
+
+    If there is no application installed to perform file integrity checks, this
+is a finding.
+
+    Note: AIDE is highly configurable at install time. These commands assume
+the &quot;aide.conf&quot; file is under the &quot;&#x2F;etc&quot; directory.
+
+    Use the following command to determine if the file is in another location:
+
+    # find &#x2F; -name aide.conf
+
+    Check the &quot;aide.conf&quot; file to determine if the &quot;acl&quot; rule has been
+added to the rule list being applied to the files and directories selection
+lists.
+
+    An example rule that includes the &quot;acl&quot; rule is below:
+
+    All&#x3D; p+i+n+u+g+s+m+S+sha512+acl+xattrs+selinux
+    &#x2F;bin All # apply the custom rule to the files in bin
+    &#x2F;sbin All # apply the same custom rule to the files in sbin
+
+    If the &quot;acl&quot; rule is not being used on all uncommented selection lines in
+the &quot;&#x2F;etc&#x2F;aide.conf&quot; file, or ACLs are not being checked by another file
+integrity tool, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the file integrity tool to check file and directory ACLs.
+
+    If AIDE is installed, ensure the &quot;acl&quot; rule is present on all uncommented
+file and directory selection lists.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72063</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must use a separate file
+system for the system audit data path.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Mount &#x2F;var&#x2F;log&#x2F;audit is expected to be mounted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+Mount &#x2F;var&#x2F;log&#x2F;audit is not mounted
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72063</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must use a separate file
+system for the system audit data path.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The use of separate file systems for different paths can protect the
+system from failures resulting from a file system becoming full or failing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine if the operating system is configured to have the
+&quot;&#x2F;var&#x2F;log&#x2F;audit&quot; path is on a separate file system.
+
+    # grep &#x2F;var&#x2F;log&#x2F;audit &#x2F;etc&#x2F;fstab
+
+    If no result is returned, or the operating system is not configured to have
+&quot;&#x2F;var&#x2F;log&#x2F;audit&quot; on a separate file system, this is a finding.
+
+    Verify that &quot;&#x2F;var&#x2F;log&#x2F;audit&quot; is mounted on a separate file system:
+
+    # mount | grep &quot;&#x2F;var&#x2F;log&#x2F;audit&quot;
+
+    If no result is returned, or &quot;&#x2F;var&#x2F;log&#x2F;audit&quot; is not on a separate file
+system, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Migrate the system audit data path onto a separate file system.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72031</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files for local interactive users are be
+group-owned by the users primary group or root.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Local initialization files for interactive users are used to configure
+the user&#39;s shell environment upon logon. Malicious modification of these files
+could compromise accounts upon logon.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">#&lt;Set: {}&gt; length is expected to &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72031</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local initialization files for local interactive users are be
+group-owned by the users primary group or root.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Local initialization files for interactive users are used to configure
+the user&#39;s shell environment upon logon. Malicious modification of these files
+could compromise accounts upon logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the local initialization files of all local interactive users are
+group-owned by that user&#39;s primary Group Identifier (GID).
+
+    Check the home directory assignment for all non-privileged users on the
+system with the following command:
+
+    Note: The example will be for the smithj user, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot; and a primary group of &quot;users&quot;.
+
+    # cut -d: -f 1,4,6 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot;
+    smithj:1000:&#x2F;home&#x2F;smithj
+
+    # grep 1000 &#x2F;etc&#x2F;group
+    users:x:1000:smithj,jonesj,jacksons
+
+    Note: This may miss interactive users that have been assigned a privileged
+User Identifier (UID). Evidence of interactive use may be obtained from a
+number of log files containing system logon information.
+
+    Check the group owner of all local interactive user&#39;s initialization files
+with the following command:
+
+    # ls -al &#x2F;home&#x2F;smithj&#x2F;.[^.]* | more
+
+    -rwxr-xr-x 1 smithj users 896 Mar 10 2011 .profile
+    -rwxr-xr-x 1 smithj users 497 Jan 6 2007 .login
+    -rwxr-xr-x 1 smithj users 886 Jan 6 2007 .something
+
+    If all local interactive user&#39;s initialization files are not group-owned by
+that user&#39;s primary GID, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the group owner of a local interactive user&#39;s files to the group
+found in &quot;&#x2F;etc&#x2F;passwd&quot; for the user. To change the group owner of a local
+interactive user&#39;s home directory, use the following command:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;, and has a primary group of users.
+
+    # chgrp users &#x2F;home&#x2F;smithj&#x2F;.[^.]*</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71923</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that user and group account administration utilities are configured to store
+only encrypted representations of passwords.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000196
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;cat &#x2F;etc&#x2F;libuser.conf | grep -i sha512&#x60; stdout.strip is expected to match &#x2F;^crypt_style &#x3D; sha512$&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71923</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that user and group account administration utilities are configured to store
+only encrypted representations of passwords.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Passwords need to be protected at all times, and encryption is the
+standard method for protecting passwords. If passwords are not encrypted, they
+can be plainly read (i.e., clear text) and easily compromised. Passwords
+encrypted with a weak algorithm are no more protected than if they are kept in
+plain text.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the user and group account administration utilities are configured
+to store only encrypted representations of passwords. The strength of
+encryption that must be used to hash passwords for all accounts is &quot;SHA512&quot;.
+
+    Check that the system is configured to create &quot;SHA512&quot; hashed passwords
+with the following command:
+
+    # grep -i sha512 &#x2F;etc&#x2F;libuser.conf
+
+    crypt_style &#x3D; sha512
+
+    If the &quot;crypt_style&quot; variable is not set to &quot;sha512&quot;, is not in the
+defaults section, is commented out, or does not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to store only SHA512 encrypted
+representations of passwords.
+
+    Add or update the following line in &quot;&#x2F;etc&#x2F;libuser.conf&quot; in the [defaults]
+section:
+
+    crypt_style &#x3D; sha512</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-81007</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Red Hat Enterprise Linux operating systems version 7.2 or newer using
+Unified Extensible Firmware Interface (UEFI) must require authentication upon
+booting into single-user and maintenance modes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000213
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System running BIOS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-81007</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Red Hat Enterprise Linux operating systems version 7.2 or newer using
+Unified Extensible Firmware Interface (UEFI) must require authentication upon
+booting into single-user and maintenance modes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system does not require valid root authentication before it
+boots into single-user or maintenance mode, anyone who invokes single-user or
+maintenance mode is granted privileged access to all files on the system. GRUB
+2 is the default boot loader for RHEL 7 and is designed to require a password
+to boot into single-user mode or make modifications to the boot menu.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For systems that use BIOS, this is Not Applicable.
+
+    For systems that are running a version of RHEL prior to 7.2, this is Not
+Applicable.
+
+    Check to see if an encrypted root password is set. On systems that use
+UEFI, use the following command:
+
+    # grep -iw grub2_password &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;user.cfg
+    GRUB2_PASSWORD&#x3D;grub.pbkdf2.sha512.[password_hash]
+
+    If the root password does not begin with &quot;grub.pbkdf2.sha512&quot;, this is a
+finding.
+
+    Verify that the &quot;root&quot; account is set as the &quot;superusers&quot;:
+
+    # grep -iw &quot;superusers&quot; &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg
+        set superusers&#x3D;&quot;root&quot;
+        export superusers
+
+    If &quot;superusers&quot; is not set to &quot;root&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to encrypt the boot password for root.
+
+    Generate an encrypted grub2 password for root with the following command:
+
+    Note: The hash generated is an example.
+
+    # grub2-setpassword
+    Enter password:
+    Confirm password:
+
+    Edit the &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg file and add or modify the following
+lines in the &quot;### BEGIN &#x2F;etc&#x2F;grub.d&#x2F;01_users ###&quot; section:
+
+    set superusers&#x3D;&quot;root&quot;
+    export superusers</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72119</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the fremovexattr syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fremovexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fremovexattr&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fremovexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;fremovexattr&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72119</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the fremovexattr syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fremovexattr&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw fremovexattr &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S fremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;fremovexattr&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;fremovexattr&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S fremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    -a always,exit -F arch&#x3D;b64 -S fremovexattr -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k perm_mod
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72197</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;passwd.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000018
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001403
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;passwd&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;etc&#x2F;passwd&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;w&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;w&quot;, &quot;a&quot;] is expected to include &quot;a&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72197</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must generate audit
+records for all account creations, modifications, disabling, and termination
+events that affect &#x2F;etc&#x2F;passwd.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), AU-12 c, AC-2 (4), AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system must generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;passwd&quot;.
+
+    Check the auditing rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep &#x2F;etc&#x2F;passwd &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -w &#x2F;etc&#x2F;passwd -p wa -k identity
+
+    If the command does not return a line, or the line is commented out, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records for all account
+creations, modifications, disabling, and termination events that affect
+&quot;&#x2F;etc&#x2F;passwd&quot;.
+
+    Add or update the following rule &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -w &#x2F;etc&#x2F;passwd -p wa -k identity
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72125</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the open syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b32&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EPERM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;open&quot; arch &#x3D;&#x3D; &quot;b64&quot; exit.uniq is expected to include &quot;-EACCES&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72125</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the open syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;open&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw open &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S open -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S open -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;open&quot; syscall, this is a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EPERM&quot;, this is
+a finding.
+
+    If the output does not produce rules containing &quot;-F exit&#x3D;-EACCES&quot;, this
+is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;open&quot; syscall occur.
+
+    Add or update the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S open -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b32 -S open -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open -F exit&#x3D;-EPERM -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    -a always,exit -F arch&#x3D;b64 -S open -F exit&#x3D;-EACCES -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k access
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72161</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the sudo command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;sudo&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;sudo&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72161</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the sudo command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged access commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, AU-3 (1), AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;sudo&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;bin&#x2F;sudo &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;sudo -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;sudo&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;sudo -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72015</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are defined in the &#x2F;etc&#x2F;passwd
+file.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a local interactive user has a home directory defined that does not
+exist, the user may be given access to the &#x2F; directory as the current working
+directory upon logon. This could create a Denial of Service because the user
+would not be able to access their logon configuration files, and it may give
+them visibility to system files they normally would not be able to access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Directory &#x2F;root is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Directory &#x2F;home&#x2F;ec2-user is expected to exist</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72015</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all local interactive user home directories are defined in the &#x2F;etc&#x2F;passwd
+file.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a local interactive user has a home directory defined that does not
+exist, the user may be given access to the &#x2F; directory as the current working
+directory upon logon. This could create a Denial of Service because the user
+would not be able to access their logon configuration files, and it may give
+them visibility to system files they normally would not be able to access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the assigned home directory of all local interactive users on the
+system exists.
+
+    Check the home directory assignment for all local interactive
+non-privileged users on the system with the following command:
+
+    # cut -d: -f 1,3,6 &#x2F;etc&#x2F;passwd | egrep &quot;:[1-4][0-9]{3}&quot;
+
+    smithj:1001:&#x2F;home&#x2F;smithj
+
+    Note: This may miss interactive users that have been assigned a privileged
+UID. Evidence of interactive use may be obtained from a number of log files
+containing system logon information.
+
+    Check that all referenced home directories exist with the following command:
+
+    # pwck -r
+    user &#39;smithj&#39;: directory &#39;&#x2F;home&#x2F;smithj&#39; does not exist
+
+    If any home directories referenced in &quot;&#x2F;etc&#x2F;passwd&quot; are returned as not
+defined, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create home directories to all local interactive users that currently do
+not have a home directory assigned. Use the following commands to create the
+user home directory assigned in &quot;&#x2F;etc&#x2F; passwd&quot;:
+
+    Note: The example will be for the user smithj, who has a home directory of
+&quot;&#x2F;home&#x2F;smithj&quot;, a UID of &quot;smithj&quot;, and a Group Identifier (GID) of
+&quot;users&quot; assigned in &quot;&#x2F;etc&#x2F;passwd&quot;.
+
+    # mkdir &#x2F;home&#x2F;smithj
+    # chown smithj &#x2F;home&#x2F;smithj
+    # chgrp users &#x2F;home&#x2F;smithj
+    # chmod 0750 &#x2F;home&#x2F;smithj</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72293</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not send Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages contain
+information from the system&#39;s route table, possibly revealing portions of the
+network topology.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Kernel Parameter net.ipv4.conf.all.send_redirects value is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72293</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not send Internet
+Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ICMP redirect messages are used by routers to inform hosts that a more
+direct route exists for a particular destination. These messages contain
+information from the system&#39;s route table, possibly revealing portions of the
+network topology.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the system does not send IPv4 ICMP redirect messages.
+
+    # grep &#39;net.ipv4.conf.all.send_redirects&#39; &#x2F;etc&#x2F;sysctl.conf &#x2F;etc&#x2F;sysctl.d&#x2F;*
+
+    If &quot;net.ipv4.conf.all.send_redirects&quot; is not configured in the
+&#x2F;etc&#x2F;sysctl.conf file or in the &#x2F;etc&#x2F;sysctl.d&#x2F; directory, is commented out or
+does not have a value of &quot;0&quot;, this is a finding.
+
+    Check that the operating system implements the &quot;all send_redirects&quot;
+variables with the following command:
+
+    # &#x2F;sbin&#x2F;sysctl -a | grep &#39;net.ipv4.conf.all.send_redirects&#39;
+
+    net.ipv4.conf.all.send_redirects &#x3D; 0
+
+    If the returned line does not have a value of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the system to not allow interfaces to perform IPv4 ICMP
+redirects.
+
+    Set the system to the required kernel parameter by adding the following
+line to &quot;&#x2F;etc&#x2F;sysctl.conf&quot; or a configuration file in the &#x2F;etc&#x2F;sysctl.d&#x2F;
+directory (or modify the line to have the required value):
+
+    net.ipv4.conf.all.send_redirects &#x3D; 0
+
+    Issue the following command to make the changes take effect:
+
+    # sysctl --system</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72141</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the setfiles command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;setfiles&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;setfiles&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72141</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the setfiles command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setfiles&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -iw &#x2F;usr&#x2F;sbin&#x2F;setfiles &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;setfiles -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-priv_change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;setfiles&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;setfiles -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295
+-k privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72053</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the cron.allow file, if it exists, is owned by root.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the owner of the &quot;cron.allow&quot; file is not set to root, the
+possibility exists for an unauthorized user to view or to edit sensitive
+information.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;etc&#x2F;cron.allow is expected to be owned by &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72053</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the cron.allow file, if it exists, is owned by root.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the owner of the &quot;cron.allow&quot; file is not set to root, the
+possibility exists for an unauthorized user to view or to edit sensitive
+information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that the &quot;cron.allow&quot; file is owned by root.
+
+    Check the owner of the &quot;cron.allow&quot; file with the following command:
+
+    # ls -al &#x2F;etc&#x2F;cron.allow
+    -rw------- 1 root root 6 Mar  5  2011 &#x2F;etc&#x2F;cron.allow
+
+    If the &quot;cron.allow&quot; file exists and has an owner other than root, this is
+a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Set the owner on the &quot;&#x2F;etc&#x2F;cron.allow&quot; file to root with the following
+command:
+
+    # chown root &#x2F;etc&#x2F;cron.allow</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71897</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must have the screen
+package installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          :  A session time-out lock is a temporary action taken when a user
+stops work and moves away from the immediate physical vicinity of the
+information system but does not log out because of the temporary nature of the
+absence. Rather than relying on the user to manually lock their operating
+system session prior to vacating the vicinity, operating systems need to be
+able to identify when a user&#39;s session has idled and take action to initiate
+the session lock.
+
+    The screen and tmux packages allow for a session lock to be implemented and
+configured.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package screen is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71897</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must have the screen
+package installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">:  A session time-out lock is a temporary action taken when a user
+stops work and moves away from the immediate physical vicinity of the
+information system but does not log out because of the temporary nature of the
+absence. Rather than relying on the user to manually lock their operating
+system session prior to vacating the vicinity, operating systems need to be
+able to identify when a user&#39;s session has idled and take action to initiate
+the session lock.
+
+    The screen and tmux packages allow for a session lock to be implemented and
+configured.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system has the screen package installed.
+
+    Check to see if the screen package is installed with the following command:
+
+    # yum list installed screen
+    screen-4.3.1-3-x86_64.rpm
+
+    If the screen package is not installed, check to see if the tmux package is
+installed with the following command:
+
+    #yum list installed tmux
+    tmux-1.8-4.el7.x86_64.rpm
+
+    If either the screen package or the tmux package is not installed, this is
+a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Install the screen package to allow the initiation of a session lock after
+a 15-minute period of inactivity.
+
+    Install the screen program (if it is not on the system) with the following
+command:
+
+    # yum install screen
+
+    OR
+
+    Install the tmux program (if it is not on the system) with the following
+command:
+
+    #yum install tmux</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72303</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that remote X connections for interactive users are encrypted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Open X displays allow an attacker to capture keystrokes and execute
+commands remotely.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration X11Forwarding is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72303</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that remote X connections for interactive users are encrypted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Open X displays allow an attacker to capture keystrokes and execute
+commands remotely.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify remote X connections for interactive users are encrypted.
+
+    Check that remote X connections are encrypted with the following command:
+
+    # grep -i x11forwarding &#x2F;etc&#x2F;ssh&#x2F;sshd_config | grep -v &quot;^#&quot;
+
+    X11Forwarding yes
+
+    If the &quot;X11Forwarding&quot; keyword is set to &quot;no&quot; or is missing, this is a
+finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure SSH to encrypt connections for interactive users.
+
+    Edit the &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot; file to uncomment or add the line for the
+&quot;X11Forwarding&quot; keyword and set its value to &quot;yes&quot; (this file may be named
+differently or be in a different location if using a version of SSH that is
+provided by a third-party vendor):
+
+    X11Forwarding yes
+
+    The SSH service must be restarted for changes to take effect:
+
+    # systemctl restart sshd</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71979</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent the
+installation of software, patches, service packs, device drivers, or operating
+system components of local packages without verification they have been
+digitally signed using a certificate that is issued by a Certificate Authority
+(CA) that is recognized and approved by the organization.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001749
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Changes to any software components can have significant effects on the
+overall security of the operating system. This requirement ensures the software
+has not been tampered with and that it has been provided by a trusted vendor.
+
+    Accordingly, patches, service packs, device drivers, or operating system
+components must be signed with a certificate recognized and approved by the
+organization.
+
+    Verifying the authenticity of the software prior to installation validates
+the integrity of the patch or upgrade received from a vendor. This verifies the
+software has not been tampered with and that it has been provided by a trusted
+vendor. Self-signed certificates are disallowed by this requirement. The
+operating system should not have to verify the software again. This requirement
+does not mandate DoD certificates for this purpose; however, the certificate
+used to verify the software must be from an approved CA.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">INI &#x2F;etc&#x2F;yum.conf main.localpkg_gpgcheck </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71979</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent the
+installation of software, patches, service packs, device drivers, or operating
+system components of local packages without verification they have been
+digitally signed using a certificate that is issued by a Certificate Authority
+(CA) that is recognized and approved by the organization.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Changes to any software components can have significant effects on the
+overall security of the operating system. This requirement ensures the software
+has not been tampered with and that it has been provided by a trusted vendor.
+
+    Accordingly, patches, service packs, device drivers, or operating system
+components must be signed with a certificate recognized and approved by the
+organization.
+
+    Verifying the authenticity of the software prior to installation validates
+the integrity of the patch or upgrade received from a vendor. This verifies the
+software has not been tampered with and that it has been provided by a trusted
+vendor. Self-signed certificates are disallowed by this requirement. The
+operating system should not have to verify the software again. This requirement
+does not mandate DoD certificates for this purpose; however, the certificate
+used to verify the software must be from an approved CA.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system prevents the installation of patches, service
+packs, device drivers, or operating system components of local packages without
+verification that they have been digitally signed using a certificate that is
+recognized and approved by the organization.
+
+    Check that yum verifies the signature of local packages prior to install
+with the following command:
+
+    # grep localpkg_gpgcheck &#x2F;etc&#x2F;yum.conf
+    localpkg_gpgcheck&#x3D;1
+
+    If &quot;localpkg_gpgcheck&quot; is not set to &quot;1&quot;, or if options are missing or
+commented out, ask the System Administrator how the signatures of local
+packages and other operating system components are verified.
+
+    If there is no process to validate the signatures of local packages that is
+approved by the organization, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to verify the signature of local packages
+prior to install by setting the following option in the &quot;&#x2F;etc&#x2F;yum.conf&quot; file:
+
+    localpkg_gpgcheck&#x3D;1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71971</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent
+non-privileged users from executing privileged functions to include disabling,
+circumventing, or altering implemented security safeguards&#x2F;countermeasures.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-6 (10)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002235
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Preventing non-privileged users from executing privileged functions
+mitigates the risk that unauthorized individuals or processes may gain
+unnecessary access to information or privileges.
+
+    Privileged functions include, for example, establishing accounts,
+performing system integrity checks, or administering cryptographic key
+management activities. Non-privileged users are individuals who do not possess
+appropriate authorizations. Circumventing intrusion detection and prevention
+mechanisms or malicious code protection mechanisms are examples of privileged
+functions that require protection from non-privileged users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;selinuxenabled&#x60; exist? is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;selinuxenabled&#x60; exit_status is expected to eq 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">seusers is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SELinux login __default__ is expected to be in &quot;user_u&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;unconfined_u&#x60; to be in the list: &#x60;[&quot;user_u&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71971</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent
+non-privileged users from executing privileged functions to include disabling,
+circumventing, or altering implemented security safeguards&#x2F;countermeasures.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Preventing non-privileged users from executing privileged functions
+mitigates the risk that unauthorized individuals or processes may gain
+unnecessary access to information or privileges.
+
+    Privileged functions include, for example, establishing accounts,
+performing system integrity checks, or administering cryptographic key
+management activities. Non-privileged users are individuals who do not possess
+appropriate authorizations. Circumventing intrusion detection and prevention
+mechanisms or malicious code protection mechanisms are examples of privileged
+functions that require protection from non-privileged users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), AC-6 (10), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If an HBSS or HIPS is active on the system, this is Not Applicable.
+
+    Verify the operating system prevents non-privileged users from executing
+privileged functions to include disabling, circumventing, or altering
+implemented security safeguards&#x2F;countermeasures.
+
+    Get a list of authorized users (other than System Administrator and guest
+accounts) for the system.
+
+    Check the list against the system by using the following command:
+
+    # semanage login -l | more
+    Login Name SELinux User MLS&#x2F;MCS Range Service
+    __default__ user_u s0-s0:c0.c1023 *
+    root unconfined_u s0-s0:c0.c1023 *
+    system_u system_u s0-s0:c0.c1023 *
+    joe staff_u s0-s0:c0.c1023 *
+
+    All administrators must be mapped to the &quot;sysadm_u&quot; or &quot;staff_u&quot; users
+role.
+
+    All authorized non-administrative users must be mapped to the &quot;user_u&quot;
+role.
+
+    If they are not mapped in this way, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to prevent non-privileged users from
+executing privileged functions to include disabling, circumventing, or altering
+implemented security safeguards&#x2F;countermeasures.
+
+    Use the following command to map a new user to the &quot;sysdam_u&quot; role:
+
+    #semanage login -a -s sysadm_u &lt;username&gt;
+
+    Use the following command to map an existing user to the &quot;sysdam_u&quot; role:
+
+    #semanage login -m -s sysadm_u &lt;username&gt;
+
+    Use the following command to map a new user to the &quot;staff_u&quot; role:
+
+    #semanage login -a -s staff_u &lt;username&gt;
+
+    Use the following command to map an existing user to the &quot;staff_u&quot; role:
+
+    #semanage login -m -s staff_u &lt;username&gt;
+
+    Use the following command to map a new user to the &quot;user_u&quot; role:
+
+    # semanage login -a -s user_u &lt;username&gt;
+
+    Use the following command to map an existing user to the &quot;user_u&quot; role:
+
+    # semanage login -m -s user_u &lt;username&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71977</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must prevent the
+installation of software, patches, service packs, device drivers, or operating
+system components from a repository without verification they have been
+digitally signed using a certificate that is issued by a Certificate Authority
+(CA) that is recognized and approved by the organization.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001749
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Changes to any software components can have significant effects on the
+overall security of the operating system. This requirement ensures the software
+has not been tampered with and that it has been provided by a trusted vendor.
+
+    Accordingly, patches, service packs, device drivers, or operating system
+components must be signed with a certificate recognized and approved by the
+organization.
+
+    Verifying the authenticity of the software prior to installation validates
+the integrity of the patch or upgrade received from a vendor. This verifies the
+software has not been tampered with and that it has been provided by a trusted
+vendor. Self-signed certificates are disallowed by this requirement. The
+operating system should not have to verify the software again. This requirement
+does not mandate DoD certificates for this purpose; however, the certificate
+used to verify the software must be from an approved CA.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">INI &#x2F;etc&#x2F;yum.conf main.gpgcheck is expected to cmp &#x3D;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71977</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must prevent the
+installation of software, patches, service packs, device drivers, or operating
+system components from a repository without verification they have been
+digitally signed using a certificate that is issued by a Certificate Authority
+(CA) that is recognized and approved by the organization.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Changes to any software components can have significant effects on the
+overall security of the operating system. This requirement ensures the software
+has not been tampered with and that it has been provided by a trusted vendor.
+
+    Accordingly, patches, service packs, device drivers, or operating system
+components must be signed with a certificate recognized and approved by the
+organization.
+
+    Verifying the authenticity of the software prior to installation validates
+the integrity of the patch or upgrade received from a vendor. This verifies the
+software has not been tampered with and that it has been provided by a trusted
+vendor. Self-signed certificates are disallowed by this requirement. The
+operating system should not have to verify the software again. This requirement
+does not mandate DoD certificates for this purpose; however, the certificate
+used to verify the software must be from an approved CA.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system prevents the installation of patches, service
+packs, device drivers, or operating system components from a repository without
+verification that they have been digitally signed using a certificate that is
+recognized and approved by the organization.
+
+    Check that yum verifies the signature of packages from a repository prior
+to install with the following command:
+
+    # grep gpgcheck &#x2F;etc&#x2F;yum.conf
+    gpgcheck&#x3D;1
+
+    If &quot;gpgcheck&quot; is not set to &quot;1&quot;, or if options are missing or commented
+out, ask the System Administrator how the certificates for patches and other
+operating system components are verified.
+
+    If there is no process to validate certificates that is approved by the
+organization, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to verify the signature of packages from a
+repository prior to install by setting the following option in the
+&quot;&#x2F;etc&#x2F;yum.conf&quot; file:
+
+    gpgcheck&#x3D;1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72273</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must enable an
+application firewall, if available.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Firewalls protect computers from network attacks by blocking or
+limiting access to open network ports. Application firewalls limit which
+applications are allowed to communicate over the network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package firewalld is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package iptables is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service firewalld.service is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72273</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must enable an
+application firewall, if available.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Firewalls protect computers from network attacks by blocking or
+limiting access to open network ports. Application firewalls limit which
+applications are allowed to communicate over the network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system enabled an application firewall.
+
+    Check to see if &quot;firewalld&quot; is installed with the following command:
+
+    # yum list installed firewalld
+    firewalld-0.3.9-11.el7.noarch.rpm
+
+    If the &quot;firewalld&quot; package is not installed, ask the System Administrator
+if another firewall application (such as iptables) is installed.
+
+    If an application firewall is not installed, this is a finding.
+
+    Check to see if the firewall is loaded and active with the following
+command:
+
+    # systemctl status firewalld
+    firewalld.service - firewalld - dynamic firewall daemon
+
+       Loaded: loaded (&#x2F;usr&#x2F;lib&#x2F;systemd&#x2F;system&#x2F;firewalld.service; enabled)
+       Active: active (running) since Tue 2014-06-17 11:14:49 CEST; 5 days ago
+
+    If &quot;firewalld&quot; does not show a status of &quot;loaded&quot; and &quot;active&quot;, this
+is a finding.
+
+    Check the state of the firewall:
+
+    # firewall-cmd --state
+    running
+
+    If &quot;firewalld&quot; does not show a state of &quot;running&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Ensure the operating system&#39;s application firewall is enabled.
+
+    Install the &quot;firewalld&quot; package, if it is not on the system, with the
+following command:
+
+    # yum install firewalld
+
+    Start the firewall via &quot;systemctl&quot; with the following command:
+
+    # systemctl start firewalld</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72299</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must not have a File
+Transfer Protocol (FTP) server package installed unless needed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The FTP service provides an unencrypted remote access that does not
+provide for the confidentiality and integrity of user passwords or the remote
+session. If a privileged user were to log on using this service, the privileged
+user password could be compromised. SSH or other encrypted file transfer
+methods must be used in place of this service.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package vsftpd is expected not to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72299</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must not have a File
+Transfer Protocol (FTP) server package installed unless needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The FTP service provides an unencrypted remote access that does not
+provide for the confidentiality and integrity of user passwords or the remote
+session. If a privileged user were to log on using this service, the privileged
+user password could be compromised. SSH or other encrypted file transfer
+methods must be used in place of this service.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify an FTP server has not been installed on the system.
+
+    Check to see if an FTP server has been installed with the following
+commands:
+
+    # yum list installed vsftpd
+
+     vsftpd-3.0.2.el7.x86_64.rpm
+
+    If &quot;vsftpd&quot; is installed and is not documented with the Information
+System Security Officer (ISSO) as an operational requirement, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document the &quot;vsftpd&quot; package with the ISSO as an operational requirement
+or remove it from the system with the following command:
+
+    # yum remove vsftpd</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72177</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the postqueue command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged postfix commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;postqueue&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;sbin&#x2F;postqueue&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72177</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the postqueue command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Reconstruction of harmful events or forensic analysis is not possible
+if audit records do not contain enough information.
+
+    At a minimum, the organization must audit the full-text recording of
+privileged postfix commands. The organization must maintain audit trails in
+sufficient detail to reconstruct events to determine the cause and impact of
+compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;postqueue&quot; command occur.
+
+    Check that the following system call is being audited by performing the
+following command to check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot;:
+
+    # grep -iw &#x2F;usr&#x2F;sbin&#x2F;postqueue &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;postqueue -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-postfix
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;postqueue&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;sbin&#x2F;postqueue -F auid&gt;&#x3D;1000 -F
+auid!&#x3D;4294967295 -k privileged-postfix
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72067</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must implement NIST
+FIPS-validated cryptography for the following: to provision digital signatures,
+to generate cryptographic hashes, and to protect data requiring data-at-rest
+protections in accordance with applicable federal laws, Executive Orders,
+directives, policies, regulations, and standards.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000068
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001199
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002476
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of weak or untested encryption algorithms undermines the purposes
+of using encryption to protect data. The operating system must implement
+cryptographic modules adhering to the higher standards approved by the federal
+government since this provides assurance they have been tested and validated.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">System Package dracut-fips is expected to be installed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto  is expected to match &#x2F;\bfips&#x3D;1\b&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto &quot; to match &#x2F;\bfips&#x3D;1\b&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;\bfips&#x3D;1\b&#x2F;
++&quot;ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto &quot;
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto  is expected to match &#x2F;\bfips&#x3D;1\b&#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto &quot; to match &#x2F;\bfips&#x3D;1\b&#x2F;
+Diff:
+@@ -1,2 +1,2 @@
+-&#x2F;\bfips&#x3D;1\b&#x2F;
++&quot;ro console&#x3D;ttyS0,115200n8 console&#x3D;tty0 net.ifnames&#x3D;0 rd.blacklist&#x3D;nouveau nvme_core.io_timeout&#x3D;4294967295 crashkernel&#x3D;auto &quot;
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File &#x2F;proc&#x2F;sys&#x2F;crypto&#x2F;fips_enabled content.strip is expected to cmp &#x3D;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72067</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must implement NIST
+FIPS-validated cryptography for the following: to provision digital signatures,
+to generate cryptographic hashes, and to protect data requiring data-at-rest
+protections in accordance with applicable federal laws, Executive Orders,
+directives, policies, regulations, and standards.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of weak or untested encryption algorithms undermines the purposes
+of using encryption to protect data. The operating system must implement
+cryptographic modules adhering to the higher standards approved by the federal
+government since this provides assurance they have been tested and validated.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2), SC-28, SC-13, SC-28 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system implements DoD-approved encryption to protect
+the confidentiality of remote access sessions.
+
+    Check to see if the &quot;dracut-fips&quot; package is installed with the following
+command:
+
+    # yum list installed dracut-fips
+
+    dracut-fips-033-360.el7_2.x86_64.rpm
+
+    If a &quot;dracut-fips&quot; package is installed, check to see if the kernel
+command line is configured to use FIPS mode with the following command:
+
+    Note: GRUB 2 reads its configuration from the &quot;&#x2F;boot&#x2F;grub2&#x2F;grub.cfg&quot; file
+on traditional BIOS-based machines and from the
+&quot;&#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg&quot; file on UEFI machines.
+
+    # grep fips &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+    &#x2F;vmlinuz-3.8.0-0.40.el7.x86_64 root&#x3D;&#x2F;dev&#x2F;mapper&#x2F;rhel-root ro rd.md&#x3D;0
+rd.dm&#x3D;0 rd.lvm.lv&#x3D;rhel&#x2F;swap crashkernel&#x3D;auto rd.luks&#x3D;0 vconsole.keymap&#x3D;us
+rd.lvm.lv&#x3D;rhel&#x2F;root rhgb fips&#x3D;1 quiet
+
+    If the kernel command line is configured to use FIPS mode, check to see if
+the system is in FIPS mode with the following command:
+
+    # cat &#x2F;proc&#x2F;sys&#x2F;crypto&#x2F;fips_enabled
+    1
+
+    If a &quot;dracut-fips&quot; package is not installed, the kernel command line does
+not have a fips entry, or the system has a value of &quot;0&quot; for &quot;fips_enabled&quot;
+in &quot;&#x2F;proc&#x2F;sys&#x2F;crypto&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to implement DoD-approved encryption by
+installing the dracut-fips package.
+
+    To enable strict FIPS compliance, the fips&#x3D;1 kernel option needs to be
+added to the kernel command line during system installation so key generation
+is done with FIPS-approved algorithms and continuous monitoring tests in place.
+
+    Configure the operating system to implement DoD-approved encryption by
+following the steps below:
+
+    The fips&#x3D;1 kernel option needs to be added to the kernel command line
+during system installation so that key generation is done with FIPS-approved
+algorithms and continuous monitoring tests in place. Users should also ensure
+that the system has plenty of entropy during the installation process by moving
+the mouse around, or if no mouse is available, ensuring that many keystrokes
+are typed. The recommended amount of keystrokes is 256 and more. Less than 256
+keystrokes may generate a non-unique key.
+
+    Install the dracut-fips package with the following command:
+
+    # yum install dracut-fips
+
+    Recreate the &quot;initramfs&quot; file with the following command:
+
+    Note: This command will overwrite the existing &quot;initramfs&quot; file.
+
+    # dracut -f
+
+    Modify the kernel command line of the current kernel in the &quot;grub.cfg&quot;
+file by adding the following option to the GRUB_CMDLINE_LINUX key in the
+&quot;&#x2F;etc&#x2F;default&#x2F;grub&quot; file and then rebuild the &quot;grub.cfg&quot; file:
+
+    fips&#x3D;1
+
+    Changes to &quot;&#x2F;etc&#x2F;default&#x2F;grub&quot; require rebuilding the &quot;grub.cfg&quot; file
+as follows:
+
+    On BIOS-based machines, use the following command:
+
+    # grub2-mkconfig -o &#x2F;boot&#x2F;grub2&#x2F;grub.cfg
+
+    On UEFI-based machines, use the following command:
+
+    # grub2-mkconfig -o &#x2F;boot&#x2F;efi&#x2F;EFI&#x2F;redhat&#x2F;grub.cfg
+
+    If &#x2F;boot or &#x2F;boot&#x2F;efi reside on separate partitions, the kernel parameter
+boot&#x3D;&lt;partition of &#x2F;boot or &#x2F;boot&#x2F;efi&gt; must be added to the kernel command
+line. You can identify a partition by running the df &#x2F;boot or df &#x2F;boot&#x2F;efi
+command:
+
+    # df &#x2F;boot
+    Filesystem 1K-blocks Used Available Use% Mounted on
+    &#x2F;dev&#x2F;sda1 495844 53780 416464 12% &#x2F;boot
+
+    To ensure the &quot;boot&#x3D;&quot; configuration option will work even if device
+naming changes occur between boots, identify the universally unique identifier
+(UUID) of the partition with the following command:
+
+    # blkid &#x2F;dev&#x2F;sda1
+    &#x2F;dev&#x2F;sda1: UUID&#x3D;&quot;05c000f1-a213-759e-c7a2-f11b7424c797&quot; TYPE&#x3D;&quot;ext4&quot;
+
+    For the example above, append the following string to the kernel command
+line:
+
+    boot&#x3D;UUID&#x3D;05c000f1-a213-759e-c7a2-f11b7424c797
+
+    Reboot the system for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72139</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the chcon command.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chcon&quot; permissions is expected not to cmp &#x3D;&#x3D; []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with file &#x3D;&#x3D; &quot;&#x2F;usr&#x2F;bin&#x2F;chcon&quot; action is expected not to include &quot;never&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;x&quot;] is expected to include &quot;x&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72139</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the chcon command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without generating audit records that are specific to the security and
+mission needs of the organization, it would be difficult to establish,
+correlate, and investigate the events relating to an incident or identify those
+responsible for one.
+
+    Audit records can be generated from various components within the
+information system (e.g., module or policy filter).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chcon&quot; command occur.
+
+    Check the file system rule in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the following
+command:
+
+    # grep -i &#x2F;usr&#x2F;bin&#x2F;chcon &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chcon -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    If the command does not return any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;chcon&quot; command occur.
+
+    Add or update the following rule in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F path&#x3D;&#x2F;usr&#x2F;bin&#x2F;chcon -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+privileged-priv_change
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72275</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must display the date
+and time of the last successful account logon upon logon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Providing users with feedback on when account accesses last occurred
+facilitates user recognition and reporting of unauthorized account use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PAM Config[&#x2F;etc&#x2F;pam.d&#x2F;postlogin] lines is expected to include session .* pam_lastlog.so showfailed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration PrintLastLog is expected to cmp &#x3D;&#x3D; &quot;yes&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72275</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must display the date
+and time of the last successful account logon upon logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Providing users with feedback on when account accesses last occurred
+facilitates user recognition and reporting of unauthorized account use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify users are provided with feedback on when account accesses last
+occurred.
+
+    Check that &quot;pam_lastlog&quot; is used and not silent with the following
+command:
+
+    # grep pam_lastlog &#x2F;etc&#x2F;pam.d&#x2F;postlogin
+    session required pam_lastlog.so showfailed
+
+    If &quot;pam_lastlog&quot; is missing from &quot;&#x2F;etc&#x2F;pam.d&#x2F;postlogin&quot; file, or the
+silent option is present, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to provide users with feedback on when
+account accesses last occurred by setting the required configuration options in
+&quot;&#x2F;etc&#x2F;pam.d&#x2F;postlogin&quot;.
+
+    Add the following line to the top of &quot;&#x2F;etc&#x2F;pam.d&#x2F;postlogin&quot;:
+
+    session required pam_lastlog.so showfailed</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-71939</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using an empty password.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000766
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration PermitEmptyPasswords is expected to eq &quot;no&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-71939</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that the SSH daemon does not allow authentication using an empty password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Configuring this setting for the SSH daemon provides additional
+assurance that remote logon via SSH will require a password, even in the event
+of misconfiguration elsewhere.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">To determine how the SSH daemon&#39;s &quot;PermitEmptyPasswords&quot; option is set,
+run the following command:
+
+    # grep -i PermitEmptyPasswords &#x2F;etc&#x2F;ssh&#x2F;sshd_config
+    PermitEmptyPasswords no
+
+    If no line, a commented line, or a line indicating the value &quot;no&quot; is
+returned, the required value is set.
+
+    If the required value is not set, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To explicitly disallow remote logon from accounts with empty passwords, add
+or correct the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+    PermitEmptyPasswords no
+
+    The SSH service must be restarted for changes to take effect.  Any accounts
+with empty passwords should be disabled immediately, and PAM configuration
+should prevent users from being able to assign themselves empty passwords.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72007</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories have a valid owner.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unowned files and directories may be unintentionally inherited if a
+user is assigned the same User Identifier &quot;UID&quot; as the UID of the un-owned
+files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype xfs -nouser&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype ext3 -nouser&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype ext2 -nouser&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype ext4 -nouser&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype msdos -nouser&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype vfat -nouser&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype btrfs -nouser&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Command: &#x60;find &#x2F; -xautofs -fstype fuseblk -nouser&#x60; stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72007</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all files and directories have a valid owner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unowned files and directories may be unintentionally inherited if a
+user is assigned the same User Identifier &quot;UID&quot; as the UID of the un-owned
+files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify all files and directories on the system have a valid owner.
+
+    Check the owner of all files and directories with the following command:
+
+    Note: The value after -fstype must be replaced with the filesystem type.
+XFS is used as an example.
+
+    # find &#x2F; -fstype xfs -nouser
+
+    If any files on the system do not have an assigned owner, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Either remove all files and directories from the system that do not have a
+valid user, or assign a valid user to all unowned files and directories on the
+system with the &quot;chown&quot; command:
+
+    # chown &lt;user&gt; &lt;file&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72203</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must audit all uses of
+the rmdir syscall.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002884
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;rmdir&quot; arch &#x3D;&#x3D; &quot;b32&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;rmdir&quot; arch &#x3D;&#x3D; &quot;b32&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;rmdir&quot; arch &#x3D;&#x3D; &quot;b64&quot; action.uniq is expected to eq [&quot;always&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Auditd Rules with syscall &#x3D;&#x3D; &quot;rmdir&quot; arch &#x3D;&#x3D; &quot;b64&quot; list.uniq is expected to eq [&quot;exit&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72203</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must audit all uses of
+the rmdir syscall.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the system is not configured to audit certain activities and write
+them to an audit log, it is more difficult to detect and track system
+compromises and damages incurred during a system compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, MA-4 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the operating system generates audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;rmdir&quot; syscall occur.
+
+    Check the file system rules in &quot;&#x2F;etc&#x2F;audit&#x2F;audit.rules&quot; with the
+following commands:
+
+    # grep -iw rmdir &#x2F;etc&#x2F;audit&#x2F;audit.rules
+
+    -a always,exit -F arch&#x3D;b32 -S rmdir -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S rmdir -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    If both the &quot;b32&quot; and &quot;b64&quot; audit rules are not defined for the
+&quot;rmdir&quot; syscall, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the operating system to generate audit records when
+successful&#x2F;unsuccessful attempts to use the &quot;rmdir&quot; syscall occur.
+
+    Add the following rules in &quot;&#x2F;etc&#x2F;audit&#x2F;rules.d&#x2F;audit.rules&quot;:
+
+    -a always,exit -F arch&#x3D;b32 -S rmdir -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    -a always,exit -F arch&#x3D;b64 -S rmdir -F auid&gt;&#x3D;1000 -F auid!&#x3D;4294967295 -k
+delete
+
+    The audit daemon must be restarted for the changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-72039</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Red Hat Enterprise Linux operating system must be configured so
+that all system device files are correctly labeled to prevent unauthorized
+modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 f
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-11 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000318
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000368
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001812
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001814
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If an unauthorized or modified device is allowed to exist on the
+system, there is the possibility the system may perform unintended or
+unauthorized operations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">#&lt;Set: {}&gt; length is expected to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-72039</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Red Hat Enterprise Linux operating system must be configured so
+that all system device files are correctly labeled to prevent unauthorized
+modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If an unauthorized or modified device is allowed to exist on the
+system, there is the possibility the system may perform unintended or
+unauthorized operations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-3 f, CM-6 c, CM-11 (2), CM-5 (1), CM-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that all system device files are correctly labeled to prevent
+unauthorized modification.
+
+    List all device files on the system that are incorrectly labeled with the
+following commands:
+
+    Note: Device files are normally found under &quot;&#x2F;dev&quot;, but applications may
+place device files in other directories and may necessitate a search of the
+entire system.
+
+    #find &#x2F;dev -context *:device_t:* \( -type c -o -type b \) -printf &quot;%p %Z    &quot;
+
+    #find &#x2F;dev -context *:unlabeled_t:* \( -type c -o -type b \) -printf &quot;%p
+%Z    &quot;
+
+    Note: There are device files, such as &quot;&#x2F;dev&#x2F;vmci&quot;, that are used when the
+operating system is a host virtual machine. They will not be owned by a user on
+the system and require the &quot;device_t&quot; label to operate. These device files
+are not a finding.
+
+    If there is output from either of these commands, other than already noted,
+this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Run the following command to determine which package owns the device file:
+
+    # rpm -qf &lt;filename&gt;
+
+    The package can be reinstalled from a yum repository using the command:
+
+    # sudo yum reinstall &lt;packagename&gt;
+
+    Alternatively, the package can be reinstalled from trusted media using the
+command:
+
+    # sudo rpm -Uvh &lt;packagename&gt;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+      </div>
+      <!-- Result set accordion -->
+      <!-- Generate a result set accordion for every result set -->
+      <!-- Outer accordion -->
+      <div
+        class="mx-2 rounded-t-xl border border-gray-300 bg-white print:hidden"
+        id="1"
+      >
+        <div class="mb-0">
+          <!-- Button def -->
+          <button
+            class="group flex w-full items-center rounded-t-xl bg-white px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+            type="button"
+            data-te-collapse-init
+            data-te-target="#collapseable-1"
+            aria-expanded="true"
+            aria-controls="collapseable-1"
+          >
+            vSphere8_report.json
+            <span
+              class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+            >
+              <svg
+                xmlns="http://www.w3.org/2000/svg"
+                fill="none"
+                viewBox="0 0 24 24"
+                stroke-width="1.5"
+                stroke="currentColor"
+                class="h-6 w-6"
+                role="img"
+                aria-hidden="true"
+              >
+                <path
+                  stroke-linecap="round"
+                  stroke-linejoin="round"
+                  d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                />
+              </svg>
+            </span>
+          </button>
+        </div>
+
+        <!-- Inner accordion -->
+        <!-- Accordion body def -->
+        <div
+          id="collapseable-1"
+          class="multi-collapse-outer my-4"
+          data-te-collapse-item
+          data-te-collapse-show
+        >
+          <!-- Result header -->
+          <div class="mx-4 rounded-t-xl border border-gray-300 bg-gray-100">
+            <div class="mx-6 my-4 flex w-full shrink">
+              <!-- Status indicator -->
+              <!-- Headers eventually collapse under status column -->
+              <span class="grid w-36 grid-cols-1 sm:w-40">
+                <!-- ID -->
+                <span class="sm:hidden">ID</span>
+                <hr class="h-1 w-32 bg-gray-300 sm:hidden" />
+                <!-- Status indicator -->
+                <span>Status</span>
+                <hr class="h-1 w-32 bg-gray-300 lg:hidden" />
+                <!-- Severity indicator -->
+                <span class="lg:hidden">Severity</span>
+                <hr class="h-1 w-32 bg-gray-300 lg:hidden" />
+                <!-- Control tags -->
+                <span class="lg:hidden">800-53 Controls & CCIs</span>
+              </span>
+              <!-- ID -->
+              <span class="hidden w-28 pl-4 sm:block lg:w-32">ID</span>
+              <!-- Severity indicator -->
+              <span class="hidden w-28 pl-3 lg:block">Severity</span>
+              <!-- Title -->
+              <span class="w-1/2 pl-8 sm:block lg:pl-9">Title</span>
+              <!-- Control tags -->
+              <span class="hidden lg:block lg:w-36 xl:w-52">
+                800-53 Controls & CCIs
+              </span>
+            </div>
+          </div>
+
+          <!-- Generate a result accordion for every result -->
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000005"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000005"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000005</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000005
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000005"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000005"
+            >
+              <!-- Result description -->
+              By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Once the configured number of attempts is reached, the account is locked by the ESXi host.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountLockFailures | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 3
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000005</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Once the configured number of attempts is reached, the account is locked by the ESXi host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.AccountLockFailures&quot; value and verify it is set to &quot;3&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountLockFailures
+
+If the &quot;Security.AccountLockFailures&quot; setting is set to a value other than &quot;3&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.AccountLockFailures&quot; value and configure it to &quot;3&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountLockFailures | Set-AdvancedSetting -Value 3</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000006"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000006"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000006</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000006
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000006"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000006"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000006</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a, AC-8 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Annotations.WelcomeMessage&quot; value and verify it contains the standard mandatory DOD notice and consent banner.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage
+
+If the &quot;Annotations.WelcomeMessage&quot; setting does not contain the standard mandatory DOD notice and consent banner, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Annotations.WelcomeMessage&quot; value and set it to the following. Click &quot;OK&quot;.
+
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{hostname} , {ip}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{esxproduct} {esxversion}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{memory} RAM{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:white}	{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By      {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  using this IS (which includes any device attached to this IS), you consent to the following conditions:                 {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited     {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law      {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          enforcement (LE), and counterintelligence (CI) investigations.                                                  {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       At any time, the USG may inspect and seize data stored on this IS.                                              {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       Communications using, or data stored on, this IS are not private, are subject to routine monitoring,            {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          interception, and search, and may be disclosed or used for any USG-authorized purpose.                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not     {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          for your personal benefit or privacy.                                                                           {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching    {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          or monitoring of the content of privileged communications, or work product, related to personal representation  {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work       {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          product are private and confidential. See User Agreement for details.                                           {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:dark-grey}{color:white}  &lt;F2&gt; Accept Conditions and Customize System &#x2F; View Logs{&#x2F;align}{align:right}&lt;F12&gt; Accept Conditions and Shut Down&#x2F;Restart  {bgcolor:black} {&#x2F;color}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Set-AdvancedSetting -Value &quot;&lt;Banner text above&gt;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000008"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000008"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000008</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000008
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable lockdown mode.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000008"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000008"
+            >
+              <!-- Result description -->
+              Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCenter are always enforced and users cannot bypass them by logging on to a host directly.
+
+By forcing all interaction to occur through vCenter Server, the risk of someone inadvertently attaining elevated privileges or performing tasks that are not properly audited is greatly reduced.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VMHost -Name 10.186.25.26).Extensiondata.Config.LockdownMode stdout.strip is expected to be in &quot;lockdownNormal&quot; and &quot;lockdownStrict&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;lockdownDisabled&#x60; to be in the list: &#x60;[&quot;lockdownNormal&quot;, &quot;lockdownStrict&quot;]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000008</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable lockdown mode.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCenter are always enforced and users cannot bypass them by logging on to a host directly.
+
+By forcing all interaction to occur through vCenter Server, the risk of someone inadvertently attaining elevated privileges or performing tasks that are not properly audited is greatly reduced.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Scroll down to &quot;Lockdown Mode&quot; and verify it is set to &quot;Enabled&quot; (Normal or Strict).
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Select Name,@{N&#x3D;&quot;Lockdown&quot;;E&#x3D;{$_.Extensiondata.Config.LockdownMode}}
+
+If &quot;Lockdown Mode&quot; is disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile &gt;&gt; Lockdown Mode.
+
+Click edit and select either the &quot;Normal&quot; or &quot;Strict&quot; radio buttons.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$level &#x3D; &quot;lockdownNormal&quot; OR &quot;lockdownStrict&quot;
+$vmhost &#x3D; Get-VMHost -Name &lt;hostname&gt; | Get-View
+$lockdown &#x3D; Get-View $vmhost.ConfigManager.HostAccessManager
+$lockdown.ChangeLockdownMode($level)
+
+Note: In strict lockdown mode, the Direct Console User Interface (DCUI) service is stopped. If the connection to vCenter Server is lost and the vSphere Client is no longer available, the ESXi host becomes inaccessible.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000010"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000010"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000010</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000010
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host client must be configured with an idle session timeout.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000010"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000010"
+            >
+              <!-- Result description -->
+              The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed by browsing to &quot;https:&#x2F;&#x2F;&lt;ESX FQDN&gt;&#x2F;ui&quot;. ESXi is not usually administered via this interface for long periods and all users will be highly privileged. Implementing a mandatory session idle limit will ensure that orphaned, forgotten or ignored sessions will be closed promptly.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000010</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host client must be configured with an idle session timeout.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed by browsing to &quot;https:&#x2F;&#x2F;&lt;ESX FQDN&gt;&#x2F;ui&quot;. ESXi is not usually administered via this interface for long periods and all users will be highly privileged. Implementing a mandatory session idle limit will ensure that orphaned, forgotten or ignored sessions will be closed promptly.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.HostClientSessionTimeout&quot; value and verify it is set to &quot;900&quot; or less.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout
+
+If the &quot;UserVars.HostClientSessionTimeout&quot; setting is not set to &quot;900&quot; or less, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Fom the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.HostClientSessionTimeout&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Set-AdvancedSetting -Value &quot;900&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000014"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000014"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000014</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000014
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000014"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000014"
+            >
+              <!-- Result description -->
+              Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session.
+
+OpenSSH on the ESXi host ships with a FIPS 140-2 validated cryptographic module and it is enabled by default. For backward compatibility reasons, this can be disabled so this setting must be audited and corrected if necessary.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.security.fips140.ssh.get.invoke() | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000014</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session.
+
+OpenSSH on the ESXi host ships with a FIPS 140-2 validated cryptographic module and it is enabled by default. For backward compatibility reasons, this can be disabled so this setting must be audited and corrected if necessary.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system security fips140 ssh get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.security.fips140.ssh.get.invoke()
+
+Expected result:
+
+Enabled: true
+
+If the FIPS mode is not enabled for SSH, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system security fips140 ssh set -e true
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.security.fips140.ssh.set.CreateArgs()
+$arguments.enable &#x3D; $true
+$esxcli.system.security.fips140.ssh.set.Invoke($arguments)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000015"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000015"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000015</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000015
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi must produce audit records containing information to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000015"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000015"
+            >
+              <!-- Result description -->
+              Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000015</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi must produce audit records containing information to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 b, AU-3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.log.level&quot; value and verify it is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.log.level
+
+If the &quot;Config.HostAgent.log.level&quot; setting is not set to &quot;info&quot;, this is a finding.
+
+Note: Verbose logging level is acceptable for troubleshooting purposes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.log.level&quot; value and configure it to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.log.level | Set-AdvancedSetting -Value &quot;info&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000035"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000035"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000035</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000035
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enforce password complexity by configuring a password quality policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000035"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000035"
+            >
+              <!-- Result description -->
+              To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated.
+
+The use of complex passwords reduces the ability of attackers to successfully obtain valid passwords using guessing or exhaustive search techniques. Complexity requirements increase the password search space by requiring users to construct passwords from a larger character set than they may otherwise use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordQualityControl | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15
+     got: retry&#x3D;3 min&#x3D;disabled,disabled,disabled,7,7
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000035</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enforce password complexity by configuring a password quality policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated.
+
+The use of complex passwords reduces the ability of attackers to successfully obtain valid passwords using guessing or exhaustive search techniques. Complexity requirements increase the password search space by requiring users to construct passwords from a larger character set than they may otherwise use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), IA-5 (1) (b)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordQualityControl&quot; value and verify it is set to &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordQualityControl
+
+If the &quot;Security.PasswordQualityControl&quot; setting is set to a value other than &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordQualityControl&quot; value and configure it to &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordQualityControl | Set-AdvancedSetting -Value &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000043"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000043"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000043</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000043
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must prohibit password reuse for a minimum of five generations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000043"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000043"
+            >
+              <!-- Result description -->
+              If a user or root used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user&#39;s password until it was guessed correctly.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordHistory | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;5&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000043</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must prohibit password reuse for a minimum of five generations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a user or root used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user&#39;s password until it was guessed correctly.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (e)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordHistory&quot; value and verify it is set to &quot;5&quot; or greater.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordHistory
+
+If the &quot;Security.PasswordHistory&quot; setting is set to a value other than 5 or greater, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordHistory&quot; value and configure it to &quot;5&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordHistory | Set-AdvancedSetting -Value 5</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000047"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000047"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000047</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000047
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000047"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000047"
+            >
+              <!-- Result description -->
+              The MOB provides a way to explore the object model used by the VMkernel to manage the host and enables configurations to be changed. This interface is meant to be used primarily for debugging the vSphere Software Development Kit (SDK), but because there are no access controls it could also be used as a method to obtain information about a host being targeted for unauthorized access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000047</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The MOB provides a way to explore the object model used by the VMkernel to manage the host and enables configurations to be changed. This interface is meant to be used primarily for debugging the vSphere Software Development Kit (SDK), but because there are no access controls it could also be used as a method to obtain information about a host being targeted for unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.plugins.solo.enableMob&quot; value and verify it is set to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob
+
+If the &quot;Config.HostAgent.plugins.solo.enableMob&quot; setting is not set to &quot;false&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.plugins.solo.enableMob&quot; value and configure it to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Set-AdvancedSetting -Value false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000049"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000049"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000049</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000049
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000049"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000049"
+            >
+              <!-- Result description -->
+              Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Using Active Directory for user authentication simplifies the ESXi host configuration, ensures password complexity and reuse policies are enforced, and reduces the risk of security breaches and unauthorized access.
+
+Note: If the Active Directory group &quot;ESX Admins&quot; (default) exists, all users and groups assigned as members to this group will have full administrative access to all ESXi hosts in the domain.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostAuthentication | Select-Object -ExpandProperty DomainMembershipStatus stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000049</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Using Active Directory for user authentication simplifies the ESXi host configuration, ensures password complexity and reuse policies are enforced, and reduces the risk of security breaches and unauthorized access.
+
+Note: If the Active Directory group &quot;ESX Admins&quot; (default) exists, all users and groups assigned as members to this group will have full administrative access to all ESXi hosts in the domain.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), IA-2, IA-2 (5), IA-2 (8), IA-2 (9)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For systems that do not use Active Directory and have no local user accounts other than root and&#x2F;or service accounts, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Authentication Services.
+
+Verify the &quot;Directory Services Type&quot; is set to &quot;Active Directory&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostAuthentication
+
+For systems that do not use Active Directory and do have local user accounts, other than root and&#x2F;or service accounts, this is a finding.
+
+If the &quot;Directory Services Type&quot; is not set to &quot;Active Directory&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Authentication Services.
+
+Click &quot;Join Domain...&quot; and enter the AD domain to join.
+
+Select the &quot;Using credentials&quot; radio button and enter the credentials of an account with permissions to join machines to AD (use UPN naming &quot;user@domain&quot;). Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostAuthentication | Set-VMHostAuthentication -JoinDomain -Domain &quot;domain name&quot; -User &quot;username&quot; -Password &quot;password&quot;
+
+If any local user accounts are present besides root and service accounts, delete them by going to Host UI &gt;&gt; Manage &gt;&gt; Security &amp; Users &gt;&gt; Users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000052"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000052"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000052</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000052
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000052"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000052"
+            >
+              <!-- Result description -->
+              SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH can emulate the behavior of the obsolete &quot;rsh&quot; command in allowing users to enable insecure access to their accounts via &quot;.rhosts&quot; files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000052</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH can emulate the behavior of the obsolete &quot;rsh&quot; command in allowing users to enable insecure access to their accounts via &quot;.rhosts&quot; files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (3)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep ignorerhosts
+
+Expected result:
+
+ignorerhosts yes
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+IgnoreRhosts yes</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000068"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000068"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000068</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000068
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000068"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000068"
+            >
+              <!-- Result description -->
+              If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely and increase the likelihood of inappropriate host access via session hijacking. The &quot;ESXiShellInteractiveTimeOut&quot; allows the automatic termination of idle shell sessions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000068</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely and increase the likelihood of inappropriate host access via session hijacking. The &quot;ESXiShellInteractiveTimeOut&quot; allows the automatic termination of idle shell sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-12, SC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; value and verify it is set to less than &quot;900&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut
+
+If the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; setting is set to a value greater than &quot;900&quot; or &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Set-AdvancedSetting -Value 900</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000085"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000085"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000085</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002696
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002699
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000085
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must implement Secure Boot enforcement.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002696
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002699
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000085"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000085"
+            >
+              <!-- Result description -->
+              Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and it requires that all ESXi kernel modules, drivers and VIBs be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. This control flips ESXi from merely supporting Secure Boot to requiring it. Without this setting enabled, and configuration encryption, an ESXi host could be subject to offline attacks. An attacker could simply transfer the ESXi install drive to a non-Secure Boot host and boot it up without ESXi complaining.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty RequireSecureBoot stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: false
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000085</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must implement Secure Boot enforcement.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and it requires that all ESXi kernel modules, drivers and VIBs be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. This control flips ESXi from merely supporting Secure Boot to requiring it. Without this setting enabled, and configuration encryption, an ESXi host could be subject to offline attacks. An attacker could simply transfer the ESXi install drive to a non-Secure Boot host and boot it up without ESXi complaining.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, SI-6 a, SI-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.encryption.get.invoke() | Select RequireSecureBoot
+
+Expected result:
+
+Require Secure Boot: true
+
+If &quot;Require Secure Boot&quot; is not enable, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This setting cannot be configured until Secure Boot is properly enabled in the servers firmware.
+
+From an ESXi shell, run the following commands:
+
+# esxcli system settings encryption set --require-secure-boot&#x3D;true
+# &#x2F;sbin&#x2F;auto-backup.sh
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.encryption.set.CreateArgs()
+$arguments.requiresecureboot &#x3D; $true
+$esxcli.system.settings.encryption.set.Invoke($arguments)
+
+Evacuate the host and gracefully reboot for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000094"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000094"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000094</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001496
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000094
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable Secure Boot.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001496
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000094"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000094"
+            >
+              <!-- Result description -->
+              Secure Boot is part of the Unified Extensible Firmware Interface (UEFI) firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and requires that all ESXi kernel modules, drivers, and vSphere Installation Bundles (VIBs) be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. There is no ESXi control to &quot;turn on&quot; Secure Boot. Requiring Secure Boot (failing to boot without it present) is accomplished in another control.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000094</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable Secure Boot.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Secure Boot is part of the Unified Extensible Firmware Interface (UEFI) firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and requires that all ESXi kernel modules, drivers, and vSphere Installation Bundles (VIBs) be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. There is no ESXi control to &quot;turn on&quot; Secure Boot. Requiring Secure Boot (failing to boot without it present) is accomplished in another control.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (3)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;secureboot&#x2F;bin&#x2F;secureBoot.py -s
+
+If Secure Boot is not &quot;Enabled&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;secureboot&#x2F;bin&#x2F;secureBoot.py -c
+
+If the output indicates that Secure Boot cannot be enabled, correct the discrepancies and try again.
+
+Once all discrepancies are resolved then the server ESXi is installed on can be updated to enable Secure Boot in the firmware.
+
+To enable Secure Boot in the servers firmware follow the instructions for the specific manufacturer.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000111"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000111"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000111</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000111
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000111"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000111"
+            >
+              <!-- Result description -->
+              By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Users must wait for the timeout period to elapse before subsequent logon attempts are allowed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000111</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Users must wait for the timeout period to elapse before subsequent logon attempts are allowed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.AccountUnlockTime&quot; value and verify it is set to less than &quot;900&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountUnlockTime
+
+If the &quot;Security.AccountUnlockTime&quot; setting is less than 900 or 0, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.AccountUnlockTime&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountUnlockTime | Set-AdvancedSetting -Value 900</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000113"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000113"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000113</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000113
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must allocate audit record storage capacity to store at least one weeks worth of audit records.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000113"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000113"
+            >
+              <!-- Result description -->
+              In order to ensure ESXi has sufficient storage capacity in which to write the audit logs, audit record storage capacity should be configured.
+
+If a central audit record storage facility is available, the local storage capacity should be sufficient to hold audit records that would accumulate during anticipated interruptions in delivery of records to the facility.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;100&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 100
+     got: 4
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000113</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must allocate audit record storage capacity to store at least one weeks worth of audit records.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In order to ensure ESXi has sufficient storage capacity in which to write the audit logs, audit record storage capacity should be configured.
+
+If a central audit record storage facility is available, the local storage capacity should be sufficient to hold audit records that would accumulate during anticipated interruptions in delivery of records to the facility.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.storageCapacity&quot; value and verify it is set to &quot;100&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity
+
+If the &quot;Syslog.global.auditRecord.storageCapacity&quot; setting is not set to 100, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.storageCapacity&quot; value and configure it to &quot;100&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Set-AdvancedSetting -Value 100</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000114"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000114"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000114</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000114
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must off-load logs via syslog.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000114"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000114"
+            >
+              <!-- Result description -->
+              Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a central host, it can more easily monitor all hosts with a single tool. It can also do aggregate analysis and searching to look for such things as coordinated attacks on multiple hosts.
+
+Logging to a secure, centralized log server also helps prevent log tampering and provides a long-term audit record.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logHost | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;tcp:&#x2F;&#x2F;log.test.local:514&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: tcp:&#x2F;&#x2F;log.test.local:514
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000114</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must off-load logs via syslog.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a central host, it can more easily monitor all hosts with a single tool. It can also do aggregate analysis and searching to look for such things as coordinated attacks on multiple hosts.
+
+Logging to a secure, centralized log server also helps prevent log tampering and provides a long-term audit record.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), AU-4 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logHost&quot; value and verify it is set to a site-specific syslog server.
+
+Syslog servers are specified in the following formats:
+
+udp:&#x2F;&#x2F;&lt;IP or FQDN&gt;:514
+tcp:&#x2F;&#x2F;&lt;IP or FQDN&gt;:514
+ssl:&#x2F;&#x2F;&lt;IP or FQDN&gt;:1514
+
+Multiple servers can also be specified when separated by commas.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logHost
+
+If the &quot;Syslog.global.logHost&quot; setting is not set to a valid, site-specific syslog server, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logHost&quot; value and configure it to a site-specific syslog server.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logHost | Set-AdvancedSetting -Value &quot;enter site specific servers&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000124"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000124"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000124</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002046
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000124
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must synchronize internal information system clocks to an authoritative time source.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002046
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000124"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000124"
+            >
+              <!-- Result description -->
+              To ensure the accuracy of the system clock, it must be synchronized with an authoritative time source within DOD. Many system functions, including time-based logon and activity restrictions, automated reports, system logs, and audit records, depend on an accurate system clock. If there is no confidence in the correctness of the system clock, time-based functions may not operate as intended and records may be of diminished value.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;on&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: on
+     got: off
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No NTP servers found on VMhost: 10.186.25.26 is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;&quot;.empty?&#x60; to be falsey, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000124</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must synchronize internal information system clocks to an authoritative time source.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To ensure the accuracy of the system clock, it must be synchronized with an authoritative time source within DOD. Many system functions, including time-based logon and activity restrictions, automated reports, system logs, and audit records, depend on an accurate system clock. If there is no confidence in the correctness of the system clock, time-based functions may not operate as intended and records may be of diminished value.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-8 (1) (a), AU-8 (1) (b)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Verify NTP or PTP are configured, and one or more authoritative time sources are listed.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Verify the NTP or PTP service is running and configured to start and stop with the host.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostNTPServer
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot; -or $_.Label -eq &quot;PTP Daemon&quot;}
+
+If the NTP service is not configured with authoritative DOD time sources or the service is not configured to start and stop with the host (&quot;Policy&quot; of &quot;on&quot; in PowerCLI) or is stopped, this is a finding.
+If PTP is used instead of NTP, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To configure NTP, perform the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Click &quot;Add Service&quot; and select &quot;Network Time Protocol&quot;.
+
+Enter or update the NTP servers listed with a comma separate list of authoritative time servers. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Select the &quot;NTP Daemon&quot; service and click &quot;Edit Startup Policy&quot;.
+
+Select &quot;Start and stop with host&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$NTPServers &#x3D; &quot;ntpserver1&quot;,&quot;ntpserver2&quot;
+Get-VMHost | Add-VMHostNTPServer $NTPServers
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot;} | Set-VMHostService -Policy On
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot;} | Start-VMHostService
+
+To configure PTP, perform the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Click &quot;Add Service&quot; and select &quot;Precision Time Protocol&quot;.
+
+Select the network adapter that can receive the PTP traffic.
+
+If NTP servers are available, select &quot;Enable fallback&quot; and enter or update the NTP servers listed with a comma separate list of authoritative time servers. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Select the &quot;PTP Daemon&quot; service and click &quot;Edit Startup Policy&quot;.
+
+Select &quot;Start and stop with host&quot;. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000133"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000133"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000133</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (5) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001774
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000133
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (5) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001774
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000133"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000133"
+            >
+              <!-- Result description -->
+              Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels:
+
+1. VMwareCertified - VIBs created, tested, and signed by VMware.
+2. VMwareAccepted - VIBs created by a VMware partner but tested and signed by VMware.
+3. PartnerSupported - VIBs created, tested, and signed by a certified VMware partner.
+4. CommunitySupported - VIBs that have not been tested by VMware or a VMware partner.
+
+Community Supported VIBs are not supported and do not have a digital signature. To protect the security and integrity of ESXi hosts, do not allow unsigned (CommunitySupported) VIBs to be installed on hosts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.software.acceptance.get.Invoke() stdout.strip is expected to be in &quot;PartnerSupported&quot;, &quot;VMwareCertified&quot;, and &quot;VMwareAccepted&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000133</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels:
+
+1. VMwareCertified - VIBs created, tested, and signed by VMware.
+2. VMwareAccepted - VIBs created by a VMware partner but tested and signed by VMware.
+3. PartnerSupported - VIBs created, tested, and signed by a certified VMware partner.
+4. CommunitySupported - VIBs that have not been tested by VMware or a VMware partner.
+
+Community Supported VIBs are not supported and do not have a digital signature. To protect the security and integrity of ESXi hosts, do not allow unsigned (CommunitySupported) VIBs to be installed on hosts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (3), CM-7 (5) (b)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Host Image Profile Acceptance Level&quot; view the acceptance level.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.software.acceptance.get.Invoke()
+
+If the acceptance level is &quot;CommunitySupported&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Host Image Profile Acceptance Level&quot;, click &quot;Edit&quot;.
+
+Using the drop-down selection, set the acceptance level as &quot;VMwareCertified&quot;, &quot;VMwareAccepted&quot;, or &quot;PartnerSupported&quot;. The default is &quot;PartnerSupported&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.software.acceptance.set.CreateArgs()
+$arguments.level &#x3D; &quot;PartnerSupported&quot;
+$esxcli.software.acceptance.set.Invoke($arguments)
+
+Note: &quot;VMwareCertified&quot; or &quot;VMwareAccepted&quot; may be substituted for &quot;PartnerSupported&quot;, depending on local requirements. These are case sensitive.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000145"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000145"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000145</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000145
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000145"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000145"
+            >
+              <!-- Result description -->
+              When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle attack, in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000145</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle attack, in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If iSCSI is not used, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Storage &gt;&gt; Storage Adapters.
+
+Select the iSCSI adapter &gt;&gt; Properties &gt;&gt; Authentication &gt;&gt; Method.
+
+View the CHAP configuration and verify CHAP is required for target and host authentication.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostHba | Where {$_.Type -eq &quot;iscsi&quot;} | Select AuthenticationProperties -ExpandProperty AuthenticationProperties
+
+If iSCSI is used and CHAP is not set to &quot;required&quot; for both the target and host, this is a finding.
+
+If iSCSI is used and unique CHAP secrets are not used for each host, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Storage &gt;&gt; Storage Adapters.
+
+Select the iSCSI adapter &gt;&gt; Properties &gt;&gt; Authentication.
+
+Click &quot;Edit...&quot;. Set &quot;Authentication Method&quot; to &quot;Use bidirectional CHAP&quot; and enter a unique secret for each traffic flow direction.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostHba | Where {$_.Type -eq &quot;iscsi&quot;} | Set-VMHostHba -ChapType Required -ChapName &quot;chapname&quot; -ChapPassword &quot;password&quot; -MutualChapEnabled $true -MutualChapName &quot;mutualchapname&quot; -MutualChapPassword &quot;mutualpassword&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000160"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000160"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000160</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000160
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000160"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000160"
+            >
+              <!-- Result description -->
+              While encrypted vMotion is available, vMotion traffic should still be sequestered from other traffic to further protect it from attack. This network must only be accessible to other ESXi hosts, preventing outside access to the network.
+
+The vMotion VMkernel port group must be in a dedicated VLAN that can be on a standard or distributed virtual switch as long as the vMotion VLAN is not shared by any other function and is not routed to anything but ESXi hosts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000160</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >While encrypted vMotion is available, vMotion traffic should still be sequestered from other traffic to further protect it from attack. This network must only be accessible to other ESXi hosts, preventing outside access to the network.
+
+The vMotion VMkernel port group must be in a dedicated VLAN that can be on a standard or distributed virtual switch as long as the vMotion VLAN is not shared by any other function and is not routed to anything but ESXi hosts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review the VLAN associated with any vMotion VMkernel(s) and verify they are dedicated for that purpose and are logically separated from other functions.
+
+If long distance or cross vCenter vMotion is used the vMotion network can be routable but must be accessible to only the intended ESXi hosts.
+
+If the vMotion port group is not on an isolated VLAN and&#x2F;or is routable to systems other than ESXi hosts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuration of the vMotion VMkernel will be unique to each environment.
+
+As an example, to modify the IP address and VLAN information to the correct network on a distributed switch do the following:
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot; and select VLAN.
+
+Change the &quot;VLAN Type&quot; to &quot;VLAN&quot; and change the &quot;VLAN ID&quot; to a network allocated and dedicated to vMotion traffic exclusively. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000161"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000161"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000161</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000161
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must maintain the confidentiality and integrity of information during transmission by exclusively enabling Transport Layer Security (TLS) 1.2.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000161"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000161"
+            >
+              <!-- Result description -->
+              TLS 1.0 and 1.1 are deprecated protocols with well-published shortcomings and vulnerabilities. TLS 1.2 should be enabled on all interfaces and SSLv3, TL 1.1, and 1.0 disabled, where supported.
+
+Mandating TLS 1.2 may break third-party integrations and add-ons to vSphere. Test these integrations carefully after implementing TLS 1.2 and roll back where appropriate.
+
+On interfaces where required functionality is broken with TLS 1.2, this finding is not applicable until such time as the third-party software supports TLS 1.2.
+
+Modify TLS settings in the following order:
+1. vCenter.
+2. ESXi.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;sslv3,tlsv1,tlsv1.1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000161</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must maintain the confidentiality and integrity of information during transmission by exclusively enabling Transport Layer Security (TLS) 1.2.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >TLS 1.0 and 1.1 are deprecated protocols with well-published shortcomings and vulnerabilities. TLS 1.2 should be enabled on all interfaces and SSLv3, TL 1.1, and 1.0 disabled, where supported.
+
+Mandating TLS 1.2 may break third-party integrations and add-ons to vSphere. Test these integrations carefully after implementing TLS 1.2 and roll back where appropriate.
+
+On interfaces where required functionality is broken with TLS 1.2, this finding is not applicable until such time as the third-party software supports TLS 1.2.
+
+Modify TLS settings in the following order:
+1. vCenter.
+2. ESXi.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8 (2)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiVPsDisabledProtocols&quot; value and verify it is set to &quot;sslv3,tlsv1,tlsv1.1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols
+
+If the &quot;UserVars.ESXiVPsDisabledProtocols&quot; setting is set to a value other than &quot;sslv3,tlsv1,tlsv1.1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiVPsDisabledProtocols&quot; value and configure it to &quot;sslv3,tlsv1,tlsv1.1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Set-AdvancedSetting -Value &quot;sslv3,tlsv1,tlsv1.1&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000187"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000187"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000187</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000187
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000187"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000187"
+            >
+              <!-- Result description -->
+              Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000187</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-13</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep ciphers
+
+Expected result:
+
+ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+
+Note: The ciphers line must be after the FipsMode setting.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000189"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000189"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000189</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000189
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host DCUI.Access list must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000189"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000189"
+            >
+              <!-- Result description -->
+              Lockdown mode disables direct host access, requiring that administrators manage hosts from vCenter Server. However, if a host becomes isolated from vCenter, the administrator is locked out and can no longer manage the host.
+
+The &quot;DCUI.Access&quot; advanced setting allows specified users to exit lockdown mode in such a scenario. If the Direct Console User Interface (DCUI) is running in strict lockdown mode, this setting is ineffective.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name DCUI.Access | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000189</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host DCUI.Access list must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Lockdown mode disables direct host access, requiring that administrators manage hosts from vCenter Server. However, if a host becomes isolated from vCenter, the administrator is locked out and can no longer manage the host.
+
+The &quot;DCUI.Access&quot; advanced setting allows specified users to exit lockdown mode in such a scenario. If the Direct Console User Interface (DCUI) is running in strict lockdown mode, this setting is ineffective.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;DCUI.Access&quot; value and verify only the root user is listed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name DCUI.Access and verify it is set to root.
+
+If the &quot;DCUI.Access&quot; is not restricted to &quot;root&quot;, this is a finding.
+
+Note: This list is only for local user accounts and should only contain the root user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;DCUI.Access&quot; value and configure it to &quot;root&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name DCUI.Access | Set-AdvancedSetting -Value &quot;root&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000191"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000191"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000191</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000191
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000191"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000191"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000191</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.Etc.issue&quot; value and verify it contains the standard mandatory DOD notice and consent banner.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.Etc.issue
+
+If the &quot;Config.Etc.issue&quot; setting does not contain the standard mandatory DOD notice and consent banner, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.Etc.issue&quot; value and set it to the following:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By using this IS (which includes any device attached to this IS), you consent to the following conditions: -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations. -At any time, the USG may inspect and seize data stored on this IS. -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose. -This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy. -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.Etc.issue | Set-AdvancedSetting -Value &quot;&lt;Banner text above&gt;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000192"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000192"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000192</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000192
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000192"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000192"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000192</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep banner
+
+Expected result:
+
+banner &#x2F;etc&#x2F;issue
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, navigate to and open:
+
+&#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+Ensure that the &quot;Banner&quot; line is uncommented and set to the following:
+
+Banner &#x2F;etc&#x2F;issue
+
+Restart SSH from the UI or run the following command:
+
+# &#x2F;etc&#x2F;init.d&#x2F;SSH restart</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000193"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000193"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000193</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002314
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002322
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000193
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002314
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002322
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000193"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000193"
+            >
+              <!-- Result description -->
+              The ESXi Shell is an interactive command line interface (CLI) available at the ESXi server console. The ESXi shell provides temporary access to commands essential for server maintenance. Intended primarily for use in break-fix scenarios, the ESXi shell is well suited for checking and modifying configuration details, which are not always generally accessible, using the vSphere Client.
+
+The ESXi shell is accessible remotely using SSH by users with the Administrator role. Under normal operating conditions, SSH access to the host must be disabled as is the default. As with the ESXi shell, SSH is also intended only for temporary use during break-fix scenarios. SSH must therefore be disabled under normal operating conditions and must only be enabled for diagnostics or troubleshooting. Remote access to the host must therefore be limited to the vSphere Client or Host Client at all other times.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000193</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi Shell is an interactive command line interface (CLI) available at the ESXi server console. The ESXi shell provides temporary access to commands essential for server maintenance. Intended primarily for use in break-fix scenarios, the ESXi shell is well suited for checking and modifying configuration details, which are not always generally accessible, using the vSphere Client.
+
+The ESXi shell is accessible remotely using SSH by users with the Administrator role. Under normal operating conditions, SSH access to the host must be disabled as is the default. As with the ESXi shell, SSH is also intended only for temporary use during break-fix scenarios. SSH must therefore be disabled under normal operating conditions and must only be enabled for diagnostics or troubleshooting. Remote access to the host must therefore be limited to the vSphere Client or Host Client at all other times.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (1), AC-17 (9), CM-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under Services, locate the &quot;SSH&quot; service and verify it is &quot;Stopped&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;}
+
+If the SSH service is &quot;Running&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, select the &quot;SSH&quot; service and click the &quot;Stop&quot; button.
+
+Click the &quot;Edit Startup policy...&quot; button.
+
+Select the &quot;Start and stop manually&quot; radio button.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;} | Stop-VMHostService</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000194"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000194"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000194</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000194
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must be configured to disable nonessential capabilities by disabling the ESXi shell.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000194"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000194"
+            >
+              <!-- Result description -->
+              The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or remotely via SSH. Activities performed from the ESXi Shell bypass vCenter role-based access control (RBAC) and audit controls.
+
+The ESXi shell must only be turned on when needed to troubleshoot&#x2F;resolve problems that cannot be fixed through the vSphere client.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000194</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must be configured to disable nonessential capabilities by disabling the ESXi shell.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or remotely via SSH. Activities performed from the ESXi Shell bypass vCenter role-based access control (RBAC) and audit controls.
+
+The ESXi shell must only be turned on when needed to troubleshoot&#x2F;resolve problems that cannot be fixed through the vSphere client.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under Services, locate the &quot;ESXi Shell&quot; service and verify it is &quot;Stopped&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;}
+
+If the ESXi Shell service is &quot;Running&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, select the &quot;ESXi Shell&quot; service and click the &quot;Stop&quot; button.
+
+Click the &quot;Edit Startup policy...&quot; button.
+
+Select the &quot;Start and stop manually&quot; radio button.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;} | Stop-VMHostService</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000195"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000195"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000195</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000195
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must automatically stop shell services after ten minutes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000195"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000195"
+            >
+              <!-- Result description -->
+              When the ESXi Shell or Secure Shell (SSH) services are enabled on a host, they will run indefinitely. To avoid having these services left running, set the &quot;ESXiShellTimeOut&quot;. The &quot;ESXiShellTimeOut&quot; defines a window of time after which the ESXi Shell and SSH services will be stopped automatically.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000195</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must automatically stop shell services after ten minutes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When the ESXi Shell or Secure Shell (SSH) services are enabled on a host, they will run indefinitely. To avoid having these services left running, set the &quot;ESXiShellTimeOut&quot;. The &quot;ESXiShellTimeOut&quot; defines a window of time after which the ESXi Shell and SSH services will be stopped automatically.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiShellTimeOut&quot; value and verify it is set to less than &quot;600&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut
+
+If the &quot;UserVars.ESXiShellTimeOut&quot; setting is set to a value greater than &quot;600&quot; or &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiShellTimeOut&quot; value and configure it to &quot;600&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Set-AdvancedSetting -Value 600</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000196"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000196"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000196</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000196
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must set a timeout to automatically end idle DCUI sessions after ten minutes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000196"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000196"
+            >
+              <!-- Result description -->
+              When the Direct Console User Interface (DCUI) is enabled and logged in, it should be automatically logged out if left logged on to avoid access by unauthorized persons. The &quot;DcuiTimeOut&quot; setting defines a window of time after which the DCUI will be logged out.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000196</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must set a timeout to automatically end idle DCUI sessions after ten minutes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When the Direct Console User Interface (DCUI) is enabled and logged in, it should be automatically logged out if left logged on to avoid access by unauthorized persons. The &quot;DcuiTimeOut&quot; setting defines a window of time after which the DCUI will be logged out.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.DcuiTimeOut&quot; value and verify it is set to less than &quot;600&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut
+
+If the &quot;UserVars.DcuiTimeOut&quot; setting is set to a value greater than &quot;600&quot; or &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.DcuiTimeOut&quot; value and configure it to &quot;600&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Set-AdvancedSetting -Value 600</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000198"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000198"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000198</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000198
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000198"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000198"
+            >
+              <!-- Result description -->
+              The vSphere management network provides access to the vSphere management interface on each component. Services running on the management interface provide an opportunity for an attacker to gain privileged access to the systems. Any remote attack most likely would begin with gaining entry to this network.
+
+The Management VMkernel port group can be on a standard or distributed virtual switch but must be on a dedicated VLAN. The Management VLAN must not be shared by any other function and must not be accessible to anything other than management-related functions such as vCenter.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.VMotionEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VsanTrafficEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking standand port group VLAN ID is expected to cmp &#x3D;&#x3D; &quot;101&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 101
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SA Interview</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000198</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere management network provides access to the vSphere management interface on each component. Services running on the management interface provide an opportunity for an attacker to gain privileged access to the systems. Any remote attack most likely would begin with gaining entry to this network.
+
+The Management VMkernel port group can be on a standard or distributed virtual switch but must be on a dedicated VLAN. The Management VLAN must not be shared by any other function and must not be accessible to anything other than management-related functions such as vCenter.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review each VMkernel adapter that is used for management traffic and view the &quot;Enabled services&quot;.
+
+Review the VLAN associated with each VMkernel that is used for management traffic. Verify with the system administrator that they are dedicated for that purpose and are logically separated from other functions.
+
+If any services are enabled on any Management VMkernel adapter, this is a finding.
+
+If the network segment is accessible, except to networks where other management-related entities are located such as vCenter, this is a finding.
+
+If there are any other systems or devices such as VMs on the ESXi management segment, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuration of the management VMkernel will be unique to each environment.
+
+As an example, to modify the IP address and VLAN information to the correct network on a distributed switch do the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the Management VMkernel and click &quot;Edit&quot;. On the Port properties tab, uncheck all services except for &quot;Management&quot;. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot; and select VLAN.
+
+Change the &quot;VLAN Type&quot; to &quot;VLAN&quot; and change the &quot;VLAN ID&quot; to a network allocated and dedicated to management traffic exclusively. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000199"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000199"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000199</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000199
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000199"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000199"
+            >
+              <!-- Result description -->
+              Virtual machines (VMs) might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and NFS. This configuration might expose IP-based storage traffic to unauthorized VM users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from any other traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and VMs will limit unauthorized users from viewing the traffic.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.ManagementTrafficEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VMotionEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000199</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and NFS. This configuration might expose IP-based storage traffic to unauthorized VM users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from any other traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and VMs will limit unauthorized users from viewing the traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If IP-based storage is not used, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review each VMkernel adapter that is used for IP-based storage traffic and view the &quot;Enabled services&quot;.
+
+Review the VLAN associated with each VMkernel that is used for IP-based storage traffic. Verify with the system administrator that they are dedicated for that purpose and are logically separated from other functions.
+
+If any services are enabled on an NFS or iSCSI IP-based storage VMkernel adapter, this is a finding.
+
+If any services are enabled on a vSAN VMkernel adapter other than vSAN, this is a finding.
+
+If any IP-based storage networks are not isolated from other traffic types, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuration of an IP-Based VMkernel will be unique to each environment.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the VMkernel used for IP-based storage and click &quot;Edit&quot;. On the &quot;Port&quot; properties tab, uncheck all services. Click &quot;OK&quot;.
+
+Note: For VMkernels used for vSAN leave the vSAN service enabled and uncheck all others.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual switches.
+
+Find the port group that is dedicated to IP-based storage and click the &#39;...&#39; button next to the name. Click &quot;Edit Settings&quot;.
+
+On the &quot;Properties&quot; tab, change the &quot;VLAN ID&quot; to one dedicated for IP-based storage traffic. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000201"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000201"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000201</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000201
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host lockdown mode exception users list must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000201"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000201"
+            >
+              <!-- Result description -->
+              While a host is in lockdown mode (strict or normal), only users on the &quot;Exception Users&quot; list are allowed access. These users do not lose their permissions when the host enters lockdown mode.
+
+The organization may want to add service accounts such as a backup agent to the Exception Users list. Verify the list of users exempted from losing permissions is legitimate and as needed per the environment. Adding unnecessary users to the exception list defeats the purpose of lockdown mode.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Exception users for host: 10.186.25.26 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000201</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host lockdown mode exception users list must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >While a host is in lockdown mode (strict or normal), only users on the &quot;Exception Users&quot; list are allowed access. These users do not lose their permissions when the host enters lockdown mode.
+
+The organization may want to add service accounts such as a backup agent to the Exception Users list. Verify the list of users exempted from losing permissions is legitimate and as needed per the environment. Adding unnecessary users to the exception list defeats the purpose of lockdown mode.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Lockdown Mode&quot;, review the Exception Users list.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following script:
+
+$vmhost &#x3D; Get-VMHost | Get-View
+$lockdown &#x3D; Get-View $vmhost.ConfigManager.HostAccessManager
+$lockdown.QueryLockdownExceptions()
+
+If the Exception Users list contains accounts that do not require special permissions, this is a finding.
+
+Note: The Exception Users list is empty by default and should remain that way except under site-specific circumstances.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Lockdown Mode&quot;, click &quot;Edit&quot; and remove unnecessary users from the Exception Users list.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000202"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000202"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000202</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000202
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000202"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000202"
+            >
+              <!-- Result description -->
+              SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH&#39;s cryptographic host-based authentication is more secure than &quot;.rhosts&quot; authentication, since hosts are cryptographically authenticated. However, it is not recommended that hosts unilaterally trust one another, even within an organization.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000202</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH&#39;s cryptographic host-based authentication is more secure than &quot;.rhosts&quot; authentication, since hosts are cryptographically authenticated. However, it is not recommended that hosts unilaterally trust one another, even within an organization.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep hostbasedauthentication
+
+Expected result:
+
+hostbasedauthentication no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+HostbasedAuthentication no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000203"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000203"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000203</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000203
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000203"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000203"
+            >
+              <!-- Result description -->
+              Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000203</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permitemptypasswords
+
+Expected result:
+
+permitemptypasswords no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitEmptyPasswords no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000204"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000204"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000204</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000204
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000204"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000204"
+            >
+              <!-- Result description -->
+              SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000204</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permituserenvironment
+
+Expected result:
+
+permituserenvironment no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitUserEnvironment no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000205"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000205"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000205</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000205
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must perform strict mode checking of home directory configuration files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000205"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000205"
+            >
+              <!-- Result description -->
+              If other users have access to modify user-specific SSH configuration files, they may be able to log on the system as another user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000205</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must perform strict mode checking of home directory configuration files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If other users have access to modify user-specific SSH configuration files, they may be able to log on the system as another user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep strictmodes
+
+Expected result:
+
+strictmodes yes
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+StrictModes yes</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000206"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000206"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000206</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000206
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not allow compression.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000206"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000206"
+            >
+              <!-- Result description -->
+              If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000206</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not allow compression.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep compression
+
+Expected result:
+
+compression no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+Compression no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000207"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000207"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000207</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000207
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000207"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000207"
+            >
+              <!-- Result description -->
+              SSH Transmission Control Protocol (TCP) connection forwarding provides a mechanism to establish TCP connections proxied by the SSH server. This function can provide convenience similar to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs). Gateway ports allow remote forwarded ports to bind to nonloopback addresses on the server.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000207</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH Transmission Control Protocol (TCP) connection forwarding provides a mechanism to establish TCP connections proxied by the SSH server. This function can provide convenience similar to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs). Gateway ports allow remote forwarded ports to bind to nonloopback addresses on the server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep gatewayports
+
+Expected result:
+
+gatewayports no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+GatewayPorts no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000208"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000208"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000208</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000208
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must be configured to not allow X11 forwarding.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000208"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000208"
+            >
+              <!-- Result description -->
+              X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000208</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must be configured to not allow X11 forwarding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep x11forwarding
+
+Expected result:
+
+x11forwarding no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+X11Forwarding no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000209"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000209"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000209</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000209
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not permit tunnels.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000209"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000209"
+            >
+              <!-- Result description -->
+              OpenSSH has the ability to create network tunnels (layer 2 and layer 3) over an SSH connection. This function can provide similar convenience to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000209</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not permit tunnels.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >OpenSSH has the ability to create network tunnels (layer 2 and layer 3) over an SSH connection. This function can provide similar convenience to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permittunnel
+
+Expected result:
+
+permittunnel no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitTunnel no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000210"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000210"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000210</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000210
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must set a timeout count on idle sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000210"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000210"
+            >
+              <!-- Result description -->
+              Setting a timeout ensures that a user login will be terminated as soon as the &quot;ClientAliveCountMax&quot; is reached.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000210</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must set a timeout count on idle sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting a timeout ensures that a user login will be terminated as soon as the &quot;ClientAliveCountMax&quot; is reached.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep clientalivecountmax
+
+Expected result:
+
+clientalivecountmax 3
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+ClientAliveCountMax 3</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000211"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000211"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000211</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000211
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000211"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000211"
+            >
+              <!-- Result description -->
+              Automatically logging out idle users guards against compromises via hijacked administrative sessions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000211</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Automatically logging out idle users guards against compromises via hijacked administrative sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep clientaliveinterval
+
+Expected result:
+
+clientaliveinterval 200
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+ClientAliveInterval 200</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000212"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000212"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000212</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000212
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000212"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000212"
+            >
+              <!-- Result description -->
+              If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.snmp.get.Invoke() | Select-Object -ExpandProperty enable stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000212</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system snmp get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostSnmp | Select *
+
+If SNMP is not in use and is enabled, this is a finding.
+
+If SNMP is enabled and is not using v3 targets with authentication, this is a finding.
+
+Note: SNMP v3 targets can only be viewed and configured via the &quot;esxcli&quot; command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To disable SNMP from an ESXi shell, run the following command:
+
+# esxcli system snmp set -e no
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi Host:
+
+Get-VMHostSnmp | Set-VMHostSnmp -Enabled $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000213"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000213"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000213</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000213
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000213"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000213"
+            >
+              <!-- Result description -->
+              Published academic papers have demonstrated that by forcing a flush and reload of cache memory, it is possible to measure memory timings to try to determine an Advanced Encryption Standard (AES) encryption key in use on another virtual machine running on the same physical processor of the host server if Transparent Page Sharing (TPS) is enabled between the two VMs. This technique works only in a highly controlled system configured in a nonstandard way that VMware believes would not be recreated in a production environment.
+
+Although VMware believes information being disclosed in real-world conditions is unrealistic, out of an abundance of caution, upcoming ESXi Update releases will no longer enable TPS between VMs by default (TPS will still be used within individual VMs).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.ShareForceSalting | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;2&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000213</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Published academic papers have demonstrated that by forcing a flush and reload of cache memory, it is possible to measure memory timings to try to determine an Advanced Encryption Standard (AES) encryption key in use on another virtual machine running on the same physical processor of the host server if Transparent Page Sharing (TPS) is enabled between the two VMs. This technique works only in a highly controlled system configured in a nonstandard way that VMware believes would not be recreated in a production environment.
+
+Although VMware believes information being disclosed in real-world conditions is unrealistic, out of an abundance of caution, upcoming ESXi Update releases will no longer enable TPS between VMs by default (TPS will still be used within individual VMs).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Mem.ShareForceSalting&quot; value and verify it is set to &quot;2&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.ShareForceSalting
+
+If the &quot;Mem.ShareForceSalting&quot; setting is not set to 2, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Mem.ShareForceSalting&quot; value and set it to &quot;2&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.ShareForceSalting | Set-AdvancedSetting -Value 2</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000214"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000214"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000214</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000214
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure the firewall to block network traffic by default.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000214"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000214"
+            >
+              <!-- Result description -->
+              In addition to service-specific firewall rules, ESXi has a default firewall rule policy to allow or deny incoming and outgoing traffic. Reduce the risk of attack by ensuring this is set to deny incoming and outgoing traffic.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostFirewallDefaultPolicy stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000214</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure the firewall to block network traffic by default.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In addition to service-specific firewall rules, ESXi has a default firewall rule policy to allow or deny incoming and outgoing traffic. Reduce the risk of attack by ensuring this is set to deny incoming and outgoing traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli network firewall get
+
+If the &quot;Default Action&quot; does not equal &quot;DROP&quot;, this is a finding.
+If &quot;Enabled&quot; does not equal &quot;true&quot;, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostFirewallDefaultPolicy
+
+If the Incoming or Outgoing policies are &quot;True&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli network firewall set --default-action&#x3D;false
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostFirewallDefaultPolicy | Set-VMHostFirewallDefaultPolicy -AllowIncoming $false -AllowOutgoing $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000215"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000215"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000215</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000215
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000215"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000215"
+            >
+              <!-- Result description -->
+              BPDU Guard and Portfast are commonly enabled on the physical switch to which the ESXi host is directly connected to reduce the Spanning Tree Protocol (STP) convergence delay.
+
+If a BPDU packet is sent from a virtual machine (VM) on the ESXi host to the physical switch configured as stated above, a cascading lockout of all the uplink interfaces from the ESXi host can occur. To prevent this type of lockout, BPDU Filter can be enabled on the ESXi host to drop any BPDU packets being sent to the physical switch.
+
+The caveat is that certain Secure Socket Layer (SSL) virtual private networks that use Windows bridging capability can legitimately generate BPDU packets. The administrator should verify no legitimate BPDU packets are generated by VMs on the ESXi host prior to enabling BPDU Filter. If BPDU Filter is enabled in this situation, enabling Reject Forged Transmits on the virtual switch port group adds protection against Spanning Tree loops.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000215</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >BPDU Guard and Portfast are commonly enabled on the physical switch to which the ESXi host is directly connected to reduce the Spanning Tree Protocol (STP) convergence delay.
+
+If a BPDU packet is sent from a virtual machine (VM) on the ESXi host to the physical switch configured as stated above, a cascading lockout of all the uplink interfaces from the ESXi host can occur. To prevent this type of lockout, BPDU Filter can be enabled on the ESXi host to drop any BPDU packets being sent to the physical switch.
+
+The caveat is that certain Secure Socket Layer (SSL) virtual private networks that use Windows bridging capability can legitimately generate BPDU packets. The administrator should verify no legitimate BPDU packets are generated by VMs on the ESXi host prior to enabling BPDU Filter. If BPDU Filter is enabled in this situation, enabling Reject Forged Transmits on the virtual switch port group adds protection against Spanning Tree loops.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Net.BlockGuestBPDU&quot; value and verify it is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.BlockGuestBPDU
+
+If the &quot;Net.BlockGuestBPDU&quot; setting is not set to &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Net.BlockGuestBPDU&quot; value and configure it to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Set-AdvancedSetting -Value 1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000216"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000216"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000216</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000216
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure virtual switch security policies to reject forged transmits.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000216"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000216"
+            >
+              <!-- Result description -->
+              If the virtual machine (VM) operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This means the virtual switch does not compare the source and effective MAC addresses.
+
+To protect against MAC address impersonation, all virtual switches must have forged transmissions set to reject. Reject Forged Transmit can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000216</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure virtual switch security policies to reject forged transmits.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the virtual machine (VM) operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This means the virtual switch does not compare the source and effective MAC addresses.
+
+To protect against MAC address impersonation, all virtual switches must have forged transmissions set to reject. Reject Forged Transmit can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;Forged transmits&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;Forged Transmits&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;Forged transmits&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;Forged transmits&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmits $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmitsInherited $true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000217"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000217"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000217</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000217
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000217"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000217"
+            >
+              <!-- Result description -->
+              If the virtual machine (VM) operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent VMs from changing their effective MAC address, which will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing. &quot;Reject MAC Changes&quot; can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000217</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the virtual machine (VM) operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent VMs from changing their effective MAC address, which will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing. &quot;Reject MAC Changes&quot; can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;MAC Address Changes&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;MAC Address Changes&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -MacChanges $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -MacChangesInherited $true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000218"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000218"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000218</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000218
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000218"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000218"
+            >
+              <!-- Result description -->
+              When promiscuous mode is enabled for a virtual switch, all virtual machines (VMs) connected to the Portgroup have the potential to read all packets across that network (only the virtual machines connected to that Portgroup).
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting. Promiscuous mode can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000218</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When promiscuous mode is enabled for a virtual switch, all virtual machines (VMs) connected to the Portgroup have the potential to read all packets across that network (only the virtual machines connected to that Portgroup).
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting. Promiscuous mode can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;Promiscuous Mode&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;Promiscuous Mode&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -AllowPromiscuous $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -AllowPromiscuousInherited $true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000219"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000219"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000219</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000219
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must restrict use of the dvFilter network application programming interface (API).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000219"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000219"
+            >
+              <!-- Result description -->
+              If the organization is not using products that use the dvfilter network API, the host should not be configured to send network information to a virtual machine (VM).
+
+If the API is enabled, an attacker might attempt to connect a virtual machine to it, potentially providing access to the network of other VMs on the host.
+
+If using a product that makes use of this API, verify the host has been configured correctly. If not using such a product, ensure the setting is blank.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000219</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must restrict use of the dvFilter network application programming interface (API).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization is not using products that use the dvfilter network API, the host should not be configured to send network information to a virtual machine (VM).
+
+If the API is enabled, an attacker might attempt to connect a virtual machine to it, potentially providing access to the network of other VMs on the host.
+
+If using a product that makes use of this API, verify the host has been configured correctly. If not using such a product, ensure the setting is blank.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Net.DVFilterBindIpAddress&quot; value and verify the value is blank or the correct IP address of a security appliance if in use.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress
+
+If the &quot;Net.DVFilterBindIpAddress&quot; setting is not blank and security appliances are not in use on the host, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Net.DVFilterBindIpAddress&quot; value and remove any incorrect addresses.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Set-AdvancedSetting -Value &quot;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000220"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000220"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000220</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000220
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000220"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000220"
+            >
+              <!-- Result description -->
+              When a port group is set to VLAN 4095, the vSwitch passes all network frames to the attached virtual machines (VMs) without modifying the VLAN tags. In vSphere, this is referred to as VGT. The VM must process the VLAN information itself via an 802.1Q driver in the operating system.
+
+VLAN 4095 must only be implemented if the attached VMs have been specifically authorized and are capable of managing VLAN tags themselves. If VLAN 4095 is enabled inappropriately, it may cause denial of service or allow a VM to interact with traffic on an unauthorized VLAN.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Select-Object -ExpandProperty VlanId stdout.strip is expected not to match &quot;4095&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000220</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When a port group is set to VLAN 4095, the vSwitch passes all network frames to the attached virtual machines (VMs) without modifying the VLAN tags. In vSphere, this is referred to as VGT. The VM must process the VLAN information itself via an 802.1Q driver in the operating system.
+
+VLAN 4095 must only be implemented if the attached VMs have been specifically authorized and are capable of managing VLAN tags themselves. If VLAN 4095 is enabled inappropriately, it may cause denial of service or allow a VM to interact with traffic on an unauthorized VLAN.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+For each standard switch, review the &quot;VLAN ID&quot; on each port group and verify it is not set to &quot;4095&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VirtualPortGroup | Select Name, VLanID
+
+If any port group is configured with VLAN 4095 and is not documented as a needed exception, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+For each port group on a standard switch that is configured to a native VLAN, click the &#39;...&#39; button next to the port group.
+
+Click &quot;Edit Settings&quot;. On the &quot;Properties&quot; tab, change the &quot;VLAN ID&quot; to an appropriate VLAN ID. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VirtualPortGroup -Name &quot;portgroup name&quot; | Set-VirtualPortGroup -VLanId &quot;New VLAN#&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000221"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000221"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000221</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000221
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must have all security patches and updates installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000221"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000221"
+            >
+              <!-- Result description -->
+              Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VMHost -Name 10.186.25.26).ExtensionData.Config.Product.build stdout.strip is expected to cmp &#x3D;&#x3D; &quot;21813344&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000221</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must have all security patches and updates installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine the current version and build:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Summary. Note the version string next to &quot;Hypervisor:&quot;.
+
+or
+
+From a Secure Shell (SSH) session connected to the ESXi host, or from the ESXi shell, run the following command:
+
+# vmware -v
+
+If the ESXi host does not have the latest patches, this is a finding.
+
+If the ESXi host is not on a supported release, this is a finding.
+
+The latest ESXi versions and their build numbers can be found here: https:&#x2F;&#x2F;kb.vmware.com&#x2F;s&#x2F;article&#x2F;2143832
+
+VMware also publishes Advisories on security patches and offers a way to subscribe to email alerts for them.
+
+Go to: https:&#x2F;&#x2F;www.vmware.com&#x2F;support&#x2F;policies&#x2F;security_response</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi can be patched in multiple ways, and this fix text does not cover all methods.
+
+Manual patching when image profiles are not used:
+
+- Download the latest &quot;offline bundle&quot; .zip update from vmware.com. Verify the hash.
+
+- Transfer the file to a datastore accessible by the ESXi host, local or remote.
+
+- Put the ESXi host into maintenance mode.
+
+- From an ESXi shell, run the following command:
+
+esxcli software vib update -d &lt;path to offline patch bundle.zip&gt;
+
+Manual patching when image profiles are used:
+
+From an ESXi shell, run the following command:
+
+# esxcli software sources profile list -d &#x2F;vmfs&#x2F;volumes&#x2F;&lt;your datastore&gt;&#x2F;&lt;bundle name.zip&gt;
+
+Note the available profiles. The organization will usually want the one ending in &quot;-standard&quot;.
+
+# esxcli software profile update -p &lt;selected profile&gt; -d &#x2F;vmfs&#x2F;volumes&#x2F;&lt;your datastore&gt;&#x2F;&lt;bundle name.zip&gt;
+
+There will be little output during the update. Once complete, reboot the host for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000222"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000222"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000222</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000222
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000222"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000222"
+            >
+              <!-- Result description -->
+              Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000222</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.SuppressShellWarning&quot; value and verify it is set to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning
+
+If the &quot;UserVars.SuppressShellWarning&quot; setting is not set to &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.SuppressShellWarning&quot; value and configure it to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Set-AdvancedSetting -Value 0</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000223"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000223"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000223</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000223
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000223"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000223"
+            >
+              <!-- Result description -->
+              The L1 Terminal Fault (L1TF) CPU vulnerabilities published in 2018 have patches and mitigations available in vSphere. However, there are performance impacts to these mitigations that require careful thought and planning from the system administrator before implementation. Until a mitigation is implemented, the UI warning about the lack of a mitigation must not be dismissed so the system administrator does not assume the vulnerability has been addressed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000223</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The L1 Terminal Fault (L1TF) CPU vulnerabilities published in 2018 have patches and mitigations available in vSphere. However, there are performance impacts to these mitigations that require careful thought and planning from the system administrator before implementation. Until a mitigation is implemented, the UI warning about the lack of a mitigation must not be dismissed so the system administrator does not assume the vulnerability has been addressed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.SuppressHyperthreadWarning&quot; value and verify it is set to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning
+
+If the &quot;UserVars.SuppressHyperthreadWarning&quot; setting is not set to &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.SuppressHyperthreadWarning&quot; value and configure it to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Set-AdvancedSetting -Value 0</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000224"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000224"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000224</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000224
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must verify certificates for SSL syslog endpoints.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000224"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000224"
+            >
+              <!-- Result description -->
+              When sending syslog data to a remote host, ESXi can be configured to use any combination of TCP, UDP and SSL transports. When using SSL, the server certificate must be validated to ensure that the host is connecting to a valid syslog server.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000224</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must verify certificates for SSL syslog endpoints.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When sending syslog data to a remote host, ESXi can be configured to use any combination of TCP, UDP and SSL transports. When using SSL, the server certificate must be validated to ensure that the host is connecting to a valid syslog server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If SSL is not used for a syslog target, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logCheckSSLCerts&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logCheckSSLCerts
+
+If the &quot;Syslog.global.logCheckSSLCerts&quot; setting is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To configure SSL syslog endpoint certificate checking it must be turned on and also the trusted certificate chain must be added to ESXi&#39;s trusted store.
+
+From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logCheckSSLCerts&quot; value and configure it to &quot;true&quot;.
+
+Copy the PEM formatted trusted CA certificate so that is accessible to the host and append the contents to &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;castore.pem by running the follow command:
+
+# &lt;path&#x2F;to&#x2F;cacert&gt; &gt;&gt; &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;castore.pem
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logCheckSSLCerts | Set-AdvancedSetting -Value &quot;true&quot;
+
+Copy the PEM formatted trusted CA certificate so that is accessible to the host.
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.security.certificatestore.add.CreateArgs()
+$arguments.filename &#x3D; &lt;path&#x2F;to&#x2F;cacert&gt;
+$esxcli.system.security.certificatestore.add.Invoke($arguments)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000225"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000225"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000225</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000225
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable volatile key destruction.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000225"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000225"
+            >
+              <!-- Result description -->
+              By default, pages allocated for virtual machines (VMs), userspace applications, and kernel threads are zeroed out at allocation time. ESXi will always ensure that no nonzero pages are exposed to VMs or userspace applications. While this prevents exposing cryptographic keys from VMs or userworlds to other clients, these keys can stay present in host memory for a long time if the memory is not reused.
+
+The NIAP Virtualization Protection Profile and Server Virtualization Extended Package require that memory that may contain cryptographic keys be zeroed upon process exit.
+
+To this end, a new configuration option, MemEagerZero, can be configured to enforce zeroing out userworld and guest memory pages when a userworld process or guest exits. For kernel threads, memory spaces holding keys are zeroed out as soon as the secret is no longer needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.MemEagerZero | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000225</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable volatile key destruction.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, pages allocated for virtual machines (VMs), userspace applications, and kernel threads are zeroed out at allocation time. ESXi will always ensure that no nonzero pages are exposed to VMs or userspace applications. While this prevents exposing cryptographic keys from VMs or userworlds to other clients, these keys can stay present in host memory for a long time if the memory is not reused.
+
+The NIAP Virtualization Protection Profile and Server Virtualization Extended Package require that memory that may contain cryptographic keys be zeroed upon process exit.
+
+To this end, a new configuration option, MemEagerZero, can be configured to enforce zeroing out userworld and guest memory pages when a userworld process or guest exits. For kernel threads, memory spaces holding keys are zeroed out as soon as the secret is no longer needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Mem.MemEagerZero&quot; value and verify it is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.MemEagerZero
+
+If the &quot;Mem.MemEagerZero&quot; setting is not set to &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Mem.MemEagerZero&quot; value and configure it to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.MemEagerZero | Set-AdvancedSetting -Value 1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000226"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000226"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000226</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000226
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure a session timeout for the vSphere API.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000226"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000226"
+            >
+              <!-- Result description -->
+              The vSphere API (VIM) allows for remote, programmatic administration of the ESXi host. Authenticated API sessions are no different from a risk perspective than authenticated UI sessions and they need similar protections.
+
+One of these protections is a basic inactivity timeout, after which the session will be invalidated and reauthentication will be required by the application accessing the API. This is set to 30 seconds by default but can be disabled, thus leaving API sessions open indefinitely. The 30 second default must be verified and maintained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000226</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure a session timeout for the vSphere API.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere API (VIM) allows for remote, programmatic administration of the ESXi host. Authenticated API sessions are no different from a risk perspective than authenticated UI sessions and they need similar protections.
+
+One of these protections is a basic inactivity timeout, after which the session will be invalidated and reauthentication will be required by the application accessing the API. This is set to 30 seconds by default but can be disabled, thus leaving API sessions open indefinitely. The 30 second default must be verified and maintained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; value and verify it is set to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout
+
+If the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; setting is not set to &quot;30&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; value and configure it to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Set-AdvancedSetting -Value 30</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000227"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000227"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000227</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000227
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must be configured with an appropriate maximum password age.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000227"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000227"
+            >
+              <!-- Result description -->
+              The older an ESXi local account password is, the larger the opportunity window is for attackers to guess, crack or re-use a previously cracked password. Rotating passwords on a regular basis is a fundamental security practice and one that ESXi supports.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordMaxDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;90&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 90
+     got: 99999
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000227</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must be configured with an appropriate maximum password age.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The older an ESXi local account password is, the larger the opportunity window is for attackers to guess, crack or re-use a previously cracked password. Rotating passwords on a regular basis is a fundamental security practice and one that ESXi supports.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordMaxDays&quot; value and verify it is set to &quot;90&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordMaxDays
+
+If the &quot;Security.PasswordMaxDays&quot; setting is not set to &quot;90&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordMaxDays&quot; value and configure it to &quot;90&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordMaxDays | Set-AdvancedSetting -Value 90</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000228"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000228"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000228</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000228
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi Common Information Model (CIM) service must be disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000228"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000228"
+            >
+              <!-- Result description -->
+              The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard application programming interfaces (APIs). These APIs are consumed by external applications such as HP SIM or Dell OpenManage for agentless, remote hardware monitoring of the ESXi host.
+
+To reduce attack surface area and following the minimum functionality principal, the CIM service must be disabled unless explicitly needed and approved.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000228</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi Common Information Model (CIM) service must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard application programming interfaces (APIs). These APIs are consumed by external applications such as HP SIM or Dell OpenManage for agentless, remote hardware monitoring of the ESXi host.
+
+To reduce attack surface area and following the minimum functionality principal, the CIM service must be disabled unless explicitly needed and approved.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, locate the &quot;CIM Server&quot; service and verify it is &quot;Stopped&quot; and the &quot;Startup Policy&quot; is set to &quot;Start and stop manually&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;}
+
+If the &quot;CIM Server&quot; service does not have a &quot;Policy&quot; of &quot;off&quot; or is running, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot; select the &quot;CIM Server&quot; service and click the &quot;Stop&quot; button.
+
+Click &quot;Edit Startup policy...&quot; and select the &quot;Start and stop manually&quot; radio button. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;} | Stop-VMHostService</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000229"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000229"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000229</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000229
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must use DOD-approved certificates.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000229"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000229"
+            >
+              <!-- Result description -->
+              The default self-signed host certificate issued by the VMware Certificate Authority (VMCA) must be replaced with a DOD-approved certificate when the host will be accessed directly, such as during a virtual machine (VM) console connection.
+
+The use of a DOD certificate on the host assures clients the service they are connecting to is legitimate and properly secured.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ssl_certificate for &#39;10.186.25.26&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000229</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must use DOD-approved certificates.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The default self-signed host certificate issued by the VMware Certificate Authority (VMCA) must be replaced with a DOD-approved certificate when the host will be accessed directly, such as during a virtual machine (VM) console connection.
+
+The use of a DOD certificate on the host assures clients the service they are connecting to is legitimate and properly secured.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Certificate.
+
+If the issuer is not a DOD-approved certificate authority, this is a finding.
+
+If the host will never be accessed directly (virtual machine console connections bypass vCenter), this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Join the ESXi host to vCenter before replacing the certificate.
+
+Obtain a DOD-issued certificate and private key for the host following the requirements below:
+
+Key size: 2048 bits or more (PEM encoded)
+
+Key format: PEM
+VMware supports PKCS8 and PKCS1 (RSA keys)
+x509 version 3
+
+SubjectAltName must contain DNS Name&#x3D;&lt;machine_FQDN&gt;
+
+CRT (Base-64) format
+
+Contains the following Key Usages: Digital Signature, Non Repudiation, Key Encipherment
+
+Start time of one day before the current time
+
+CN (and SubjectAltName) set to the host name (or IP address) that the ESXi host has in the vCenter Server inventory
+
+From the vSphere Web Client, select the ESXi host&#39;s vCenter Server &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced Settings.
+
+Select the &quot;vpxd.certmgmt.mode&quot; value and ensure it is set to &quot;custom&quot;.
+
+Put the host into maintenance mode.
+
+Temporarily enable Secure Shell (SSH) on the host. Use Secure Copy Protocol (SCP) to transfer the new certificate and key to &#x2F;tmp. SSH to the host. Back up the existing certificate and key:
+
+# mv &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.crt &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.crt.bak
+# mv &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.key &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.key.bak
+
+Copy the new certificate and key to &quot;&#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;&quot; and rename them to &quot;rui.crt&quot; and &quot;rui.key&quot; respectively.
+
+Restart management agents to implement the new certificate:
+
+# services.sh restart</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000230"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000230"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000230</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000230
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must disable port forwarding.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000230"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000230"
+            >
+              <!-- Result description -->
+              While enabling Transmission Control Protocol (TCP) tunnels is a valuable function of sshd, this feature is not appropriate for use on the ESXi hypervisor.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000230</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must disable port forwarding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >While enabling Transmission Control Protocol (TCP) tunnels is a valuable function of sshd, this feature is not appropriate for use on the ESXi hypervisor.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep allowtcpforwarding
+
+Expected result:
+
+allowtcpforwarding no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+AllowTcpForwarding no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000231"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000231"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000231</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000231
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host OpenSLP service must be disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000231"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000231"
+            >
+              <!-- Result description -->
+              OpenSLP implements the Service Location Protocol to help CIM clients discover CIM servers over TCP 427. This service is not widely needed and has had vulnerabilities exposed in the past. To reduce attack surface area and following the minimum functionality principal, the OpenSLP service must be disabled unless explicitly needed and approved.
+
+Note: Disabling the OpenSLP service may affect monitoring and third-party systems that use the WBEM DTMF protocols.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000231</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host OpenSLP service must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >OpenSLP implements the Service Location Protocol to help CIM clients discover CIM servers over TCP 427. This service is not widely needed and has had vulnerabilities exposed in the past. To reduce attack surface area and following the minimum functionality principal, the OpenSLP service must be disabled unless explicitly needed and approved.
+
+Note: Disabling the OpenSLP service may affect monitoring and third-party systems that use the WBEM DTMF protocols.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, locate the &quot;slpd&quot; service and verify it is &quot;Stopped&quot; and the &quot;Startup Policy&quot; is set to &quot;Start and stop manually&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;}
+
+If the slpd service does not have a &quot;Policy&quot; of &quot;off&quot; or is running, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot; select the &quot;slpd&quot; service and click the &quot;Stop&quot; button.
+
+Click &quot;Edit Startup policy...&quot; and select the &quot;Start and stop manually&quot; radio button. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;} | Stop-VMHostService</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000232"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000232"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000232</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000232
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable audit logging.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000232"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000232"
+            >
+              <!-- Result description -->
+              ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000232</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable audit logging.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.storageEnable&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable
+
+If the &quot;Syslog.global.auditRecord.storageEnable&quot; setting is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.storageEnable&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Set-AdvancedSetting -Value &quot;true&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000233"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000233"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000233</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000233
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must off-load audit records via syslog.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000233"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000233"
+            >
+              <!-- Result description -->
+              ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000233</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must off-load audit records via syslog.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.remoteEnable&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable
+
+If the &quot;Syslog.global.auditRecord.remoteEnable&quot; setting is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.remoteEnable&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Set-AdvancedSetting -Value &quot;true&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000234"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000234"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000234</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000234
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable strict x509 verification for SSL syslog endpoints.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000234"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000234"
+            >
+              <!-- Result description -->
+              When sending syslog data to a remote host via SSL, the ESXi host is presented with the endpoint&#39;s SSL server certificate. In addition to trust verification, configured elsewhere, this &quot;x509-strict&quot; option performs additional validity checks on CA root certificates during verification.
+
+These checks are generally not performed (CA roots are inherently trusted) and might cause incompatibilities with existing, misconfigured CA roots. The NIAP requirements in the Virtualization Protection Profile and Server Virtualization Extended Package, however, require even CA roots to pass validations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000234</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable strict x509 verification for SSL syslog endpoints.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When sending syslog data to a remote host via SSL, the ESXi host is presented with the endpoint&#39;s SSL server certificate. In addition to trust verification, configured elsewhere, this &quot;x509-strict&quot; option performs additional validity checks on CA root certificates during verification.
+
+These checks are generally not performed (CA roots are inherently trusted) and might cause incompatibilities with existing, misconfigured CA roots. The NIAP requirements in the Virtualization Protection Profile and Server Virtualization Extended Package, however, require even CA roots to pass validations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If SSL is not used for a syslog target, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.certificate.strictX509Compliance&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance
+
+If the &quot;Syslog.global.certificate.strictX509Compliance&quot; setting is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.certificate.strictX509Compliance&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Set-AdvancedSetting -Value &quot;true&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000235"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000235"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000235</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000235
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must forward audit records containing information to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000235"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000235"
+            >
+              <!-- Result description -->
+              Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user&#x2F;process&#x2F;VM identifiers, event descriptions, success&#x2F;fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in the ESXi audit logs provides a means of investigating an attack; recognizing resource utilization or capacity thresholds; or identifying an improperly configured host.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logLevel | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: info
+     got: error
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000235</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must forward audit records containing information to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user&#x2F;process&#x2F;VM identifiers, event descriptions, success&#x2F;fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in the ESXi audit logs provides a means of investigating an attack; recognizing resource utilization or capacity thresholds; or identifying an improperly configured host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logLevel&quot; value and verify it is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logLevel
+
+If the &quot;Syslog.global.logLevel&quot; setting is not set to &quot;info&quot;, this is a finding.
+
+Note: Verbose logging level is acceptable for troubleshooting purposes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logLevel&quot; value and configure it to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logLevel | Set-AdvancedSetting -Value &quot;info&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000236"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000236"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000236</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000236
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not be configured to override virtual machine (VM) configurations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000236"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000236"
+            >
+              <!-- Result description -->
+              Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000236</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not be configured to override virtual machine (VM) configurations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# stat -c &quot;%s&quot; &#x2F;etc&#x2F;vmware&#x2F;settings
+
+Expected result:
+
+0
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# echo -n &gt;&#x2F;etc&#x2F;vmware&#x2F;settings</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000237"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000237"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000237</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000237
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not be configured to override virtual machine (VM) logger settings.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000237"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000237"
+            >
+              <!-- Result description -->
+              Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000237</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not be configured to override virtual machine (VM) logger settings.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# grep &quot;^vmx\.log&quot; &#x2F;etc&#x2F;vmware&#x2F;config
+
+If the command produces any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following commands:
+
+# cp &#x2F;etc&#x2F;vmware&#x2F;config &#x2F;etc&#x2F;vmware&#x2F;config.bak
+# grep -v &quot;^vmx\.log&quot; &#x2F;etc&#x2F;vmware&#x2F;config.bak&gt;&#x2F;etc&#x2F;vmware&#x2F;config</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000238"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000238"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000238</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000238
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must require TPM-based configuration encryption.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000238"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000238"
+            >
+              <!-- Result description -->
+              An ESXi host&#39;s configuration consists of configuration files for each service that runs on the host. The configuration files typically reside in the &#x2F;etc&#x2F; directory, but they can also reside in other namespaces. The configuration files contain run-time information about the state of the services. Over time, the default values in the configuration files might change, for example, when settings on the ESXi host are changed.
+
+A cron job backs up the ESXi configuration files periodically, when ESXi shuts down gracefully or on demand, and creates an archived configuration file in the boot bank. When ESXi reboots, it reads the archived configuration file and recreates the state that ESXi was in when the backup was taken.
+
+Before vSphere 7.0 Update 2, the archived ESXi configuration file is not encrypted. In vSphere 7.0 Update 2 and later, the archived configuration file is encrypted. When the ESXi host is configured with a Trusted Platform Module (TPM), the TPM is used to &quot;seal&quot; the configuration to the host, providing a strong security guarantee and additional protection from offline attacks.
+
+Configuration encryption uses the physical TPM when it is available and supported at install or upgrade time. If the TPM was added or enabled later, the ESXi host must be told to reconfigure to use the newly available TPM. Once the TPM configuration encryption is enabled, it cannot be disabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty Mode stdout.strip is expected to cmp &#x3D;&#x3D; &quot;TPM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TPM
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000238</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must require TPM-based configuration encryption.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An ESXi host&#39;s configuration consists of configuration files for each service that runs on the host. The configuration files typically reside in the &#x2F;etc&#x2F; directory, but they can also reside in other namespaces. The configuration files contain run-time information about the state of the services. Over time, the default values in the configuration files might change, for example, when settings on the ESXi host are changed.
+
+A cron job backs up the ESXi configuration files periodically, when ESXi shuts down gracefully or on demand, and creates an archived configuration file in the boot bank. When ESXi reboots, it reads the archived configuration file and recreates the state that ESXi was in when the backup was taken.
+
+Before vSphere 7.0 Update 2, the archived ESXi configuration file is not encrypted. In vSphere 7.0 Update 2 and later, the archived configuration file is encrypted. When the ESXi host is configured with a Trusted Platform Module (TPM), the TPM is used to &quot;seal&quot; the configuration to the host, providing a strong security guarantee and additional protection from offline attacks.
+
+Configuration encryption uses the physical TPM when it is available and supported at install or upgrade time. If the TPM was added or enabled later, the ESXi host must be told to reconfigure to use the newly available TPM. Once the TPM configuration encryption is enabled, it cannot be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.encryption.get.invoke() | Select Mode
+
+Expected result:
+
+Mode: TPM
+
+If the &quot;Mode&quot; is not set to &quot;TPM&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure the TPM 2.0 chip is enabled in the BIOS and the ESX UI does not show any errors about a present but unavailable TPM.
+
+This setting cannot be configured until the TPM is properly enabled in firmware.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption set --mode&#x3D;TPM
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.encryption.set.CreateArgs()
+$arguments.mode &#x3D; &quot;TPM&quot;
+$esxcli.system.settings.encryption.set.Invoke($arguments)
+
+Evacuate the host and gracefully reboot for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000239"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000239"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000239</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000239
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure the firewall to restrict access to services running on the host.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000239"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000239"
+            >
+              <!-- Result description -->
+              Unrestricted access to services running on an ESXi host can expose a host to outside attacks and unauthorized access. Reduce the risk by configuring the ESXi firewall to only allow access from authorized networks.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >False is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000239</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure the firewall to restrict access to services running on the host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unrestricted access to services running on an ESXi host can expose a host to outside attacks and unauthorized access. Reduce the risk by configuring the ESXi firewall to only allow access from authorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Firewall.
+
+Under the &quot;Allowed IP addresses&quot; column, review the allowed IPs for each service.
+
+Check this for &quot;Incoming&quot; and &quot;Outgoing&quot; sections.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostFirewallException | Where {$_.Enabled -eq $true} | Select Name,Enabled,@{N&#x3D;&quot;AllIPEnabled&quot;;E&#x3D;{$_.ExtensionData.AllowedHosts.AllIP}}
+
+If for an enabled service &quot;Allow connections from any IP address&quot; is selected, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Firewall.
+
+Click &quot;Edit...&quot;. For each enabled service, uncheck the check box to &quot;Allow connections from any IP address&quot; and input the site-specific network(s) required.
+
+The following example formats are acceptable:
+
+192.168.0.0&#x2F;24
+192.168.1.2, 2001::1&#x2F;64
+fd3e:29a6:0a81:e478::&#x2F;64
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+#This disables the allow all rule for the target service. We are targeting the sshServer service in this example.
+$arguments &#x3D; $esxcli.network.firewall.ruleset.set.CreateArgs()
+$arguments.rulesetid &#x3D; &quot;sshServer&quot;
+$arguments.allowedall &#x3D; $false
+$esxcli.network.firewall.ruleset.set.Invoke($arguments)
+
+#Next add the allowed IPs for the service. Note doing the &quot;vSphere Web Client&quot; service this way may disable access but may be done through vCenter or through the console.
+$arguments &#x3D; $esxcli.network.firewall.ruleset.allowedip.add.CreateArgs()
+$arguments.rulesetid &#x3D; &quot;sshServer&quot;
+$arguments.ipaddress &#x3D; &quot;10.0.0.0&#x2F;8&quot;
+$esxcli.network.firewall.ruleset.allowedip.add.Invoke($arguments)
+
+This must be done for each enabled service.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000240"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000240"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000240</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000240
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host when using Host Profiles and&#x2F;or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000240"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000240"
+            >
+              <!-- Result description -->
+              If a host is configured to join an Active Directory domain using Host Profiles and&#x2F;or Auto Deploy, the Active Directory credentials are saved in the profile and are transmitted over the network.
+
+To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network, use the vSphere Authentication Proxy.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no attached host profiles host: 10.186.25.26. This control is not applicable.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000240</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host when using Host Profiles and&#x2F;or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a host is configured to join an Active Directory domain using Host Profiles and&#x2F;or Auto Deploy, the Active Directory credentials are saved in the profile and are transmitted over the network.
+
+To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network, use the vSphere Authentication Proxy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+If the organization is not using Host Profiles to join Active Directory, this is not applicable.
+
+From the vSphere Client, go to Home &gt;&gt; Policies and Profiles &gt;&gt; Host Profiles.
+
+Click a Host Profile &gt;&gt; Configure &gt;&gt; Security and Services &gt;&gt; Security Settings &gt;&gt; Authentication Configuration &gt;&gt; Active Directory Configuration &gt;&gt; Join Domain Method.
+
+If the method used to join hosts to a domain is not set to &quot;Use vSphere Authentication Proxy to add the host to domain&quot;, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to vCenter, run the following command:
+
+Get-VMHost | Select Name, &#x60; @{N&#x3D;&quot;HostProfile&quot;;E&#x3D;{$_ | Get-VMHostProfile}}, &#x60; @{N&#x3D;&quot;JoinADEnabled&quot;;E&#x3D;{($_ | Get-VmHostProfile).ExtensionData.Config.ApplyProfile.Authentication.ActiveDirectory.Enabled}}, &#x60; @{N&#x3D;&quot;JoinDomainMethod&quot;;E&#x3D;{(($_ | Get-VMHostProfile).ExtensionData.Config.ApplyProfile.Authentication.ActiveDirectory | Select -ExpandProperty Policy | Where {$_.Id -eq &quot;JoinDomainMethodPolicy&quot;}).Policyoption.Id}}
+
+If &quot;JoinADEnabled&quot; is &quot;True&quot; and &quot;JoinDomainMethod&quot; is not &quot;FixedCAMConfigOption&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Home &gt;&gt; Policies and Profiles &gt;&gt; Host Profiles.
+
+Click a Host Profile &gt;&gt; Configure &gt;&gt; Security and Services &gt;&gt; Security Settings &gt;&gt; Authentication Configuration &gt;&gt; Active Directory Configuration.
+
+Click &quot;Edit Host Profile...&quot;. Set the &quot;Join Domain Method&quot; to &quot;Use vSphere Authentication Proxy to add the host to domain&quot; and provide the IP address of the vSphere Authentication Proxy server.
+
+Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000241"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000241"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000241</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000241
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not use the default Active Directory ESX Admin group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000241"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000241"
+            >
+              <!-- Result description -->
+              When adding ESXi hosts to Active Directory, all user&#x2F;group accounts assigned to the Active Directory group &quot;ESX Admins&quot; will have full administrative access to the host.
+
+If this group is not controlled or known to the system administrators, it may be used for inappropriate access to the host. Therefore, the default group must be changed to a site-specific Active Directory group and membership must be severely restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000241</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not use the default Active Directory ESX Admin group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When adding ESXi hosts to Active Directory, all user&#x2F;group accounts assigned to the Active Directory group &quot;ESX Admins&quot; will have full administrative access to the host.
+
+If this group is not controlled or known to the system administrators, it may be used for inappropriate access to the host. Therefore, the default group must be changed to a site-specific Active Directory group and membership must be severely restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For systems that do not use Active Directory, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; value and verify it is not set to &quot;ESX Admins&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.hostsvc.esxAdminsGroup
+
+If the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; setting is set to &quot;ESX Admins&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; key and configure its value to an appropriate Active Directory group other than &quot;ESX Admins&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.hostsvc.esxAdminsGroup | Set-AdvancedSetting -Value &quot;&lt;site specific AD group&gt;&quot;
+
+Note: Changing the group name does not remove the permissions of the previous group.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000243"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000243"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000243</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000243
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure a persistent log location for all locally stored logs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000243"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000243"
+            >
+              <!-- Result description -->
+              ESXi can be configured to store log files on an in-memory file system. This occurs when the host&#39;s &quot;&#x2F;scratch&quot; directory is linked to &quot;&#x2F;tmp&#x2F;scratch&quot;. When this is done, only a single day&#39;s worth of logs are stored at any time. In addition, log files will be reinitialized upon each reboot.
+
+This presents a security risk as user activity logged on the host is only stored temporarily and will not persist across reboots. This can also complicate auditing and make it harder to monitor events and diagnose issues. ESXi host logging should always be configured to a persistent datastore.
+
+Note: Scratch space is configured automatically during installation or first boot of an ESXi host and does not usually need to be configured manually.
+
+If ESXi is installed on an SD card or USB device, a persistent log location may not be configured upon install as normal.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.get.Invoke() | Select-Object -ExpandProperty LocalLogOutputIsPersistent stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000243</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure a persistent log location for all locally stored logs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi can be configured to store log files on an in-memory file system. This occurs when the host&#39;s &quot;&#x2F;scratch&quot; directory is linked to &quot;&#x2F;tmp&#x2F;scratch&quot;. When this is done, only a single day&#39;s worth of logs are stored at any time. In addition, log files will be reinitialized upon each reboot.
+
+This presents a security risk as user activity logged on the host is only stored temporarily and will not persist across reboots. This can also complicate auditing and make it harder to monitor events and diagnose issues. ESXi host logging should always be configured to a persistent datastore.
+
+Note: Scratch space is configured automatically during installation or first boot of an ESXi host and does not usually need to be configured manually.
+
+If ESXi is installed on an SD card or USB device, a persistent log location may not be configured upon install as normal.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logDir&quot; value and verify it is set to a persistent location.
+
+If the value of the setting is &quot;[] &#x2F;scratch&#x2F;logs&quot;, verify the advanced setting &quot;ScratchConfig.CurrentScratchLocation&quot; is not set to &quot;&#x2F;tmp&#x2F;scratch&quot;. This is a nonpersistent location.
+
+If &quot;Syslog.global.logDir&quot; is not configured to a persistent location, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.syslog.config.get.Invoke() | Select LocalLogOutput,LocalLogOutputIsPersistent
+
+If the &quot;LocalLogOutputIsPersistent&quot; value is not true, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logDir&quot; value and set it to a known persistent location.
+
+An example is shown below, where 51dda02d-fade5016-8a08-005056171889 is the UUID of the target datastore:
+
+&#x2F;vmfs&#x2F;volumes&#x2F;51dda02d-fade5016-8a08-005056171889
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logDir | Set-AdvancedSetting -Value &quot;New Log Location&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000244"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000244"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000244</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000244
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enforce the exclusive running of executables from approved VIBs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000244"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000244"
+            >
+              <!-- Result description -->
+              The &quot;execInstalledOnly&quot; advanced ESXi boot option, when set to TRUE, guarantees that the VMkernel executes only those binaries that have been packaged as part of a signed VIB. While this option is effective on its own, it can be further enhanced by telling the Secure Boot to check with the TPM to make sure that the boot process does not proceed unless this setting is enabled. This further protects against malicious offline changes to ESXi configuration to disable the &quot;execInstalledOnly&quot; option.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000244</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enforce the exclusive running of executables from approved VIBs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;execInstalledOnly&quot; advanced ESXi boot option, when set to TRUE, guarantees that the VMkernel executes only those binaries that have been packaged as part of a signed VIB. While this option is effective on its own, it can be further enhanced by telling the Secure Boot to check with the TPM to make sure that the boot process does not proceed unless this setting is enabled. This further protects against malicious offline changes to ESXi configuration to disable the &quot;execInstalledOnly&quot; option.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;VMkernel.Boot.execInstalledOnly&quot; value and verify that it is &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly
+
+If the &quot;VMkernel.Boot.execInstalledOnly&quot; setting is not &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;VMkernel.Boot.execInstalledOnly&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Set-AdvancedSetting -Value True</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000245"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000245"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000245</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000245
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must use sufficient entropy for cryptographic operations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000245"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000245"
+            >
+              <!-- Result description -->
+              Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host.
+
+In computing, the term &quot;entropy&quot; refers to random characters and data that are collected for use in cryptography, such as generating encryption keys to secure data transmitted over a network. Entropy is required by security for generating keys and communicating securely over the network. Entropy is often collected from a variety of sources on a system.
+
+FIPS entropy handling is the default behavior if the following conditions are true:
+
+-The hardware supports RDSEED.
+-The disableHwrng VMkernel boot option isn&#39;t present or is FALSE.
+-The entropySources VMkernel boot option isn&#39;t present or is 0 (zero).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;disableHwrng&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;entropySources&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000245</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must use sufficient entropy for cryptographic operations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host.
+
+In computing, the term &quot;entropy&quot; refers to random characters and data that are collected for use in cryptography, such as generating encryption keys to secure data transmitted over a network. Entropy is required by security for generating keys and communicating securely over the network. Entropy is often collected from a variety of sources on a system.
+
+FIPS entropy handling is the default behavior if the following conditions are true:
+
+-The hardware supports RDSEED.
+-The disableHwrng VMkernel boot option isn&#39;t present or is FALSE.
+-The entropySources VMkernel boot option isn&#39;t present or is 0 (zero).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following commands:
+
+# esxcli system settings kernel list -o disableHwrng
+# esxcli system settings kernel list -o entropySources
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.kernel.list.invoke() | Where {$_.Name -eq &quot;disableHwrng&quot; -or $_.Name -eq &quot;entropySources&quot;}
+
+If &quot;disableHwrng&quot; is not set to &quot;false&quot;, this is a finding.
+If &quot;entropySources&quot; is not set to &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following commands:
+
+# esxcli system settings kernel set -s disableHwrng -v FALSE
+# esxcli system settings kernel set -s entropySources -v 0
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.kernel.set.CreateArgs()
+$arguments.setting &#x3D; &quot;disableHwrng&quot;
+$arguments.value &#x3D; &quot;FALSE&quot;
+$esxcli.system.settings.kernel.set.invoke($arguments)
+$arguments.setting &#x3D; &quot;entropySources&quot;
+$arguments.value &#x3D; &quot;0&quot;
+$esxcli.system.settings.kernel.set.invoke($arguments)
+
+Reboot the ESXi host after updating entropy settings.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000246"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000246"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000246</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000246
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not enable log filtering.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000246"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000246"
+            >
+              <!-- Result description -->
+              The log filtering capability lets you modify the logging policy of the syslog service that is running on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi logs and to deny specific log events entirely.
+
+Setting a limit to the amount of logging information restricts the ability to detect and respond to potential security issues or system failures properly.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.logfilter.get.invoke() | Select-Object -ExpandProperty LogFilteringEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000246</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not enable log filtering.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The log filtering capability lets you modify the logging policy of the syslog service that is running on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi logs and to deny specific log events entirely.
+
+Setting a limit to the amount of logging information restricts the ability to detect and respond to potential security issues or system failures properly.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system syslog config logfilter get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.syslog.config.logfilter.get.invoke()
+
+If &quot;LogFilteringEnabled&quot; is not set to &quot;false&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system syslog config logfilter set --log-filtering-enabled&#x3D;false
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.syslog.config.logfilter.set.CreateArgs()
+$arguments.logfilteringenabled &#x3D; $false
+$esxcli.system.syslog.config.logfilter.set.invoke($arguments)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000189"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000189"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000189</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000189
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have copy operations disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000189"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000189"
+            >
+              <!-- Result description -->
+              Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000189</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have copy operations disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.copy.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.copy.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.copy.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.copy.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.copy.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.copy.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000191"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000191"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000191</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000191
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have drag and drop operations disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000191"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000191"
+            >
+              <!-- Result description -->
+              Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000191</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have drag and drop operations disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.dnd.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.dnd.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.dnd.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.dnd.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.dnd.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.dnd.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000192"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000192"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000192</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000192
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have paste operations disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000192"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000192"
+            >
+              <!-- Result description -->
+              Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000192</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have paste operations disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.paste.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.paste.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.paste.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.paste.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.paste.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.paste.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000193"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000193"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000193</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000193
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have virtual disk shrinking disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000193"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000193"
+            >
+              <!-- Result description -->
+              Shrinking a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to shrink is available to nonadministrative users operating within the VM&#39;s guest operating system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000193</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have virtual disk shrinking disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Shrinking a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to shrink is available to nonadministrative users operating within the VM&#39;s guest operating system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.diskShrink.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskShrink.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.diskShrink.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.diskShrink.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.diskShrink.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskShrink.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000194"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000194"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000194</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000194
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have virtual disk wiping disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000194"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000194"
+            >
+              <!-- Result description -->
+              Shrinking and wiping (erasing) a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to wipe (erase) is available to nonadministrative users operating within the VM&#39;s guest operating system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000194</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have virtual disk wiping disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Shrinking and wiping (erasing) a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to wipe (erase) is available to nonadministrative users operating within the VM&#39;s guest operating system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.diskWiper.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskWiper.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.diskWiper.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.diskWiper.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.diskWiper.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskWiper.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000195"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000195"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000195</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000195
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must limit console sharing.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000195"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000195"
+            >
+              <!-- Result description -->
+              By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an administrator in the VM logs in using a VMware remote console during their session, a nonadministrator in the VM might connect to the console and observe the administrator&#39;s actions.
+
+Also, this could result in an administrator losing console access to a VM. For example, if a jump box is being used for an open console session and the administrator loses connection to that box, the console session remains open. Allowing two console sessions permits debugging via a shared session. For the highest security, allow only one remote console session at a time.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000195</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must limit console sharing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an administrator in the VM logs in using a VMware remote console during their session, a nonadministrator in the VM might connect to the console and observe the administrator&#39;s actions.
+
+Also, this could result in an administrator losing console access to a VM. For example, if a jump box is being used for an open console session and the administrator loses connection to that box, the console session remains open. Allowing two console sessions permits debugging via a shared session. For the highest security, allow only one remote console session at a time.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;RemoteDisplay.maxConnections&quot; value is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name RemoteDisplay.maxConnections
+
+If the virtual machine advanced setting &quot;RemoteDisplay.maxConnections&quot; does not exist or is not set to &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;RemoteDisplay.maxConnections&quot; value and set it to &quot;1&quot;.
+
+If the setting does not exist, add the Name and Value setting at the bottom of screen.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name RemoteDisplay.maxConnections | Set-AdvancedSetting -Value 1
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000196"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000196"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000196</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000196
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000196"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000196"
+            >
+              <!-- Result description -->
+              The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data stream to the host. This 1MB capacity should be sufficient for most cases, but this value can change if necessary.
+
+The value can be increased if large amounts of custom information are being stored in the configuration file. The default limit is 1MB.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000196</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data stream to the host. This 1MB capacity should be sufficient for most cases, but this value can change if necessary.
+
+The value can be increased if large amounts of custom information are being stored in the configuration file. The default limit is 1MB.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;tools.setinfo.sizeLimit&quot; value is set to &quot;1048576&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.setinfo.sizeLimit
+
+If the virtual machine advanced setting &quot;tools.setinfo.sizeLimit&quot; is not set to &quot;1048576&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.setinfo.sizeLimit&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;tools.setinfo.sizeLimit&quot; value and set it to &quot;1048576&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.setinfo.sizeLimit | Set-AdvancedSetting -Value 1048576
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000197"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000197"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000197</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000197
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must prevent unauthorized removal, connection and modification of devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000197"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000197"
+            >
+              <!-- Result description -->
+              In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use the virtual machine settings editor or configuration editor to remove unneeded or unused hardware devices. To use the device again, prevent a user or running process in the virtual machine from connecting, disconnecting, or modifying a device from within the guest operating system.
+
+By default, a rogue user with nonadministrator privileges in a virtual machine can:
+
+1. Connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive.
+2. Disconnect a network adaptor to isolate the virtual machine from its network, which is a denial of service.
+3. Modify settings on a device.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000197</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must prevent unauthorized removal, connection and modification of devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use the virtual machine settings editor or configuration editor to remove unneeded or unused hardware devices. To use the device again, prevent a user or running process in the virtual machine from connecting, disconnecting, or modifying a device from within the guest operating system.
+
+By default, a rogue user with nonadministrator privileges in a virtual machine can:
+
+1. Connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive.
+2. Disconnect a network adaptor to isolate the virtual machine from its network, which is a denial of service.
+3. Modify settings on a device.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.device.connectable.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.device.connectable.disable
+
+If the virtual machine advanced setting &quot;isolation.device.connectable.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.device.connectable.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.device.connectable.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.device.connectable.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000198"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000198"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000198</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000198
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must not be able to obtain host information from the hypervisor.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000198"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000198"
+            >
+              <!-- Result description -->
+              If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this information for performance monitoring. An adversary could use this information to inform further attacks on the host.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000198</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must not be able to obtain host information from the hypervisor.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this information for performance monitoring. An adversary could use this information to inform further attacks on the host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;tools.guestlib.enableHostInfo&quot; value is set to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guestlib.enableHostInfo
+
+If the virtual machine advanced setting &quot;tools.guestlib.enableHostInfo&quot; is not set to &quot;false&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.guestlib.enableHostInfo&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;tools.guestlib.enableHostInfo&quot; value and set it to &quot;false&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guestlib.enableHostInfo | Set-AdvancedSetting -Value false
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000199"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000199"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000199</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000199
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have shared salt values disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000199"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000199"
+            >
+              <!-- Result description -->
+              When salting is enabled (Mem.ShareForceSalting&#x3D;1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced option for each virtual machine. The salt values can be specified manually in the virtual machine&#39;s advanced settings with the new option &quot;sched.mem.pshare.salt&quot;.
+
+If this option is not present in the virtual machine&#39;s advanced settings, the value of the &quot;vc.uuid&quot; option is taken as the default value. Because the &quot;vc.uuid&quot; is unique to each virtual machine, by default Transparent Page Sharing (TPS) happens only among the pages belonging to a particular virtual machine (Intra-VM).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000199</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have shared salt values disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When salting is enabled (Mem.ShareForceSalting&#x3D;1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced option for each virtual machine. The salt values can be specified manually in the virtual machine&#39;s advanced settings with the new option &quot;sched.mem.pshare.salt&quot;.
+
+If this option is not present in the virtual machine&#39;s advanced settings, the value of the &quot;vc.uuid&quot; option is taken as the default value. Because the &quot;vc.uuid&quot; is unique to each virtual machine, by default Transparent Page Sharing (TPS) happens only among the pages belonging to a particular virtual machine (Intra-VM).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;sched.mem.pshare.salt&quot; setting does not exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name sched.mem.pshare.salt
+
+If the virtual machine advanced setting &quot;sched.mem.pshare.salt&quot; exists, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Delete the &quot;sched.mem.pshare.salt&quot; setting.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name sched.mem.pshare.salt | Remove-AdvancedSetting
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000200"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000200"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000200</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000200
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must disable access through the &quot;dvfilter&quot; network Application Programming Interface (API).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000200"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000200"
+            >
+              <!-- Result description -->
+              An attacker might compromise a VM by using the &quot;dvFilter&quot; API. Configure only VMs that need this access to use the API.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000200</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must disable access through the &quot;dvfilter&quot; network Application Programming Interface (API).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An attacker might compromise a VM by using the &quot;dvFilter&quot; API. Configure only VMs that need this access to use the API.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the settings with the format &quot;ethernet*.filter*.name&quot; do not exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name &quot;ethernet*.filter*.name*&quot;
+
+If the virtual machine advanced setting &quot;ethernet*.filter*.name&quot; exists and dvfilters are not in use, this is a finding.
+
+If the virtual machine advanced setting &quot;ethernet*.filter*.name&quot; exists and the value is not valid, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Look for settings with the format &quot;ethernet*.filter*.name&quot;.
+
+Ensure only required VMs use this setting.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name ethernetX.filterY.name | Remove-AdvancedSetting
+
+Note: Change the X and Y values to match the specific setting in the organization&#39;s environment.
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000201"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000201"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000201</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000201
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must be configured to lock when the last console connection is closed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000201"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000201"
+            >
+              <!-- Result description -->
+              When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000201</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must be configured to lock when the last console connection is closed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; VMware Remote Console Options.
+
+Verify the option &quot;Lock the guest operating system when the last remote user disconnects&quot; is checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guest.desktop.autolock
+
+If the virtual machine advanced setting &quot;tools.guest.desktop.autolock&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.guest.desktop.autolock&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; VMware Remote Console Options.
+
+Check the box next to &quot;Lock the guest operating system when the last remote user disconnects&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guest.desktop.autolock | Set-AdvancedSetting -Value true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000202"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000202"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000202</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000202
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must disable 3D features when not required.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000202"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000202"
+            >
+              <!-- Result description -->
+              For performance reasons, it is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality (e.g., most server workloads or desktops not using 3D applications).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000202</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must disable 3D features when not required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For performance reasons, it is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality (e.g., most server workloads or desktops not using 3D applications).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings.
+
+Expand the &quot;Video card&quot; and verify the &quot;Enable 3D Support&quot; checkbox is unchecked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name mks.enable3d
+
+If the virtual machine advanced setting &quot;mks.enable3d&quot; exists and is not set to &quot;false&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;mks.enable3d&quot; does not exist, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings.
+
+Expand the &quot;Video card&quot; and uncheck the &quot;Enable 3D Support&quot; checkbox.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name mks.enable3d | Set-AdvancedSetting -Value &quot;false&quot;
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000203"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000203"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000203</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000203
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must enable encryption for vMotion.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000203"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000203"
+            >
+              <!-- Result description -->
+              vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the vMotion network. As of vSphere 6.5, this transfer can be transparently encrypted using 256-bit AES-GCM with negligible performance impact.
+
+vSphere enables encrypted vMotion by default as &quot;Opportunistic&quot;, meaning that encrypted channels are used where supported, but the operation will continue in plain text where encryption is not supported.
+
+For example, when vMotioning between two hosts, encryption will always be used. However, because 6.0 and earlier releases do not support this feature, vMotion from a 7.0 host to a 6.0 host would be allowed but would not be encrypted. If the encryption is set to &quot;Required&quot;, vMotions to unsupported hosts will fail. This must be set to &quot;Opportunistic&quot; or &quot;Required&quot;.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000203</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must enable encryption for vMotion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the vMotion network. As of vSphere 6.5, this transfer can be transparently encrypted using 256-bit AES-GCM with negligible performance impact.
+
+vSphere enables encrypted vMotion by default as &quot;Opportunistic&quot;, meaning that encrypted channels are used where supported, but the operation will continue in plain text where encryption is not supported.
+
+For example, when vMotioning between two hosts, encryption will always be used. However, because 6.0 and earlier releases do not support this feature, vMotion from a 7.0 host to a 6.0 host would be allowed but would not be encrypted. If the encryption is set to &quot;Required&quot;, vMotions to unsupported hosts will fail. This must be set to &quot;Opportunistic&quot; or &quot;Required&quot;.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {($_.ExtensionData.Config.MigrateEncryption -eq &quot;disabled&quot;)}
+
+If the &quot;Encrypted vMotion&quot; setting does not have a value of &quot;Opportunistic&quot; or &quot;Required&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+For &quot;Encrypted vMotion&quot; set the value to &quot;Opportunistic&quot; or &quot;Required&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.MigrateEncryption &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpecEncryptedVMotionModes
+$spec.MigrateEncryption &#x3D; $true
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000204"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000204"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000204</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000204
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must enable encryption for Fault Tolerance.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000204"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000204"
+            >
+              <!-- Result description -->
+              Fault Tolerance log traffic can be encrypted. This could contain sensitive data from the protected machine&#39;s memory or CPU instructions.
+
+vSphere Fault Tolerance performs frequent checks between a primary VM and secondary VM so the secondary VM can quickly resume from the last successful checkpoint. The checkpoint contains the VM state that has been modified since the previous checkpoint.
+
+When Fault Tolerance is turned on, FT encryption is set to &quot;Opportunistic&quot; by default, which means it enables encryption only if both the primary and secondary host are capable of encryption.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000204</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must enable encryption for Fault Tolerance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Fault Tolerance log traffic can be encrypted. This could contain sensitive data from the protected machine&#39;s memory or CPU instructions.
+
+vSphere Fault Tolerance performs frequent checks between a primary VM and secondary VM so the secondary VM can quickly resume from the last successful checkpoint. The checkpoint contains the VM state that has been modified since the previous checkpoint.
+
+When Fault Tolerance is turned on, FT encryption is set to &quot;Opportunistic&quot; by default, which means it enables encryption only if both the primary and secondary host are capable of encryption.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the Virtual Machine does not have Fault Tolerance enabled, this is not applicable.
+
+For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {($_.ExtensionData.Config.FtEncryptionMode -ne &quot;ftEncryptionOpportunistic&quot;) -and ($_.ExtensionData.Config.FtEncryptionMode -ne &quot;ftEncryptionRequired&quot;)}
+
+If the &quot;Encrypted FT&quot; setting does not have a value of &quot;Opportunistic&quot; or &quot;Required&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+For &quot;Encrypted FT&quot; set the value to &quot;Opportunistic&quot; or &quot;Required&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.FTEncryption &#x3D; New-Object VMware.Vim.VMware.Vim.VirtualMachineConfigSpecEncryptedFtModes
+$spec.FT &#x3D; ftEncryptionOpportunistic or ftEncryptionRequired
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000205"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000205"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000205</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000205
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must configure log size.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000205"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000205"
+            >
+              <!-- Result description -->
+              The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, the size of these logs is unlimited, and they are only rotated on vMotion or power events. This can cause storage issues at scale for VMs that do not vMotion or power cycle often.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000205</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must configure log size.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, the size of these logs is unlimited, and they are only rotated on vMotion or power events. This can cause storage issues at scale for VMs that do not vMotion or power cycle often.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;log.rotateSize&quot; value is set to &quot;2048000&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.rotateSize
+
+If the virtual machine advanced setting &quot;log.rotateSize&quot; is not set to &quot;2048000&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;log.rotateSize&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;log.rotateSize&quot; value and set it to &quot;2048000&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.rotateSize | Set-AdvancedSetting -Value 2048000
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000206"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000206"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000206</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000206
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must configure log retention.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000206"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000206"
+            >
+              <!-- Result description -->
+              The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, 10 of these logs are retained. This is normally sufficient for most environments, but this configuration must be verified and maintained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000206</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must configure log retention.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, 10 of these logs are retained. This is normally sufficient for most environments, but this configuration must be verified and maintained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;log.keepOld&quot; value is set to &quot;10&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.keepOld
+
+If the virtual machine advanced setting &quot;log.keepOld&quot; is not set to &quot;10&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;log.keepOld&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;log.keepOld&quot; value and set it to &quot;10&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.keepOld | Set-AdvancedSetting -Value 10
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000207"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000207"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000207</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000207
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must enable logging.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000207"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000207"
+            >
+              <!-- Result description -->
+              The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including, but not limited to, power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations and machine clones. Due to the value these logs provide for the continued availability of each VM and potential security incidents, these logs must be enabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000207</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must enable logging.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including, but not limited to, power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations and machine clones. Due to the value these logs provide for the continued availability of each VM and potential security incidents, these logs must be enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Advanced.
+
+Ensure that the checkbox next to &quot;Enable logging&quot; is checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Flags.EnableLogging -ne &quot;True&quot;}
+
+If logging is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Advanced.
+
+Click the checkbox next to &quot;Enable logging&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.Flags &#x3D; New-Object VMware.Vim.VirtualMachineFlagInfo
+$spec.Flags.enableLogging &#x3D; $true
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000208"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000208"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000208</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000208
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must not use independent, non-persistent disks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000208"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000208"
+            >
+              <!-- Result description -->
+              The security issue with nonpersistent disk mode is that successful attackers, with a simple shutdown or reboot, might undo or remove any traces they were ever on the machine. To safeguard against this risk, production virtual machines should be set to use persistent disk mode; additionally, ensure activity within the VM is logged remotely on a separate server, such as a syslog server or equivalent Windows-based event collector. Without a persistent record of activity on a VM, administrators might never know whether they have been attacked or hacked.
+
+There can be valid use cases for these types of disks, such as with an application presentation solution where read-only disks are desired, and such cases should be identified and documented.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000208</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must not use independent, non-persistent disks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The security issue with nonpersistent disk mode is that successful attackers, with a simple shutdown or reboot, might undo or remove any traces they were ever on the machine. To safeguard against this risk, production virtual machines should be set to use persistent disk mode; additionally, ensure activity within the VM is logged remotely on a separate server, such as a syslog server or equivalent Windows-based event collector. Without a persistent record of activity on a VM, administrators might never know whether they have been attacked or hacked.
+
+There can be valid use cases for these types of disks, such as with an application presentation solution where read-only disks are desired, and such cases should be identified and documented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the attached hard disks and verify they are not configured as independent nonpersistent disks.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Select Parent, Name, Filename, DiskType, Persistence | FT -AutoSize
+
+If the virtual machine has attached disks that are in independent nonpersistent mode and are not documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the target hard disk and change the mode to persistent or uncheck Independent.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run one of the following commands:
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Set-HardDisk -Persistence IndependentPersistent
+
+or
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Set-HardDisk -Persistence Persistent</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000209"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000209"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000209</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000209
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded floppy devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000209"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000209"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000209</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded floppy devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState
+
+If a virtual machine has a floppy drive connected, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+The VM must be powered off to remove a floppy drive.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-FloppyDrive | Remove-FloppyDrive</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000210"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000210"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000210</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000210
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded CD&#x2F;DVD devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000210"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000210"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000210</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded CD&#x2F;DVD devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no CD&#x2F;DVD drives are connected.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Get-CDDrive | Where {$_.extensiondata.connectable.connected -eq $true} | Select Parent,Name
+
+If a virtual machine has a CD&#x2F;DVD drive connected other than temporarily, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the CD&#x2F;DVD drive and uncheck &quot;Connected&quot; and &quot;Connect at power on&quot; and remove any attached ISOs.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-CDDrive | Set-CDDrive -NoMedia</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000211"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000211"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000211</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000211
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded parallel devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000211"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000211"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000211</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded parallel devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;parallel&quot;}
+
+If a virtual machine has a parallel device present, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+The VM must be powered off to remove a parallel device.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$pport &#x3D; (Get-VM -Name &lt;vmname&gt;).ExtensionData.Config.Hardware.Device | Where {$_.DeviceInfo.Label -match &quot;Parallel&quot;}
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.DeviceChange +&#x3D; New-Object VMware.Vim.VirtualDeviceConfigSpec
+$spec.DeviceChange[-1].device &#x3D; $pport
+$spec.DeviceChange[-1].operation &#x3D; &quot;remove&quot;
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000212"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000212"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000212</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000212
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded serial devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000212"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000212"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000212</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded serial devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no serial devices exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;serial&quot;}
+
+If a virtual machine has a serial device present, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The VM must be powered off to remove a serial device.
+
+For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the serial device, click the circled &quot;X&quot; to remove it, and click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000213"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000213"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000213</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000213
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded USB devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000213"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000213"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000213</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded USB devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no USB devices exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;usb&quot;}
+Get-VM | Get-UsbDevice
+
+If a virtual machine has any USB devices or USB controllers present, this is a finding.
+
+If USB smart card readers are used to pass smart cards through the VM console to a VM, the use of a USB controller and USB devices for that purpose is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the USB controller, click the circled &quot;X&quot; to remove it, and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-USBDevice | Remove-USBDevice
+
+Note:  This will not remove the USB controller, just any connected devices.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000214"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000214"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000214</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000214
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must disable DirectPath I&#x2F;O devices when not required.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000214"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000214"
+            >
+              <!-- Result description -->
+              VMDirectPath I&#x2F;O (PCI passthrough) enables direct assignment of hardware PCI functions to VMs. This gives the VM access to the PCI functions with minimal intervention from the ESXi host. This is a powerful feature for legitimate applications such as virtualized storage appliances, backup appliances, dedicated graphics, etc., but it also allows a potential attacker highly privileged access to underlying hardware and the PCI bus.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000214</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must disable DirectPath I&#x2F;O devices when not required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMDirectPath I&#x2F;O (PCI passthrough) enables direct assignment of hardware PCI functions to VMs. This gives the VM access to the PCI functions with minimal intervention from the ESXi host. This is a powerful feature for legitimate applications such as virtualized storage appliances, backup appliances, dedicated graphics, etc., but it also allows a potential attacker highly privileged access to underlying hardware and the PCI bus.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, view the Summary tab.
+
+Review the PCI devices section and verify none exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-PassthroughDevice
+
+If the virtual machine has passthrough devices present, and the specific device returned is not approved, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, select the Virtual Machine, right click and go to Edit Settings &gt;&gt; Virtual Hardware tab.
+
+Find the unexpected PCI device returned from the check.
+
+Hover the mouse over the device and click the circled &quot;X&quot; to remove the device. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-PassthroughDevice | Remove-PassthroughDevice</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000009"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000009"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000009</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001184
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000009
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001184
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000009"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000009"
+            >
+              <!-- Result description -->
+              Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000009</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2), CM-7 b, IA-2 (8), IA-2 (9), SC-13, SC-23, SC-8, SC-8 (1), SC-8 (2)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >At the command prompt on the vCenter Server Appliance, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware-TlsReconfigurator&#x2F;VcTlsReconfigurator&#x2F;reconfigureVc scan
+
+If the output indicates versions of TLS other than 1.2 are enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >At the command prompt on the vCenter Server Appliance, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware-TlsReconfigurator&#x2F;VcTlsReconfigurator&#x2F;reconfigureVc update -p TLSv1.2
+
+vCenter services will be restarted as part of the reconfiguration. The operating system will not be restarted.
+
+The &quot;--no-restart&quot; flag can be added to restart services at a later time.
+
+Changes will not take effect until all services are restarted or the appliance is rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000023"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000023"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000023</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000023
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enforce the limit of three consecutive invalid login attempts by a user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000023"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000023"
+            >
+              <!-- Result description -->
+              By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).MaxFailedAttempts stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 3
+     got: 5
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000023</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enforce the limit of three consecutive invalid login attempts by a user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+The following lockout policy should be set as follows:
+
+Maximum number of failed login attempts: 3
+
+If this account lockout policy is not configured as stated, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Maximum number of failed login attempts&quot; to &quot;3&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000024"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000024"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000024</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 1
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001384
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000024
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 1
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001384
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000024"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000024"
+            >
+              <!-- Result description -->
+              Display of the DOD-approved use notification before granting access to the application ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with DTM-08-060. Use the following verbiage for applications that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for operating systems that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000024</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of the DOD-approved use notification before granting access to the application ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with DTM-08-060. Use the following verbiage for applications that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for operating systems that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a, AC-8 b, AC-8 c 1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Login Message.
+
+If the selection box next to &quot;Show login message&quot; is disabled, &quot;Details of login message&quot; is not configured to the standard DOD User Agreement, or the &quot;Consent checkbox&quot; is disabled, this is a finding.
+
+Note: Refer to vulnerability discussion for user agreement language.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Login Message.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Show login message&quot; slider to enable.
+
+Configure the &quot;Login message&quot; to &quot;DOD User Agreement&quot;.
+
+Click the &quot;Consent checkbox&quot; slider to enable.
+
+Set the &quot;Details of login message&quot; to the Standard Mandatory DOD Notice and Consent Banner text.
+
+Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000034"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000034"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000034</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000034
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must produce audit records containing information to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000034"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000034"
+            >
+              <!-- Result description -->
+              Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000034</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must produce audit records containing information to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify the &quot;config.log.level&quot; value is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.log.level and verify it is set to &quot;info&quot;.
+
+If the &quot;config.log.level&quot; value is not set to &quot;info&quot; or does not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;config.log.level&quot; setting to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.log.level | Set-AdvancedSetting -Value info</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000057"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000057"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000057</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000057
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  vCenter Server plugins must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000057"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000057"
+            >
+              <!-- Result description -->
+              The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, web-based functionality.
+
+vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
+
+Additionally, vCenter comes with a number of plugins preinstalled that may or may not be necessary for proper operation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000057</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter Server plugins must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, web-based functionality.
+
+vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
+
+Additionally, vCenter comes with a number of plugins preinstalled that may or may not be necessary for proper operation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Solutions &gt;&gt; Client Plug-Ins.
+
+View the Installed&#x2F;Available Plug-ins list and verify they are all identified as authorized VMware, third-party (partner), and&#x2F;or site-specific approved plug-ins.
+
+If any installed&#x2F;available plug-ins in the viewable list cannot be verified as allowed vSphere Client plug-ins from trusted sources or are not in active use, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Solutions &gt;&gt; Client Plug-Ins, click the radio button next to the unknown plug-in, and click &quot;Disable&quot;.
+
+If the plugin will not be needed in the future, proceed to uninstall the plug-in.
+
+To uninstall plug-ins, do the following:
+
+If vCenter Server is in linked mode, perform this procedure on the vCenter Server that is used to install the plug-in initially and then restart the vCenter Server services on the linked vCenter Server:
+
+In a web browser, navigate to &quot;http:&#x2F;&#x2F;vCenter_Server_name_or_IP&#x2F;mob&quot;, where &quot;vCenter_Server_name_or_IP&#x2F;mob&quot; is the name of the vCenter Server or its IP address.
+
+Click &quot;Content&quot;.
+
+Click &quot;ExtensionManager&quot;.
+
+Select and copy the name of the plug-in to be removed from the list of values under &quot;Properties&quot;.
+
+Click &quot;UnregisterExtension&quot;. A new window appears.
+
+Paste the name of the plug-in and click &quot;Invoke Method&quot;. This removes the plug-in.
+
+Close the window.
+
+Refresh the Managed Object Type:ManagedObjectReference:ExtensionManager window to verify the plug-in is removed successfully.
+
+Note: If the plug-in still appears, restart the vSphere Client.
+
+Note: The Managed Object Browser (MOB) may have to be enabled temporarily if it was disabled previously.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000059"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000059"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000059</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000059
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000059"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000059"
+            >
+              <!-- Result description -->
+              To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses except the following.
+
+(i) Accesses explicitly identified and documented by the organization. Organizations document specific user actions that can be performed on the information system without identification or authentication; and
+(ii) Accesses that occur through authorized use of group authenticators without individual authentication. Organizations may require unique identification of individuals in group accounts (e.g., shared privilege accounts) or for detailed accountability of individual activity.
+
+Using Active Directory or an identity provider for authentication provides more robust account management capabilities and accountability.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000059</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses except the following.
+
+(i) Accesses explicitly identified and documented by the organization. Organizations document specific user actions that can be performed on the information system without identification or authentication; and
+(ii) Accesses that occur through authorized use of group authenticators without individual authentication. Organizations may require unique identification of individuals in group accounts (e.g., shared privilege accounts) or for detailed accountability of individual activity.
+
+Using Active Directory or an identity provider for authentication provides more robust account management capabilities and accountability.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), IA-2, IA-2 (5), IA-4 e, IA-8</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+If the identity provider type is &quot;embedded&quot; and there is no identity source of type &quot;Active Directory&quot; (either Windows Integrated Authentication or LDAP), this is a finding.
+
+If the identity provider type is &quot;Microsoft ADFS&quot; or another supported identity provider, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When using the embedded identity provider type, perform the following:
+
+From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Identity Sources.
+
+Click &quot;Add&quot;.
+
+Select either &quot;Active Directory over LDAP&quot; or &quot;Active Directory (Windows Integrated Authentication)&quot; and configure appropriately.
+
+Note: Windows Integrated Authentication requires that the vCenter server be joined to Active Directory before configuration via Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Active Directory Domain.
+
+OR
+
+To change the identity provider type to a third-party identity provider such as Microsoft ADFS, perform the following:
+
+From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click &quot;Change Identity Provider&quot;.
+
+Select &quot;Microsoft ADFS&quot; and click &quot;Next&quot;.
+
+Enter the ADFS server information and User and Group details and click &quot;Finish&quot;.
+
+For additional information on configuring ADFS for use with vCenter, refer to the vSphere documentation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000060"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000060"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000060</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002009
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000060
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must require multifactor authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002009
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000060"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000060"
+            >
+              <!-- Result description -->
+              Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.
+
+Multifactor authentication requires using two or more factors to achieve authentication.
+
+Factors include:
+(i) something a user knows (e.g., password&#x2F;PIN);
+(ii) something a user has (e.g., cryptographic identification device, token); or
+(iii) something a user is (e.g., biometric).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000060</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must require multifactor authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.
+
+Multifactor authentication requires using two or more factors to achieve authentication.
+
+Factors include:
+(i) something a user knows (e.g., password&#x2F;PIN);
+(ii) something a user has (e.g., cryptographic identification device, token); or
+(iii) something a user is (e.g., biometric).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-10, IA-2 (1), IA-2 (12), IA-2 (2), IA-8 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+If the embedded identity provider is used, click on &quot;Smart Card Authentication&quot;.
+
+If the embedded identity provider is used and &quot;Smart Card Authentication&quot; is not enabled, this is a finding.
+
+If a third-party identity provider is used, such as Microsoft ADFS, and it does not require multifactor authentication to log on to vCenter, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To configure smart card authentication for vCenter when using the embedded identity provider, refer to the vSphere documentation.
+
+For vCenter Servers using a third-party identity provider, consult the product&#39;s documentation for enabling multifactor authentication.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000069"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000069"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000069</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000069
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must be at least 15 characters in length.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000069"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000069"
+            >
+              <!-- Result description -->
+              The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Use of more characters in a password helps to exponentially increase the time and&#x2F;or resources required to compromise the password.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinLength stdout.strip is expected to cmp &gt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 15
+     got: 8
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000069</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must be at least 15 characters in length.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Use of more characters in a password helps to exponentially increase the time and&#x2F;or resources required to compromise the password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Minimum Length&quot; setting.
+
+Minimum Length: 15
+
+If the password policy is not configured with a &quot;Minimum Length&quot; policy of &quot;15&quot; or more, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Minimum Length&quot; to &quot;15&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000070"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000070"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000070</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000070
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must prohibit password reuse for a minimum of five generations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000070"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000070"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+To meet password policy requirements, passwords must be changed at specific policy-based intervals.
+
+If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).ProhibitedPreviousPasswordsCount stdout.strip is expected to cmp &gt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000070</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must prohibit password reuse for a minimum of five generations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+To meet password policy requirements, passwords must be changed at specific policy-based intervals.
+
+If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (e)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Restrict reuse&quot; setting.
+
+Restrict reuse: Users cannot reuse any previous 5 passwords
+
+If the password policy is not configured with a &quot;Restrict reuse&quot; policy of &quot;5&quot; or more, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Restrict reuse&quot; to &quot;5&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000071"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000071"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000071</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000071
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must contain at least one uppercase character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000071"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000071"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password is, the greater the number of possible combinations that need to be tested before the password is compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinUppercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000071</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must contain at least one uppercase character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password is, the greater the number of possible combinations that need to be tested before the password is compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 uppercase characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more uppercase characters, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;uppercase characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000072"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000072"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000072</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000072
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must contain at least one lowercase character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000072"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000072"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinLowercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000072</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must contain at least one lowercase character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 lowercase characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more lowercase characters, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;lowercase characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000073"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000073"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000073</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000073
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must contain at least one numeric character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000073"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000073"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinNumericCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000073</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must contain at least one numeric character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 numeric characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more numeric characters, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;numeric characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000074"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000074"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000074</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000074
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must contain at least one special character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000074"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000074"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor in determining how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Special characters are not alphanumeric. Examples include: ~ ! @ # $ % ^ *.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinSpecialCharCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000074</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must contain at least one special character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor in determining how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Special characters are not alphanumeric. Examples include: ~ ! @ # $ % ^ *.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 special characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more special characters, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;special characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000077"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000077"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000077</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000197
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001188
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000077
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enable FIPS-validated cryptography.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000197
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001188
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000077"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000077"
+            >
+              <!-- Result description -->
+              FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements.
+
+In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).
+
+vSphere 7.0 Update 2 and later adds additional FIPS-validated cryptography to vCenter Server Appliance. By default, this FIPS validation option is disabled and must be enabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Invoke-GetSystemGlobalFips | Select-Object -ExpandProperty enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000077</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enable FIPS-validated cryptography.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements.
+
+In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).
+
+vSphere 7.0 Update 2 and later adds additional FIPS-validated cryptography to vCenter Server Appliance. By default, this FIPS validation option is disabled and must be enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3 (1), IA-5 (1) (c), IA-7, MA-4 (6), SC-13, SC-23 (3), SC-28</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Web Client, go to Developer Center &gt;&gt; API Explorer.
+
+From the &quot;Select API&quot; drop-down menu, select appliance.
+
+Expand system&#x2F;security&#x2F;global_fips &gt;&gt; GET.
+
+Click &quot;Execute&quot; and then &quot;Copy Response&quot; to view the results.
+
+Example response:
+
+{
+    &quot;enabled&quot;: true
+}
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Invoke-GetSystemGlobalFips
+
+If global FIPS mode is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Web Client go to Developer Center &gt;&gt; API Explorer.
+
+From the &quot;Select API&quot; drop-down menu, select appliance.
+
+Expand system&#x2F;security&#x2F;global_fips &gt;&gt; PUT.
+
+In the response body under &quot;Try it out&quot; paste the following:
+
+{
+    &quot;enabled&quot;: true
+}
+
+Click &quot;Execute&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$spec &#x3D; Initialize-SystemSecurityGlobalFipsUpdateSpec -Enabled $true; Invoke-SetSystemGlobalFips -SystemSecurityGlobalFipsUpdateSpec $spec
+
+Note: The vCenter server reboots after FIPS is enabled or disabled.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000079"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000079"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000079</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000079
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enforce a 90-day maximum password lifetime restriction.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000079"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000079"
+            >
+              <!-- Result description -->
+              Any password, no matter how complex, can eventually be cracked. Therefore, passwords must be changed at specific intervals.
+
+One method of minimizing this risk is to use complex passwords and periodically change them. If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the system and&#x2F;or application passwords could be compromised.
+
+This requirement does not include emergency administration accounts, which are meant for access to the application in case of failure. These accounts are not required to have maximum password lifetime restrictions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).PasswordLifetimeDays stdout.strip is expected to cmp &lt;&#x3D; 90</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000079</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enforce a 90-day maximum password lifetime restriction.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any password, no matter how complex, can eventually be cracked. Therefore, passwords must be changed at specific intervals.
+
+One method of minimizing this risk is to use complex passwords and periodically change them. If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the system and&#x2F;or application passwords could be compromised.
+
+This requirement does not include emergency administration accounts, which are meant for access to the application in case of failure. These accounts are not required to have maximum password lifetime restrictions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Maximum lifetime&quot; setting.
+
+Maximum lifetime: Password must be changed every 90 days
+
+If the password policy is not configured with &quot;Maximum lifetime&quot; policy of &quot;90&quot; or less, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;Maximum lifetime&quot; to &quot;90&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000080"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000080"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000080</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001991
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002010
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000080
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enable revocation checking for certificate-based authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001991
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002010
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000080"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000080"
+            >
+              <!-- Result description -->
+              The system must establish the validity of the user-supplied identity certificate using Online Certificate Status Protocol (OCSP) and&#x2F;or Certificate Revocation List (CRL) revocation checking.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).UseInCertCRL stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000080</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enable revocation checking for certificate-based authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must establish the validity of the user-supplied identity certificate using Online Certificate Status Protocol (OCSP) and&#x2F;or Certificate Revocation List (CRL) revocation checking.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (12), IA-5 (2) (a), IA-5 (2) (d), IA-8 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a federated identity provider is configured and used for an identity source and supports Smartcard authentication, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under Smart card authentication settings &gt;&gt; Certificate revocation, verify &quot;Revocation check&quot; does not show as disabled.
+
+If &quot;Revocation check&quot; shows as disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under Smart card authentication settings &gt;&gt; Certificate revocation, click the &quot;Edit&quot; button.
+
+Configure revocation checking per site requirements. OCSP with CRL failover is recommended.
+
+By default, both locations are pulled from the cert. CRL location can be overridden in this screen, and local responders can be specified via the sso-config command line tool. See the vSphere documentation for more information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000089"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000089"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000089</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-11
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002038
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000089
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must terminate vSphere Client sessions after 15 minutes of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-11
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002038
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000089"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000089"
+            >
+              <!-- Result description -->
+              Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free resources committed by the managed network element.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000089</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must terminate vSphere Client sessions after 15 minutes of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free resources committed by the managed network element.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-12, IA-11, SC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Client Configuration.
+
+View the value of the &quot;Session timeout&quot; setting.
+
+If the &quot;Session timeout&quot; is not set to &quot;15 minute(s)&quot; or less this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Client Configuration.
+
+Click &quot;Edit&quot; and enter &quot;15&quot; minutes into the &quot;Session timeout&quot; setting. Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000095"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000095"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000095</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000095
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server user roles must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000095"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000095"
+            >
+              <!-- Result description -->
+              Users and service accounts must only be assigned privileges they require. Least privilege requires that these privileges must only be assigned if needed to reduce risk of confidentiality, availability, or integrity loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000095</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server user roles must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Users and service accounts must only be assigned privileges they require. Least privilege requires that these privileges must only be assigned if needed to reduce risk of confidentiality, availability, or integrity loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (1), SC-2, SC-3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+View each role and verify the users and&#x2F;or groups assigned to it by clicking on &quot;Usage&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Sort Role | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+Application service account and user required privileges should be documented.
+
+If any user or service account has more privileges than required, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To update a user&#39;s or group&#39;s permissions to an existing role with reduced permissions, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Global Permissions.
+
+Select the user or group, click the pencil button, change the assigned role, and click &quot;OK&quot;.
+
+Note: If permissions are assigned on a specific object, the role must be updated where it is assigned (for example, at the cluster level).
+
+To create a new role with reduced permissions, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Click the green plus sign and enter a name for the role and select only the specific permissions required.
+
+Users can then be assigned to the newly created role.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000110"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000110"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000110</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000110
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I&#x2F;O Control (NIOC).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000110"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000110"
+            >
+              <!-- Result description -->
+              DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+Managing excess capacity ensures sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000110</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I&#x2F;O Control (NIOC).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+Managing excess capacity ensures sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5 (2)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+View the &quot;Properties&quot; pane and verify &quot;Network I&#x2F;O Control&quot; is &quot;Enabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;NIOC Enabled&quot;;E&#x3D;{$_.ExtensionData.config.NetworkResourceManagementEnabled}}
+
+If &quot;Network I&#x2F;O Control&quot; is disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+In the &quot;Properties&quot; pane, click &quot;Edit&quot;. Change &quot;Network I&#x2F;O Control&quot; to &quot;Enabled&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDSwitch &quot;VDSwitch Name&quot; | Get-View).EnableNetworkResourceManagement($true)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000123"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000123"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000123</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002132
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000123
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002132
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000123"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000123"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to create a new account. They may also try to hijack an existing account by changing a password or enabling a previously disabled account. Therefore, all actions performed on accounts in the SSO domain much be alerted on in vCenter at a minimum and ideally on a Security Information and Event Management (SIEM) system as well.
+
+To ensure the appropriate personnel are alerted about SSO account actions, create a new vCenter alarm for the &quot;com.vmware.sso.PrincipalManagement&quot; event ID and configure the alert mechanisms appropriately.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AlarmDefinition | Where-Object {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000123</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to create a new account. They may also try to hijack an existing account by changing a password or enabling a previously disabled account. Therefore, all actions performed on accounts in the SSO domain much be alerted on in vCenter at a minimum and ideally on a Security Information and Event Management (SIEM) system as well.
+
+To ensure the appropriate personnel are alerted about SSO account actions, create a new vCenter alarm for the &quot;com.vmware.sso.PrincipalManagement&quot; event ID and configure the alert mechanisms appropriately.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Security &gt;&gt; Alarm Definitions.
+
+Verify there is an alarm created to alert upon all SSO account actions.
+
+The alarm name may vary, but it is suggested to name it &quot;SSO account actions - com.vmware.sso.PrincipalManagement&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AlarmDefinition | Where {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select Name,Enabled,@{N&#x3D;&quot;EventTypeId&quot;;E&#x3D;{$_.ExtensionData.Info.Expression.Expression.EventTypeId}}
+
+If an alarm is not created to alert on SSO account actions, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Security &gt;&gt; Alarm Definitions.
+
+Click &quot;Add&quot;.
+
+Provide the alarm name of &quot;SSO account actions - com.vmware.sso.PrincipalManagement&quot; and an optional description.
+
+From the &quot;Target type&quot; dropdown menu, select &quot;vCenter Server&quot;.
+
+Click &quot;Next&quot;.
+
+Paste &quot;com.vmware.sso.PrincipalManagement&quot; (without quotes) in the line after &quot;IF&quot; and press &quot;Enter&quot;.
+
+Next to &quot;Trigger the alarm and&quot;, select &quot;Show as Warning&quot;.
+
+Configure the desired notification actions that will inform the SA and ISSO of the event.
+
+Click &quot;Next&quot;. Click &quot;Next&quot; again. Click &quot;Create&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000145"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000145"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000145</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000145
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000145"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000145"
+            >
+              <!-- Result description -->
+              By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).FailedAttemptIntervalSec stdout.strip is expected to cmp &gt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 900
+     got: 180
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000145</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+View the value of the &quot;Time interval between failures&quot; setting.
+
+Time interval between failures: 900 seconds
+
+If the lockout policy is not configured with &quot;Time interval between failures&quot; policy of &quot;900&quot; or more, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Time interval between failures&quot; to &quot;900&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000148"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000148"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000148</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000148
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must be configured to send logs to a central log server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000148"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000148"
+            >
+              <!-- Result description -->
+              vCenter must be configured to send near real-time log data to syslog collectors so information will be available to investigators in the case of a security incident or to assist in troubleshooting.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No log servers configured: [] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to be falsey, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000148</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must be configured to send logs to a central log server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter must be configured to send near real-time log data to syslog collectors so information will be available to investigators in the case of a security incident or to assist in troubleshooting.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Syslog&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify at least one site-specific syslog receiver is configured and is listed as &quot;Reachable&quot;.
+
+If no valid syslog collector is configured or if the collector is not listed as &quot;Reachable&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Syslog&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Edit&quot; or &quot;Configure&quot;.
+
+Edit or add the address and port of a site-specific syslog aggregator or Security Information Event Management (SIEM) system with the appropriate protocol.
+
+User Datagram Protocol (UDP) is discouraged due to its stateless and unencrypted nature. Transport Layer Security (TLS) is preferred.
+
+Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000150"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000150"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000150</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001744
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000150
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001744
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000150"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000150"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system operation may be adversely affected.
+
+Alerts provide organizations with urgent messages. Real-time alerts provide these messages immediately (i.e., the time from event detection to alert occurs in seconds or less).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000150</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system operation may be adversely affected.
+
+Alerts provide organizations with urgent messages. Real-time alerts provide these messages immediately (i.e., the time from event detection to alert occurs in seconds or less).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, AU-5 (2), CM-3 (5)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the Central Logging Server being used to verify it is configured to alert the SA and ISSO, at a minimum, on any AO-defined events. Otherwise, this is a finding.
+
+If there are no AO-defined events, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the Central Logging Server being used to alert the SA and ISSO, at a minimum, on any AO-defined events.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000158"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000158"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000158</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000158
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000158"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000158"
+            >
+              <!-- Result description -->
+              Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity.
+
+Synchronizing internal information system clocks to an authoritative time server provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Timesync Configuration: HOST is expected to cmp &#x3D;&#x3D; &quot;NTP&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NTP
+     got: HOST
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000158</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity.
+
+Synchronizing internal information system clocks to an authoritative time server provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-8 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Time&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify at least one authorized time server is configured and is listed as &quot;Reachable&quot;.
+
+If &quot;NTP&quot; is not enabled and at least one authorized time server configured, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Time&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Edit&quot; under &quot;Time Synchronization&quot;.
+
+Select &quot;NTP&quot; for &quot;Mode&quot; and enter a list of authorized time servers separated by commas. Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000195"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000195"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000195</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002470
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000195
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server Machine Secure Sockets Layer (SSL) certificate must be issued by a DOD certificate authority.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002470
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000195"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000195"
+            >
+              <!-- Result description -->
+              Untrusted certificate authorities (CA) can issue certificates, but they may be issued by organizations or individuals that seek to compromise DOD systems or by organizations with insufficient security controls. If the CA used for verifying the certificate is not a DOD-approved CA, trust of this CA has not been established.
+
+The DOD will only accept public key infrastructure (PKI) certificates obtained from a DOD-approved internal or external certificate authority. Reliance on CAs for the establishment of secure sessions includes, for example, the use of Transport Layer Security (TLS) certificates.
+
+The default self-signed, VMware Certificate Authority (VMCA)-issued vCenter reverse proxy certificate must be replaced with a DOD-approved certificate. The use of a DOD certificate on the vCenter reverse proxy and other services assures clients that the service they are connecting to is legitimate and trusted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ssl_certificate for &#39;10.186.30.81&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000195</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server Machine Secure Sockets Layer (SSL) certificate must be issued by a DOD certificate authority.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Untrusted certificate authorities (CA) can issue certificates, but they may be issued by organizations or individuals that seek to compromise DOD systems or by organizations with insufficient security controls. If the CA used for verifying the certificate is not a DOD-approved CA, trust of this CA has not been established.
+
+The DOD will only accept public key infrastructure (PKI) certificates obtained from a DOD-approved internal or external certificate authority. Reliance on CAs for the establishment of secure sessions includes, for example, the use of Transport Layer Security (TLS) certificates.
+
+The default self-signed, VMware Certificate Authority (VMCA)-issued vCenter reverse proxy certificate must be replaced with a DOD-approved certificate. The use of a DOD certificate on the vCenter reverse proxy and other services assures clients that the service they are connecting to is legitimate and trusted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-23 (5)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Certificates &gt;&gt; Certificate Management &gt;&gt; Machine SSL Certificate.
+
+Click &quot;View Details&quot; and examine the &quot;Issuer Information&quot; block.
+
+If the issuer specified is not a DOD approved certificate authority, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain a DOD-issued certificate and private key for each vCenter in the system following the requirements below:
+
+Key size: 2048 bits or more (PEM encoded)
+CRT format (Base-64)
+x509 version 3
+SubjectAltName must contain DNS Name&#x3D;&lt;machine_FQDN&gt;
+Contains the following Key Usages: Digital Signature, Non Repudiation, Key Encipherment
+
+Export the entire certificate issuing chain up to the root in Base-64 format. Concatenate the individual certificates into one file with the &quot;.cer&quot; extension.
+
+From the vSphere Client, go to Administration &gt;&gt; Certificates &gt;&gt; Certificate Management &gt;&gt; Machine SSL Certificate.
+
+Click Actions &gt;&gt; Import and Replace Certificate.
+
+Select the &quot;Replace with external CA certificate&quot; radio button and click &quot;Next&quot;.
+
+Supply the CA-issued certificate , the exported roots file, and the private key.
+
+Click &quot;Replace&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000196"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000196"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000196</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002475
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000196
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enable data at rest encryption for vSAN.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002475
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000196"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000196"
+            >
+              <!-- Result description -->
+              Applications handling data requiring &quot;data at rest&quot; protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+
+Data encryption is a common technique used in environments that require additional levels of security.  It consists of a process to ensure that data can only be consumed by systems that have appropriate levels of access.  Approved systems must have and use the appropriate cryptographic keys to encrypt and decrypt the data.  Systems that do not have the keys will not be able to consume the data in any meaningful way, as it will remain encrypted in accordance to the commonly used Advanced Encryption Standard (AES) from the National Institute of Standards and Technology, or NIST.
+
+vSAN supports Data-At-Rest Encryption and Data-in-Transit Encryption and uses an AES 256 cipher. Data is encrypted after all other processing, such as deduplication, is performed. Data at rest encryption protects data on storage devices, in case a device is removed from the cluster.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-Cluster -Name cluster0 | Get-VsanClusterConfiguration | Select-Object -ExpandProperty EncryptionEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000196</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enable data at rest encryption for vSAN.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications handling data requiring &quot;data at rest&quot; protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+
+Data encryption is a common technique used in environments that require additional levels of security.  It consists of a process to ensure that data can only be consumed by systems that have appropriate levels of access.  Approved systems must have and use the appropriate cryptographic keys to encrypt and decrypt the data.  Systems that do not have the keys will not be able to consume the data in any meaningful way, as it will remain encrypted in accordance to the commonly used Advanced Encryption Standard (AES) from the National Institute of Standards and Technology, or NIST.
+
+vSAN supports Data-At-Rest Encryption and Data-in-Transit Encryption and uses an AES 256 cipher. Data is encrypted after all other processing, such as deduplication, is performed. Data at rest encryption protects data on storage devices, in case a device is removed from the cluster.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-28 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Review the &quot;Data-at-rest encryption&quot; status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-Cluster | Where-Object {$_.VsanEnabled -eq $true} | Get-VsanClusterConfiguration | Select-Object Name,EncryptionEnabled
+
+If &quot;Data-At-Rest encryption&quot; is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the target cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Click &quot;Edit&quot;.
+
+Enable &quot;Data-At-Rest encryption&quot; and select a pre-configured key provider from the drop down. Click &quot;Apply&quot;.
+
+Note: Before enabling, read and understand the operational implications of enabling data at rest encryption in vSAN and how it effects capacity, performance, and recovery scenarios.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000248"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000248"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000248</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000248
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable the Customer Experience Improvement Program (CEIP).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000248"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000248"
+            >
+              <!-- Result description -->
+              The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes this feature must be disabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000248</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable the Customer Experience Improvement Program (CEIP).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes this feature must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Customer Experience Improvement Program.
+
+If Customer Experience Improvement &quot;Program Status&quot; is &quot;Joined&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Customer Experience Improvement Program.
+
+Click &quot;Leave Program&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000253"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000253"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000253</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000253
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must enforce SNMPv3 security features where SNMP is required.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000253"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000253"
+            >
+              <!-- Result description -->
+              SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. SNMPv3 can be configured for identification and cryptographically based authentication.
+
+SNMPv3 defines a user-based security model (USM) and a view-based access control model (VACM). SNMPv3 USM provides data integrity, data origin authentication, message replay protection, and protection against disclosure of the message payload. SNMPv3 VACM provides access control to determine whether a specific type of access (read or write) to the management information is allowed. Implement both VACM and USM for full protection.
+
+SNMPv3 must be disabled by default and enabled only if used. SNMP v3 provides security feature enhancements to SNMP, including encryption and message authentication.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000253</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must enforce SNMPv3 security features where SNMP is required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. SNMPv3 can be configured for identification and cryptographically based authentication.
+
+SNMPv3 defines a user-based security model (USM) and a view-based access control model (VACM). SNMPv3 USM provides data integrity, data origin authentication, message replay protection, and protection against disclosure of the message payload. SNMPv3 VACM provides access control to determine whether a specific type of access (read or write) to the management information is allowed. Implement both VACM and USM for full protection.
+
+SNMPv3 must be disabled by default and enabled only if used. SNMP v3 provides security feature enhancements to SNMP, including encryption and message authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >At the command prompt on the vCenter Server Appliance, run the following commands:
+
+# appliancesh
+# snmp.get
+
+Note: The &quot;appliancesh&quot; command is not needed if the default shell has not been changed for root.
+
+If &quot;Enable&quot; is set to &quot;False&quot;, this is not a finding.
+
+If &quot;Enable&quot; is set to &quot;True&quot; and &quot;Authentication&quot; is not set to &quot;SHA1&quot;, this is a finding.
+
+If &quot;Enable&quot; is set to &quot;True&quot; and &quot;Privacy&quot; is not set to &quot;AES128&quot;, this is a finding.
+
+If any &quot;Users&quot; are configured with a &quot;Sec_level&quot; that does not equal &quot;priv&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >At the command prompt on the vCenter Server Appliance, run the following commands:
+
+# appliancesh
+# snmp.set --authentication SHA1
+# snmp.set --privacy AES128
+
+To change the security level of a user, run the following command:
+
+# snmp.set --users &lt;username&gt;&#x2F;&lt;auth_password&gt; &lt;priv_password&gt;&#x2F;priv</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000265"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000265"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000265</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000265
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must disable SNMPv1&#x2F;2 receivers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000265"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000265"
+            >
+              <!-- Result description -->
+              SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1&#x2F;2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1&#x2F;2 in the UI and SNMPv3 in the CLI.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.1.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: False
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.2.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.3.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.4.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000265</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must disable SNMPv1&#x2F;2 receivers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1&#x2F;2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1&#x2F;2 in the UI and SNMPv3 in the CLI.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;SNMP receivers&quot; tab, note the presence of any enabled receiver.
+
+If there are any enabled receivers, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;SNMP receivers&quot; tab, ensure all receivers are disabled.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000266"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000266"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000266</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000266
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000266"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000266"
+            >
+              <!-- Result description -->
+              By requiring that Single Sign-On (SSO) accounts be unlocked manually, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. When the account unlock time is set to zero, once an account is locked it can only be unlocked manually by an administrator.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).AutoUnlockIntervalSec stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 300
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000266</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By requiring that Single Sign-On (SSO) accounts be unlocked manually, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. When the account unlock time is set to zero, once an account is locked it can only be unlocked manually by an administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+View the value of the &quot;Unlock time&quot; setting.
+
+Unlock time: 0 seconds
+
+If the lockout policy is not configured with &quot;Unlock time&quot; policy of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Unlock time&quot; to &quot;0&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000267"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000267"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000267</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000267
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable the distributed virtual switch health check.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000267"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000267"
+            >
+              <!-- Result description -->
+              Network health check is disabled by default. Once enabled, the health check packets contain information on host#, vds#, and port#, which an attacker would find useful. It is recommended that network health check be used for troubleshooting and turned off when troubleshooting is finished.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000267</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable the distributed virtual switch health check.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network health check is disabled by default. Once enabled, the health check packets contain information on host#, vds#, and port#, which an attacker would find useful. It is recommended that network health check be used for troubleshooting and turned off when troubleshooting is finished.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Health Check.
+
+View the health check pane and verify the &quot;VLAN and MTU&quot; and &quot;Teaming and failover&quot; checks are &quot;Disabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$vds &#x3D; Get-VDSwitch
+$vds.ExtensionData.Config.HealthCheckConfig
+
+If the health check feature is enabled on distributed switches and is not on temporarily for troubleshooting purposes, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Health Check.
+
+Click &quot;Edit&quot;.
+
+Disable the &quot;VLAN and MTU&quot; and &quot;Teaming and failover&quot; checks.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-View -ViewType DistributedVirtualSwitch | ?{($_.config.HealthCheckConfig | ?{$_.enable -notmatch &quot;False&quot;})}| %{$_.UpdateDVSHealthCheckConfig(@((New-Object Vmware.Vim.VMwareDVSVlanMtuHealthCheckConfig -property @{enable&#x3D;0}),(New-Object Vmware.Vim.VMwareDVSTeamingHealthCheckConfig -property @{enable&#x3D;0})))}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000268"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000268"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000268</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000268
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must set the distributed port group Forged Transmits policy to &quot;Reject&quot;.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000268"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000268"
+            >
+              <!-- Result description -->
+              If the virtual machine operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+When the &quot;Forged Transmits&quot; option is set to &quot;Accept&quot;, ESXi does not compare source and effective MAC addresses.
+
+To protect against MAC impersonation, set the &quot;Forged Transmits&quot; option to &quot;Reject&quot;. The host compares the source MAC address being transmitted by the guest operating system with the effective MAC address for its virtual machine adapter to determine if they match. If the addresses do not match, the ESXi host drops the packet.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000268</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must set the distributed port group Forged Transmits policy to &quot;Reject&quot;.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the virtual machine operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+When the &quot;Forged Transmits&quot; option is set to &quot;Accept&quot;, ESXi does not compare source and effective MAC addresses.
+
+To protect against MAC impersonation, set the &quot;Forged Transmits&quot; option to &quot;Reject&quot;. The host compares the source MAC address being transmitted by the guest operating system with the effective MAC address for its virtual machine adapter to determine if they match. If the addresses do not match, the ESXi host drops the packet.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;Forged Transmits&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;Forged Transmits&quot; policy is set to accept for a non-uplink port, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;Forged Transmits&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -ForgedTransmits $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -ForgedTransmits $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000269"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000269"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000269</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000269
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to &quot;Reject&quot;.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000269"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000269"
+            >
+              <!-- Result description -->
+              If the virtual machine operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent virtual machines from changing their effective MAC address and will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000269</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to &quot;Reject&quot;.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the virtual machine operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent virtual machines from changing their effective MAC address and will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;MAC Address Changes&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;MAC Address Changes&quot; policy is set to accept, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -MacChanges $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -MacChanges $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000270"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000270"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000270</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000270
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must set the distributed port group Promiscuous Mode policy to &quot;Reject&quot;.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000270"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000270"
+            >
+              <!-- Result description -->
+              When promiscuous mode is enabled for a virtual switch, all virtual machines connected to the port group have the potential of reading all packets across that network, meaning only the virtual machines connected to that port group.
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000270</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must set the distributed port group Promiscuous Mode policy to &quot;Reject&quot;.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When promiscuous mode is enabled for a virtual switch, all virtual machines connected to the port group have the potential of reading all packets across that network, meaning only the virtual machines connected to that port group.
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;Promiscuous Mode&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;Promiscuous Mode&quot; policy is set to accept, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -AllowPromiscuous $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -AllowPromiscuous $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000271"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000271"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000271</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000271
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must only send NetFlow traffic to authorized collectors.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000271"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000271"
+            >
+              <!-- Result description -->
+              The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and can contain information about the virtual network, making it easier for a man-in-the-middle attack to be executed successfully. If NetFlow export is required, verify that all NetFlow target Internet Protocols (IPs) are correct.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000271</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must only send NetFlow traffic to authorized collectors.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and can contain information about the virtual network, making it easier for a man-in-the-middle attack to be executed successfully. If NetFlow export is required, verify that all NetFlow target Internet Protocols (IPs) are correct.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+To view NetFlow Collector IPs configured on distributed switches:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; NetFlow.
+
+View the NetFlow pane and verify any collector IP addresses are valid and in use for troubleshooting.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;NetFlowCollectorIPs&quot;;E&#x3D;{$_.ExtensionData.config.IpfixConfig.CollectorIpAddress}}
+
+To view if NetFlow is enabled on any distributed port groups:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed port group &gt;&gt; Manage &gt;&gt; Settings &gt;&gt; Policies.
+
+Go to &quot;Monitoring&quot; and view the NetFlow status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | Select Name,VirtualSwitch,@{N&#x3D;&quot;NetFlowEnabled&quot;;E&#x3D;{$_.Extensiondata.Config.defaultPortConfig.ipfixEnabled.Value}}
+
+If NetFlow is configured and the collector IP is not known and documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To remove collector IPs, do the following:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; NetFlow.
+
+Click &quot;Edit&quot;.
+
+Remove any unknown collector IPs.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$dvs &#x3D; Get-VDSwitch dvswitch | Get-View
+ForEach($vs in $dvs){
+$spec &#x3D; New-Object VMware.Vim.VMwareDVSConfigSpec
+$spec.configversion &#x3D; $vs.Config.ConfigVersion
+$spec.IpfixConfig &#x3D; New-Object VMware.Vim.VMwareIpfixConfig
+$spec.IpfixConfig.CollectorIpAddress &#x3D; &quot;&quot;
+$spec.IpfixConfig.CollectorPort &#x3D; &quot;0&quot;
+$spec.IpfixConfig.ActiveFlowTimeout &#x3D; &quot;60&quot;
+$spec.IpfixConfig.IdleFlowTimeout &#x3D; &quot;15&quot;
+$spec.IpfixConfig.SamplingRate &#x3D; &quot;0&quot;
+$spec.IpfixConfig.InternalFlowsOnly &#x3D; $False
+$vs.ReconfigureDvs_Task($spec)
+}
+
+Note: This will reset the NetFlow collector configuration back to the defaults.
+
+To disable NetFlow on a distributed port group, do the following:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Monitoring&quot; tab.
+
+Change &quot;NetFlow&quot; to &quot;Disabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.defaultPortConfig &#x3D; New-Object VMware.Vim.VMwareDVSPortSetting
+$spec.defaultPortConfig.ipfixEnabled &#x3D; New-Object VMware.Vim.BoolPolicy
+$spec.defaultPortConfig.ipfixEnabled.inherited &#x3D; $false
+$spec.defaultPortConfig.ipfixEnabled.value &#x3D; $false
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000272"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000272"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000272</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000272
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000272"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000272"
+            >
+              <!-- Result description -->
+              ESXi does not use the concept of native VLAN. Frames with VLAN specified in the port group will have a tag, but frames with VLAN not specified in the port group are not tagged and therefore will end up belonging to native VLAN of the physical switch.
+
+For example, frames on VLAN 1 from a Cisco physical switch will be untagged, because this is considered as the native VLAN. However, frames from ESXi specified as VLAN 1 will be tagged with a &quot;1&quot;; therefore, traffic from ESXi that is destined for the native VLAN will not be correctly routed (because it is tagged with a &quot;1&quot; instead of being untagged), and traffic from the physical switch coming from the native VLAN will not be visible (because it is not tagged).
+
+If the ESXi virtual switch port group uses the native VLAN ID, traffic from those virtual machines will not be visible to the native VLAN on the switch, because the switch is expecting untagged traffic.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000272</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi does not use the concept of native VLAN. Frames with VLAN specified in the port group will have a tag, but frames with VLAN not specified in the port group are not tagged and therefore will end up belonging to native VLAN of the physical switch.
+
+For example, frames on VLAN 1 from a Cisco physical switch will be untagged, because this is considered as the native VLAN. However, frames from ESXi specified as VLAN 1 will be tagged with a &quot;1&quot;; therefore, traffic from ESXi that is destined for the native VLAN will not be correctly routed (because it is tagged with a &quot;1&quot; instead of being untagged), and traffic from the physical switch coming from the native VLAN will not be visible (because it is not tagged).
+
+If the ESXi virtual switch port group uses the native VLAN ID, traffic from those virtual machines will not be visible to the native VLAN on the switch, because the switch is expecting untagged traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group VLAN tags and verify they are not set to the native VLAN ID of the attached physical switch.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | select Name, VlanConfiguration
+
+If any port group is configured with the native VLAN of the ESXi hosts attached physical switch, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+Change the VLAN ID to a non-native VLAN.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup &quot;portgroup name&quot; | Set-VDVlanConfiguration -VlanId &quot;New VLAN#&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000273"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000273"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000273</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000273
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000273"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000273"
+            >
+              <!-- Result description -->
+              When a port group is set to VLAN Trunking, the vSwitch passes all network frames in the specified range to the attached virtual machines without modifying the virtual local area network (VLAN) tags. In vSphere, this is referred to as VGT.
+
+The virtual machine must process the VLAN information itself via an 802.1Q driver in the operating system. VLAN Trunking must only be implemented if the attached virtual machines have been specifically authorized and are capable of managing VLAN tags themselves.
+
+If VLAN Trunking is enabled inappropriately, it may cause a denial of service or allow a virtual machine to interact with traffic on an unauthorized VLAN.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000273</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When a port group is set to VLAN Trunking, the vSwitch passes all network frames in the specified range to the attached virtual machines without modifying the virtual local area network (VLAN) tags. In vSphere, this is referred to as VGT.
+
+The virtual machine must process the VLAN information itself via an 802.1Q driver in the operating system. VLAN Trunking must only be implemented if the attached virtual machines have been specifically authorized and are capable of managing VLAN tags themselves.
+
+If VLAN Trunking is enabled inappropriately, it may cause a denial of service or allow a virtual machine to interact with traffic on an unauthorized VLAN.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group &quot;VLAN Type&quot; and &quot;VLAN trunk range&quot;, if present.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | Where {$_.ExtensionData.Config.Uplink -ne &quot;True&quot;} | Select Name,VlanConfiguration
+
+If any port group is configured with &quot;VLAN trunking&quot; and is not documented as a needed exception (such as NSX appliances), this is a finding.
+
+If any port group is authorized to be configured with &quot;VLAN trunking&quot; but is not configured with the most limited range necessary, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+If &quot;VLAN trunking&quot; is not authorized, remove it by setting &quot;VLAN type&quot; to &quot;VLAN&quot; and configure an appropriate VLAN ID. Click &quot;OK&quot;.
+
+If &quot;VLAN trunking&quot; is authorized but the range is too broad, modify the range in the &quot;VLAN trunk range&quot; field to the minimum necessary and authorized range. An example range would be &quot;1,3-5,8&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command to configure trunking:
+
+Get-VDPortgroup &quot;Portgroup Name&quot; | Set-VDVlanConfiguration -VlanTrunkRange &quot;&lt;VLAN Range(s) comma separated&gt;&quot;
+
+or
+
+Run this command to configure a single VLAN ID:
+
+Get-VDPortgroup &quot;Portgroup Name&quot; | Set-VDVlanConfiguration -VlanId &quot;&lt;New VLAN#&gt;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000274"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000274"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000274</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000274
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000274"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000274"
+            >
+              <!-- Result description -->
+              Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For example, Cisco Catalyst switches typically reserve VLANs 1001 to 1024 and 4094, while Nexus switches typically reserve 3968 to 4094.
+
+Check with the documentation for the organization&#39;s specific switch. Using a reserved VLAN might result in a denial of service on the network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000274</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For example, Cisco Catalyst switches typically reserve VLANs 1001 to 1024 and 4094, while Nexus switches typically reserve 3968 to 4094.
+
+Check with the documentation for the organization&#39;s specific switch. Using a reserved VLAN might result in a denial of service on the network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group VLAN tags and verify that they are not set to a reserved VLAN ID.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | select Name, VlanConfiguration
+
+If any port group is configured with a reserved VLAN ID, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab. Change the VLAN ID to an unreserved VLAN ID.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup &quot;portgroup name&quot; | Set-VDVlanConfiguration -VlanId &quot;New VLAN#&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000275"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000275"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000275</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000275
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must configure the &quot;vpxuser&quot; auto-password to be changed every 30 days.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000275"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000275"
+            >
+              <!-- Result description -->
+              By default, vCenter will change the &quot;vpxuser&quot; password automatically every 30 days. Ensure this setting meets site policies. If it does not, configure it to meet password aging policies.
+
+Note: It is very important the password aging policy is not shorter than the default interval that is set to automatically change the &quot;vpxuser&quot; password to preclude the possibility that vCenter might be locked out of an ESXi host.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name VirtualCenter.VimPasswordExpirationInDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000275</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must configure the &quot;vpxuser&quot; auto-password to be changed every 30 days.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, vCenter will change the &quot;vpxuser&quot; password automatically every 30 days. Ensure this setting meets site policies. If it does not, configure it to meet password aging policies.
+
+Note: It is very important the password aging policy is not shorter than the default interval that is set to automatically change the &quot;vpxuser&quot; password to preclude the possibility that vCenter might be locked out of an ESXi host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;VirtualCenter.VimPasswordExpirationInDays&quot; is set to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays
+
+If the &quot;VirtualCenter.VimPasswordExpirationInDays&quot; is set to a value other than &quot;30&quot; or does not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;VirtualCenter.VimPasswordExpirationInDays&quot; value to &quot;30&quot; or if the value does not exist create it by entering the values in the &quot;Key&quot; and &quot;Value&quot; fields and clicking &quot;Add&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+If the setting already exists:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays | Set-AdvancedSetting -Value 30
+
+If the setting does not exist:
+
+New-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays -Value 30</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000276"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000276"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000276</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000276
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must configure the &quot;vpxuser&quot; password to meet length policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000276"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000276"
+            >
+              <!-- Result description -->
+              The &quot;vpxuser&quot; password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet password length policies.
+
+Longer passwords make brute-force password attacks more difficult. The &quot;vpxuser&quot; password is added by vCenter, meaning no manual intervention is normally required. The &quot;vpxuser&quot; password length must never be modified to less than the default length of 32 characters.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.vpxd.hostPasswordLength | Select-Object -ExpandProperty Value stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000276</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must configure the &quot;vpxuser&quot; password to meet length policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;vpxuser&quot; password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet password length policies.
+
+Longer passwords make brute-force password attacks more difficult. The &quot;vpxuser&quot; password is added by vCenter, meaning no manual intervention is normally required. The &quot;vpxuser&quot; password length must never be modified to less than the default length of 32 characters.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;config.vpxd.hostPasswordLength&quot; is set to &quot;32&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.vpxd.hostPasswordLength and verify it is set to 32.
+
+If the &quot;config.vpxd.hostPasswordLength&quot; is set to a value other than &quot;32, this is a finding.
+
+If the setting does not exist, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;config.vpxd.hostPasswordLength&quot; value to &quot;32&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.vpxd.hostPasswordLength | Set-AdvancedSetting -Value 32</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000277"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000277"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000277</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000277
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000277"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000277"
+            >
+              <!-- Result description -->
+              vCenter and the embedded Lifecycle Manager system must never have a direct route to the internet. Despite this, updates and patches sourced from VMware on the internet must be delivered in a timely manner.
+
+There are two methods to accomplish this: a proxy server and the Update Manager Download Service (UMDS). UMDS is an optional module for Lifecycle Manager that fetches upgrades for virtual appliances, patch metadata, patch binaries, and notifications that would not otherwise be available to an isolated Lifecycle Manager directly.
+
+Alternatively, a proxy for Lifecycle Manager can be configured to allow controlled, limited access to the public internet for the sole purpose of patch gathering. Either solution mitigates the risk of internet connectivity by limiting its scope and use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000277</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter and the embedded Lifecycle Manager system must never have a direct route to the internet. Despite this, updates and patches sourced from VMware on the internet must be delivered in a timely manner.
+
+There are two methods to accomplish this: a proxy server and the Update Manager Download Service (UMDS). UMDS is an optional module for Lifecycle Manager that fetches upgrades for virtual appliances, patch metadata, patch binaries, and notifications that would not otherwise be available to an isolated Lifecycle Manager directly.
+
+Alternatively, a proxy for Lifecycle Manager can be configured to allow controlled, limited access to the public internet for the sole purpose of patch gathering. Either solution mitigates the risk of internet connectivity by limiting its scope and use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the following conditions:
+
+1. Lifecycle Manager must be configured to use the UMDS.
+
+OR
+
+2. Lifecycle Manager must be configured to use a proxy server for access to VMware patch repositories.
+
+OR
+
+3. Lifecycle Manager must disable internet patch repositories and any patches must be manually validated and imported as needed.
+
+Option 1:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Verify the &quot;Download patches from a UMDS shared repository&quot; radio button is selected and that a valid UMDS repository is supplied.
+
+Click &quot;Cancel&quot;.
+
+If this is not set, this is a finding.
+
+Option 2:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Verify the &quot;Download patches directly from the internet&quot; radio button is selected.
+
+Click &quot;Cancel&quot;.
+
+Navigate to the vCenter Server Management interface at https:&#x2F;&#x2F;&lt;vcenter dns&gt;:5480 &gt;&gt; Networking &gt;&gt; Proxy Settings.
+
+Verify that &quot;HTTPS&quot; is &quot;Enabled&quot;.
+
+Click the &quot;HTTPS&quot; row.
+
+Verify the proxy server configuration is accurate.
+
+If this is not set, this is a finding.
+
+Option 3:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Downloads.
+
+Verify the &quot;Automatic downloads&quot; option is disabled.
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Verify any download sources are disabled.
+
+If this is not set, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Option 1:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Select the &quot;Download patches from a UMDS shared repository&quot; radio button and supply a valid UMDS repository.
+
+Click &quot;Save&quot;.
+
+Option 2:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Select the &quot;Download patches directly from the internet&quot; radio button.
+
+Click &quot;Save&quot;.
+
+Navigate to the vCenter Server Management interface at https:&#x2F;&#x2F;&lt;vcenter dns&gt;:5480 &gt;&gt; Networking &gt;&gt; Proxy Settings.
+
+Click &quot;Edit&quot;.
+
+Slide &quot;HTTPS&quot; to &quot;Enabled&quot;.
+
+Supply the appropriate proxy server configuration.
+
+Click &quot;Save&quot;.
+
+Option 3:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Downloads.
+
+Click &quot;Edit&quot; and uncheck &quot;Download patches&quot;.
+
+Under &quot;Patch Setup&quot; select each download source and click Disable.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000278"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000278"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000278</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000278
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must use unique service accounts when applications connect to vCenter.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000278"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000278"
+            >
+              <!-- Result description -->
+              To not violate nonrepudiation (i.e., deny the authenticity of who is connecting to vCenter), when applications need to connect to vCenter they must use unique service accounts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000278</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must use unique service accounts when applications connect to vCenter.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To not violate nonrepudiation (i.e., deny the authenticity of who is connecting to vCenter), when applications need to connect to vCenter they must use unique service accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify each external application that connects to vCenter has a unique service account dedicated to that application.
+
+For example, there should be separate accounts for Log Insight, Operations Manager, or anything else that requires an account to access vCenter.
+
+If any application shares a service account that is used to connect to vCenter, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For applications sharing service accounts, create a new service account to assign to the application so that no application shares a service account with another.
+
+When standing up a new application that requires access to vCenter, always create a new service account prior to installation and grant only the permissions needed for that application.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000279"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000279"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000279</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000279
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000279"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000279"
+            >
+              <!-- Result description -->
+              Virtual machines might share virtual switches and virtual local area networks (VLAN) with the IP-based storage configurations.
+
+IP-based storage includes vSAN, Internet Small Computer System Interface (iSCSI), and Network File System (NFS). This configuration might expose IP-based storage traffic to unauthorized virtual machine users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from the production traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and virtual machines will limit unauthorized users from viewing the traffic.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000279</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines might share virtual switches and virtual local area networks (VLAN) with the IP-based storage configurations.
+
+IP-based storage includes vSAN, Internet Small Computer System Interface (iSCSI), and Network File System (NFS). This configuration might expose IP-based storage traffic to unauthorized virtual machine users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from the production traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and virtual machines will limit unauthorized users from viewing the traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If IP-based storage is not used, this is not applicable.
+
+IP-based storage (iSCSI, NFS, vSAN) VMkernel port groups must be in a dedicated VLAN that can be on a standard or distributed virtual switch that is logically separated from other traffic types.
+
+The check for this will be unique per environment.
+
+To check a standard switch, do the following:
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; Virtual switches. Select a standard switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and note the VLAN ID associated with each port group.
+
+Verify it is dedicated to that purpose and is logically separated from other traffic types.
+
+To check a distributed switch, do the following,
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select and expand a distributed switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and navigate to the &quot;Summary&quot; tab.
+
+Note the VLAN ID associated with each port group and verify it is dedicated to that purpose and is logically separated from other traffic types.
+
+If any IP-based storage networks are not isolated from other traffic types, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuration of an IP-based VMkernel will be unique to each environment.
+
+To configure VLANs and traffic types, do the following:
+
+Standard switch:
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the Storage VMkernel (for any IP-based storage). Click &quot;Edit...&quot; and click the &quot;Port properties&quot; tab.
+
+Uncheck everything (unless vSAN).
+
+Click the &quot;IPv4&quot; settings or &quot;IPv6&quot; settings tab.
+
+Enter the appropriate IP address and subnet information.
+
+Click &quot;OK&quot;.
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; Virtual switches. Select a standard switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and click &quot;...&quot;. Click &quot;Edit Settings&quot;. On the &quot;Properties&quot; tab, enter the appropriate VLAN ID and click &quot;OK&quot;.
+
+Distributed switch:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Topology.
+
+Select the Storage VMkernel (for any IP-based storage). Click &quot;...&quot; and click &quot;Edit Settings&quot;.
+
+On the &quot;Port properties&quot; tab, uncheck everything (unless vSAN).
+
+Click the &quot;IPv4&quot; settings or &quot;IPv6&quot; settings tab.
+
+Enter the appropriate IP address and subnet information.
+
+Click &quot;OK&quot;.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select and expand a distributed switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and navigate to Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+Enter the appropriate VLAN type and ID and click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000280"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000280"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000280</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000280
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must be configured to send events to a central log server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000280"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000280"
+            >
+              <!-- Result description -->
+              vCenter server generates volumes of security-relevant application-level events. Examples include logins, system reconfigurations, system degradation warnings, and more. To ensure these events are available for forensic analysis and correlation, they must be sent to the syslog and forwarded on to the configured Security Information and Event Management (SIEM) system and&#x2F;or central log server.
+
+The vCenter server sends events to syslog by default, but this configuration must be verified and maintained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name vpxd.event.syslog.enabled | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000280</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must be configured to send events to a central log server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter server generates volumes of security-relevant application-level events. Examples include logins, system reconfigurations, system degradation warnings, and more. To ensure these events are available for forensic analysis and correlation, they must be sent to the syslog and forwarded on to the configured Security Information and Event Management (SIEM) system and&#x2F;or central log server.
+
+The vCenter server sends events to syslog by default, but this configuration must be verified and maintained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;vpxd.event.syslog.enabled&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name vpxd.event.syslog.enabled
+
+If the &quot;vpxd.event.syslog.enabled&quot; value is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;vpxd.event.syslog.enabled&quot; setting to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name vpxd.event.syslog.enabled | Set-AdvancedSetting -Value true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000281"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000281"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000281</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000281
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000281"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000281"
+            >
+              <!-- Result description -->
+              The vSAN Health Check is able to download the HCL from VMware to check compliance against the underlying vSAN Cluster hosts. To ensure the vCenter server is not directly downloading content from the internet, this functionality must be disabled. If this feature is necessary, an external proxy server must be configured.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vsanhealthview &#x3D; Get-VsanView -Id VsanVcClusterHealthSystem-vsan-cluster-health-system; $vsanhealthview.VsanHealthQueryVsanProxyConfig().Host stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000281</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSAN Health Check is able to download the HCL from VMware to check compliance against the underlying vSAN Cluster hosts. To ensure the vCenter server is not directly downloading content from the internet, this functionality must be disabled. If this feature is necessary, an external proxy server must be configured.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Internet Connectivity.
+
+If the HCL internet download is not required, verify &quot;Status&quot; is &quot;Disabled&quot;.
+
+If the &quot;Status&quot; is &quot;Enabled&quot;, this is a finding.
+
+If the HCL internet download is required, verify &quot;Status&quot; is &quot;Enabled&quot; and a proxy host is configured.
+
+If &quot;Status&quot; is &quot;Enabled&quot; and a proxy is not configured, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Internet Connectivity.
+
+Click &quot;Edit&quot;.
+
+If the HCL internet download is not required, ensure that &quot;Status&quot; is &quot;Disabled&quot;.
+
+If the HCL internet download is required, ensure that &quot;Status&quot; is &quot;Enabled&quot; and that a proxy host is appropriately configured.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000282"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000282"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000282</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000282
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must configure the vSAN Datastore name to a unique name.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000282"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000282"
+            >
+              <!-- Result description -->
+              A vSAN Datastore name by default is &quot;vsanDatastore&quot;. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >is expected not to cmp &#x3D;&#x3D; &quot;vsanDatastore&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: vsanDatastore
+     got: vsanDatastore
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000282</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must configure the vSAN Datastore name to a unique name.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A vSAN Datastore name by default is &quot;vsanDatastore&quot;. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Datastores.
+
+Review the datastores and identify any datastores with &quot;vSAN&quot; as the datastore type.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
+Write-Host &quot;vSAN Enabled Cluster found&quot;
+Get-Cluster | where {$_.VsanEnabled} | Get-Datastore | where {$_.type -match &quot;vsan&quot;}
+}
+else{
+Write-Host &quot;vSAN is not enabled, this finding is not applicable.&quot;
+}
+
+If vSAN is enabled and a datastore is named &quot;vsanDatastore&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Datastores.
+
+Right-click on the datastore named &quot;vsanDatastore&quot; and select &quot;Rename&quot;.
+
+Rename the datastore based on site-specific naming standards.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
+Write-Host &quot;vSAN Enabled Cluster found&quot;
+$Clusters &#x3D; Get-Cluster | where {$_.VsanEnabled}
+Foreach ($clus in $clusters){
+ $clus | Get-Datastore | where {$_.type -match &quot;vsan&quot;} | Set-Datastore -Name $(($clus.name) + &quot;_vSAN_Datastore&quot;)
+}
+}
+else{
+Write-Host &quot;vSAN is not enabled, this finding is not applicable.&quot;
+}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000283"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000283"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000283</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000283
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable Username&#x2F;Password and Windows Integrated Authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000283"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000283"
+            >
+              <!-- Result description -->
+              All forms of authentication other than Common Access Card (CAC) must be disabled. Password authentication can be temporarily reenabled for emergency access to the local Single Sign-On (SSO) accounts or Active Directory user&#x2F;pass accounts, but it must be disabled as soon as CAC authentication is functional.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).PasswordAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).WindowsAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000283</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable Username&#x2F;Password and Windows Integrated Authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >All forms of authentication other than Common Access Card (CAC) must be disabled. Password authentication can be temporarily reenabled for emergency access to the local Single Sign-On (SSO) accounts or Active Directory user&#x2F;pass accounts, but it must be disabled as soon as CAC authentication is functional.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a federated identity provider is configured and used for an identity source, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under &quot;Authentication method&quot;, examine the allowed methods.
+
+If &quot;Smart card authentication&quot; is not enabled and &quot;Password and windows session authentication&quot; is not disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Next to &quot;Authentication method&quot;, click &quot;Edit&quot;.
+
+Select to radio button to &quot;Enable smart card authentication&quot;.
+
+Click &quot;Save&quot;.
+
+To re-enable password authentication for troubleshooting purposes, run the following command on the vCenter Server Appliance:
+
+# &#x2F;opt&#x2F;vmware&#x2F;bin&#x2F;sso-config.sh -set_authn_policy -pwdAuthn true -winAuthn false -certAuthn false -securIDAuthn false -t vsphere.local</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000284"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000284"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000284</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000284
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must restrict access to the default roles with cryptographic permissions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000284"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000284"
+            >
+              <!-- Result description -->
+              In vSphere, the built-in &quot;Administrator&quot; role contains permission to perform cryptographic operations such as Key Management Server (KMS) functions and encrypting and decrypting virtual machine disks. This role must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use.
+
+A new built-in role called &quot;No Cryptography Administrator&quot; exists to provide all administrative permissions except cryptographic operations. Permissions must be restricted such that normal vSphere administrators are assigned the &quot;No Cryptography Administrator&quot; role or more restrictive.
+
+The &quot;Administrator&quot; role must be tightly controlled and must not be applied to administrators who will not be doing cryptographic work. Catastrophic data loss can result from poorly administered cryptography.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrator is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000284</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must restrict access to the default roles with cryptographic permissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In vSphere, the built-in &quot;Administrator&quot; role contains permission to perform cryptographic operations such as Key Management Server (KMS) functions and encrypting and decrypting virtual machine disks. This role must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use.
+
+A new built-in role called &quot;No Cryptography Administrator&quot; exists to provide all administrative permissions except cryptographic operations. Permissions must be restricted such that normal vSphere administrators are assigned the &quot;No Cryptography Administrator&quot; role or more restrictive.
+
+The &quot;Administrator&quot; role must be tightly controlled and must not be applied to administrators who will not be doing cryptographic work. Catastrophic data loss can result from poorly administered cryptography.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, there are four roles that contain cryptographic related permissions: Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager.
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Where {$_.Role -eq &quot;Admin&quot; -or $_.Role -eq &quot;NoTrustedAdmin&quot; -or $_.Role -eq &quot;vCLSAdmin&quot; -or $_.Role -eq &quot;vSphereKubernetesManager&quot;} | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+If there are any users or groups assigned to the default roles with cryptographic permissions and are not explicitly designated to perform cryptographic operations, this is a finding.
+
+The built-in solution users assigned to the administrator role are NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Move any accounts not explicitly designated for cryptographic operations, other than Solution Users, to other roles such as &quot;No Cryptography Administrator&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000285"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000285"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000285</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000285
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must restrict access to cryptographic permissions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000285"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000285"
+            >
+              <!-- Result description -->
+              These permissions must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use. Catastrophic data loss can result from poorly administered cryptography.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >NoTrustedAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Admin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vSphereKubernetesManager is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vCLSAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000285</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must restrict access to cryptographic permissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >These permissions must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use. Catastrophic data loss can result from poorly administered cryptography.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, there are four roles that contain cryptographic related permissions: Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager.
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Highlight each role and click the &#39;Privileges&quot; button in the right pane.
+
+Verify that only the Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager and any site-specific cryptographic roles have the following permissions:
+
+Cryptographic Operations privileges
+Global.Diagnostics
+Host.Inventory.Add host to cluster
+Host.Inventory.Add standalone host
+Host.Local operations.Manage user groups
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$roles &#x3D; Get-VIRole
+ForEach($role in $roles){
+    $privileges &#x3D; $role.PrivilegeList
+    If($privileges -match &quot;Crypto*&quot; -or $privileges -match &quot;Global.Diagnostics&quot; -or $privileges -match &quot;Host.Inventory.Add*&quot; -or $privileges -match &quot;Host.Local operations.Manage user groups&quot;){
+    Write-Host &quot;$role has Cryptographic privileges&quot;
+    }
+}
+
+If any role other than the four default roles contain the permissions listed above and is not authorized to perform cryptographic related operations, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Highlight the target custom role and click &quot;Edit&quot;.
+
+Remove the following permissions from any custom role that is not authorized to perform cryptographic related operations:
+
+Cryptographic Operations privileges
+Global.Diagnostics
+Host.Inventory.Add host to cluster
+Host.Inventory.Add standalone host
+Host.Local operations.Manage user groups</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000286"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000286"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000286</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000286
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000286"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000286"
+            >
+              <!-- Result description -->
+              When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, the potential exists for a man-in-the-middle attack in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vSAN iSCSI service not enabled on cluster: cluster0...this is not applicable.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000286</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, the potential exists for a man-in-the-middle attack in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN or if vSAN is enabled but iSCSI is not enabled, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; iSCSI Target Service.
+
+For each iSCSI target, review the value in the &quot;Authentication&quot; column.
+
+If the Authentication method is not set to &quot;CHAP_Mutual&quot; for any iSCSI target, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; iSCSI Target Service.
+
+For each iSCSI target, select the item and click &quot;Edit&quot;.
+
+Change the &quot;Authentication&quot; field to &quot;Mutual CHAP&quot; and configure the incoming and outgoing users and secrets appropriately.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000287"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000287"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000287</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000287
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000287"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000287"
+            >
+              <!-- Result description -->
+              The KEK for a vSAN encrypted datastore is generated by the Key Management Server (KMS) and serves as a wrapper and lock around the Disk Encryption Key (DEK). The DEK is generated by the host and is used to encrypt and decrypt the datastore. A shallow rekey is a procedure in which the KMS issues a new KEK to the ESXi host, which rewraps the DEK but does not change the DEK or any data on disk.
+
+This operation must be done on a regular, site-defined interval and can be viewed as similar in criticality to changing an administrative password. If the KMS is compromised, a standing operational procedure to rekey will put a time limit on the usefulness of any stolen KMS data.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000287</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The KEK for a vSAN encrypted datastore is generated by the Key Management Server (KMS) and serves as a wrapper and lock around the Disk Encryption Key (DEK). The DEK is generated by the host and is used to encrypt and decrypt the datastore. A shallow rekey is a procedure in which the KMS issues a new KEK to the ESXi host, which rewraps the DEK but does not change the DEK or any data on disk.
+
+This operation must be done on a regular, site-defined interval and can be viewed as similar in criticality to changing an administrative password. If the KMS is compromised, a standing operational procedure to rekey will put a time limit on the usefulness of any stolen KMS data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If vSAN is not in use, this is not applicable.
+
+Interview the system administrator (SA) to determine that a procedure has been put in place to perform a shallow rekey of all vSAN encrypted datastores at regular, site-defined intervals.
+
+VMware recommends a 60-day rekey task, but this interval must be defined by the SA and the information system security officer (ISSO).
+
+If vSAN encryption is not in use, this is not a finding.
+
+If vSAN encryption is in use and a regular rekey procedure is not in place, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If vSAN encryption is in use, ensure that a regular rekey procedure is in place.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000288"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000288"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000288</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000288
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an LDAP identity source.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000288"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000288"
+            >
+              <!-- Result description -->
+              LDAP is an industry standard protocol for querying directory services such as Active Directory. This protocol can operate in clear text or over a Secure Sockets Layer (SSL)&#x2F;Transport Layer Security (TLS) encrypted tunnel. To protect confidentiality of LDAP communications, secure LDAP (LDAPS) must be explicitly configured when adding an LDAP identity source in vSphere Single Sign-On (SSO).
+
+When configuring an identity source and supplying an SSL certificate, vCenter will enforce LDAPS. The server URLs do not need to be explicitly provided if an SSL certificate is uploaded.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000288</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an LDAP identity source.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >LDAP is an industry standard protocol for querying directory services such as Active Directory. This protocol can operate in clear text or over a Secure Sockets Layer (SSL)&#x2F;Transport Layer Security (TLS) encrypted tunnel. To protect confidentiality of LDAP communications, secure LDAP (LDAPS) must be explicitly configured when adding an LDAP identity source in vSphere Single Sign-On (SSO).
+
+When configuring an identity source and supplying an SSL certificate, vCenter will enforce LDAPS. The server URLs do not need to be explicitly provided if an SSL certificate is uploaded.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If LDAP is not used as an identity provider, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click the &quot;Identity Sources&quot; tab.
+
+For each identity source of type &quot;Active Directory over LDAP&quot;, if the &quot;Server URL&quot; does not indicate &quot;ldaps:&#x2F;&#x2F;&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click the &quot;Identity Sources&quot; tab.
+
+For each identity source of type &quot;Active Directory over LDAP&quot; where LDAPS is not configured, highlight the item and click &quot;Edit&quot;.
+
+Ensure the primary and secondary server URLs, if specified, are configured for &quot;ldaps:&#x2F;&#x2F;&quot;.
+
+At the bottom, click the &quot;Browse&quot; button, select the AD LDAP cert previously exported to your local computer, click &quot;Open&quot;, and &quot;Save&quot; to complete modifications.
+
+Note: With LDAPS, the server must be a specific domain controller and its specific certificate or the domain alias with a certificate that is valid for that URL.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000290"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000290"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000290</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000290
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must limit membership to the &quot;SystemConfiguration.BashShellAdministrators&quot; Single Sign-On (SSO) group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000290"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000290"
+            >
+              <!-- Result description -->
+              vCenter SSO integrates with PAM in the underlying Photon operating system so members of the &quot;SystemConfiguration.BashShellAdministrators&quot; SSO group can log on to the operating system without needing a separate account. However, even though unique SSO users log on, they are transparently using a group account named &quot;sso-user&quot; as far as Photon auditing is concerned. While the audit trail can still be traced back to the individual SSO user, it is a more involved process.
+
+To force accountability and nonrepudiation, the SSO group &quot;SystemConfiguration.BashShellAdministrators&quot; must be severely restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Administrator is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no groups found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No groups found in SystemConfiguration.BashShellAdministrators is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000290</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must limit membership to the &quot;SystemConfiguration.BashShellAdministrators&quot; Single Sign-On (SSO) group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter SSO integrates with PAM in the underlying Photon operating system so members of the &quot;SystemConfiguration.BashShellAdministrators&quot; SSO group can log on to the operating system without needing a separate account. However, even though unique SSO users log on, they are transparently using a group account named &quot;sso-user&quot; as far as Photon auditing is concerned. While the audit trail can still be traced back to the individual SSO user, it is a more involved process.
+
+To force accountability and nonrepudiation, the SSO group &quot;SystemConfiguration.BashShellAdministrators&quot; must be severely restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;SystemConfiguration.BashShellAdministrators&quot; group appears.
+
+Click &quot;SystemConfiguration.BashShellAdministrators&quot;.
+
+Review the members of the group and ensure that only authorized accounts are present.
+
+Note: By default the Administrator and a unique service account similar to &quot;vmware-applmgmtservice-714684a4-342f-4eff-a232-cdc21def00c2&quot; will be in the group and should not be removed.
+
+If there are any accounts present as members of SystemConfiguration.BashShellAdministrators that are not authorized, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;SystemConfiguration.BashShellAdministrators&quot; group appears.
+
+Click &quot;SystemConfiguration.BashShellAdministrators&quot;.
+
+Click the three vertical dots next to the name of each unauthorized account.
+
+Select &quot;Remove Member&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000291"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000291"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000291</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000291
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must limit membership to the &quot;TrustedAdmins&quot; Single Sign-On (SSO) group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000291"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000291"
+            >
+              <!-- Result description -->
+              The vSphere &quot;TrustedAdmins&quot; group grants additional rights to administer the vSphere Trust Authority feature.
+
+To force accountability and nonrepudiation, the SSO group &quot;TrustedAdmins&quot; must be severely restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no users found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No users found in TrustedAdmins is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no groups found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No groups found in TrustedAdmins is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000291</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must limit membership to the &quot;TrustedAdmins&quot; Single Sign-On (SSO) group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere &quot;TrustedAdmins&quot; group grants additional rights to administer the vSphere Trust Authority feature.
+
+To force accountability and nonrepudiation, the SSO group &quot;TrustedAdmins&quot; must be severely restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;TrustedAdmins&quot; group appears.
+
+Click &quot;TrustedAdmins&quot;.
+
+Review the members of the group and ensure that only authorized accounts are present.
+
+Note: These accounts act as root on the Photon operating system and have the ability to severely damage vCenter, inadvertently or otherwise.
+
+If there are any accounts present as members of TrustedAdmins that are not authorized, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;TrustedAdmins&quot; group appears.
+
+Click &quot;TrustedAdmins&quot;.
+
+Click the three vertical dots next to the name of each unauthorized account.
+
+Select &quot;Remove Member&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000292"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000292"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000292</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000292
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server configuration must be backed up on a regular basis.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000292"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000292"
+            >
+              <!-- Result description -->
+              vCenter server is the control plane for the vSphere infrastructure and all the workloads it hosts. As such, vCenter is usually a highly critical system in its own right. Backups of vCenter can now be made at a data and configuration level versus traditional storage&#x2F;image-based backups. This reduces recovery time by letting the system administrator (SA) spin up a new vCenter while simultaneously importing the backed-up data.
+
+For sites that implement the Native Key Provider (NKP), introduced in 7.0 Update 2, regular vCenter backups are critical. In a recovery scenario where the virtual machine files are intact but vCenter was lost, the encrypted virtual machines will not be able to boot as their private keys were stored in vCenter after it was last backed up. When using the NKP, vCenter becomes critical to the virtual machine workloads and ceases to be just the control plane.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File based backups should be enabled. is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000292</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server configuration must be backed up on a regular basis.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter server is the control plane for the vSphere infrastructure and all the workloads it hosts. As such, vCenter is usually a highly critical system in its own right. Backups of vCenter can now be made at a data and configuration level versus traditional storage&#x2F;image-based backups. This reduces recovery time by letting the system administrator (SA) spin up a new vCenter while simultaneously importing the backed-up data.
+
+For sites that implement the Native Key Provider (NKP), introduced in 7.0 Update 2, regular vCenter backups are critical. In a recovery scenario where the virtual machine files are intact but vCenter was lost, the encrypted virtual machines will not be able to boot as their private keys were stored in vCenter after it was last backed up. When using the NKP, vCenter becomes critical to the virtual machine workloads and ceases to be just the control plane.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Option 1:
+
+If vCenter is backed up in a traditional manner, at the storage array level, interview the SA to determine configuration and schedule.
+
+Option 2:
+
+For vCenter native backup functionality, open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Backup&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify the &quot;Status&quot; is &quot;Enabled&quot;.
+
+Click &quot;Status&quot; to expand the backup details.
+
+If vCenter server backups are not configured and there is no other vCenter backup system, this is a finding.
+
+If the backup configuration is not set to a proper, reachable location or if the schedule is anything less frequent than &quot;Daily&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Option 1:
+
+Implement and document a VMware-supported storage&#x2F;image-based backup schedule.
+
+Option 2:
+
+To configure vCenter native backup functionality, open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Backup&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Configure&quot; (or &quot;Edit&quot; for an existing configuration).
+
+Enter site-specific information for the backup job.
+
+Ensure &quot;Schedule&quot; is set to &quot;Daily&quot;. Limiting the number of retained backups is recommended but not required.
+
+Click &quot;Create&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000293"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000293"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000293</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000293
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must have task and event retention set to at least 30 days.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000293"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000293"
+            >
+              <!-- Result description -->
+              vCenter tasks and events contain valuable historical actions, useful in troubleshooting availability issues and for incident forensics. While vCenter events are sent to central log servers in real time, it is important that administrators have quick access to this information when needed.
+
+vCenter retains 30 days of tasks and events by default, and this is sufficient for most purposes. The vCenter disk partitions are also sized with this in mind. Decreasing is not recommended for operational reasons, while increasing is not recommended unless guided by VMware support due to the partition sizing concerns.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name event.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name task.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000293</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must have task and event retention set to at least 30 days.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter tasks and events contain valuable historical actions, useful in troubleshooting availability issues and for incident forensics. While vCenter events are sent to central log servers in real time, it is important that administrators have quick access to this information when needed.
+
+vCenter retains 30 days of tasks and events by default, and this is sufficient for most purposes. The vCenter disk partitions are also sized with this in mind. Decreasing is not recommended for operational reasons, while increasing is not recommended unless guided by VMware support due to the partition sizing concerns.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click to expand the &quot;Database&quot; section.
+
+Note the &quot;Task retention&quot; and &quot;Event retention&quot; values.
+
+If either value is configured to less than &quot;30&quot; days, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;Database&quot; tab, set the value for both &quot;Task retention&quot; and &quot;Event retention&quot; to &quot;30&quot; days (default) or greater, as required by your site.
+
+Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000294"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000294"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000294</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000294
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server Native Key Provider must be backed up with a strong password.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000294"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000294"
+            >
+              <!-- Result description -->
+              The vCenter Native Key Provider feature was introduced in 7.0 U2 and acts as a key provider for encryption based capabilities such as encrypted virtual machines without requiring an external KMS solution.  When enabling this feature a backup must be taken which is a PKCS#12 formatted file and if no password is provided during the backup process this presents the opportunity for this to be used maliciously and compromise the environment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000294</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server Native Key Provider must be backed up with a strong password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Native Key Provider feature was introduced in 7.0 U2 and acts as a key provider for encryption based capabilities such as encrypted virtual machines without requiring an external KMS solution.  When enabling this feature a backup must be taken which is a PKCS#12 formatted file and if no password is provided during the backup process this presents the opportunity for this to be used maliciously and compromise the environment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the vCenter Native Key Provider feature is not in use, this is not applicable.
+
+Interview the system administrator and determine if a password was provided for any backups taken of the Native Key Provider.
+
+If backups exist for the Native Key Provider that are not password protected, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Key Providers.
+
+Select the Native Key Provider, click &quot;Back-up&quot;, and check the box &quot;Protect Native Key Provider data with password&quot;.
+
+Provide a strong password and click &quot;Back up key provider&quot;.
+
+Delete any previous backups that were not protected with a password.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000295"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000295"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000295</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000295
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must require authentication for published content libraries.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000295"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000295"
+            >
+              <!-- Result description -->
+              In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale. When publishing a content library it can be protected by requiring authentication for subscribers.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Authentication should be enabled on Content Library: STIG Content Library [&quot;publish_info&quot;, &quot;authentication_method&quot;] is expected to cmp &#x3D;&#x3D; &quot;BASIC&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: BASIC
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000295</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must require authentication for published content libraries.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale. When publishing a content library it can be protected by requiring authentication for subscribers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Content Libraries.
+
+Review the &quot;Password Protected&quot; column.
+
+If a content library is published and is not password protected, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Content Libraries.
+
+Select the target content library.
+
+Select &quot;Actions&quot; then &quot;Edit Settings&quot;.
+
+Click the checkbox to &quot;Enable user authentication for access to this content library&quot;.
+
+Enter and confirm a password for the content library. Click &quot;Ok&quot;.
+
+Note: Any subscribed content libraries will need to be updated to enable authentication and provide the password.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000296"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000296"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000296</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000296
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must enable the OVF security policy for content libraries.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000296"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000296"
+            >
+              <!-- Result description -->
+              In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale.
+
+You can protect the OVF items by applying default OVF security policy to a content library. The OVF security policy enforces strict validation on OVF items when you deploy or update the item, import items, or synchronize OVF and OVA templates. To make sure that the OVF and OVA templates are signed by a trusted certificate, you can add the OVF signing certificate from a trusted CA.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >OVF security policy should be enabled on Content Library: STIG Content Library [&quot;security_policy_id&quot;] is expected not to equal nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected not #&lt;NilClass:8&gt; &#x3D;&gt; nil
+         got #&lt;NilClass:8&gt; &#x3D;&gt; nil
+
+Compared using equal?, which compares object identity.
+
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000296</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must enable the OVF security policy for content libraries.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale.
+
+You can protect the OVF items by applying default OVF security policy to a content library. The OVF security policy enforces strict validation on OVF items when you deploy or update the item, import items, or synchronize OVF and OVA templates. To make sure that the OVF and OVA templates are signed by a trusted certificate, you can add the OVF signing certificate from a trusted CA.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Content Libraries.
+
+Review the &quot;Security Policy&quot; column.
+
+If a content library does not have the &quot;OVF default policy&quot; enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Content Libraries.
+
+Select the target content library.
+
+Select &quot;Actions&quot; then &quot;Edit Settings&quot;.
+
+Click the checkbox to &quot;Apply Security Policy&quot;. Click &quot;OK&quot;.
+
+Note: If you disable the security policy of a content library, you cannot reuse the existing OVF items.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000298"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000298"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000298</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000298
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must separate authentication and authorization for administrators.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000298"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000298"
+            >
+              <!-- Result description -->
+              Many organizations do both authentication and authorization using a centralized directory service such as Active Directory. Attackers who compromise an identity source can often add themselves to authorization groups, and simply log into systems they should not otherwise have access to. Additionally, reliance on central identity systems means that the administrators of those systems are potentially infrastructure administrators, too, as they can add themselves to infrastructure access groups at will.
+
+The use of local SSO groups for authorization helps prevent this avenue of attack by allowing the centralized identity source to still authenticate users but moving authorization into vCenter itself.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000298</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must separate authentication and authorization for administrators.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Many organizations do both authentication and authorization using a centralized directory service such as Active Directory. Attackers who compromise an identity source can often add themselves to authorization groups, and simply log into systems they should not otherwise have access to. Additionally, reliance on central identity systems means that the administrators of those systems are potentially infrastructure administrators, too, as they can add themselves to infrastructure access groups at will.
+
+The use of local SSO groups for authorization helps prevent this avenue of attack by allowing the centralized identity source to still authenticate users but moving authorization into vCenter itself.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+View the Administrator role and any other role providing administrative access to vCenter to verify the users and&#x2F;or groups assigned to it by clicking on &quot;Usage&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Sort Role | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+If any user or group is directly assigned a role with administrative access to vCenter that is from an identity provider, this is a finding.
+
+Note: Users and&#x2F;or groups assigned to roles should be from the &quot;VSPHERE.LOCAL&quot; identity source.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To add groups from an identity provider to the local SSO Administrators group, as an example, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Groups.
+
+Select the Administrators group and click &quot;Edit&quot;.
+
+In the &quot;Add Members&quot; section, select the identity source and type the name of the target user&#x2F;group in the search bar.
+
+Select the target user&#x2F;group to add them and click &quot;Save&quot;.
+
+Note: A new SSO group or groups can be created as needed and used to provide authorization to vCenter.
+
+To remove identity provider users&#x2F;groups from a role, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Global Permissions.
+
+Select the offending user&#x2F;group and click &quot;Delete&quot;.
+
+Note: If permissions are assigned on a specific object, then the role must be updated where it is assigned (for example, at the cluster level).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000299"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000299"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000299</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000299
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable CDP&#x2F;LLDP on distributed switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000299"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000299"
+            >
+              <!-- Result description -->
+              The vSphere Distributed Virtual Switch can participate in Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP), as a listener, advertiser, or both. The information is sensitive, including IP addresses, system names, software versions, and more. It can be used by an adversary to gain a better understanding of your environment, and to impersonate devices. It is also transmitted unencrypted on the network, and as such the recommendation is to disable it.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000299</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable CDP&#x2F;LLDP on distributed switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere Distributed Virtual Switch can participate in Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP), as a listener, advertiser, or both. The information is sensitive, including IP addresses, system names, software versions, and more. It can be used by an adversary to gain a better understanding of your environment, and to impersonate devices. It is also transmitted unencrypted on the network, and as such the recommendation is to disable it.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Discovery Protocol&quot; configuration.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | Select Name,LinkDiscoveryProtocolOperation
+
+If any distributed switch does not have &quot;Discovery Protocols&quot; disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select the advanced tab and update the &quot;Type&quot; under &quot;Discovery Protocol&quot; to disabled and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch -Name &quot;DSwitch&quot; | Set-VDSwitch -LinkDiscoveryProtocolOperation &quot;Disabled&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000300"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000300"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000300</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000300
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must remove unauthorized port mirroring sessions on distributed switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000300"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000300"
+            >
+              <!-- Result description -->
+              The vSphere Distributed Virtual Switch can enable port mirroring sessions allowing traffic to be mirrored from one source to a destination. If port mirroring is configured unknowingly this could allow an attacker to observe network traffic of virtual machines.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000300</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must remove unauthorized port mirroring sessions on distributed switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere Distributed Virtual Switch can enable port mirroring sessions allowing traffic to be mirrored from one source to a destination. If port mirroring is configured unknowingly this could allow an attacker to observe network traffic of virtual machines.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Port Mirroring.
+
+Review any configured &quot;Port Mirroring&quot; sessions.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;Port Mirroring Sessions&quot;;E&#x3D;{$_.ExtensionData.Config.VspanSession.Name}}
+
+If there are any unauthorized port mirroring sessions configured, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Port Mirroring.
+
+Select the unauthorized &quot;Port Mirroring&quot; session and click &quot;Remove&quot;. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000301"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000301"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000301</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000301
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must not override port group settings at the port level on distributed switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000301"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000301"
+            >
+              <!-- Result description -->
+              Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If there are cases where particular VMs require unique configurations then a different port group with the required configuration should be created instead of overriding port group settings.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000301</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must not override port group settings at the port level on distributed switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If there are cases where particular VMs require unique configurations then a different port group with the required configuration should be created instead of overriding port group settings.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Override port policies&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDPortgroup).ExtensionData.Config.Policy
+
+If there are any distributed port groups that allow overridden port policies, this is a finding.
+
+Note: This does not apply to the &quot;Block Ports&quot; or &quot;Configure reset at disconnect&quot; policies.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select advanced and update all port policies besides &quot;Block Ports&quot; to &quot;disabled&quot; and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.Policy &#x3D; New-Object VMware.Vim.VMwareDVSPortgroupPolicy
+$spec.Policy.VlanOverrideAllowed &#x3D; $False
+$spec.Policy.UplinkTeamingOverrideAllowed &#x3D; $False
+$spec.Policy.SecurityPolicyOverrideAllowed &#x3D; $False
+$spec.Policy.IpfixOverrideAllowed &#x3D; $False
+$spec.Policy.BlockOverrideAllowed &#x3D; $True
+$spec.Policy.ShapingOverrideAllowed &#x3D; $False
+$spec.Policy.VendorConfigOverrideAllowed &#x3D; $False
+$spec.Policy.TrafficFilterOverrideAllowed &#x3D; $False
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000302"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000302"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000302</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000302
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must reset port configuration when virtual machines are disconnected.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000302"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000302"
+            >
+              <!-- Result description -->
+              Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If any unknown or unauthorized per-port overrides exist and are not discarded when a virtual machine is disconnected from that port then a future virtual machine connected to that port may receive a less secure port.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000302</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must reset port configuration when virtual machines are disconnected.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If any unknown or unauthorized per-port overrides exist and are not discarded when a virtual machine is disconnected from that port then a future virtual machine connected to that port may receive a less secure port.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Configure reset at disconnect&quot; setting.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDPortgroup).ExtensionData.Config.Policy.PortConfigResetAtDisconnect
+
+If there are any distributed port groups with &quot;Configure reset at disconnect&quot; configured to &quot;disabled&quot; or &quot;False&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select advanced and update &quot;Configure reset at disconnect&quot; to be enabled and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.Policy &#x3D; New-Object VMware.Vim.VMwareDVSPortgroupPolicy
+$spec.Policy.PortConfigResetAtDisconnect &#x3D; $True
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000303"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000303"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000303</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000303
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable Secure Shell (SSH) access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000303"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000303"
+            >
+              <!-- Result description -->
+              vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.
+
+vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000303</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable Secure Shell (SSH) access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.
+
+vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Access&quot; on the left navigation pane.
+
+If &quot;SSH Login&quot; is not &quot;Deactivated&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Access&quot; on the left navigation pane.
+
+Click &quot;Edit&quot; then disable &quot;Activate SSH Login&quot; and click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000304"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000304"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000304</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000304
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enable data in transit encryption for vSAN.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000304"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000304"
+            >
+              <!-- Result description -->
+              Transit encryption must be enabled to prevent unauthorized disclosure information and to protect the confidentiality of organizational information.
+
+vSAN data-in-transit encryption has the following characteristics:
+-vSAN uses AES-256 bit encryption on data in transit.
+-Forward secrecy is enforced for vSAN data-in-transit encryption.
+-Traffic between data hosts and witness hosts is encrypted.
+-File service data traffic between the VDFS proxy and VDFS server is encrypted.
+-vSAN file services inter-host connections are encrypted.
+-vSAN uses symmetric keys that are generated dynamically and shared between hosts. Hosts dynamically generate an encryption key when they establish a connection, and they use the key to encrypt all traffic between the hosts. You do not need a key management server to perform data-in-transit encryption.
+
+Each host is authenticated when it joins the cluster, ensuring connections only to trusted hosts are allowed. When a host is removed from the cluster, it is authentication certificate is removed.
+
+vSAN data-in-transit encryption is a cluster-wide setting. When enabled, all data and metadata traffic is encrypted as it transits across hosts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system; $vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name cluster0).ExtensionData.MoRef).DataInTransitEncryptionConfig.Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000304</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enable data in transit encryption for vSAN.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Transit encryption must be enabled to prevent unauthorized disclosure information and to protect the confidentiality of organizational information.
+
+vSAN data-in-transit encryption has the following characteristics:
+-vSAN uses AES-256 bit encryption on data in transit.
+-Forward secrecy is enforced for vSAN data-in-transit encryption.
+-Traffic between data hosts and witness hosts is encrypted.
+-File service data traffic between the VDFS proxy and VDFS server is encrypted.
+-vSAN file services inter-host connections are encrypted.
+-vSAN uses symmetric keys that are generated dynamically and shared between hosts. Hosts dynamically generate an encryption key when they establish a connection, and they use the key to encrypt all traffic between the hosts. You do not need a key management server to perform data-in-transit encryption.
+
+Each host is authenticated when it joins the cluster, ensuring connections only to trusted hosts are allowed. When a host is removed from the cluster, it is authentication certificate is removed.
+
+vSAN data-in-transit encryption is a cluster-wide setting. When enabled, all data and metadata traffic is encrypted as it transits across hosts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Review the &quot;Data-in-transit encryption&quot; status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system
+$vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name &lt;cluster name&gt;).ExtensionData.MoRef).DataInTransitEncryptionConfig
+
+Repeat these steps for each vSAN enabled cluster in the environment.
+
+If &quot;Data-In-Transit encryption&quot; is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the target cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Click &quot;Edit&quot;.
+
+Enable &quot;Data-In-Transit encryption&quot; and choose a rekey interval suitable for the environment then click &quot;Apply&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000005"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000005"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000005</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000005
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000005"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000005"
+            >
+              <!-- Result description -->
+              By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Once the configured number of attempts is reached, the account is locked by the ESXi host.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountLockFailures | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 3
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountLockFailures | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 3
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000005</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Once the configured number of attempts is reached, the account is locked by the ESXi host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.AccountLockFailures&quot; value and verify it is set to &quot;3&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountLockFailures
+
+If the &quot;Security.AccountLockFailures&quot; setting is set to a value other than &quot;3&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.AccountLockFailures&quot; value and configure it to &quot;3&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountLockFailures | Set-AdvancedSetting -Value 3</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000006"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000006"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000006</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000006
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000006"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000006"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000006</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a, AC-8 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Annotations.WelcomeMessage&quot; value and verify it contains the standard mandatory DOD notice and consent banner.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage
+
+If the &quot;Annotations.WelcomeMessage&quot; setting does not contain the standard mandatory DOD notice and consent banner, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Annotations.WelcomeMessage&quot; value and set it to the following. Click &quot;OK&quot;.
+
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{hostname} , {ip}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{esxproduct} {esxversion}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{memory} RAM{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:white}	{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By      {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  using this IS (which includes any device attached to this IS), you consent to the following conditions:                 {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited     {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law      {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          enforcement (LE), and counterintelligence (CI) investigations.                                                  {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       At any time, the USG may inspect and seize data stored on this IS.                                              {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       Communications using, or data stored on, this IS are not private, are subject to routine monitoring,            {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          interception, and search, and may be disclosed or used for any USG-authorized purpose.                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not     {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          for your personal benefit or privacy.                                                                           {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching    {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          or monitoring of the content of privileged communications, or work product, related to personal representation  {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work       {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          product are private and confidential. See User Agreement for details.                                           {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:dark-grey}{color:white}  &lt;F2&gt; Accept Conditions and Customize System &#x2F; View Logs{&#x2F;align}{align:right}&lt;F12&gt; Accept Conditions and Shut Down&#x2F;Restart  {bgcolor:black} {&#x2F;color}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Set-AdvancedSetting -Value &quot;&lt;Banner text above&gt;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000008"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000008"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000008</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000008
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable lockdown mode.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000008"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000008"
+            >
+              <!-- Result description -->
+              Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCenter are always enforced and users cannot bypass them by logging on to a host directly.
+
+By forcing all interaction to occur through vCenter Server, the risk of someone inadvertently attaining elevated privileges or performing tasks that are not properly audited is greatly reduced.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VMHost -Name 10.186.25.26).Extensiondata.Config.LockdownMode stdout.strip is expected to be in &quot;lockdownNormal&quot; and &quot;lockdownStrict&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;lockdownDisabled&#x60; to be in the list: &#x60;[&quot;lockdownNormal&quot;, &quot;lockdownStrict&quot;]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VMHost -Name 10.186.25.26).Extensiondata.Config.LockdownMode stdout.strip is expected to be in &quot;lockdownNormal&quot; and &quot;lockdownStrict&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;lockdownDisabled&#x60; to be in the list: &#x60;[&quot;lockdownNormal&quot;, &quot;lockdownStrict&quot;]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000008</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable lockdown mode.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCenter are always enforced and users cannot bypass them by logging on to a host directly.
+
+By forcing all interaction to occur through vCenter Server, the risk of someone inadvertently attaining elevated privileges or performing tasks that are not properly audited is greatly reduced.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Scroll down to &quot;Lockdown Mode&quot; and verify it is set to &quot;Enabled&quot; (Normal or Strict).
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Select Name,@{N&#x3D;&quot;Lockdown&quot;;E&#x3D;{$_.Extensiondata.Config.LockdownMode}}
+
+If &quot;Lockdown Mode&quot; is disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile &gt;&gt; Lockdown Mode.
+
+Click edit and select either the &quot;Normal&quot; or &quot;Strict&quot; radio buttons.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$level &#x3D; &quot;lockdownNormal&quot; OR &quot;lockdownStrict&quot;
+$vmhost &#x3D; Get-VMHost -Name &lt;hostname&gt; | Get-View
+$lockdown &#x3D; Get-View $vmhost.ConfigManager.HostAccessManager
+$lockdown.ChangeLockdownMode($level)
+
+Note: In strict lockdown mode, the Direct Console User Interface (DCUI) service is stopped. If the connection to vCenter Server is lost and the vSphere Client is no longer available, the ESXi host becomes inaccessible.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000010"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000010"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000010</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000010
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host client must be configured with an idle session timeout.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000057
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000010"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000010"
+            >
+              <!-- Result description -->
+              The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed by browsing to &quot;https:&#x2F;&#x2F;&lt;ESX FQDN&gt;&#x2F;ui&quot;. ESXi is not usually administered via this interface for long periods and all users will be highly privileged. Implementing a mandatory session idle limit will ensure that orphaned, forgotten or ignored sessions will be closed promptly.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000010</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host client must be configured with an idle session timeout.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed by browsing to &quot;https:&#x2F;&#x2F;&lt;ESX FQDN&gt;&#x2F;ui&quot;. ESXi is not usually administered via this interface for long periods and all users will be highly privileged. Implementing a mandatory session idle limit will ensure that orphaned, forgotten or ignored sessions will be closed promptly.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-11 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.HostClientSessionTimeout&quot; value and verify it is set to &quot;900&quot; or less.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout
+
+If the &quot;UserVars.HostClientSessionTimeout&quot; setting is not set to &quot;900&quot; or less, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Fom the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.HostClientSessionTimeout&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Set-AdvancedSetting -Value &quot;900&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000014"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000014"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000014</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000014
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000014"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000014"
+            >
+              <!-- Result description -->
+              Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session.
+
+OpenSSH on the ESXi host ships with a FIPS 140-2 validated cryptographic module and it is enabled by default. For backward compatibility reasons, this can be disabled so this setting must be audited and corrected if necessary.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.security.fips140.ssh.get.invoke() | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.security.fips140.ssh.get.invoke() | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000014</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session.
+
+OpenSSH on the ESXi host ships with a FIPS 140-2 validated cryptographic module and it is enabled by default. For backward compatibility reasons, this can be disabled so this setting must be audited and corrected if necessary.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system security fips140 ssh get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.security.fips140.ssh.get.invoke()
+
+Expected result:
+
+Enabled: true
+
+If the FIPS mode is not enabled for SSH, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system security fips140 ssh set -e true
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.security.fips140.ssh.set.CreateArgs()
+$arguments.enable &#x3D; $true
+$esxcli.system.security.fips140.ssh.set.Invoke($arguments)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000015"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000015"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000015</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000015
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi must produce audit records containing information to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000015"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000015"
+            >
+              <!-- Result description -->
+              Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000015</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi must produce audit records containing information to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 b, AU-3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.log.level&quot; value and verify it is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.log.level
+
+If the &quot;Config.HostAgent.log.level&quot; setting is not set to &quot;info&quot;, this is a finding.
+
+Note: Verbose logging level is acceptable for troubleshooting purposes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.log.level&quot; value and configure it to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.log.level | Set-AdvancedSetting -Value &quot;info&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000035"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000035"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000035</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000035
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enforce password complexity by configuring a password quality policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000035"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000035"
+            >
+              <!-- Result description -->
+              To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated.
+
+The use of complex passwords reduces the ability of attackers to successfully obtain valid passwords using guessing or exhaustive search techniques. Complexity requirements increase the password search space by requiring users to construct passwords from a larger character set than they may otherwise use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordQualityControl | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15
+     got: retry&#x3D;3 min&#x3D;disabled,disabled,disabled,7,7
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordQualityControl | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15
+     got: retry&#x3D;3 min&#x3D;disabled,disabled,disabled,7,7
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000035</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enforce password complexity by configuring a password quality policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated.
+
+The use of complex passwords reduces the ability of attackers to successfully obtain valid passwords using guessing or exhaustive search techniques. Complexity requirements increase the password search space by requiring users to construct passwords from a larger character set than they may otherwise use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), IA-5 (1) (b)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordQualityControl&quot; value and verify it is set to &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordQualityControl
+
+If the &quot;Security.PasswordQualityControl&quot; setting is set to a value other than &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordQualityControl&quot; value and configure it to &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordQualityControl | Set-AdvancedSetting -Value &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000043"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000043"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000043</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000043
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must prohibit password reuse for a minimum of five generations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000043"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000043"
+            >
+              <!-- Result description -->
+              If a user or root used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user&#39;s password until it was guessed correctly.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordHistory | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;5&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordHistory | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;5&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000043</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must prohibit password reuse for a minimum of five generations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a user or root used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user&#39;s password until it was guessed correctly.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (e)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordHistory&quot; value and verify it is set to &quot;5&quot; or greater.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordHistory
+
+If the &quot;Security.PasswordHistory&quot; setting is set to a value other than 5 or greater, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordHistory&quot; value and configure it to &quot;5&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordHistory | Set-AdvancedSetting -Value 5</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000047"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000047"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000047</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000047
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000047"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000047"
+            >
+              <!-- Result description -->
+              The MOB provides a way to explore the object model used by the VMkernel to manage the host and enables configurations to be changed. This interface is meant to be used primarily for debugging the vSphere Software Development Kit (SDK), but because there are no access controls it could also be used as a method to obtain information about a host being targeted for unauthorized access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000047</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The MOB provides a way to explore the object model used by the VMkernel to manage the host and enables configurations to be changed. This interface is meant to be used primarily for debugging the vSphere Software Development Kit (SDK), but because there are no access controls it could also be used as a method to obtain information about a host being targeted for unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.plugins.solo.enableMob&quot; value and verify it is set to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob
+
+If the &quot;Config.HostAgent.plugins.solo.enableMob&quot; setting is not set to &quot;false&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.plugins.solo.enableMob&quot; value and configure it to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Set-AdvancedSetting -Value false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000049"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000049"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000049</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000049
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000049"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000049"
+            >
+              <!-- Result description -->
+              Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Using Active Directory for user authentication simplifies the ESXi host configuration, ensures password complexity and reuse policies are enforced, and reduces the risk of security breaches and unauthorized access.
+
+Note: If the Active Directory group &quot;ESX Admins&quot; (default) exists, all users and groups assigned as members to this group will have full administrative access to all ESXi hosts in the domain.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostAuthentication | Select-Object -ExpandProperty DomainMembershipStatus stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostAuthentication | Select-Object -ExpandProperty DomainMembershipStatus stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000049</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Using Active Directory for user authentication simplifies the ESXi host configuration, ensures password complexity and reuse policies are enforced, and reduces the risk of security breaches and unauthorized access.
+
+Note: If the Active Directory group &quot;ESX Admins&quot; (default) exists, all users and groups assigned as members to this group will have full administrative access to all ESXi hosts in the domain.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), IA-2, IA-2 (5), IA-2 (8), IA-2 (9)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For systems that do not use Active Directory and have no local user accounts other than root and&#x2F;or service accounts, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Authentication Services.
+
+Verify the &quot;Directory Services Type&quot; is set to &quot;Active Directory&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostAuthentication
+
+For systems that do not use Active Directory and do have local user accounts, other than root and&#x2F;or service accounts, this is a finding.
+
+If the &quot;Directory Services Type&quot; is not set to &quot;Active Directory&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Authentication Services.
+
+Click &quot;Join Domain...&quot; and enter the AD domain to join.
+
+Select the &quot;Using credentials&quot; radio button and enter the credentials of an account with permissions to join machines to AD (use UPN naming &quot;user@domain&quot;). Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostAuthentication | Set-VMHostAuthentication -JoinDomain -Domain &quot;domain name&quot; -User &quot;username&quot; -Password &quot;password&quot;
+
+If any local user accounts are present besides root and service accounts, delete them by going to Host UI &gt;&gt; Manage &gt;&gt; Security &amp; Users &gt;&gt; Users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000052"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000052"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000052</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000052
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000052"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000052"
+            >
+              <!-- Result description -->
+              SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH can emulate the behavior of the obsolete &quot;rsh&quot; command in allowing users to enable insecure access to their accounts via &quot;.rhosts&quot; files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000052</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH can emulate the behavior of the obsolete &quot;rsh&quot; command in allowing users to enable insecure access to their accounts via &quot;.rhosts&quot; files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (3)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep ignorerhosts
+
+Expected result:
+
+ignorerhosts yes
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+IgnoreRhosts yes</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000068"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000068"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000068</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000068
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000068"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000068"
+            >
+              <!-- Result description -->
+              If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely and increase the likelihood of inappropriate host access via session hijacking. The &quot;ESXiShellInteractiveTimeOut&quot; allows the automatic termination of idle shell sessions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000068</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely and increase the likelihood of inappropriate host access via session hijacking. The &quot;ESXiShellInteractiveTimeOut&quot; allows the automatic termination of idle shell sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-12, SC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; value and verify it is set to less than &quot;900&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut
+
+If the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; setting is set to a value greater than &quot;900&quot; or &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Set-AdvancedSetting -Value 900</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000085"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000085"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000085</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002696
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002699
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000085
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must implement Secure Boot enforcement.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002696
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002699
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000085"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000085"
+            >
+              <!-- Result description -->
+              Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and it requires that all ESXi kernel modules, drivers and VIBs be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. This control flips ESXi from merely supporting Secure Boot to requiring it. Without this setting enabled, and configuration encryption, an ESXi host could be subject to offline attacks. An attacker could simply transfer the ESXi install drive to a non-Secure Boot host and boot it up without ESXi complaining.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty RequireSecureBoot stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: false
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty RequireSecureBoot stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: false
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000085</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must implement Secure Boot enforcement.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and it requires that all ESXi kernel modules, drivers and VIBs be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. This control flips ESXi from merely supporting Secure Boot to requiring it. Without this setting enabled, and configuration encryption, an ESXi host could be subject to offline attacks. An attacker could simply transfer the ESXi install drive to a non-Secure Boot host and boot it up without ESXi complaining.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, SI-6 a, SI-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.encryption.get.invoke() | Select RequireSecureBoot
+
+Expected result:
+
+Require Secure Boot: true
+
+If &quot;Require Secure Boot&quot; is not enable, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This setting cannot be configured until Secure Boot is properly enabled in the servers firmware.
+
+From an ESXi shell, run the following commands:
+
+# esxcli system settings encryption set --require-secure-boot&#x3D;true
+# &#x2F;sbin&#x2F;auto-backup.sh
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.encryption.set.CreateArgs()
+$arguments.requiresecureboot &#x3D; $true
+$esxcli.system.settings.encryption.set.Invoke($arguments)
+
+Evacuate the host and gracefully reboot for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000094"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000094"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000094</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001496
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000094
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable Secure Boot.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001496
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000094"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000094"
+            >
+              <!-- Result description -->
+              Secure Boot is part of the Unified Extensible Firmware Interface (UEFI) firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and requires that all ESXi kernel modules, drivers, and vSphere Installation Bundles (VIBs) be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. There is no ESXi control to &quot;turn on&quot; Secure Boot. Requiring Secure Boot (failing to boot without it present) is accomplished in another control.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000094</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable Secure Boot.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Secure Boot is part of the Unified Extensible Firmware Interface (UEFI) firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and requires that all ESXi kernel modules, drivers, and vSphere Installation Bundles (VIBs) be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. There is no ESXi control to &quot;turn on&quot; Secure Boot. Requiring Secure Boot (failing to boot without it present) is accomplished in another control.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (3)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;secureboot&#x2F;bin&#x2F;secureBoot.py -s
+
+If Secure Boot is not &quot;Enabled&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;secureboot&#x2F;bin&#x2F;secureBoot.py -c
+
+If the output indicates that Secure Boot cannot be enabled, correct the discrepancies and try again.
+
+Once all discrepancies are resolved then the server ESXi is installed on can be updated to enable Secure Boot in the firmware.
+
+To enable Secure Boot in the servers firmware follow the instructions for the specific manufacturer.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000111"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000111"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000111</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000111
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000111"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000111"
+            >
+              <!-- Result description -->
+              By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Users must wait for the timeout period to elapse before subsequent logon attempts are allowed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000111</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Users must wait for the timeout period to elapse before subsequent logon attempts are allowed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.AccountUnlockTime&quot; value and verify it is set to less than &quot;900&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountUnlockTime
+
+If the &quot;Security.AccountUnlockTime&quot; setting is less than 900 or 0, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.AccountUnlockTime&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountUnlockTime | Set-AdvancedSetting -Value 900</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000113"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000113"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000113</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000113
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must allocate audit record storage capacity to store at least one weeks worth of audit records.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000113"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000113"
+            >
+              <!-- Result description -->
+              In order to ensure ESXi has sufficient storage capacity in which to write the audit logs, audit record storage capacity should be configured.
+
+If a central audit record storage facility is available, the local storage capacity should be sufficient to hold audit records that would accumulate during anticipated interruptions in delivery of records to the facility.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;100&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 100
+     got: 4
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;100&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 100
+     got: 4
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000113</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must allocate audit record storage capacity to store at least one weeks worth of audit records.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In order to ensure ESXi has sufficient storage capacity in which to write the audit logs, audit record storage capacity should be configured.
+
+If a central audit record storage facility is available, the local storage capacity should be sufficient to hold audit records that would accumulate during anticipated interruptions in delivery of records to the facility.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.storageCapacity&quot; value and verify it is set to &quot;100&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity
+
+If the &quot;Syslog.global.auditRecord.storageCapacity&quot; setting is not set to 100, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.storageCapacity&quot; value and configure it to &quot;100&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Set-AdvancedSetting -Value 100</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000114"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000114"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000114</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000114
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must off-load logs via syslog.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000114"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000114"
+            >
+              <!-- Result description -->
+              Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a central host, it can more easily monitor all hosts with a single tool. It can also do aggregate analysis and searching to look for such things as coordinated attacks on multiple hosts.
+
+Logging to a secure, centralized log server also helps prevent log tampering and provides a long-term audit record.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logHost | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;tcp:&#x2F;&#x2F;log.test.local:514&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: tcp:&#x2F;&#x2F;log.test.local:514
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logHost | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;tcp:&#x2F;&#x2F;log.test.local:514&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: tcp:&#x2F;&#x2F;log.test.local:514
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000114</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must off-load logs via syslog.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a central host, it can more easily monitor all hosts with a single tool. It can also do aggregate analysis and searching to look for such things as coordinated attacks on multiple hosts.
+
+Logging to a secure, centralized log server also helps prevent log tampering and provides a long-term audit record.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), AU-4 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logHost&quot; value and verify it is set to a site-specific syslog server.
+
+Syslog servers are specified in the following formats:
+
+udp:&#x2F;&#x2F;&lt;IP or FQDN&gt;:514
+tcp:&#x2F;&#x2F;&lt;IP or FQDN&gt;:514
+ssl:&#x2F;&#x2F;&lt;IP or FQDN&gt;:1514
+
+Multiple servers can also be specified when separated by commas.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logHost
+
+If the &quot;Syslog.global.logHost&quot; setting is not set to a valid, site-specific syslog server, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logHost&quot; value and configure it to a site-specific syslog server.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logHost | Set-AdvancedSetting -Value &quot;enter site specific servers&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000124"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000124"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000124</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002046
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000124
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must synchronize internal information system clocks to an authoritative time source.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002046
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000124"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000124"
+            >
+              <!-- Result description -->
+              To ensure the accuracy of the system clock, it must be synchronized with an authoritative time source within DOD. Many system functions, including time-based logon and activity restrictions, automated reports, system logs, and audit records, depend on an accurate system clock. If there is no confidence in the correctness of the system clock, time-based functions may not operate as intended and records may be of diminished value.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;on&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: on
+     got: off
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No NTP servers found on VMhost: 10.186.25.26 is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;&quot;.empty?&#x60; to be falsey, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;on&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: on
+     got: off
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No NTP servers found on VMhost: 10.186.25.26 is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;&quot;.empty?&#x60; to be falsey, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000124</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must synchronize internal information system clocks to an authoritative time source.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To ensure the accuracy of the system clock, it must be synchronized with an authoritative time source within DOD. Many system functions, including time-based logon and activity restrictions, automated reports, system logs, and audit records, depend on an accurate system clock. If there is no confidence in the correctness of the system clock, time-based functions may not operate as intended and records may be of diminished value.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-8 (1) (a), AU-8 (1) (b)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Verify NTP or PTP are configured, and one or more authoritative time sources are listed.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Verify the NTP or PTP service is running and configured to start and stop with the host.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostNTPServer
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot; -or $_.Label -eq &quot;PTP Daemon&quot;}
+
+If the NTP service is not configured with authoritative DOD time sources or the service is not configured to start and stop with the host (&quot;Policy&quot; of &quot;on&quot; in PowerCLI) or is stopped, this is a finding.
+If PTP is used instead of NTP, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To configure NTP, perform the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Click &quot;Add Service&quot; and select &quot;Network Time Protocol&quot;.
+
+Enter or update the NTP servers listed with a comma separate list of authoritative time servers. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Select the &quot;NTP Daemon&quot; service and click &quot;Edit Startup Policy&quot;.
+
+Select &quot;Start and stop with host&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$NTPServers &#x3D; &quot;ntpserver1&quot;,&quot;ntpserver2&quot;
+Get-VMHost | Add-VMHostNTPServer $NTPServers
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot;} | Set-VMHostService -Policy On
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot;} | Start-VMHostService
+
+To configure PTP, perform the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Click &quot;Add Service&quot; and select &quot;Precision Time Protocol&quot;.
+
+Select the network adapter that can receive the PTP traffic.
+
+If NTP servers are available, select &quot;Enable fallback&quot; and enter or update the NTP servers listed with a comma separate list of authoritative time servers. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Select the &quot;PTP Daemon&quot; service and click &quot;Edit Startup Policy&quot;.
+
+Select &quot;Start and stop with host&quot;. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000133"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000133"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000133</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (5) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001774
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000133
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 (5) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001749
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001774
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000133"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000133"
+            >
+              <!-- Result description -->
+              Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels:
+
+1. VMwareCertified - VIBs created, tested, and signed by VMware.
+2. VMwareAccepted - VIBs created by a VMware partner but tested and signed by VMware.
+3. PartnerSupported - VIBs created, tested, and signed by a certified VMware partner.
+4. CommunitySupported - VIBs that have not been tested by VMware or a VMware partner.
+
+Community Supported VIBs are not supported and do not have a digital signature. To protect the security and integrity of ESXi hosts, do not allow unsigned (CommunitySupported) VIBs to be installed on hosts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.software.acceptance.get.Invoke() stdout.strip is expected to be in &quot;PartnerSupported&quot;, &quot;VMwareCertified&quot;, and &quot;VMwareAccepted&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.software.acceptance.get.Invoke() stdout.strip is expected to be in &quot;PartnerSupported&quot;, &quot;VMwareCertified&quot;, and &quot;VMwareAccepted&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000133</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels:
+
+1. VMwareCertified - VIBs created, tested, and signed by VMware.
+2. VMwareAccepted - VIBs created by a VMware partner but tested and signed by VMware.
+3. PartnerSupported - VIBs created, tested, and signed by a certified VMware partner.
+4. CommunitySupported - VIBs that have not been tested by VMware or a VMware partner.
+
+Community Supported VIBs are not supported and do not have a digital signature. To protect the security and integrity of ESXi hosts, do not allow unsigned (CommunitySupported) VIBs to be installed on hosts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (3), CM-7 (5) (b)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Host Image Profile Acceptance Level&quot; view the acceptance level.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.software.acceptance.get.Invoke()
+
+If the acceptance level is &quot;CommunitySupported&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Host Image Profile Acceptance Level&quot;, click &quot;Edit&quot;.
+
+Using the drop-down selection, set the acceptance level as &quot;VMwareCertified&quot;, &quot;VMwareAccepted&quot;, or &quot;PartnerSupported&quot;. The default is &quot;PartnerSupported&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.software.acceptance.set.CreateArgs()
+$arguments.level &#x3D; &quot;PartnerSupported&quot;
+$esxcli.software.acceptance.set.Invoke($arguments)
+
+Note: &quot;VMwareCertified&quot; or &quot;VMwareAccepted&quot; may be substituted for &quot;PartnerSupported&quot;, depending on local requirements. These are case sensitive.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000145"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000145"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000145</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000145
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000145"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000145"
+            >
+              <!-- Result description -->
+              When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle attack, in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000145</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle attack, in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If iSCSI is not used, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Storage &gt;&gt; Storage Adapters.
+
+Select the iSCSI adapter &gt;&gt; Properties &gt;&gt; Authentication &gt;&gt; Method.
+
+View the CHAP configuration and verify CHAP is required for target and host authentication.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostHba | Where {$_.Type -eq &quot;iscsi&quot;} | Select AuthenticationProperties -ExpandProperty AuthenticationProperties
+
+If iSCSI is used and CHAP is not set to &quot;required&quot; for both the target and host, this is a finding.
+
+If iSCSI is used and unique CHAP secrets are not used for each host, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Storage &gt;&gt; Storage Adapters.
+
+Select the iSCSI adapter &gt;&gt; Properties &gt;&gt; Authentication.
+
+Click &quot;Edit...&quot;. Set &quot;Authentication Method&quot; to &quot;Use bidirectional CHAP&quot; and enter a unique secret for each traffic flow direction.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostHba | Where {$_.Type -eq &quot;iscsi&quot;} | Set-VMHostHba -ChapType Required -ChapName &quot;chapname&quot; -ChapPassword &quot;password&quot; -MutualChapEnabled $true -MutualChapName &quot;mutualchapname&quot; -MutualChapPassword &quot;mutualpassword&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000160"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000160"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000160</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000160
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000160"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000160"
+            >
+              <!-- Result description -->
+              While encrypted vMotion is available, vMotion traffic should still be sequestered from other traffic to further protect it from attack. This network must only be accessible to other ESXi hosts, preventing outside access to the network.
+
+The vMotion VMkernel port group must be in a dedicated VLAN that can be on a standard or distributed virtual switch as long as the vMotion VLAN is not shared by any other function and is not routed to anything but ESXi hosts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000160</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >While encrypted vMotion is available, vMotion traffic should still be sequestered from other traffic to further protect it from attack. This network must only be accessible to other ESXi hosts, preventing outside access to the network.
+
+The vMotion VMkernel port group must be in a dedicated VLAN that can be on a standard or distributed virtual switch as long as the vMotion VLAN is not shared by any other function and is not routed to anything but ESXi hosts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review the VLAN associated with any vMotion VMkernel(s) and verify they are dedicated for that purpose and are logically separated from other functions.
+
+If long distance or cross vCenter vMotion is used the vMotion network can be routable but must be accessible to only the intended ESXi hosts.
+
+If the vMotion port group is not on an isolated VLAN and&#x2F;or is routable to systems other than ESXi hosts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuration of the vMotion VMkernel will be unique to each environment.
+
+As an example, to modify the IP address and VLAN information to the correct network on a distributed switch do the following:
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot; and select VLAN.
+
+Change the &quot;VLAN Type&quot; to &quot;VLAN&quot; and change the &quot;VLAN ID&quot; to a network allocated and dedicated to vMotion traffic exclusively. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000161"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000161"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000161</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000161
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must maintain the confidentiality and integrity of information during transmission by exclusively enabling Transport Layer Security (TLS) 1.2.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000161"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000161"
+            >
+              <!-- Result description -->
+              TLS 1.0 and 1.1 are deprecated protocols with well-published shortcomings and vulnerabilities. TLS 1.2 should be enabled on all interfaces and SSLv3, TL 1.1, and 1.0 disabled, where supported.
+
+Mandating TLS 1.2 may break third-party integrations and add-ons to vSphere. Test these integrations carefully after implementing TLS 1.2 and roll back where appropriate.
+
+On interfaces where required functionality is broken with TLS 1.2, this finding is not applicable until such time as the third-party software supports TLS 1.2.
+
+Modify TLS settings in the following order:
+1. vCenter.
+2. ESXi.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;sslv3,tlsv1,tlsv1.1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;sslv3,tlsv1,tlsv1.1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000161</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must maintain the confidentiality and integrity of information during transmission by exclusively enabling Transport Layer Security (TLS) 1.2.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >TLS 1.0 and 1.1 are deprecated protocols with well-published shortcomings and vulnerabilities. TLS 1.2 should be enabled on all interfaces and SSLv3, TL 1.1, and 1.0 disabled, where supported.
+
+Mandating TLS 1.2 may break third-party integrations and add-ons to vSphere. Test these integrations carefully after implementing TLS 1.2 and roll back where appropriate.
+
+On interfaces where required functionality is broken with TLS 1.2, this finding is not applicable until such time as the third-party software supports TLS 1.2.
+
+Modify TLS settings in the following order:
+1. vCenter.
+2. ESXi.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8 (2)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiVPsDisabledProtocols&quot; value and verify it is set to &quot;sslv3,tlsv1,tlsv1.1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols
+
+If the &quot;UserVars.ESXiVPsDisabledProtocols&quot; setting is set to a value other than &quot;sslv3,tlsv1,tlsv1.1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiVPsDisabledProtocols&quot; value and configure it to &quot;sslv3,tlsv1,tlsv1.1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Set-AdvancedSetting -Value &quot;sslv3,tlsv1,tlsv1.1&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000187"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000187"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000187</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000187
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000187"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000187"
+            >
+              <!-- Result description -->
+              Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000187</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-13</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep ciphers
+
+Expected result:
+
+ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+
+Note: The ciphers line must be after the FipsMode setting.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000189"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000189"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000189</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000189
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host DCUI.Access list must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000189"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000189"
+            >
+              <!-- Result description -->
+              Lockdown mode disables direct host access, requiring that administrators manage hosts from vCenter Server. However, if a host becomes isolated from vCenter, the administrator is locked out and can no longer manage the host.
+
+The &quot;DCUI.Access&quot; advanced setting allows specified users to exit lockdown mode in such a scenario. If the Direct Console User Interface (DCUI) is running in strict lockdown mode, this setting is ineffective.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name DCUI.Access | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name DCUI.Access | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;root&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000189</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host DCUI.Access list must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Lockdown mode disables direct host access, requiring that administrators manage hosts from vCenter Server. However, if a host becomes isolated from vCenter, the administrator is locked out and can no longer manage the host.
+
+The &quot;DCUI.Access&quot; advanced setting allows specified users to exit lockdown mode in such a scenario. If the Direct Console User Interface (DCUI) is running in strict lockdown mode, this setting is ineffective.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;DCUI.Access&quot; value and verify only the root user is listed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name DCUI.Access and verify it is set to root.
+
+If the &quot;DCUI.Access&quot; is not restricted to &quot;root&quot;, this is a finding.
+
+Note: This list is only for local user accounts and should only contain the root user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;DCUI.Access&quot; value and configure it to &quot;root&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name DCUI.Access | Set-AdvancedSetting -Value &quot;root&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000191"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000191"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000191</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000191
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000191"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000191"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000191</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.Etc.issue&quot; value and verify it contains the standard mandatory DOD notice and consent banner.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.Etc.issue
+
+If the &quot;Config.Etc.issue&quot; setting does not contain the standard mandatory DOD notice and consent banner, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.Etc.issue&quot; value and set it to the following:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By using this IS (which includes any device attached to this IS), you consent to the following conditions: -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations. -At any time, the USG may inspect and seize data stored on this IS. -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose. -This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy. -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.Etc.issue | Set-AdvancedSetting -Value &quot;&lt;Banner text above&gt;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000192"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000192"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000192</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000192
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000192"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000192"
+            >
+              <!-- Result description -->
+              Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000192</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep banner
+
+Expected result:
+
+banner &#x2F;etc&#x2F;issue
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, navigate to and open:
+
+&#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+Ensure that the &quot;Banner&quot; line is uncommented and set to the following:
+
+Banner &#x2F;etc&#x2F;issue
+
+Restart SSH from the UI or run the following command:
+
+# &#x2F;etc&#x2F;init.d&#x2F;SSH restart</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000193"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000193"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000193</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002314
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002322
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000193
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002314
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002322
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000193"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000193"
+            >
+              <!-- Result description -->
+              The ESXi Shell is an interactive command line interface (CLI) available at the ESXi server console. The ESXi shell provides temporary access to commands essential for server maintenance. Intended primarily for use in break-fix scenarios, the ESXi shell is well suited for checking and modifying configuration details, which are not always generally accessible, using the vSphere Client.
+
+The ESXi shell is accessible remotely using SSH by users with the Administrator role. Under normal operating conditions, SSH access to the host must be disabled as is the default. As with the ESXi shell, SSH is also intended only for temporary use during break-fix scenarios. SSH must therefore be disabled under normal operating conditions and must only be enabled for diagnostics or troubleshooting. Remote access to the host must therefore be limited to the vSphere Client or Host Client at all other times.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000193</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi Shell is an interactive command line interface (CLI) available at the ESXi server console. The ESXi shell provides temporary access to commands essential for server maintenance. Intended primarily for use in break-fix scenarios, the ESXi shell is well suited for checking and modifying configuration details, which are not always generally accessible, using the vSphere Client.
+
+The ESXi shell is accessible remotely using SSH by users with the Administrator role. Under normal operating conditions, SSH access to the host must be disabled as is the default. As with the ESXi shell, SSH is also intended only for temporary use during break-fix scenarios. SSH must therefore be disabled under normal operating conditions and must only be enabled for diagnostics or troubleshooting. Remote access to the host must therefore be limited to the vSphere Client or Host Client at all other times.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (1), AC-17 (9), CM-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under Services, locate the &quot;SSH&quot; service and verify it is &quot;Stopped&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;}
+
+If the SSH service is &quot;Running&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, select the &quot;SSH&quot; service and click the &quot;Stop&quot; button.
+
+Click the &quot;Edit Startup policy...&quot; button.
+
+Select the &quot;Start and stop manually&quot; radio button.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;} | Stop-VMHostService</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000194"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000194"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000194</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000194
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must be configured to disable nonessential capabilities by disabling the ESXi shell.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000194"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000194"
+            >
+              <!-- Result description -->
+              The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or remotely via SSH. Activities performed from the ESXi Shell bypass vCenter role-based access control (RBAC) and audit controls.
+
+The ESXi shell must only be turned on when needed to troubleshoot&#x2F;resolve problems that cannot be fixed through the vSphere client.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000194</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must be configured to disable nonessential capabilities by disabling the ESXi shell.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or remotely via SSH. Activities performed from the ESXi Shell bypass vCenter role-based access control (RBAC) and audit controls.
+
+The ESXi shell must only be turned on when needed to troubleshoot&#x2F;resolve problems that cannot be fixed through the vSphere client.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under Services, locate the &quot;ESXi Shell&quot; service and verify it is &quot;Stopped&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;}
+
+If the ESXi Shell service is &quot;Running&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, select the &quot;ESXi Shell&quot; service and click the &quot;Stop&quot; button.
+
+Click the &quot;Edit Startup policy...&quot; button.
+
+Select the &quot;Start and stop manually&quot; radio button.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;} | Stop-VMHostService</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000195"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000195"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000195</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000195
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must automatically stop shell services after ten minutes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000195"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000195"
+            >
+              <!-- Result description -->
+              When the ESXi Shell or Secure Shell (SSH) services are enabled on a host, they will run indefinitely. To avoid having these services left running, set the &quot;ESXiShellTimeOut&quot;. The &quot;ESXiShellTimeOut&quot; defines a window of time after which the ESXi Shell and SSH services will be stopped automatically.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000195</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must automatically stop shell services after ten minutes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When the ESXi Shell or Secure Shell (SSH) services are enabled on a host, they will run indefinitely. To avoid having these services left running, set the &quot;ESXiShellTimeOut&quot;. The &quot;ESXiShellTimeOut&quot; defines a window of time after which the ESXi Shell and SSH services will be stopped automatically.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiShellTimeOut&quot; value and verify it is set to less than &quot;600&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut
+
+If the &quot;UserVars.ESXiShellTimeOut&quot; setting is set to a value greater than &quot;600&quot; or &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiShellTimeOut&quot; value and configure it to &quot;600&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Set-AdvancedSetting -Value 600</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000196"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000196"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000196</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000196
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must set a timeout to automatically end idle DCUI sessions after ten minutes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000196"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000196"
+            >
+              <!-- Result description -->
+              When the Direct Console User Interface (DCUI) is enabled and logged in, it should be automatically logged out if left logged on to avoid access by unauthorized persons. The &quot;DcuiTimeOut&quot; setting defines a window of time after which the DCUI will be logged out.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000196</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must set a timeout to automatically end idle DCUI sessions after ten minutes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When the Direct Console User Interface (DCUI) is enabled and logged in, it should be automatically logged out if left logged on to avoid access by unauthorized persons. The &quot;DcuiTimeOut&quot; setting defines a window of time after which the DCUI will be logged out.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.DcuiTimeOut&quot; value and verify it is set to less than &quot;600&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut
+
+If the &quot;UserVars.DcuiTimeOut&quot; setting is set to a value greater than &quot;600&quot; or &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.DcuiTimeOut&quot; value and configure it to &quot;600&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Set-AdvancedSetting -Value 600</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000198"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000198"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000198</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000198
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000198"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000198"
+            >
+              <!-- Result description -->
+              The vSphere management network provides access to the vSphere management interface on each component. Services running on the management interface provide an opportunity for an attacker to gain privileged access to the systems. Any remote attack most likely would begin with gaining entry to this network.
+
+The Management VMkernel port group can be on a standard or distributed virtual switch but must be on a dedicated VLAN. The Management VLAN must not be shared by any other function and must not be accessible to anything other than management-related functions such as vCenter.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.VMotionEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VsanTrafficEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking standand port group VLAN ID is expected to cmp &#x3D;&#x3D; &quot;101&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 101
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SA Interview</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.VMotionEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VsanTrafficEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking standand port group VLAN ID is expected to cmp &#x3D;&#x3D; &quot;101&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 101
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SA Interview</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000198</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere management network provides access to the vSphere management interface on each component. Services running on the management interface provide an opportunity for an attacker to gain privileged access to the systems. Any remote attack most likely would begin with gaining entry to this network.
+
+The Management VMkernel port group can be on a standard or distributed virtual switch but must be on a dedicated VLAN. The Management VLAN must not be shared by any other function and must not be accessible to anything other than management-related functions such as vCenter.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review each VMkernel adapter that is used for management traffic and view the &quot;Enabled services&quot;.
+
+Review the VLAN associated with each VMkernel that is used for management traffic. Verify with the system administrator that they are dedicated for that purpose and are logically separated from other functions.
+
+If any services are enabled on any Management VMkernel adapter, this is a finding.
+
+If the network segment is accessible, except to networks where other management-related entities are located such as vCenter, this is a finding.
+
+If there are any other systems or devices such as VMs on the ESXi management segment, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuration of the management VMkernel will be unique to each environment.
+
+As an example, to modify the IP address and VLAN information to the correct network on a distributed switch do the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the Management VMkernel and click &quot;Edit&quot;. On the Port properties tab, uncheck all services except for &quot;Management&quot;. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot; and select VLAN.
+
+Change the &quot;VLAN Type&quot; to &quot;VLAN&quot; and change the &quot;VLAN ID&quot; to a network allocated and dedicated to management traffic exclusively. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000199"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000199"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000199</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000199
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000199"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000199"
+            >
+              <!-- Result description -->
+              Virtual machines (VMs) might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and NFS. This configuration might expose IP-based storage traffic to unauthorized VM users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from any other traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and VMs will limit unauthorized users from viewing the traffic.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.ManagementTrafficEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VMotionEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.ManagementTrafficEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VMotionEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000199</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and NFS. This configuration might expose IP-based storage traffic to unauthorized VM users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from any other traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and VMs will limit unauthorized users from viewing the traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If IP-based storage is not used, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review each VMkernel adapter that is used for IP-based storage traffic and view the &quot;Enabled services&quot;.
+
+Review the VLAN associated with each VMkernel that is used for IP-based storage traffic. Verify with the system administrator that they are dedicated for that purpose and are logically separated from other functions.
+
+If any services are enabled on an NFS or iSCSI IP-based storage VMkernel adapter, this is a finding.
+
+If any services are enabled on a vSAN VMkernel adapter other than vSAN, this is a finding.
+
+If any IP-based storage networks are not isolated from other traffic types, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuration of an IP-Based VMkernel will be unique to each environment.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the VMkernel used for IP-based storage and click &quot;Edit&quot;. On the &quot;Port&quot; properties tab, uncheck all services. Click &quot;OK&quot;.
+
+Note: For VMkernels used for vSAN leave the vSAN service enabled and uncheck all others.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual switches.
+
+Find the port group that is dedicated to IP-based storage and click the &#39;...&#39; button next to the name. Click &quot;Edit Settings&quot;.
+
+On the &quot;Properties&quot; tab, change the &quot;VLAN ID&quot; to one dedicated for IP-based storage traffic. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000201"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000201"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000201</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000201
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host lockdown mode exception users list must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000201"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000201"
+            >
+              <!-- Result description -->
+              While a host is in lockdown mode (strict or normal), only users on the &quot;Exception Users&quot; list are allowed access. These users do not lose their permissions when the host enters lockdown mode.
+
+The organization may want to add service accounts such as a backup agent to the Exception Users list. Verify the list of users exempted from losing permissions is legitimate and as needed per the environment. Adding unnecessary users to the exception list defeats the purpose of lockdown mode.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Exception users for host: 10.186.25.26 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Exception users for host: 10.186.25.26 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000201</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host lockdown mode exception users list must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >While a host is in lockdown mode (strict or normal), only users on the &quot;Exception Users&quot; list are allowed access. These users do not lose their permissions when the host enters lockdown mode.
+
+The organization may want to add service accounts such as a backup agent to the Exception Users list. Verify the list of users exempted from losing permissions is legitimate and as needed per the environment. Adding unnecessary users to the exception list defeats the purpose of lockdown mode.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Lockdown Mode&quot;, review the Exception Users list.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following script:
+
+$vmhost &#x3D; Get-VMHost | Get-View
+$lockdown &#x3D; Get-View $vmhost.ConfigManager.HostAccessManager
+$lockdown.QueryLockdownExceptions()
+
+If the Exception Users list contains accounts that do not require special permissions, this is a finding.
+
+Note: The Exception Users list is empty by default and should remain that way except under site-specific circumstances.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Lockdown Mode&quot;, click &quot;Edit&quot; and remove unnecessary users from the Exception Users list.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000202"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000202"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000202</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000202
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000202"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000202"
+            >
+              <!-- Result description -->
+              SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH&#39;s cryptographic host-based authentication is more secure than &quot;.rhosts&quot; authentication, since hosts are cryptographically authenticated. However, it is not recommended that hosts unilaterally trust one another, even within an organization.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000202</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH&#39;s cryptographic host-based authentication is more secure than &quot;.rhosts&quot; authentication, since hosts are cryptographically authenticated. However, it is not recommended that hosts unilaterally trust one another, even within an organization.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep hostbasedauthentication
+
+Expected result:
+
+hostbasedauthentication no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+HostbasedAuthentication no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000203"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000203"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000203</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000203
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000203"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000203"
+            >
+              <!-- Result description -->
+              Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000203</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permitemptypasswords
+
+Expected result:
+
+permitemptypasswords no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitEmptyPasswords no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000204"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000204"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000204</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000204
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000204"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000204"
+            >
+              <!-- Result description -->
+              SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000204</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permituserenvironment
+
+Expected result:
+
+permituserenvironment no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitUserEnvironment no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000205"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000205"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000205</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000205
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must perform strict mode checking of home directory configuration files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000205"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000205"
+            >
+              <!-- Result description -->
+              If other users have access to modify user-specific SSH configuration files, they may be able to log on the system as another user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000205</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must perform strict mode checking of home directory configuration files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If other users have access to modify user-specific SSH configuration files, they may be able to log on the system as another user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep strictmodes
+
+Expected result:
+
+strictmodes yes
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+StrictModes yes</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000206"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000206"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000206</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000206
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not allow compression.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000206"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000206"
+            >
+              <!-- Result description -->
+              If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000206</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not allow compression.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep compression
+
+Expected result:
+
+compression no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+Compression no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000207"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000207"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000207</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000207
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000207"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000207"
+            >
+              <!-- Result description -->
+              SSH Transmission Control Protocol (TCP) connection forwarding provides a mechanism to establish TCP connections proxied by the SSH server. This function can provide convenience similar to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs). Gateway ports allow remote forwarded ports to bind to nonloopback addresses on the server.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000207</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SSH Transmission Control Protocol (TCP) connection forwarding provides a mechanism to establish TCP connections proxied by the SSH server. This function can provide convenience similar to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs). Gateway ports allow remote forwarded ports to bind to nonloopback addresses on the server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep gatewayports
+
+Expected result:
+
+gatewayports no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+GatewayPorts no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000208"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000208"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000208</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000208
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must be configured to not allow X11 forwarding.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000208"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000208"
+            >
+              <!-- Result description -->
+              X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000208</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must be configured to not allow X11 forwarding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep x11forwarding
+
+Expected result:
+
+x11forwarding no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+X11Forwarding no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000209"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000209"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000209</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000209
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must not permit tunnels.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000209"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000209"
+            >
+              <!-- Result description -->
+              OpenSSH has the ability to create network tunnels (layer 2 and layer 3) over an SSH connection. This function can provide similar convenience to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000209</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must not permit tunnels.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >OpenSSH has the ability to create network tunnels (layer 2 and layer 3) over an SSH connection. This function can provide similar convenience to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permittunnel
+
+Expected result:
+
+permittunnel no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitTunnel no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000210"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000210"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000210</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000210
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must set a timeout count on idle sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000210"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000210"
+            >
+              <!-- Result description -->
+              Setting a timeout ensures that a user login will be terminated as soon as the &quot;ClientAliveCountMax&quot; is reached.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000210</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must set a timeout count on idle sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting a timeout ensures that a user login will be terminated as soon as the &quot;ClientAliveCountMax&quot; is reached.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep clientalivecountmax
+
+Expected result:
+
+clientalivecountmax 3
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+ClientAliveCountMax 3</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000211"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000211"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000211</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000211
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000211"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000211"
+            >
+              <!-- Result description -->
+              Automatically logging out idle users guards against compromises via hijacked administrative sessions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000211</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Automatically logging out idle users guards against compromises via hijacked administrative sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep clientaliveinterval
+
+Expected result:
+
+clientaliveinterval 200
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+ClientAliveInterval 200</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000212"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000212"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000212</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000212
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000212"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000212"
+            >
+              <!-- Result description -->
+              If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.snmp.get.Invoke() | Select-Object -ExpandProperty enable stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.snmp.get.Invoke() | Select-Object -ExpandProperty enable stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000212</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system snmp get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostSnmp | Select *
+
+If SNMP is not in use and is enabled, this is a finding.
+
+If SNMP is enabled and is not using v3 targets with authentication, this is a finding.
+
+Note: SNMP v3 targets can only be viewed and configured via the &quot;esxcli&quot; command.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To disable SNMP from an ESXi shell, run the following command:
+
+# esxcli system snmp set -e no
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi Host:
+
+Get-VMHostSnmp | Set-VMHostSnmp -Enabled $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000213"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000213"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000213</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000213
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000213"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000213"
+            >
+              <!-- Result description -->
+              Published academic papers have demonstrated that by forcing a flush and reload of cache memory, it is possible to measure memory timings to try to determine an Advanced Encryption Standard (AES) encryption key in use on another virtual machine running on the same physical processor of the host server if Transparent Page Sharing (TPS) is enabled between the two VMs. This technique works only in a highly controlled system configured in a nonstandard way that VMware believes would not be recreated in a production environment.
+
+Although VMware believes information being disclosed in real-world conditions is unrealistic, out of an abundance of caution, upcoming ESXi Update releases will no longer enable TPS between VMs by default (TPS will still be used within individual VMs).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.ShareForceSalting | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;2&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.ShareForceSalting | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;2&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000213</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Published academic papers have demonstrated that by forcing a flush and reload of cache memory, it is possible to measure memory timings to try to determine an Advanced Encryption Standard (AES) encryption key in use on another virtual machine running on the same physical processor of the host server if Transparent Page Sharing (TPS) is enabled between the two VMs. This technique works only in a highly controlled system configured in a nonstandard way that VMware believes would not be recreated in a production environment.
+
+Although VMware believes information being disclosed in real-world conditions is unrealistic, out of an abundance of caution, upcoming ESXi Update releases will no longer enable TPS between VMs by default (TPS will still be used within individual VMs).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Mem.ShareForceSalting&quot; value and verify it is set to &quot;2&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.ShareForceSalting
+
+If the &quot;Mem.ShareForceSalting&quot; setting is not set to 2, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Mem.ShareForceSalting&quot; value and set it to &quot;2&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.ShareForceSalting | Set-AdvancedSetting -Value 2</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000214"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000214"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000214</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000214
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure the firewall to block network traffic by default.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000214"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000214"
+            >
+              <!-- Result description -->
+              In addition to service-specific firewall rules, ESXi has a default firewall rule policy to allow or deny incoming and outgoing traffic. Reduce the risk of attack by ensuring this is set to deny incoming and outgoing traffic.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostFirewallDefaultPolicy stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostFirewallDefaultPolicy stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000214</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure the firewall to block network traffic by default.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In addition to service-specific firewall rules, ESXi has a default firewall rule policy to allow or deny incoming and outgoing traffic. Reduce the risk of attack by ensuring this is set to deny incoming and outgoing traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli network firewall get
+
+If the &quot;Default Action&quot; does not equal &quot;DROP&quot;, this is a finding.
+If &quot;Enabled&quot; does not equal &quot;true&quot;, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostFirewallDefaultPolicy
+
+If the Incoming or Outgoing policies are &quot;True&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli network firewall set --default-action&#x3D;false
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostFirewallDefaultPolicy | Set-VMHostFirewallDefaultPolicy -AllowIncoming $false -AllowOutgoing $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000215"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000215"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000215</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000215
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000215"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000215"
+            >
+              <!-- Result description -->
+              BPDU Guard and Portfast are commonly enabled on the physical switch to which the ESXi host is directly connected to reduce the Spanning Tree Protocol (STP) convergence delay.
+
+If a BPDU packet is sent from a virtual machine (VM) on the ESXi host to the physical switch configured as stated above, a cascading lockout of all the uplink interfaces from the ESXi host can occur. To prevent this type of lockout, BPDU Filter can be enabled on the ESXi host to drop any BPDU packets being sent to the physical switch.
+
+The caveat is that certain Secure Socket Layer (SSL) virtual private networks that use Windows bridging capability can legitimately generate BPDU packets. The administrator should verify no legitimate BPDU packets are generated by VMs on the ESXi host prior to enabling BPDU Filter. If BPDU Filter is enabled in this situation, enabling Reject Forged Transmits on the virtual switch port group adds protection against Spanning Tree loops.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000215</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >BPDU Guard and Portfast are commonly enabled on the physical switch to which the ESXi host is directly connected to reduce the Spanning Tree Protocol (STP) convergence delay.
+
+If a BPDU packet is sent from a virtual machine (VM) on the ESXi host to the physical switch configured as stated above, a cascading lockout of all the uplink interfaces from the ESXi host can occur. To prevent this type of lockout, BPDU Filter can be enabled on the ESXi host to drop any BPDU packets being sent to the physical switch.
+
+The caveat is that certain Secure Socket Layer (SSL) virtual private networks that use Windows bridging capability can legitimately generate BPDU packets. The administrator should verify no legitimate BPDU packets are generated by VMs on the ESXi host prior to enabling BPDU Filter. If BPDU Filter is enabled in this situation, enabling Reject Forged Transmits on the virtual switch port group adds protection against Spanning Tree loops.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Net.BlockGuestBPDU&quot; value and verify it is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.BlockGuestBPDU
+
+If the &quot;Net.BlockGuestBPDU&quot; setting is not set to &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Net.BlockGuestBPDU&quot; value and configure it to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Set-AdvancedSetting -Value 1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000216"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000216"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000216</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000216
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure virtual switch security policies to reject forged transmits.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000216"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000216"
+            >
+              <!-- Result description -->
+              If the virtual machine (VM) operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This means the virtual switch does not compare the source and effective MAC addresses.
+
+To protect against MAC address impersonation, all virtual switches must have forged transmissions set to reject. Reject Forged Transmit can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000216</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure virtual switch security policies to reject forged transmits.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the virtual machine (VM) operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This means the virtual switch does not compare the source and effective MAC addresses.
+
+To protect against MAC address impersonation, all virtual switches must have forged transmissions set to reject. Reject Forged Transmit can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;Forged transmits&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;Forged Transmits&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;Forged transmits&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;Forged transmits&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmits $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmitsInherited $true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000217"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000217"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000217</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000217
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000217"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000217"
+            >
+              <!-- Result description -->
+              If the virtual machine (VM) operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent VMs from changing their effective MAC address, which will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing. &quot;Reject MAC Changes&quot; can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000217</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the virtual machine (VM) operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent VMs from changing their effective MAC address, which will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing. &quot;Reject MAC Changes&quot; can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;MAC Address Changes&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;MAC Address Changes&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -MacChanges $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -MacChangesInherited $true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000218"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000218"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000218</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000218
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000218"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000218"
+            >
+              <!-- Result description -->
+              When promiscuous mode is enabled for a virtual switch, all virtual machines (VMs) connected to the Portgroup have the potential to read all packets across that network (only the virtual machines connected to that Portgroup).
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting. Promiscuous mode can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000218</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When promiscuous mode is enabled for a virtual switch, all virtual machines (VMs) connected to the Portgroup have the potential to read all packets across that network (only the virtual machines connected to that Portgroup).
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting. Promiscuous mode can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;Promiscuous Mode&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;Promiscuous Mode&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -AllowPromiscuous $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -AllowPromiscuousInherited $true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000219"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000219"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000219</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000219
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must restrict use of the dvFilter network application programming interface (API).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000219"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000219"
+            >
+              <!-- Result description -->
+              If the organization is not using products that use the dvfilter network API, the host should not be configured to send network information to a virtual machine (VM).
+
+If the API is enabled, an attacker might attempt to connect a virtual machine to it, potentially providing access to the network of other VMs on the host.
+
+If using a product that makes use of this API, verify the host has been configured correctly. If not using such a product, ensure the setting is blank.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000219</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must restrict use of the dvFilter network application programming interface (API).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization is not using products that use the dvfilter network API, the host should not be configured to send network information to a virtual machine (VM).
+
+If the API is enabled, an attacker might attempt to connect a virtual machine to it, potentially providing access to the network of other VMs on the host.
+
+If using a product that makes use of this API, verify the host has been configured correctly. If not using such a product, ensure the setting is blank.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Net.DVFilterBindIpAddress&quot; value and verify the value is blank or the correct IP address of a security appliance if in use.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress
+
+If the &quot;Net.DVFilterBindIpAddress&quot; setting is not blank and security appliances are not in use on the host, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Net.DVFilterBindIpAddress&quot; value and remove any incorrect addresses.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Set-AdvancedSetting -Value &quot;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000220"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000220"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000220</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000220
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000220"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000220"
+            >
+              <!-- Result description -->
+              When a port group is set to VLAN 4095, the vSwitch passes all network frames to the attached virtual machines (VMs) without modifying the VLAN tags. In vSphere, this is referred to as VGT. The VM must process the VLAN information itself via an 802.1Q driver in the operating system.
+
+VLAN 4095 must only be implemented if the attached VMs have been specifically authorized and are capable of managing VLAN tags themselves. If VLAN 4095 is enabled inappropriately, it may cause denial of service or allow a VM to interact with traffic on an unauthorized VLAN.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Select-Object -ExpandProperty VlanId stdout.strip is expected not to match &quot;4095&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Select-Object -ExpandProperty VlanId stdout.strip is expected not to match &quot;4095&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000220</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When a port group is set to VLAN 4095, the vSwitch passes all network frames to the attached virtual machines (VMs) without modifying the VLAN tags. In vSphere, this is referred to as VGT. The VM must process the VLAN information itself via an 802.1Q driver in the operating system.
+
+VLAN 4095 must only be implemented if the attached VMs have been specifically authorized and are capable of managing VLAN tags themselves. If VLAN 4095 is enabled inappropriately, it may cause denial of service or allow a VM to interact with traffic on an unauthorized VLAN.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+For each standard switch, review the &quot;VLAN ID&quot; on each port group and verify it is not set to &quot;4095&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VirtualPortGroup | Select Name, VLanID
+
+If any port group is configured with VLAN 4095 and is not documented as a needed exception, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+For each port group on a standard switch that is configured to a native VLAN, click the &#39;...&#39; button next to the port group.
+
+Click &quot;Edit Settings&quot;. On the &quot;Properties&quot; tab, change the &quot;VLAN ID&quot; to an appropriate VLAN ID. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VirtualPortGroup -Name &quot;portgroup name&quot; | Set-VirtualPortGroup -VLanId &quot;New VLAN#&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000221"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000221"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000221</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000221
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must have all security patches and updates installed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000221"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000221"
+            >
+              <!-- Result description -->
+              Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VMHost -Name 10.186.25.26).ExtensionData.Config.Product.build stdout.strip is expected to cmp &#x3D;&#x3D; &quot;21813344&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VMHost -Name 10.186.25.26).ExtensionData.Config.Product.build stdout.strip is expected to cmp &#x3D;&#x3D; &quot;21813344&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000221</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must have all security patches and updates installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine the current version and build:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Summary. Note the version string next to &quot;Hypervisor:&quot;.
+
+or
+
+From a Secure Shell (SSH) session connected to the ESXi host, or from the ESXi shell, run the following command:
+
+# vmware -v
+
+If the ESXi host does not have the latest patches, this is a finding.
+
+If the ESXi host is not on a supported release, this is a finding.
+
+The latest ESXi versions and their build numbers can be found here: https:&#x2F;&#x2F;kb.vmware.com&#x2F;s&#x2F;article&#x2F;2143832
+
+VMware also publishes Advisories on security patches and offers a way to subscribe to email alerts for them.
+
+Go to: https:&#x2F;&#x2F;www.vmware.com&#x2F;support&#x2F;policies&#x2F;security_response</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi can be patched in multiple ways, and this fix text does not cover all methods.
+
+Manual patching when image profiles are not used:
+
+- Download the latest &quot;offline bundle&quot; .zip update from vmware.com. Verify the hash.
+
+- Transfer the file to a datastore accessible by the ESXi host, local or remote.
+
+- Put the ESXi host into maintenance mode.
+
+- From an ESXi shell, run the following command:
+
+esxcli software vib update -d &lt;path to offline patch bundle.zip&gt;
+
+Manual patching when image profiles are used:
+
+From an ESXi shell, run the following command:
+
+# esxcli software sources profile list -d &#x2F;vmfs&#x2F;volumes&#x2F;&lt;your datastore&gt;&#x2F;&lt;bundle name.zip&gt;
+
+Note the available profiles. The organization will usually want the one ending in &quot;-standard&quot;.
+
+# esxcli software profile update -p &lt;selected profile&gt; -d &#x2F;vmfs&#x2F;volumes&#x2F;&lt;your datastore&gt;&#x2F;&lt;bundle name.zip&gt;
+
+There will be little output during the update. Once complete, reboot the host for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000222"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000222"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000222</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000222
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000222"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000222"
+            >
+              <!-- Result description -->
+              Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000222</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.SuppressShellWarning&quot; value and verify it is set to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning
+
+If the &quot;UserVars.SuppressShellWarning&quot; setting is not set to &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.SuppressShellWarning&quot; value and configure it to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Set-AdvancedSetting -Value 0</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000223"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000223"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000223</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000223
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000223"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000223"
+            >
+              <!-- Result description -->
+              The L1 Terminal Fault (L1TF) CPU vulnerabilities published in 2018 have patches and mitigations available in vSphere. However, there are performance impacts to these mitigations that require careful thought and planning from the system administrator before implementation. Until a mitigation is implemented, the UI warning about the lack of a mitigation must not be dismissed so the system administrator does not assume the vulnerability has been addressed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000223</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The L1 Terminal Fault (L1TF) CPU vulnerabilities published in 2018 have patches and mitigations available in vSphere. However, there are performance impacts to these mitigations that require careful thought and planning from the system administrator before implementation. Until a mitigation is implemented, the UI warning about the lack of a mitigation must not be dismissed so the system administrator does not assume the vulnerability has been addressed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.SuppressHyperthreadWarning&quot; value and verify it is set to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning
+
+If the &quot;UserVars.SuppressHyperthreadWarning&quot; setting is not set to &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.SuppressHyperthreadWarning&quot; value and configure it to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Set-AdvancedSetting -Value 0</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000224"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000224"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000224</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000224
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must verify certificates for SSL syslog endpoints.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000224"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000224"
+            >
+              <!-- Result description -->
+              When sending syslog data to a remote host, ESXi can be configured to use any combination of TCP, UDP and SSL transports. When using SSL, the server certificate must be validated to ensure that the host is connecting to a valid syslog server.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000224</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must verify certificates for SSL syslog endpoints.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When sending syslog data to a remote host, ESXi can be configured to use any combination of TCP, UDP and SSL transports. When using SSL, the server certificate must be validated to ensure that the host is connecting to a valid syslog server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If SSL is not used for a syslog target, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logCheckSSLCerts&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logCheckSSLCerts
+
+If the &quot;Syslog.global.logCheckSSLCerts&quot; setting is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To configure SSL syslog endpoint certificate checking it must be turned on and also the trusted certificate chain must be added to ESXi&#39;s trusted store.
+
+From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logCheckSSLCerts&quot; value and configure it to &quot;true&quot;.
+
+Copy the PEM formatted trusted CA certificate so that is accessible to the host and append the contents to &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;castore.pem by running the follow command:
+
+# &lt;path&#x2F;to&#x2F;cacert&gt; &gt;&gt; &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;castore.pem
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logCheckSSLCerts | Set-AdvancedSetting -Value &quot;true&quot;
+
+Copy the PEM formatted trusted CA certificate so that is accessible to the host.
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.security.certificatestore.add.CreateArgs()
+$arguments.filename &#x3D; &lt;path&#x2F;to&#x2F;cacert&gt;
+$esxcli.system.security.certificatestore.add.Invoke($arguments)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000225"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000225"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000225</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000225
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable volatile key destruction.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000225"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000225"
+            >
+              <!-- Result description -->
+              By default, pages allocated for virtual machines (VMs), userspace applications, and kernel threads are zeroed out at allocation time. ESXi will always ensure that no nonzero pages are exposed to VMs or userspace applications. While this prevents exposing cryptographic keys from VMs or userworlds to other clients, these keys can stay present in host memory for a long time if the memory is not reused.
+
+The NIAP Virtualization Protection Profile and Server Virtualization Extended Package require that memory that may contain cryptographic keys be zeroed upon process exit.
+
+To this end, a new configuration option, MemEagerZero, can be configured to enforce zeroing out userworld and guest memory pages when a userworld process or guest exits. For kernel threads, memory spaces holding keys are zeroed out as soon as the secret is no longer needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.MemEagerZero | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.MemEagerZero | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000225</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable volatile key destruction.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, pages allocated for virtual machines (VMs), userspace applications, and kernel threads are zeroed out at allocation time. ESXi will always ensure that no nonzero pages are exposed to VMs or userspace applications. While this prevents exposing cryptographic keys from VMs or userworlds to other clients, these keys can stay present in host memory for a long time if the memory is not reused.
+
+The NIAP Virtualization Protection Profile and Server Virtualization Extended Package require that memory that may contain cryptographic keys be zeroed upon process exit.
+
+To this end, a new configuration option, MemEagerZero, can be configured to enforce zeroing out userworld and guest memory pages when a userworld process or guest exits. For kernel threads, memory spaces holding keys are zeroed out as soon as the secret is no longer needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Mem.MemEagerZero&quot; value and verify it is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.MemEagerZero
+
+If the &quot;Mem.MemEagerZero&quot; setting is not set to &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Mem.MemEagerZero&quot; value and configure it to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.MemEagerZero | Set-AdvancedSetting -Value 1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000226"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000226"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000226</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000226
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure a session timeout for the vSphere API.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000226"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000226"
+            >
+              <!-- Result description -->
+              The vSphere API (VIM) allows for remote, programmatic administration of the ESXi host. Authenticated API sessions are no different from a risk perspective than authenticated UI sessions and they need similar protections.
+
+One of these protections is a basic inactivity timeout, after which the session will be invalidated and reauthentication will be required by the application accessing the API. This is set to 30 seconds by default but can be disabled, thus leaving API sessions open indefinitely. The 30 second default must be verified and maintained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000226</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure a session timeout for the vSphere API.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere API (VIM) allows for remote, programmatic administration of the ESXi host. Authenticated API sessions are no different from a risk perspective than authenticated UI sessions and they need similar protections.
+
+One of these protections is a basic inactivity timeout, after which the session will be invalidated and reauthentication will be required by the application accessing the API. This is set to 30 seconds by default but can be disabled, thus leaving API sessions open indefinitely. The 30 second default must be verified and maintained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; value and verify it is set to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout
+
+If the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; setting is not set to &quot;30&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; value and configure it to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Set-AdvancedSetting -Value 30</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000227"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000227"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000227</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000227
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must be configured with an appropriate maximum password age.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000227"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000227"
+            >
+              <!-- Result description -->
+              The older an ESXi local account password is, the larger the opportunity window is for attackers to guess, crack or re-use a previously cracked password. Rotating passwords on a regular basis is a fundamental security practice and one that ESXi supports.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordMaxDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;90&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 90
+     got: 99999
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordMaxDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;90&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 90
+     got: 99999
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000227</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must be configured with an appropriate maximum password age.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The older an ESXi local account password is, the larger the opportunity window is for attackers to guess, crack or re-use a previously cracked password. Rotating passwords on a regular basis is a fundamental security practice and one that ESXi supports.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordMaxDays&quot; value and verify it is set to &quot;90&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordMaxDays
+
+If the &quot;Security.PasswordMaxDays&quot; setting is not set to &quot;90&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordMaxDays&quot; value and configure it to &quot;90&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordMaxDays | Set-AdvancedSetting -Value 90</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000228"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000228"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000228</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000228
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi Common Information Model (CIM) service must be disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000228"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000228"
+            >
+              <!-- Result description -->
+              The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard application programming interfaces (APIs). These APIs are consumed by external applications such as HP SIM or Dell OpenManage for agentless, remote hardware monitoring of the ESXi host.
+
+To reduce attack surface area and following the minimum functionality principal, the CIM service must be disabled unless explicitly needed and approved.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000228</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi Common Information Model (CIM) service must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard application programming interfaces (APIs). These APIs are consumed by external applications such as HP SIM or Dell OpenManage for agentless, remote hardware monitoring of the ESXi host.
+
+To reduce attack surface area and following the minimum functionality principal, the CIM service must be disabled unless explicitly needed and approved.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, locate the &quot;CIM Server&quot; service and verify it is &quot;Stopped&quot; and the &quot;Startup Policy&quot; is set to &quot;Start and stop manually&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;}
+
+If the &quot;CIM Server&quot; service does not have a &quot;Policy&quot; of &quot;off&quot; or is running, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot; select the &quot;CIM Server&quot; service and click the &quot;Stop&quot; button.
+
+Click &quot;Edit Startup policy...&quot; and select the &quot;Start and stop manually&quot; radio button. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;} | Stop-VMHostService</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000229"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000229"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000229</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000229
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must use DOD-approved certificates.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000229"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000229"
+            >
+              <!-- Result description -->
+              The default self-signed host certificate issued by the VMware Certificate Authority (VMCA) must be replaced with a DOD-approved certificate when the host will be accessed directly, such as during a virtual machine (VM) console connection.
+
+The use of a DOD certificate on the host assures clients the service they are connecting to is legitimate and properly secured.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ssl_certificate for &#39;10.186.25.26&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ssl_certificate for &#39;10.186.25.26&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000229</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must use DOD-approved certificates.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The default self-signed host certificate issued by the VMware Certificate Authority (VMCA) must be replaced with a DOD-approved certificate when the host will be accessed directly, such as during a virtual machine (VM) console connection.
+
+The use of a DOD certificate on the host assures clients the service they are connecting to is legitimate and properly secured.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Certificate.
+
+If the issuer is not a DOD-approved certificate authority, this is a finding.
+
+If the host will never be accessed directly (virtual machine console connections bypass vCenter), this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Join the ESXi host to vCenter before replacing the certificate.
+
+Obtain a DOD-issued certificate and private key for the host following the requirements below:
+
+Key size: 2048 bits or more (PEM encoded)
+
+Key format: PEM
+VMware supports PKCS8 and PKCS1 (RSA keys)
+x509 version 3
+
+SubjectAltName must contain DNS Name&#x3D;&lt;machine_FQDN&gt;
+
+CRT (Base-64) format
+
+Contains the following Key Usages: Digital Signature, Non Repudiation, Key Encipherment
+
+Start time of one day before the current time
+
+CN (and SubjectAltName) set to the host name (or IP address) that the ESXi host has in the vCenter Server inventory
+
+From the vSphere Web Client, select the ESXi host&#39;s vCenter Server &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced Settings.
+
+Select the &quot;vpxd.certmgmt.mode&quot; value and ensure it is set to &quot;custom&quot;.
+
+Put the host into maintenance mode.
+
+Temporarily enable Secure Shell (SSH) on the host. Use Secure Copy Protocol (SCP) to transfer the new certificate and key to &#x2F;tmp. SSH to the host. Back up the existing certificate and key:
+
+# mv &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.crt &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.crt.bak
+# mv &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.key &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.key.bak
+
+Copy the new certificate and key to &quot;&#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;&quot; and rename them to &quot;rui.crt&quot; and &quot;rui.key&quot; respectively.
+
+Restart management agents to implement the new certificate:
+
+# services.sh restart</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000230"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000230"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000230</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000230
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host Secure Shell (SSH) daemon must disable port forwarding.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000230"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000230"
+            >
+              <!-- Result description -->
+              While enabling Transmission Control Protocol (TCP) tunnels is a valuable function of sshd, this feature is not appropriate for use on the ESXi hypervisor.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000230</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host Secure Shell (SSH) daemon must disable port forwarding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >While enabling Transmission Control Protocol (TCP) tunnels is a valuable function of sshd, this feature is not appropriate for use on the ESXi hypervisor.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep allowtcpforwarding
+
+Expected result:
+
+allowtcpforwarding no
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+AllowTcpForwarding no</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000231"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000231"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000231</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000231
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host OpenSLP service must be disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000231"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000231"
+            >
+              <!-- Result description -->
+              OpenSLP implements the Service Location Protocol to help CIM clients discover CIM servers over TCP 427. This service is not widely needed and has had vulnerabilities exposed in the past. To reduce attack surface area and following the minimum functionality principal, the OpenSLP service must be disabled unless explicitly needed and approved.
+
+Note: Disabling the OpenSLP service may affect monitoring and third-party systems that use the WBEM DTMF protocols.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000231</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host OpenSLP service must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >OpenSLP implements the Service Location Protocol to help CIM clients discover CIM servers over TCP 427. This service is not widely needed and has had vulnerabilities exposed in the past. To reduce attack surface area and following the minimum functionality principal, the OpenSLP service must be disabled unless explicitly needed and approved.
+
+Note: Disabling the OpenSLP service may affect monitoring and third-party systems that use the WBEM DTMF protocols.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, locate the &quot;slpd&quot; service and verify it is &quot;Stopped&quot; and the &quot;Startup Policy&quot; is set to &quot;Start and stop manually&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;}
+
+If the slpd service does not have a &quot;Policy&quot; of &quot;off&quot; or is running, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot; select the &quot;slpd&quot; service and click the &quot;Stop&quot; button.
+
+Click &quot;Edit Startup policy...&quot; and select the &quot;Start and stop manually&quot; radio button. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;} | Stop-VMHostService</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000232"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000232"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000232</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000232
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable audit logging.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000232"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000232"
+            >
+              <!-- Result description -->
+              ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000232</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable audit logging.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.storageEnable&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable
+
+If the &quot;Syslog.global.auditRecord.storageEnable&quot; setting is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.storageEnable&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Set-AdvancedSetting -Value &quot;true&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000233"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000233"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000233</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000233
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must off-load audit records via syslog.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000233"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000233"
+            >
+              <!-- Result description -->
+              ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000233</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must off-load audit records via syslog.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.remoteEnable&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable
+
+If the &quot;Syslog.global.auditRecord.remoteEnable&quot; setting is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.remoteEnable&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Set-AdvancedSetting -Value &quot;true&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000234"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000234"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000234</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000234
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enable strict x509 verification for SSL syslog endpoints.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000234"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000234"
+            >
+              <!-- Result description -->
+              When sending syslog data to a remote host via SSL, the ESXi host is presented with the endpoint&#39;s SSL server certificate. In addition to trust verification, configured elsewhere, this &quot;x509-strict&quot; option performs additional validity checks on CA root certificates during verification.
+
+These checks are generally not performed (CA roots are inherently trusted) and might cause incompatibilities with existing, misconfigured CA roots. The NIAP requirements in the Virtualization Protection Profile and Server Virtualization Extended Package, however, require even CA roots to pass validations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000234</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enable strict x509 verification for SSL syslog endpoints.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When sending syslog data to a remote host via SSL, the ESXi host is presented with the endpoint&#39;s SSL server certificate. In addition to trust verification, configured elsewhere, this &quot;x509-strict&quot; option performs additional validity checks on CA root certificates during verification.
+
+These checks are generally not performed (CA roots are inherently trusted) and might cause incompatibilities with existing, misconfigured CA roots. The NIAP requirements in the Virtualization Protection Profile and Server Virtualization Extended Package, however, require even CA roots to pass validations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If SSL is not used for a syslog target, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.certificate.strictX509Compliance&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance
+
+If the &quot;Syslog.global.certificate.strictX509Compliance&quot; setting is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.certificate.strictX509Compliance&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Set-AdvancedSetting -Value &quot;true&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000235"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000235"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000235</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000235
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must forward audit records containing information to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000235"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000235"
+            >
+              <!-- Result description -->
+              Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user&#x2F;process&#x2F;VM identifiers, event descriptions, success&#x2F;fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in the ESXi audit logs provides a means of investigating an attack; recognizing resource utilization or capacity thresholds; or identifying an improperly configured host.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logLevel | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: info
+     got: error
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logLevel | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: info
+     got: error
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000235</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must forward audit records containing information to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user&#x2F;process&#x2F;VM identifiers, event descriptions, success&#x2F;fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in the ESXi audit logs provides a means of investigating an attack; recognizing resource utilization or capacity thresholds; or identifying an improperly configured host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logLevel&quot; value and verify it is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logLevel
+
+If the &quot;Syslog.global.logLevel&quot; setting is not set to &quot;info&quot;, this is a finding.
+
+Note: Verbose logging level is acceptable for troubleshooting purposes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logLevel&quot; value and configure it to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logLevel | Set-AdvancedSetting -Value &quot;info&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000236"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000236"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000236</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000236
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not be configured to override virtual machine (VM) configurations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000236"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000236"
+            >
+              <!-- Result description -->
+              Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000236</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not be configured to override virtual machine (VM) configurations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# stat -c &quot;%s&quot; &#x2F;etc&#x2F;vmware&#x2F;settings
+
+Expected result:
+
+0
+
+If the output does not match the expected result, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# echo -n &gt;&#x2F;etc&#x2F;vmware&#x2F;settings</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000237"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000237"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000237</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000237
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not be configured to override virtual machine (VM) logger settings.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000237"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000237"
+            >
+              <!-- Result description -->
+              Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000237</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not be configured to override virtual machine (VM) logger settings.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# grep &quot;^vmx\.log&quot; &#x2F;etc&#x2F;vmware&#x2F;config
+
+If the command produces any output, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following commands:
+
+# cp &#x2F;etc&#x2F;vmware&#x2F;config &#x2F;etc&#x2F;vmware&#x2F;config.bak
+# grep -v &quot;^vmx\.log&quot; &#x2F;etc&#x2F;vmware&#x2F;config.bak&gt;&#x2F;etc&#x2F;vmware&#x2F;config</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000238"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000238"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000238</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000238
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must require TPM-based configuration encryption.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000238"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000238"
+            >
+              <!-- Result description -->
+              An ESXi host&#39;s configuration consists of configuration files for each service that runs on the host. The configuration files typically reside in the &#x2F;etc&#x2F; directory, but they can also reside in other namespaces. The configuration files contain run-time information about the state of the services. Over time, the default values in the configuration files might change, for example, when settings on the ESXi host are changed.
+
+A cron job backs up the ESXi configuration files periodically, when ESXi shuts down gracefully or on demand, and creates an archived configuration file in the boot bank. When ESXi reboots, it reads the archived configuration file and recreates the state that ESXi was in when the backup was taken.
+
+Before vSphere 7.0 Update 2, the archived ESXi configuration file is not encrypted. In vSphere 7.0 Update 2 and later, the archived configuration file is encrypted. When the ESXi host is configured with a Trusted Platform Module (TPM), the TPM is used to &quot;seal&quot; the configuration to the host, providing a strong security guarantee and additional protection from offline attacks.
+
+Configuration encryption uses the physical TPM when it is available and supported at install or upgrade time. If the TPM was added or enabled later, the ESXi host must be told to reconfigure to use the newly available TPM. Once the TPM configuration encryption is enabled, it cannot be disabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty Mode stdout.strip is expected to cmp &#x3D;&#x3D; &quot;TPM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TPM
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty Mode stdout.strip is expected to cmp &#x3D;&#x3D; &quot;TPM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TPM
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000238</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must require TPM-based configuration encryption.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An ESXi host&#39;s configuration consists of configuration files for each service that runs on the host. The configuration files typically reside in the &#x2F;etc&#x2F; directory, but they can also reside in other namespaces. The configuration files contain run-time information about the state of the services. Over time, the default values in the configuration files might change, for example, when settings on the ESXi host are changed.
+
+A cron job backs up the ESXi configuration files periodically, when ESXi shuts down gracefully or on demand, and creates an archived configuration file in the boot bank. When ESXi reboots, it reads the archived configuration file and recreates the state that ESXi was in when the backup was taken.
+
+Before vSphere 7.0 Update 2, the archived ESXi configuration file is not encrypted. In vSphere 7.0 Update 2 and later, the archived configuration file is encrypted. When the ESXi host is configured with a Trusted Platform Module (TPM), the TPM is used to &quot;seal&quot; the configuration to the host, providing a strong security guarantee and additional protection from offline attacks.
+
+Configuration encryption uses the physical TPM when it is available and supported at install or upgrade time. If the TPM was added or enabled later, the ESXi host must be told to reconfigure to use the newly available TPM. Once the TPM configuration encryption is enabled, it cannot be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.encryption.get.invoke() | Select Mode
+
+Expected result:
+
+Mode: TPM
+
+If the &quot;Mode&quot; is not set to &quot;TPM&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure the TPM 2.0 chip is enabled in the BIOS and the ESX UI does not show any errors about a present but unavailable TPM.
+
+This setting cannot be configured until the TPM is properly enabled in firmware.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption set --mode&#x3D;TPM
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.encryption.set.CreateArgs()
+$arguments.mode &#x3D; &quot;TPM&quot;
+$esxcli.system.settings.encryption.set.Invoke($arguments)
+
+Evacuate the host and gracefully reboot for changes to take effect.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000239"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000239"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000239</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000239
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure the firewall to restrict access to services running on the host.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000239"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000239"
+            >
+              <!-- Result description -->
+              Unrestricted access to services running on an ESXi host can expose a host to outside attacks and unauthorized access. Reduce the risk by configuring the ESXi firewall to only allow access from authorized networks.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >False is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >False is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000239</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure the firewall to restrict access to services running on the host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unrestricted access to services running on an ESXi host can expose a host to outside attacks and unauthorized access. Reduce the risk by configuring the ESXi firewall to only allow access from authorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Firewall.
+
+Under the &quot;Allowed IP addresses&quot; column, review the allowed IPs for each service.
+
+Check this for &quot;Incoming&quot; and &quot;Outgoing&quot; sections.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostFirewallException | Where {$_.Enabled -eq $true} | Select Name,Enabled,@{N&#x3D;&quot;AllIPEnabled&quot;;E&#x3D;{$_.ExtensionData.AllowedHosts.AllIP}}
+
+If for an enabled service &quot;Allow connections from any IP address&quot; is selected, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Firewall.
+
+Click &quot;Edit...&quot;. For each enabled service, uncheck the check box to &quot;Allow connections from any IP address&quot; and input the site-specific network(s) required.
+
+The following example formats are acceptable:
+
+192.168.0.0&#x2F;24
+192.168.1.2, 2001::1&#x2F;64
+fd3e:29a6:0a81:e478::&#x2F;64
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+#This disables the allow all rule for the target service. We are targeting the sshServer service in this example.
+$arguments &#x3D; $esxcli.network.firewall.ruleset.set.CreateArgs()
+$arguments.rulesetid &#x3D; &quot;sshServer&quot;
+$arguments.allowedall &#x3D; $false
+$esxcli.network.firewall.ruleset.set.Invoke($arguments)
+
+#Next add the allowed IPs for the service. Note doing the &quot;vSphere Web Client&quot; service this way may disable access but may be done through vCenter or through the console.
+$arguments &#x3D; $esxcli.network.firewall.ruleset.allowedip.add.CreateArgs()
+$arguments.rulesetid &#x3D; &quot;sshServer&quot;
+$arguments.ipaddress &#x3D; &quot;10.0.0.0&#x2F;8&quot;
+$esxcli.network.firewall.ruleset.allowedip.add.Invoke($arguments)
+
+This must be done for each enabled service.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000240"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000240"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000240</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000240
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host when using Host Profiles and&#x2F;or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000240"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000240"
+            >
+              <!-- Result description -->
+              If a host is configured to join an Active Directory domain using Host Profiles and&#x2F;or Auto Deploy, the Active Directory credentials are saved in the profile and are transmitted over the network.
+
+To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network, use the vSphere Authentication Proxy.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no attached host profiles host: 10.186.25.26. This control is not applicable.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no attached host profiles host: 10.186.25.26. This control is not applicable.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000240</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host when using Host Profiles and&#x2F;or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a host is configured to join an Active Directory domain using Host Profiles and&#x2F;or Auto Deploy, the Active Directory credentials are saved in the profile and are transmitted over the network.
+
+To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network, use the vSphere Authentication Proxy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+If the organization is not using Host Profiles to join Active Directory, this is not applicable.
+
+From the vSphere Client, go to Home &gt;&gt; Policies and Profiles &gt;&gt; Host Profiles.
+
+Click a Host Profile &gt;&gt; Configure &gt;&gt; Security and Services &gt;&gt; Security Settings &gt;&gt; Authentication Configuration &gt;&gt; Active Directory Configuration &gt;&gt; Join Domain Method.
+
+If the method used to join hosts to a domain is not set to &quot;Use vSphere Authentication Proxy to add the host to domain&quot;, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to vCenter, run the following command:
+
+Get-VMHost | Select Name, &#x60; @{N&#x3D;&quot;HostProfile&quot;;E&#x3D;{$_ | Get-VMHostProfile}}, &#x60; @{N&#x3D;&quot;JoinADEnabled&quot;;E&#x3D;{($_ | Get-VmHostProfile).ExtensionData.Config.ApplyProfile.Authentication.ActiveDirectory.Enabled}}, &#x60; @{N&#x3D;&quot;JoinDomainMethod&quot;;E&#x3D;{(($_ | Get-VMHostProfile).ExtensionData.Config.ApplyProfile.Authentication.ActiveDirectory | Select -ExpandProperty Policy | Where {$_.Id -eq &quot;JoinDomainMethodPolicy&quot;}).Policyoption.Id}}
+
+If &quot;JoinADEnabled&quot; is &quot;True&quot; and &quot;JoinDomainMethod&quot; is not &quot;FixedCAMConfigOption&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Home &gt;&gt; Policies and Profiles &gt;&gt; Host Profiles.
+
+Click a Host Profile &gt;&gt; Configure &gt;&gt; Security and Services &gt;&gt; Security Settings &gt;&gt; Authentication Configuration &gt;&gt; Active Directory Configuration.
+
+Click &quot;Edit Host Profile...&quot;. Set the &quot;Join Domain Method&quot; to &quot;Use vSphere Authentication Proxy to add the host to domain&quot; and provide the IP address of the vSphere Authentication Proxy server.
+
+Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000241"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000241"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000241</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000241
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not use the default Active Directory ESX Admin group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000241"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000241"
+            >
+              <!-- Result description -->
+              When adding ESXi hosts to Active Directory, all user&#x2F;group accounts assigned to the Active Directory group &quot;ESX Admins&quot; will have full administrative access to the host.
+
+If this group is not controlled or known to the system administrators, it may be used for inappropriate access to the host. Therefore, the default group must be changed to a site-specific Active Directory group and membership must be severely restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000241</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not use the default Active Directory ESX Admin group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When adding ESXi hosts to Active Directory, all user&#x2F;group accounts assigned to the Active Directory group &quot;ESX Admins&quot; will have full administrative access to the host.
+
+If this group is not controlled or known to the system administrators, it may be used for inappropriate access to the host. Therefore, the default group must be changed to a site-specific Active Directory group and membership must be severely restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For systems that do not use Active Directory, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; value and verify it is not set to &quot;ESX Admins&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.hostsvc.esxAdminsGroup
+
+If the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; setting is set to &quot;ESX Admins&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; key and configure its value to an appropriate Active Directory group other than &quot;ESX Admins&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.hostsvc.esxAdminsGroup | Set-AdvancedSetting -Value &quot;&lt;site specific AD group&gt;&quot;
+
+Note: Changing the group name does not remove the permissions of the previous group.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000243"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000243"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000243</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000243
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must configure a persistent log location for all locally stored logs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000243"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000243"
+            >
+              <!-- Result description -->
+              ESXi can be configured to store log files on an in-memory file system. This occurs when the host&#39;s &quot;&#x2F;scratch&quot; directory is linked to &quot;&#x2F;tmp&#x2F;scratch&quot;. When this is done, only a single day&#39;s worth of logs are stored at any time. In addition, log files will be reinitialized upon each reboot.
+
+This presents a security risk as user activity logged on the host is only stored temporarily and will not persist across reboots. This can also complicate auditing and make it harder to monitor events and diagnose issues. ESXi host logging should always be configured to a persistent datastore.
+
+Note: Scratch space is configured automatically during installation or first boot of an ESXi host and does not usually need to be configured manually.
+
+If ESXi is installed on an SD card or USB device, a persistent log location may not be configured upon install as normal.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.get.Invoke() | Select-Object -ExpandProperty LocalLogOutputIsPersistent stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.get.Invoke() | Select-Object -ExpandProperty LocalLogOutputIsPersistent stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000243</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must configure a persistent log location for all locally stored logs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi can be configured to store log files on an in-memory file system. This occurs when the host&#39;s &quot;&#x2F;scratch&quot; directory is linked to &quot;&#x2F;tmp&#x2F;scratch&quot;. When this is done, only a single day&#39;s worth of logs are stored at any time. In addition, log files will be reinitialized upon each reboot.
+
+This presents a security risk as user activity logged on the host is only stored temporarily and will not persist across reboots. This can also complicate auditing and make it harder to monitor events and diagnose issues. ESXi host logging should always be configured to a persistent datastore.
+
+Note: Scratch space is configured automatically during installation or first boot of an ESXi host and does not usually need to be configured manually.
+
+If ESXi is installed on an SD card or USB device, a persistent log location may not be configured upon install as normal.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logDir&quot; value and verify it is set to a persistent location.
+
+If the value of the setting is &quot;[] &#x2F;scratch&#x2F;logs&quot;, verify the advanced setting &quot;ScratchConfig.CurrentScratchLocation&quot; is not set to &quot;&#x2F;tmp&#x2F;scratch&quot;. This is a nonpersistent location.
+
+If &quot;Syslog.global.logDir&quot; is not configured to a persistent location, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.syslog.config.get.Invoke() | Select LocalLogOutput,LocalLogOutputIsPersistent
+
+If the &quot;LocalLogOutputIsPersistent&quot; value is not true, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logDir&quot; value and set it to a known persistent location.
+
+An example is shown below, where 51dda02d-fade5016-8a08-005056171889 is the UUID of the target datastore:
+
+&#x2F;vmfs&#x2F;volumes&#x2F;51dda02d-fade5016-8a08-005056171889
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logDir | Set-AdvancedSetting -Value &quot;New Log Location&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000244"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000244"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000244</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000244
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must enforce the exclusive running of executables from approved VIBs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000244"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000244"
+            >
+              <!-- Result description -->
+              The &quot;execInstalledOnly&quot; advanced ESXi boot option, when set to TRUE, guarantees that the VMkernel executes only those binaries that have been packaged as part of a signed VIB. While this option is effective on its own, it can be further enhanced by telling the Secure Boot to check with the TPM to make sure that the boot process does not proceed unless this setting is enabled. This further protects against malicious offline changes to ESXi configuration to disable the &quot;execInstalledOnly&quot; option.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000244</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must enforce the exclusive running of executables from approved VIBs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;execInstalledOnly&quot; advanced ESXi boot option, when set to TRUE, guarantees that the VMkernel executes only those binaries that have been packaged as part of a signed VIB. While this option is effective on its own, it can be further enhanced by telling the Secure Boot to check with the TPM to make sure that the boot process does not proceed unless this setting is enabled. This further protects against malicious offline changes to ESXi configuration to disable the &quot;execInstalledOnly&quot; option.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;VMkernel.Boot.execInstalledOnly&quot; value and verify that it is &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly
+
+If the &quot;VMkernel.Boot.execInstalledOnly&quot; setting is not &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;VMkernel.Boot.execInstalledOnly&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Set-AdvancedSetting -Value True</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000245"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000245"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000245</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000245
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must use sufficient entropy for cryptographic operations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000245"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000245"
+            >
+              <!-- Result description -->
+              Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host.
+
+In computing, the term &quot;entropy&quot; refers to random characters and data that are collected for use in cryptography, such as generating encryption keys to secure data transmitted over a network. Entropy is required by security for generating keys and communicating securely over the network. Entropy is often collected from a variety of sources on a system.
+
+FIPS entropy handling is the default behavior if the following conditions are true:
+
+-The hardware supports RDSEED.
+-The disableHwrng VMkernel boot option isn&#39;t present or is FALSE.
+-The entropySources VMkernel boot option isn&#39;t present or is 0 (zero).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;disableHwrng&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;entropySources&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;disableHwrng&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;entropySources&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000245</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must use sufficient entropy for cryptographic operations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host.
+
+In computing, the term &quot;entropy&quot; refers to random characters and data that are collected for use in cryptography, such as generating encryption keys to secure data transmitted over a network. Entropy is required by security for generating keys and communicating securely over the network. Entropy is often collected from a variety of sources on a system.
+
+FIPS entropy handling is the default behavior if the following conditions are true:
+
+-The hardware supports RDSEED.
+-The disableHwrng VMkernel boot option isn&#39;t present or is FALSE.
+-The entropySources VMkernel boot option isn&#39;t present or is 0 (zero).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following commands:
+
+# esxcli system settings kernel list -o disableHwrng
+# esxcli system settings kernel list -o entropySources
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.kernel.list.invoke() | Where {$_.Name -eq &quot;disableHwrng&quot; -or $_.Name -eq &quot;entropySources&quot;}
+
+If &quot;disableHwrng&quot; is not set to &quot;false&quot;, this is a finding.
+If &quot;entropySources&quot; is not set to &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following commands:
+
+# esxcli system settings kernel set -s disableHwrng -v FALSE
+# esxcli system settings kernel set -s entropySources -v 0
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.kernel.set.CreateArgs()
+$arguments.setting &#x3D; &quot;disableHwrng&quot;
+$arguments.value &#x3D; &quot;FALSE&quot;
+$esxcli.system.settings.kernel.set.invoke($arguments)
+$arguments.setting &#x3D; &quot;entropySources&quot;
+$arguments.value &#x3D; &quot;0&quot;
+$esxcli.system.settings.kernel.set.invoke($arguments)
+
+Reboot the ESXi host after updating entropy settings.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-ESXI-80-000246"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-ESXI-80-000246"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>ESXI-80-000246</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  ESXI-80-000246
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ESXi host must not enable log filtering.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-ESXI-80-000246"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-ESXI-80-000246"
+            >
+              <!-- Result description -->
+              The log filtering capability lets you modify the logging policy of the syslog service that is running on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi logs and to deny specific log events entirely.
+
+Setting a limit to the amount of logging information restricts the ability to detect and respond to potential security issues or system failures properly.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.logfilter.get.invoke() | Select-Object -ExpandProperty LogFilteringEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.logfilter.get.invoke() | Select-Object -ExpandProperty LogFilteringEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXI-80-000246</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi host must not enable log filtering.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The log filtering capability lets you modify the logging policy of the syslog service that is running on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi logs and to deny specific log events entirely.
+
+Setting a limit to the amount of logging information restricts the ability to detect and respond to potential security issues or system failures properly.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system syslog config logfilter get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.syslog.config.logfilter.get.invoke()
+
+If &quot;LogFilteringEnabled&quot; is not set to &quot;false&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From an ESXi shell, run the following command:
+
+# esxcli system syslog config logfilter set --log-filtering-enabled&#x3D;false
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.syslog.config.logfilter.set.CreateArgs()
+$arguments.logfilteringenabled &#x3D; $false
+$esxcli.system.syslog.config.logfilter.set.invoke($arguments)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000009"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000009"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000009</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001184
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000009
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-17 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000068
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001184
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001453
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002418
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002420
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002422
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000009"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000009"
+            >
+              <!-- Result description -->
+              Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000009</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-17 (2), CM-7 b, IA-2 (8), IA-2 (9), SC-13, SC-23, SC-8, SC-8 (1), SC-8 (2)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >At the command prompt on the vCenter Server Appliance, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware-TlsReconfigurator&#x2F;VcTlsReconfigurator&#x2F;reconfigureVc scan
+
+If the output indicates versions of TLS other than 1.2 are enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >At the command prompt on the vCenter Server Appliance, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware-TlsReconfigurator&#x2F;VcTlsReconfigurator&#x2F;reconfigureVc update -p TLSv1.2
+
+vCenter services will be restarted as part of the reconfiguration. The operating system will not be restarted.
+
+The &quot;--no-restart&quot; flag can be added to restart services at a later time.
+
+Changes will not take effect until all services are restarted or the appliance is rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000023"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000023"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000023</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000023
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enforce the limit of three consecutive invalid login attempts by a user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000023"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000023"
+            >
+              <!-- Result description -->
+              By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).MaxFailedAttempts stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 3
+     got: 5
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).MaxFailedAttempts stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 3
+     got: 5
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000023</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enforce the limit of three consecutive invalid login attempts by a user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+The following lockout policy should be set as follows:
+
+Maximum number of failed login attempts: 3
+
+If this account lockout policy is not configured as stated, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Maximum number of failed login attempts&quot; to &quot;3&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000024"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000024"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000024</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 1
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001384
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000024
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-8 c 1
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000048
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000050
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001384
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000024"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000024"
+            >
+              <!-- Result description -->
+              Display of the DOD-approved use notification before granting access to the application ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with DTM-08-060. Use the following verbiage for applications that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for operating systems that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000024</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Display of the DOD-approved use notification before granting access to the application ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with DTM-08-060. Use the following verbiage for applications that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for operating systems that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-8 a, AC-8 b, AC-8 c 1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Login Message.
+
+If the selection box next to &quot;Show login message&quot; is disabled, &quot;Details of login message&quot; is not configured to the standard DOD User Agreement, or the &quot;Consent checkbox&quot; is disabled, this is a finding.
+
+Note: Refer to vulnerability discussion for user agreement language.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Login Message.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Show login message&quot; slider to enable.
+
+Configure the &quot;Login message&quot; to &quot;DOD User Agreement&quot;.
+
+Click the &quot;Consent checkbox&quot; slider to enable.
+
+Set the &quot;Details of login message&quot; to the Standard Mandatory DOD Notice and Consent Banner text.
+
+Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000034"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000034"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000034</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000034
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must produce audit records containing information to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000034"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000034"
+            >
+              <!-- Result description -->
+              Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000034</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must produce audit records containing information to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify the &quot;config.log.level&quot; value is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.log.level and verify it is set to &quot;info&quot;.
+
+If the &quot;config.log.level&quot; value is not set to &quot;info&quot; or does not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;config.log.level&quot; setting to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.log.level | Set-AdvancedSetting -Value info</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000057"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000057"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000057</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000057
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  vCenter Server plugins must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000057"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000057"
+            >
+              <!-- Result description -->
+              The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, web-based functionality.
+
+vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
+
+Additionally, vCenter comes with a number of plugins preinstalled that may or may not be necessary for proper operation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000057</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter Server plugins must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, web-based functionality.
+
+vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
+
+Additionally, vCenter comes with a number of plugins preinstalled that may or may not be necessary for proper operation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Solutions &gt;&gt; Client Plug-Ins.
+
+View the Installed&#x2F;Available Plug-ins list and verify they are all identified as authorized VMware, third-party (partner), and&#x2F;or site-specific approved plug-ins.
+
+If any installed&#x2F;available plug-ins in the viewable list cannot be verified as allowed vSphere Client plug-ins from trusted sources or are not in active use, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Solutions &gt;&gt; Client Plug-Ins, click the radio button next to the unknown plug-in, and click &quot;Disable&quot;.
+
+If the plugin will not be needed in the future, proceed to uninstall the plug-in.
+
+To uninstall plug-ins, do the following:
+
+If vCenter Server is in linked mode, perform this procedure on the vCenter Server that is used to install the plug-in initially and then restart the vCenter Server services on the linked vCenter Server:
+
+In a web browser, navigate to &quot;http:&#x2F;&#x2F;vCenter_Server_name_or_IP&#x2F;mob&quot;, where &quot;vCenter_Server_name_or_IP&#x2F;mob&quot; is the name of the vCenter Server or its IP address.
+
+Click &quot;Content&quot;.
+
+Click &quot;ExtensionManager&quot;.
+
+Select and copy the name of the plug-in to be removed from the list of values under &quot;Properties&quot;.
+
+Click &quot;UnregisterExtension&quot;. A new window appears.
+
+Paste the name of the plug-in and click &quot;Invoke Method&quot;. This removes the plug-in.
+
+Close the window.
+
+Refresh the Managed Object Type:ManagedObjectReference:ExtensionManager window to verify the plug-in is removed successfully.
+
+Note: If the plug-in still appears, restart the vSphere Client.
+
+Note: The Managed Object Browser (MOB) may have to be enabled temporarily if it was disabled previously.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000059"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000059"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000059</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000059
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000059"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000059"
+            >
+              <!-- Result description -->
+              To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses except the following.
+
+(i) Accesses explicitly identified and documented by the organization. Organizations document specific user actions that can be performed on the information system without identification or authentication; and
+(ii) Accesses that occur through authorized use of group authenticators without individual authentication. Organizations may require unique identification of individuals in group accounts (e.g., shared privilege accounts) or for detailed accountability of individual activity.
+
+Using Active Directory or an identity provider for authentication provides more robust account management capabilities and accountability.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000059</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses except the following.
+
+(i) Accesses explicitly identified and documented by the organization. Organizations document specific user actions that can be performed on the information system without identification or authentication; and
+(ii) Accesses that occur through authorized use of group authenticators without individual authentication. Organizations may require unique identification of individuals in group accounts (e.g., shared privilege accounts) or for detailed accountability of individual activity.
+
+Using Active Directory or an identity provider for authentication provides more robust account management capabilities and accountability.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), IA-2, IA-2 (5), IA-4 e, IA-8</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+If the identity provider type is &quot;embedded&quot; and there is no identity source of type &quot;Active Directory&quot; (either Windows Integrated Authentication or LDAP), this is a finding.
+
+If the identity provider type is &quot;Microsoft ADFS&quot; or another supported identity provider, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When using the embedded identity provider type, perform the following:
+
+From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Identity Sources.
+
+Click &quot;Add&quot;.
+
+Select either &quot;Active Directory over LDAP&quot; or &quot;Active Directory (Windows Integrated Authentication)&quot; and configure appropriately.
+
+Note: Windows Integrated Authentication requires that the vCenter server be joined to Active Directory before configuration via Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Active Directory Domain.
+
+OR
+
+To change the identity provider type to a third-party identity provider such as Microsoft ADFS, perform the following:
+
+From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click &quot;Change Identity Provider&quot;.
+
+Select &quot;Microsoft ADFS&quot; and click &quot;Next&quot;.
+
+Enter the ADFS server information and User and Group details and click &quot;Finish&quot;.
+
+For additional information on configuring ADFS for use with vCenter, refer to the vSphere documentation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000060"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000060"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000060</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002009
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000060
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must require multifactor authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001953
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002009
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000060"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000060"
+            >
+              <!-- Result description -->
+              Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.
+
+Multifactor authentication requires using two or more factors to achieve authentication.
+
+Factors include:
+(i) something a user knows (e.g., password&#x2F;PIN);
+(ii) something a user has (e.g., cryptographic identification device, token); or
+(iii) something a user is (e.g., biometric).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000060</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must require multifactor authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.
+
+Multifactor authentication requires using two or more factors to achieve authentication.
+
+Factors include:
+(i) something a user knows (e.g., password&#x2F;PIN);
+(ii) something a user has (e.g., cryptographic identification device, token); or
+(iii) something a user is (e.g., biometric).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-10, IA-2 (1), IA-2 (12), IA-2 (2), IA-8 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+If the embedded identity provider is used, click on &quot;Smart Card Authentication&quot;.
+
+If the embedded identity provider is used and &quot;Smart Card Authentication&quot; is not enabled, this is a finding.
+
+If a third-party identity provider is used, such as Microsoft ADFS, and it does not require multifactor authentication to log on to vCenter, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To configure smart card authentication for vCenter when using the embedded identity provider, refer to the vSphere documentation.
+
+For vCenter Servers using a third-party identity provider, consult the product&#39;s documentation for enabling multifactor authentication.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000069"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000069"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000069</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000069
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must be at least 15 characters in length.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000069"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000069"
+            >
+              <!-- Result description -->
+              The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Use of more characters in a password helps to exponentially increase the time and&#x2F;or resources required to compromise the password.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinLength stdout.strip is expected to cmp &gt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 15
+     got: 8
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinLength stdout.strip is expected to cmp &gt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 15
+     got: 8
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000069</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must be at least 15 characters in length.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Use of more characters in a password helps to exponentially increase the time and&#x2F;or resources required to compromise the password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Minimum Length&quot; setting.
+
+Minimum Length: 15
+
+If the password policy is not configured with a &quot;Minimum Length&quot; policy of &quot;15&quot; or more, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Minimum Length&quot; to &quot;15&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000070"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000070"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000070</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000070
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must prohibit password reuse for a minimum of five generations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000070"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000070"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+To meet password policy requirements, passwords must be changed at specific policy-based intervals.
+
+If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).ProhibitedPreviousPasswordsCount stdout.strip is expected to cmp &gt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).ProhibitedPreviousPasswordsCount stdout.strip is expected to cmp &gt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000070</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must prohibit password reuse for a minimum of five generations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+To meet password policy requirements, passwords must be changed at specific policy-based intervals.
+
+If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (e)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Restrict reuse&quot; setting.
+
+Restrict reuse: Users cannot reuse any previous 5 passwords
+
+If the password policy is not configured with a &quot;Restrict reuse&quot; policy of &quot;5&quot; or more, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Restrict reuse&quot; to &quot;5&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000071"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000071"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000071</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000071
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must contain at least one uppercase character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000071"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000071"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password is, the greater the number of possible combinations that need to be tested before the password is compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinUppercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinUppercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000071</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must contain at least one uppercase character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password is, the greater the number of possible combinations that need to be tested before the password is compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 uppercase characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more uppercase characters, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;uppercase characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000072"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000072"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000072</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000072
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must contain at least one lowercase character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000072"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000072"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinLowercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinLowercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000072</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must contain at least one lowercase character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 lowercase characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more lowercase characters, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;lowercase characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000073"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000073"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000073</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000073
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must contain at least one numeric character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000073"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000073"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinNumericCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinNumericCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000073</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must contain at least one numeric character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 numeric characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more numeric characters, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;numeric characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000074"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000074"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000074</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000074
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server passwords must contain at least one special character.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000074"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000074"
+            >
+              <!-- Result description -->
+              Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor in determining how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Special characters are not alphanumeric. Examples include: ~ ! @ # $ % ^ *.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinSpecialCharCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).MinSpecialCharCount stdout.strip is expected to cmp &gt;&#x3D; 1</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000074</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server passwords must contain at least one special character.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor in determining how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Special characters are not alphanumeric. Examples include: ~ ! @ # $ % ^ *.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 special characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more special characters, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;special characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000077"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000077"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000077</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000197
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001188
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000077
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enable FIPS-validated cryptography.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000197
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001188
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000077"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000077"
+            >
+              <!-- Result description -->
+              FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements.
+
+In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).
+
+vSphere 7.0 Update 2 and later adds additional FIPS-validated cryptography to vCenter Server Appliance. By default, this FIPS validation option is disabled and must be enabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Invoke-GetSystemGlobalFips | Select-Object -ExpandProperty enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Invoke-GetSystemGlobalFips | Select-Object -ExpandProperty enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: True
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000077</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enable FIPS-validated cryptography.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements.
+
+In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).
+
+vSphere 7.0 Update 2 and later adds additional FIPS-validated cryptography to vCenter Server Appliance. By default, this FIPS validation option is disabled and must be enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3 (1), IA-5 (1) (c), IA-7, MA-4 (6), SC-13, SC-23 (3), SC-28</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Web Client, go to Developer Center &gt;&gt; API Explorer.
+
+From the &quot;Select API&quot; drop-down menu, select appliance.
+
+Expand system&#x2F;security&#x2F;global_fips &gt;&gt; GET.
+
+Click &quot;Execute&quot; and then &quot;Copy Response&quot; to view the results.
+
+Example response:
+
+{
+    &quot;enabled&quot;: true
+}
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Invoke-GetSystemGlobalFips
+
+If global FIPS mode is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Web Client go to Developer Center &gt;&gt; API Explorer.
+
+From the &quot;Select API&quot; drop-down menu, select appliance.
+
+Expand system&#x2F;security&#x2F;global_fips &gt;&gt; PUT.
+
+In the response body under &quot;Try it out&quot; paste the following:
+
+{
+    &quot;enabled&quot;: true
+}
+
+Click &quot;Execute&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$spec &#x3D; Initialize-SystemSecurityGlobalFipsUpdateSpec -Enabled $true; Invoke-SetSystemGlobalFips -SystemSecurityGlobalFipsUpdateSpec $spec
+
+Note: The vCenter server reboots after FIPS is enabled or disabled.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000079"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000079"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000079</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000079
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enforce a 90-day maximum password lifetime restriction.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000079"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000079"
+            >
+              <!-- Result description -->
+              Any password, no matter how complex, can eventually be cracked. Therefore, passwords must be changed at specific intervals.
+
+One method of minimizing this risk is to use complex passwords and periodically change them. If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the system and&#x2F;or application passwords could be compromised.
+
+This requirement does not include emergency administration accounts, which are meant for access to the application in case of failure. These accounts are not required to have maximum password lifetime restrictions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).PasswordLifetimeDays stdout.strip is expected to cmp &lt;&#x3D; 90</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoPasswordPolicy).PasswordLifetimeDays stdout.strip is expected to cmp &lt;&#x3D; 90</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000079</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enforce a 90-day maximum password lifetime restriction.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any password, no matter how complex, can eventually be cracked. Therefore, passwords must be changed at specific intervals.
+
+One method of minimizing this risk is to use complex passwords and periodically change them. If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the system and&#x2F;or application passwords could be compromised.
+
+This requirement does not include emergency administration accounts, which are meant for access to the application in case of failure. These accounts are not required to have maximum password lifetime restrictions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Maximum lifetime&quot; setting.
+
+Maximum lifetime: Password must be changed every 90 days
+
+If the password policy is not configured with &quot;Maximum lifetime&quot; policy of &quot;90&quot; or less, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;Maximum lifetime&quot; to &quot;90&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000080"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000080"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000080</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001991
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002010
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000080
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enable revocation checking for certificate-based authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001954
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001991
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002010
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000080"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000080"
+            >
+              <!-- Result description -->
+              The system must establish the validity of the user-supplied identity certificate using Online Certificate Status Protocol (OCSP) and&#x2F;or Certificate Revocation List (CRL) revocation checking.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).UseInCertCRL stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).UseInCertCRL stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000080</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enable revocation checking for certificate-based authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must establish the validity of the user-supplied identity certificate using Online Certificate Status Protocol (OCSP) and&#x2F;or Certificate Revocation List (CRL) revocation checking.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (12), IA-5 (2) (a), IA-5 (2) (d), IA-8 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a federated identity provider is configured and used for an identity source and supports Smartcard authentication, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under Smart card authentication settings &gt;&gt; Certificate revocation, verify &quot;Revocation check&quot; does not show as disabled.
+
+If &quot;Revocation check&quot; shows as disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under Smart card authentication settings &gt;&gt; Certificate revocation, click the &quot;Edit&quot; button.
+
+Configure revocation checking per site requirements. OCSP with CRL failover is recommended.
+
+By default, both locations are pulled from the cert. CRL location can be overridden in this screen, and local responders can be specified via the sso-config command line tool. See the vSphere documentation for more information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000089"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000089"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000089</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-11
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002038
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000089
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must terminate vSphere Client sessions after 15 minutes of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-12
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-11
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002038
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002361
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000089"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000089"
+            >
+              <!-- Result description -->
+              Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free resources committed by the managed network element.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000089</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must terminate vSphere Client sessions after 15 minutes of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free resources committed by the managed network element.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-12, IA-11, SC-10</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Client Configuration.
+
+View the value of the &quot;Session timeout&quot; setting.
+
+If the &quot;Session timeout&quot; is not set to &quot;15 minute(s)&quot; or less this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Client Configuration.
+
+Click &quot;Edit&quot; and enter &quot;15&quot; minutes into the &quot;Session timeout&quot; setting. Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000095"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000095"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000095</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000095
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server user roles must be verified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001813
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000095"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000095"
+            >
+              <!-- Result description -->
+              Users and service accounts must only be assigned privileges they require. Least privilege requires that these privileges must only be assigned if needed to reduce risk of confidentiality, availability, or integrity loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000095</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server user roles must be verified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Users and service accounts must only be assigned privileges they require. Least privilege requires that these privileges must only be assigned if needed to reduce risk of confidentiality, availability, or integrity loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (1), SC-2, SC-3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+View each role and verify the users and&#x2F;or groups assigned to it by clicking on &quot;Usage&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Sort Role | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+Application service account and user required privileges should be documented.
+
+If any user or service account has more privileges than required, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To update a user&#39;s or group&#39;s permissions to an existing role with reduced permissions, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Global Permissions.
+
+Select the user or group, click the pencil button, change the assigned role, and click &quot;OK&quot;.
+
+Note: If permissions are assigned on a specific object, the role must be updated where it is assigned (for example, at the cluster level).
+
+To create a new role with reduced permissions, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Click the green plus sign and enter a name for the role and select only the specific permissions required.
+
+Users can then be assigned to the newly created role.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000110"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000110"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000110</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000110
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I&#x2F;O Control (NIOC).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000110"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000110"
+            >
+              <!-- Result description -->
+              DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+Managing excess capacity ensures sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000110</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I&#x2F;O Control (NIOC).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+Managing excess capacity ensures sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5 (2)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+View the &quot;Properties&quot; pane and verify &quot;Network I&#x2F;O Control&quot; is &quot;Enabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;NIOC Enabled&quot;;E&#x3D;{$_.ExtensionData.config.NetworkResourceManagementEnabled}}
+
+If &quot;Network I&#x2F;O Control&quot; is disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+In the &quot;Properties&quot; pane, click &quot;Edit&quot;. Change &quot;Network I&#x2F;O Control&quot; to &quot;Enabled&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDSwitch &quot;VDSwitch Name&quot; | Get-View).EnableNetworkResourceManagement($true)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000123"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000123"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000123</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002132
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000123
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002132
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000123"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000123"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to create a new account. They may also try to hijack an existing account by changing a password or enabling a previously disabled account. Therefore, all actions performed on accounts in the SSO domain much be alerted on in vCenter at a minimum and ideally on a Security Information and Event Management (SIEM) system as well.
+
+To ensure the appropriate personnel are alerted about SSO account actions, create a new vCenter alarm for the &quot;com.vmware.sso.PrincipalManagement&quot; event ID and configure the alert mechanisms appropriately.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AlarmDefinition | Where-Object {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AlarmDefinition | Where-Object {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000123</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to create a new account. They may also try to hijack an existing account by changing a password or enabling a previously disabled account. Therefore, all actions performed on accounts in the SSO domain much be alerted on in vCenter at a minimum and ideally on a Security Information and Event Management (SIEM) system as well.
+
+To ensure the appropriate personnel are alerted about SSO account actions, create a new vCenter alarm for the &quot;com.vmware.sso.PrincipalManagement&quot; event ID and configure the alert mechanisms appropriately.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Security &gt;&gt; Alarm Definitions.
+
+Verify there is an alarm created to alert upon all SSO account actions.
+
+The alarm name may vary, but it is suggested to name it &quot;SSO account actions - com.vmware.sso.PrincipalManagement&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AlarmDefinition | Where {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select Name,Enabled,@{N&#x3D;&quot;EventTypeId&quot;;E&#x3D;{$_.ExtensionData.Info.Expression.Expression.EventTypeId}}
+
+If an alarm is not created to alert on SSO account actions, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Security &gt;&gt; Alarm Definitions.
+
+Click &quot;Add&quot;.
+
+Provide the alarm name of &quot;SSO account actions - com.vmware.sso.PrincipalManagement&quot; and an optional description.
+
+From the &quot;Target type&quot; dropdown menu, select &quot;vCenter Server&quot;.
+
+Click &quot;Next&quot;.
+
+Paste &quot;com.vmware.sso.PrincipalManagement&quot; (without quotes) in the line after &quot;IF&quot; and press &quot;Enter&quot;.
+
+Next to &quot;Trigger the alarm and&quot;, select &quot;Show as Warning&quot;.
+
+Configure the desired notification actions that will inform the SA and ISSO of the event.
+
+Click &quot;Next&quot;. Click &quot;Next&quot; again. Click &quot;Create&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000145"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000145"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000145</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000145
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000145"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000145"
+            >
+              <!-- Result description -->
+              By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).FailedAttemptIntervalSec stdout.strip is expected to cmp &gt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 900
+     got: 180
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).FailedAttemptIntervalSec stdout.strip is expected to cmp &gt;&#x3D; 900</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 900
+     got: 180
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000145</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+View the value of the &quot;Time interval between failures&quot; setting.
+
+Time interval between failures: 900 seconds
+
+If the lockout policy is not configured with &quot;Time interval between failures&quot; policy of &quot;900&quot; or more, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Time interval between failures&quot; to &quot;900&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000148"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000148"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000148</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000148
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must be configured to send logs to a central log server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000148"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000148"
+            >
+              <!-- Result description -->
+              vCenter must be configured to send near real-time log data to syslog collectors so information will be available to investigators in the case of a security incident or to assist in troubleshooting.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No log servers configured: [] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to be falsey, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No log servers configured: [] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to be falsey, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000148</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must be configured to send logs to a central log server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter must be configured to send near real-time log data to syslog collectors so information will be available to investigators in the case of a security incident or to assist in troubleshooting.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Syslog&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify at least one site-specific syslog receiver is configured and is listed as &quot;Reachable&quot;.
+
+If no valid syslog collector is configured or if the collector is not listed as &quot;Reachable&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Syslog&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Edit&quot; or &quot;Configure&quot;.
+
+Edit or add the address and port of a site-specific syslog aggregator or Security Information Event Management (SIEM) system with the appropriate protocol.
+
+User Datagram Protocol (UDP) is discouraged due to its stateless and unencrypted nature. Transport Layer Security (TLS) is preferred.
+
+Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000150"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000150"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000150</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001744
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000150
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-3 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001744
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000150"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000150"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system operation may be adversely affected.
+
+Alerts provide organizations with urgent messages. Real-time alerts provide these messages immediately (i.e., the time from event detection to alert occurs in seconds or less).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000150</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system operation may be adversely affected.
+
+Alerts provide organizations with urgent messages. Real-time alerts provide these messages immediately (i.e., the time from event detection to alert occurs in seconds or less).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, AU-5 (2), CM-3 (5)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the Central Logging Server being used to verify it is configured to alert the SA and ISSO, at a minimum, on any AO-defined events. Otherwise, this is a finding.
+
+If there are no AO-defined events, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the Central Logging Server being used to alert the SA and ISSO, at a minimum, on any AO-defined events.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000158"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000158"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000158</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000158
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-8 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001891
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000158"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000158"
+            >
+              <!-- Result description -->
+              Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity.
+
+Synchronizing internal information system clocks to an authoritative time server provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Timesync Configuration: HOST is expected to cmp &#x3D;&#x3D; &quot;NTP&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NTP
+     got: HOST
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Timesync Configuration: HOST is expected to cmp &#x3D;&#x3D; &quot;NTP&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NTP
+     got: HOST
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000158</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity.
+
+Synchronizing internal information system clocks to an authoritative time server provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-8 (1) (a)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Time&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify at least one authorized time server is configured and is listed as &quot;Reachable&quot;.
+
+If &quot;NTP&quot; is not enabled and at least one authorized time server configured, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Time&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Edit&quot; under &quot;Time Synchronization&quot;.
+
+Select &quot;NTP&quot; for &quot;Mode&quot; and enter a list of authorized time servers separated by commas. Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000195"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000195"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000195</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002470
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000195
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server Machine Secure Sockets Layer (SSL) certificate must be issued by a DOD certificate authority.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002470
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000195"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000195"
+            >
+              <!-- Result description -->
+              Untrusted certificate authorities (CA) can issue certificates, but they may be issued by organizations or individuals that seek to compromise DOD systems or by organizations with insufficient security controls. If the CA used for verifying the certificate is not a DOD-approved CA, trust of this CA has not been established.
+
+The DOD will only accept public key infrastructure (PKI) certificates obtained from a DOD-approved internal or external certificate authority. Reliance on CAs for the establishment of secure sessions includes, for example, the use of Transport Layer Security (TLS) certificates.
+
+The default self-signed, VMware Certificate Authority (VMCA)-issued vCenter reverse proxy certificate must be replaced with a DOD-approved certificate. The use of a DOD certificate on the vCenter reverse proxy and other services assures clients that the service they are connecting to is legitimate and trusted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ssl_certificate for &#39;10.186.30.81&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >ssl_certificate for &#39;10.186.30.81&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000195</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server Machine Secure Sockets Layer (SSL) certificate must be issued by a DOD certificate authority.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Untrusted certificate authorities (CA) can issue certificates, but they may be issued by organizations or individuals that seek to compromise DOD systems or by organizations with insufficient security controls. If the CA used for verifying the certificate is not a DOD-approved CA, trust of this CA has not been established.
+
+The DOD will only accept public key infrastructure (PKI) certificates obtained from a DOD-approved internal or external certificate authority. Reliance on CAs for the establishment of secure sessions includes, for example, the use of Transport Layer Security (TLS) certificates.
+
+The default self-signed, VMware Certificate Authority (VMCA)-issued vCenter reverse proxy certificate must be replaced with a DOD-approved certificate. The use of a DOD certificate on the vCenter reverse proxy and other services assures clients that the service they are connecting to is legitimate and trusted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-23 (5)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Certificates &gt;&gt; Certificate Management &gt;&gt; Machine SSL Certificate.
+
+Click &quot;View Details&quot; and examine the &quot;Issuer Information&quot; block.
+
+If the issuer specified is not a DOD approved certificate authority, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain a DOD-issued certificate and private key for each vCenter in the system following the requirements below:
+
+Key size: 2048 bits or more (PEM encoded)
+CRT format (Base-64)
+x509 version 3
+SubjectAltName must contain DNS Name&#x3D;&lt;machine_FQDN&gt;
+Contains the following Key Usages: Digital Signature, Non Repudiation, Key Encipherment
+
+Export the entire certificate issuing chain up to the root in Base-64 format. Concatenate the individual certificates into one file with the &quot;.cer&quot; extension.
+
+From the vSphere Client, go to Administration &gt;&gt; Certificates &gt;&gt; Certificate Management &gt;&gt; Machine SSL Certificate.
+
+Click Actions &gt;&gt; Import and Replace Certificate.
+
+Select the &quot;Replace with external CA certificate&quot; radio button and click &quot;Next&quot;.
+
+Supply the CA-issued certificate , the exported roots file, and the private key.
+
+Click &quot;Replace&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000196"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000196"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000196</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002475
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000196
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enable data at rest encryption for vSAN.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002475
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000196"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000196"
+            >
+              <!-- Result description -->
+              Applications handling data requiring &quot;data at rest&quot; protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+
+Data encryption is a common technique used in environments that require additional levels of security.  It consists of a process to ensure that data can only be consumed by systems that have appropriate levels of access.  Approved systems must have and use the appropriate cryptographic keys to encrypt and decrypt the data.  Systems that do not have the keys will not be able to consume the data in any meaningful way, as it will remain encrypted in accordance to the commonly used Advanced Encryption Standard (AES) from the National Institute of Standards and Technology, or NIST.
+
+vSAN supports Data-At-Rest Encryption and Data-in-Transit Encryption and uses an AES 256 cipher. Data is encrypted after all other processing, such as deduplication, is performed. Data at rest encryption protects data on storage devices, in case a device is removed from the cluster.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-Cluster -Name cluster0 | Get-VsanClusterConfiguration | Select-Object -ExpandProperty EncryptionEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-Cluster -Name cluster0 | Get-VsanClusterConfiguration | Select-Object -ExpandProperty EncryptionEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000196</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enable data at rest encryption for vSAN.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications handling data requiring &quot;data at rest&quot; protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+
+Data encryption is a common technique used in environments that require additional levels of security.  It consists of a process to ensure that data can only be consumed by systems that have appropriate levels of access.  Approved systems must have and use the appropriate cryptographic keys to encrypt and decrypt the data.  Systems that do not have the keys will not be able to consume the data in any meaningful way, as it will remain encrypted in accordance to the commonly used Advanced Encryption Standard (AES) from the National Institute of Standards and Technology, or NIST.
+
+vSAN supports Data-At-Rest Encryption and Data-in-Transit Encryption and uses an AES 256 cipher. Data is encrypted after all other processing, such as deduplication, is performed. Data at rest encryption protects data on storage devices, in case a device is removed from the cluster.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-28 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Review the &quot;Data-at-rest encryption&quot; status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-Cluster | Where-Object {$_.VsanEnabled -eq $true} | Get-VsanClusterConfiguration | Select-Object Name,EncryptionEnabled
+
+If &quot;Data-At-Rest encryption&quot; is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the target cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Click &quot;Edit&quot;.
+
+Enable &quot;Data-At-Rest encryption&quot; and select a pre-configured key provider from the drop down. Click &quot;Apply&quot;.
+
+Note: Before enabling, read and understand the operational implications of enabling data at rest encryption in vSAN and how it effects capacity, performance, and recovery scenarios.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000248"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000248"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000248</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000248
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable the Customer Experience Improvement Program (CEIP).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000248"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000248"
+            >
+              <!-- Result description -->
+              The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes this feature must be disabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000248</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable the Customer Experience Improvement Program (CEIP).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes this feature must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Customer Experience Improvement Program.
+
+If Customer Experience Improvement &quot;Program Status&quot; is &quot;Joined&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Customer Experience Improvement Program.
+
+Click &quot;Leave Program&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000253"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000253"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000253</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000253
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must enforce SNMPv3 security features where SNMP is required.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000253"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000253"
+            >
+              <!-- Result description -->
+              SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. SNMPv3 can be configured for identification and cryptographically based authentication.
+
+SNMPv3 defines a user-based security model (USM) and a view-based access control model (VACM). SNMPv3 USM provides data integrity, data origin authentication, message replay protection, and protection against disclosure of the message payload. SNMPv3 VACM provides access control to determine whether a specific type of access (read or write) to the management information is allowed. Implement both VACM and USM for full protection.
+
+SNMPv3 must be disabled by default and enabled only if used. SNMP v3 provides security feature enhancements to SNMP, including encryption and message authentication.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000253</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must enforce SNMPv3 security features where SNMP is required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. SNMPv3 can be configured for identification and cryptographically based authentication.
+
+SNMPv3 defines a user-based security model (USM) and a view-based access control model (VACM). SNMPv3 USM provides data integrity, data origin authentication, message replay protection, and protection against disclosure of the message payload. SNMPv3 VACM provides access control to determine whether a specific type of access (read or write) to the management information is allowed. Implement both VACM and USM for full protection.
+
+SNMPv3 must be disabled by default and enabled only if used. SNMP v3 provides security feature enhancements to SNMP, including encryption and message authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >At the command prompt on the vCenter Server Appliance, run the following commands:
+
+# appliancesh
+# snmp.get
+
+Note: The &quot;appliancesh&quot; command is not needed if the default shell has not been changed for root.
+
+If &quot;Enable&quot; is set to &quot;False&quot;, this is not a finding.
+
+If &quot;Enable&quot; is set to &quot;True&quot; and &quot;Authentication&quot; is not set to &quot;SHA1&quot;, this is a finding.
+
+If &quot;Enable&quot; is set to &quot;True&quot; and &quot;Privacy&quot; is not set to &quot;AES128&quot;, this is a finding.
+
+If any &quot;Users&quot; are configured with a &quot;Sec_level&quot; that does not equal &quot;priv&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >At the command prompt on the vCenter Server Appliance, run the following commands:
+
+# appliancesh
+# snmp.set --authentication SHA1
+# snmp.set --privacy AES128
+
+To change the security level of a user, run the following command:
+
+# snmp.set --users &lt;username&gt;&#x2F;&lt;auth_password&gt; &lt;priv_password&gt;&#x2F;priv</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000265"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000265"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000265</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000265
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must disable SNMPv1&#x2F;2 receivers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001967
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000265"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000265"
+            >
+              <!-- Result description -->
+              SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1&#x2F;2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1&#x2F;2 in the UI and SNMPv3 in the CLI.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.1.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: False
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.2.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.3.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.4.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.1.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: False
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.2.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.3.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.4.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000265</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must disable SNMPv1&#x2F;2 receivers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1&#x2F;2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1&#x2F;2 in the UI and SNMPv3 in the CLI.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-3 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;SNMP receivers&quot; tab, note the presence of any enabled receiver.
+
+If there are any enabled receivers, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;SNMP receivers&quot; tab, ensure all receivers are disabled.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000266"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000266"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000266</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000266
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002238
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000266"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000266"
+            >
+              <!-- Result description -->
+              By requiring that Single Sign-On (SSO) accounts be unlocked manually, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. When the account unlock time is set to zero, once an account is locked it can only be unlocked manually by an administrator.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).AutoUnlockIntervalSec stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 300
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoLockoutPolicy).AutoUnlockIntervalSec stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 0
+     got: 300
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000266</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By requiring that Single Sign-On (SSO) accounts be unlocked manually, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. When the account unlock time is set to zero, once an account is locked it can only be unlocked manually by an administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+View the value of the &quot;Unlock time&quot; setting.
+
+Unlock time: 0 seconds
+
+If the lockout policy is not configured with &quot;Unlock time&quot; policy of &quot;0&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Unlock time&quot; to &quot;0&quot; and click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000267"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000267"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000267</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000267
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable the distributed virtual switch health check.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000267"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000267"
+            >
+              <!-- Result description -->
+              Network health check is disabled by default. Once enabled, the health check packets contain information on host#, vds#, and port#, which an attacker would find useful. It is recommended that network health check be used for troubleshooting and turned off when troubleshooting is finished.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000267</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable the distributed virtual switch health check.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network health check is disabled by default. Once enabled, the health check packets contain information on host#, vds#, and port#, which an attacker would find useful. It is recommended that network health check be used for troubleshooting and turned off when troubleshooting is finished.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Health Check.
+
+View the health check pane and verify the &quot;VLAN and MTU&quot; and &quot;Teaming and failover&quot; checks are &quot;Disabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$vds &#x3D; Get-VDSwitch
+$vds.ExtensionData.Config.HealthCheckConfig
+
+If the health check feature is enabled on distributed switches and is not on temporarily for troubleshooting purposes, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Health Check.
+
+Click &quot;Edit&quot;.
+
+Disable the &quot;VLAN and MTU&quot; and &quot;Teaming and failover&quot; checks.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-View -ViewType DistributedVirtualSwitch | ?{($_.config.HealthCheckConfig | ?{$_.enable -notmatch &quot;False&quot;})}| %{$_.UpdateDVSHealthCheckConfig(@((New-Object Vmware.Vim.VMwareDVSVlanMtuHealthCheckConfig -property @{enable&#x3D;0}),(New-Object Vmware.Vim.VMwareDVSTeamingHealthCheckConfig -property @{enable&#x3D;0})))}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000268"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000268"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000268</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000268
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must set the distributed port group Forged Transmits policy to &quot;Reject&quot;.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000268"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000268"
+            >
+              <!-- Result description -->
+              If the virtual machine operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+When the &quot;Forged Transmits&quot; option is set to &quot;Accept&quot;, ESXi does not compare source and effective MAC addresses.
+
+To protect against MAC impersonation, set the &quot;Forged Transmits&quot; option to &quot;Reject&quot;. The host compares the source MAC address being transmitted by the guest operating system with the effective MAC address for its virtual machine adapter to determine if they match. If the addresses do not match, the ESXi host drops the packet.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000268</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must set the distributed port group Forged Transmits policy to &quot;Reject&quot;.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the virtual machine operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+When the &quot;Forged Transmits&quot; option is set to &quot;Accept&quot;, ESXi does not compare source and effective MAC addresses.
+
+To protect against MAC impersonation, set the &quot;Forged Transmits&quot; option to &quot;Reject&quot;. The host compares the source MAC address being transmitted by the guest operating system with the effective MAC address for its virtual machine adapter to determine if they match. If the addresses do not match, the ESXi host drops the packet.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;Forged Transmits&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;Forged Transmits&quot; policy is set to accept for a non-uplink port, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;Forged Transmits&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -ForgedTransmits $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -ForgedTransmits $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000269"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000269"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000269</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000269
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to &quot;Reject&quot;.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000269"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000269"
+            >
+              <!-- Result description -->
+              If the virtual machine operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent virtual machines from changing their effective MAC address and will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000269</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to &quot;Reject&quot;.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the virtual machine operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent virtual machines from changing their effective MAC address and will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;MAC Address Changes&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;MAC Address Changes&quot; policy is set to accept, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -MacChanges $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -MacChanges $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000270"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000270"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000270</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000270
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must set the distributed port group Promiscuous Mode policy to &quot;Reject&quot;.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000270"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000270"
+            >
+              <!-- Result description -->
+              When promiscuous mode is enabled for a virtual switch, all virtual machines connected to the port group have the potential of reading all packets across that network, meaning only the virtual machines connected to that port group.
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000270</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must set the distributed port group Promiscuous Mode policy to &quot;Reject&quot;.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When promiscuous mode is enabled for a virtual switch, all virtual machines connected to the port group have the potential of reading all packets across that network, meaning only the virtual machines connected to that port group.
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;Promiscuous Mode&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;Promiscuous Mode&quot; policy is set to accept, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -AllowPromiscuous $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -AllowPromiscuous $false</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000271"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000271"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000271</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000271
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must only send NetFlow traffic to authorized collectors.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000271"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000271"
+            >
+              <!-- Result description -->
+              The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and can contain information about the virtual network, making it easier for a man-in-the-middle attack to be executed successfully. If NetFlow export is required, verify that all NetFlow target Internet Protocols (IPs) are correct.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000271</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must only send NetFlow traffic to authorized collectors.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and can contain information about the virtual network, making it easier for a man-in-the-middle attack to be executed successfully. If NetFlow export is required, verify that all NetFlow target Internet Protocols (IPs) are correct.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+To view NetFlow Collector IPs configured on distributed switches:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; NetFlow.
+
+View the NetFlow pane and verify any collector IP addresses are valid and in use for troubleshooting.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;NetFlowCollectorIPs&quot;;E&#x3D;{$_.ExtensionData.config.IpfixConfig.CollectorIpAddress}}
+
+To view if NetFlow is enabled on any distributed port groups:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed port group &gt;&gt; Manage &gt;&gt; Settings &gt;&gt; Policies.
+
+Go to &quot;Monitoring&quot; and view the NetFlow status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | Select Name,VirtualSwitch,@{N&#x3D;&quot;NetFlowEnabled&quot;;E&#x3D;{$_.Extensiondata.Config.defaultPortConfig.ipfixEnabled.Value}}
+
+If NetFlow is configured and the collector IP is not known and documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To remove collector IPs, do the following:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; NetFlow.
+
+Click &quot;Edit&quot;.
+
+Remove any unknown collector IPs.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$dvs &#x3D; Get-VDSwitch dvswitch | Get-View
+ForEach($vs in $dvs){
+$spec &#x3D; New-Object VMware.Vim.VMwareDVSConfigSpec
+$spec.configversion &#x3D; $vs.Config.ConfigVersion
+$spec.IpfixConfig &#x3D; New-Object VMware.Vim.VMwareIpfixConfig
+$spec.IpfixConfig.CollectorIpAddress &#x3D; &quot;&quot;
+$spec.IpfixConfig.CollectorPort &#x3D; &quot;0&quot;
+$spec.IpfixConfig.ActiveFlowTimeout &#x3D; &quot;60&quot;
+$spec.IpfixConfig.IdleFlowTimeout &#x3D; &quot;15&quot;
+$spec.IpfixConfig.SamplingRate &#x3D; &quot;0&quot;
+$spec.IpfixConfig.InternalFlowsOnly &#x3D; $False
+$vs.ReconfigureDvs_Task($spec)
+}
+
+Note: This will reset the NetFlow collector configuration back to the defaults.
+
+To disable NetFlow on a distributed port group, do the following:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Monitoring&quot; tab.
+
+Change &quot;NetFlow&quot; to &quot;Disabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.defaultPortConfig &#x3D; New-Object VMware.Vim.VMwareDVSPortSetting
+$spec.defaultPortConfig.ipfixEnabled &#x3D; New-Object VMware.Vim.BoolPolicy
+$spec.defaultPortConfig.ipfixEnabled.inherited &#x3D; $false
+$spec.defaultPortConfig.ipfixEnabled.value &#x3D; $false
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000272"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000272"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000272</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000272
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000272"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000272"
+            >
+              <!-- Result description -->
+              ESXi does not use the concept of native VLAN. Frames with VLAN specified in the port group will have a tag, but frames with VLAN not specified in the port group are not tagged and therefore will end up belonging to native VLAN of the physical switch.
+
+For example, frames on VLAN 1 from a Cisco physical switch will be untagged, because this is considered as the native VLAN. However, frames from ESXi specified as VLAN 1 will be tagged with a &quot;1&quot;; therefore, traffic from ESXi that is destined for the native VLAN will not be correctly routed (because it is tagged with a &quot;1&quot; instead of being untagged), and traffic from the physical switch coming from the native VLAN will not be visible (because it is not tagged).
+
+If the ESXi virtual switch port group uses the native VLAN ID, traffic from those virtual machines will not be visible to the native VLAN on the switch, because the switch is expecting untagged traffic.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000272</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >ESXi does not use the concept of native VLAN. Frames with VLAN specified in the port group will have a tag, but frames with VLAN not specified in the port group are not tagged and therefore will end up belonging to native VLAN of the physical switch.
+
+For example, frames on VLAN 1 from a Cisco physical switch will be untagged, because this is considered as the native VLAN. However, frames from ESXi specified as VLAN 1 will be tagged with a &quot;1&quot;; therefore, traffic from ESXi that is destined for the native VLAN will not be correctly routed (because it is tagged with a &quot;1&quot; instead of being untagged), and traffic from the physical switch coming from the native VLAN will not be visible (because it is not tagged).
+
+If the ESXi virtual switch port group uses the native VLAN ID, traffic from those virtual machines will not be visible to the native VLAN on the switch, because the switch is expecting untagged traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group VLAN tags and verify they are not set to the native VLAN ID of the attached physical switch.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | select Name, VlanConfiguration
+
+If any port group is configured with the native VLAN of the ESXi hosts attached physical switch, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+Change the VLAN ID to a non-native VLAN.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup &quot;portgroup name&quot; | Set-VDVlanConfiguration -VlanId &quot;New VLAN#&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000273"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000273"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000273</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000273
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000273"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000273"
+            >
+              <!-- Result description -->
+              When a port group is set to VLAN Trunking, the vSwitch passes all network frames in the specified range to the attached virtual machines without modifying the virtual local area network (VLAN) tags. In vSphere, this is referred to as VGT.
+
+The virtual machine must process the VLAN information itself via an 802.1Q driver in the operating system. VLAN Trunking must only be implemented if the attached virtual machines have been specifically authorized and are capable of managing VLAN tags themselves.
+
+If VLAN Trunking is enabled inappropriately, it may cause a denial of service or allow a virtual machine to interact with traffic on an unauthorized VLAN.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000273</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When a port group is set to VLAN Trunking, the vSwitch passes all network frames in the specified range to the attached virtual machines without modifying the virtual local area network (VLAN) tags. In vSphere, this is referred to as VGT.
+
+The virtual machine must process the VLAN information itself via an 802.1Q driver in the operating system. VLAN Trunking must only be implemented if the attached virtual machines have been specifically authorized and are capable of managing VLAN tags themselves.
+
+If VLAN Trunking is enabled inappropriately, it may cause a denial of service or allow a virtual machine to interact with traffic on an unauthorized VLAN.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group &quot;VLAN Type&quot; and &quot;VLAN trunk range&quot;, if present.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | Where {$_.ExtensionData.Config.Uplink -ne &quot;True&quot;} | Select Name,VlanConfiguration
+
+If any port group is configured with &quot;VLAN trunking&quot; and is not documented as a needed exception (such as NSX appliances), this is a finding.
+
+If any port group is authorized to be configured with &quot;VLAN trunking&quot; but is not configured with the most limited range necessary, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+If &quot;VLAN trunking&quot; is not authorized, remove it by setting &quot;VLAN type&quot; to &quot;VLAN&quot; and configure an appropriate VLAN ID. Click &quot;OK&quot;.
+
+If &quot;VLAN trunking&quot; is authorized but the range is too broad, modify the range in the &quot;VLAN trunk range&quot; field to the minimum necessary and authorized range. An example range would be &quot;1,3-5,8&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command to configure trunking:
+
+Get-VDPortgroup &quot;Portgroup Name&quot; | Set-VDVlanConfiguration -VlanTrunkRange &quot;&lt;VLAN Range(s) comma separated&gt;&quot;
+
+or
+
+Run this command to configure a single VLAN ID:
+
+Get-VDPortgroup &quot;Portgroup Name&quot; | Set-VDVlanConfiguration -VlanId &quot;&lt;New VLAN#&gt;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000274"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000274"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000274</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000274
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000274"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000274"
+            >
+              <!-- Result description -->
+              Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For example, Cisco Catalyst switches typically reserve VLANs 1001 to 1024 and 4094, while Nexus switches typically reserve 3968 to 4094.
+
+Check with the documentation for the organization&#39;s specific switch. Using a reserved VLAN might result in a denial of service on the network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000274</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For example, Cisco Catalyst switches typically reserve VLANs 1001 to 1024 and 4094, while Nexus switches typically reserve 3968 to 4094.
+
+Check with the documentation for the organization&#39;s specific switch. Using a reserved VLAN might result in a denial of service on the network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group VLAN tags and verify that they are not set to a reserved VLAN ID.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | select Name, VlanConfiguration
+
+If any port group is configured with a reserved VLAN ID, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab. Change the VLAN ID to an unreserved VLAN ID.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup &quot;portgroup name&quot; | Set-VDVlanConfiguration -VlanId &quot;New VLAN#&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000275"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000275"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000275</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000275
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must configure the &quot;vpxuser&quot; auto-password to be changed every 30 days.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000275"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000275"
+            >
+              <!-- Result description -->
+              By default, vCenter will change the &quot;vpxuser&quot; password automatically every 30 days. Ensure this setting meets site policies. If it does not, configure it to meet password aging policies.
+
+Note: It is very important the password aging policy is not shorter than the default interval that is set to automatically change the &quot;vpxuser&quot; password to preclude the possibility that vCenter might be locked out of an ESXi host.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name VirtualCenter.VimPasswordExpirationInDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name VirtualCenter.VimPasswordExpirationInDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000275</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must configure the &quot;vpxuser&quot; auto-password to be changed every 30 days.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, vCenter will change the &quot;vpxuser&quot; password automatically every 30 days. Ensure this setting meets site policies. If it does not, configure it to meet password aging policies.
+
+Note: It is very important the password aging policy is not shorter than the default interval that is set to automatically change the &quot;vpxuser&quot; password to preclude the possibility that vCenter might be locked out of an ESXi host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;VirtualCenter.VimPasswordExpirationInDays&quot; is set to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays
+
+If the &quot;VirtualCenter.VimPasswordExpirationInDays&quot; is set to a value other than &quot;30&quot; or does not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;VirtualCenter.VimPasswordExpirationInDays&quot; value to &quot;30&quot; or if the value does not exist create it by entering the values in the &quot;Key&quot; and &quot;Value&quot; fields and clicking &quot;Add&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+If the setting already exists:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays | Set-AdvancedSetting -Value 30
+
+If the setting does not exist:
+
+New-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays -Value 30</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000276"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000276"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000276</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000276
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must configure the &quot;vpxuser&quot; password to meet length policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000276"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000276"
+            >
+              <!-- Result description -->
+              The &quot;vpxuser&quot; password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet password length policies.
+
+Longer passwords make brute-force password attacks more difficult. The &quot;vpxuser&quot; password is added by vCenter, meaning no manual intervention is normally required. The &quot;vpxuser&quot; password length must never be modified to less than the default length of 32 characters.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.vpxd.hostPasswordLength | Select-Object -ExpandProperty Value stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.vpxd.hostPasswordLength | Select-Object -ExpandProperty Value stdout.strip is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000276</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must configure the &quot;vpxuser&quot; password to meet length policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &quot;vpxuser&quot; password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet password length policies.
+
+Longer passwords make brute-force password attacks more difficult. The &quot;vpxuser&quot; password is added by vCenter, meaning no manual intervention is normally required. The &quot;vpxuser&quot; password length must never be modified to less than the default length of 32 characters.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;config.vpxd.hostPasswordLength&quot; is set to &quot;32&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.vpxd.hostPasswordLength and verify it is set to 32.
+
+If the &quot;config.vpxd.hostPasswordLength&quot; is set to a value other than &quot;32, this is a finding.
+
+If the setting does not exist, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;config.vpxd.hostPasswordLength&quot; value to &quot;32&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.vpxd.hostPasswordLength | Set-AdvancedSetting -Value 32</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000277"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000277"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000277</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000277
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000277"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000277"
+            >
+              <!-- Result description -->
+              vCenter and the embedded Lifecycle Manager system must never have a direct route to the internet. Despite this, updates and patches sourced from VMware on the internet must be delivered in a timely manner.
+
+There are two methods to accomplish this: a proxy server and the Update Manager Download Service (UMDS). UMDS is an optional module for Lifecycle Manager that fetches upgrades for virtual appliances, patch metadata, patch binaries, and notifications that would not otherwise be available to an isolated Lifecycle Manager directly.
+
+Alternatively, a proxy for Lifecycle Manager can be configured to allow controlled, limited access to the public internet for the sole purpose of patch gathering. Either solution mitigates the risk of internet connectivity by limiting its scope and use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000277</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter and the embedded Lifecycle Manager system must never have a direct route to the internet. Despite this, updates and patches sourced from VMware on the internet must be delivered in a timely manner.
+
+There are two methods to accomplish this: a proxy server and the Update Manager Download Service (UMDS). UMDS is an optional module for Lifecycle Manager that fetches upgrades for virtual appliances, patch metadata, patch binaries, and notifications that would not otherwise be available to an isolated Lifecycle Manager directly.
+
+Alternatively, a proxy for Lifecycle Manager can be configured to allow controlled, limited access to the public internet for the sole purpose of patch gathering. Either solution mitigates the risk of internet connectivity by limiting its scope and use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the following conditions:
+
+1. Lifecycle Manager must be configured to use the UMDS.
+
+OR
+
+2. Lifecycle Manager must be configured to use a proxy server for access to VMware patch repositories.
+
+OR
+
+3. Lifecycle Manager must disable internet patch repositories and any patches must be manually validated and imported as needed.
+
+Option 1:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Verify the &quot;Download patches from a UMDS shared repository&quot; radio button is selected and that a valid UMDS repository is supplied.
+
+Click &quot;Cancel&quot;.
+
+If this is not set, this is a finding.
+
+Option 2:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Verify the &quot;Download patches directly from the internet&quot; radio button is selected.
+
+Click &quot;Cancel&quot;.
+
+Navigate to the vCenter Server Management interface at https:&#x2F;&#x2F;&lt;vcenter dns&gt;:5480 &gt;&gt; Networking &gt;&gt; Proxy Settings.
+
+Verify that &quot;HTTPS&quot; is &quot;Enabled&quot;.
+
+Click the &quot;HTTPS&quot; row.
+
+Verify the proxy server configuration is accurate.
+
+If this is not set, this is a finding.
+
+Option 3:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Downloads.
+
+Verify the &quot;Automatic downloads&quot; option is disabled.
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Verify any download sources are disabled.
+
+If this is not set, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Option 1:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Select the &quot;Download patches from a UMDS shared repository&quot; radio button and supply a valid UMDS repository.
+
+Click &quot;Save&quot;.
+
+Option 2:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Select the &quot;Download patches directly from the internet&quot; radio button.
+
+Click &quot;Save&quot;.
+
+Navigate to the vCenter Server Management interface at https:&#x2F;&#x2F;&lt;vcenter dns&gt;:5480 &gt;&gt; Networking &gt;&gt; Proxy Settings.
+
+Click &quot;Edit&quot;.
+
+Slide &quot;HTTPS&quot; to &quot;Enabled&quot;.
+
+Supply the appropriate proxy server configuration.
+
+Click &quot;Save&quot;.
+
+Option 3:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Downloads.
+
+Click &quot;Edit&quot; and uncheck &quot;Download patches&quot;.
+
+Under &quot;Patch Setup&quot; select each download source and click Disable.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000278"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000278"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000278</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000278
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must use unique service accounts when applications connect to vCenter.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000278"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000278"
+            >
+              <!-- Result description -->
+              To not violate nonrepudiation (i.e., deny the authenticity of who is connecting to vCenter), when applications need to connect to vCenter they must use unique service accounts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000278</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must use unique service accounts when applications connect to vCenter.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To not violate nonrepudiation (i.e., deny the authenticity of who is connecting to vCenter), when applications need to connect to vCenter they must use unique service accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify each external application that connects to vCenter has a unique service account dedicated to that application.
+
+For example, there should be separate accounts for Log Insight, Operations Manager, or anything else that requires an account to access vCenter.
+
+If any application shares a service account that is used to connect to vCenter, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For applications sharing service accounts, create a new service account to assign to the application so that no application shares a service account with another.
+
+When standing up a new application that requires access to vCenter, always create a new service account prior to installation and grant only the permissions needed for that application.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000279"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000279"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000279</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000279
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000279"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000279"
+            >
+              <!-- Result description -->
+              Virtual machines might share virtual switches and virtual local area networks (VLAN) with the IP-based storage configurations.
+
+IP-based storage includes vSAN, Internet Small Computer System Interface (iSCSI), and Network File System (NFS). This configuration might expose IP-based storage traffic to unauthorized virtual machine users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from the production traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and virtual machines will limit unauthorized users from viewing the traffic.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000279</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines might share virtual switches and virtual local area networks (VLAN) with the IP-based storage configurations.
+
+IP-based storage includes vSAN, Internet Small Computer System Interface (iSCSI), and Network File System (NFS). This configuration might expose IP-based storage traffic to unauthorized virtual machine users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from the production traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and virtual machines will limit unauthorized users from viewing the traffic.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If IP-based storage is not used, this is not applicable.
+
+IP-based storage (iSCSI, NFS, vSAN) VMkernel port groups must be in a dedicated VLAN that can be on a standard or distributed virtual switch that is logically separated from other traffic types.
+
+The check for this will be unique per environment.
+
+To check a standard switch, do the following:
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; Virtual switches. Select a standard switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and note the VLAN ID associated with each port group.
+
+Verify it is dedicated to that purpose and is logically separated from other traffic types.
+
+To check a distributed switch, do the following,
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select and expand a distributed switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and navigate to the &quot;Summary&quot; tab.
+
+Note the VLAN ID associated with each port group and verify it is dedicated to that purpose and is logically separated from other traffic types.
+
+If any IP-based storage networks are not isolated from other traffic types, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configuration of an IP-based VMkernel will be unique to each environment.
+
+To configure VLANs and traffic types, do the following:
+
+Standard switch:
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the Storage VMkernel (for any IP-based storage). Click &quot;Edit...&quot; and click the &quot;Port properties&quot; tab.
+
+Uncheck everything (unless vSAN).
+
+Click the &quot;IPv4&quot; settings or &quot;IPv6&quot; settings tab.
+
+Enter the appropriate IP address and subnet information.
+
+Click &quot;OK&quot;.
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; Virtual switches. Select a standard switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and click &quot;...&quot;. Click &quot;Edit Settings&quot;. On the &quot;Properties&quot; tab, enter the appropriate VLAN ID and click &quot;OK&quot;.
+
+Distributed switch:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Topology.
+
+Select the Storage VMkernel (for any IP-based storage). Click &quot;...&quot; and click &quot;Edit Settings&quot;.
+
+On the &quot;Port properties&quot; tab, uncheck everything (unless vSAN).
+
+Click the &quot;IPv4&quot; settings or &quot;IPv6&quot; settings tab.
+
+Enter the appropriate IP address and subnet information.
+
+Click &quot;OK&quot;.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select and expand a distributed switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and navigate to Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+Enter the appropriate VLAN type and ID and click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000280"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000280"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000280</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000280
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must be configured to send events to a central log server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001851
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000280"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000280"
+            >
+              <!-- Result description -->
+              vCenter server generates volumes of security-relevant application-level events. Examples include logins, system reconfigurations, system degradation warnings, and more. To ensure these events are available for forensic analysis and correlation, they must be sent to the syslog and forwarded on to the configured Security Information and Event Management (SIEM) system and&#x2F;or central log server.
+
+The vCenter server sends events to syslog by default, but this configuration must be verified and maintained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name vpxd.event.syslog.enabled | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name vpxd.event.syslog.enabled | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000280</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must be configured to send events to a central log server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter server generates volumes of security-relevant application-level events. Examples include logins, system reconfigurations, system degradation warnings, and more. To ensure these events are available for forensic analysis and correlation, they must be sent to the syslog and forwarded on to the configured Security Information and Event Management (SIEM) system and&#x2F;or central log server.
+
+The vCenter server sends events to syslog by default, but this configuration must be verified and maintained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4 (1)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;vpxd.event.syslog.enabled&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name vpxd.event.syslog.enabled
+
+If the &quot;vpxd.event.syslog.enabled&quot; value is not set to &quot;true&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;vpxd.event.syslog.enabled&quot; setting to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name vpxd.event.syslog.enabled | Set-AdvancedSetting -Value true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000281"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000281"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000281</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000281
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000281"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000281"
+            >
+              <!-- Result description -->
+              The vSAN Health Check is able to download the HCL from VMware to check compliance against the underlying vSAN Cluster hosts. To ensure the vCenter server is not directly downloading content from the internet, this functionality must be disabled. If this feature is necessary, an external proxy server must be configured.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vsanhealthview &#x3D; Get-VsanView -Id VsanVcClusterHealthSystem-vsan-cluster-health-system; $vsanhealthview.VsanHealthQueryVsanProxyConfig().Host stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vsanhealthview &#x3D; Get-VsanView -Id VsanVcClusterHealthSystem-vsan-cluster-health-system; $vsanhealthview.VsanHealthQueryVsanProxyConfig().Host stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000281</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSAN Health Check is able to download the HCL from VMware to check compliance against the underlying vSAN Cluster hosts. To ensure the vCenter server is not directly downloading content from the internet, this functionality must be disabled. If this feature is necessary, an external proxy server must be configured.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Internet Connectivity.
+
+If the HCL internet download is not required, verify &quot;Status&quot; is &quot;Disabled&quot;.
+
+If the &quot;Status&quot; is &quot;Enabled&quot;, this is a finding.
+
+If the HCL internet download is required, verify &quot;Status&quot; is &quot;Enabled&quot; and a proxy host is configured.
+
+If &quot;Status&quot; is &quot;Enabled&quot; and a proxy is not configured, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Internet Connectivity.
+
+Click &quot;Edit&quot;.
+
+If the HCL internet download is not required, ensure that &quot;Status&quot; is &quot;Disabled&quot;.
+
+If the HCL internet download is required, ensure that &quot;Status&quot; is &quot;Enabled&quot; and that a proxy host is appropriately configured.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000282"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000282"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000282</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000282
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must configure the vSAN Datastore name to a unique name.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000282"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000282"
+            >
+              <!-- Result description -->
+              A vSAN Datastore name by default is &quot;vsanDatastore&quot;. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >is expected not to cmp &#x3D;&#x3D; &quot;vsanDatastore&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: vsanDatastore
+     got: vsanDatastore
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >is expected not to cmp &#x3D;&#x3D; &quot;vsanDatastore&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: vsanDatastore
+     got: vsanDatastore
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000282</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must configure the vSAN Datastore name to a unique name.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A vSAN Datastore name by default is &quot;vsanDatastore&quot;. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Datastores.
+
+Review the datastores and identify any datastores with &quot;vSAN&quot; as the datastore type.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
+Write-Host &quot;vSAN Enabled Cluster found&quot;
+Get-Cluster | where {$_.VsanEnabled} | Get-Datastore | where {$_.type -match &quot;vsan&quot;}
+}
+else{
+Write-Host &quot;vSAN is not enabled, this finding is not applicable.&quot;
+}
+
+If vSAN is enabled and a datastore is named &quot;vsanDatastore&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Datastores.
+
+Right-click on the datastore named &quot;vsanDatastore&quot; and select &quot;Rename&quot;.
+
+Rename the datastore based on site-specific naming standards.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
+Write-Host &quot;vSAN Enabled Cluster found&quot;
+$Clusters &#x3D; Get-Cluster | where {$_.VsanEnabled}
+Foreach ($clus in $clusters){
+ $clus | Get-Datastore | where {$_.type -match &quot;vsan&quot;} | Set-Datastore -Name $(($clus.name) + &quot;_vSAN_Datastore&quot;)
+}
+}
+else{
+Write-Host &quot;vSAN is not enabled, this finding is not applicable.&quot;
+}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000283"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000283"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000283</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000283
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable Username&#x2F;Password and Windows Integrated Authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000283"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000283"
+            >
+              <!-- Result description -->
+              All forms of authentication other than Common Access Card (CAC) must be disabled. Password authentication can be temporarily reenabled for emergency access to the local Single Sign-On (SSO) accounts or Active Directory user&#x2F;pass accounts, but it must be disabled as soon as CAC authentication is functional.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).PasswordAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).WindowsAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).PasswordAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-SsoAuthenticationPolicy).WindowsAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000283</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable Username&#x2F;Password and Windows Integrated Authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >All forms of authentication other than Common Access Card (CAC) must be disabled. Password authentication can be temporarily reenabled for emergency access to the local Single Sign-On (SSO) accounts or Active Directory user&#x2F;pass accounts, but it must be disabled as soon as CAC authentication is functional.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a federated identity provider is configured and used for an identity source, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under &quot;Authentication method&quot;, examine the allowed methods.
+
+If &quot;Smart card authentication&quot; is not enabled and &quot;Password and windows session authentication&quot; is not disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Next to &quot;Authentication method&quot;, click &quot;Edit&quot;.
+
+Select to radio button to &quot;Enable smart card authentication&quot;.
+
+Click &quot;Save&quot;.
+
+To re-enable password authentication for troubleshooting purposes, run the following command on the vCenter Server Appliance:
+
+# &#x2F;opt&#x2F;vmware&#x2F;bin&#x2F;sso-config.sh -set_authn_policy -pwdAuthn true -winAuthn false -certAuthn false -securIDAuthn false -t vsphere.local</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000284"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000284"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000284</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000284
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must restrict access to the default roles with cryptographic permissions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000284"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000284"
+            >
+              <!-- Result description -->
+              In vSphere, the built-in &quot;Administrator&quot; role contains permission to perform cryptographic operations such as Key Management Server (KMS) functions and encrypting and decrypting virtual machine disks. This role must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use.
+
+A new built-in role called &quot;No Cryptography Administrator&quot; exists to provide all administrative permissions except cryptographic operations. Permissions must be restricted such that normal vSphere administrators are assigned the &quot;No Cryptography Administrator&quot; role or more restrictive.
+
+The &quot;Administrator&quot; role must be tightly controlled and must not be applied to administrators who will not be doing cryptographic work. Catastrophic data loss can result from poorly administered cryptography.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrator is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrator is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000284</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must restrict access to the default roles with cryptographic permissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In vSphere, the built-in &quot;Administrator&quot; role contains permission to perform cryptographic operations such as Key Management Server (KMS) functions and encrypting and decrypting virtual machine disks. This role must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use.
+
+A new built-in role called &quot;No Cryptography Administrator&quot; exists to provide all administrative permissions except cryptographic operations. Permissions must be restricted such that normal vSphere administrators are assigned the &quot;No Cryptography Administrator&quot; role or more restrictive.
+
+The &quot;Administrator&quot; role must be tightly controlled and must not be applied to administrators who will not be doing cryptographic work. Catastrophic data loss can result from poorly administered cryptography.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, there are four roles that contain cryptographic related permissions: Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager.
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Where {$_.Role -eq &quot;Admin&quot; -or $_.Role -eq &quot;NoTrustedAdmin&quot; -or $_.Role -eq &quot;vCLSAdmin&quot; -or $_.Role -eq &quot;vSphereKubernetesManager&quot;} | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+If there are any users or groups assigned to the default roles with cryptographic permissions and are not explicitly designated to perform cryptographic operations, this is a finding.
+
+The built-in solution users assigned to the administrator role are NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Move any accounts not explicitly designated for cryptographic operations, other than Solution Users, to other roles such as &quot;No Cryptography Administrator&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000285"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000285"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000285</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000285
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must restrict access to cryptographic permissions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000285"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000285"
+            >
+              <!-- Result description -->
+              These permissions must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use. Catastrophic data loss can result from poorly administered cryptography.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >NoTrustedAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Admin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vSphereKubernetesManager is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vCLSAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >NoTrustedAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Admin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vSphereKubernetesManager is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vCLSAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000285</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must restrict access to cryptographic permissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >These permissions must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use. Catastrophic data loss can result from poorly administered cryptography.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, there are four roles that contain cryptographic related permissions: Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager.
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Highlight each role and click the &#39;Privileges&quot; button in the right pane.
+
+Verify that only the Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager and any site-specific cryptographic roles have the following permissions:
+
+Cryptographic Operations privileges
+Global.Diagnostics
+Host.Inventory.Add host to cluster
+Host.Inventory.Add standalone host
+Host.Local operations.Manage user groups
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$roles &#x3D; Get-VIRole
+ForEach($role in $roles){
+    $privileges &#x3D; $role.PrivilegeList
+    If($privileges -match &quot;Crypto*&quot; -or $privileges -match &quot;Global.Diagnostics&quot; -or $privileges -match &quot;Host.Inventory.Add*&quot; -or $privileges -match &quot;Host.Local operations.Manage user groups&quot;){
+    Write-Host &quot;$role has Cryptographic privileges&quot;
+    }
+}
+
+If any role other than the four default roles contain the permissions listed above and is not authorized to perform cryptographic related operations, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Highlight the target custom role and click &quot;Edit&quot;.
+
+Remove the following permissions from any custom role that is not authorized to perform cryptographic related operations:
+
+Cryptographic Operations privileges
+Global.Diagnostics
+Host.Inventory.Add host to cluster
+Host.Inventory.Add standalone host
+Host.Local operations.Manage user groups</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000286"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000286"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000286</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000286
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000286"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000286"
+            >
+              <!-- Result description -->
+              When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, the potential exists for a man-in-the-middle attack in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vSAN iSCSI service not enabled on cluster: cluster0...this is not applicable.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vSAN iSCSI service not enabled on cluster: cluster0...this is not applicable.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000286</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, the potential exists for a man-in-the-middle attack in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN or if vSAN is enabled but iSCSI is not enabled, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; iSCSI Target Service.
+
+For each iSCSI target, review the value in the &quot;Authentication&quot; column.
+
+If the Authentication method is not set to &quot;CHAP_Mutual&quot; for any iSCSI target, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; iSCSI Target Service.
+
+For each iSCSI target, select the item and click &quot;Edit&quot;.
+
+Change the &quot;Authentication&quot; field to &quot;Mutual CHAP&quot; and configure the incoming and outgoing users and secrets appropriately.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000287"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000287"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000287</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000287
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000287"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000287"
+            >
+              <!-- Result description -->
+              The KEK for a vSAN encrypted datastore is generated by the Key Management Server (KMS) and serves as a wrapper and lock around the Disk Encryption Key (DEK). The DEK is generated by the host and is used to encrypt and decrypt the datastore. A shallow rekey is a procedure in which the KMS issues a new KEK to the ESXi host, which rewraps the DEK but does not change the DEK or any data on disk.
+
+This operation must be done on a regular, site-defined interval and can be viewed as similar in criticality to changing an administrative password. If the KMS is compromised, a standing operational procedure to rekey will put a time limit on the usefulness of any stolen KMS data.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000287</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The KEK for a vSAN encrypted datastore is generated by the Key Management Server (KMS) and serves as a wrapper and lock around the Disk Encryption Key (DEK). The DEK is generated by the host and is used to encrypt and decrypt the datastore. A shallow rekey is a procedure in which the KMS issues a new KEK to the ESXi host, which rewraps the DEK but does not change the DEK or any data on disk.
+
+This operation must be done on a regular, site-defined interval and can be viewed as similar in criticality to changing an administrative password. If the KMS is compromised, a standing operational procedure to rekey will put a time limit on the usefulness of any stolen KMS data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If vSAN is not in use, this is not applicable.
+
+Interview the system administrator (SA) to determine that a procedure has been put in place to perform a shallow rekey of all vSAN encrypted datastores at regular, site-defined intervals.
+
+VMware recommends a 60-day rekey task, but this interval must be defined by the SA and the information system security officer (ISSO).
+
+If vSAN encryption is not in use, this is not a finding.
+
+If vSAN encryption is in use and a regular rekey procedure is not in place, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If vSAN encryption is in use, ensure that a regular rekey procedure is in place.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000288"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000288"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000288</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000288
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an LDAP identity source.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000288"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000288"
+            >
+              <!-- Result description -->
+              LDAP is an industry standard protocol for querying directory services such as Active Directory. This protocol can operate in clear text or over a Secure Sockets Layer (SSL)&#x2F;Transport Layer Security (TLS) encrypted tunnel. To protect confidentiality of LDAP communications, secure LDAP (LDAPS) must be explicitly configured when adding an LDAP identity source in vSphere Single Sign-On (SSO).
+
+When configuring an identity source and supplying an SSL certificate, vCenter will enforce LDAPS. The server URLs do not need to be explicitly provided if an SSL certificate is uploaded.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000288</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an LDAP identity source.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >LDAP is an industry standard protocol for querying directory services such as Active Directory. This protocol can operate in clear text or over a Secure Sockets Layer (SSL)&#x2F;Transport Layer Security (TLS) encrypted tunnel. To protect confidentiality of LDAP communications, secure LDAP (LDAPS) must be explicitly configured when adding an LDAP identity source in vSphere Single Sign-On (SSO).
+
+When configuring an identity source and supplying an SSL certificate, vCenter will enforce LDAPS. The server URLs do not need to be explicitly provided if an SSL certificate is uploaded.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If LDAP is not used as an identity provider, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click the &quot;Identity Sources&quot; tab.
+
+For each identity source of type &quot;Active Directory over LDAP&quot;, if the &quot;Server URL&quot; does not indicate &quot;ldaps:&#x2F;&#x2F;&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click the &quot;Identity Sources&quot; tab.
+
+For each identity source of type &quot;Active Directory over LDAP&quot; where LDAPS is not configured, highlight the item and click &quot;Edit&quot;.
+
+Ensure the primary and secondary server URLs, if specified, are configured for &quot;ldaps:&#x2F;&#x2F;&quot;.
+
+At the bottom, click the &quot;Browse&quot; button, select the AD LDAP cert previously exported to your local computer, click &quot;Open&quot;, and &quot;Save&quot; to complete modifications.
+
+Note: With LDAPS, the server must be a specific domain controller and its specific certificate or the domain alias with a certificate that is valid for that URL.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000290"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000290"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000290</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000290
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must limit membership to the &quot;SystemConfiguration.BashShellAdministrators&quot; Single Sign-On (SSO) group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000290"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000290"
+            >
+              <!-- Result description -->
+              vCenter SSO integrates with PAM in the underlying Photon operating system so members of the &quot;SystemConfiguration.BashShellAdministrators&quot; SSO group can log on to the operating system without needing a separate account. However, even though unique SSO users log on, they are transparently using a group account named &quot;sso-user&quot; as far as Photon auditing is concerned. While the audit trail can still be traced back to the individual SSO user, it is a more involved process.
+
+To force accountability and nonrepudiation, the SSO group &quot;SystemConfiguration.BashShellAdministrators&quot; must be severely restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Administrator is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no groups found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No groups found in SystemConfiguration.BashShellAdministrators is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Administrator is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no groups found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No groups found in SystemConfiguration.BashShellAdministrators is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000290</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must limit membership to the &quot;SystemConfiguration.BashShellAdministrators&quot; Single Sign-On (SSO) group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter SSO integrates with PAM in the underlying Photon operating system so members of the &quot;SystemConfiguration.BashShellAdministrators&quot; SSO group can log on to the operating system without needing a separate account. However, even though unique SSO users log on, they are transparently using a group account named &quot;sso-user&quot; as far as Photon auditing is concerned. While the audit trail can still be traced back to the individual SSO user, it is a more involved process.
+
+To force accountability and nonrepudiation, the SSO group &quot;SystemConfiguration.BashShellAdministrators&quot; must be severely restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;SystemConfiguration.BashShellAdministrators&quot; group appears.
+
+Click &quot;SystemConfiguration.BashShellAdministrators&quot;.
+
+Review the members of the group and ensure that only authorized accounts are present.
+
+Note: By default the Administrator and a unique service account similar to &quot;vmware-applmgmtservice-714684a4-342f-4eff-a232-cdc21def00c2&quot; will be in the group and should not be removed.
+
+If there are any accounts present as members of SystemConfiguration.BashShellAdministrators that are not authorized, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;SystemConfiguration.BashShellAdministrators&quot; group appears.
+
+Click &quot;SystemConfiguration.BashShellAdministrators&quot;.
+
+Click the three vertical dots next to the name of each unauthorized account.
+
+Select &quot;Remove Member&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000291"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000291"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000291</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000291
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must limit membership to the &quot;TrustedAdmins&quot; Single Sign-On (SSO) group.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000291"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000291"
+            >
+              <!-- Result description -->
+              The vSphere &quot;TrustedAdmins&quot; group grants additional rights to administer the vSphere Trust Authority feature.
+
+To force accountability and nonrepudiation, the SSO group &quot;TrustedAdmins&quot; must be severely restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no users found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No users found in TrustedAdmins is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no groups found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No groups found in TrustedAdmins is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no users found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No users found in TrustedAdmins is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Stderr should be empty if no groups found is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >No groups found in TrustedAdmins is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000291</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must limit membership to the &quot;TrustedAdmins&quot; Single Sign-On (SSO) group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere &quot;TrustedAdmins&quot; group grants additional rights to administer the vSphere Trust Authority feature.
+
+To force accountability and nonrepudiation, the SSO group &quot;TrustedAdmins&quot; must be severely restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;TrustedAdmins&quot; group appears.
+
+Click &quot;TrustedAdmins&quot;.
+
+Review the members of the group and ensure that only authorized accounts are present.
+
+Note: These accounts act as root on the Photon operating system and have the ability to severely damage vCenter, inadvertently or otherwise.
+
+If there are any accounts present as members of TrustedAdmins that are not authorized, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;TrustedAdmins&quot; group appears.
+
+Click &quot;TrustedAdmins&quot;.
+
+Click the three vertical dots next to the name of each unauthorized account.
+
+Select &quot;Remove Member&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000292"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000292"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000292</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000292
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server configuration must be backed up on a regular basis.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000292"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000292"
+            >
+              <!-- Result description -->
+              vCenter server is the control plane for the vSphere infrastructure and all the workloads it hosts. As such, vCenter is usually a highly critical system in its own right. Backups of vCenter can now be made at a data and configuration level versus traditional storage&#x2F;image-based backups. This reduces recovery time by letting the system administrator (SA) spin up a new vCenter while simultaneously importing the backed-up data.
+
+For sites that implement the Native Key Provider (NKP), introduced in 7.0 Update 2, regular vCenter backups are critical. In a recovery scenario where the virtual machine files are intact but vCenter was lost, the encrypted virtual machines will not be able to boot as their private keys were stored in vCenter after it was last backed up. When using the NKP, vCenter becomes critical to the virtual machine workloads and ceases to be just the control plane.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File based backups should be enabled. is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >File based backups should be enabled. is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000292</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server configuration must be backed up on a regular basis.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter server is the control plane for the vSphere infrastructure and all the workloads it hosts. As such, vCenter is usually a highly critical system in its own right. Backups of vCenter can now be made at a data and configuration level versus traditional storage&#x2F;image-based backups. This reduces recovery time by letting the system administrator (SA) spin up a new vCenter while simultaneously importing the backed-up data.
+
+For sites that implement the Native Key Provider (NKP), introduced in 7.0 Update 2, regular vCenter backups are critical. In a recovery scenario where the virtual machine files are intact but vCenter was lost, the encrypted virtual machines will not be able to boot as their private keys were stored in vCenter after it was last backed up. When using the NKP, vCenter becomes critical to the virtual machine workloads and ceases to be just the control plane.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Option 1:
+
+If vCenter is backed up in a traditional manner, at the storage array level, interview the SA to determine configuration and schedule.
+
+Option 2:
+
+For vCenter native backup functionality, open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Backup&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify the &quot;Status&quot; is &quot;Enabled&quot;.
+
+Click &quot;Status&quot; to expand the backup details.
+
+If vCenter server backups are not configured and there is no other vCenter backup system, this is a finding.
+
+If the backup configuration is not set to a proper, reachable location or if the schedule is anything less frequent than &quot;Daily&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Option 1:
+
+Implement and document a VMware-supported storage&#x2F;image-based backup schedule.
+
+Option 2:
+
+To configure vCenter native backup functionality, open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Backup&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Configure&quot; (or &quot;Edit&quot; for an existing configuration).
+
+Enter site-specific information for the backup job.
+
+Ensure &quot;Schedule&quot; is set to &quot;Daily&quot;. Limiting the number of retained backups is recommended but not required.
+
+Click &quot;Create&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000293"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000293"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000293</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000293
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must have task and event retention set to at least 30 days.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000293"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000293"
+            >
+              <!-- Result description -->
+              vCenter tasks and events contain valuable historical actions, useful in troubleshooting availability issues and for incident forensics. While vCenter events are sent to central log servers in real time, it is important that administrators have quick access to this information when needed.
+
+vCenter retains 30 days of tasks and events by default, and this is sufficient for most purposes. The vCenter disk partitions are also sized with this in mind. Decreasing is not recommended for operational reasons, while increasing is not recommended unless guided by VMware support due to the partition sizing concerns.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name event.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name task.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name event.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name task.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000293</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must have task and event retention set to at least 30 days.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter tasks and events contain valuable historical actions, useful in troubleshooting availability issues and for incident forensics. While vCenter events are sent to central log servers in real time, it is important that administrators have quick access to this information when needed.
+
+vCenter retains 30 days of tasks and events by default, and this is sufficient for most purposes. The vCenter disk partitions are also sized with this in mind. Decreasing is not recommended for operational reasons, while increasing is not recommended unless guided by VMware support due to the partition sizing concerns.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click to expand the &quot;Database&quot; section.
+
+Note the &quot;Task retention&quot; and &quot;Event retention&quot; values.
+
+If either value is configured to less than &quot;30&quot; days, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;Database&quot; tab, set the value for both &quot;Task retention&quot; and &quot;Event retention&quot; to &quot;30&quot; days (default) or greater, as required by your site.
+
+Click &quot;Save&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000294"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000294"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000294</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000294
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server Native Key Provider must be backed up with a strong password.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000294"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000294"
+            >
+              <!-- Result description -->
+              The vCenter Native Key Provider feature was introduced in 7.0 U2 and acts as a key provider for encryption based capabilities such as encrypted virtual machines without requiring an external KMS solution.  When enabling this feature a backup must be taken which is a PKCS#12 formatted file and if no password is provided during the backup process this presents the opportunity for this to be used maliciously and compromise the environment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000294</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server Native Key Provider must be backed up with a strong password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Native Key Provider feature was introduced in 7.0 U2 and acts as a key provider for encryption based capabilities such as encrypted virtual machines without requiring an external KMS solution.  When enabling this feature a backup must be taken which is a PKCS#12 formatted file and if no password is provided during the backup process this presents the opportunity for this to be used maliciously and compromise the environment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the vCenter Native Key Provider feature is not in use, this is not applicable.
+
+Interview the system administrator and determine if a password was provided for any backups taken of the Native Key Provider.
+
+If backups exist for the Native Key Provider that are not password protected, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Key Providers.
+
+Select the Native Key Provider, click &quot;Back-up&quot;, and check the box &quot;Protect Native Key Provider data with password&quot;.
+
+Provide a strong password and click &quot;Back up key provider&quot;.
+
+Delete any previous backups that were not protected with a password.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000295"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000295"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000295</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000295
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must require authentication for published content libraries.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000295"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000295"
+            >
+              <!-- Result description -->
+              In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale. When publishing a content library it can be protected by requiring authentication for subscribers.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Authentication should be enabled on Content Library: STIG Content Library [&quot;publish_info&quot;, &quot;authentication_method&quot;] is expected to cmp &#x3D;&#x3D; &quot;BASIC&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: BASIC
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Authentication should be enabled on Content Library: STIG Content Library [&quot;publish_info&quot;, &quot;authentication_method&quot;] is expected to cmp &#x3D;&#x3D; &quot;BASIC&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: BASIC
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000295</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must require authentication for published content libraries.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale. When publishing a content library it can be protected by requiring authentication for subscribers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Content Libraries.
+
+Review the &quot;Password Protected&quot; column.
+
+If a content library is published and is not password protected, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Content Libraries.
+
+Select the target content library.
+
+Select &quot;Actions&quot; then &quot;Edit Settings&quot;.
+
+Click the checkbox to &quot;Enable user authentication for access to this content library&quot;.
+
+Enter and confirm a password for the content library. Click &quot;Ok&quot;.
+
+Note: Any subscribed content libraries will need to be updated to enable authentication and provide the password.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000296"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000296"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000296</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000296
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter server must enable the OVF security policy for content libraries.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000296"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000296"
+            >
+              <!-- Result description -->
+              In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale.
+
+You can protect the OVF items by applying default OVF security policy to a content library. The OVF security policy enforces strict validation on OVF items when you deploy or update the item, import items, or synchronize OVF and OVA templates. To make sure that the OVF and OVA templates are signed by a trusted certificate, you can add the OVF signing certificate from a trusted CA.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >OVF security policy should be enabled on Content Library: STIG Content Library [&quot;security_policy_id&quot;] is expected not to equal nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected not #&lt;NilClass:8&gt; &#x3D;&gt; nil
+         got #&lt;NilClass:8&gt; &#x3D;&gt; nil
+
+Compared using equal?, which compares object identity.
+
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >OVF security policy should be enabled on Content Library: STIG Content Library [&quot;security_policy_id&quot;] is expected not to equal nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected not #&lt;NilClass:8&gt; &#x3D;&gt; nil
+         got #&lt;NilClass:8&gt; &#x3D;&gt; nil
+
+Compared using equal?, which compares object identity.
+
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000296</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter server must enable the OVF security policy for content libraries.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale.
+
+You can protect the OVF items by applying default OVF security policy to a content library. The OVF security policy enforces strict validation on OVF items when you deploy or update the item, import items, or synchronize OVF and OVA templates. To make sure that the OVF and OVA templates are signed by a trusted certificate, you can add the OVF signing certificate from a trusted CA.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Content Libraries.
+
+Review the &quot;Security Policy&quot; column.
+
+If a content library does not have the &quot;OVF default policy&quot; enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Content Libraries.
+
+Select the target content library.
+
+Select &quot;Actions&quot; then &quot;Edit Settings&quot;.
+
+Click the checkbox to &quot;Apply Security Policy&quot;. Click &quot;OK&quot;.
+
+Note: If you disable the security policy of a content library, you cannot reuse the existing OVF items.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000298"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000298"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000298</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000298
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must separate authentication and authorization for administrators.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000298"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000298"
+            >
+              <!-- Result description -->
+              Many organizations do both authentication and authorization using a centralized directory service such as Active Directory. Attackers who compromise an identity source can often add themselves to authorization groups, and simply log into systems they should not otherwise have access to. Additionally, reliance on central identity systems means that the administrators of those systems are potentially infrastructure administrators, too, as they can add themselves to infrastructure access groups at will.
+
+The use of local SSO groups for authorization helps prevent this avenue of attack by allowing the centralized identity source to still authenticate users but moving authorization into vCenter itself.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This check is a manual or policy based check and must be reviewed manually.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000298</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must separate authentication and authorization for administrators.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Many organizations do both authentication and authorization using a centralized directory service such as Active Directory. Attackers who compromise an identity source can often add themselves to authorization groups, and simply log into systems they should not otherwise have access to. Additionally, reliance on central identity systems means that the administrators of those systems are potentially infrastructure administrators, too, as they can add themselves to infrastructure access groups at will.
+
+The use of local SSO groups for authorization helps prevent this avenue of attack by allowing the centralized identity source to still authenticate users but moving authorization into vCenter itself.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+View the Administrator role and any other role providing administrative access to vCenter to verify the users and&#x2F;or groups assigned to it by clicking on &quot;Usage&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Sort Role | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+If any user or group is directly assigned a role with administrative access to vCenter that is from an identity provider, this is a finding.
+
+Note: Users and&#x2F;or groups assigned to roles should be from the &quot;VSPHERE.LOCAL&quot; identity source.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To add groups from an identity provider to the local SSO Administrators group, as an example, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Groups.
+
+Select the Administrators group and click &quot;Edit&quot;.
+
+In the &quot;Add Members&quot; section, select the identity source and type the name of the target user&#x2F;group in the search bar.
+
+Select the target user&#x2F;group to add them and click &quot;Save&quot;.
+
+Note: A new SSO group or groups can be created as needed and used to provide authorization to vCenter.
+
+To remove identity provider users&#x2F;groups from a role, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Global Permissions.
+
+Select the offending user&#x2F;group and click &quot;Delete&quot;.
+
+Note: If permissions are assigned on a specific object, then the role must be updated where it is assigned (for example, at the cluster level).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000299"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000299"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000299</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000299
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable CDP&#x2F;LLDP on distributed switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000299"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000299"
+            >
+              <!-- Result description -->
+              The vSphere Distributed Virtual Switch can participate in Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP), as a listener, advertiser, or both. The information is sensitive, including IP addresses, system names, software versions, and more. It can be used by an adversary to gain a better understanding of your environment, and to impersonate devices. It is also transmitted unencrypted on the network, and as such the recommendation is to disable it.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000299</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable CDP&#x2F;LLDP on distributed switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere Distributed Virtual Switch can participate in Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP), as a listener, advertiser, or both. The information is sensitive, including IP addresses, system names, software versions, and more. It can be used by an adversary to gain a better understanding of your environment, and to impersonate devices. It is also transmitted unencrypted on the network, and as such the recommendation is to disable it.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Discovery Protocol&quot; configuration.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | Select Name,LinkDiscoveryProtocolOperation
+
+If any distributed switch does not have &quot;Discovery Protocols&quot; disabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select the advanced tab and update the &quot;Type&quot; under &quot;Discovery Protocol&quot; to disabled and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch -Name &quot;DSwitch&quot; | Set-VDSwitch -LinkDiscoveryProtocolOperation &quot;Disabled&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000300"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000300"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000300</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000300
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must remove unauthorized port mirroring sessions on distributed switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000300"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000300"
+            >
+              <!-- Result description -->
+              The vSphere Distributed Virtual Switch can enable port mirroring sessions allowing traffic to be mirrored from one source to a destination. If port mirroring is configured unknowingly this could allow an attacker to observe network traffic of virtual machines.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000300</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must remove unauthorized port mirroring sessions on distributed switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vSphere Distributed Virtual Switch can enable port mirroring sessions allowing traffic to be mirrored from one source to a destination. If port mirroring is configured unknowingly this could allow an attacker to observe network traffic of virtual machines.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Port Mirroring.
+
+Review any configured &quot;Port Mirroring&quot; sessions.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;Port Mirroring Sessions&quot;;E&#x3D;{$_.ExtensionData.Config.VspanSession.Name}}
+
+If there are any unauthorized port mirroring sessions configured, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Port Mirroring.
+
+Select the unauthorized &quot;Port Mirroring&quot; session and click &quot;Remove&quot;. Click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000301"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000301"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000301</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000301
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must not override port group settings at the port level on distributed switches.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000301"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000301"
+            >
+              <!-- Result description -->
+              Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If there are cases where particular VMs require unique configurations then a different port group with the required configuration should be created instead of overriding port group settings.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000301</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must not override port group settings at the port level on distributed switches.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If there are cases where particular VMs require unique configurations then a different port group with the required configuration should be created instead of overriding port group settings.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Override port policies&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDPortgroup).ExtensionData.Config.Policy
+
+If there are any distributed port groups that allow overridden port policies, this is a finding.
+
+Note: This does not apply to the &quot;Block Ports&quot; or &quot;Configure reset at disconnect&quot; policies.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select advanced and update all port policies besides &quot;Block Ports&quot; to &quot;disabled&quot; and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.Policy &#x3D; New-Object VMware.Vim.VMwareDVSPortgroupPolicy
+$spec.Policy.VlanOverrideAllowed &#x3D; $False
+$spec.Policy.UplinkTeamingOverrideAllowed &#x3D; $False
+$spec.Policy.SecurityPolicyOverrideAllowed &#x3D; $False
+$spec.Policy.IpfixOverrideAllowed &#x3D; $False
+$spec.Policy.BlockOverrideAllowed &#x3D; $True
+$spec.Policy.ShapingOverrideAllowed &#x3D; $False
+$spec.Policy.VendorConfigOverrideAllowed &#x3D; $False
+$spec.Policy.TrafficFilterOverrideAllowed &#x3D; $False
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000302"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000302"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000302</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000302
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must reset port configuration when virtual machines are disconnected.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000302"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000302"
+            >
+              <!-- Result description -->
+              Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If any unknown or unauthorized per-port overrides exist and are not discarded when a virtual machine is disconnected from that port then a future virtual machine connected to that port may receive a less secure port.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000302</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must reset port configuration when virtual machines are disconnected.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If any unknown or unauthorized per-port overrides exist and are not discarded when a virtual machine is disconnected from that port then a future virtual machine connected to that port may receive a less secure port.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Configure reset at disconnect&quot; setting.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDPortgroup).ExtensionData.Config.Policy.PortConfigResetAtDisconnect
+
+If there are any distributed port groups with &quot;Configure reset at disconnect&quot; configured to &quot;disabled&quot; or &quot;False&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select advanced and update &quot;Configure reset at disconnect&quot; to be enabled and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.Policy &#x3D; New-Object VMware.Vim.VMwareDVSPortgroupPolicy
+$spec.Policy.PortConfigResetAtDisconnect &#x3D; $True
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000303"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000303"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000303</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000303
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must disable Secure Shell (SSH) access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000303"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000303"
+            >
+              <!-- Result description -->
+              vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.
+
+vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >True is expected not to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000303</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must disable Secure Shell (SSH) access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.
+
+vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Access&quot; on the left navigation pane.
+
+If &quot;SSH Login&quot; is not &quot;Deactivated&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Access&quot; on the left navigation pane.
+
+Click &quot;Edit&quot; then disable &quot;Activate SSH Login&quot; and click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VCSA-80-000304"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VCSA-80-000304"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VCSA-80-000304</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VCSA-80-000304
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The vCenter Server must enable data in transit encryption for vSAN.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VCSA-80-000304"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VCSA-80-000304"
+            >
+              <!-- Result description -->
+              Transit encryption must be enabled to prevent unauthorized disclosure information and to protect the confidentiality of organizational information.
+
+vSAN data-in-transit encryption has the following characteristics:
+-vSAN uses AES-256 bit encryption on data in transit.
+-Forward secrecy is enforced for vSAN data-in-transit encryption.
+-Traffic between data hosts and witness hosts is encrypted.
+-File service data traffic between the VDFS proxy and VDFS server is encrypted.
+-vSAN file services inter-host connections are encrypted.
+-vSAN uses symmetric keys that are generated dynamically and shared between hosts. Hosts dynamically generate an encryption key when they establish a connection, and they use the key to encrypt all traffic between the hosts. You do not need a key management server to perform data-in-transit encryption.
+
+Each host is authenticated when it joins the cluster, ensuring connections only to trusted hosts are allowed. When a host is removed from the cluster, it is authentication certificate is removed.
+
+vSAN data-in-transit encryption is a cluster-wide setting. When enabled, all data and metadata traffic is encrypted as it transits across hosts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system; $vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name cluster0).ExtensionData.MoRef).DataInTransitEncryptionConfig.Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >PowerCLI Command: $vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system; $vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name cluster0).ExtensionData.MoRef).DataInTransitEncryptionConfig.Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VCSA-80-000304</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The vCenter Server must enable data in transit encryption for vSAN.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Transit encryption must be enabled to prevent unauthorized disclosure information and to protect the confidentiality of organizational information.
+
+vSAN data-in-transit encryption has the following characteristics:
+-vSAN uses AES-256 bit encryption on data in transit.
+-Forward secrecy is enforced for vSAN data-in-transit encryption.
+-Traffic between data hosts and witness hosts is encrypted.
+-File service data traffic between the VDFS proxy and VDFS server is encrypted.
+-vSAN file services inter-host connections are encrypted.
+-vSAN uses symmetric keys that are generated dynamically and shared between hosts. Hosts dynamically generate an encryption key when they establish a connection, and they use the key to encrypt all traffic between the hosts. You do not need a key management server to perform data-in-transit encryption.
+
+Each host is authenticated when it joins the cluster, ensuring connections only to trusted hosts are allowed. When a host is removed from the cluster, it is authentication certificate is removed.
+
+vSAN data-in-transit encryption is a cluster-wide setting. When enabled, all data and metadata traffic is encrypted as it transits across hosts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Review the &quot;Data-in-transit encryption&quot; status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system
+$vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name &lt;cluster name&gt;).ExtensionData.MoRef).DataInTransitEncryptionConfig
+
+Repeat these steps for each vSAN enabled cluster in the environment.
+
+If &quot;Data-In-Transit encryption&quot; is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the target cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Click &quot;Edit&quot;.
+
+Enable &quot;Data-In-Transit encryption&quot; and choose a rekey interval suitable for the environment then click &quot;Apply&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000189"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000189"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000189</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000189
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have copy operations disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000189"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000189"
+            >
+              <!-- Result description -->
+              Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000189</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have copy operations disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.copy.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.copy.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.copy.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.copy.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.copy.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.copy.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000191"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000191"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000191</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000191
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have drag and drop operations disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000191"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000191"
+            >
+              <!-- Result description -->
+              Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000191</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have drag and drop operations disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.dnd.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.dnd.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.dnd.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.dnd.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.dnd.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.dnd.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000192"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000192"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000192</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000192
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have paste operations disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000192"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000192"
+            >
+              <!-- Result description -->
+              Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000192</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have paste operations disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.paste.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.paste.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.paste.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.paste.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.paste.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.paste.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000193"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000193"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000193</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000193
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have virtual disk shrinking disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000193"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000193"
+            >
+              <!-- Result description -->
+              Shrinking a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to shrink is available to nonadministrative users operating within the VM&#39;s guest operating system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000193</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have virtual disk shrinking disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Shrinking a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to shrink is available to nonadministrative users operating within the VM&#39;s guest operating system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.diskShrink.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskShrink.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.diskShrink.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.diskShrink.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.diskShrink.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskShrink.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000194"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000194"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000194</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000194
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have virtual disk wiping disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000194"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000194"
+            >
+              <!-- Result description -->
+              Shrinking and wiping (erasing) a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to wipe (erase) is available to nonadministrative users operating within the VM&#39;s guest operating system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000194</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have virtual disk wiping disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Shrinking and wiping (erasing) a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to wipe (erase) is available to nonadministrative users operating within the VM&#39;s guest operating system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.diskWiper.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskWiper.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.diskWiper.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.diskWiper.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.diskWiper.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskWiper.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000195"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000195"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000195</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000195
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must limit console sharing.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000195"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000195"
+            >
+              <!-- Result description -->
+              By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an administrator in the VM logs in using a VMware remote console during their session, a nonadministrator in the VM might connect to the console and observe the administrator&#39;s actions.
+
+Also, this could result in an administrator losing console access to a VM. For example, if a jump box is being used for an open console session and the administrator loses connection to that box, the console session remains open. Allowing two console sessions permits debugging via a shared session. For the highest security, allow only one remote console session at a time.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000195</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must limit console sharing.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an administrator in the VM logs in using a VMware remote console during their session, a nonadministrator in the VM might connect to the console and observe the administrator&#39;s actions.
+
+Also, this could result in an administrator losing console access to a VM. For example, if a jump box is being used for an open console session and the administrator loses connection to that box, the console session remains open. Allowing two console sessions permits debugging via a shared session. For the highest security, allow only one remote console session at a time.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;RemoteDisplay.maxConnections&quot; value is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name RemoteDisplay.maxConnections
+
+If the virtual machine advanced setting &quot;RemoteDisplay.maxConnections&quot; does not exist or is not set to &quot;1&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;RemoteDisplay.maxConnections&quot; value and set it to &quot;1&quot;.
+
+If the setting does not exist, add the Name and Value setting at the bottom of screen.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name RemoteDisplay.maxConnections | Set-AdvancedSetting -Value 1
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000196"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000196"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000196</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000196
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000196"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000196"
+            >
+              <!-- Result description -->
+              The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data stream to the host. This 1MB capacity should be sufficient for most cases, but this value can change if necessary.
+
+The value can be increased if large amounts of custom information are being stored in the configuration file. The default limit is 1MB.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000196</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data stream to the host. This 1MB capacity should be sufficient for most cases, but this value can change if necessary.
+
+The value can be increased if large amounts of custom information are being stored in the configuration file. The default limit is 1MB.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;tools.setinfo.sizeLimit&quot; value is set to &quot;1048576&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.setinfo.sizeLimit
+
+If the virtual machine advanced setting &quot;tools.setinfo.sizeLimit&quot; is not set to &quot;1048576&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.setinfo.sizeLimit&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;tools.setinfo.sizeLimit&quot; value and set it to &quot;1048576&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.setinfo.sizeLimit | Set-AdvancedSetting -Value 1048576
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000197"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000197"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000197</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000197
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must prevent unauthorized removal, connection and modification of devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000197"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000197"
+            >
+              <!-- Result description -->
+              In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use the virtual machine settings editor or configuration editor to remove unneeded or unused hardware devices. To use the device again, prevent a user or running process in the virtual machine from connecting, disconnecting, or modifying a device from within the guest operating system.
+
+By default, a rogue user with nonadministrator privileges in a virtual machine can:
+
+1. Connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive.
+2. Disconnect a network adaptor to isolate the virtual machine from its network, which is a denial of service.
+3. Modify settings on a device.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000197</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must prevent unauthorized removal, connection and modification of devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use the virtual machine settings editor or configuration editor to remove unneeded or unused hardware devices. To use the device again, prevent a user or running process in the virtual machine from connecting, disconnecting, or modifying a device from within the guest operating system.
+
+By default, a rogue user with nonadministrator privileges in a virtual machine can:
+
+1. Connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive.
+2. Disconnect a network adaptor to isolate the virtual machine from its network, which is a denial of service.
+3. Modify settings on a device.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.device.connectable.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.device.connectable.disable
+
+If the virtual machine advanced setting &quot;isolation.device.connectable.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.device.connectable.disable&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.device.connectable.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.device.connectable.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000198"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000198"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000198</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000198
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must not be able to obtain host information from the hypervisor.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000198"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000198"
+            >
+              <!-- Result description -->
+              If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this information for performance monitoring. An adversary could use this information to inform further attacks on the host.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000198</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must not be able to obtain host information from the hypervisor.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this information for performance monitoring. An adversary could use this information to inform further attacks on the host.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;tools.guestlib.enableHostInfo&quot; value is set to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guestlib.enableHostInfo
+
+If the virtual machine advanced setting &quot;tools.guestlib.enableHostInfo&quot; is not set to &quot;false&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.guestlib.enableHostInfo&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;tools.guestlib.enableHostInfo&quot; value and set it to &quot;false&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guestlib.enableHostInfo | Set-AdvancedSetting -Value false
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000199"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000199"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000199</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000199
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must have shared salt values disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000199"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000199"
+            >
+              <!-- Result description -->
+              When salting is enabled (Mem.ShareForceSalting&#x3D;1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced option for each virtual machine. The salt values can be specified manually in the virtual machine&#39;s advanced settings with the new option &quot;sched.mem.pshare.salt&quot;.
+
+If this option is not present in the virtual machine&#39;s advanced settings, the value of the &quot;vc.uuid&quot; option is taken as the default value. Because the &quot;vc.uuid&quot; is unique to each virtual machine, by default Transparent Page Sharing (TPS) happens only among the pages belonging to a particular virtual machine (Intra-VM).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000199</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must have shared salt values disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When salting is enabled (Mem.ShareForceSalting&#x3D;1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced option for each virtual machine. The salt values can be specified manually in the virtual machine&#39;s advanced settings with the new option &quot;sched.mem.pshare.salt&quot;.
+
+If this option is not present in the virtual machine&#39;s advanced settings, the value of the &quot;vc.uuid&quot; option is taken as the default value. Because the &quot;vc.uuid&quot; is unique to each virtual machine, by default Transparent Page Sharing (TPS) happens only among the pages belonging to a particular virtual machine (Intra-VM).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;sched.mem.pshare.salt&quot; setting does not exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name sched.mem.pshare.salt
+
+If the virtual machine advanced setting &quot;sched.mem.pshare.salt&quot; exists, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Delete the &quot;sched.mem.pshare.salt&quot; setting.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name sched.mem.pshare.salt | Remove-AdvancedSetting
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000200"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000200"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000200</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000200
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must disable access through the &quot;dvfilter&quot; network Application Programming Interface (API).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000200"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000200"
+            >
+              <!-- Result description -->
+              An attacker might compromise a VM by using the &quot;dvFilter&quot; API. Configure only VMs that need this access to use the API.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000200</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must disable access through the &quot;dvfilter&quot; network Application Programming Interface (API).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An attacker might compromise a VM by using the &quot;dvFilter&quot; API. Configure only VMs that need this access to use the API.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the settings with the format &quot;ethernet*.filter*.name&quot; do not exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name &quot;ethernet*.filter*.name*&quot;
+
+If the virtual machine advanced setting &quot;ethernet*.filter*.name&quot; exists and dvfilters are not in use, this is a finding.
+
+If the virtual machine advanced setting &quot;ethernet*.filter*.name&quot; exists and the value is not valid, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Look for settings with the format &quot;ethernet*.filter*.name&quot;.
+
+Ensure only required VMs use this setting.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name ethernetX.filterY.name | Remove-AdvancedSetting
+
+Note: Change the X and Y values to match the specific setting in the organization&#39;s environment.
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000201"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000201"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000201</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000201
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must be configured to lock when the last console connection is closed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000201"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000201"
+            >
+              <!-- Result description -->
+              When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000201</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must be configured to lock when the last console connection is closed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; VMware Remote Console Options.
+
+Verify the option &quot;Lock the guest operating system when the last remote user disconnects&quot; is checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guest.desktop.autolock
+
+If the virtual machine advanced setting &quot;tools.guest.desktop.autolock&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.guest.desktop.autolock&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; VMware Remote Console Options.
+
+Check the box next to &quot;Lock the guest operating system when the last remote user disconnects&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guest.desktop.autolock | Set-AdvancedSetting -Value true</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000202"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000202"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000202</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000202
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must disable 3D features when not required.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000202"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000202"
+            >
+              <!-- Result description -->
+              For performance reasons, it is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality (e.g., most server workloads or desktops not using 3D applications).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000202</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must disable 3D features when not required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For performance reasons, it is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality (e.g., most server workloads or desktops not using 3D applications).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings.
+
+Expand the &quot;Video card&quot; and verify the &quot;Enable 3D Support&quot; checkbox is unchecked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name mks.enable3d
+
+If the virtual machine advanced setting &quot;mks.enable3d&quot; exists and is not set to &quot;false&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;mks.enable3d&quot; does not exist, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings.
+
+Expand the &quot;Video card&quot; and uncheck the &quot;Enable 3D Support&quot; checkbox.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name mks.enable3d | Set-AdvancedSetting -Value &quot;false&quot;
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000203"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000203"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000203</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000203
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must enable encryption for vMotion.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000203"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000203"
+            >
+              <!-- Result description -->
+              vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the vMotion network. As of vSphere 6.5, this transfer can be transparently encrypted using 256-bit AES-GCM with negligible performance impact.
+
+vSphere enables encrypted vMotion by default as &quot;Opportunistic&quot;, meaning that encrypted channels are used where supported, but the operation will continue in plain text where encryption is not supported.
+
+For example, when vMotioning between two hosts, encryption will always be used. However, because 6.0 and earlier releases do not support this feature, vMotion from a 7.0 host to a 6.0 host would be allowed but would not be encrypted. If the encryption is set to &quot;Required&quot;, vMotions to unsupported hosts will fail. This must be set to &quot;Opportunistic&quot; or &quot;Required&quot;.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000203</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must enable encryption for vMotion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the vMotion network. As of vSphere 6.5, this transfer can be transparently encrypted using 256-bit AES-GCM with negligible performance impact.
+
+vSphere enables encrypted vMotion by default as &quot;Opportunistic&quot;, meaning that encrypted channels are used where supported, but the operation will continue in plain text where encryption is not supported.
+
+For example, when vMotioning between two hosts, encryption will always be used. However, because 6.0 and earlier releases do not support this feature, vMotion from a 7.0 host to a 6.0 host would be allowed but would not be encrypted. If the encryption is set to &quot;Required&quot;, vMotions to unsupported hosts will fail. This must be set to &quot;Opportunistic&quot; or &quot;Required&quot;.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {($_.ExtensionData.Config.MigrateEncryption -eq &quot;disabled&quot;)}
+
+If the &quot;Encrypted vMotion&quot; setting does not have a value of &quot;Opportunistic&quot; or &quot;Required&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+For &quot;Encrypted vMotion&quot; set the value to &quot;Opportunistic&quot; or &quot;Required&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.MigrateEncryption &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpecEncryptedVMotionModes
+$spec.MigrateEncryption &#x3D; $true
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000204"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000204"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000204</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000204
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must enable encryption for Fault Tolerance.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000204"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000204"
+            >
+              <!-- Result description -->
+              Fault Tolerance log traffic can be encrypted. This could contain sensitive data from the protected machine&#39;s memory or CPU instructions.
+
+vSphere Fault Tolerance performs frequent checks between a primary VM and secondary VM so the secondary VM can quickly resume from the last successful checkpoint. The checkpoint contains the VM state that has been modified since the previous checkpoint.
+
+When Fault Tolerance is turned on, FT encryption is set to &quot;Opportunistic&quot; by default, which means it enables encryption only if both the primary and secondary host are capable of encryption.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000204</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must enable encryption for Fault Tolerance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Fault Tolerance log traffic can be encrypted. This could contain sensitive data from the protected machine&#39;s memory or CPU instructions.
+
+vSphere Fault Tolerance performs frequent checks between a primary VM and secondary VM so the secondary VM can quickly resume from the last successful checkpoint. The checkpoint contains the VM state that has been modified since the previous checkpoint.
+
+When Fault Tolerance is turned on, FT encryption is set to &quot;Opportunistic&quot; by default, which means it enables encryption only if both the primary and secondary host are capable of encryption.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the Virtual Machine does not have Fault Tolerance enabled, this is not applicable.
+
+For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {($_.ExtensionData.Config.FtEncryptionMode -ne &quot;ftEncryptionOpportunistic&quot;) -and ($_.ExtensionData.Config.FtEncryptionMode -ne &quot;ftEncryptionRequired&quot;)}
+
+If the &quot;Encrypted FT&quot; setting does not have a value of &quot;Opportunistic&quot; or &quot;Required&quot;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+For &quot;Encrypted FT&quot; set the value to &quot;Opportunistic&quot; or &quot;Required&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.FTEncryption &#x3D; New-Object VMware.Vim.VMware.Vim.VirtualMachineConfigSpecEncryptedFtModes
+$spec.FT &#x3D; ftEncryptionOpportunistic or ftEncryptionRequired
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000205"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000205"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000205</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000205
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must configure log size.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000205"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000205"
+            >
+              <!-- Result description -->
+              The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, the size of these logs is unlimited, and they are only rotated on vMotion or power events. This can cause storage issues at scale for VMs that do not vMotion or power cycle often.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000205</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must configure log size.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, the size of these logs is unlimited, and they are only rotated on vMotion or power events. This can cause storage issues at scale for VMs that do not vMotion or power cycle often.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;log.rotateSize&quot; value is set to &quot;2048000&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.rotateSize
+
+If the virtual machine advanced setting &quot;log.rotateSize&quot; is not set to &quot;2048000&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;log.rotateSize&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;log.rotateSize&quot; value and set it to &quot;2048000&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.rotateSize | Set-AdvancedSetting -Value 2048000
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000206"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000206"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000206</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000206
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must configure log retention.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000206"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000206"
+            >
+              <!-- Result description -->
+              The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, 10 of these logs are retained. This is normally sufficient for most environments, but this configuration must be verified and maintained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;10&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000206</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must configure log retention.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, 10 of these logs are retained. This is normally sufficient for most environments, but this configuration must be verified and maintained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;log.keepOld&quot; value is set to &quot;10&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.keepOld
+
+If the virtual machine advanced setting &quot;log.keepOld&quot; is not set to &quot;10&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;log.keepOld&quot; does NOT exist, this is NOT a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;log.keepOld&quot; value and set it to &quot;10&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.keepOld | Set-AdvancedSetting -Value 10
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000207"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000207"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000207</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000207
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must enable logging.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000207"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000207"
+            >
+              <!-- Result description -->
+              The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including, but not limited to, power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations and machine clones. Due to the value these logs provide for the continued availability of each VM and potential security incidents, these logs must be enabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000207</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must enable logging.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including, but not limited to, power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations and machine clones. Due to the value these logs provide for the continued availability of each VM and potential security incidents, these logs must be enabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Advanced.
+
+Ensure that the checkbox next to &quot;Enable logging&quot; is checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Flags.EnableLogging -ne &quot;True&quot;}
+
+If logging is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Advanced.
+
+Click the checkbox next to &quot;Enable logging&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.Flags &#x3D; New-Object VMware.Vim.VirtualMachineFlagInfo
+$spec.Flags.enableLogging &#x3D; $true
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000208"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000208"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000208</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000208
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must not use independent, non-persistent disks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000208"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000208"
+            >
+              <!-- Result description -->
+              The security issue with nonpersistent disk mode is that successful attackers, with a simple shutdown or reboot, might undo or remove any traces they were ever on the machine. To safeguard against this risk, production virtual machines should be set to use persistent disk mode; additionally, ensure activity within the VM is logged remotely on a separate server, such as a syslog server or equivalent Windows-based event collector. Without a persistent record of activity on a VM, administrators might never know whether they have been attacked or hacked.
+
+There can be valid use cases for these types of disks, such as with an application presentation solution where read-only disks are desired, and such cases should be identified and documented.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000208</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must not use independent, non-persistent disks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The security issue with nonpersistent disk mode is that successful attackers, with a simple shutdown or reboot, might undo or remove any traces they were ever on the machine. To safeguard against this risk, production virtual machines should be set to use persistent disk mode; additionally, ensure activity within the VM is logged remotely on a separate server, such as a syslog server or equivalent Windows-based event collector. Without a persistent record of activity on a VM, administrators might never know whether they have been attacked or hacked.
+
+There can be valid use cases for these types of disks, such as with an application presentation solution where read-only disks are desired, and such cases should be identified and documented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the attached hard disks and verify they are not configured as independent nonpersistent disks.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Select Parent, Name, Filename, DiskType, Persistence | FT -AutoSize
+
+If the virtual machine has attached disks that are in independent nonpersistent mode and are not documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the target hard disk and change the mode to persistent or uncheck Independent.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run one of the following commands:
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Set-HardDisk -Persistence IndependentPersistent
+
+or
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Set-HardDisk -Persistence Persistent</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000209"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000209"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000209</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000209
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded floppy devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000209"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000209"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Floppy drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000209</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded floppy devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState
+
+If a virtual machine has a floppy drive connected, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+The VM must be powered off to remove a floppy drive.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-FloppyDrive | Remove-FloppyDrive</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000210"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000210"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000210</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000210
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded CD&#x2F;DVD devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000210"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000210"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for CD&#x2F;DVD drives is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000210</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded CD&#x2F;DVD devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no CD&#x2F;DVD drives are connected.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Get-CDDrive | Where {$_.extensiondata.connectable.connected -eq $true} | Select Parent,Name
+
+If a virtual machine has a CD&#x2F;DVD drive connected other than temporarily, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the CD&#x2F;DVD drive and uncheck &quot;Connected&quot; and &quot;Connect at power on&quot; and remove any attached ISOs.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-CDDrive | Set-CDDrive -NoMedia</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000211"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000211"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000211</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000211
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded parallel devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000211"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000211"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for parallel devices is expected not to match &quot;Parallel&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000211</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded parallel devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;parallel&quot;}
+
+If a virtual machine has a parallel device present, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+The VM must be powered off to remove a parallel device.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$pport &#x3D; (Get-VM -Name &lt;vmname&gt;).ExtensionData.Config.Hardware.Device | Where {$_.DeviceInfo.Label -match &quot;Parallel&quot;}
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.DeviceChange +&#x3D; New-Object VMware.Vim.VirtualDeviceConfigSpec
+$spec.DeviceChange[-1].device &#x3D; $pport
+$spec.DeviceChange[-1].operation &#x3D; &quot;remove&quot;
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000212"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000212"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000212</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000212
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded serial devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000212"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000212"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for serial devices is expected not to match &quot;Serial&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000212</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded serial devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no serial devices exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;serial&quot;}
+
+If a virtual machine has a serial device present, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The VM must be powered off to remove a serial device.
+
+For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the serial device, click the circled &quot;X&quot; to remove it, and click &quot;OK&quot;.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000213"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000213"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000213</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000213
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must remove unneeded USB devices.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000213"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000213"
+            >
+              <!-- Result description -->
+              Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for USB devices is expected not to match &quot;USB&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000213</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must remove unneeded USB devices.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no USB devices exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;usb&quot;}
+Get-VM | Get-UsbDevice
+
+If a virtual machine has any USB devices or USB controllers present, this is a finding.
+
+If USB smart card readers are used to pass smart cards through the VM console to a VM, the use of a USB controller and USB devices for that purpose is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the USB controller, click the circled &quot;X&quot; to remove it, and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-USBDevice | Remove-USBDevice
+
+Note:  This will not remove the USB controller, just any connected devices.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-VMCH-80-000214"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-VMCH-80-000214"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>VMCH-80-000214</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  VMCH-80-000214
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Virtual machines (VMs) must disable DirectPath I&#x2F;O devices when not required.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-VMCH-80-000214"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-VMCH-80-000214"
+            >
+              <!-- Result description -->
+              VMDirectPath I&#x2F;O (PCI passthrough) enables direct assignment of hardware PCI functions to VMs. This gives the VM access to the PCI functions with minimal intervention from the ESXi host. This is a powerful feature for legitimate applications such as virtualized storage appliances, backup appliances, dedicated graphics, etc., but it also allows a potential attacker highly privileged access to underlying hardware and the PCI bus.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stig vm2 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: stigvm1 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for PCI passthrough devices is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMCH-80-000214</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Virtual machines (VMs) must disable DirectPath I&#x2F;O devices when not required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >VMDirectPath I&#x2F;O (PCI passthrough) enables direct assignment of hardware PCI functions to VMs. This gives the VM access to the PCI functions with minimal intervention from the ESXi host. This is a powerful feature for legitimate applications such as virtualized storage appliances, backup appliances, dedicated graphics, etc., but it also allows a potential attacker highly privileged access to underlying hardware and the PCI bus.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each virtual machine do the following:
+
+From the vSphere Client, view the Summary tab.
+
+Review the PCI devices section and verify none exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-PassthroughDevice
+
+If the virtual machine has passthrough devices present, and the specific device returned is not approved, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From the vSphere Client, select the Virtual Machine, right click and go to Edit Settings &gt;&gt; Virtual Hardware tab.
+
+Find the unexpected PCI device returned from the check.
+
+Hover the mouse over the device and click the circled &quot;X&quot; to remove the device. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-PassthroughDevice | Remove-PassthroughDevice</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Result set print report -->
+      <div class="hidden print:block">
+        <!-- File name -->
+        <div class="rounded-t-xl border border-black px-3 py-2">
+          vSphere8_report.json
+        </div>
+        <!-- Generate a result report for every result -->
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000005</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000044
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Once the configured number of attempts is reached, the account is locked by the ESXi host.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountLockFailures | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 3
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000005</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Once the configured number of attempts is reached, the account is locked by the ESXi host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.AccountLockFailures&quot; value and verify it is set to &quot;3&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountLockFailures
+
+If the &quot;Security.AccountLockFailures&quot; setting is set to a value other than &quot;3&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.AccountLockFailures&quot; value and configure it to &quot;3&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountLockFailures | Set-AdvancedSetting -Value 3</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000006</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000050
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000006</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a, AC-8 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Annotations.WelcomeMessage&quot; value and verify it contains the standard mandatory DOD notice and consent banner.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage
+
+If the &quot;Annotations.WelcomeMessage&quot; setting does not contain the standard mandatory DOD notice and consent banner, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Annotations.WelcomeMessage&quot; value and set it to the following. Click &quot;OK&quot;.
+
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{hostname} , {ip}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{esxproduct} {esxversion}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{memory} RAM{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:white}	{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By      {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  using this IS (which includes any device attached to this IS), you consent to the following conditions:                 {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited     {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law      {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          enforcement (LE), and counterintelligence (CI) investigations.                                                  {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       At any time, the USG may inspect and seize data stored on this IS.                                              {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       Communications using, or data stored on, this IS are not private, are subject to routine monitoring,            {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          interception, and search, and may be disclosed or used for any USG-authorized purpose.                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not     {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          for your personal benefit or privacy.                                                                           {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching    {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          or monitoring of the content of privileged communications, or work product, related to personal representation  {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work       {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          product are private and confidential. See User Agreement for details.                                           {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:dark-grey}{color:white}  &lt;F2&gt; Accept Conditions and Customize System &#x2F; View Logs{&#x2F;align}{align:right}&lt;F12&gt; Accept Conditions and Shut Down&#x2F;Restart  {bgcolor:black} {&#x2F;color}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Set-AdvancedSetting -Value &quot;&lt;Banner text above&gt;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000008</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable lockdown mode.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000054
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCenter are always enforced and users cannot bypass them by logging on to a host directly.
+
+By forcing all interaction to occur through vCenter Server, the risk of someone inadvertently attaining elevated privileges or performing tasks that are not properly audited is greatly reduced.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VMHost -Name 10.186.25.26).Extensiondata.Config.LockdownMode stdout.strip is expected to be in &quot;lockdownNormal&quot; and &quot;lockdownStrict&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;lockdownDisabled&#x60; to be in the list: &#x60;[&quot;lockdownNormal&quot;, &quot;lockdownStrict&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000008</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable lockdown mode.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCenter are always enforced and users cannot bypass them by logging on to a host directly.
+
+By forcing all interaction to occur through vCenter Server, the risk of someone inadvertently attaining elevated privileges or performing tasks that are not properly audited is greatly reduced.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Scroll down to &quot;Lockdown Mode&quot; and verify it is set to &quot;Enabled&quot; (Normal or Strict).
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Select Name,@{N&#x3D;&quot;Lockdown&quot;;E&#x3D;{$_.Extensiondata.Config.LockdownMode}}
+
+If &quot;Lockdown Mode&quot; is disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile &gt;&gt; Lockdown Mode.
+
+Click edit and select either the &quot;Normal&quot; or &quot;Strict&quot; radio buttons.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$level &#x3D; &quot;lockdownNormal&quot; OR &quot;lockdownStrict&quot;
+$vmhost &#x3D; Get-VMHost -Name &lt;hostname&gt; | Get-View
+$lockdown &#x3D; Get-View $vmhost.ConfigManager.HostAccessManager
+$lockdown.ChangeLockdownMode($level)
+
+Note: In strict lockdown mode, the Direct Console User Interface (DCUI) service is stopped. If the connection to vCenter Server is lost and the vSphere Client is no longer available, the ESXi host becomes inaccessible.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000010</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host client must be configured with an idle session timeout.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed by browsing to &quot;https:&#x2F;&#x2F;&lt;ESX FQDN&gt;&#x2F;ui&quot;. ESXi is not usually administered via this interface for long periods and all users will be highly privileged. Implementing a mandatory session idle limit will ensure that orphaned, forgotten or ignored sessions will be closed promptly.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000010</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host client must be configured with an idle session timeout.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed by browsing to &quot;https:&#x2F;&#x2F;&lt;ESX FQDN&gt;&#x2F;ui&quot;. ESXi is not usually administered via this interface for long periods and all users will be highly privileged. Implementing a mandatory session idle limit will ensure that orphaned, forgotten or ignored sessions will be closed promptly.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.HostClientSessionTimeout&quot; value and verify it is set to &quot;900&quot; or less.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout
+
+If the &quot;UserVars.HostClientSessionTimeout&quot; setting is not set to &quot;900&quot; or less, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Fom the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.HostClientSessionTimeout&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Set-AdvancedSetting -Value &quot;900&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000014</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000068
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session.
+
+OpenSSH on the ESXi host ships with a FIPS 140-2 validated cryptographic module and it is enabled by default. For backward compatibility reasons, this can be disabled so this setting must be audited and corrected if necessary.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.security.fips140.ssh.get.invoke() | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000014</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session.
+
+OpenSSH on the ESXi host ships with a FIPS 140-2 validated cryptographic module and it is enabled by default. For backward compatibility reasons, this can be disabled so this setting must be audited and corrected if necessary.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system security fips140 ssh get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.security.fips140.ssh.get.invoke()
+
+Expected result:
+
+Enabled: true
+
+If the FIPS mode is not enabled for SSH, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system security fips140 ssh set -e true
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.security.fips140.ssh.set.CreateArgs()
+$arguments.enable &#x3D; $true
+$esxcli.system.security.fips140.ssh.set.Invoke($arguments)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000015</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi must produce audit records containing information to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000171
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000015</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi must produce audit records containing information to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 b, AU-3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.log.level&quot; value and verify it is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.log.level
+
+If the &quot;Config.HostAgent.log.level&quot; setting is not set to &quot;info&quot;, this is a finding.
+
+Note: Verbose logging level is acceptable for troubleshooting purposes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.log.level&quot; value and configure it to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.log.level | Set-AdvancedSetting -Value &quot;info&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000035</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enforce password complexity by configuring a password quality policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000193
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000194
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000205
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001619
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated.
+
+The use of complex passwords reduces the ability of attackers to successfully obtain valid passwords using guessing or exhaustive search techniques. Complexity requirements increase the password search space by requiring users to construct passwords from a larger character set than they may otherwise use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordQualityControl | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15
+     got: retry&#x3D;3 min&#x3D;disabled,disabled,disabled,7,7
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000035</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enforce password complexity by configuring a password quality policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated.
+
+The use of complex passwords reduces the ability of attackers to successfully obtain valid passwords using guessing or exhaustive search techniques. Complexity requirements increase the password search space by requiring users to construct passwords from a larger character set than they may otherwise use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), IA-5 (1) (b)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordQualityControl&quot; value and verify it is set to &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordQualityControl
+
+If the &quot;Security.PasswordQualityControl&quot; setting is set to a value other than &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordQualityControl&quot; value and configure it to &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordQualityControl | Set-AdvancedSetting -Value &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000043</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must prohibit password reuse for a minimum of five generations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000200
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a user or root used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user&#39;s password until it was guessed correctly.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordHistory | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;5&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000043</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must prohibit password reuse for a minimum of five generations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a user or root used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user&#39;s password until it was guessed correctly.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (e)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordHistory&quot; value and verify it is set to &quot;5&quot; or greater.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordHistory
+
+If the &quot;Security.PasswordHistory&quot; setting is set to a value other than 5 or greater, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordHistory&quot; value and configure it to &quot;5&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordHistory | Set-AdvancedSetting -Value 5</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000047</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The MOB provides a way to explore the object model used by the VMkernel to manage the host and enables configurations to be changed. This interface is meant to be used primarily for debugging the vSphere Software Development Kit (SDK), but because there are no access controls it could also be used as a method to obtain information about a host being targeted for unauthorized access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000047</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The MOB provides a way to explore the object model used by the VMkernel to manage the host and enables configurations to be changed. This interface is meant to be used primarily for debugging the vSphere Software Development Kit (SDK), but because there are no access controls it could also be used as a method to obtain information about a host being targeted for unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.plugins.solo.enableMob&quot; value and verify it is set to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob
+
+If the &quot;Config.HostAgent.plugins.solo.enableMob&quot; setting is not set to &quot;false&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.plugins.solo.enableMob&quot; value and configure it to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Set-AdvancedSetting -Value false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000049</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (8)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000764
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000770
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001682
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001941
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001942
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Using Active Directory for user authentication simplifies the ESXi host configuration, ensures password complexity and reuse policies are enforced, and reduces the risk of security breaches and unauthorized access.
+
+Note: If the Active Directory group &quot;ESX Admins&quot; (default) exists, all users and groups assigned as members to this group will have full administrative access to all ESXi hosts in the domain.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostAuthentication | Select-Object -ExpandProperty DomainMembershipStatus stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000049</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Using Active Directory for user authentication simplifies the ESXi host configuration, ensures password complexity and reuse policies are enforced, and reduces the risk of security breaches and unauthorized access.
+
+Note: If the Active Directory group &quot;ESX Admins&quot; (default) exists, all users and groups assigned as members to this group will have full administrative access to all ESXi hosts in the domain.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), IA-2, IA-2 (5), IA-2 (8), IA-2 (9)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For systems that do not use Active Directory and have no local user accounts other than root and&#x2F;or service accounts, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Authentication Services.
+
+Verify the &quot;Directory Services Type&quot; is set to &quot;Active Directory&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostAuthentication
+
+For systems that do not use Active Directory and do have local user accounts, other than root and&#x2F;or service accounts, this is a finding.
+
+If the &quot;Directory Services Type&quot; is not set to &quot;Active Directory&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Authentication Services.
+
+Click &quot;Join Domain...&quot; and enter the AD domain to join.
+
+Select the &quot;Using credentials&quot; radio button and enter the credentials of an account with permissions to join machines to AD (use UPN naming &quot;user@domain&quot;). Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostAuthentication | Set-VMHostAuthentication -JoinDomain -Domain &quot;domain name&quot; -User &quot;username&quot; -Password &quot;password&quot;
+
+If any local user accounts are present besides root and service accounts, delete them by going to Host UI &gt;&gt; Manage &gt;&gt; Security &amp; Users &gt;&gt; Users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000052</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000767
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH can emulate the behavior of the obsolete &quot;rsh&quot; command in allowing users to enable insecure access to their accounts via &quot;.rhosts&quot; files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000052</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH can emulate the behavior of the obsolete &quot;rsh&quot; command in allowing users to enable insecure access to their accounts via &quot;.rhosts&quot; files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (3)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep ignorerhosts
+
+Expected result:
+
+ignorerhosts yes
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+IgnoreRhosts yes</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000068</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-12
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002361
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely and increase the likelihood of inappropriate host access via session hijacking. The &quot;ESXiShellInteractiveTimeOut&quot; allows the automatic termination of idle shell sessions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000068</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely and increase the likelihood of inappropriate host access via session hijacking. The &quot;ESXiShellInteractiveTimeOut&quot; allows the automatic termination of idle shell sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-12, SC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; value and verify it is set to less than &quot;900&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut
+
+If the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; setting is set to a value greater than &quot;900&quot; or &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Set-AdvancedSetting -Value 900</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000085</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must implement Secure Boot enforcement.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-6 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001494
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001495
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002696
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002699
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and it requires that all ESXi kernel modules, drivers and VIBs be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. This control flips ESXi from merely supporting Secure Boot to requiring it. Without this setting enabled, and configuration encryption, an ESXi host could be subject to offline attacks. An attacker could simply transfer the ESXi install drive to a non-Secure Boot host and boot it up without ESXi complaining.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty RequireSecureBoot stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: false
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000085</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must implement Secure Boot enforcement.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and it requires that all ESXi kernel modules, drivers and VIBs be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. This control flips ESXi from merely supporting Secure Boot to requiring it. Without this setting enabled, and configuration encryption, an ESXi host could be subject to offline attacks. An attacker could simply transfer the ESXi install drive to a non-Secure Boot host and boot it up without ESXi complaining.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, SI-6 a, SI-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.encryption.get.invoke() | Select RequireSecureBoot
+
+Expected result:
+
+Require Secure Boot: true
+
+If &quot;Require Secure Boot&quot; is not enable, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">This setting cannot be configured until Secure Boot is properly enabled in the servers firmware.
+
+From an ESXi shell, run the following commands:
+
+# esxcli system settings encryption set --require-secure-boot&#x3D;true
+# &#x2F;sbin&#x2F;auto-backup.sh
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.encryption.set.CreateArgs()
+$arguments.requiresecureboot &#x3D; $true
+$esxcli.system.settings.encryption.set.Invoke($arguments)
+
+Evacuate the host and gracefully reboot for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000094</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable Secure Boot.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001496
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Secure Boot is part of the Unified Extensible Firmware Interface (UEFI) firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and requires that all ESXi kernel modules, drivers, and vSphere Installation Bundles (VIBs) be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. There is no ESXi control to &quot;turn on&quot; Secure Boot. Requiring Secure Boot (failing to boot without it present) is accomplished in another control.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000094</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable Secure Boot.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Secure Boot is part of the Unified Extensible Firmware Interface (UEFI) firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and requires that all ESXi kernel modules, drivers, and vSphere Installation Bundles (VIBs) be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. There is no ESXi control to &quot;turn on&quot; Secure Boot. Requiring Secure Boot (failing to boot without it present) is accomplished in another control.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (3)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;secureboot&#x2F;bin&#x2F;secureBoot.py -s
+
+If Secure Boot is not &quot;Enabled&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;secureboot&#x2F;bin&#x2F;secureBoot.py -c
+
+If the output indicates that Secure Boot cannot be enabled, correct the discrepancies and try again.
+
+Once all discrepancies are resolved then the server ESXi is installed on can be updated to enable Secure Boot in the firmware.
+
+To enable Secure Boot in the servers firmware follow the instructions for the specific manufacturer.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000111</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002238
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Users must wait for the timeout period to elapse before subsequent logon attempts are allowed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000111</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Users must wait for the timeout period to elapse before subsequent logon attempts are allowed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.AccountUnlockTime&quot; value and verify it is set to less than &quot;900&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountUnlockTime
+
+If the &quot;Security.AccountUnlockTime&quot; setting is less than 900 or 0, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.AccountUnlockTime&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountUnlockTime | Set-AdvancedSetting -Value 900</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000113</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must allocate audit record storage capacity to store at least one weeks worth of audit records.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In order to ensure ESXi has sufficient storage capacity in which to write the audit logs, audit record storage capacity should be configured.
+
+If a central audit record storage facility is available, the local storage capacity should be sufficient to hold audit records that would accumulate during anticipated interruptions in delivery of records to the facility.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;100&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 100
+     got: 4
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000113</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must allocate audit record storage capacity to store at least one weeks worth of audit records.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In order to ensure ESXi has sufficient storage capacity in which to write the audit logs, audit record storage capacity should be configured.
+
+If a central audit record storage facility is available, the local storage capacity should be sufficient to hold audit records that would accumulate during anticipated interruptions in delivery of records to the facility.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.storageCapacity&quot; value and verify it is set to &quot;100&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity
+
+If the &quot;Syslog.global.auditRecord.storageCapacity&quot; setting is not set to 100, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.storageCapacity&quot; value and configure it to &quot;100&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Set-AdvancedSetting -Value 100</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000114</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must off-load logs via syslog.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001683
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001684
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001686
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a central host, it can more easily monitor all hosts with a single tool. It can also do aggregate analysis and searching to look for such things as coordinated attacks on multiple hosts.
+
+Logging to a secure, centralized log server also helps prevent log tampering and provides a long-term audit record.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logHost | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;tcp:&#x2F;&#x2F;log.test.local:514&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: tcp:&#x2F;&#x2F;log.test.local:514
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000114</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must off-load logs via syslog.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a central host, it can more easily monitor all hosts with a single tool. It can also do aggregate analysis and searching to look for such things as coordinated attacks on multiple hosts.
+
+Logging to a secure, centralized log server also helps prevent log tampering and provides a long-term audit record.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), AU-4 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logHost&quot; value and verify it is set to a site-specific syslog server.
+
+Syslog servers are specified in the following formats:
+
+udp:&#x2F;&#x2F;&lt;IP or FQDN&gt;:514
+tcp:&#x2F;&#x2F;&lt;IP or FQDN&gt;:514
+ssl:&#x2F;&#x2F;&lt;IP or FQDN&gt;:1514
+
+Multiple servers can also be specified when separated by commas.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logHost
+
+If the &quot;Syslog.global.logHost&quot; setting is not set to a valid, site-specific syslog server, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logHost&quot; value and configure it to a site-specific syslog server.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logHost | Set-AdvancedSetting -Value &quot;enter site specific servers&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000124</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must synchronize internal information system clocks to an authoritative time source.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-8 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-8 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001891
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002046
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To ensure the accuracy of the system clock, it must be synchronized with an authoritative time source within DOD. Many system functions, including time-based logon and activity restrictions, automated reports, system logs, and audit records, depend on an accurate system clock. If there is no confidence in the correctness of the system clock, time-based functions may not operate as intended and records may be of diminished value.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;on&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: on
+     got: off
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No NTP servers found on VMhost: 10.186.25.26 is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;&quot;.empty?&#x60; to be falsey, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000124</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must synchronize internal information system clocks to an authoritative time source.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To ensure the accuracy of the system clock, it must be synchronized with an authoritative time source within DOD. Many system functions, including time-based logon and activity restrictions, automated reports, system logs, and audit records, depend on an accurate system clock. If there is no confidence in the correctness of the system clock, time-based functions may not operate as intended and records may be of diminished value.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-8 (1) (a), AU-8 (1) (b)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Verify NTP or PTP are configured, and one or more authoritative time sources are listed.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Verify the NTP or PTP service is running and configured to start and stop with the host.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostNTPServer
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot; -or $_.Label -eq &quot;PTP Daemon&quot;}
+
+If the NTP service is not configured with authoritative DOD time sources or the service is not configured to start and stop with the host (&quot;Policy&quot; of &quot;on&quot; in PowerCLI) or is stopped, this is a finding.
+If PTP is used instead of NTP, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To configure NTP, perform the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Click &quot;Add Service&quot; and select &quot;Network Time Protocol&quot;.
+
+Enter or update the NTP servers listed with a comma separate list of authoritative time servers. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Select the &quot;NTP Daemon&quot; service and click &quot;Edit Startup Policy&quot;.
+
+Select &quot;Start and stop with host&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$NTPServers &#x3D; &quot;ntpserver1&quot;,&quot;ntpserver2&quot;
+Get-VMHost | Add-VMHostNTPServer $NTPServers
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot;} | Set-VMHostService -Policy On
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot;} | Start-VMHostService
+
+To configure PTP, perform the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Click &quot;Add Service&quot; and select &quot;Precision Time Protocol&quot;.
+
+Select the network adapter that can receive the PTP traffic.
+
+If NTP servers are available, select &quot;Enable fallback&quot; and enter or update the NTP servers listed with a comma separate list of authoritative time servers. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Select the &quot;PTP Daemon&quot; service and click &quot;Edit Startup Policy&quot;.
+
+Select &quot;Start and stop with host&quot;. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000133</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 (5) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001749
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001774
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels:
+
+1. VMwareCertified - VIBs created, tested, and signed by VMware.
+2. VMwareAccepted - VIBs created by a VMware partner but tested and signed by VMware.
+3. PartnerSupported - VIBs created, tested, and signed by a certified VMware partner.
+4. CommunitySupported - VIBs that have not been tested by VMware or a VMware partner.
+
+Community Supported VIBs are not supported and do not have a digital signature. To protect the security and integrity of ESXi hosts, do not allow unsigned (CommunitySupported) VIBs to be installed on hosts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.software.acceptance.get.Invoke() stdout.strip is expected to be in &quot;PartnerSupported&quot;, &quot;VMwareCertified&quot;, and &quot;VMwareAccepted&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000133</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels:
+
+1. VMwareCertified - VIBs created, tested, and signed by VMware.
+2. VMwareAccepted - VIBs created by a VMware partner but tested and signed by VMware.
+3. PartnerSupported - VIBs created, tested, and signed by a certified VMware partner.
+4. CommunitySupported - VIBs that have not been tested by VMware or a VMware partner.
+
+Community Supported VIBs are not supported and do not have a digital signature. To protect the security and integrity of ESXi hosts, do not allow unsigned (CommunitySupported) VIBs to be installed on hosts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (3), CM-7 (5) (b)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Host Image Profile Acceptance Level&quot; view the acceptance level.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.software.acceptance.get.Invoke()
+
+If the acceptance level is &quot;CommunitySupported&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Host Image Profile Acceptance Level&quot;, click &quot;Edit&quot;.
+
+Using the drop-down selection, set the acceptance level as &quot;VMwareCertified&quot;, &quot;VMwareAccepted&quot;, or &quot;PartnerSupported&quot;. The default is &quot;PartnerSupported&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.software.acceptance.set.CreateArgs()
+$arguments.level &#x3D; &quot;PartnerSupported&quot;
+$esxcli.software.acceptance.set.Invoke($arguments)
+
+Note: &quot;VMwareCertified&quot; or &quot;VMwareAccepted&quot; may be substituted for &quot;PartnerSupported&quot;, depending on local requirements. These are case sensitive.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000145</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001967
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle attack, in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000145</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle attack, in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If iSCSI is not used, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Storage &gt;&gt; Storage Adapters.
+
+Select the iSCSI adapter &gt;&gt; Properties &gt;&gt; Authentication &gt;&gt; Method.
+
+View the CHAP configuration and verify CHAP is required for target and host authentication.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostHba | Where {$_.Type -eq &quot;iscsi&quot;} | Select AuthenticationProperties -ExpandProperty AuthenticationProperties
+
+If iSCSI is used and CHAP is not set to &quot;required&quot; for both the target and host, this is a finding.
+
+If iSCSI is used and unique CHAP secrets are not used for each host, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Storage &gt;&gt; Storage Adapters.
+
+Select the iSCSI adapter &gt;&gt; Properties &gt;&gt; Authentication.
+
+Click &quot;Edit...&quot;. Set &quot;Authentication Method&quot; to &quot;Use bidirectional CHAP&quot; and enter a unique secret for each traffic flow direction.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostHba | Where {$_.Type -eq &quot;iscsi&quot;} | Set-VMHostHba -ChapType Required -ChapName &quot;chapname&quot; -ChapPassword &quot;password&quot; -MutualChapEnabled $true -MutualChapName &quot;mutualchapname&quot; -MutualChapPassword &quot;mutualpassword&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000160</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          While encrypted vMotion is available, vMotion traffic should still be sequestered from other traffic to further protect it from attack. This network must only be accessible to other ESXi hosts, preventing outside access to the network.
+
+The vMotion VMkernel port group must be in a dedicated VLAN that can be on a standard or distributed virtual switch as long as the vMotion VLAN is not shared by any other function and is not routed to anything but ESXi hosts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000160</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">While encrypted vMotion is available, vMotion traffic should still be sequestered from other traffic to further protect it from attack. This network must only be accessible to other ESXi hosts, preventing outside access to the network.
+
+The vMotion VMkernel port group must be in a dedicated VLAN that can be on a standard or distributed virtual switch as long as the vMotion VLAN is not shared by any other function and is not routed to anything but ESXi hosts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review the VLAN associated with any vMotion VMkernel(s) and verify they are dedicated for that purpose and are logically separated from other functions.
+
+If long distance or cross vCenter vMotion is used the vMotion network can be routable but must be accessible to only the intended ESXi hosts.
+
+If the vMotion port group is not on an isolated VLAN and&#x2F;or is routable to systems other than ESXi hosts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configuration of the vMotion VMkernel will be unique to each environment.
+
+As an example, to modify the IP address and VLAN information to the correct network on a distributed switch do the following:
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot; and select VLAN.
+
+Change the &quot;VLAN Type&quot; to &quot;VLAN&quot; and change the &quot;VLAN ID&quot; to a network allocated and dedicated to vMotion traffic exclusively. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000161</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must maintain the confidentiality and integrity of information during transmission by exclusively enabling Transport Layer Security (TLS) 1.2.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002420
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002422
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          TLS 1.0 and 1.1 are deprecated protocols with well-published shortcomings and vulnerabilities. TLS 1.2 should be enabled on all interfaces and SSLv3, TL 1.1, and 1.0 disabled, where supported.
+
+Mandating TLS 1.2 may break third-party integrations and add-ons to vSphere. Test these integrations carefully after implementing TLS 1.2 and roll back where appropriate.
+
+On interfaces where required functionality is broken with TLS 1.2, this finding is not applicable until such time as the third-party software supports TLS 1.2.
+
+Modify TLS settings in the following order:
+1. vCenter.
+2. ESXi.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;sslv3,tlsv1,tlsv1.1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000161</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must maintain the confidentiality and integrity of information during transmission by exclusively enabling Transport Layer Security (TLS) 1.2.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">TLS 1.0 and 1.1 are deprecated protocols with well-published shortcomings and vulnerabilities. TLS 1.2 should be enabled on all interfaces and SSLv3, TL 1.1, and 1.0 disabled, where supported.
+
+Mandating TLS 1.2 may break third-party integrations and add-ons to vSphere. Test these integrations carefully after implementing TLS 1.2 and roll back where appropriate.
+
+On interfaces where required functionality is broken with TLS 1.2, this finding is not applicable until such time as the third-party software supports TLS 1.2.
+
+Modify TLS settings in the following order:
+1. vCenter.
+2. ESXi.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8 (2)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiVPsDisabledProtocols&quot; value and verify it is set to &quot;sslv3,tlsv1,tlsv1.1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols
+
+If the &quot;UserVars.ESXiVPsDisabledProtocols&quot; setting is set to a value other than &quot;sslv3,tlsv1,tlsv1.1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiVPsDisabledProtocols&quot; value and configure it to &quot;sslv3,tlsv1,tlsv1.1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Set-AdvancedSetting -Value &quot;sslv3,tlsv1,tlsv1.1&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000187</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000187</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-13</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep ciphers
+
+Expected result:
+
+ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+
+Note: The ciphers line must be after the FipsMode setting.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000189</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host DCUI.Access list must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Lockdown mode disables direct host access, requiring that administrators manage hosts from vCenter Server. However, if a host becomes isolated from vCenter, the administrator is locked out and can no longer manage the host.
+
+The &quot;DCUI.Access&quot; advanced setting allows specified users to exit lockdown mode in such a scenario. If the Direct Console User Interface (DCUI) is running in strict lockdown mode, this setting is ineffective.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name DCUI.Access | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000189</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host DCUI.Access list must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Lockdown mode disables direct host access, requiring that administrators manage hosts from vCenter Server. However, if a host becomes isolated from vCenter, the administrator is locked out and can no longer manage the host.
+
+The &quot;DCUI.Access&quot; advanced setting allows specified users to exit lockdown mode in such a scenario. If the Direct Console User Interface (DCUI) is running in strict lockdown mode, this setting is ineffective.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;DCUI.Access&quot; value and verify only the root user is listed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name DCUI.Access and verify it is set to root.
+
+If the &quot;DCUI.Access&quot; is not restricted to &quot;root&quot;, this is a finding.
+
+Note: This list is only for local user accounts and should only contain the root user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;DCUI.Access&quot; value and configure it to &quot;root&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name DCUI.Access | Set-AdvancedSetting -Value &quot;root&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000191</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000191</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.Etc.issue&quot; value and verify it contains the standard mandatory DOD notice and consent banner.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.Etc.issue
+
+If the &quot;Config.Etc.issue&quot; setting does not contain the standard mandatory DOD notice and consent banner, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.Etc.issue&quot; value and set it to the following:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By using this IS (which includes any device attached to this IS), you consent to the following conditions: -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations. -At any time, the USG may inspect and seize data stored on this IS. -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose. -This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy. -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.Etc.issue | Set-AdvancedSetting -Value &quot;&lt;Banner text above&gt;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000192</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000192</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep banner
+
+Expected result:
+
+banner &#x2F;etc&#x2F;issue
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, navigate to and open:
+
+&#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+Ensure that the &quot;Banner&quot; line is uncommented and set to the following:
+
+Banner &#x2F;etc&#x2F;issue
+
+Restart SSH from the UI or run the following command:
+
+# &#x2F;etc&#x2F;init.d&#x2F;SSH restart</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000193</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002314
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002322
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi Shell is an interactive command line interface (CLI) available at the ESXi server console. The ESXi shell provides temporary access to commands essential for server maintenance. Intended primarily for use in break-fix scenarios, the ESXi shell is well suited for checking and modifying configuration details, which are not always generally accessible, using the vSphere Client.
+
+The ESXi shell is accessible remotely using SSH by users with the Administrator role. Under normal operating conditions, SSH access to the host must be disabled as is the default. As with the ESXi shell, SSH is also intended only for temporary use during break-fix scenarios. SSH must therefore be disabled under normal operating conditions and must only be enabled for diagnostics or troubleshooting. Remote access to the host must therefore be limited to the vSphere Client or Host Client at all other times.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000193</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi Shell is an interactive command line interface (CLI) available at the ESXi server console. The ESXi shell provides temporary access to commands essential for server maintenance. Intended primarily for use in break-fix scenarios, the ESXi shell is well suited for checking and modifying configuration details, which are not always generally accessible, using the vSphere Client.
+
+The ESXi shell is accessible remotely using SSH by users with the Administrator role. Under normal operating conditions, SSH access to the host must be disabled as is the default. As with the ESXi shell, SSH is also intended only for temporary use during break-fix scenarios. SSH must therefore be disabled under normal operating conditions and must only be enabled for diagnostics or troubleshooting. Remote access to the host must therefore be limited to the vSphere Client or Host Client at all other times.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (1), AC-17 (9), CM-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under Services, locate the &quot;SSH&quot; service and verify it is &quot;Stopped&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;}
+
+If the SSH service is &quot;Running&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, select the &quot;SSH&quot; service and click the &quot;Stop&quot; button.
+
+Click the &quot;Edit Startup policy...&quot; button.
+
+Select the &quot;Start and stop manually&quot; radio button.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;} | Stop-VMHostService</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000194</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must be configured to disable nonessential capabilities by disabling the ESXi shell.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or remotely via SSH. Activities performed from the ESXi Shell bypass vCenter role-based access control (RBAC) and audit controls.
+
+The ESXi shell must only be turned on when needed to troubleshoot&#x2F;resolve problems that cannot be fixed through the vSphere client.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000194</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must be configured to disable nonessential capabilities by disabling the ESXi shell.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or remotely via SSH. Activities performed from the ESXi Shell bypass vCenter role-based access control (RBAC) and audit controls.
+
+The ESXi shell must only be turned on when needed to troubleshoot&#x2F;resolve problems that cannot be fixed through the vSphere client.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under Services, locate the &quot;ESXi Shell&quot; service and verify it is &quot;Stopped&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;}
+
+If the ESXi Shell service is &quot;Running&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, select the &quot;ESXi Shell&quot; service and click the &quot;Stop&quot; button.
+
+Click the &quot;Edit Startup policy...&quot; button.
+
+Select the &quot;Start and stop manually&quot; radio button.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;} | Stop-VMHostService</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000195</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must automatically stop shell services after ten minutes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When the ESXi Shell or Secure Shell (SSH) services are enabled on a host, they will run indefinitely. To avoid having these services left running, set the &quot;ESXiShellTimeOut&quot;. The &quot;ESXiShellTimeOut&quot; defines a window of time after which the ESXi Shell and SSH services will be stopped automatically.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000195</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must automatically stop shell services after ten minutes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When the ESXi Shell or Secure Shell (SSH) services are enabled on a host, they will run indefinitely. To avoid having these services left running, set the &quot;ESXiShellTimeOut&quot;. The &quot;ESXiShellTimeOut&quot; defines a window of time after which the ESXi Shell and SSH services will be stopped automatically.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiShellTimeOut&quot; value and verify it is set to less than &quot;600&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut
+
+If the &quot;UserVars.ESXiShellTimeOut&quot; setting is set to a value greater than &quot;600&quot; or &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiShellTimeOut&quot; value and configure it to &quot;600&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Set-AdvancedSetting -Value 600</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000196</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must set a timeout to automatically end idle DCUI sessions after ten minutes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When the Direct Console User Interface (DCUI) is enabled and logged in, it should be automatically logged out if left logged on to avoid access by unauthorized persons. The &quot;DcuiTimeOut&quot; setting defines a window of time after which the DCUI will be logged out.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000196</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must set a timeout to automatically end idle DCUI sessions after ten minutes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When the Direct Console User Interface (DCUI) is enabled and logged in, it should be automatically logged out if left logged on to avoid access by unauthorized persons. The &quot;DcuiTimeOut&quot; setting defines a window of time after which the DCUI will be logged out.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.DcuiTimeOut&quot; value and verify it is set to less than &quot;600&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut
+
+If the &quot;UserVars.DcuiTimeOut&quot; setting is set to a value greater than &quot;600&quot; or &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.DcuiTimeOut&quot; value and configure it to &quot;600&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Set-AdvancedSetting -Value 600</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000198</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere management network provides access to the vSphere management interface on each component. Services running on the management interface provide an opportunity for an attacker to gain privileged access to the systems. Any remote attack most likely would begin with gaining entry to this network.
+
+The Management VMkernel port group can be on a standard or distributed virtual switch but must be on a dedicated VLAN. The Management VLAN must not be shared by any other function and must not be accessible to anything other than management-related functions such as vCenter.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.VMotionEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VsanTrafficEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking standand port group VLAN ID is expected to cmp &#x3D;&#x3D; &quot;101&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 101
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SA Interview</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000198</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere management network provides access to the vSphere management interface on each component. Services running on the management interface provide an opportunity for an attacker to gain privileged access to the systems. Any remote attack most likely would begin with gaining entry to this network.
+
+The Management VMkernel port group can be on a standard or distributed virtual switch but must be on a dedicated VLAN. The Management VLAN must not be shared by any other function and must not be accessible to anything other than management-related functions such as vCenter.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review each VMkernel adapter that is used for management traffic and view the &quot;Enabled services&quot;.
+
+Review the VLAN associated with each VMkernel that is used for management traffic. Verify with the system administrator that they are dedicated for that purpose and are logically separated from other functions.
+
+If any services are enabled on any Management VMkernel adapter, this is a finding.
+
+If the network segment is accessible, except to networks where other management-related entities are located such as vCenter, this is a finding.
+
+If there are any other systems or devices such as VMs on the ESXi management segment, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configuration of the management VMkernel will be unique to each environment.
+
+As an example, to modify the IP address and VLAN information to the correct network on a distributed switch do the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the Management VMkernel and click &quot;Edit&quot;. On the Port properties tab, uncheck all services except for &quot;Management&quot;. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot; and select VLAN.
+
+Change the &quot;VLAN Type&quot; to &quot;VLAN&quot; and change the &quot;VLAN ID&quot; to a network allocated and dedicated to management traffic exclusively. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000199</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Virtual machines (VMs) might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and NFS. This configuration might expose IP-based storage traffic to unauthorized VM users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from any other traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and VMs will limit unauthorized users from viewing the traffic.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.ManagementTrafficEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VMotionEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000199</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and NFS. This configuration might expose IP-based storage traffic to unauthorized VM users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from any other traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and VMs will limit unauthorized users from viewing the traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If IP-based storage is not used, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review each VMkernel adapter that is used for IP-based storage traffic and view the &quot;Enabled services&quot;.
+
+Review the VLAN associated with each VMkernel that is used for IP-based storage traffic. Verify with the system administrator that they are dedicated for that purpose and are logically separated from other functions.
+
+If any services are enabled on an NFS or iSCSI IP-based storage VMkernel adapter, this is a finding.
+
+If any services are enabled on a vSAN VMkernel adapter other than vSAN, this is a finding.
+
+If any IP-based storage networks are not isolated from other traffic types, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configuration of an IP-Based VMkernel will be unique to each environment.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the VMkernel used for IP-based storage and click &quot;Edit&quot;. On the &quot;Port&quot; properties tab, uncheck all services. Click &quot;OK&quot;.
+
+Note: For VMkernels used for vSAN leave the vSAN service enabled and uncheck all others.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual switches.
+
+Find the port group that is dedicated to IP-based storage and click the &#39;...&#39; button next to the name. Click &quot;Edit Settings&quot;.
+
+On the &quot;Properties&quot; tab, change the &quot;VLAN ID&quot; to one dedicated for IP-based storage traffic. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000201</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host lockdown mode exception users list must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          While a host is in lockdown mode (strict or normal), only users on the &quot;Exception Users&quot; list are allowed access. These users do not lose their permissions when the host enters lockdown mode.
+
+The organization may want to add service accounts such as a backup agent to the Exception Users list. Verify the list of users exempted from losing permissions is legitimate and as needed per the environment. Adding unnecessary users to the exception list defeats the purpose of lockdown mode.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Exception users for host: 10.186.25.26 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000201</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host lockdown mode exception users list must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">While a host is in lockdown mode (strict or normal), only users on the &quot;Exception Users&quot; list are allowed access. These users do not lose their permissions when the host enters lockdown mode.
+
+The organization may want to add service accounts such as a backup agent to the Exception Users list. Verify the list of users exempted from losing permissions is legitimate and as needed per the environment. Adding unnecessary users to the exception list defeats the purpose of lockdown mode.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Lockdown Mode&quot;, review the Exception Users list.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following script:
+
+$vmhost &#x3D; Get-VMHost | Get-View
+$lockdown &#x3D; Get-View $vmhost.ConfigManager.HostAccessManager
+$lockdown.QueryLockdownExceptions()
+
+If the Exception Users list contains accounts that do not require special permissions, this is a finding.
+
+Note: The Exception Users list is empty by default and should remain that way except under site-specific circumstances.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Lockdown Mode&quot;, click &quot;Edit&quot; and remove unnecessary users from the Exception Users list.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000202</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH&#39;s cryptographic host-based authentication is more secure than &quot;.rhosts&quot; authentication, since hosts are cryptographically authenticated. However, it is not recommended that hosts unilaterally trust one another, even within an organization.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000202</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH&#39;s cryptographic host-based authentication is more secure than &quot;.rhosts&quot; authentication, since hosts are cryptographically authenticated. However, it is not recommended that hosts unilaterally trust one another, even within an organization.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep hostbasedauthentication
+
+Expected result:
+
+hostbasedauthentication no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+HostbasedAuthentication no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000203</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000203</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permitemptypasswords
+
+Expected result:
+
+permitemptypasswords no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitEmptyPasswords no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000204</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000204</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permituserenvironment
+
+Expected result:
+
+permituserenvironment no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitUserEnvironment no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000205</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must perform strict mode checking of home directory configuration files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If other users have access to modify user-specific SSH configuration files, they may be able to log on the system as another user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000205</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must perform strict mode checking of home directory configuration files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If other users have access to modify user-specific SSH configuration files, they may be able to log on the system as another user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep strictmodes
+
+Expected result:
+
+strictmodes yes
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+StrictModes yes</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000206</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not allow compression.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000206</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not allow compression.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep compression
+
+Expected result:
+
+compression no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+Compression no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000207</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH Transmission Control Protocol (TCP) connection forwarding provides a mechanism to establish TCP connections proxied by the SSH server. This function can provide convenience similar to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs). Gateway ports allow remote forwarded ports to bind to nonloopback addresses on the server.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000207</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH Transmission Control Protocol (TCP) connection forwarding provides a mechanism to establish TCP connections proxied by the SSH server. This function can provide convenience similar to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs). Gateway ports allow remote forwarded ports to bind to nonloopback addresses on the server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep gatewayports
+
+Expected result:
+
+gatewayports no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+GatewayPorts no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000208</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must be configured to not allow X11 forwarding.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000208</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must be configured to not allow X11 forwarding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep x11forwarding
+
+Expected result:
+
+x11forwarding no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+X11Forwarding no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000209</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not permit tunnels.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          OpenSSH has the ability to create network tunnels (layer 2 and layer 3) over an SSH connection. This function can provide similar convenience to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000209</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not permit tunnels.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">OpenSSH has the ability to create network tunnels (layer 2 and layer 3) over an SSH connection. This function can provide similar convenience to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permittunnel
+
+Expected result:
+
+permittunnel no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitTunnel no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000210</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must set a timeout count on idle sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting a timeout ensures that a user login will be terminated as soon as the &quot;ClientAliveCountMax&quot; is reached.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000210</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must set a timeout count on idle sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting a timeout ensures that a user login will be terminated as soon as the &quot;ClientAliveCountMax&quot; is reached.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep clientalivecountmax
+
+Expected result:
+
+clientalivecountmax 3
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+ClientAliveCountMax 3</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000211</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Automatically logging out idle users guards against compromises via hijacked administrative sessions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000211</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Automatically logging out idle users guards against compromises via hijacked administrative sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep clientaliveinterval
+
+Expected result:
+
+clientaliveinterval 200
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+ClientAliveInterval 200</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000212</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.snmp.get.Invoke() | Select-Object -ExpandProperty enable stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000212</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system snmp get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostSnmp | Select *
+
+If SNMP is not in use and is enabled, this is a finding.
+
+If SNMP is enabled and is not using v3 targets with authentication, this is a finding.
+
+Note: SNMP v3 targets can only be viewed and configured via the &quot;esxcli&quot; command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To disable SNMP from an ESXi shell, run the following command:
+
+# esxcli system snmp set -e no
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi Host:
+
+Get-VMHostSnmp | Set-VMHostSnmp -Enabled $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000213</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Published academic papers have demonstrated that by forcing a flush and reload of cache memory, it is possible to measure memory timings to try to determine an Advanced Encryption Standard (AES) encryption key in use on another virtual machine running on the same physical processor of the host server if Transparent Page Sharing (TPS) is enabled between the two VMs. This technique works only in a highly controlled system configured in a nonstandard way that VMware believes would not be recreated in a production environment.
+
+Although VMware believes information being disclosed in real-world conditions is unrealistic, out of an abundance of caution, upcoming ESXi Update releases will no longer enable TPS between VMs by default (TPS will still be used within individual VMs).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.ShareForceSalting | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;2&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000213</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Published academic papers have demonstrated that by forcing a flush and reload of cache memory, it is possible to measure memory timings to try to determine an Advanced Encryption Standard (AES) encryption key in use on another virtual machine running on the same physical processor of the host server if Transparent Page Sharing (TPS) is enabled between the two VMs. This technique works only in a highly controlled system configured in a nonstandard way that VMware believes would not be recreated in a production environment.
+
+Although VMware believes information being disclosed in real-world conditions is unrealistic, out of an abundance of caution, upcoming ESXi Update releases will no longer enable TPS between VMs by default (TPS will still be used within individual VMs).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Mem.ShareForceSalting&quot; value and verify it is set to &quot;2&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.ShareForceSalting
+
+If the &quot;Mem.ShareForceSalting&quot; setting is not set to 2, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Mem.ShareForceSalting&quot; value and set it to &quot;2&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.ShareForceSalting | Set-AdvancedSetting -Value 2</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000214</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure the firewall to block network traffic by default.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In addition to service-specific firewall rules, ESXi has a default firewall rule policy to allow or deny incoming and outgoing traffic. Reduce the risk of attack by ensuring this is set to deny incoming and outgoing traffic.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostFirewallDefaultPolicy stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000214</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure the firewall to block network traffic by default.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In addition to service-specific firewall rules, ESXi has a default firewall rule policy to allow or deny incoming and outgoing traffic. Reduce the risk of attack by ensuring this is set to deny incoming and outgoing traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli network firewall get
+
+If the &quot;Default Action&quot; does not equal &quot;DROP&quot;, this is a finding.
+If &quot;Enabled&quot; does not equal &quot;true&quot;, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostFirewallDefaultPolicy
+
+If the Incoming or Outgoing policies are &quot;True&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli network firewall set --default-action&#x3D;false
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostFirewallDefaultPolicy | Set-VMHostFirewallDefaultPolicy -AllowIncoming $false -AllowOutgoing $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000215</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          BPDU Guard and Portfast are commonly enabled on the physical switch to which the ESXi host is directly connected to reduce the Spanning Tree Protocol (STP) convergence delay.
+
+If a BPDU packet is sent from a virtual machine (VM) on the ESXi host to the physical switch configured as stated above, a cascading lockout of all the uplink interfaces from the ESXi host can occur. To prevent this type of lockout, BPDU Filter can be enabled on the ESXi host to drop any BPDU packets being sent to the physical switch.
+
+The caveat is that certain Secure Socket Layer (SSL) virtual private networks that use Windows bridging capability can legitimately generate BPDU packets. The administrator should verify no legitimate BPDU packets are generated by VMs on the ESXi host prior to enabling BPDU Filter. If BPDU Filter is enabled in this situation, enabling Reject Forged Transmits on the virtual switch port group adds protection against Spanning Tree loops.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000215</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">BPDU Guard and Portfast are commonly enabled on the physical switch to which the ESXi host is directly connected to reduce the Spanning Tree Protocol (STP) convergence delay.
+
+If a BPDU packet is sent from a virtual machine (VM) on the ESXi host to the physical switch configured as stated above, a cascading lockout of all the uplink interfaces from the ESXi host can occur. To prevent this type of lockout, BPDU Filter can be enabled on the ESXi host to drop any BPDU packets being sent to the physical switch.
+
+The caveat is that certain Secure Socket Layer (SSL) virtual private networks that use Windows bridging capability can legitimately generate BPDU packets. The administrator should verify no legitimate BPDU packets are generated by VMs on the ESXi host prior to enabling BPDU Filter. If BPDU Filter is enabled in this situation, enabling Reject Forged Transmits on the virtual switch port group adds protection against Spanning Tree loops.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Net.BlockGuestBPDU&quot; value and verify it is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.BlockGuestBPDU
+
+If the &quot;Net.BlockGuestBPDU&quot; setting is not set to &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Net.BlockGuestBPDU&quot; value and configure it to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Set-AdvancedSetting -Value 1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000216</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure virtual switch security policies to reject forged transmits.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the virtual machine (VM) operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This means the virtual switch does not compare the source and effective MAC addresses.
+
+To protect against MAC address impersonation, all virtual switches must have forged transmissions set to reject. Reject Forged Transmit can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000216</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure virtual switch security policies to reject forged transmits.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the virtual machine (VM) operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This means the virtual switch does not compare the source and effective MAC addresses.
+
+To protect against MAC address impersonation, all virtual switches must have forged transmissions set to reject. Reject Forged Transmit can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Note: This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;Forged transmits&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;Forged Transmits&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;Forged transmits&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;Forged transmits&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmits $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmitsInherited $true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000217</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the virtual machine (VM) operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent VMs from changing their effective MAC address, which will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing. &quot;Reject MAC Changes&quot; can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000217</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the virtual machine (VM) operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent VMs from changing their effective MAC address, which will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing. &quot;Reject MAC Changes&quot; can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;MAC Address Changes&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;MAC Address Changes&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -MacChanges $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -MacChangesInherited $true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000218</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When promiscuous mode is enabled for a virtual switch, all virtual machines (VMs) connected to the Portgroup have the potential to read all packets across that network (only the virtual machines connected to that Portgroup).
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting. Promiscuous mode can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000218</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When promiscuous mode is enabled for a virtual switch, all virtual machines (VMs) connected to the Portgroup have the potential to read all packets across that network (only the virtual machines connected to that Portgroup).
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting. Promiscuous mode can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;Promiscuous Mode&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;Promiscuous Mode&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -AllowPromiscuous $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -AllowPromiscuousInherited $true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000219</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must restrict use of the dvFilter network application programming interface (API).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the organization is not using products that use the dvfilter network API, the host should not be configured to send network information to a virtual machine (VM).
+
+If the API is enabled, an attacker might attempt to connect a virtual machine to it, potentially providing access to the network of other VMs on the host.
+
+If using a product that makes use of this API, verify the host has been configured correctly. If not using such a product, ensure the setting is blank.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000219</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must restrict use of the dvFilter network application programming interface (API).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the organization is not using products that use the dvfilter network API, the host should not be configured to send network information to a virtual machine (VM).
+
+If the API is enabled, an attacker might attempt to connect a virtual machine to it, potentially providing access to the network of other VMs on the host.
+
+If using a product that makes use of this API, verify the host has been configured correctly. If not using such a product, ensure the setting is blank.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Net.DVFilterBindIpAddress&quot; value and verify the value is blank or the correct IP address of a security appliance if in use.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress
+
+If the &quot;Net.DVFilterBindIpAddress&quot; setting is not blank and security appliances are not in use on the host, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Net.DVFilterBindIpAddress&quot; value and remove any incorrect addresses.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Set-AdvancedSetting -Value &quot;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000220</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When a port group is set to VLAN 4095, the vSwitch passes all network frames to the attached virtual machines (VMs) without modifying the VLAN tags. In vSphere, this is referred to as VGT. The VM must process the VLAN information itself via an 802.1Q driver in the operating system.
+
+VLAN 4095 must only be implemented if the attached VMs have been specifically authorized and are capable of managing VLAN tags themselves. If VLAN 4095 is enabled inappropriately, it may cause denial of service or allow a VM to interact with traffic on an unauthorized VLAN.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Select-Object -ExpandProperty VlanId stdout.strip is expected not to match &quot;4095&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000220</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When a port group is set to VLAN 4095, the vSwitch passes all network frames to the attached virtual machines (VMs) without modifying the VLAN tags. In vSphere, this is referred to as VGT. The VM must process the VLAN information itself via an 802.1Q driver in the operating system.
+
+VLAN 4095 must only be implemented if the attached VMs have been specifically authorized and are capable of managing VLAN tags themselves. If VLAN 4095 is enabled inappropriately, it may cause denial of service or allow a VM to interact with traffic on an unauthorized VLAN.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+For each standard switch, review the &quot;VLAN ID&quot; on each port group and verify it is not set to &quot;4095&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VirtualPortGroup | Select Name, VLanID
+
+If any port group is configured with VLAN 4095 and is not documented as a needed exception, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+For each port group on a standard switch that is configured to a native VLAN, click the &#39;...&#39; button next to the port group.
+
+Click &quot;Edit Settings&quot;. On the &quot;Properties&quot; tab, change the &quot;VLAN ID&quot; to an appropriate VLAN ID. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VirtualPortGroup -Name &quot;portgroup name&quot; | Set-VirtualPortGroup -VLanId &quot;New VLAN#&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000221</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must have all security patches and updates installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VMHost -Name 10.186.25.26).ExtensionData.Config.Product.build stdout.strip is expected to cmp &#x3D;&#x3D; &quot;21813344&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000221</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must have all security patches and updates installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine the current version and build:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Summary. Note the version string next to &quot;Hypervisor:&quot;.
+
+or
+
+From a Secure Shell (SSH) session connected to the ESXi host, or from the ESXi shell, run the following command:
+
+# vmware -v
+
+If the ESXi host does not have the latest patches, this is a finding.
+
+If the ESXi host is not on a supported release, this is a finding.
+
+The latest ESXi versions and their build numbers can be found here: https:&#x2F;&#x2F;kb.vmware.com&#x2F;s&#x2F;article&#x2F;2143832
+
+VMware also publishes Advisories on security patches and offers a way to subscribe to email alerts for them.
+
+Go to: https:&#x2F;&#x2F;www.vmware.com&#x2F;support&#x2F;policies&#x2F;security_response</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">ESXi can be patched in multiple ways, and this fix text does not cover all methods.
+
+Manual patching when image profiles are not used:
+
+- Download the latest &quot;offline bundle&quot; .zip update from vmware.com. Verify the hash.
+
+- Transfer the file to a datastore accessible by the ESXi host, local or remote.
+
+- Put the ESXi host into maintenance mode.
+
+- From an ESXi shell, run the following command:
+
+esxcli software vib update -d &lt;path to offline patch bundle.zip&gt;
+
+Manual patching when image profiles are used:
+
+From an ESXi shell, run the following command:
+
+# esxcli software sources profile list -d &#x2F;vmfs&#x2F;volumes&#x2F;&lt;your datastore&gt;&#x2F;&lt;bundle name.zip&gt;
+
+Note the available profiles. The organization will usually want the one ending in &quot;-standard&quot;.
+
+# esxcli software profile update -p &lt;selected profile&gt; -d &#x2F;vmfs&#x2F;volumes&#x2F;&lt;your datastore&gt;&#x2F;&lt;bundle name.zip&gt;
+
+There will be little output during the update. Once complete, reboot the host for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000222</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000222</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.SuppressShellWarning&quot; value and verify it is set to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning
+
+If the &quot;UserVars.SuppressShellWarning&quot; setting is not set to &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.SuppressShellWarning&quot; value and configure it to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Set-AdvancedSetting -Value 0</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000223</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The L1 Terminal Fault (L1TF) CPU vulnerabilities published in 2018 have patches and mitigations available in vSphere. However, there are performance impacts to these mitigations that require careful thought and planning from the system administrator before implementation. Until a mitigation is implemented, the UI warning about the lack of a mitigation must not be dismissed so the system administrator does not assume the vulnerability has been addressed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000223</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The L1 Terminal Fault (L1TF) CPU vulnerabilities published in 2018 have patches and mitigations available in vSphere. However, there are performance impacts to these mitigations that require careful thought and planning from the system administrator before implementation. Until a mitigation is implemented, the UI warning about the lack of a mitigation must not be dismissed so the system administrator does not assume the vulnerability has been addressed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.SuppressHyperthreadWarning&quot; value and verify it is set to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning
+
+If the &quot;UserVars.SuppressHyperthreadWarning&quot; setting is not set to &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.SuppressHyperthreadWarning&quot; value and configure it to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Set-AdvancedSetting -Value 0</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000224</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must verify certificates for SSL syslog endpoints.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When sending syslog data to a remote host, ESXi can be configured to use any combination of TCP, UDP and SSL transports. When using SSL, the server certificate must be validated to ensure that the host is connecting to a valid syslog server.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000224</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must verify certificates for SSL syslog endpoints.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When sending syslog data to a remote host, ESXi can be configured to use any combination of TCP, UDP and SSL transports. When using SSL, the server certificate must be validated to ensure that the host is connecting to a valid syslog server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If SSL is not used for a syslog target, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logCheckSSLCerts&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logCheckSSLCerts
+
+If the &quot;Syslog.global.logCheckSSLCerts&quot; setting is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To configure SSL syslog endpoint certificate checking it must be turned on and also the trusted certificate chain must be added to ESXi&#39;s trusted store.
+
+From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logCheckSSLCerts&quot; value and configure it to &quot;true&quot;.
+
+Copy the PEM formatted trusted CA certificate so that is accessible to the host and append the contents to &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;castore.pem by running the follow command:
+
+# &lt;path&#x2F;to&#x2F;cacert&gt; &gt;&gt; &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;castore.pem
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logCheckSSLCerts | Set-AdvancedSetting -Value &quot;true&quot;
+
+Copy the PEM formatted trusted CA certificate so that is accessible to the host.
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.security.certificatestore.add.CreateArgs()
+$arguments.filename &#x3D; &lt;path&#x2F;to&#x2F;cacert&gt;
+$esxcli.system.security.certificatestore.add.Invoke($arguments)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000225</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable volatile key destruction.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By default, pages allocated for virtual machines (VMs), userspace applications, and kernel threads are zeroed out at allocation time. ESXi will always ensure that no nonzero pages are exposed to VMs or userspace applications. While this prevents exposing cryptographic keys from VMs or userworlds to other clients, these keys can stay present in host memory for a long time if the memory is not reused.
+
+The NIAP Virtualization Protection Profile and Server Virtualization Extended Package require that memory that may contain cryptographic keys be zeroed upon process exit.
+
+To this end, a new configuration option, MemEagerZero, can be configured to enforce zeroing out userworld and guest memory pages when a userworld process or guest exits. For kernel threads, memory spaces holding keys are zeroed out as soon as the secret is no longer needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.MemEagerZero | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000225</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable volatile key destruction.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By default, pages allocated for virtual machines (VMs), userspace applications, and kernel threads are zeroed out at allocation time. ESXi will always ensure that no nonzero pages are exposed to VMs or userspace applications. While this prevents exposing cryptographic keys from VMs or userworlds to other clients, these keys can stay present in host memory for a long time if the memory is not reused.
+
+The NIAP Virtualization Protection Profile and Server Virtualization Extended Package require that memory that may contain cryptographic keys be zeroed upon process exit.
+
+To this end, a new configuration option, MemEagerZero, can be configured to enforce zeroing out userworld and guest memory pages when a userworld process or guest exits. For kernel threads, memory spaces holding keys are zeroed out as soon as the secret is no longer needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Mem.MemEagerZero&quot; value and verify it is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.MemEagerZero
+
+If the &quot;Mem.MemEagerZero&quot; setting is not set to &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Mem.MemEagerZero&quot; value and configure it to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.MemEagerZero | Set-AdvancedSetting -Value 1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000226</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure a session timeout for the vSphere API.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere API (VIM) allows for remote, programmatic administration of the ESXi host. Authenticated API sessions are no different from a risk perspective than authenticated UI sessions and they need similar protections.
+
+One of these protections is a basic inactivity timeout, after which the session will be invalidated and reauthentication will be required by the application accessing the API. This is set to 30 seconds by default but can be disabled, thus leaving API sessions open indefinitely. The 30 second default must be verified and maintained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000226</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure a session timeout for the vSphere API.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere API (VIM) allows for remote, programmatic administration of the ESXi host. Authenticated API sessions are no different from a risk perspective than authenticated UI sessions and they need similar protections.
+
+One of these protections is a basic inactivity timeout, after which the session will be invalidated and reauthentication will be required by the application accessing the API. This is set to 30 seconds by default but can be disabled, thus leaving API sessions open indefinitely. The 30 second default must be verified and maintained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; value and verify it is set to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout
+
+If the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; setting is not set to &quot;30&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; value and configure it to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Set-AdvancedSetting -Value 30</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000227</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must be configured with an appropriate maximum password age.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The older an ESXi local account password is, the larger the opportunity window is for attackers to guess, crack or re-use a previously cracked password. Rotating passwords on a regular basis is a fundamental security practice and one that ESXi supports.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordMaxDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;90&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 90
+     got: 99999
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000227</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must be configured with an appropriate maximum password age.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The older an ESXi local account password is, the larger the opportunity window is for attackers to guess, crack or re-use a previously cracked password. Rotating passwords on a regular basis is a fundamental security practice and one that ESXi supports.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordMaxDays&quot; value and verify it is set to &quot;90&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordMaxDays
+
+If the &quot;Security.PasswordMaxDays&quot; setting is not set to &quot;90&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordMaxDays&quot; value and configure it to &quot;90&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordMaxDays | Set-AdvancedSetting -Value 90</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000228</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi Common Information Model (CIM) service must be disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard application programming interfaces (APIs). These APIs are consumed by external applications such as HP SIM or Dell OpenManage for agentless, remote hardware monitoring of the ESXi host.
+
+To reduce attack surface area and following the minimum functionality principal, the CIM service must be disabled unless explicitly needed and approved.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000228</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi Common Information Model (CIM) service must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard application programming interfaces (APIs). These APIs are consumed by external applications such as HP SIM or Dell OpenManage for agentless, remote hardware monitoring of the ESXi host.
+
+To reduce attack surface area and following the minimum functionality principal, the CIM service must be disabled unless explicitly needed and approved.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, locate the &quot;CIM Server&quot; service and verify it is &quot;Stopped&quot; and the &quot;Startup Policy&quot; is set to &quot;Start and stop manually&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;}
+
+If the &quot;CIM Server&quot; service does not have a &quot;Policy&quot; of &quot;off&quot; or is running, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot; select the &quot;CIM Server&quot; service and click the &quot;Stop&quot; button.
+
+Click &quot;Edit Startup policy...&quot; and select the &quot;Start and stop manually&quot; radio button. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;} | Stop-VMHostService</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000229</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must use DOD-approved certificates.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The default self-signed host certificate issued by the VMware Certificate Authority (VMCA) must be replaced with a DOD-approved certificate when the host will be accessed directly, such as during a virtual machine (VM) console connection.
+
+The use of a DOD certificate on the host assures clients the service they are connecting to is legitimate and properly secured.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ssl_certificate for &#39;10.186.25.26&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000229</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must use DOD-approved certificates.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The default self-signed host certificate issued by the VMware Certificate Authority (VMCA) must be replaced with a DOD-approved certificate when the host will be accessed directly, such as during a virtual machine (VM) console connection.
+
+The use of a DOD certificate on the host assures clients the service they are connecting to is legitimate and properly secured.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Certificate.
+
+If the issuer is not a DOD-approved certificate authority, this is a finding.
+
+If the host will never be accessed directly (virtual machine console connections bypass vCenter), this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Join the ESXi host to vCenter before replacing the certificate.
+
+Obtain a DOD-issued certificate and private key for the host following the requirements below:
+
+Key size: 2048 bits or more (PEM encoded)
+
+Key format: PEM
+VMware supports PKCS8 and PKCS1 (RSA keys)
+x509 version 3
+
+SubjectAltName must contain DNS Name&#x3D;&lt;machine_FQDN&gt;
+
+CRT (Base-64) format
+
+Contains the following Key Usages: Digital Signature, Non Repudiation, Key Encipherment
+
+Start time of one day before the current time
+
+CN (and SubjectAltName) set to the host name (or IP address) that the ESXi host has in the vCenter Server inventory
+
+From the vSphere Web Client, select the ESXi host&#39;s vCenter Server &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced Settings.
+
+Select the &quot;vpxd.certmgmt.mode&quot; value and ensure it is set to &quot;custom&quot;.
+
+Put the host into maintenance mode.
+
+Temporarily enable Secure Shell (SSH) on the host. Use Secure Copy Protocol (SCP) to transfer the new certificate and key to &#x2F;tmp. SSH to the host. Back up the existing certificate and key:
+
+# mv &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.crt &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.crt.bak
+# mv &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.key &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.key.bak
+
+Copy the new certificate and key to &quot;&#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;&quot; and rename them to &quot;rui.crt&quot; and &quot;rui.key&quot; respectively.
+
+Restart management agents to implement the new certificate:
+
+# services.sh restart</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000230</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must disable port forwarding.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          While enabling Transmission Control Protocol (TCP) tunnels is a valuable function of sshd, this feature is not appropriate for use on the ESXi hypervisor.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000230</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must disable port forwarding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">While enabling Transmission Control Protocol (TCP) tunnels is a valuable function of sshd, this feature is not appropriate for use on the ESXi hypervisor.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep allowtcpforwarding
+
+Expected result:
+
+allowtcpforwarding no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+AllowTcpForwarding no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000231</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host OpenSLP service must be disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          OpenSLP implements the Service Location Protocol to help CIM clients discover CIM servers over TCP 427. This service is not widely needed and has had vulnerabilities exposed in the past. To reduce attack surface area and following the minimum functionality principal, the OpenSLP service must be disabled unless explicitly needed and approved.
+
+Note: Disabling the OpenSLP service may affect monitoring and third-party systems that use the WBEM DTMF protocols.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000231</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host OpenSLP service must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">OpenSLP implements the Service Location Protocol to help CIM clients discover CIM servers over TCP 427. This service is not widely needed and has had vulnerabilities exposed in the past. To reduce attack surface area and following the minimum functionality principal, the OpenSLP service must be disabled unless explicitly needed and approved.
+
+Note: Disabling the OpenSLP service may affect monitoring and third-party systems that use the WBEM DTMF protocols.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, locate the &quot;slpd&quot; service and verify it is &quot;Stopped&quot; and the &quot;Startup Policy&quot; is set to &quot;Start and stop manually&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;}
+
+If the slpd service does not have a &quot;Policy&quot; of &quot;off&quot; or is running, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot; select the &quot;slpd&quot; service and click the &quot;Stop&quot; button.
+
+Click &quot;Edit Startup policy...&quot; and select the &quot;Start and stop manually&quot; radio button. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;} | Stop-VMHostService</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000232</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable audit logging.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000232</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable audit logging.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.storageEnable&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable
+
+If the &quot;Syslog.global.auditRecord.storageEnable&quot; setting is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.storageEnable&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Set-AdvancedSetting -Value &quot;true&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000233</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must off-load audit records via syslog.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000233</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must off-load audit records via syslog.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.remoteEnable&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable
+
+If the &quot;Syslog.global.auditRecord.remoteEnable&quot; setting is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.remoteEnable&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Set-AdvancedSetting -Value &quot;true&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000234</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable strict x509 verification for SSL syslog endpoints.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When sending syslog data to a remote host via SSL, the ESXi host is presented with the endpoint&#39;s SSL server certificate. In addition to trust verification, configured elsewhere, this &quot;x509-strict&quot; option performs additional validity checks on CA root certificates during verification.
+
+These checks are generally not performed (CA roots are inherently trusted) and might cause incompatibilities with existing, misconfigured CA roots. The NIAP requirements in the Virtualization Protection Profile and Server Virtualization Extended Package, however, require even CA roots to pass validations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000234</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable strict x509 verification for SSL syslog endpoints.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When sending syslog data to a remote host via SSL, the ESXi host is presented with the endpoint&#39;s SSL server certificate. In addition to trust verification, configured elsewhere, this &quot;x509-strict&quot; option performs additional validity checks on CA root certificates during verification.
+
+These checks are generally not performed (CA roots are inherently trusted) and might cause incompatibilities with existing, misconfigured CA roots. The NIAP requirements in the Virtualization Protection Profile and Server Virtualization Extended Package, however, require even CA roots to pass validations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If SSL is not used for a syslog target, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.certificate.strictX509Compliance&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance
+
+If the &quot;Syslog.global.certificate.strictX509Compliance&quot; setting is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.certificate.strictX509Compliance&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Set-AdvancedSetting -Value &quot;true&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000235</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must forward audit records containing information to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user&#x2F;process&#x2F;VM identifiers, event descriptions, success&#x2F;fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in the ESXi audit logs provides a means of investigating an attack; recognizing resource utilization or capacity thresholds; or identifying an improperly configured host.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logLevel | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: info
+     got: error
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000235</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must forward audit records containing information to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user&#x2F;process&#x2F;VM identifiers, event descriptions, success&#x2F;fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in the ESXi audit logs provides a means of investigating an attack; recognizing resource utilization or capacity thresholds; or identifying an improperly configured host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logLevel&quot; value and verify it is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logLevel
+
+If the &quot;Syslog.global.logLevel&quot; setting is not set to &quot;info&quot;, this is a finding.
+
+Note: Verbose logging level is acceptable for troubleshooting purposes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logLevel&quot; value and configure it to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logLevel | Set-AdvancedSetting -Value &quot;info&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000236</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not be configured to override virtual machine (VM) configurations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000236</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not be configured to override virtual machine (VM) configurations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# stat -c &quot;%s&quot; &#x2F;etc&#x2F;vmware&#x2F;settings
+
+Expected result:
+
+0
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# echo -n &gt;&#x2F;etc&#x2F;vmware&#x2F;settings</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000237</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not be configured to override virtual machine (VM) logger settings.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000237</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not be configured to override virtual machine (VM) logger settings.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# grep &quot;^vmx\.log&quot; &#x2F;etc&#x2F;vmware&#x2F;config
+
+If the command produces any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following commands:
+
+# cp &#x2F;etc&#x2F;vmware&#x2F;config &#x2F;etc&#x2F;vmware&#x2F;config.bak
+# grep -v &quot;^vmx\.log&quot; &#x2F;etc&#x2F;vmware&#x2F;config.bak&gt;&#x2F;etc&#x2F;vmware&#x2F;config</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000238</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must require TPM-based configuration encryption.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An ESXi host&#39;s configuration consists of configuration files for each service that runs on the host. The configuration files typically reside in the &#x2F;etc&#x2F; directory, but they can also reside in other namespaces. The configuration files contain run-time information about the state of the services. Over time, the default values in the configuration files might change, for example, when settings on the ESXi host are changed.
+
+A cron job backs up the ESXi configuration files periodically, when ESXi shuts down gracefully or on demand, and creates an archived configuration file in the boot bank. When ESXi reboots, it reads the archived configuration file and recreates the state that ESXi was in when the backup was taken.
+
+Before vSphere 7.0 Update 2, the archived ESXi configuration file is not encrypted. In vSphere 7.0 Update 2 and later, the archived configuration file is encrypted. When the ESXi host is configured with a Trusted Platform Module (TPM), the TPM is used to &quot;seal&quot; the configuration to the host, providing a strong security guarantee and additional protection from offline attacks.
+
+Configuration encryption uses the physical TPM when it is available and supported at install or upgrade time. If the TPM was added or enabled later, the ESXi host must be told to reconfigure to use the newly available TPM. Once the TPM configuration encryption is enabled, it cannot be disabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty Mode stdout.strip is expected to cmp &#x3D;&#x3D; &quot;TPM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TPM
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000238</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must require TPM-based configuration encryption.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An ESXi host&#39;s configuration consists of configuration files for each service that runs on the host. The configuration files typically reside in the &#x2F;etc&#x2F; directory, but they can also reside in other namespaces. The configuration files contain run-time information about the state of the services. Over time, the default values in the configuration files might change, for example, when settings on the ESXi host are changed.
+
+A cron job backs up the ESXi configuration files periodically, when ESXi shuts down gracefully or on demand, and creates an archived configuration file in the boot bank. When ESXi reboots, it reads the archived configuration file and recreates the state that ESXi was in when the backup was taken.
+
+Before vSphere 7.0 Update 2, the archived ESXi configuration file is not encrypted. In vSphere 7.0 Update 2 and later, the archived configuration file is encrypted. When the ESXi host is configured with a Trusted Platform Module (TPM), the TPM is used to &quot;seal&quot; the configuration to the host, providing a strong security guarantee and additional protection from offline attacks.
+
+Configuration encryption uses the physical TPM when it is available and supported at install or upgrade time. If the TPM was added or enabled later, the ESXi host must be told to reconfigure to use the newly available TPM. Once the TPM configuration encryption is enabled, it cannot be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.encryption.get.invoke() | Select Mode
+
+Expected result:
+
+Mode: TPM
+
+If the &quot;Mode&quot; is not set to &quot;TPM&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Ensure the TPM 2.0 chip is enabled in the BIOS and the ESX UI does not show any errors about a present but unavailable TPM.
+
+This setting cannot be configured until the TPM is properly enabled in firmware.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption set --mode&#x3D;TPM
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.encryption.set.CreateArgs()
+$arguments.mode &#x3D; &quot;TPM&quot;
+$esxcli.system.settings.encryption.set.Invoke($arguments)
+
+Evacuate the host and gracefully reboot for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000239</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure the firewall to restrict access to services running on the host.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unrestricted access to services running on an ESXi host can expose a host to outside attacks and unauthorized access. Reduce the risk by configuring the ESXi firewall to only allow access from authorized networks.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">False is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000239</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure the firewall to restrict access to services running on the host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unrestricted access to services running on an ESXi host can expose a host to outside attacks and unauthorized access. Reduce the risk by configuring the ESXi firewall to only allow access from authorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Firewall.
+
+Under the &quot;Allowed IP addresses&quot; column, review the allowed IPs for each service.
+
+Check this for &quot;Incoming&quot; and &quot;Outgoing&quot; sections.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostFirewallException | Where {$_.Enabled -eq $true} | Select Name,Enabled,@{N&#x3D;&quot;AllIPEnabled&quot;;E&#x3D;{$_.ExtensionData.AllowedHosts.AllIP}}
+
+If for an enabled service &quot;Allow connections from any IP address&quot; is selected, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Firewall.
+
+Click &quot;Edit...&quot;. For each enabled service, uncheck the check box to &quot;Allow connections from any IP address&quot; and input the site-specific network(s) required.
+
+The following example formats are acceptable:
+
+192.168.0.0&#x2F;24
+192.168.1.2, 2001::1&#x2F;64
+fd3e:29a6:0a81:e478::&#x2F;64
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+#This disables the allow all rule for the target service. We are targeting the sshServer service in this example.
+$arguments &#x3D; $esxcli.network.firewall.ruleset.set.CreateArgs()
+$arguments.rulesetid &#x3D; &quot;sshServer&quot;
+$arguments.allowedall &#x3D; $false
+$esxcli.network.firewall.ruleset.set.Invoke($arguments)
+
+#Next add the allowed IPs for the service. Note doing the &quot;vSphere Web Client&quot; service this way may disable access but may be done through vCenter or through the console.
+$arguments &#x3D; $esxcli.network.firewall.ruleset.allowedip.add.CreateArgs()
+$arguments.rulesetid &#x3D; &quot;sshServer&quot;
+$arguments.ipaddress &#x3D; &quot;10.0.0.0&#x2F;8&quot;
+$esxcli.network.firewall.ruleset.allowedip.add.Invoke($arguments)
+
+This must be done for each enabled service.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000240</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host when using Host Profiles and&#x2F;or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a host is configured to join an Active Directory domain using Host Profiles and&#x2F;or Auto Deploy, the Active Directory credentials are saved in the profile and are transmitted over the network.
+
+To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network, use the vSphere Authentication Proxy.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no attached host profiles host: 10.186.25.26. This control is not applicable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000240</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host when using Host Profiles and&#x2F;or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a host is configured to join an Active Directory domain using Host Profiles and&#x2F;or Auto Deploy, the Active Directory credentials are saved in the profile and are transmitted over the network.
+
+To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network, use the vSphere Authentication Proxy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+If the organization is not using Host Profiles to join Active Directory, this is not applicable.
+
+From the vSphere Client, go to Home &gt;&gt; Policies and Profiles &gt;&gt; Host Profiles.
+
+Click a Host Profile &gt;&gt; Configure &gt;&gt; Security and Services &gt;&gt; Security Settings &gt;&gt; Authentication Configuration &gt;&gt; Active Directory Configuration &gt;&gt; Join Domain Method.
+
+If the method used to join hosts to a domain is not set to &quot;Use vSphere Authentication Proxy to add the host to domain&quot;, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to vCenter, run the following command:
+
+Get-VMHost | Select Name, &#x60; @{N&#x3D;&quot;HostProfile&quot;;E&#x3D;{$_ | Get-VMHostProfile}}, &#x60; @{N&#x3D;&quot;JoinADEnabled&quot;;E&#x3D;{($_ | Get-VmHostProfile).ExtensionData.Config.ApplyProfile.Authentication.ActiveDirectory.Enabled}}, &#x60; @{N&#x3D;&quot;JoinDomainMethod&quot;;E&#x3D;{(($_ | Get-VMHostProfile).ExtensionData.Config.ApplyProfile.Authentication.ActiveDirectory | Select -ExpandProperty Policy | Where {$_.Id -eq &quot;JoinDomainMethodPolicy&quot;}).Policyoption.Id}}
+
+If &quot;JoinADEnabled&quot; is &quot;True&quot; and &quot;JoinDomainMethod&quot; is not &quot;FixedCAMConfigOption&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Home &gt;&gt; Policies and Profiles &gt;&gt; Host Profiles.
+
+Click a Host Profile &gt;&gt; Configure &gt;&gt; Security and Services &gt;&gt; Security Settings &gt;&gt; Authentication Configuration &gt;&gt; Active Directory Configuration.
+
+Click &quot;Edit Host Profile...&quot;. Set the &quot;Join Domain Method&quot; to &quot;Use vSphere Authentication Proxy to add the host to domain&quot; and provide the IP address of the vSphere Authentication Proxy server.
+
+Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000241</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not use the default Active Directory ESX Admin group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When adding ESXi hosts to Active Directory, all user&#x2F;group accounts assigned to the Active Directory group &quot;ESX Admins&quot; will have full administrative access to the host.
+
+If this group is not controlled or known to the system administrators, it may be used for inappropriate access to the host. Therefore, the default group must be changed to a site-specific Active Directory group and membership must be severely restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000241</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not use the default Active Directory ESX Admin group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When adding ESXi hosts to Active Directory, all user&#x2F;group accounts assigned to the Active Directory group &quot;ESX Admins&quot; will have full administrative access to the host.
+
+If this group is not controlled or known to the system administrators, it may be used for inappropriate access to the host. Therefore, the default group must be changed to a site-specific Active Directory group and membership must be severely restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For systems that do not use Active Directory, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; value and verify it is not set to &quot;ESX Admins&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.hostsvc.esxAdminsGroup
+
+If the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; setting is set to &quot;ESX Admins&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; key and configure its value to an appropriate Active Directory group other than &quot;ESX Admins&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.hostsvc.esxAdminsGroup | Set-AdvancedSetting -Value &quot;&lt;site specific AD group&gt;&quot;
+
+Note: Changing the group name does not remove the permissions of the previous group.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000243</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure a persistent log location for all locally stored logs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ESXi can be configured to store log files on an in-memory file system. This occurs when the host&#39;s &quot;&#x2F;scratch&quot; directory is linked to &quot;&#x2F;tmp&#x2F;scratch&quot;. When this is done, only a single day&#39;s worth of logs are stored at any time. In addition, log files will be reinitialized upon each reboot.
+
+This presents a security risk as user activity logged on the host is only stored temporarily and will not persist across reboots. This can also complicate auditing and make it harder to monitor events and diagnose issues. ESXi host logging should always be configured to a persistent datastore.
+
+Note: Scratch space is configured automatically during installation or first boot of an ESXi host and does not usually need to be configured manually.
+
+If ESXi is installed on an SD card or USB device, a persistent log location may not be configured upon install as normal.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.get.Invoke() | Select-Object -ExpandProperty LocalLogOutputIsPersistent stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000243</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure a persistent log location for all locally stored logs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ESXi can be configured to store log files on an in-memory file system. This occurs when the host&#39;s &quot;&#x2F;scratch&quot; directory is linked to &quot;&#x2F;tmp&#x2F;scratch&quot;. When this is done, only a single day&#39;s worth of logs are stored at any time. In addition, log files will be reinitialized upon each reboot.
+
+This presents a security risk as user activity logged on the host is only stored temporarily and will not persist across reboots. This can also complicate auditing and make it harder to monitor events and diagnose issues. ESXi host logging should always be configured to a persistent datastore.
+
+Note: Scratch space is configured automatically during installation or first boot of an ESXi host and does not usually need to be configured manually.
+
+If ESXi is installed on an SD card or USB device, a persistent log location may not be configured upon install as normal.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logDir&quot; value and verify it is set to a persistent location.
+
+If the value of the setting is &quot;[] &#x2F;scratch&#x2F;logs&quot;, verify the advanced setting &quot;ScratchConfig.CurrentScratchLocation&quot; is not set to &quot;&#x2F;tmp&#x2F;scratch&quot;. This is a nonpersistent location.
+
+If &quot;Syslog.global.logDir&quot; is not configured to a persistent location, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.syslog.config.get.Invoke() | Select LocalLogOutput,LocalLogOutputIsPersistent
+
+If the &quot;LocalLogOutputIsPersistent&quot; value is not true, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logDir&quot; value and set it to a known persistent location.
+
+An example is shown below, where 51dda02d-fade5016-8a08-005056171889 is the UUID of the target datastore:
+
+&#x2F;vmfs&#x2F;volumes&#x2F;51dda02d-fade5016-8a08-005056171889
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logDir | Set-AdvancedSetting -Value &quot;New Log Location&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000244</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enforce the exclusive running of executables from approved VIBs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;execInstalledOnly&quot; advanced ESXi boot option, when set to TRUE, guarantees that the VMkernel executes only those binaries that have been packaged as part of a signed VIB. While this option is effective on its own, it can be further enhanced by telling the Secure Boot to check with the TPM to make sure that the boot process does not proceed unless this setting is enabled. This further protects against malicious offline changes to ESXi configuration to disable the &quot;execInstalledOnly&quot; option.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000244</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enforce the exclusive running of executables from approved VIBs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;execInstalledOnly&quot; advanced ESXi boot option, when set to TRUE, guarantees that the VMkernel executes only those binaries that have been packaged as part of a signed VIB. While this option is effective on its own, it can be further enhanced by telling the Secure Boot to check with the TPM to make sure that the boot process does not proceed unless this setting is enabled. This further protects against malicious offline changes to ESXi configuration to disable the &quot;execInstalledOnly&quot; option.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;VMkernel.Boot.execInstalledOnly&quot; value and verify that it is &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly
+
+If the &quot;VMkernel.Boot.execInstalledOnly&quot; setting is not &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;VMkernel.Boot.execInstalledOnly&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Set-AdvancedSetting -Value True</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000245</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must use sufficient entropy for cryptographic operations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host.
+
+In computing, the term &quot;entropy&quot; refers to random characters and data that are collected for use in cryptography, such as generating encryption keys to secure data transmitted over a network. Entropy is required by security for generating keys and communicating securely over the network. Entropy is often collected from a variety of sources on a system.
+
+FIPS entropy handling is the default behavior if the following conditions are true:
+
+-The hardware supports RDSEED.
+-The disableHwrng VMkernel boot option isn&#39;t present or is FALSE.
+-The entropySources VMkernel boot option isn&#39;t present or is 0 (zero).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;disableHwrng&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;entropySources&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000245</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must use sufficient entropy for cryptographic operations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host.
+
+In computing, the term &quot;entropy&quot; refers to random characters and data that are collected for use in cryptography, such as generating encryption keys to secure data transmitted over a network. Entropy is required by security for generating keys and communicating securely over the network. Entropy is often collected from a variety of sources on a system.
+
+FIPS entropy handling is the default behavior if the following conditions are true:
+
+-The hardware supports RDSEED.
+-The disableHwrng VMkernel boot option isn&#39;t present or is FALSE.
+-The entropySources VMkernel boot option isn&#39;t present or is 0 (zero).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following commands:
+
+# esxcli system settings kernel list -o disableHwrng
+# esxcli system settings kernel list -o entropySources
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.kernel.list.invoke() | Where {$_.Name -eq &quot;disableHwrng&quot; -or $_.Name -eq &quot;entropySources&quot;}
+
+If &quot;disableHwrng&quot; is not set to &quot;false&quot;, this is a finding.
+If &quot;entropySources&quot; is not set to &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following commands:
+
+# esxcli system settings kernel set -s disableHwrng -v FALSE
+# esxcli system settings kernel set -s entropySources -v 0
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.kernel.set.CreateArgs()
+$arguments.setting &#x3D; &quot;disableHwrng&quot;
+$arguments.value &#x3D; &quot;FALSE&quot;
+$esxcli.system.settings.kernel.set.invoke($arguments)
+$arguments.setting &#x3D; &quot;entropySources&quot;
+$arguments.value &#x3D; &quot;0&quot;
+$esxcli.system.settings.kernel.set.invoke($arguments)
+
+Reboot the ESXi host after updating entropy settings.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000246</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not enable log filtering.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The log filtering capability lets you modify the logging policy of the syslog service that is running on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi logs and to deny specific log events entirely.
+
+Setting a limit to the amount of logging information restricts the ability to detect and respond to potential security issues or system failures properly.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.logfilter.get.invoke() | Select-Object -ExpandProperty LogFilteringEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000246</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not enable log filtering.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The log filtering capability lets you modify the logging policy of the syslog service that is running on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi logs and to deny specific log events entirely.
+
+Setting a limit to the amount of logging information restricts the ability to detect and respond to potential security issues or system failures properly.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system syslog config logfilter get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.syslog.config.logfilter.get.invoke()
+
+If &quot;LogFilteringEnabled&quot; is not set to &quot;false&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system syslog config logfilter set --log-filtering-enabled&#x3D;false
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.syslog.config.logfilter.set.CreateArgs()
+$arguments.logfilteringenabled &#x3D; $false
+$esxcli.system.syslog.config.logfilter.set.invoke($arguments)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000189</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have copy operations disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000189</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have copy operations disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.copy.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.copy.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.copy.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.copy.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.copy.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.copy.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000191</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have drag and drop operations disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000191</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have drag and drop operations disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.dnd.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.dnd.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.dnd.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.dnd.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.dnd.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.dnd.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000192</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have paste operations disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000192</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have paste operations disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.paste.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.paste.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.paste.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.paste.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.paste.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.paste.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000193</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have virtual disk shrinking disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Shrinking a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to shrink is available to nonadministrative users operating within the VM&#39;s guest operating system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000193</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have virtual disk shrinking disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Shrinking a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to shrink is available to nonadministrative users operating within the VM&#39;s guest operating system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.diskShrink.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskShrink.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.diskShrink.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.diskShrink.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.diskShrink.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskShrink.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000194</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have virtual disk wiping disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Shrinking and wiping (erasing) a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to wipe (erase) is available to nonadministrative users operating within the VM&#39;s guest operating system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000194</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have virtual disk wiping disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Shrinking and wiping (erasing) a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to wipe (erase) is available to nonadministrative users operating within the VM&#39;s guest operating system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.diskWiper.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskWiper.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.diskWiper.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.diskWiper.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.diskWiper.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskWiper.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000195</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must limit console sharing.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an administrator in the VM logs in using a VMware remote console during their session, a nonadministrator in the VM might connect to the console and observe the administrator&#39;s actions.
+
+Also, this could result in an administrator losing console access to a VM. For example, if a jump box is being used for an open console session and the administrator loses connection to that box, the console session remains open. Allowing two console sessions permits debugging via a shared session. For the highest security, allow only one remote console session at a time.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000195</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must limit console sharing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an administrator in the VM logs in using a VMware remote console during their session, a nonadministrator in the VM might connect to the console and observe the administrator&#39;s actions.
+
+Also, this could result in an administrator losing console access to a VM. For example, if a jump box is being used for an open console session and the administrator loses connection to that box, the console session remains open. Allowing two console sessions permits debugging via a shared session. For the highest security, allow only one remote console session at a time.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;RemoteDisplay.maxConnections&quot; value is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name RemoteDisplay.maxConnections
+
+If the virtual machine advanced setting &quot;RemoteDisplay.maxConnections&quot; does not exist or is not set to &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;RemoteDisplay.maxConnections&quot; value and set it to &quot;1&quot;.
+
+If the setting does not exist, add the Name and Value setting at the bottom of screen.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name RemoteDisplay.maxConnections | Set-AdvancedSetting -Value 1
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000196</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data stream to the host. This 1MB capacity should be sufficient for most cases, but this value can change if necessary.
+
+The value can be increased if large amounts of custom information are being stored in the configuration file. The default limit is 1MB.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000196</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data stream to the host. This 1MB capacity should be sufficient for most cases, but this value can change if necessary.
+
+The value can be increased if large amounts of custom information are being stored in the configuration file. The default limit is 1MB.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;tools.setinfo.sizeLimit&quot; value is set to &quot;1048576&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.setinfo.sizeLimit
+
+If the virtual machine advanced setting &quot;tools.setinfo.sizeLimit&quot; is not set to &quot;1048576&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.setinfo.sizeLimit&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;tools.setinfo.sizeLimit&quot; value and set it to &quot;1048576&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.setinfo.sizeLimit | Set-AdvancedSetting -Value 1048576
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000197</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must prevent unauthorized removal, connection and modification of devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use the virtual machine settings editor or configuration editor to remove unneeded or unused hardware devices. To use the device again, prevent a user or running process in the virtual machine from connecting, disconnecting, or modifying a device from within the guest operating system.
+
+By default, a rogue user with nonadministrator privileges in a virtual machine can:
+
+1. Connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive.
+2. Disconnect a network adaptor to isolate the virtual machine from its network, which is a denial of service.
+3. Modify settings on a device.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000197</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must prevent unauthorized removal, connection and modification of devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use the virtual machine settings editor or configuration editor to remove unneeded or unused hardware devices. To use the device again, prevent a user or running process in the virtual machine from connecting, disconnecting, or modifying a device from within the guest operating system.
+
+By default, a rogue user with nonadministrator privileges in a virtual machine can:
+
+1. Connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive.
+2. Disconnect a network adaptor to isolate the virtual machine from its network, which is a denial of service.
+3. Modify settings on a device.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.device.connectable.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.device.connectable.disable
+
+If the virtual machine advanced setting &quot;isolation.device.connectable.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.device.connectable.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.device.connectable.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.device.connectable.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000198</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must not be able to obtain host information from the hypervisor.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this information for performance monitoring. An adversary could use this information to inform further attacks on the host.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000198</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must not be able to obtain host information from the hypervisor.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this information for performance monitoring. An adversary could use this information to inform further attacks on the host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;tools.guestlib.enableHostInfo&quot; value is set to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guestlib.enableHostInfo
+
+If the virtual machine advanced setting &quot;tools.guestlib.enableHostInfo&quot; is not set to &quot;false&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.guestlib.enableHostInfo&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;tools.guestlib.enableHostInfo&quot; value and set it to &quot;false&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guestlib.enableHostInfo | Set-AdvancedSetting -Value false
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000199</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have shared salt values disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When salting is enabled (Mem.ShareForceSalting&#x3D;1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced option for each virtual machine. The salt values can be specified manually in the virtual machine&#39;s advanced settings with the new option &quot;sched.mem.pshare.salt&quot;.
+
+If this option is not present in the virtual machine&#39;s advanced settings, the value of the &quot;vc.uuid&quot; option is taken as the default value. Because the &quot;vc.uuid&quot; is unique to each virtual machine, by default Transparent Page Sharing (TPS) happens only among the pages belonging to a particular virtual machine (Intra-VM).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000199</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have shared salt values disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When salting is enabled (Mem.ShareForceSalting&#x3D;1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced option for each virtual machine. The salt values can be specified manually in the virtual machine&#39;s advanced settings with the new option &quot;sched.mem.pshare.salt&quot;.
+
+If this option is not present in the virtual machine&#39;s advanced settings, the value of the &quot;vc.uuid&quot; option is taken as the default value. Because the &quot;vc.uuid&quot; is unique to each virtual machine, by default Transparent Page Sharing (TPS) happens only among the pages belonging to a particular virtual machine (Intra-VM).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;sched.mem.pshare.salt&quot; setting does not exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name sched.mem.pshare.salt
+
+If the virtual machine advanced setting &quot;sched.mem.pshare.salt&quot; exists, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Delete the &quot;sched.mem.pshare.salt&quot; setting.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name sched.mem.pshare.salt | Remove-AdvancedSetting
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000200</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must disable access through the &quot;dvfilter&quot; network Application Programming Interface (API).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An attacker might compromise a VM by using the &quot;dvFilter&quot; API. Configure only VMs that need this access to use the API.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000200</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must disable access through the &quot;dvfilter&quot; network Application Programming Interface (API).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An attacker might compromise a VM by using the &quot;dvFilter&quot; API. Configure only VMs that need this access to use the API.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the settings with the format &quot;ethernet*.filter*.name&quot; do not exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name &quot;ethernet*.filter*.name*&quot;
+
+If the virtual machine advanced setting &quot;ethernet*.filter*.name&quot; exists and dvfilters are not in use, this is a finding.
+
+If the virtual machine advanced setting &quot;ethernet*.filter*.name&quot; exists and the value is not valid, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Look for settings with the format &quot;ethernet*.filter*.name&quot;.
+
+Ensure only required VMs use this setting.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name ethernetX.filterY.name | Remove-AdvancedSetting
+
+Note: Change the X and Y values to match the specific setting in the organization&#39;s environment.
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000201</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must be configured to lock when the last console connection is closed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000201</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must be configured to lock when the last console connection is closed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; VMware Remote Console Options.
+
+Verify the option &quot;Lock the guest operating system when the last remote user disconnects&quot; is checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guest.desktop.autolock
+
+If the virtual machine advanced setting &quot;tools.guest.desktop.autolock&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.guest.desktop.autolock&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; VMware Remote Console Options.
+
+Check the box next to &quot;Lock the guest operating system when the last remote user disconnects&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guest.desktop.autolock | Set-AdvancedSetting -Value true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000202</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must disable 3D features when not required.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          For performance reasons, it is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality (e.g., most server workloads or desktops not using 3D applications).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000202</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must disable 3D features when not required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">For performance reasons, it is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality (e.g., most server workloads or desktops not using 3D applications).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings.
+
+Expand the &quot;Video card&quot; and verify the &quot;Enable 3D Support&quot; checkbox is unchecked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name mks.enable3d
+
+If the virtual machine advanced setting &quot;mks.enable3d&quot; exists and is not set to &quot;false&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;mks.enable3d&quot; does not exist, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings.
+
+Expand the &quot;Video card&quot; and uncheck the &quot;Enable 3D Support&quot; checkbox.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name mks.enable3d | Set-AdvancedSetting -Value &quot;false&quot;
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000203</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must enable encryption for vMotion.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the vMotion network. As of vSphere 6.5, this transfer can be transparently encrypted using 256-bit AES-GCM with negligible performance impact.
+
+vSphere enables encrypted vMotion by default as &quot;Opportunistic&quot;, meaning that encrypted channels are used where supported, but the operation will continue in plain text where encryption is not supported.
+
+For example, when vMotioning between two hosts, encryption will always be used. However, because 6.0 and earlier releases do not support this feature, vMotion from a 7.0 host to a 6.0 host would be allowed but would not be encrypted. If the encryption is set to &quot;Required&quot;, vMotions to unsupported hosts will fail. This must be set to &quot;Opportunistic&quot; or &quot;Required&quot;.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000203</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must enable encryption for vMotion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the vMotion network. As of vSphere 6.5, this transfer can be transparently encrypted using 256-bit AES-GCM with negligible performance impact.
+
+vSphere enables encrypted vMotion by default as &quot;Opportunistic&quot;, meaning that encrypted channels are used where supported, but the operation will continue in plain text where encryption is not supported.
+
+For example, when vMotioning between two hosts, encryption will always be used. However, because 6.0 and earlier releases do not support this feature, vMotion from a 7.0 host to a 6.0 host would be allowed but would not be encrypted. If the encryption is set to &quot;Required&quot;, vMotions to unsupported hosts will fail. This must be set to &quot;Opportunistic&quot; or &quot;Required&quot;.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {($_.ExtensionData.Config.MigrateEncryption -eq &quot;disabled&quot;)}
+
+If the &quot;Encrypted vMotion&quot; setting does not have a value of &quot;Opportunistic&quot; or &quot;Required&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+For &quot;Encrypted vMotion&quot; set the value to &quot;Opportunistic&quot; or &quot;Required&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.MigrateEncryption &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpecEncryptedVMotionModes
+$spec.MigrateEncryption &#x3D; $true
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000204</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must enable encryption for Fault Tolerance.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Fault Tolerance log traffic can be encrypted. This could contain sensitive data from the protected machine&#39;s memory or CPU instructions.
+
+vSphere Fault Tolerance performs frequent checks between a primary VM and secondary VM so the secondary VM can quickly resume from the last successful checkpoint. The checkpoint contains the VM state that has been modified since the previous checkpoint.
+
+When Fault Tolerance is turned on, FT encryption is set to &quot;Opportunistic&quot; by default, which means it enables encryption only if both the primary and secondary host are capable of encryption.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000204</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must enable encryption for Fault Tolerance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Fault Tolerance log traffic can be encrypted. This could contain sensitive data from the protected machine&#39;s memory or CPU instructions.
+
+vSphere Fault Tolerance performs frequent checks between a primary VM and secondary VM so the secondary VM can quickly resume from the last successful checkpoint. The checkpoint contains the VM state that has been modified since the previous checkpoint.
+
+When Fault Tolerance is turned on, FT encryption is set to &quot;Opportunistic&quot; by default, which means it enables encryption only if both the primary and secondary host are capable of encryption.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the Virtual Machine does not have Fault Tolerance enabled, this is not applicable.
+
+For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {($_.ExtensionData.Config.FtEncryptionMode -ne &quot;ftEncryptionOpportunistic&quot;) -and ($_.ExtensionData.Config.FtEncryptionMode -ne &quot;ftEncryptionRequired&quot;)}
+
+If the &quot;Encrypted FT&quot; setting does not have a value of &quot;Opportunistic&quot; or &quot;Required&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+For &quot;Encrypted FT&quot; set the value to &quot;Opportunistic&quot; or &quot;Required&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.FTEncryption &#x3D; New-Object VMware.Vim.VMware.Vim.VirtualMachineConfigSpecEncryptedFtModes
+$spec.FT &#x3D; ftEncryptionOpportunistic or ftEncryptionRequired
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000205</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must configure log size.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, the size of these logs is unlimited, and they are only rotated on vMotion or power events. This can cause storage issues at scale for VMs that do not vMotion or power cycle often.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000205</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must configure log size.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, the size of these logs is unlimited, and they are only rotated on vMotion or power events. This can cause storage issues at scale for VMs that do not vMotion or power cycle often.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;log.rotateSize&quot; value is set to &quot;2048000&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.rotateSize
+
+If the virtual machine advanced setting &quot;log.rotateSize&quot; is not set to &quot;2048000&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;log.rotateSize&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;log.rotateSize&quot; value and set it to &quot;2048000&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.rotateSize | Set-AdvancedSetting -Value 2048000
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000206</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must configure log retention.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, 10 of these logs are retained. This is normally sufficient for most environments, but this configuration must be verified and maintained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000206</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must configure log retention.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, 10 of these logs are retained. This is normally sufficient for most environments, but this configuration must be verified and maintained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;log.keepOld&quot; value is set to &quot;10&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.keepOld
+
+If the virtual machine advanced setting &quot;log.keepOld&quot; is not set to &quot;10&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;log.keepOld&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;log.keepOld&quot; value and set it to &quot;10&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.keepOld | Set-AdvancedSetting -Value 10
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000207</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must enable logging.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including, but not limited to, power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations and machine clones. Due to the value these logs provide for the continued availability of each VM and potential security incidents, these logs must be enabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000207</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must enable logging.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including, but not limited to, power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations and machine clones. Due to the value these logs provide for the continued availability of each VM and potential security incidents, these logs must be enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Advanced.
+
+Ensure that the checkbox next to &quot;Enable logging&quot; is checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Flags.EnableLogging -ne &quot;True&quot;}
+
+If logging is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Advanced.
+
+Click the checkbox next to &quot;Enable logging&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.Flags &#x3D; New-Object VMware.Vim.VirtualMachineFlagInfo
+$spec.Flags.enableLogging &#x3D; $true
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000208</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must not use independent, non-persistent disks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The security issue with nonpersistent disk mode is that successful attackers, with a simple shutdown or reboot, might undo or remove any traces they were ever on the machine. To safeguard against this risk, production virtual machines should be set to use persistent disk mode; additionally, ensure activity within the VM is logged remotely on a separate server, such as a syslog server or equivalent Windows-based event collector. Without a persistent record of activity on a VM, administrators might never know whether they have been attacked or hacked.
+
+There can be valid use cases for these types of disks, such as with an application presentation solution where read-only disks are desired, and such cases should be identified and documented.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000208</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must not use independent, non-persistent disks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The security issue with nonpersistent disk mode is that successful attackers, with a simple shutdown or reboot, might undo or remove any traces they were ever on the machine. To safeguard against this risk, production virtual machines should be set to use persistent disk mode; additionally, ensure activity within the VM is logged remotely on a separate server, such as a syslog server or equivalent Windows-based event collector. Without a persistent record of activity on a VM, administrators might never know whether they have been attacked or hacked.
+
+There can be valid use cases for these types of disks, such as with an application presentation solution where read-only disks are desired, and such cases should be identified and documented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the attached hard disks and verify they are not configured as independent nonpersistent disks.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Select Parent, Name, Filename, DiskType, Persistence | FT -AutoSize
+
+If the virtual machine has attached disks that are in independent nonpersistent mode and are not documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the target hard disk and change the mode to persistent or uncheck Independent.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run one of the following commands:
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Set-HardDisk -Persistence IndependentPersistent
+
+or
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Set-HardDisk -Persistence Persistent</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000209</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded floppy devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000209</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded floppy devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState
+
+If a virtual machine has a floppy drive connected, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+The VM must be powered off to remove a floppy drive.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-FloppyDrive | Remove-FloppyDrive</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000210</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded CD&#x2F;DVD devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000210</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded CD&#x2F;DVD devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no CD&#x2F;DVD drives are connected.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Get-CDDrive | Where {$_.extensiondata.connectable.connected -eq $true} | Select Parent,Name
+
+If a virtual machine has a CD&#x2F;DVD drive connected other than temporarily, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the CD&#x2F;DVD drive and uncheck &quot;Connected&quot; and &quot;Connect at power on&quot; and remove any attached ISOs.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-CDDrive | Set-CDDrive -NoMedia</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000211</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded parallel devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000211</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded parallel devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;parallel&quot;}
+
+If a virtual machine has a parallel device present, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+The VM must be powered off to remove a parallel device.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$pport &#x3D; (Get-VM -Name &lt;vmname&gt;).ExtensionData.Config.Hardware.Device | Where {$_.DeviceInfo.Label -match &quot;Parallel&quot;}
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.DeviceChange +&#x3D; New-Object VMware.Vim.VirtualDeviceConfigSpec
+$spec.DeviceChange[-1].device &#x3D; $pport
+$spec.DeviceChange[-1].operation &#x3D; &quot;remove&quot;
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000212</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded serial devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000212</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded serial devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no serial devices exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;serial&quot;}
+
+If a virtual machine has a serial device present, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">The VM must be powered off to remove a serial device.
+
+For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the serial device, click the circled &quot;X&quot; to remove it, and click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000213</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded USB devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000213</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded USB devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no USB devices exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;usb&quot;}
+Get-VM | Get-UsbDevice
+
+If a virtual machine has any USB devices or USB controllers present, this is a finding.
+
+If USB smart card readers are used to pass smart cards through the VM console to a VM, the use of a USB controller and USB devices for that purpose is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the USB controller, click the circled &quot;X&quot; to remove it, and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-USBDevice | Remove-USBDevice
+
+Note:  This will not remove the USB controller, just any connected devices.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000214</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must disable DirectPath I&#x2F;O devices when not required.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          VMDirectPath I&#x2F;O (PCI passthrough) enables direct assignment of hardware PCI functions to VMs. This gives the VM access to the PCI functions with minimal intervention from the ESXi host. This is a powerful feature for legitimate applications such as virtualized storage appliances, backup appliances, dedicated graphics, etc., but it also allows a potential attacker highly privileged access to underlying hardware and the PCI bus.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000214</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must disable DirectPath I&#x2F;O devices when not required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">VMDirectPath I&#x2F;O (PCI passthrough) enables direct assignment of hardware PCI functions to VMs. This gives the VM access to the PCI functions with minimal intervention from the ESXi host. This is a powerful feature for legitimate applications such as virtualized storage appliances, backup appliances, dedicated graphics, etc., but it also allows a potential attacker highly privileged access to underlying hardware and the PCI bus.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, view the Summary tab.
+
+Review the PCI devices section and verify none exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-PassthroughDevice
+
+If the virtual machine has passthrough devices present, and the specific device returned is not approved, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, select the Virtual Machine, right click and go to Edit Settings &gt;&gt; Virtual Hardware tab.
+
+Find the unexpected PCI device returned from the check.
+
+Hover the mouse over the device and click the circled &quot;X&quot; to remove the device. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-PassthroughDevice | Remove-PassthroughDevice</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000009</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (8)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000068
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000382
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001184
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001453
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001941
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001942
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002420
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002421
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002422
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000009</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2), CM-7 b, IA-2 (8), IA-2 (9), SC-13, SC-23, SC-8, SC-8 (1), SC-8 (2)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">At the command prompt on the vCenter Server Appliance, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware-TlsReconfigurator&#x2F;VcTlsReconfigurator&#x2F;reconfigureVc scan
+
+If the output indicates versions of TLS other than 1.2 are enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">At the command prompt on the vCenter Server Appliance, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware-TlsReconfigurator&#x2F;VcTlsReconfigurator&#x2F;reconfigureVc update -p TLSv1.2
+
+vCenter services will be restarted as part of the reconfiguration. The operating system will not be restarted.
+
+The &quot;--no-restart&quot; flag can be added to restart services at a later time.
+
+Changes will not take effect until all services are restarted or the appliance is rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000023</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enforce the limit of three consecutive invalid login attempts by a user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000044
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).MaxFailedAttempts stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 3
+     got: 5
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000023</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enforce the limit of three consecutive invalid login attempts by a user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+The following lockout policy should be set as follows:
+
+Maximum number of failed login attempts: 3
+
+If this account lockout policy is not configured as stated, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Maximum number of failed login attempts&quot; to &quot;3&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000024</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 c 1
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000050
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001384
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of the DOD-approved use notification before granting access to the application ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with DTM-08-060. Use the following verbiage for applications that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for operating systems that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000024</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of the DOD-approved use notification before granting access to the application ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with DTM-08-060. Use the following verbiage for applications that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for operating systems that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a, AC-8 b, AC-8 c 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Login Message.
+
+If the selection box next to &quot;Show login message&quot; is disabled, &quot;Details of login message&quot; is not configured to the standard DOD User Agreement, or the &quot;Consent checkbox&quot; is disabled, this is a finding.
+
+Note: Refer to vulnerability discussion for user agreement language.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Login Message.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Show login message&quot; slider to enable.
+
+Configure the &quot;Login message&quot; to &quot;DOD User Agreement&quot;.
+
+Click the &quot;Consent checkbox&quot; slider to enable.
+
+Set the &quot;Details of login message&quot; to the Standard Mandatory DOD Notice and Consent Banner text.
+
+Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000034</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must produce audit records containing information to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000034</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must produce audit records containing information to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify the &quot;config.log.level&quot; value is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.log.level and verify it is set to &quot;info&quot;.
+
+If the &quot;config.log.level&quot; value is not set to &quot;info&quot; or does not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;config.log.level&quot; setting to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.log.level | Set-AdvancedSetting -Value info</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000057</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>vCenter Server plugins must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, web-based functionality.
+
+vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
+
+Additionally, vCenter comes with a number of plugins preinstalled that may or may not be necessary for proper operation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000057</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">vCenter Server plugins must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, web-based functionality.
+
+vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
+
+Additionally, vCenter comes with a number of plugins preinstalled that may or may not be necessary for proper operation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Solutions &gt;&gt; Client Plug-Ins.
+
+View the Installed&#x2F;Available Plug-ins list and verify they are all identified as authorized VMware, third-party (partner), and&#x2F;or site-specific approved plug-ins.
+
+If any installed&#x2F;available plug-ins in the viewable list cannot be verified as allowed vSphere Client plug-ins from trusted sources or are not in active use, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Solutions &gt;&gt; Client Plug-Ins, click the radio button next to the unknown plug-in, and click &quot;Disable&quot;.
+
+If the plugin will not be needed in the future, proceed to uninstall the plug-in.
+
+To uninstall plug-ins, do the following:
+
+If vCenter Server is in linked mode, perform this procedure on the vCenter Server that is used to install the plug-in initially and then restart the vCenter Server services on the linked vCenter Server:
+
+In a web browser, navigate to &quot;http:&#x2F;&#x2F;vCenter_Server_name_or_IP&#x2F;mob&quot;, where &quot;vCenter_Server_name_or_IP&#x2F;mob&quot; is the name of the vCenter Server or its IP address.
+
+Click &quot;Content&quot;.
+
+Click &quot;ExtensionManager&quot;.
+
+Select and copy the name of the plug-in to be removed from the list of values under &quot;Properties&quot;.
+
+Click &quot;UnregisterExtension&quot;. A new window appears.
+
+Paste the name of the plug-in and click &quot;Invoke Method&quot;. This removes the plug-in.
+
+Close the window.
+
+Refresh the Managed Object Type:ManagedObjectReference:ExtensionManager window to verify the plug-in is removed successfully.
+
+Note: If the plug-in still appears, restart the vSphere Client.
+
+Note: The Managed Object Browser (MOB) may have to be enabled temporarily if it was disabled previously.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000059</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-4 e
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000764
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000770
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000795
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000804
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001682
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses except the following.
+
+(i) Accesses explicitly identified and documented by the organization. Organizations document specific user actions that can be performed on the information system without identification or authentication; and
+(ii) Accesses that occur through authorized use of group authenticators without individual authentication. Organizations may require unique identification of individuals in group accounts (e.g., shared privilege accounts) or for detailed accountability of individual activity.
+
+Using Active Directory or an identity provider for authentication provides more robust account management capabilities and accountability.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000059</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses except the following.
+
+(i) Accesses explicitly identified and documented by the organization. Organizations document specific user actions that can be performed on the information system without identification or authentication; and
+(ii) Accesses that occur through authorized use of group authenticators without individual authentication. Organizations may require unique identification of individuals in group accounts (e.g., shared privilege accounts) or for detailed accountability of individual activity.
+
+Using Active Directory or an identity provider for authentication provides more robust account management capabilities and accountability.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), IA-2, IA-2 (5), IA-4 e, IA-8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+If the identity provider type is &quot;embedded&quot; and there is no identity source of type &quot;Active Directory&quot; (either Windows Integrated Authentication or LDAP), this is a finding.
+
+If the identity provider type is &quot;Microsoft ADFS&quot; or another supported identity provider, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">When using the embedded identity provider type, perform the following:
+
+From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Identity Sources.
+
+Click &quot;Add&quot;.
+
+Select either &quot;Active Directory over LDAP&quot; or &quot;Active Directory (Windows Integrated Authentication)&quot; and configure appropriately.
+
+Note: Windows Integrated Authentication requires that the vCenter server be joined to Active Directory before configuration via Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Active Directory Domain.
+
+OR
+
+To change the identity provider type to a third-party identity provider such as Microsoft ADFS, perform the following:
+
+From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click &quot;Change Identity Provider&quot;.
+
+Select &quot;Microsoft ADFS&quot; and click &quot;Next&quot;.
+
+Enter the ADFS server information and User and Group details and click &quot;Finish&quot;.
+
+For additional information on configuring ADFS for use with vCenter, refer to the vSphere documentation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000060</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must require multifactor authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000166
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000765
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000766
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001953
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002009
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.
+
+Multifactor authentication requires using two or more factors to achieve authentication.
+
+Factors include:
+(i) something a user knows (e.g., password&#x2F;PIN);
+(ii) something a user has (e.g., cryptographic identification device, token); or
+(iii) something a user is (e.g., biometric).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000060</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must require multifactor authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.
+
+Multifactor authentication requires using two or more factors to achieve authentication.
+
+Factors include:
+(i) something a user knows (e.g., password&#x2F;PIN);
+(ii) something a user has (e.g., cryptographic identification device, token); or
+(iii) something a user is (e.g., biometric).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-10, IA-2 (1), IA-2 (12), IA-2 (2), IA-8 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+If the embedded identity provider is used, click on &quot;Smart Card Authentication&quot;.
+
+If the embedded identity provider is used and &quot;Smart Card Authentication&quot; is not enabled, this is a finding.
+
+If a third-party identity provider is used, such as Microsoft ADFS, and it does not require multifactor authentication to log on to vCenter, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To configure smart card authentication for vCenter when using the embedded identity provider, refer to the vSphere documentation.
+
+For vCenter Servers using a third-party identity provider, consult the product&#39;s documentation for enabling multifactor authentication.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000069</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must be at least 15 characters in length.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000205
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Use of more characters in a password helps to exponentially increase the time and&#x2F;or resources required to compromise the password.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinLength stdout.strip is expected to cmp &gt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 15
+     got: 8
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000069</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must be at least 15 characters in length.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Use of more characters in a password helps to exponentially increase the time and&#x2F;or resources required to compromise the password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Minimum Length&quot; setting.
+
+Minimum Length: 15
+
+If the password policy is not configured with a &quot;Minimum Length&quot; policy of &quot;15&quot; or more, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Minimum Length&quot; to &quot;15&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000070</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must prohibit password reuse for a minimum of five generations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000200
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+To meet password policy requirements, passwords must be changed at specific policy-based intervals.
+
+If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).ProhibitedPreviousPasswordsCount stdout.strip is expected to cmp &gt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000070</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must prohibit password reuse for a minimum of five generations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+To meet password policy requirements, passwords must be changed at specific policy-based intervals.
+
+If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (e)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Restrict reuse&quot; setting.
+
+Restrict reuse: Users cannot reuse any previous 5 passwords
+
+If the password policy is not configured with a &quot;Restrict reuse&quot; policy of &quot;5&quot; or more, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Restrict reuse&quot; to &quot;5&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000071</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must contain at least one uppercase character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password is, the greater the number of possible combinations that need to be tested before the password is compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinUppercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000071</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must contain at least one uppercase character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password is, the greater the number of possible combinations that need to be tested before the password is compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 uppercase characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more uppercase characters, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;uppercase characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000072</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must contain at least one lowercase character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000193
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinLowercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000072</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must contain at least one lowercase character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 lowercase characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more lowercase characters, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;lowercase characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000073</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must contain at least one numeric character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000194
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinNumericCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000073</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must contain at least one numeric character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 numeric characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more numeric characters, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;numeric characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000074</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must contain at least one special character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001619
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor in determining how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Special characters are not alphanumeric. Examples include: ~ ! @ # $ % ^ *.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinSpecialCharCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000074</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must contain at least one special character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor in determining how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Special characters are not alphanumeric. Examples include: ~ ! @ # $ % ^ *.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 special characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more special characters, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;special characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000077</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enable FIPS-validated cryptography.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-7
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000197
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000803
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001188
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001199
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001967
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-003123
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements.
+
+In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).
+
+vSphere 7.0 Update 2 and later adds additional FIPS-validated cryptography to vCenter Server Appliance. By default, this FIPS validation option is disabled and must be enabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Invoke-GetSystemGlobalFips | Select-Object -ExpandProperty enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000077</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enable FIPS-validated cryptography.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements.
+
+In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).
+
+vSphere 7.0 Update 2 and later adds additional FIPS-validated cryptography to vCenter Server Appliance. By default, this FIPS validation option is disabled and must be enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3 (1), IA-5 (1) (c), IA-7, MA-4 (6), SC-13, SC-23 (3), SC-28</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Web Client, go to Developer Center &gt;&gt; API Explorer.
+
+From the &quot;Select API&quot; drop-down menu, select appliance.
+
+Expand system&#x2F;security&#x2F;global_fips &gt;&gt; GET.
+
+Click &quot;Execute&quot; and then &quot;Copy Response&quot; to view the results.
+
+Example response:
+
+{
+    &quot;enabled&quot;: true
+}
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Invoke-GetSystemGlobalFips
+
+If global FIPS mode is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Web Client go to Developer Center &gt;&gt; API Explorer.
+
+From the &quot;Select API&quot; drop-down menu, select appliance.
+
+Expand system&#x2F;security&#x2F;global_fips &gt;&gt; PUT.
+
+In the response body under &quot;Try it out&quot; paste the following:
+
+{
+    &quot;enabled&quot;: true
+}
+
+Click &quot;Execute&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$spec &#x3D; Initialize-SystemSecurityGlobalFipsUpdateSpec -Enabled $true; Invoke-SetSystemGlobalFips -SystemSecurityGlobalFipsUpdateSpec $spec
+
+Note: The vCenter server reboots after FIPS is enabled or disabled.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000079</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enforce a 90-day maximum password lifetime restriction.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any password, no matter how complex, can eventually be cracked. Therefore, passwords must be changed at specific intervals.
+
+One method of minimizing this risk is to use complex passwords and periodically change them. If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the system and&#x2F;or application passwords could be compromised.
+
+This requirement does not include emergency administration accounts, which are meant for access to the application in case of failure. These accounts are not required to have maximum password lifetime restrictions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).PasswordLifetimeDays stdout.strip is expected to cmp &lt;&#x3D; 90</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000079</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enforce a 90-day maximum password lifetime restriction.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any password, no matter how complex, can eventually be cracked. Therefore, passwords must be changed at specific intervals.
+
+One method of minimizing this risk is to use complex passwords and periodically change them. If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the system and&#x2F;or application passwords could be compromised.
+
+This requirement does not include emergency administration accounts, which are meant for access to the application in case of failure. These accounts are not required to have maximum password lifetime restrictions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Maximum lifetime&quot; setting.
+
+Maximum lifetime: Password must be changed every 90 days
+
+If the password policy is not configured with &quot;Maximum lifetime&quot; policy of &quot;90&quot; or less, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;Maximum lifetime&quot; to &quot;90&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000080</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enable revocation checking for certificate-based authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000185
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001954
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001991
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002010
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The system must establish the validity of the user-supplied identity certificate using Online Certificate Status Protocol (OCSP) and&#x2F;or Certificate Revocation List (CRL) revocation checking.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).UseInCertCRL stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000080</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enable revocation checking for certificate-based authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The system must establish the validity of the user-supplied identity certificate using Online Certificate Status Protocol (OCSP) and&#x2F;or Certificate Revocation List (CRL) revocation checking.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (12), IA-5 (2) (a), IA-5 (2) (d), IA-8 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a federated identity provider is configured and used for an identity source and supports Smartcard authentication, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under Smart card authentication settings &gt;&gt; Certificate revocation, verify &quot;Revocation check&quot; does not show as disabled.
+
+If &quot;Revocation check&quot; shows as disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under Smart card authentication settings &gt;&gt; Certificate revocation, click the &quot;Edit&quot; button.
+
+Configure revocation checking per site requirements. OCSP with CRL failover is recommended.
+
+By default, both locations are pulled from the cert. CRL location can be overridden in this screen, and local responders can be specified via the sso-config command line tool. See the vSphere documentation for more information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000089</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must terminate vSphere Client sessions after 15 minutes of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-12
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-11
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002038
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002361
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free resources committed by the managed network element.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000089</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must terminate vSphere Client sessions after 15 minutes of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free resources committed by the managed network element.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-12, IA-11, SC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Client Configuration.
+
+View the value of the &quot;Session timeout&quot; setting.
+
+If the &quot;Session timeout&quot; is not set to &quot;15 minute(s)&quot; or less this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Client Configuration.
+
+Click &quot;Edit&quot; and enter &quot;15&quot; minutes into the &quot;Session timeout&quot; setting. Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000095</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server user roles must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001082
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001084
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Users and service accounts must only be assigned privileges they require. Least privilege requires that these privileges must only be assigned if needed to reduce risk of confidentiality, availability, or integrity loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000095</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server user roles must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Users and service accounts must only be assigned privileges they require. Least privilege requires that these privileges must only be assigned if needed to reduce risk of confidentiality, availability, or integrity loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (1), SC-2, SC-3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+View each role and verify the users and&#x2F;or groups assigned to it by clicking on &quot;Usage&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Sort Role | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+Application service account and user required privileges should be documented.
+
+If any user or service account has more privileges than required, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To update a user&#39;s or group&#39;s permissions to an existing role with reduced permissions, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Global Permissions.
+
+Select the user or group, click the pencil button, change the assigned role, and click &quot;OK&quot;.
+
+Note: If permissions are assigned on a specific object, the role must be updated where it is assigned (for example, at the cluster level).
+
+To create a new role with reduced permissions, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Click the green plus sign and enter a name for the role and select only the specific permissions required.
+
+Users can then be assigned to the newly created role.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000110</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I&#x2F;O Control (NIOC).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001095
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+Managing excess capacity ensures sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000110</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I&#x2F;O Control (NIOC).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+Managing excess capacity ensures sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5 (2)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+View the &quot;Properties&quot; pane and verify &quot;Network I&#x2F;O Control&quot; is &quot;Enabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;NIOC Enabled&quot;;E&#x3D;{$_.ExtensionData.config.NetworkResourceManagementEnabled}}
+
+If &quot;Network I&#x2F;O Control&quot; is disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+In the &quot;Properties&quot; pane, click &quot;Edit&quot;. Change &quot;Network I&#x2F;O Control&quot; to &quot;Enabled&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDSwitch &quot;VDSwitch Name&quot; | Get-View).EnableNetworkResourceManagement($true)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000123</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001683
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001684
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001685
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001686
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002132
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to create a new account. They may also try to hijack an existing account by changing a password or enabling a previously disabled account. Therefore, all actions performed on accounts in the SSO domain much be alerted on in vCenter at a minimum and ideally on a Security Information and Event Management (SIEM) system as well.
+
+To ensure the appropriate personnel are alerted about SSO account actions, create a new vCenter alarm for the &quot;com.vmware.sso.PrincipalManagement&quot; event ID and configure the alert mechanisms appropriately.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AlarmDefinition | Where-Object {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000123</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to create a new account. They may also try to hijack an existing account by changing a password or enabling a previously disabled account. Therefore, all actions performed on accounts in the SSO domain much be alerted on in vCenter at a minimum and ideally on a Security Information and Event Management (SIEM) system as well.
+
+To ensure the appropriate personnel are alerted about SSO account actions, create a new vCenter alarm for the &quot;com.vmware.sso.PrincipalManagement&quot; event ID and configure the alert mechanisms appropriately.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Security &gt;&gt; Alarm Definitions.
+
+Verify there is an alarm created to alert upon all SSO account actions.
+
+The alarm name may vary, but it is suggested to name it &quot;SSO account actions - com.vmware.sso.PrincipalManagement&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AlarmDefinition | Where {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select Name,Enabled,@{N&#x3D;&quot;EventTypeId&quot;;E&#x3D;{$_.ExtensionData.Info.Expression.Expression.EventTypeId}}
+
+If an alarm is not created to alert on SSO account actions, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Security &gt;&gt; Alarm Definitions.
+
+Click &quot;Add&quot;.
+
+Provide the alarm name of &quot;SSO account actions - com.vmware.sso.PrincipalManagement&quot; and an optional description.
+
+From the &quot;Target type&quot; dropdown menu, select &quot;vCenter Server&quot;.
+
+Click &quot;Next&quot;.
+
+Paste &quot;com.vmware.sso.PrincipalManagement&quot; (without quotes) in the line after &quot;IF&quot; and press &quot;Enter&quot;.
+
+Next to &quot;Trigger the alarm and&quot;, select &quot;Show as Warning&quot;.
+
+Configure the desired notification actions that will inform the SA and ISSO of the event.
+
+Click &quot;Next&quot;. Click &quot;Next&quot; again. Click &quot;Create&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000145</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002238
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).FailedAttemptIntervalSec stdout.strip is expected to cmp &gt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 900
+     got: 180
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000145</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+View the value of the &quot;Time interval between failures&quot; setting.
+
+Time interval between failures: 900 seconds
+
+If the lockout policy is not configured with &quot;Time interval between failures&quot; policy of &quot;900&quot; or more, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Time interval between failures&quot; to &quot;900&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000148</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must be configured to send logs to a central log server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter must be configured to send near real-time log data to syslog collectors so information will be available to investigators in the case of a security incident or to assist in troubleshooting.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No log servers configured: [] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to be falsey, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000148</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must be configured to send logs to a central log server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter must be configured to send near real-time log data to syslog collectors so information will be available to investigators in the case of a security incident or to assist in troubleshooting.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Syslog&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify at least one site-specific syslog receiver is configured and is listed as &quot;Reachable&quot;.
+
+If no valid syslog collector is configured or if the collector is not listed as &quot;Reachable&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Syslog&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Edit&quot; or &quot;Configure&quot;.
+
+Edit or add the address and port of a site-specific syslog aggregator or Security Information Event Management (SIEM) system with the appropriate protocol.
+
+User Datagram Protocol (UDP) is discouraged due to its stateless and unencrypted nature. Transport Layer Security (TLS) is preferred.
+
+Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000150</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001744
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001858
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system operation may be adversely affected.
+
+Alerts provide organizations with urgent messages. Real-time alerts provide these messages immediately (i.e., the time from event detection to alert occurs in seconds or less).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000150</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system operation may be adversely affected.
+
+Alerts provide organizations with urgent messages. Real-time alerts provide these messages immediately (i.e., the time from event detection to alert occurs in seconds or less).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, AU-5 (2), CM-3 (5)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the Central Logging Server being used to verify it is configured to alert the SA and ISSO, at a minimum, on any AO-defined events. Otherwise, this is a finding.
+
+If there are no AO-defined events, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the Central Logging Server being used to alert the SA and ISSO, at a minimum, on any AO-defined events.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000158</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-8 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001891
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity.
+
+Synchronizing internal information system clocks to an authoritative time server provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Timesync Configuration: HOST is expected to cmp &#x3D;&#x3D; &quot;NTP&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NTP
+     got: HOST
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000158</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity.
+
+Synchronizing internal information system clocks to an authoritative time server provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-8 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Time&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify at least one authorized time server is configured and is listed as &quot;Reachable&quot;.
+
+If &quot;NTP&quot; is not enabled and at least one authorized time server configured, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Time&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Edit&quot; under &quot;Time Synchronization&quot;.
+
+Select &quot;NTP&quot; for &quot;Mode&quot; and enter a list of authorized time servers separated by commas. Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000195</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server Machine Secure Sockets Layer (SSL) certificate must be issued by a DOD certificate authority.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002470
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Untrusted certificate authorities (CA) can issue certificates, but they may be issued by organizations or individuals that seek to compromise DOD systems or by organizations with insufficient security controls. If the CA used for verifying the certificate is not a DOD-approved CA, trust of this CA has not been established.
+
+The DOD will only accept public key infrastructure (PKI) certificates obtained from a DOD-approved internal or external certificate authority. Reliance on CAs for the establishment of secure sessions includes, for example, the use of Transport Layer Security (TLS) certificates.
+
+The default self-signed, VMware Certificate Authority (VMCA)-issued vCenter reverse proxy certificate must be replaced with a DOD-approved certificate. The use of a DOD certificate on the vCenter reverse proxy and other services assures clients that the service they are connecting to is legitimate and trusted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ssl_certificate for &#39;10.186.30.81&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000195</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server Machine Secure Sockets Layer (SSL) certificate must be issued by a DOD certificate authority.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Untrusted certificate authorities (CA) can issue certificates, but they may be issued by organizations or individuals that seek to compromise DOD systems or by organizations with insufficient security controls. If the CA used for verifying the certificate is not a DOD-approved CA, trust of this CA has not been established.
+
+The DOD will only accept public key infrastructure (PKI) certificates obtained from a DOD-approved internal or external certificate authority. Reliance on CAs for the establishment of secure sessions includes, for example, the use of Transport Layer Security (TLS) certificates.
+
+The default self-signed, VMware Certificate Authority (VMCA)-issued vCenter reverse proxy certificate must be replaced with a DOD-approved certificate. The use of a DOD certificate on the vCenter reverse proxy and other services assures clients that the service they are connecting to is legitimate and trusted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-23 (5)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Certificates &gt;&gt; Certificate Management &gt;&gt; Machine SSL Certificate.
+
+Click &quot;View Details&quot; and examine the &quot;Issuer Information&quot; block.
+
+If the issuer specified is not a DOD approved certificate authority, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Obtain a DOD-issued certificate and private key for each vCenter in the system following the requirements below:
+
+Key size: 2048 bits or more (PEM encoded)
+CRT format (Base-64)
+x509 version 3
+SubjectAltName must contain DNS Name&#x3D;&lt;machine_FQDN&gt;
+Contains the following Key Usages: Digital Signature, Non Repudiation, Key Encipherment
+
+Export the entire certificate issuing chain up to the root in Base-64 format. Concatenate the individual certificates into one file with the &quot;.cer&quot; extension.
+
+From the vSphere Client, go to Administration &gt;&gt; Certificates &gt;&gt; Certificate Management &gt;&gt; Machine SSL Certificate.
+
+Click Actions &gt;&gt; Import and Replace Certificate.
+
+Select the &quot;Replace with external CA certificate&quot; radio button and click &quot;Next&quot;.
+
+Supply the CA-issued certificate , the exported roots file, and the private key.
+
+Click &quot;Replace&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000196</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enable data at rest encryption for vSAN.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002475
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications handling data requiring &quot;data at rest&quot; protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+
+Data encryption is a common technique used in environments that require additional levels of security.  It consists of a process to ensure that data can only be consumed by systems that have appropriate levels of access.  Approved systems must have and use the appropriate cryptographic keys to encrypt and decrypt the data.  Systems that do not have the keys will not be able to consume the data in any meaningful way, as it will remain encrypted in accordance to the commonly used Advanced Encryption Standard (AES) from the National Institute of Standards and Technology, or NIST.
+
+vSAN supports Data-At-Rest Encryption and Data-in-Transit Encryption and uses an AES 256 cipher. Data is encrypted after all other processing, such as deduplication, is performed. Data at rest encryption protects data on storage devices, in case a device is removed from the cluster.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-Cluster -Name cluster0 | Get-VsanClusterConfiguration | Select-Object -ExpandProperty EncryptionEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000196</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enable data at rest encryption for vSAN.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications handling data requiring &quot;data at rest&quot; protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+
+Data encryption is a common technique used in environments that require additional levels of security.  It consists of a process to ensure that data can only be consumed by systems that have appropriate levels of access.  Approved systems must have and use the appropriate cryptographic keys to encrypt and decrypt the data.  Systems that do not have the keys will not be able to consume the data in any meaningful way, as it will remain encrypted in accordance to the commonly used Advanced Encryption Standard (AES) from the National Institute of Standards and Technology, or NIST.
+
+vSAN supports Data-At-Rest Encryption and Data-in-Transit Encryption and uses an AES 256 cipher. Data is encrypted after all other processing, such as deduplication, is performed. Data at rest encryption protects data on storage devices, in case a device is removed from the cluster.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-28 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Review the &quot;Data-at-rest encryption&quot; status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-Cluster | Where-Object {$_.VsanEnabled -eq $true} | Get-VsanClusterConfiguration | Select-Object Name,EncryptionEnabled
+
+If &quot;Data-At-Rest encryption&quot; is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the target cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Click &quot;Edit&quot;.
+
+Enable &quot;Data-At-Rest encryption&quot; and select a pre-configured key provider from the drop down. Click &quot;Apply&quot;.
+
+Note: Before enabling, read and understand the operational implications of enabling data at rest encryption in vSAN and how it effects capacity, performance, and recovery scenarios.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000248</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable the Customer Experience Improvement Program (CEIP).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes this feature must be disabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000248</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable the Customer Experience Improvement Program (CEIP).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes this feature must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Customer Experience Improvement Program.
+
+If Customer Experience Improvement &quot;Program Status&quot; is &quot;Joined&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Customer Experience Improvement Program.
+
+Click &quot;Leave Program&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000253</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must enforce SNMPv3 security features where SNMP is required.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001967
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. SNMPv3 can be configured for identification and cryptographically based authentication.
+
+SNMPv3 defines a user-based security model (USM) and a view-based access control model (VACM). SNMPv3 USM provides data integrity, data origin authentication, message replay protection, and protection against disclosure of the message payload. SNMPv3 VACM provides access control to determine whether a specific type of access (read or write) to the management information is allowed. Implement both VACM and USM for full protection.
+
+SNMPv3 must be disabled by default and enabled only if used. SNMP v3 provides security feature enhancements to SNMP, including encryption and message authentication.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000253</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must enforce SNMPv3 security features where SNMP is required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. SNMPv3 can be configured for identification and cryptographically based authentication.
+
+SNMPv3 defines a user-based security model (USM) and a view-based access control model (VACM). SNMPv3 USM provides data integrity, data origin authentication, message replay protection, and protection against disclosure of the message payload. SNMPv3 VACM provides access control to determine whether a specific type of access (read or write) to the management information is allowed. Implement both VACM and USM for full protection.
+
+SNMPv3 must be disabled by default and enabled only if used. SNMP v3 provides security feature enhancements to SNMP, including encryption and message authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">At the command prompt on the vCenter Server Appliance, run the following commands:
+
+# appliancesh
+# snmp.get
+
+Note: The &quot;appliancesh&quot; command is not needed if the default shell has not been changed for root.
+
+If &quot;Enable&quot; is set to &quot;False&quot;, this is not a finding.
+
+If &quot;Enable&quot; is set to &quot;True&quot; and &quot;Authentication&quot; is not set to &quot;SHA1&quot;, this is a finding.
+
+If &quot;Enable&quot; is set to &quot;True&quot; and &quot;Privacy&quot; is not set to &quot;AES128&quot;, this is a finding.
+
+If any &quot;Users&quot; are configured with a &quot;Sec_level&quot; that does not equal &quot;priv&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">At the command prompt on the vCenter Server Appliance, run the following commands:
+
+# appliancesh
+# snmp.set --authentication SHA1
+# snmp.set --privacy AES128
+
+To change the security level of a user, run the following command:
+
+# snmp.set --users &lt;username&gt;&#x2F;&lt;auth_password&gt; &lt;priv_password&gt;&#x2F;priv</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000265</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must disable SNMPv1&#x2F;2 receivers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001967
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1&#x2F;2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1&#x2F;2 in the UI and SNMPv3 in the CLI.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.1.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: False
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.2.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.3.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.4.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000265</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must disable SNMPv1&#x2F;2 receivers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1&#x2F;2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1&#x2F;2 in the UI and SNMPv3 in the CLI.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;SNMP receivers&quot; tab, note the presence of any enabled receiver.
+
+If there are any enabled receivers, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;SNMP receivers&quot; tab, ensure all receivers are disabled.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000266</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002238
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By requiring that Single Sign-On (SSO) accounts be unlocked manually, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. When the account unlock time is set to zero, once an account is locked it can only be unlocked manually by an administrator.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).AutoUnlockIntervalSec stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 300
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000266</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By requiring that Single Sign-On (SSO) accounts be unlocked manually, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. When the account unlock time is set to zero, once an account is locked it can only be unlocked manually by an administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+View the value of the &quot;Unlock time&quot; setting.
+
+Unlock time: 0 seconds
+
+If the lockout policy is not configured with &quot;Unlock time&quot; policy of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Unlock time&quot; to &quot;0&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000267</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable the distributed virtual switch health check.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Network health check is disabled by default. Once enabled, the health check packets contain information on host#, vds#, and port#, which an attacker would find useful. It is recommended that network health check be used for troubleshooting and turned off when troubleshooting is finished.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000267</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable the distributed virtual switch health check.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Network health check is disabled by default. Once enabled, the health check packets contain information on host#, vds#, and port#, which an attacker would find useful. It is recommended that network health check be used for troubleshooting and turned off when troubleshooting is finished.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Health Check.
+
+View the health check pane and verify the &quot;VLAN and MTU&quot; and &quot;Teaming and failover&quot; checks are &quot;Disabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$vds &#x3D; Get-VDSwitch
+$vds.ExtensionData.Config.HealthCheckConfig
+
+If the health check feature is enabled on distributed switches and is not on temporarily for troubleshooting purposes, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Health Check.
+
+Click &quot;Edit&quot;.
+
+Disable the &quot;VLAN and MTU&quot; and &quot;Teaming and failover&quot; checks.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-View -ViewType DistributedVirtualSwitch | ?{($_.config.HealthCheckConfig | ?{$_.enable -notmatch &quot;False&quot;})}| %{$_.UpdateDVSHealthCheckConfig(@((New-Object Vmware.Vim.VMwareDVSVlanMtuHealthCheckConfig -property @{enable&#x3D;0}),(New-Object Vmware.Vim.VMwareDVSTeamingHealthCheckConfig -property @{enable&#x3D;0})))}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000268</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must set the distributed port group Forged Transmits policy to &quot;Reject&quot;.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the virtual machine operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+When the &quot;Forged Transmits&quot; option is set to &quot;Accept&quot;, ESXi does not compare source and effective MAC addresses.
+
+To protect against MAC impersonation, set the &quot;Forged Transmits&quot; option to &quot;Reject&quot;. The host compares the source MAC address being transmitted by the guest operating system with the effective MAC address for its virtual machine adapter to determine if they match. If the addresses do not match, the ESXi host drops the packet.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000268</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must set the distributed port group Forged Transmits policy to &quot;Reject&quot;.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the virtual machine operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+When the &quot;Forged Transmits&quot; option is set to &quot;Accept&quot;, ESXi does not compare source and effective MAC addresses.
+
+To protect against MAC impersonation, set the &quot;Forged Transmits&quot; option to &quot;Reject&quot;. The host compares the source MAC address being transmitted by the guest operating system with the effective MAC address for its virtual machine adapter to determine if they match. If the addresses do not match, the ESXi host drops the packet.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;Forged Transmits&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;Forged Transmits&quot; policy is set to accept for a non-uplink port, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;Forged Transmits&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -ForgedTransmits $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -ForgedTransmits $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000269</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to &quot;Reject&quot;.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the virtual machine operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent virtual machines from changing their effective MAC address and will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000269</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to &quot;Reject&quot;.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the virtual machine operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent virtual machines from changing their effective MAC address and will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;MAC Address Changes&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;MAC Address Changes&quot; policy is set to accept, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -MacChanges $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -MacChanges $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000270</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must set the distributed port group Promiscuous Mode policy to &quot;Reject&quot;.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When promiscuous mode is enabled for a virtual switch, all virtual machines connected to the port group have the potential of reading all packets across that network, meaning only the virtual machines connected to that port group.
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000270</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must set the distributed port group Promiscuous Mode policy to &quot;Reject&quot;.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When promiscuous mode is enabled for a virtual switch, all virtual machines connected to the port group have the potential of reading all packets across that network, meaning only the virtual machines connected to that port group.
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;Promiscuous Mode&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;Promiscuous Mode&quot; policy is set to accept, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -AllowPromiscuous $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -AllowPromiscuous $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000271</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must only send NetFlow traffic to authorized collectors.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and can contain information about the virtual network, making it easier for a man-in-the-middle attack to be executed successfully. If NetFlow export is required, verify that all NetFlow target Internet Protocols (IPs) are correct.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000271</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must only send NetFlow traffic to authorized collectors.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and can contain information about the virtual network, making it easier for a man-in-the-middle attack to be executed successfully. If NetFlow export is required, verify that all NetFlow target Internet Protocols (IPs) are correct.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+To view NetFlow Collector IPs configured on distributed switches:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; NetFlow.
+
+View the NetFlow pane and verify any collector IP addresses are valid and in use for troubleshooting.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;NetFlowCollectorIPs&quot;;E&#x3D;{$_.ExtensionData.config.IpfixConfig.CollectorIpAddress}}
+
+To view if NetFlow is enabled on any distributed port groups:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed port group &gt;&gt; Manage &gt;&gt; Settings &gt;&gt; Policies.
+
+Go to &quot;Monitoring&quot; and view the NetFlow status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | Select Name,VirtualSwitch,@{N&#x3D;&quot;NetFlowEnabled&quot;;E&#x3D;{$_.Extensiondata.Config.defaultPortConfig.ipfixEnabled.Value}}
+
+If NetFlow is configured and the collector IP is not known and documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To remove collector IPs, do the following:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; NetFlow.
+
+Click &quot;Edit&quot;.
+
+Remove any unknown collector IPs.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$dvs &#x3D; Get-VDSwitch dvswitch | Get-View
+ForEach($vs in $dvs){
+$spec &#x3D; New-Object VMware.Vim.VMwareDVSConfigSpec
+$spec.configversion &#x3D; $vs.Config.ConfigVersion
+$spec.IpfixConfig &#x3D; New-Object VMware.Vim.VMwareIpfixConfig
+$spec.IpfixConfig.CollectorIpAddress &#x3D; &quot;&quot;
+$spec.IpfixConfig.CollectorPort &#x3D; &quot;0&quot;
+$spec.IpfixConfig.ActiveFlowTimeout &#x3D; &quot;60&quot;
+$spec.IpfixConfig.IdleFlowTimeout &#x3D; &quot;15&quot;
+$spec.IpfixConfig.SamplingRate &#x3D; &quot;0&quot;
+$spec.IpfixConfig.InternalFlowsOnly &#x3D; $False
+$vs.ReconfigureDvs_Task($spec)
+}
+
+Note: This will reset the NetFlow collector configuration back to the defaults.
+
+To disable NetFlow on a distributed port group, do the following:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Monitoring&quot; tab.
+
+Change &quot;NetFlow&quot; to &quot;Disabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.defaultPortConfig &#x3D; New-Object VMware.Vim.VMwareDVSPortSetting
+$spec.defaultPortConfig.ipfixEnabled &#x3D; New-Object VMware.Vim.BoolPolicy
+$spec.defaultPortConfig.ipfixEnabled.inherited &#x3D; $false
+$spec.defaultPortConfig.ipfixEnabled.value &#x3D; $false
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000272</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ESXi does not use the concept of native VLAN. Frames with VLAN specified in the port group will have a tag, but frames with VLAN not specified in the port group are not tagged and therefore will end up belonging to native VLAN of the physical switch.
+
+For example, frames on VLAN 1 from a Cisco physical switch will be untagged, because this is considered as the native VLAN. However, frames from ESXi specified as VLAN 1 will be tagged with a &quot;1&quot;; therefore, traffic from ESXi that is destined for the native VLAN will not be correctly routed (because it is tagged with a &quot;1&quot; instead of being untagged), and traffic from the physical switch coming from the native VLAN will not be visible (because it is not tagged).
+
+If the ESXi virtual switch port group uses the native VLAN ID, traffic from those virtual machines will not be visible to the native VLAN on the switch, because the switch is expecting untagged traffic.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000272</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ESXi does not use the concept of native VLAN. Frames with VLAN specified in the port group will have a tag, but frames with VLAN not specified in the port group are not tagged and therefore will end up belonging to native VLAN of the physical switch.
+
+For example, frames on VLAN 1 from a Cisco physical switch will be untagged, because this is considered as the native VLAN. However, frames from ESXi specified as VLAN 1 will be tagged with a &quot;1&quot;; therefore, traffic from ESXi that is destined for the native VLAN will not be correctly routed (because it is tagged with a &quot;1&quot; instead of being untagged), and traffic from the physical switch coming from the native VLAN will not be visible (because it is not tagged).
+
+If the ESXi virtual switch port group uses the native VLAN ID, traffic from those virtual machines will not be visible to the native VLAN on the switch, because the switch is expecting untagged traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group VLAN tags and verify they are not set to the native VLAN ID of the attached physical switch.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | select Name, VlanConfiguration
+
+If any port group is configured with the native VLAN of the ESXi hosts attached physical switch, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+Change the VLAN ID to a non-native VLAN.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup &quot;portgroup name&quot; | Set-VDVlanConfiguration -VlanId &quot;New VLAN#&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000273</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When a port group is set to VLAN Trunking, the vSwitch passes all network frames in the specified range to the attached virtual machines without modifying the virtual local area network (VLAN) tags. In vSphere, this is referred to as VGT.
+
+The virtual machine must process the VLAN information itself via an 802.1Q driver in the operating system. VLAN Trunking must only be implemented if the attached virtual machines have been specifically authorized and are capable of managing VLAN tags themselves.
+
+If VLAN Trunking is enabled inappropriately, it may cause a denial of service or allow a virtual machine to interact with traffic on an unauthorized VLAN.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000273</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When a port group is set to VLAN Trunking, the vSwitch passes all network frames in the specified range to the attached virtual machines without modifying the virtual local area network (VLAN) tags. In vSphere, this is referred to as VGT.
+
+The virtual machine must process the VLAN information itself via an 802.1Q driver in the operating system. VLAN Trunking must only be implemented if the attached virtual machines have been specifically authorized and are capable of managing VLAN tags themselves.
+
+If VLAN Trunking is enabled inappropriately, it may cause a denial of service or allow a virtual machine to interact with traffic on an unauthorized VLAN.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group &quot;VLAN Type&quot; and &quot;VLAN trunk range&quot;, if present.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | Where {$_.ExtensionData.Config.Uplink -ne &quot;True&quot;} | Select Name,VlanConfiguration
+
+If any port group is configured with &quot;VLAN trunking&quot; and is not documented as a needed exception (such as NSX appliances), this is a finding.
+
+If any port group is authorized to be configured with &quot;VLAN trunking&quot; but is not configured with the most limited range necessary, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+If &quot;VLAN trunking&quot; is not authorized, remove it by setting &quot;VLAN type&quot; to &quot;VLAN&quot; and configure an appropriate VLAN ID. Click &quot;OK&quot;.
+
+If &quot;VLAN trunking&quot; is authorized but the range is too broad, modify the range in the &quot;VLAN trunk range&quot; field to the minimum necessary and authorized range. An example range would be &quot;1,3-5,8&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command to configure trunking:
+
+Get-VDPortgroup &quot;Portgroup Name&quot; | Set-VDVlanConfiguration -VlanTrunkRange &quot;&lt;VLAN Range(s) comma separated&gt;&quot;
+
+or
+
+Run this command to configure a single VLAN ID:
+
+Get-VDPortgroup &quot;Portgroup Name&quot; | Set-VDVlanConfiguration -VlanId &quot;&lt;New VLAN#&gt;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000274</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For example, Cisco Catalyst switches typically reserve VLANs 1001 to 1024 and 4094, while Nexus switches typically reserve 3968 to 4094.
+
+Check with the documentation for the organization&#39;s specific switch. Using a reserved VLAN might result in a denial of service on the network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000274</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For example, Cisco Catalyst switches typically reserve VLANs 1001 to 1024 and 4094, while Nexus switches typically reserve 3968 to 4094.
+
+Check with the documentation for the organization&#39;s specific switch. Using a reserved VLAN might result in a denial of service on the network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group VLAN tags and verify that they are not set to a reserved VLAN ID.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | select Name, VlanConfiguration
+
+If any port group is configured with a reserved VLAN ID, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab. Change the VLAN ID to an unreserved VLAN ID.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup &quot;portgroup name&quot; | Set-VDVlanConfiguration -VlanId &quot;New VLAN#&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000275</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must configure the &quot;vpxuser&quot; auto-password to be changed every 30 days.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By default, vCenter will change the &quot;vpxuser&quot; password automatically every 30 days. Ensure this setting meets site policies. If it does not, configure it to meet password aging policies.
+
+Note: It is very important the password aging policy is not shorter than the default interval that is set to automatically change the &quot;vpxuser&quot; password to preclude the possibility that vCenter might be locked out of an ESXi host.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name VirtualCenter.VimPasswordExpirationInDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000275</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must configure the &quot;vpxuser&quot; auto-password to be changed every 30 days.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By default, vCenter will change the &quot;vpxuser&quot; password automatically every 30 days. Ensure this setting meets site policies. If it does not, configure it to meet password aging policies.
+
+Note: It is very important the password aging policy is not shorter than the default interval that is set to automatically change the &quot;vpxuser&quot; password to preclude the possibility that vCenter might be locked out of an ESXi host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;VirtualCenter.VimPasswordExpirationInDays&quot; is set to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays
+
+If the &quot;VirtualCenter.VimPasswordExpirationInDays&quot; is set to a value other than &quot;30&quot; or does not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;VirtualCenter.VimPasswordExpirationInDays&quot; value to &quot;30&quot; or if the value does not exist create it by entering the values in the &quot;Key&quot; and &quot;Value&quot; fields and clicking &quot;Add&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+If the setting already exists:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays | Set-AdvancedSetting -Value 30
+
+If the setting does not exist:
+
+New-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays -Value 30</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000276</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must configure the &quot;vpxuser&quot; password to meet length policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;vpxuser&quot; password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet password length policies.
+
+Longer passwords make brute-force password attacks more difficult. The &quot;vpxuser&quot; password is added by vCenter, meaning no manual intervention is normally required. The &quot;vpxuser&quot; password length must never be modified to less than the default length of 32 characters.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.vpxd.hostPasswordLength | Select-Object -ExpandProperty Value stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000276</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must configure the &quot;vpxuser&quot; password to meet length policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;vpxuser&quot; password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet password length policies.
+
+Longer passwords make brute-force password attacks more difficult. The &quot;vpxuser&quot; password is added by vCenter, meaning no manual intervention is normally required. The &quot;vpxuser&quot; password length must never be modified to less than the default length of 32 characters.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;config.vpxd.hostPasswordLength&quot; is set to &quot;32&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.vpxd.hostPasswordLength and verify it is set to 32.
+
+If the &quot;config.vpxd.hostPasswordLength&quot; is set to a value other than &quot;32, this is a finding.
+
+If the setting does not exist, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;config.vpxd.hostPasswordLength&quot; value to &quot;32&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.vpxd.hostPasswordLength | Set-AdvancedSetting -Value 32</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000277</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter and the embedded Lifecycle Manager system must never have a direct route to the internet. Despite this, updates and patches sourced from VMware on the internet must be delivered in a timely manner.
+
+There are two methods to accomplish this: a proxy server and the Update Manager Download Service (UMDS). UMDS is an optional module for Lifecycle Manager that fetches upgrades for virtual appliances, patch metadata, patch binaries, and notifications that would not otherwise be available to an isolated Lifecycle Manager directly.
+
+Alternatively, a proxy for Lifecycle Manager can be configured to allow controlled, limited access to the public internet for the sole purpose of patch gathering. Either solution mitigates the risk of internet connectivity by limiting its scope and use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000277</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter and the embedded Lifecycle Manager system must never have a direct route to the internet. Despite this, updates and patches sourced from VMware on the internet must be delivered in a timely manner.
+
+There are two methods to accomplish this: a proxy server and the Update Manager Download Service (UMDS). UMDS is an optional module for Lifecycle Manager that fetches upgrades for virtual appliances, patch metadata, patch binaries, and notifications that would not otherwise be available to an isolated Lifecycle Manager directly.
+
+Alternatively, a proxy for Lifecycle Manager can be configured to allow controlled, limited access to the public internet for the sole purpose of patch gathering. Either solution mitigates the risk of internet connectivity by limiting its scope and use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the following conditions:
+
+1. Lifecycle Manager must be configured to use the UMDS.
+
+OR
+
+2. Lifecycle Manager must be configured to use a proxy server for access to VMware patch repositories.
+
+OR
+
+3. Lifecycle Manager must disable internet patch repositories and any patches must be manually validated and imported as needed.
+
+Option 1:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Verify the &quot;Download patches from a UMDS shared repository&quot; radio button is selected and that a valid UMDS repository is supplied.
+
+Click &quot;Cancel&quot;.
+
+If this is not set, this is a finding.
+
+Option 2:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Verify the &quot;Download patches directly from the internet&quot; radio button is selected.
+
+Click &quot;Cancel&quot;.
+
+Navigate to the vCenter Server Management interface at https:&#x2F;&#x2F;&lt;vcenter dns&gt;:5480 &gt;&gt; Networking &gt;&gt; Proxy Settings.
+
+Verify that &quot;HTTPS&quot; is &quot;Enabled&quot;.
+
+Click the &quot;HTTPS&quot; row.
+
+Verify the proxy server configuration is accurate.
+
+If this is not set, this is a finding.
+
+Option 3:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Downloads.
+
+Verify the &quot;Automatic downloads&quot; option is disabled.
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Verify any download sources are disabled.
+
+If this is not set, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Option 1:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Select the &quot;Download patches from a UMDS shared repository&quot; radio button and supply a valid UMDS repository.
+
+Click &quot;Save&quot;.
+
+Option 2:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Select the &quot;Download patches directly from the internet&quot; radio button.
+
+Click &quot;Save&quot;.
+
+Navigate to the vCenter Server Management interface at https:&#x2F;&#x2F;&lt;vcenter dns&gt;:5480 &gt;&gt; Networking &gt;&gt; Proxy Settings.
+
+Click &quot;Edit&quot;.
+
+Slide &quot;HTTPS&quot; to &quot;Enabled&quot;.
+
+Supply the appropriate proxy server configuration.
+
+Click &quot;Save&quot;.
+
+Option 3:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Downloads.
+
+Click &quot;Edit&quot; and uncheck &quot;Download patches&quot;.
+
+Under &quot;Patch Setup&quot; select each download source and click Disable.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000278</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must use unique service accounts when applications connect to vCenter.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To not violate nonrepudiation (i.e., deny the authenticity of who is connecting to vCenter), when applications need to connect to vCenter they must use unique service accounts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000278</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must use unique service accounts when applications connect to vCenter.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To not violate nonrepudiation (i.e., deny the authenticity of who is connecting to vCenter), when applications need to connect to vCenter they must use unique service accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify each external application that connects to vCenter has a unique service account dedicated to that application.
+
+For example, there should be separate accounts for Log Insight, Operations Manager, or anything else that requires an account to access vCenter.
+
+If any application shares a service account that is used to connect to vCenter, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For applications sharing service accounts, create a new service account to assign to the application so that no application shares a service account with another.
+
+When standing up a new application that requires access to vCenter, always create a new service account prior to installation and grant only the permissions needed for that application.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000279</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Virtual machines might share virtual switches and virtual local area networks (VLAN) with the IP-based storage configurations.
+
+IP-based storage includes vSAN, Internet Small Computer System Interface (iSCSI), and Network File System (NFS). This configuration might expose IP-based storage traffic to unauthorized virtual machine users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from the production traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and virtual machines will limit unauthorized users from viewing the traffic.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000279</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Virtual machines might share virtual switches and virtual local area networks (VLAN) with the IP-based storage configurations.
+
+IP-based storage includes vSAN, Internet Small Computer System Interface (iSCSI), and Network File System (NFS). This configuration might expose IP-based storage traffic to unauthorized virtual machine users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from the production traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and virtual machines will limit unauthorized users from viewing the traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If IP-based storage is not used, this is not applicable.
+
+IP-based storage (iSCSI, NFS, vSAN) VMkernel port groups must be in a dedicated VLAN that can be on a standard or distributed virtual switch that is logically separated from other traffic types.
+
+The check for this will be unique per environment.
+
+To check a standard switch, do the following:
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; Virtual switches. Select a standard switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and note the VLAN ID associated with each port group.
+
+Verify it is dedicated to that purpose and is logically separated from other traffic types.
+
+To check a distributed switch, do the following,
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select and expand a distributed switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and navigate to the &quot;Summary&quot; tab.
+
+Note the VLAN ID associated with each port group and verify it is dedicated to that purpose and is logically separated from other traffic types.
+
+If any IP-based storage networks are not isolated from other traffic types, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configuration of an IP-based VMkernel will be unique to each environment.
+
+To configure VLANs and traffic types, do the following:
+
+Standard switch:
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the Storage VMkernel (for any IP-based storage). Click &quot;Edit...&quot; and click the &quot;Port properties&quot; tab.
+
+Uncheck everything (unless vSAN).
+
+Click the &quot;IPv4&quot; settings or &quot;IPv6&quot; settings tab.
+
+Enter the appropriate IP address and subnet information.
+
+Click &quot;OK&quot;.
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; Virtual switches. Select a standard switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and click &quot;...&quot;. Click &quot;Edit Settings&quot;. On the &quot;Properties&quot; tab, enter the appropriate VLAN ID and click &quot;OK&quot;.
+
+Distributed switch:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Topology.
+
+Select the Storage VMkernel (for any IP-based storage). Click &quot;...&quot; and click &quot;Edit Settings&quot;.
+
+On the &quot;Port properties&quot; tab, uncheck everything (unless vSAN).
+
+Click the &quot;IPv4&quot; settings or &quot;IPv6&quot; settings tab.
+
+Enter the appropriate IP address and subnet information.
+
+Click &quot;OK&quot;.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select and expand a distributed switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and navigate to Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+Enter the appropriate VLAN type and ID and click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000280</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must be configured to send events to a central log server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter server generates volumes of security-relevant application-level events. Examples include logins, system reconfigurations, system degradation warnings, and more. To ensure these events are available for forensic analysis and correlation, they must be sent to the syslog and forwarded on to the configured Security Information and Event Management (SIEM) system and&#x2F;or central log server.
+
+The vCenter server sends events to syslog by default, but this configuration must be verified and maintained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name vpxd.event.syslog.enabled | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000280</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must be configured to send events to a central log server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter server generates volumes of security-relevant application-level events. Examples include logins, system reconfigurations, system degradation warnings, and more. To ensure these events are available for forensic analysis and correlation, they must be sent to the syslog and forwarded on to the configured Security Information and Event Management (SIEM) system and&#x2F;or central log server.
+
+The vCenter server sends events to syslog by default, but this configuration must be verified and maintained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;vpxd.event.syslog.enabled&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name vpxd.event.syslog.enabled
+
+If the &quot;vpxd.event.syslog.enabled&quot; value is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;vpxd.event.syslog.enabled&quot; setting to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name vpxd.event.syslog.enabled | Set-AdvancedSetting -Value true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000281</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSAN Health Check is able to download the HCL from VMware to check compliance against the underlying vSAN Cluster hosts. To ensure the vCenter server is not directly downloading content from the internet, this functionality must be disabled. If this feature is necessary, an external proxy server must be configured.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vsanhealthview &#x3D; Get-VsanView -Id VsanVcClusterHealthSystem-vsan-cluster-health-system; $vsanhealthview.VsanHealthQueryVsanProxyConfig().Host stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000281</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSAN Health Check is able to download the HCL from VMware to check compliance against the underlying vSAN Cluster hosts. To ensure the vCenter server is not directly downloading content from the internet, this functionality must be disabled. If this feature is necessary, an external proxy server must be configured.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Internet Connectivity.
+
+If the HCL internet download is not required, verify &quot;Status&quot; is &quot;Disabled&quot;.
+
+If the &quot;Status&quot; is &quot;Enabled&quot;, this is a finding.
+
+If the HCL internet download is required, verify &quot;Status&quot; is &quot;Enabled&quot; and a proxy host is configured.
+
+If &quot;Status&quot; is &quot;Enabled&quot; and a proxy is not configured, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Internet Connectivity.
+
+Click &quot;Edit&quot;.
+
+If the HCL internet download is not required, ensure that &quot;Status&quot; is &quot;Disabled&quot;.
+
+If the HCL internet download is required, ensure that &quot;Status&quot; is &quot;Enabled&quot; and that a proxy host is appropriately configured.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000282</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must configure the vSAN Datastore name to a unique name.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A vSAN Datastore name by default is &quot;vsanDatastore&quot;. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">is expected not to cmp &#x3D;&#x3D; &quot;vsanDatastore&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: vsanDatastore
+     got: vsanDatastore
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000282</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must configure the vSAN Datastore name to a unique name.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A vSAN Datastore name by default is &quot;vsanDatastore&quot;. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Datastores.
+
+Review the datastores and identify any datastores with &quot;vSAN&quot; as the datastore type.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
+Write-Host &quot;vSAN Enabled Cluster found&quot;
+Get-Cluster | where {$_.VsanEnabled} | Get-Datastore | where {$_.type -match &quot;vsan&quot;}
+}
+else{
+Write-Host &quot;vSAN is not enabled, this finding is not applicable.&quot;
+}
+
+If vSAN is enabled and a datastore is named &quot;vsanDatastore&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Datastores.
+
+Right-click on the datastore named &quot;vsanDatastore&quot; and select &quot;Rename&quot;.
+
+Rename the datastore based on site-specific naming standards.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
+Write-Host &quot;vSAN Enabled Cluster found&quot;
+$Clusters &#x3D; Get-Cluster | where {$_.VsanEnabled}
+Foreach ($clus in $clusters){
+ $clus | Get-Datastore | where {$_.type -match &quot;vsan&quot;} | Set-Datastore -Name $(($clus.name) + &quot;_vSAN_Datastore&quot;)
+}
+}
+else{
+Write-Host &quot;vSAN is not enabled, this finding is not applicable.&quot;
+}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000283</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable Username&#x2F;Password and Windows Integrated Authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          All forms of authentication other than Common Access Card (CAC) must be disabled. Password authentication can be temporarily reenabled for emergency access to the local Single Sign-On (SSO) accounts or Active Directory user&#x2F;pass accounts, but it must be disabled as soon as CAC authentication is functional.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).PasswordAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).WindowsAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000283</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable Username&#x2F;Password and Windows Integrated Authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">All forms of authentication other than Common Access Card (CAC) must be disabled. Password authentication can be temporarily reenabled for emergency access to the local Single Sign-On (SSO) accounts or Active Directory user&#x2F;pass accounts, but it must be disabled as soon as CAC authentication is functional.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a federated identity provider is configured and used for an identity source, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under &quot;Authentication method&quot;, examine the allowed methods.
+
+If &quot;Smart card authentication&quot; is not enabled and &quot;Password and windows session authentication&quot; is not disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Next to &quot;Authentication method&quot;, click &quot;Edit&quot;.
+
+Select to radio button to &quot;Enable smart card authentication&quot;.
+
+Click &quot;Save&quot;.
+
+To re-enable password authentication for troubleshooting purposes, run the following command on the vCenter Server Appliance:
+
+# &#x2F;opt&#x2F;vmware&#x2F;bin&#x2F;sso-config.sh -set_authn_policy -pwdAuthn true -winAuthn false -certAuthn false -securIDAuthn false -t vsphere.local</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000284</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must restrict access to the default roles with cryptographic permissions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In vSphere, the built-in &quot;Administrator&quot; role contains permission to perform cryptographic operations such as Key Management Server (KMS) functions and encrypting and decrypting virtual machine disks. This role must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use.
+
+A new built-in role called &quot;No Cryptography Administrator&quot; exists to provide all administrative permissions except cryptographic operations. Permissions must be restricted such that normal vSphere administrators are assigned the &quot;No Cryptography Administrator&quot; role or more restrictive.
+
+The &quot;Administrator&quot; role must be tightly controlled and must not be applied to administrators who will not be doing cryptographic work. Catastrophic data loss can result from poorly administered cryptography.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrator is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000284</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must restrict access to the default roles with cryptographic permissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In vSphere, the built-in &quot;Administrator&quot; role contains permission to perform cryptographic operations such as Key Management Server (KMS) functions and encrypting and decrypting virtual machine disks. This role must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use.
+
+A new built-in role called &quot;No Cryptography Administrator&quot; exists to provide all administrative permissions except cryptographic operations. Permissions must be restricted such that normal vSphere administrators are assigned the &quot;No Cryptography Administrator&quot; role or more restrictive.
+
+The &quot;Administrator&quot; role must be tightly controlled and must not be applied to administrators who will not be doing cryptographic work. Catastrophic data loss can result from poorly administered cryptography.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">By default, there are four roles that contain cryptographic related permissions: Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager.
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Where {$_.Role -eq &quot;Admin&quot; -or $_.Role -eq &quot;NoTrustedAdmin&quot; -or $_.Role -eq &quot;vCLSAdmin&quot; -or $_.Role -eq &quot;vSphereKubernetesManager&quot;} | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+If there are any users or groups assigned to the default roles with cryptographic permissions and are not explicitly designated to perform cryptographic operations, this is a finding.
+
+The built-in solution users assigned to the administrator role are NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Move any accounts not explicitly designated for cryptographic operations, other than Solution Users, to other roles such as &quot;No Cryptography Administrator&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000285</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must restrict access to cryptographic permissions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          These permissions must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use. Catastrophic data loss can result from poorly administered cryptography.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">NoTrustedAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Admin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vSphereKubernetesManager is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vCLSAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000285</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must restrict access to cryptographic permissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">These permissions must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use. Catastrophic data loss can result from poorly administered cryptography.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">By default, there are four roles that contain cryptographic related permissions: Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager.
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Highlight each role and click the &#39;Privileges&quot; button in the right pane.
+
+Verify that only the Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager and any site-specific cryptographic roles have the following permissions:
+
+Cryptographic Operations privileges
+Global.Diagnostics
+Host.Inventory.Add host to cluster
+Host.Inventory.Add standalone host
+Host.Local operations.Manage user groups
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$roles &#x3D; Get-VIRole
+ForEach($role in $roles){
+    $privileges &#x3D; $role.PrivilegeList
+    If($privileges -match &quot;Crypto*&quot; -or $privileges -match &quot;Global.Diagnostics&quot; -or $privileges -match &quot;Host.Inventory.Add*&quot; -or $privileges -match &quot;Host.Local operations.Manage user groups&quot;){
+    Write-Host &quot;$role has Cryptographic privileges&quot;
+    }
+}
+
+If any role other than the four default roles contain the permissions listed above and is not authorized to perform cryptographic related operations, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Highlight the target custom role and click &quot;Edit&quot;.
+
+Remove the following permissions from any custom role that is not authorized to perform cryptographic related operations:
+
+Cryptographic Operations privileges
+Global.Diagnostics
+Host.Inventory.Add host to cluster
+Host.Inventory.Add standalone host
+Host.Local operations.Manage user groups</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000286</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, the potential exists for a man-in-the-middle attack in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vSAN iSCSI service not enabled on cluster: cluster0...this is not applicable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000286</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, the potential exists for a man-in-the-middle attack in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN or if vSAN is enabled but iSCSI is not enabled, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; iSCSI Target Service.
+
+For each iSCSI target, review the value in the &quot;Authentication&quot; column.
+
+If the Authentication method is not set to &quot;CHAP_Mutual&quot; for any iSCSI target, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; iSCSI Target Service.
+
+For each iSCSI target, select the item and click &quot;Edit&quot;.
+
+Change the &quot;Authentication&quot; field to &quot;Mutual CHAP&quot; and configure the incoming and outgoing users and secrets appropriately.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000287</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The KEK for a vSAN encrypted datastore is generated by the Key Management Server (KMS) and serves as a wrapper and lock around the Disk Encryption Key (DEK). The DEK is generated by the host and is used to encrypt and decrypt the datastore. A shallow rekey is a procedure in which the KMS issues a new KEK to the ESXi host, which rewraps the DEK but does not change the DEK or any data on disk.
+
+This operation must be done on a regular, site-defined interval and can be viewed as similar in criticality to changing an administrative password. If the KMS is compromised, a standing operational procedure to rekey will put a time limit on the usefulness of any stolen KMS data.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000287</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The KEK for a vSAN encrypted datastore is generated by the Key Management Server (KMS) and serves as a wrapper and lock around the Disk Encryption Key (DEK). The DEK is generated by the host and is used to encrypt and decrypt the datastore. A shallow rekey is a procedure in which the KMS issues a new KEK to the ESXi host, which rewraps the DEK but does not change the DEK or any data on disk.
+
+This operation must be done on a regular, site-defined interval and can be viewed as similar in criticality to changing an administrative password. If the KMS is compromised, a standing operational procedure to rekey will put a time limit on the usefulness of any stolen KMS data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If vSAN is not in use, this is not applicable.
+
+Interview the system administrator (SA) to determine that a procedure has been put in place to perform a shallow rekey of all vSAN encrypted datastores at regular, site-defined intervals.
+
+VMware recommends a 60-day rekey task, but this interval must be defined by the SA and the information system security officer (ISSO).
+
+If vSAN encryption is not in use, this is not a finding.
+
+If vSAN encryption is in use and a regular rekey procedure is not in place, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If vSAN encryption is in use, ensure that a regular rekey procedure is in place.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000288</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an LDAP identity source.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          LDAP is an industry standard protocol for querying directory services such as Active Directory. This protocol can operate in clear text or over a Secure Sockets Layer (SSL)&#x2F;Transport Layer Security (TLS) encrypted tunnel. To protect confidentiality of LDAP communications, secure LDAP (LDAPS) must be explicitly configured when adding an LDAP identity source in vSphere Single Sign-On (SSO).
+
+When configuring an identity source and supplying an SSL certificate, vCenter will enforce LDAPS. The server URLs do not need to be explicitly provided if an SSL certificate is uploaded.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000288</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an LDAP identity source.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">LDAP is an industry standard protocol for querying directory services such as Active Directory. This protocol can operate in clear text or over a Secure Sockets Layer (SSL)&#x2F;Transport Layer Security (TLS) encrypted tunnel. To protect confidentiality of LDAP communications, secure LDAP (LDAPS) must be explicitly configured when adding an LDAP identity source in vSphere Single Sign-On (SSO).
+
+When configuring an identity source and supplying an SSL certificate, vCenter will enforce LDAPS. The server URLs do not need to be explicitly provided if an SSL certificate is uploaded.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If LDAP is not used as an identity provider, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click the &quot;Identity Sources&quot; tab.
+
+For each identity source of type &quot;Active Directory over LDAP&quot;, if the &quot;Server URL&quot; does not indicate &quot;ldaps:&#x2F;&#x2F;&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click the &quot;Identity Sources&quot; tab.
+
+For each identity source of type &quot;Active Directory over LDAP&quot; where LDAPS is not configured, highlight the item and click &quot;Edit&quot;.
+
+Ensure the primary and secondary server URLs, if specified, are configured for &quot;ldaps:&#x2F;&#x2F;&quot;.
+
+At the bottom, click the &quot;Browse&quot; button, select the AD LDAP cert previously exported to your local computer, click &quot;Open&quot;, and &quot;Save&quot; to complete modifications.
+
+Note: With LDAPS, the server must be a specific domain controller and its specific certificate or the domain alias with a certificate that is valid for that URL.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000290</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must limit membership to the &quot;SystemConfiguration.BashShellAdministrators&quot; Single Sign-On (SSO) group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter SSO integrates with PAM in the underlying Photon operating system so members of the &quot;SystemConfiguration.BashShellAdministrators&quot; SSO group can log on to the operating system without needing a separate account. However, even though unique SSO users log on, they are transparently using a group account named &quot;sso-user&quot; as far as Photon auditing is concerned. While the audit trail can still be traced back to the individual SSO user, it is a more involved process.
+
+To force accountability and nonrepudiation, the SSO group &quot;SystemConfiguration.BashShellAdministrators&quot; must be severely restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Administrator is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no groups found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No groups found in SystemConfiguration.BashShellAdministrators is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000290</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must limit membership to the &quot;SystemConfiguration.BashShellAdministrators&quot; Single Sign-On (SSO) group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter SSO integrates with PAM in the underlying Photon operating system so members of the &quot;SystemConfiguration.BashShellAdministrators&quot; SSO group can log on to the operating system without needing a separate account. However, even though unique SSO users log on, they are transparently using a group account named &quot;sso-user&quot; as far as Photon auditing is concerned. While the audit trail can still be traced back to the individual SSO user, it is a more involved process.
+
+To force accountability and nonrepudiation, the SSO group &quot;SystemConfiguration.BashShellAdministrators&quot; must be severely restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;SystemConfiguration.BashShellAdministrators&quot; group appears.
+
+Click &quot;SystemConfiguration.BashShellAdministrators&quot;.
+
+Review the members of the group and ensure that only authorized accounts are present.
+
+Note: By default the Administrator and a unique service account similar to &quot;vmware-applmgmtservice-714684a4-342f-4eff-a232-cdc21def00c2&quot; will be in the group and should not be removed.
+
+If there are any accounts present as members of SystemConfiguration.BashShellAdministrators that are not authorized, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;SystemConfiguration.BashShellAdministrators&quot; group appears.
+
+Click &quot;SystemConfiguration.BashShellAdministrators&quot;.
+
+Click the three vertical dots next to the name of each unauthorized account.
+
+Select &quot;Remove Member&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000291</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must limit membership to the &quot;TrustedAdmins&quot; Single Sign-On (SSO) group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere &quot;TrustedAdmins&quot; group grants additional rights to administer the vSphere Trust Authority feature.
+
+To force accountability and nonrepudiation, the SSO group &quot;TrustedAdmins&quot; must be severely restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no users found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No users found in TrustedAdmins is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no groups found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No groups found in TrustedAdmins is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000291</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must limit membership to the &quot;TrustedAdmins&quot; Single Sign-On (SSO) group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere &quot;TrustedAdmins&quot; group grants additional rights to administer the vSphere Trust Authority feature.
+
+To force accountability and nonrepudiation, the SSO group &quot;TrustedAdmins&quot; must be severely restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;TrustedAdmins&quot; group appears.
+
+Click &quot;TrustedAdmins&quot;.
+
+Review the members of the group and ensure that only authorized accounts are present.
+
+Note: These accounts act as root on the Photon operating system and have the ability to severely damage vCenter, inadvertently or otherwise.
+
+If there are any accounts present as members of TrustedAdmins that are not authorized, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;TrustedAdmins&quot; group appears.
+
+Click &quot;TrustedAdmins&quot;.
+
+Click the three vertical dots next to the name of each unauthorized account.
+
+Select &quot;Remove Member&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000292</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server configuration must be backed up on a regular basis.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter server is the control plane for the vSphere infrastructure and all the workloads it hosts. As such, vCenter is usually a highly critical system in its own right. Backups of vCenter can now be made at a data and configuration level versus traditional storage&#x2F;image-based backups. This reduces recovery time by letting the system administrator (SA) spin up a new vCenter while simultaneously importing the backed-up data.
+
+For sites that implement the Native Key Provider (NKP), introduced in 7.0 Update 2, regular vCenter backups are critical. In a recovery scenario where the virtual machine files are intact but vCenter was lost, the encrypted virtual machines will not be able to boot as their private keys were stored in vCenter after it was last backed up. When using the NKP, vCenter becomes critical to the virtual machine workloads and ceases to be just the control plane.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File based backups should be enabled. is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000292</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server configuration must be backed up on a regular basis.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter server is the control plane for the vSphere infrastructure and all the workloads it hosts. As such, vCenter is usually a highly critical system in its own right. Backups of vCenter can now be made at a data and configuration level versus traditional storage&#x2F;image-based backups. This reduces recovery time by letting the system administrator (SA) spin up a new vCenter while simultaneously importing the backed-up data.
+
+For sites that implement the Native Key Provider (NKP), introduced in 7.0 Update 2, regular vCenter backups are critical. In a recovery scenario where the virtual machine files are intact but vCenter was lost, the encrypted virtual machines will not be able to boot as their private keys were stored in vCenter after it was last backed up. When using the NKP, vCenter becomes critical to the virtual machine workloads and ceases to be just the control plane.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Option 1:
+
+If vCenter is backed up in a traditional manner, at the storage array level, interview the SA to determine configuration and schedule.
+
+Option 2:
+
+For vCenter native backup functionality, open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Backup&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify the &quot;Status&quot; is &quot;Enabled&quot;.
+
+Click &quot;Status&quot; to expand the backup details.
+
+If vCenter server backups are not configured and there is no other vCenter backup system, this is a finding.
+
+If the backup configuration is not set to a proper, reachable location or if the schedule is anything less frequent than &quot;Daily&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Option 1:
+
+Implement and document a VMware-supported storage&#x2F;image-based backup schedule.
+
+Option 2:
+
+To configure vCenter native backup functionality, open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Backup&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Configure&quot; (or &quot;Edit&quot; for an existing configuration).
+
+Enter site-specific information for the backup job.
+
+Ensure &quot;Schedule&quot; is set to &quot;Daily&quot;. Limiting the number of retained backups is recommended but not required.
+
+Click &quot;Create&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000293</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must have task and event retention set to at least 30 days.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter tasks and events contain valuable historical actions, useful in troubleshooting availability issues and for incident forensics. While vCenter events are sent to central log servers in real time, it is important that administrators have quick access to this information when needed.
+
+vCenter retains 30 days of tasks and events by default, and this is sufficient for most purposes. The vCenter disk partitions are also sized with this in mind. Decreasing is not recommended for operational reasons, while increasing is not recommended unless guided by VMware support due to the partition sizing concerns.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name event.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name task.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000293</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must have task and event retention set to at least 30 days.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter tasks and events contain valuable historical actions, useful in troubleshooting availability issues and for incident forensics. While vCenter events are sent to central log servers in real time, it is important that administrators have quick access to this information when needed.
+
+vCenter retains 30 days of tasks and events by default, and this is sufficient for most purposes. The vCenter disk partitions are also sized with this in mind. Decreasing is not recommended for operational reasons, while increasing is not recommended unless guided by VMware support due to the partition sizing concerns.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click to expand the &quot;Database&quot; section.
+
+Note the &quot;Task retention&quot; and &quot;Event retention&quot; values.
+
+If either value is configured to less than &quot;30&quot; days, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;Database&quot; tab, set the value for both &quot;Task retention&quot; and &quot;Event retention&quot; to &quot;30&quot; days (default) or greater, as required by your site.
+
+Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000294</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server Native Key Provider must be backed up with a strong password.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vCenter Native Key Provider feature was introduced in 7.0 U2 and acts as a key provider for encryption based capabilities such as encrypted virtual machines without requiring an external KMS solution.  When enabling this feature a backup must be taken which is a PKCS#12 formatted file and if no password is provided during the backup process this presents the opportunity for this to be used maliciously and compromise the environment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000294</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server Native Key Provider must be backed up with a strong password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vCenter Native Key Provider feature was introduced in 7.0 U2 and acts as a key provider for encryption based capabilities such as encrypted virtual machines without requiring an external KMS solution.  When enabling this feature a backup must be taken which is a PKCS#12 formatted file and if no password is provided during the backup process this presents the opportunity for this to be used maliciously and compromise the environment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the vCenter Native Key Provider feature is not in use, this is not applicable.
+
+Interview the system administrator and determine if a password was provided for any backups taken of the Native Key Provider.
+
+If backups exist for the Native Key Provider that are not password protected, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Key Providers.
+
+Select the Native Key Provider, click &quot;Back-up&quot;, and check the box &quot;Protect Native Key Provider data with password&quot;.
+
+Provide a strong password and click &quot;Back up key provider&quot;.
+
+Delete any previous backups that were not protected with a password.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000295</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must require authentication for published content libraries.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale. When publishing a content library it can be protected by requiring authentication for subscribers.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Authentication should be enabled on Content Library: STIG Content Library [&quot;publish_info&quot;, &quot;authentication_method&quot;] is expected to cmp &#x3D;&#x3D; &quot;BASIC&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: BASIC
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000295</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must require authentication for published content libraries.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale. When publishing a content library it can be protected by requiring authentication for subscribers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Content Libraries.
+
+Review the &quot;Password Protected&quot; column.
+
+If a content library is published and is not password protected, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Content Libraries.
+
+Select the target content library.
+
+Select &quot;Actions&quot; then &quot;Edit Settings&quot;.
+
+Click the checkbox to &quot;Enable user authentication for access to this content library&quot;.
+
+Enter and confirm a password for the content library. Click &quot;Ok&quot;.
+
+Note: Any subscribed content libraries will need to be updated to enable authentication and provide the password.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000296</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must enable the OVF security policy for content libraries.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale.
+
+You can protect the OVF items by applying default OVF security policy to a content library. The OVF security policy enforces strict validation on OVF items when you deploy or update the item, import items, or synchronize OVF and OVA templates. To make sure that the OVF and OVA templates are signed by a trusted certificate, you can add the OVF signing certificate from a trusted CA.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">OVF security policy should be enabled on Content Library: STIG Content Library [&quot;security_policy_id&quot;] is expected not to equal nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected not #&lt;NilClass:8&gt; &#x3D;&gt; nil
+         got #&lt;NilClass:8&gt; &#x3D;&gt; nil
+
+Compared using equal?, which compares object identity.
+
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000296</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must enable the OVF security policy for content libraries.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale.
+
+You can protect the OVF items by applying default OVF security policy to a content library. The OVF security policy enforces strict validation on OVF items when you deploy or update the item, import items, or synchronize OVF and OVA templates. To make sure that the OVF and OVA templates are signed by a trusted certificate, you can add the OVF signing certificate from a trusted CA.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Content Libraries.
+
+Review the &quot;Security Policy&quot; column.
+
+If a content library does not have the &quot;OVF default policy&quot; enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Content Libraries.
+
+Select the target content library.
+
+Select &quot;Actions&quot; then &quot;Edit Settings&quot;.
+
+Click the checkbox to &quot;Apply Security Policy&quot;. Click &quot;OK&quot;.
+
+Note: If you disable the security policy of a content library, you cannot reuse the existing OVF items.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000298</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must separate authentication and authorization for administrators.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Many organizations do both authentication and authorization using a centralized directory service such as Active Directory. Attackers who compromise an identity source can often add themselves to authorization groups, and simply log into systems they should not otherwise have access to. Additionally, reliance on central identity systems means that the administrators of those systems are potentially infrastructure administrators, too, as they can add themselves to infrastructure access groups at will.
+
+The use of local SSO groups for authorization helps prevent this avenue of attack by allowing the centralized identity source to still authenticate users but moving authorization into vCenter itself.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000298</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must separate authentication and authorization for administrators.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Many organizations do both authentication and authorization using a centralized directory service such as Active Directory. Attackers who compromise an identity source can often add themselves to authorization groups, and simply log into systems they should not otherwise have access to. Additionally, reliance on central identity systems means that the administrators of those systems are potentially infrastructure administrators, too, as they can add themselves to infrastructure access groups at will.
+
+The use of local SSO groups for authorization helps prevent this avenue of attack by allowing the centralized identity source to still authenticate users but moving authorization into vCenter itself.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+View the Administrator role and any other role providing administrative access to vCenter to verify the users and&#x2F;or groups assigned to it by clicking on &quot;Usage&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Sort Role | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+If any user or group is directly assigned a role with administrative access to vCenter that is from an identity provider, this is a finding.
+
+Note: Users and&#x2F;or groups assigned to roles should be from the &quot;VSPHERE.LOCAL&quot; identity source.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To add groups from an identity provider to the local SSO Administrators group, as an example, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Groups.
+
+Select the Administrators group and click &quot;Edit&quot;.
+
+In the &quot;Add Members&quot; section, select the identity source and type the name of the target user&#x2F;group in the search bar.
+
+Select the target user&#x2F;group to add them and click &quot;Save&quot;.
+
+Note: A new SSO group or groups can be created as needed and used to provide authorization to vCenter.
+
+To remove identity provider users&#x2F;groups from a role, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Global Permissions.
+
+Select the offending user&#x2F;group and click &quot;Delete&quot;.
+
+Note: If permissions are assigned on a specific object, then the role must be updated where it is assigned (for example, at the cluster level).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000299</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable CDP&#x2F;LLDP on distributed switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere Distributed Virtual Switch can participate in Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP), as a listener, advertiser, or both. The information is sensitive, including IP addresses, system names, software versions, and more. It can be used by an adversary to gain a better understanding of your environment, and to impersonate devices. It is also transmitted unencrypted on the network, and as such the recommendation is to disable it.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000299</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable CDP&#x2F;LLDP on distributed switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere Distributed Virtual Switch can participate in Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP), as a listener, advertiser, or both. The information is sensitive, including IP addresses, system names, software versions, and more. It can be used by an adversary to gain a better understanding of your environment, and to impersonate devices. It is also transmitted unencrypted on the network, and as such the recommendation is to disable it.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Discovery Protocol&quot; configuration.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | Select Name,LinkDiscoveryProtocolOperation
+
+If any distributed switch does not have &quot;Discovery Protocols&quot; disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select the advanced tab and update the &quot;Type&quot; under &quot;Discovery Protocol&quot; to disabled and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch -Name &quot;DSwitch&quot; | Set-VDSwitch -LinkDiscoveryProtocolOperation &quot;Disabled&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000300</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must remove unauthorized port mirroring sessions on distributed switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere Distributed Virtual Switch can enable port mirroring sessions allowing traffic to be mirrored from one source to a destination. If port mirroring is configured unknowingly this could allow an attacker to observe network traffic of virtual machines.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000300</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must remove unauthorized port mirroring sessions on distributed switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere Distributed Virtual Switch can enable port mirroring sessions allowing traffic to be mirrored from one source to a destination. If port mirroring is configured unknowingly this could allow an attacker to observe network traffic of virtual machines.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Port Mirroring.
+
+Review any configured &quot;Port Mirroring&quot; sessions.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;Port Mirroring Sessions&quot;;E&#x3D;{$_.ExtensionData.Config.VspanSession.Name}}
+
+If there are any unauthorized port mirroring sessions configured, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Port Mirroring.
+
+Select the unauthorized &quot;Port Mirroring&quot; session and click &quot;Remove&quot;. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000301</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must not override port group settings at the port level on distributed switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If there are cases where particular VMs require unique configurations then a different port group with the required configuration should be created instead of overriding port group settings.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000301</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must not override port group settings at the port level on distributed switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If there are cases where particular VMs require unique configurations then a different port group with the required configuration should be created instead of overriding port group settings.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Override port policies&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDPortgroup).ExtensionData.Config.Policy
+
+If there are any distributed port groups that allow overridden port policies, this is a finding.
+
+Note: This does not apply to the &quot;Block Ports&quot; or &quot;Configure reset at disconnect&quot; policies.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select advanced and update all port policies besides &quot;Block Ports&quot; to &quot;disabled&quot; and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.Policy &#x3D; New-Object VMware.Vim.VMwareDVSPortgroupPolicy
+$spec.Policy.VlanOverrideAllowed &#x3D; $False
+$spec.Policy.UplinkTeamingOverrideAllowed &#x3D; $False
+$spec.Policy.SecurityPolicyOverrideAllowed &#x3D; $False
+$spec.Policy.IpfixOverrideAllowed &#x3D; $False
+$spec.Policy.BlockOverrideAllowed &#x3D; $True
+$spec.Policy.ShapingOverrideAllowed &#x3D; $False
+$spec.Policy.VendorConfigOverrideAllowed &#x3D; $False
+$spec.Policy.TrafficFilterOverrideAllowed &#x3D; $False
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000302</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must reset port configuration when virtual machines are disconnected.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If any unknown or unauthorized per-port overrides exist and are not discarded when a virtual machine is disconnected from that port then a future virtual machine connected to that port may receive a less secure port.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000302</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must reset port configuration when virtual machines are disconnected.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If any unknown or unauthorized per-port overrides exist and are not discarded when a virtual machine is disconnected from that port then a future virtual machine connected to that port may receive a less secure port.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Configure reset at disconnect&quot; setting.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDPortgroup).ExtensionData.Config.Policy.PortConfigResetAtDisconnect
+
+If there are any distributed port groups with &quot;Configure reset at disconnect&quot; configured to &quot;disabled&quot; or &quot;False&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select advanced and update &quot;Configure reset at disconnect&quot; to be enabled and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.Policy &#x3D; New-Object VMware.Vim.VMwareDVSPortgroupPolicy
+$spec.Policy.PortConfigResetAtDisconnect &#x3D; $True
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000303</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable Secure Shell (SSH) access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.
+
+vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000303</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable Secure Shell (SSH) access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.
+
+vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Access&quot; on the left navigation pane.
+
+If &quot;SSH Login&quot; is not &quot;Deactivated&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Access&quot; on the left navigation pane.
+
+Click &quot;Edit&quot; then disable &quot;Activate SSH Login&quot; and click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000304</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enable data in transit encryption for vSAN.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Transit encryption must be enabled to prevent unauthorized disclosure information and to protect the confidentiality of organizational information.
+
+vSAN data-in-transit encryption has the following characteristics:
+-vSAN uses AES-256 bit encryption on data in transit.
+-Forward secrecy is enforced for vSAN data-in-transit encryption.
+-Traffic between data hosts and witness hosts is encrypted.
+-File service data traffic between the VDFS proxy and VDFS server is encrypted.
+-vSAN file services inter-host connections are encrypted.
+-vSAN uses symmetric keys that are generated dynamically and shared between hosts. Hosts dynamically generate an encryption key when they establish a connection, and they use the key to encrypt all traffic between the hosts. You do not need a key management server to perform data-in-transit encryption.
+
+Each host is authenticated when it joins the cluster, ensuring connections only to trusted hosts are allowed. When a host is removed from the cluster, it is authentication certificate is removed.
+
+vSAN data-in-transit encryption is a cluster-wide setting. When enabled, all data and metadata traffic is encrypted as it transits across hosts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system; $vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name cluster0).ExtensionData.MoRef).DataInTransitEncryptionConfig.Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000304</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enable data in transit encryption for vSAN.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Transit encryption must be enabled to prevent unauthorized disclosure information and to protect the confidentiality of organizational information.
+
+vSAN data-in-transit encryption has the following characteristics:
+-vSAN uses AES-256 bit encryption on data in transit.
+-Forward secrecy is enforced for vSAN data-in-transit encryption.
+-Traffic between data hosts and witness hosts is encrypted.
+-File service data traffic between the VDFS proxy and VDFS server is encrypted.
+-vSAN file services inter-host connections are encrypted.
+-vSAN uses symmetric keys that are generated dynamically and shared between hosts. Hosts dynamically generate an encryption key when they establish a connection, and they use the key to encrypt all traffic between the hosts. You do not need a key management server to perform data-in-transit encryption.
+
+Each host is authenticated when it joins the cluster, ensuring connections only to trusted hosts are allowed. When a host is removed from the cluster, it is authentication certificate is removed.
+
+vSAN data-in-transit encryption is a cluster-wide setting. When enabled, all data and metadata traffic is encrypted as it transits across hosts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Review the &quot;Data-in-transit encryption&quot; status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system
+$vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name &lt;cluster name&gt;).ExtensionData.MoRef).DataInTransitEncryptionConfig
+
+Repeat these steps for each vSAN enabled cluster in the environment.
+
+If &quot;Data-In-Transit encryption&quot; is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the target cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Click &quot;Edit&quot;.
+
+Enable &quot;Data-In-Transit encryption&quot; and choose a rekey interval suitable for the environment then click &quot;Apply&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000005</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000044
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Once the configured number of attempts is reached, the account is locked by the ESXi host.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountLockFailures | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 3
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountLockFailures | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 3
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000005</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enforce the limit of three consecutive invalid logon attempts by a user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By limiting the number of failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Once the configured number of attempts is reached, the account is locked by the ESXi host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.AccountLockFailures&quot; value and verify it is set to &quot;3&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountLockFailures
+
+If the &quot;Security.AccountLockFailures&quot; setting is set to a value other than &quot;3&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.AccountLockFailures&quot; value and configure it to &quot;3&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountLockFailures | Set-AdvancedSetting -Value 3</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000006</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000050
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000006</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a, AC-8 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Annotations.WelcomeMessage&quot; value and verify it contains the standard mandatory DOD notice and consent banner.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage
+
+If the &quot;Annotations.WelcomeMessage&quot; setting does not contain the standard mandatory DOD notice and consent banner, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Annotations.WelcomeMessage&quot; value and set it to the following. Click &quot;OK&quot;.
+
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{hostname} , {ip}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{esxproduct} {esxversion}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:yellow}{memory} RAM{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:black}{color:white}	{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By      {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  using this IS (which includes any device attached to this IS), you consent to the following conditions:                 {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited     {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law      {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          enforcement (LE), and counterintelligence (CI) investigations.                                                  {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       At any time, the USG may inspect and seize data stored on this IS.                                              {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       Communications using, or data stored on, this IS are not private, are subject to routine monitoring,            {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          interception, and search, and may be disclosed or used for any USG-authorized purpose.                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not     {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          for your personal benefit or privacy.                                                                           {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}  -       Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching    {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          or monitoring of the content of privileged communications, or work product, related to personal representation  {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work       {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}          product are private and confidential. See User Agreement for details.                                           {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:yellow}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+{bgcolor:black} {&#x2F;color}{align:left}{bgcolor:dark-grey}{color:white}  &lt;F2&gt; Accept Conditions and Customize System &#x2F; View Logs{&#x2F;align}{align:right}&lt;F12&gt; Accept Conditions and Shut Down&#x2F;Restart  {bgcolor:black} {&#x2F;color}{&#x2F;color}{&#x2F;bgcolor}{&#x2F;align}
+{bgcolor:black} {&#x2F;color}{bgcolor:dark-grey}{color:black}                                                                                                                          {&#x2F;color}{&#x2F;bgcolor}
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Annotations.WelcomeMessage | Set-AdvancedSetting -Value &quot;&lt;Banner text above&gt;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000008</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable lockdown mode.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000054
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCenter are always enforced and users cannot bypass them by logging on to a host directly.
+
+By forcing all interaction to occur through vCenter Server, the risk of someone inadvertently attaining elevated privileges or performing tasks that are not properly audited is greatly reduced.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VMHost -Name 10.186.25.26).Extensiondata.Config.LockdownMode stdout.strip is expected to be in &quot;lockdownNormal&quot; and &quot;lockdownStrict&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;lockdownDisabled&#x60; to be in the list: &#x60;[&quot;lockdownNormal&quot;, &quot;lockdownStrict&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VMHost -Name 10.186.25.26).Extensiondata.Config.LockdownMode stdout.strip is expected to be in &quot;lockdownNormal&quot; and &quot;lockdownStrict&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;lockdownDisabled&#x60; to be in the list: &#x60;[&quot;lockdownNormal&quot;, &quot;lockdownStrict&quot;]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000008</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable lockdown mode.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Enabling Lockdown Mode disables direct access to an ESXi host, requiring the host to be managed remotely from vCenter Server. This is done to ensure the roles and access controls implemented in vCenter are always enforced and users cannot bypass them by logging on to a host directly.
+
+By forcing all interaction to occur through vCenter Server, the risk of someone inadvertently attaining elevated privileges or performing tasks that are not properly audited is greatly reduced.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Scroll down to &quot;Lockdown Mode&quot; and verify it is set to &quot;Enabled&quot; (Normal or Strict).
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Select Name,@{N&#x3D;&quot;Lockdown&quot;;E&#x3D;{$_.Extensiondata.Config.LockdownMode}}
+
+If &quot;Lockdown Mode&quot; is disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile &gt;&gt; Lockdown Mode.
+
+Click edit and select either the &quot;Normal&quot; or &quot;Strict&quot; radio buttons.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$level &#x3D; &quot;lockdownNormal&quot; OR &quot;lockdownStrict&quot;
+$vmhost &#x3D; Get-VMHost -Name &lt;hostname&gt; | Get-View
+$lockdown &#x3D; Get-View $vmhost.ConfigManager.HostAccessManager
+$lockdown.ChangeLockdownMode($level)
+
+Note: In strict lockdown mode, the Direct Console User Interface (DCUI) service is stopped. If the connection to vCenter Server is lost and the vSphere Client is no longer available, the ESXi host becomes inaccessible.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000010</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host client must be configured with an idle session timeout.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000057
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed by browsing to &quot;https:&#x2F;&#x2F;&lt;ESX FQDN&gt;&#x2F;ui&quot;. ESXi is not usually administered via this interface for long periods and all users will be highly privileged. Implementing a mandatory session idle limit will ensure that orphaned, forgotten or ignored sessions will be closed promptly.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000010</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host client must be configured with an idle session timeout.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi host client is the UI served up by the host itself, outside of vCenter. It is accessed by browsing to &quot;https:&#x2F;&#x2F;&lt;ESX FQDN&gt;&#x2F;ui&quot;. ESXi is not usually administered via this interface for long periods and all users will be highly privileged. Implementing a mandatory session idle limit will ensure that orphaned, forgotten or ignored sessions will be closed promptly.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-11 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.HostClientSessionTimeout&quot; value and verify it is set to &quot;900&quot; or less.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout
+
+If the &quot;UserVars.HostClientSessionTimeout&quot; setting is not set to &quot;900&quot; or less, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Fom the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.HostClientSessionTimeout&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.HostClientSessionTimeout | Set-AdvancedSetting -Value &quot;900&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000014</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000068
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session.
+
+OpenSSH on the ESXi host ships with a FIPS 140-2 validated cryptographic module and it is enabled by default. For backward compatibility reasons, this can be disabled so this setting must be audited and corrected if necessary.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.security.fips140.ssh.get.invoke() | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.security.fips140.ssh.get.invoke() | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000014</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must use FIPS 140-2 validated cryptographic modules to protect the confidentiality of remote access sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session.
+
+OpenSSH on the ESXi host ships with a FIPS 140-2 validated cryptographic module and it is enabled by default. For backward compatibility reasons, this can be disabled so this setting must be audited and corrected if necessary.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system security fips140 ssh get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.security.fips140.ssh.get.invoke()
+
+Expected result:
+
+Enabled: true
+
+If the FIPS mode is not enabled for SSH, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system security fips140 ssh set -e true
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.security.fips140.ssh.set.CreateArgs()
+$arguments.enable &#x3D; $true
+$esxcli.system.security.fips140.ssh.set.Invoke($arguments)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000015</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi must produce audit records containing information to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000171
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000015</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi must produce audit records containing information to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 b, AU-3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.log.level&quot; value and verify it is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.log.level
+
+If the &quot;Config.HostAgent.log.level&quot; setting is not set to &quot;info&quot;, this is a finding.
+
+Note: Verbose logging level is acceptable for troubleshooting purposes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.log.level&quot; value and configure it to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.log.level | Set-AdvancedSetting -Value &quot;info&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000035</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enforce password complexity by configuring a password quality policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000193
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000194
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000205
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001619
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated.
+
+The use of complex passwords reduces the ability of attackers to successfully obtain valid passwords using guessing or exhaustive search techniques. Complexity requirements increase the password search space by requiring users to construct passwords from a larger character set than they may otherwise use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordQualityControl | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15
+     got: retry&#x3D;3 min&#x3D;disabled,disabled,disabled,7,7
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordQualityControl | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15
+     got: retry&#x3D;3 min&#x3D;disabled,disabled,disabled,7,7
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000035</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enforce password complexity by configuring a password quality policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To enforce the use of complex passwords, minimum numbers of characters of different classes are mandated.
+
+The use of complex passwords reduces the ability of attackers to successfully obtain valid passwords using guessing or exhaustive search techniques. Complexity requirements increase the password search space by requiring users to construct passwords from a larger character set than they may otherwise use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), IA-5 (1) (b)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordQualityControl&quot; value and verify it is set to &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordQualityControl
+
+If the &quot;Security.PasswordQualityControl&quot; setting is set to a value other than &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordQualityControl&quot; value and configure it to &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordQualityControl | Set-AdvancedSetting -Value &quot;similar&#x3D;deny retry&#x3D;3 min&#x3D;disabled,disabled,disabled,disabled,15&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000043</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must prohibit password reuse for a minimum of five generations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000200
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a user or root used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user&#39;s password until it was guessed correctly.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordHistory | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;5&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordHistory | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;5&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000043</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must prohibit password reuse for a minimum of five generations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a user or root used the same password continuously or was allowed to change it back shortly after being forced to change it to something else, it would provide a potential intruder with the opportunity to keep guessing at one user&#39;s password until it was guessed correctly.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (e)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordHistory&quot; value and verify it is set to &quot;5&quot; or greater.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordHistory
+
+If the &quot;Security.PasswordHistory&quot; setting is set to a value other than 5 or greater, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordHistory&quot; value and configure it to &quot;5&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordHistory | Set-AdvancedSetting -Value 5</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000047</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The MOB provides a way to explore the object model used by the VMkernel to manage the host and enables configurations to be changed. This interface is meant to be used primarily for debugging the vSphere Software Development Kit (SDK), but because there are no access controls it could also be used as a method to obtain information about a host being targeted for unauthorized access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000047</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must be configured to disable nonessential capabilities by disabling the Managed Object Browser (MOB).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The MOB provides a way to explore the object model used by the VMkernel to manage the host and enables configurations to be changed. This interface is meant to be used primarily for debugging the vSphere Software Development Kit (SDK), but because there are no access controls it could also be used as a method to obtain information about a host being targeted for unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.plugins.solo.enableMob&quot; value and verify it is set to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob
+
+If the &quot;Config.HostAgent.plugins.solo.enableMob&quot; setting is not set to &quot;false&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.plugins.solo.enableMob&quot; value and configure it to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.solo.enableMob | Set-AdvancedSetting -Value false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000049</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (8)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000764
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000770
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001682
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001941
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001942
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Using Active Directory for user authentication simplifies the ESXi host configuration, ensures password complexity and reuse policies are enforced, and reduces the risk of security breaches and unauthorized access.
+
+Note: If the Active Directory group &quot;ESX Admins&quot; (default) exists, all users and groups assigned as members to this group will have full administrative access to all ESXi hosts in the domain.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostAuthentication | Select-Object -ExpandProperty DomainMembershipStatus stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostAuthentication | Select-Object -ExpandProperty DomainMembershipStatus stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000049</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must uniquely identify and must authenticate organizational users by using Active Directory.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Join ESXi hosts to an Active Directory domain to eliminate the need to create and maintain multiple local user accounts. Using Active Directory for user authentication simplifies the ESXi host configuration, ensures password complexity and reuse policies are enforced, and reduces the risk of security breaches and unauthorized access.
+
+Note: If the Active Directory group &quot;ESX Admins&quot; (default) exists, all users and groups assigned as members to this group will have full administrative access to all ESXi hosts in the domain.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), IA-2, IA-2 (5), IA-2 (8), IA-2 (9)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For systems that do not use Active Directory and have no local user accounts other than root and&#x2F;or service accounts, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Authentication Services.
+
+Verify the &quot;Directory Services Type&quot; is set to &quot;Active Directory&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostAuthentication
+
+For systems that do not use Active Directory and do have local user accounts, other than root and&#x2F;or service accounts, this is a finding.
+
+If the &quot;Directory Services Type&quot; is not set to &quot;Active Directory&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Authentication Services.
+
+Click &quot;Join Domain...&quot; and enter the AD domain to join.
+
+Select the &quot;Using credentials&quot; radio button and enter the credentials of an account with permissions to join machines to AD (use UPN naming &quot;user@domain&quot;). Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostAuthentication | Set-VMHostAuthentication -JoinDomain -Domain &quot;domain name&quot; -User &quot;username&quot; -Password &quot;password&quot;
+
+If any local user accounts are present besides root and service accounts, delete them by going to Host UI &gt;&gt; Manage &gt;&gt; Security &amp; Users &gt;&gt; Users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000052</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000767
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH can emulate the behavior of the obsolete &quot;rsh&quot; command in allowing users to enable insecure access to their accounts via &quot;.rhosts&quot; files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000052</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH can emulate the behavior of the obsolete &quot;rsh&quot; command in allowing users to enable insecure access to their accounts via &quot;.rhosts&quot; files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (3)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep ignorerhosts
+
+Expected result:
+
+ignorerhosts yes
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+IgnoreRhosts yes</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000068</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-12
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002361
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely and increase the likelihood of inappropriate host access via session hijacking. The &quot;ESXiShellInteractiveTimeOut&quot; allows the automatic termination of idle shell sessions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000068</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must set a timeout to automatically end idle shell sessions after fifteen minutes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a user forgets to log out of their local or remote ESXi Shell session, the idle connection will remain open indefinitely and increase the likelihood of inappropriate host access via session hijacking. The &quot;ESXiShellInteractiveTimeOut&quot; allows the automatic termination of idle shell sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-12, SC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; value and verify it is set to less than &quot;900&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut
+
+If the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; setting is set to a value greater than &quot;900&quot; or &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiShellInteractiveTimeOut&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellInteractiveTimeOut | Set-AdvancedSetting -Value 900</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000085</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must implement Secure Boot enforcement.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-6 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001494
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001495
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002696
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002699
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and it requires that all ESXi kernel modules, drivers and VIBs be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. This control flips ESXi from merely supporting Secure Boot to requiring it. Without this setting enabled, and configuration encryption, an ESXi host could be subject to offline attacks. An attacker could simply transfer the ESXi install drive to a non-Secure Boot host and boot it up without ESXi complaining.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty RequireSecureBoot stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: false
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty RequireSecureBoot stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: false
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000085</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must implement Secure Boot enforcement.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Secure Boot is part of the UEFI firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and it requires that all ESXi kernel modules, drivers and VIBs be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. This control flips ESXi from merely supporting Secure Boot to requiring it. Without this setting enabled, and configuration encryption, an ESXi host could be subject to offline attacks. An attacker could simply transfer the ESXi install drive to a non-Secure Boot host and boot it up without ESXi complaining.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, SI-6 a, SI-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.encryption.get.invoke() | Select RequireSecureBoot
+
+Expected result:
+
+Require Secure Boot: true
+
+If &quot;Require Secure Boot&quot; is not enable, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">This setting cannot be configured until Secure Boot is properly enabled in the servers firmware.
+
+From an ESXi shell, run the following commands:
+
+# esxcli system settings encryption set --require-secure-boot&#x3D;true
+# &#x2F;sbin&#x2F;auto-backup.sh
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.encryption.set.CreateArgs()
+$arguments.requiresecureboot &#x3D; $true
+$esxcli.system.settings.encryption.set.Invoke($arguments)
+
+Evacuate the host and gracefully reboot for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000094</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable Secure Boot.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001496
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Secure Boot is part of the Unified Extensible Firmware Interface (UEFI) firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and requires that all ESXi kernel modules, drivers, and vSphere Installation Bundles (VIBs) be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. There is no ESXi control to &quot;turn on&quot; Secure Boot. Requiring Secure Boot (failing to boot without it present) is accomplished in another control.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000094</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable Secure Boot.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Secure Boot is part of the Unified Extensible Firmware Interface (UEFI) firmware standard. With UEFI Secure Boot enabled, a host refuses to load any UEFI driver or app unless the operating system bootloader has a valid digital signature. Secure Boot for ESXi requires support from the firmware and requires that all ESXi kernel modules, drivers, and vSphere Installation Bundles (VIBs) be signed by VMware or a partner subordinate.
+
+Secure Boot is enabled in the BIOS of the ESXi physical server and supported by the hypervisor boot loader. There is no ESXi control to &quot;turn on&quot; Secure Boot. Requiring Secure Boot (failing to boot without it present) is accomplished in another control.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (3)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;secureboot&#x2F;bin&#x2F;secureBoot.py -s
+
+If Secure Boot is not &quot;Enabled&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;secureboot&#x2F;bin&#x2F;secureBoot.py -c
+
+If the output indicates that Secure Boot cannot be enabled, correct the discrepancies and try again.
+
+Once all discrepancies are resolved then the server ESXi is installed on can be updated to enable Secure Boot in the firmware.
+
+To enable Secure Boot in the servers firmware follow the instructions for the specific manufacturer.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000111</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002238
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Users must wait for the timeout period to elapse before subsequent logon attempts are allowed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.AccountUnlockTime | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000111</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enforce an unlock timeout of 15 minutes after a user account is locked out.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By enforcing a reasonable unlock timeout after multiple failed logon attempts, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. Users must wait for the timeout period to elapse before subsequent logon attempts are allowed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.AccountUnlockTime&quot; value and verify it is set to less than &quot;900&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountUnlockTime
+
+If the &quot;Security.AccountUnlockTime&quot; setting is less than 900 or 0, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.AccountUnlockTime&quot; value and configure it to &quot;900&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.AccountUnlockTime | Set-AdvancedSetting -Value 900</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000113</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must allocate audit record storage capacity to store at least one weeks worth of audit records.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In order to ensure ESXi has sufficient storage capacity in which to write the audit logs, audit record storage capacity should be configured.
+
+If a central audit record storage facility is available, the local storage capacity should be sufficient to hold audit records that would accumulate during anticipated interruptions in delivery of records to the facility.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;100&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 100
+     got: 4
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;100&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 100
+     got: 4
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000113</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must allocate audit record storage capacity to store at least one weeks worth of audit records.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In order to ensure ESXi has sufficient storage capacity in which to write the audit logs, audit record storage capacity should be configured.
+
+If a central audit record storage facility is available, the local storage capacity should be sufficient to hold audit records that would accumulate during anticipated interruptions in delivery of records to the facility.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.storageCapacity&quot; value and verify it is set to &quot;100&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity
+
+If the &quot;Syslog.global.auditRecord.storageCapacity&quot; setting is not set to 100, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.storageCapacity&quot; value and configure it to &quot;100&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageCapacity | Set-AdvancedSetting -Value 100</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000114</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must off-load logs via syslog.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001683
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001684
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001686
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a central host, it can more easily monitor all hosts with a single tool. It can also do aggregate analysis and searching to look for such things as coordinated attacks on multiple hosts.
+
+Logging to a secure, centralized log server also helps prevent log tampering and provides a long-term audit record.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logHost | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;tcp:&#x2F;&#x2F;log.test.local:514&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: tcp:&#x2F;&#x2F;log.test.local:514
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logHost | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;tcp:&#x2F;&#x2F;log.test.local:514&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: tcp:&#x2F;&#x2F;log.test.local:514
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000114</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must off-load logs via syslog.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote logging to a central log host provides a secure, centralized store for ESXi logs. By gathering host log files onto a central host, it can more easily monitor all hosts with a single tool. It can also do aggregate analysis and searching to look for such things as coordinated attacks on multiple hosts.
+
+Logging to a secure, centralized log server also helps prevent log tampering and provides a long-term audit record.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), AU-4 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logHost&quot; value and verify it is set to a site-specific syslog server.
+
+Syslog servers are specified in the following formats:
+
+udp:&#x2F;&#x2F;&lt;IP or FQDN&gt;:514
+tcp:&#x2F;&#x2F;&lt;IP or FQDN&gt;:514
+ssl:&#x2F;&#x2F;&lt;IP or FQDN&gt;:1514
+
+Multiple servers can also be specified when separated by commas.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logHost
+
+If the &quot;Syslog.global.logHost&quot; setting is not set to a valid, site-specific syslog server, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logHost&quot; value and configure it to a site-specific syslog server.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logHost | Set-AdvancedSetting -Value &quot;enter site specific servers&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000124</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must synchronize internal information system clocks to an authoritative time source.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-8 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-8 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001891
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002046
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To ensure the accuracy of the system clock, it must be synchronized with an authoritative time source within DOD. Many system functions, including time-based logon and activity restrictions, automated reports, system logs, and audit records, depend on an accurate system clock. If there is no confidence in the correctness of the system clock, time-based functions may not operate as intended and records may be of diminished value.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;on&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: on
+     got: off
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No NTP servers found on VMhost: 10.186.25.26 is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;&quot;.empty?&#x60; to be falsey, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;on&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: on
+     got: off
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;NTP Daemon&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No NTP servers found on VMhost: 10.186.25.26 is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;&quot;.empty?&#x60; to be falsey, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000124</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must synchronize internal information system clocks to an authoritative time source.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To ensure the accuracy of the system clock, it must be synchronized with an authoritative time source within DOD. Many system functions, including time-based logon and activity restrictions, automated reports, system logs, and audit records, depend on an accurate system clock. If there is no confidence in the correctness of the system clock, time-based functions may not operate as intended and records may be of diminished value.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-8 (1) (a), AU-8 (1) (b)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Verify NTP or PTP are configured, and one or more authoritative time sources are listed.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Verify the NTP or PTP service is running and configured to start and stop with the host.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostNTPServer
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot; -or $_.Label -eq &quot;PTP Daemon&quot;}
+
+If the NTP service is not configured with authoritative DOD time sources or the service is not configured to start and stop with the host (&quot;Policy&quot; of &quot;on&quot; in PowerCLI) or is stopped, this is a finding.
+If PTP is used instead of NTP, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To configure NTP, perform the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Click &quot;Add Service&quot; and select &quot;Network Time Protocol&quot;.
+
+Enter or update the NTP servers listed with a comma separate list of authoritative time servers. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Select the &quot;NTP Daemon&quot; service and click &quot;Edit Startup Policy&quot;.
+
+Select &quot;Start and stop with host&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$NTPServers &#x3D; &quot;ntpserver1&quot;,&quot;ntpserver2&quot;
+Get-VMHost | Add-VMHostNTPServer $NTPServers
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot;} | Set-VMHostService -Policy On
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;NTP Daemon&quot;} | Start-VMHostService
+
+To configure PTP, perform the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Time Configuration.
+
+Click &quot;Add Service&quot; and select &quot;Precision Time Protocol&quot;.
+
+Select the network adapter that can receive the PTP traffic.
+
+If NTP servers are available, select &quot;Enable fallback&quot; and enter or update the NTP servers listed with a comma separate list of authoritative time servers. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Select the &quot;PTP Daemon&quot; service and click &quot;Edit Startup Policy&quot;.
+
+Select &quot;Start and stop with host&quot;. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000133</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 (5) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001749
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001774
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels:
+
+1. VMwareCertified - VIBs created, tested, and signed by VMware.
+2. VMwareAccepted - VIBs created by a VMware partner but tested and signed by VMware.
+3. PartnerSupported - VIBs created, tested, and signed by a certified VMware partner.
+4. CommunitySupported - VIBs that have not been tested by VMware or a VMware partner.
+
+Community Supported VIBs are not supported and do not have a digital signature. To protect the security and integrity of ESXi hosts, do not allow unsigned (CommunitySupported) VIBs to be installed on hosts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.software.acceptance.get.Invoke() stdout.strip is expected to be in &quot;PartnerSupported&quot;, &quot;VMwareCertified&quot;, and &quot;VMwareAccepted&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.software.acceptance.get.Invoke() stdout.strip is expected to be in &quot;PartnerSupported&quot;, &quot;VMwareCertified&quot;, and &quot;VMwareAccepted&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000133</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi Image Profile and vSphere Installation Bundle (VIB) acceptance level must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Verify the ESXi Image Profile to only allow signed VIBs. An unsigned VIB represents untested code installed on an ESXi host. The ESXi Image profile supports four acceptance levels:
+
+1. VMwareCertified - VIBs created, tested, and signed by VMware.
+2. VMwareAccepted - VIBs created by a VMware partner but tested and signed by VMware.
+3. PartnerSupported - VIBs created, tested, and signed by a certified VMware partner.
+4. CommunitySupported - VIBs that have not been tested by VMware or a VMware partner.
+
+Community Supported VIBs are not supported and do not have a digital signature. To protect the security and integrity of ESXi hosts, do not allow unsigned (CommunitySupported) VIBs to be installed on hosts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (3), CM-7 (5) (b)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Host Image Profile Acceptance Level&quot; view the acceptance level.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.software.acceptance.get.Invoke()
+
+If the acceptance level is &quot;CommunitySupported&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Host Image Profile Acceptance Level&quot;, click &quot;Edit&quot;.
+
+Using the drop-down selection, set the acceptance level as &quot;VMwareCertified&quot;, &quot;VMwareAccepted&quot;, or &quot;PartnerSupported&quot;. The default is &quot;PartnerSupported&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.software.acceptance.set.CreateArgs()
+$arguments.level &#x3D; &quot;PartnerSupported&quot;
+$esxcli.software.acceptance.set.Invoke($arguments)
+
+Note: &quot;VMwareCertified&quot; or &quot;VMwareAccepted&quot; may be substituted for &quot;PartnerSupported&quot;, depending on local requirements. These are case sensitive.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000145</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001967
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle attack, in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000145</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable bidirectional Challenge-Handshake Authentication Protocol (CHAP) authentication for Internet Small Computer Systems Interface (iSCSI) traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, there is potential for a man-in-the-middle attack, in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If iSCSI is not used, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Storage &gt;&gt; Storage Adapters.
+
+Select the iSCSI adapter &gt;&gt; Properties &gt;&gt; Authentication &gt;&gt; Method.
+
+View the CHAP configuration and verify CHAP is required for target and host authentication.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostHba | Where {$_.Type -eq &quot;iscsi&quot;} | Select AuthenticationProperties -ExpandProperty AuthenticationProperties
+
+If iSCSI is used and CHAP is not set to &quot;required&quot; for both the target and host, this is a finding.
+
+If iSCSI is used and unique CHAP secrets are not used for each host, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Storage &gt;&gt; Storage Adapters.
+
+Select the iSCSI adapter &gt;&gt; Properties &gt;&gt; Authentication.
+
+Click &quot;Edit...&quot;. Set &quot;Authentication Method&quot; to &quot;Use bidirectional CHAP&quot; and enter a unique secret for each traffic flow direction.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostHba | Where {$_.Type -eq &quot;iscsi&quot;} | Set-VMHostHba -ChapType Required -ChapName &quot;chapname&quot; -ChapPassword &quot;password&quot; -MutualChapEnabled $true -MutualChapName &quot;mutualchapname&quot; -MutualChapPassword &quot;mutualpassword&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000160</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          While encrypted vMotion is available, vMotion traffic should still be sequestered from other traffic to further protect it from attack. This network must only be accessible to other ESXi hosts, preventing outside access to the network.
+
+The vMotion VMkernel port group must be in a dedicated VLAN that can be on a standard or distributed virtual switch as long as the vMotion VLAN is not shared by any other function and is not routed to anything but ESXi hosts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000160</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must protect the confidentiality and integrity of transmitted information by isolating vMotion traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">While encrypted vMotion is available, vMotion traffic should still be sequestered from other traffic to further protect it from attack. This network must only be accessible to other ESXi hosts, preventing outside access to the network.
+
+The vMotion VMkernel port group must be in a dedicated VLAN that can be on a standard or distributed virtual switch as long as the vMotion VLAN is not shared by any other function and is not routed to anything but ESXi hosts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review the VLAN associated with any vMotion VMkernel(s) and verify they are dedicated for that purpose and are logically separated from other functions.
+
+If long distance or cross vCenter vMotion is used the vMotion network can be routable but must be accessible to only the intended ESXi hosts.
+
+If the vMotion port group is not on an isolated VLAN and&#x2F;or is routable to systems other than ESXi hosts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configuration of the vMotion VMkernel will be unique to each environment.
+
+As an example, to modify the IP address and VLAN information to the correct network on a distributed switch do the following:
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot; and select VLAN.
+
+Change the &quot;VLAN Type&quot; to &quot;VLAN&quot; and change the &quot;VLAN ID&quot; to a network allocated and dedicated to vMotion traffic exclusively. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000161</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must maintain the confidentiality and integrity of information during transmission by exclusively enabling Transport Layer Security (TLS) 1.2.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002420
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002422
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          TLS 1.0 and 1.1 are deprecated protocols with well-published shortcomings and vulnerabilities. TLS 1.2 should be enabled on all interfaces and SSLv3, TL 1.1, and 1.0 disabled, where supported.
+
+Mandating TLS 1.2 may break third-party integrations and add-ons to vSphere. Test these integrations carefully after implementing TLS 1.2 and roll back where appropriate.
+
+On interfaces where required functionality is broken with TLS 1.2, this finding is not applicable until such time as the third-party software supports TLS 1.2.
+
+Modify TLS settings in the following order:
+1. vCenter.
+2. ESXi.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;sslv3,tlsv1,tlsv1.1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;sslv3,tlsv1,tlsv1.1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000161</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must maintain the confidentiality and integrity of information during transmission by exclusively enabling Transport Layer Security (TLS) 1.2.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">TLS 1.0 and 1.1 are deprecated protocols with well-published shortcomings and vulnerabilities. TLS 1.2 should be enabled on all interfaces and SSLv3, TL 1.1, and 1.0 disabled, where supported.
+
+Mandating TLS 1.2 may break third-party integrations and add-ons to vSphere. Test these integrations carefully after implementing TLS 1.2 and roll back where appropriate.
+
+On interfaces where required functionality is broken with TLS 1.2, this finding is not applicable until such time as the third-party software supports TLS 1.2.
+
+Modify TLS settings in the following order:
+1. vCenter.
+2. ESXi.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8 (2)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiVPsDisabledProtocols&quot; value and verify it is set to &quot;sslv3,tlsv1,tlsv1.1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols
+
+If the &quot;UserVars.ESXiVPsDisabledProtocols&quot; setting is set to a value other than &quot;sslv3,tlsv1,tlsv1.1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiVPsDisabledProtocols&quot; value and configure it to &quot;sslv3,tlsv1,tlsv1.1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiVPsDisabledProtocols | Set-AdvancedSetting -Value &quot;sslv3,tlsv1,tlsv1.1&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000187</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000187</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must be configured to only use FIPS 140-2 validated ciphers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. ESXi must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-13</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep ciphers
+
+Expected result:
+
+ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+Ciphers aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr
+
+Note: The ciphers line must be after the FipsMode setting.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000189</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host DCUI.Access list must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Lockdown mode disables direct host access, requiring that administrators manage hosts from vCenter Server. However, if a host becomes isolated from vCenter, the administrator is locked out and can no longer manage the host.
+
+The &quot;DCUI.Access&quot; advanced setting allows specified users to exit lockdown mode in such a scenario. If the Direct Console User Interface (DCUI) is running in strict lockdown mode, this setting is ineffective.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name DCUI.Access | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name DCUI.Access | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;root&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000189</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host DCUI.Access list must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Lockdown mode disables direct host access, requiring that administrators manage hosts from vCenter Server. However, if a host becomes isolated from vCenter, the administrator is locked out and can no longer manage the host.
+
+The &quot;DCUI.Access&quot; advanced setting allows specified users to exit lockdown mode in such a scenario. If the Direct Console User Interface (DCUI) is running in strict lockdown mode, this setting is ineffective.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;DCUI.Access&quot; value and verify only the root user is listed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name DCUI.Access and verify it is set to root.
+
+If the &quot;DCUI.Access&quot; is not restricted to &quot;root&quot;, this is a finding.
+
+Note: This list is only for local user accounts and should only contain the root user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;DCUI.Access&quot; value and configure it to &quot;root&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name DCUI.Access | Set-AdvancedSetting -Value &quot;root&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000191</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;You are accessing a U.S. Government&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.Etc.issue | Select-Object -ExpandProperty Value stdout.strip is expected to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;&quot; to match &quot;I&#39;ve read &amp; consent to terms in IS user agreem&#39;t&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000191</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.Etc.issue&quot; value and verify it contains the standard mandatory DOD notice and consent banner.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.Etc.issue
+
+If the &quot;Config.Etc.issue&quot; setting does not contain the standard mandatory DOD notice and consent banner, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.Etc.issue&quot; value and set it to the following:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only. By using this IS (which includes any device attached to this IS), you consent to the following conditions: -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations. -At any time, the USG may inspect and seize data stored on this IS. -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose. -This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy. -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.Etc.issue | Set-AdvancedSetting -Value &quot;&lt;Banner text above&gt;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000192</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000192</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of a standardized and approved use notification before granting access to the host ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with applicable DOD policy. Use the following verbiage for a host that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) VMM (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for VMMs that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep banner
+
+Expected result:
+
+banner &#x2F;etc&#x2F;issue
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, navigate to and open:
+
+&#x2F;etc&#x2F;ssh&#x2F;sshd_config
+
+Ensure that the &quot;Banner&quot; line is uncommented and set to the following:
+
+Banner &#x2F;etc&#x2F;issue
+
+Restart SSH from the UI or run the following command:
+
+# &#x2F;etc&#x2F;init.d&#x2F;SSH restart</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000193</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002314
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002322
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi Shell is an interactive command line interface (CLI) available at the ESXi server console. The ESXi shell provides temporary access to commands essential for server maintenance. Intended primarily for use in break-fix scenarios, the ESXi shell is well suited for checking and modifying configuration details, which are not always generally accessible, using the vSphere Client.
+
+The ESXi shell is accessible remotely using SSH by users with the Administrator role. Under normal operating conditions, SSH access to the host must be disabled as is the default. As with the ESXi shell, SSH is also intended only for temporary use during break-fix scenarios. SSH must therefore be disabled under normal operating conditions and must only be enabled for diagnostics or troubleshooting. Remote access to the host must therefore be limited to the vSphere Client or Host Client at all other times.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;SSH&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000193</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must be configured to disable nonessential capabilities by disabling Secure Shell (SSH).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi Shell is an interactive command line interface (CLI) available at the ESXi server console. The ESXi shell provides temporary access to commands essential for server maintenance. Intended primarily for use in break-fix scenarios, the ESXi shell is well suited for checking and modifying configuration details, which are not always generally accessible, using the vSphere Client.
+
+The ESXi shell is accessible remotely using SSH by users with the Administrator role. Under normal operating conditions, SSH access to the host must be disabled as is the default. As with the ESXi shell, SSH is also intended only for temporary use during break-fix scenarios. SSH must therefore be disabled under normal operating conditions and must only be enabled for diagnostics or troubleshooting. Remote access to the host must therefore be limited to the vSphere Client or Host Client at all other times.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (1), AC-17 (9), CM-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under Services, locate the &quot;SSH&quot; service and verify it is &quot;Stopped&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;}
+
+If the SSH service is &quot;Running&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, select the &quot;SSH&quot; service and click the &quot;Stop&quot; button.
+
+Click the &quot;Edit Startup policy...&quot; button.
+
+Select the &quot;Start and stop manually&quot; radio button.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;SSH&quot;} | Stop-VMHostService</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000194</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must be configured to disable nonessential capabilities by disabling the ESXi shell.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or remotely via SSH. Activities performed from the ESXi Shell bypass vCenter role-based access control (RBAC) and audit controls.
+
+The ESXi shell must only be turned on when needed to troubleshoot&#x2F;resolve problems that cannot be fixed through the vSphere client.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;ESXi Shell&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000194</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must be configured to disable nonessential capabilities by disabling the ESXi shell.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi Shell is an interactive command line environment available locally from the Direct Console User Interface (DCUI) or remotely via SSH. Activities performed from the ESXi Shell bypass vCenter role-based access control (RBAC) and audit controls.
+
+The ESXi shell must only be turned on when needed to troubleshoot&#x2F;resolve problems that cannot be fixed through the vSphere client.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under Services, locate the &quot;ESXi Shell&quot; service and verify it is &quot;Stopped&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;}
+
+If the ESXi Shell service is &quot;Running&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, select the &quot;ESXi Shell&quot; service and click the &quot;Stop&quot; button.
+
+Click the &quot;Edit Startup policy...&quot; button.
+
+Select the &quot;Start and stop manually&quot; radio button.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;ESXi Shell&quot;} | Stop-VMHostService</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000195</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must automatically stop shell services after ten minutes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When the ESXi Shell or Secure Shell (SSH) services are enabled on a host, they will run indefinitely. To avoid having these services left running, set the &quot;ESXiShellTimeOut&quot;. The &quot;ESXiShellTimeOut&quot; defines a window of time after which the ESXi Shell and SSH services will be stopped automatically.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000195</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must automatically stop shell services after ten minutes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When the ESXi Shell or Secure Shell (SSH) services are enabled on a host, they will run indefinitely. To avoid having these services left running, set the &quot;ESXiShellTimeOut&quot;. The &quot;ESXiShellTimeOut&quot; defines a window of time after which the ESXi Shell and SSH services will be stopped automatically.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.ESXiShellTimeOut&quot; value and verify it is set to less than &quot;600&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut
+
+If the &quot;UserVars.ESXiShellTimeOut&quot; setting is set to a value greater than &quot;600&quot; or &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.ESXiShellTimeOut&quot; value and configure it to &quot;600&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.ESXiShellTimeOut | Set-AdvancedSetting -Value 600</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000196</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must set a timeout to automatically end idle DCUI sessions after ten minutes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When the Direct Console User Interface (DCUI) is enabled and logged in, it should be automatically logged out if left logged on to avoid access by unauthorized persons. The &quot;DcuiTimeOut&quot; setting defines a window of time after which the DCUI will be logged out.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &lt;&#x3D; 600</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Select-Object -ExpandProperty Value stdout.strip is expected not to cmp &#x3D;&#x3D; 0</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000196</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must set a timeout to automatically end idle DCUI sessions after ten minutes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When the Direct Console User Interface (DCUI) is enabled and logged in, it should be automatically logged out if left logged on to avoid access by unauthorized persons. The &quot;DcuiTimeOut&quot; setting defines a window of time after which the DCUI will be logged out.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.DcuiTimeOut&quot; value and verify it is set to less than &quot;600&quot; and not &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut
+
+If the &quot;UserVars.DcuiTimeOut&quot; setting is set to a value greater than &quot;600&quot; or &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.DcuiTimeOut&quot; value and configure it to &quot;600&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.DcuiTimeOut | Set-AdvancedSetting -Value 600</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000198</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere management network provides access to the vSphere management interface on each component. Services running on the management interface provide an opportunity for an attacker to gain privileged access to the systems. Any remote attack most likely would begin with gaining entry to this network.
+
+The Management VMkernel port group can be on a standard or distributed virtual switch but must be on a dedicated VLAN. The Management VLAN must not be shared by any other function and must not be accessible to anything other than management-related functions such as vCenter.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.VMotionEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VsanTrafficEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking standand port group VLAN ID is expected to cmp &#x3D;&#x3D; &quot;101&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 101
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SA Interview</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.VMotionEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VsanTrafficEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking standand port group VLAN ID is expected to cmp &#x3D;&#x3D; &quot;101&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 101
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SA Interview</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000198</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must protect the confidentiality and integrity of transmitted information by isolating ESXi management traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere management network provides access to the vSphere management interface on each component. Services running on the management interface provide an opportunity for an attacker to gain privileged access to the systems. Any remote attack most likely would begin with gaining entry to this network.
+
+The Management VMkernel port group can be on a standard or distributed virtual switch but must be on a dedicated VLAN. The Management VLAN must not be shared by any other function and must not be accessible to anything other than management-related functions such as vCenter.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review each VMkernel adapter that is used for management traffic and view the &quot;Enabled services&quot;.
+
+Review the VLAN associated with each VMkernel that is used for management traffic. Verify with the system administrator that they are dedicated for that purpose and are logically separated from other functions.
+
+If any services are enabled on any Management VMkernel adapter, this is a finding.
+
+If the network segment is accessible, except to networks where other management-related entities are located such as vCenter, this is a finding.
+
+If there are any other systems or devices such as VMs on the ESXi management segment, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configuration of the management VMkernel will be unique to each environment.
+
+As an example, to modify the IP address and VLAN information to the correct network on a distributed switch do the following:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the Management VMkernel and click &quot;Edit&quot;. On the Port properties tab, uncheck all services except for &quot;Management&quot;. Click &quot;OK&quot;.
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot; and select VLAN.
+
+Change the &quot;VLAN Type&quot; to &quot;VLAN&quot; and change the &quot;VLAN ID&quot; to a network allocated and dedicated to management traffic exclusively. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000199</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Virtual machines (VMs) might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and NFS. This configuration might expose IP-based storage traffic to unauthorized VM users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from any other traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and VMs will limit unauthorized users from viewing the traffic.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.ManagementTrafficEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VMotionEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostNetworkAdapter -Name vmk0 | Where-Object {$_.ManagementTrafficEnabled -eq &quot;True&quot; -or $_.FaultToleranceLoggingEnabled -eq &quot;True&quot; -or $_.VMotionEnabled -eq &quot;True&quot; -or $_.VSphereReplicationEnabled -eq &quot;True&quot; -or $_.VSphereReplicationNFCEnabled -eq &quot;True&quot; -or $_.VSphereBackupNFCEnabled -eq &quot;True&quot;} | Select-Object -ExpandProperty DeviceName stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;&quot;vmk0&quot;.empty?&#x60; to be truthy, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000199</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) might share virtual switches and VLANs with the IP-based storage configurations. IP-based storage includes vSAN, iSCSI, and NFS. This configuration might expose IP-based storage traffic to unauthorized VM users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from any other traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and VMs will limit unauthorized users from viewing the traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If IP-based storage is not used, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Review each VMkernel adapter that is used for IP-based storage traffic and view the &quot;Enabled services&quot;.
+
+Review the VLAN associated with each VMkernel that is used for IP-based storage traffic. Verify with the system administrator that they are dedicated for that purpose and are logically separated from other functions.
+
+If any services are enabled on an NFS or iSCSI IP-based storage VMkernel adapter, this is a finding.
+
+If any services are enabled on a vSAN VMkernel adapter other than vSAN, this is a finding.
+
+If any IP-based storage networks are not isolated from other traffic types, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configuration of an IP-Based VMkernel will be unique to each environment.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the VMkernel used for IP-based storage and click &quot;Edit&quot;. On the &quot;Port&quot; properties tab, uncheck all services. Click &quot;OK&quot;.
+
+Note: For VMkernels used for vSAN leave the vSAN service enabled and uncheck all others.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual switches.
+
+Find the port group that is dedicated to IP-based storage and click the &#39;...&#39; button next to the name. Click &quot;Edit Settings&quot;.
+
+On the &quot;Properties&quot; tab, change the &quot;VLAN ID&quot; to one dedicated for IP-based storage traffic. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000201</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host lockdown mode exception users list must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          While a host is in lockdown mode (strict or normal), only users on the &quot;Exception Users&quot; list are allowed access. These users do not lose their permissions when the host enters lockdown mode.
+
+The organization may want to add service accounts such as a backup agent to the Exception Users list. Verify the list of users exempted from losing permissions is legitimate and as needed per the environment. Adding unnecessary users to the exception list defeats the purpose of lockdown mode.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Exception users for host: 10.186.25.26 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Exception users for host: 10.186.25.26 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000201</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host lockdown mode exception users list must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">While a host is in lockdown mode (strict or normal), only users on the &quot;Exception Users&quot; list are allowed access. These users do not lose their permissions when the host enters lockdown mode.
+
+The organization may want to add service accounts such as a backup agent to the Exception Users list. Verify the list of users exempted from losing permissions is legitimate and as needed per the environment. Adding unnecessary users to the exception list defeats the purpose of lockdown mode.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Lockdown Mode&quot;, review the Exception Users list.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following script:
+
+$vmhost &#x3D; Get-VMHost | Get-View
+$lockdown &#x3D; Get-View $vmhost.ConfigManager.HostAccessManager
+$lockdown.QueryLockdownExceptions()
+
+If the Exception Users list contains accounts that do not require special permissions, this is a finding.
+
+Note: The Exception Users list is empty by default and should remain that way except under site-specific circumstances.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Security Profile.
+
+Under &quot;Lockdown Mode&quot;, click &quot;Edit&quot; and remove unnecessary users from the Exception Users list.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000202</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH&#39;s cryptographic host-based authentication is more secure than &quot;.rhosts&quot; authentication, since hosts are cryptographically authenticated. However, it is not recommended that hosts unilaterally trust one another, even within an organization.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000202</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not allow host-based authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts. SSH&#39;s cryptographic host-based authentication is more secure than &quot;.rhosts&quot; authentication, since hosts are cryptographically authenticated. However, it is not recommended that hosts unilaterally trust one another, even within an organization.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep hostbasedauthentication
+
+Expected result:
+
+hostbasedauthentication no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+HostbasedAuthentication no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000203</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000203</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permitemptypasswords
+
+Expected result:
+
+permitemptypasswords no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitEmptyPasswords no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000204</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000204</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permituserenvironment
+
+Expected result:
+
+permituserenvironment no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitUserEnvironment no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000205</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must perform strict mode checking of home directory configuration files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If other users have access to modify user-specific SSH configuration files, they may be able to log on the system as another user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000205</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must perform strict mode checking of home directory configuration files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If other users have access to modify user-specific SSH configuration files, they may be able to log on the system as another user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep strictmodes
+
+Expected result:
+
+strictmodes yes
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+StrictModes yes</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000206</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not allow compression.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000206</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not allow compression.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep compression
+
+Expected result:
+
+compression no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+Compression no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000207</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SSH Transmission Control Protocol (TCP) connection forwarding provides a mechanism to establish TCP connections proxied by the SSH server. This function can provide convenience similar to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs). Gateway ports allow remote forwarded ports to bind to nonloopback addresses on the server.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000207</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must be configured to not allow gateway ports.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SSH Transmission Control Protocol (TCP) connection forwarding provides a mechanism to establish TCP connections proxied by the SSH server. This function can provide convenience similar to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs). Gateway ports allow remote forwarded ports to bind to nonloopback addresses on the server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep gatewayports
+
+Expected result:
+
+gatewayports no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+GatewayPorts no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000208</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must be configured to not allow X11 forwarding.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000208</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must be configured to not allow X11 forwarding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep x11forwarding
+
+Expected result:
+
+x11forwarding no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+X11Forwarding no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000209</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must not permit tunnels.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          OpenSSH has the ability to create network tunnels (layer 2 and layer 3) over an SSH connection. This function can provide similar convenience to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000209</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must not permit tunnels.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">OpenSSH has the ability to create network tunnels (layer 2 and layer 3) over an SSH connection. This function can provide similar convenience to a virtual private network (VPN) with the similar risk of providing a path to circumvent firewalls and network Access Control Lists (ACLs).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep permittunnel
+
+Expected result:
+
+permittunnel no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+PermitTunnel no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000210</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must set a timeout count on idle sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting a timeout ensures that a user login will be terminated as soon as the &quot;ClientAliveCountMax&quot; is reached.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000210</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must set a timeout count on idle sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting a timeout ensures that a user login will be terminated as soon as the &quot;ClientAliveCountMax&quot; is reached.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep clientalivecountmax
+
+Expected result:
+
+clientalivecountmax 3
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+ClientAliveCountMax 3</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000211</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Automatically logging out idle users guards against compromises via hijacked administrative sessions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000211</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must set a timeout interval on idle sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Automatically logging out idle users guards against compromises via hijacked administrative sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep clientaliveinterval
+
+Expected result:
+
+clientaliveinterval 200
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+ClientAliveInterval 200</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000212</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.snmp.get.Invoke() | Select-Object -ExpandProperty enable stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.snmp.get.Invoke() | Select-Object -ExpandProperty enable stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000212</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must disable Simple Network Management Protocol (SNMP) v1 and v2c.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If SNMP is not being used, it must remain disabled. If it is being used, the proper trap destination must be configured. If SNMP is not properly configured, monitoring information can be sent to a malicious host that can use this information to plan an attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system snmp get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostSnmp | Select *
+
+If SNMP is not in use and is enabled, this is a finding.
+
+If SNMP is enabled and is not using v3 targets with authentication, this is a finding.
+
+Note: SNMP v3 targets can only be viewed and configured via the &quot;esxcli&quot; command.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To disable SNMP from an ESXi shell, run the following command:
+
+# esxcli system snmp set -e no
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi Host:
+
+Get-VMHostSnmp | Set-VMHostSnmp -Enabled $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000213</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Published academic papers have demonstrated that by forcing a flush and reload of cache memory, it is possible to measure memory timings to try to determine an Advanced Encryption Standard (AES) encryption key in use on another virtual machine running on the same physical processor of the host server if Transparent Page Sharing (TPS) is enabled between the two VMs. This technique works only in a highly controlled system configured in a nonstandard way that VMware believes would not be recreated in a production environment.
+
+Although VMware believes information being disclosed in real-world conditions is unrealistic, out of an abundance of caution, upcoming ESXi Update releases will no longer enable TPS between VMs by default (TPS will still be used within individual VMs).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.ShareForceSalting | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;2&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.ShareForceSalting | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;2&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000213</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must disable Inter-Virtual Machine (VM) Transparent Page Sharing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Published academic papers have demonstrated that by forcing a flush and reload of cache memory, it is possible to measure memory timings to try to determine an Advanced Encryption Standard (AES) encryption key in use on another virtual machine running on the same physical processor of the host server if Transparent Page Sharing (TPS) is enabled between the two VMs. This technique works only in a highly controlled system configured in a nonstandard way that VMware believes would not be recreated in a production environment.
+
+Although VMware believes information being disclosed in real-world conditions is unrealistic, out of an abundance of caution, upcoming ESXi Update releases will no longer enable TPS between VMs by default (TPS will still be used within individual VMs).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Mem.ShareForceSalting&quot; value and verify it is set to &quot;2&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.ShareForceSalting
+
+If the &quot;Mem.ShareForceSalting&quot; setting is not set to 2, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Mem.ShareForceSalting&quot; value and set it to &quot;2&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.ShareForceSalting | Set-AdvancedSetting -Value 2</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000214</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure the firewall to block network traffic by default.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In addition to service-specific firewall rules, ESXi has a default firewall rule policy to allow or deny incoming and outgoing traffic. Reduce the risk of attack by ensuring this is set to deny incoming and outgoing traffic.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostFirewallDefaultPolicy stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostFirewallDefaultPolicy stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000214</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure the firewall to block network traffic by default.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In addition to service-specific firewall rules, ESXi has a default firewall rule policy to allow or deny incoming and outgoing traffic. Reduce the risk of attack by ensuring this is set to deny incoming and outgoing traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli network firewall get
+
+If the &quot;Default Action&quot; does not equal &quot;DROP&quot;, this is a finding.
+If &quot;Enabled&quot; does not equal &quot;true&quot;, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostFirewallDefaultPolicy
+
+If the Incoming or Outgoing policies are &quot;True&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli network firewall set --default-action&#x3D;false
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHostFirewallDefaultPolicy | Set-VMHostFirewallDefaultPolicy -AllowIncoming $false -AllowOutgoing $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000215</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          BPDU Guard and Portfast are commonly enabled on the physical switch to which the ESXi host is directly connected to reduce the Spanning Tree Protocol (STP) convergence delay.
+
+If a BPDU packet is sent from a virtual machine (VM) on the ESXi host to the physical switch configured as stated above, a cascading lockout of all the uplink interfaces from the ESXi host can occur. To prevent this type of lockout, BPDU Filter can be enabled on the ESXi host to drop any BPDU packets being sent to the physical switch.
+
+The caveat is that certain Secure Socket Layer (SSL) virtual private networks that use Windows bridging capability can legitimately generate BPDU packets. The administrator should verify no legitimate BPDU packets are generated by VMs on the ESXi host prior to enabling BPDU Filter. If BPDU Filter is enabled in this situation, enabling Reject Forged Transmits on the virtual switch port group adds protection against Spanning Tree loops.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000215</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable Bridge Protocol Data Units (BPDU) filter on the host to prevent being locked out of physical switch ports with Portfast and BPDU Guard enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">BPDU Guard and Portfast are commonly enabled on the physical switch to which the ESXi host is directly connected to reduce the Spanning Tree Protocol (STP) convergence delay.
+
+If a BPDU packet is sent from a virtual machine (VM) on the ESXi host to the physical switch configured as stated above, a cascading lockout of all the uplink interfaces from the ESXi host can occur. To prevent this type of lockout, BPDU Filter can be enabled on the ESXi host to drop any BPDU packets being sent to the physical switch.
+
+The caveat is that certain Secure Socket Layer (SSL) virtual private networks that use Windows bridging capability can legitimately generate BPDU packets. The administrator should verify no legitimate BPDU packets are generated by VMs on the ESXi host prior to enabling BPDU Filter. If BPDU Filter is enabled in this situation, enabling Reject Forged Transmits on the virtual switch port group adds protection against Spanning Tree loops.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Net.BlockGuestBPDU&quot; value and verify it is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.BlockGuestBPDU
+
+If the &quot;Net.BlockGuestBPDU&quot; setting is not set to &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Net.BlockGuestBPDU&quot; value and configure it to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.BlockGuestBPDU | Set-AdvancedSetting -Value 1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000216</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure virtual switch security policies to reject forged transmits.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the virtual machine (VM) operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This means the virtual switch does not compare the source and effective MAC addresses.
+
+To protect against MAC address impersonation, all virtual switches must have forged transmissions set to reject. Reject Forged Transmit can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000216</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure virtual switch security policies to reject forged transmits.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the virtual machine (VM) operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This means the virtual switch does not compare the source and effective MAC addresses.
+
+To protect against MAC address impersonation, all virtual switches must have forged transmissions set to reject. Reject Forged Transmit can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Note: This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;Forged transmits&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;Forged Transmits&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;Forged transmits&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;Forged transmits&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmits $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmitsInherited $true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000217</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the virtual machine (VM) operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent VMs from changing their effective MAC address, which will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing. &quot;Reject MAC Changes&quot; can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000217</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the virtual machine (VM) operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent VMs from changing their effective MAC address, which will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing. &quot;Reject MAC Changes&quot; can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;MAC Address Changes&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;MAC Address Changes&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -MacChanges $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -MacChangesInherited $true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000218</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When promiscuous mode is enabled for a virtual switch, all virtual machines (VMs) connected to the Portgroup have the potential to read all packets across that network (only the virtual machines connected to that Portgroup).
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting. Promiscuous mode can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualSwitch | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected not to match &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000218</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When promiscuous mode is enabled for a virtual switch, all virtual machines (VMs) connected to the Portgroup have the potential to read all packets across that network (only the virtual machines connected to that Portgroup).
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting. Promiscuous mode can be set at the vSwitch and&#x2F;or the Portgroup level. Switch-level settings can be overridden at the Portgroup level.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click the &#39;...&#39; button next to each port group and select &quot;Edit Settings&quot;.
+
+Click the &quot;Security&quot; tab. Verify that &quot;Promiscuous Mode&quot; is set to &quot;Reject&quot; and that &quot;Override&quot; is not checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy
+Get-VirtualPortGroup | Get-SecurityPolicy | Select-Object *
+
+If the &quot;Promiscuous Mode&quot; policy is set to &quot;Accept&quot; (or &quot;true&quot;, via PowerCLI) or the security policy inherited from the virtual switch is overridden, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+On each standard switch, click &quot;Edit&quot; and select Security.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot;. Click &quot;OK&quot;.
+
+For each port group, click the &#39;...&#39; button and select &quot;Edit Settings&quot; then Security.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot; and uncheck the &quot;Override&quot; box. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VirtualSwitch | Get-SecurityPolicy | Set-SecurityPolicy -AllowPromiscuous $false
+Get-VirtualPortGroup | Get-SecurityPolicy | Set-SecurityPolicy -AllowPromiscuousInherited $true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000219</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must restrict use of the dvFilter network application programming interface (API).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the organization is not using products that use the dvfilter network API, the host should not be configured to send network information to a virtual machine (VM).
+
+If the API is enabled, an attacker might attempt to connect a virtual machine to it, potentially providing access to the network of other VMs on the host.
+
+If using a product that makes use of this API, verify the host has been configured correctly. If not using such a product, ensure the setting is blank.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000219</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must restrict use of the dvFilter network application programming interface (API).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the organization is not using products that use the dvfilter network API, the host should not be configured to send network information to a virtual machine (VM).
+
+If the API is enabled, an attacker might attempt to connect a virtual machine to it, potentially providing access to the network of other VMs on the host.
+
+If using a product that makes use of this API, verify the host has been configured correctly. If not using such a product, ensure the setting is blank.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Net.DVFilterBindIpAddress&quot; value and verify the value is blank or the correct IP address of a security appliance if in use.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress
+
+If the &quot;Net.DVFilterBindIpAddress&quot; setting is not blank and security appliances are not in use on the host, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Net.DVFilterBindIpAddress&quot; value and remove any incorrect addresses.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Net.DVFilterBindIpAddress | Set-AdvancedSetting -Value &quot;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000220</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When a port group is set to VLAN 4095, the vSwitch passes all network frames to the attached virtual machines (VMs) without modifying the VLAN tags. In vSphere, this is referred to as VGT. The VM must process the VLAN information itself via an 802.1Q driver in the operating system.
+
+VLAN 4095 must only be implemented if the attached VMs have been specifically authorized and are capable of managing VLAN tags themselves. If VLAN 4095 is enabled inappropriately, it may cause denial of service or allow a VM to interact with traffic on an unauthorized VLAN.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Select-Object -ExpandProperty VlanId stdout.strip is expected not to match &quot;4095&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VirtualPortGroup | Select-Object -ExpandProperty VlanId stdout.strip is expected not to match &quot;4095&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000220</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must restrict the use of Virtual Guest Tagging (VGT) on standard switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When a port group is set to VLAN 4095, the vSwitch passes all network frames to the attached virtual machines (VMs) without modifying the VLAN tags. In vSphere, this is referred to as VGT. The VM must process the VLAN information itself via an 802.1Q driver in the operating system.
+
+VLAN 4095 must only be implemented if the attached VMs have been specifically authorized and are capable of managing VLAN tags themselves. If VLAN 4095 is enabled inappropriately, it may cause denial of service or allow a VM to interact with traffic on an unauthorized VLAN.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">This control addresses ESXi standard switches. Distributed switches are addressed in the vCenter STIG. If there is no standard switch on the ESXi host, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+For each standard switch, review the &quot;VLAN ID&quot; on each port group and verify it is not set to &quot;4095&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VirtualPortGroup | Select Name, VLanID
+
+If any port group is configured with VLAN 4095 and is not documented as a needed exception, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; Networking &gt;&gt; Virtual Switches.
+
+For each port group on a standard switch that is configured to a native VLAN, click the &#39;...&#39; button next to the port group.
+
+Click &quot;Edit Settings&quot;. On the &quot;Properties&quot; tab, change the &quot;VLAN ID&quot; to an appropriate VLAN ID. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VirtualPortGroup -Name &quot;portgroup name&quot; | Set-VirtualPortGroup -VLanId &quot;New VLAN#&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000221</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must have all security patches and updates installed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VMHost -Name 10.186.25.26).ExtensionData.Config.Product.build stdout.strip is expected to cmp &#x3D;&#x3D; &quot;21813344&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VMHost -Name 10.186.25.26).ExtensionData.Config.Product.build stdout.strip is expected to cmp &#x3D;&#x3D; &quot;21813344&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000221</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must have all security patches and updates installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Installing software updates is a fundamental mitigation against the exploitation of publicly known vulnerabilities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine the current version and build:
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Summary. Note the version string next to &quot;Hypervisor:&quot;.
+
+or
+
+From a Secure Shell (SSH) session connected to the ESXi host, or from the ESXi shell, run the following command:
+
+# vmware -v
+
+If the ESXi host does not have the latest patches, this is a finding.
+
+If the ESXi host is not on a supported release, this is a finding.
+
+The latest ESXi versions and their build numbers can be found here: https:&#x2F;&#x2F;kb.vmware.com&#x2F;s&#x2F;article&#x2F;2143832
+
+VMware also publishes Advisories on security patches and offers a way to subscribe to email alerts for them.
+
+Go to: https:&#x2F;&#x2F;www.vmware.com&#x2F;support&#x2F;policies&#x2F;security_response</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">ESXi can be patched in multiple ways, and this fix text does not cover all methods.
+
+Manual patching when image profiles are not used:
+
+- Download the latest &quot;offline bundle&quot; .zip update from vmware.com. Verify the hash.
+
+- Transfer the file to a datastore accessible by the ESXi host, local or remote.
+
+- Put the ESXi host into maintenance mode.
+
+- From an ESXi shell, run the following command:
+
+esxcli software vib update -d &lt;path to offline patch bundle.zip&gt;
+
+Manual patching when image profiles are used:
+
+From an ESXi shell, run the following command:
+
+# esxcli software sources profile list -d &#x2F;vmfs&#x2F;volumes&#x2F;&lt;your datastore&gt;&#x2F;&lt;bundle name.zip&gt;
+
+Note the available profiles. The organization will usually want the one ending in &quot;-standard&quot;.
+
+# esxcli software profile update -p &lt;selected profile&gt; -d &#x2F;vmfs&#x2F;volumes&#x2F;&lt;your datastore&gt;&#x2F;&lt;bundle name.zip&gt;
+
+There will be little output during the update. Once complete, reboot the host for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000222</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000222</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.SuppressShellWarning&quot; value and verify it is set to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning
+
+If the &quot;UserVars.SuppressShellWarning&quot; setting is not set to &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.SuppressShellWarning&quot; value and configure it to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Set-AdvancedSetting -Value 0</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000223</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The L1 Terminal Fault (L1TF) CPU vulnerabilities published in 2018 have patches and mitigations available in vSphere. However, there are performance impacts to these mitigations that require careful thought and planning from the system administrator before implementation. Until a mitigation is implemented, the UI warning about the lack of a mitigation must not be dismissed so the system administrator does not assume the vulnerability has been addressed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000223</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not suppress warnings about unmitigated hyperthreading vulnerabilities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The L1 Terminal Fault (L1TF) CPU vulnerabilities published in 2018 have patches and mitigations available in vSphere. However, there are performance impacts to these mitigations that require careful thought and planning from the system administrator before implementation. Until a mitigation is implemented, the UI warning about the lack of a mitigation must not be dismissed so the system administrator does not assume the vulnerability has been addressed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;UserVars.SuppressHyperthreadWarning&quot; value and verify it is set to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning
+
+If the &quot;UserVars.SuppressHyperthreadWarning&quot; setting is not set to &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;UserVars.SuppressHyperthreadWarning&quot; value and configure it to &quot;0&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressHyperthreadWarning | Set-AdvancedSetting -Value 0</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000224</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must verify certificates for SSL syslog endpoints.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When sending syslog data to a remote host, ESXi can be configured to use any combination of TCP, UDP and SSL transports. When using SSL, the server certificate must be validated to ensure that the host is connecting to a valid syslog server.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000224</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must verify certificates for SSL syslog endpoints.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When sending syslog data to a remote host, ESXi can be configured to use any combination of TCP, UDP and SSL transports. When using SSL, the server certificate must be validated to ensure that the host is connecting to a valid syslog server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If SSL is not used for a syslog target, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logCheckSSLCerts&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logCheckSSLCerts
+
+If the &quot;Syslog.global.logCheckSSLCerts&quot; setting is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To configure SSL syslog endpoint certificate checking it must be turned on and also the trusted certificate chain must be added to ESXi&#39;s trusted store.
+
+From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logCheckSSLCerts&quot; value and configure it to &quot;true&quot;.
+
+Copy the PEM formatted trusted CA certificate so that is accessible to the host and append the contents to &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;castore.pem by running the follow command:
+
+# &lt;path&#x2F;to&#x2F;cacert&gt; &gt;&gt; &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;castore.pem
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logCheckSSLCerts | Set-AdvancedSetting -Value &quot;true&quot;
+
+Copy the PEM formatted trusted CA certificate so that is accessible to the host.
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.security.certificatestore.add.CreateArgs()
+$arguments.filename &#x3D; &lt;path&#x2F;to&#x2F;cacert&gt;
+$esxcli.system.security.certificatestore.add.Invoke($arguments)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000225</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable volatile key destruction.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By default, pages allocated for virtual machines (VMs), userspace applications, and kernel threads are zeroed out at allocation time. ESXi will always ensure that no nonzero pages are exposed to VMs or userspace applications. While this prevents exposing cryptographic keys from VMs or userworlds to other clients, these keys can stay present in host memory for a long time if the memory is not reused.
+
+The NIAP Virtualization Protection Profile and Server Virtualization Extended Package require that memory that may contain cryptographic keys be zeroed upon process exit.
+
+To this end, a new configuration option, MemEagerZero, can be configured to enforce zeroing out userworld and guest memory pages when a userworld process or guest exits. For kernel threads, memory spaces holding keys are zeroed out as soon as the secret is no longer needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.MemEagerZero | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Mem.MemEagerZero | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: 0
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000225</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable volatile key destruction.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By default, pages allocated for virtual machines (VMs), userspace applications, and kernel threads are zeroed out at allocation time. ESXi will always ensure that no nonzero pages are exposed to VMs or userspace applications. While this prevents exposing cryptographic keys from VMs or userworlds to other clients, these keys can stay present in host memory for a long time if the memory is not reused.
+
+The NIAP Virtualization Protection Profile and Server Virtualization Extended Package require that memory that may contain cryptographic keys be zeroed upon process exit.
+
+To this end, a new configuration option, MemEagerZero, can be configured to enforce zeroing out userworld and guest memory pages when a userworld process or guest exits. For kernel threads, memory spaces holding keys are zeroed out as soon as the secret is no longer needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Mem.MemEagerZero&quot; value and verify it is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.MemEagerZero
+
+If the &quot;Mem.MemEagerZero&quot; setting is not set to &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Mem.MemEagerZero&quot; value and configure it to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Mem.MemEagerZero | Set-AdvancedSetting -Value 1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000226</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure a session timeout for the vSphere API.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere API (VIM) allows for remote, programmatic administration of the ESXi host. Authenticated API sessions are no different from a risk perspective than authenticated UI sessions and they need similar protections.
+
+One of these protections is a basic inactivity timeout, after which the session will be invalidated and reauthentication will be required by the application accessing the API. This is set to 30 seconds by default but can be disabled, thus leaving API sessions open indefinitely. The 30 second default must be verified and maintained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000226</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure a session timeout for the vSphere API.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere API (VIM) allows for remote, programmatic administration of the ESXi host. Authenticated API sessions are no different from a risk perspective than authenticated UI sessions and they need similar protections.
+
+One of these protections is a basic inactivity timeout, after which the session will be invalidated and reauthentication will be required by the application accessing the API. This is set to 30 seconds by default but can be disabled, thus leaving API sessions open indefinitely. The 30 second default must be verified and maintained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; value and verify it is set to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout
+
+If the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; setting is not set to &quot;30&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.vmacore.soap.sessionTimeout&quot; value and configure it to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.vmacore.soap.sessionTimeout | Set-AdvancedSetting -Value 30</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000227</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must be configured with an appropriate maximum password age.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The older an ESXi local account password is, the larger the opportunity window is for attackers to guess, crack or re-use a previously cracked password. Rotating passwords on a regular basis is a fundamental security practice and one that ESXi supports.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordMaxDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;90&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 90
+     got: 99999
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Security.PasswordMaxDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;90&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 90
+     got: 99999
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000227</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must be configured with an appropriate maximum password age.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The older an ESXi local account password is, the larger the opportunity window is for attackers to guess, crack or re-use a previously cracked password. Rotating passwords on a regular basis is a fundamental security practice and one that ESXi supports.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Security.PasswordMaxDays&quot; value and verify it is set to &quot;90&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordMaxDays
+
+If the &quot;Security.PasswordMaxDays&quot; setting is not set to &quot;90&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Security.PasswordMaxDays&quot; value and configure it to &quot;90&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Security.PasswordMaxDays | Set-AdvancedSetting -Value 90</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000228</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi Common Information Model (CIM) service must be disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard application programming interfaces (APIs). These APIs are consumed by external applications such as HP SIM or Dell OpenManage for agentless, remote hardware monitoring of the ESXi host.
+
+To reduce attack surface area and following the minimum functionality principal, the CIM service must be disabled unless explicitly needed and approved.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: off
+     got: on
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;CIM Server&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000228</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi Common Information Model (CIM) service must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The CIM system provides an interface that enables hardware-level management from remote applications via a set of standard application programming interfaces (APIs). These APIs are consumed by external applications such as HP SIM or Dell OpenManage for agentless, remote hardware monitoring of the ESXi host.
+
+To reduce attack surface area and following the minimum functionality principal, the CIM service must be disabled unless explicitly needed and approved.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, locate the &quot;CIM Server&quot; service and verify it is &quot;Stopped&quot; and the &quot;Startup Policy&quot; is set to &quot;Start and stop manually&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;}
+
+If the &quot;CIM Server&quot; service does not have a &quot;Policy&quot; of &quot;off&quot; or is running, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot; select the &quot;CIM Server&quot; service and click the &quot;Stop&quot; button.
+
+Click &quot;Edit Startup policy...&quot; and select the &quot;Start and stop manually&quot; radio button. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;CIM Server&quot;} | Stop-VMHostService</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000229</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must use DOD-approved certificates.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The default self-signed host certificate issued by the VMware Certificate Authority (VMCA) must be replaced with a DOD-approved certificate when the host will be accessed directly, such as during a virtual machine (VM) console connection.
+
+The use of a DOD certificate on the host assures clients the service they are connecting to is legitimate and properly secured.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ssl_certificate for &#39;10.186.25.26&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ssl_certificate for &#39;10.186.25.26&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000229</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must use DOD-approved certificates.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The default self-signed host certificate issued by the VMware Certificate Authority (VMCA) must be replaced with a DOD-approved certificate when the host will be accessed directly, such as during a virtual machine (VM) console connection.
+
+The use of a DOD certificate on the host assures clients the service they are connecting to is legitimate and properly secured.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Certificate.
+
+If the issuer is not a DOD-approved certificate authority, this is a finding.
+
+If the host will never be accessed directly (virtual machine console connections bypass vCenter), this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Join the ESXi host to vCenter before replacing the certificate.
+
+Obtain a DOD-issued certificate and private key for the host following the requirements below:
+
+Key size: 2048 bits or more (PEM encoded)
+
+Key format: PEM
+VMware supports PKCS8 and PKCS1 (RSA keys)
+x509 version 3
+
+SubjectAltName must contain DNS Name&#x3D;&lt;machine_FQDN&gt;
+
+CRT (Base-64) format
+
+Contains the following Key Usages: Digital Signature, Non Repudiation, Key Encipherment
+
+Start time of one day before the current time
+
+CN (and SubjectAltName) set to the host name (or IP address) that the ESXi host has in the vCenter Server inventory
+
+From the vSphere Web Client, select the ESXi host&#39;s vCenter Server &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced Settings.
+
+Select the &quot;vpxd.certmgmt.mode&quot; value and ensure it is set to &quot;custom&quot;.
+
+Put the host into maintenance mode.
+
+Temporarily enable Secure Shell (SSH) on the host. Use Secure Copy Protocol (SCP) to transfer the new certificate and key to &#x2F;tmp. SSH to the host. Back up the existing certificate and key:
+
+# mv &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.crt &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.crt.bak
+# mv &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.key &#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;rui.key.bak
+
+Copy the new certificate and key to &quot;&#x2F;etc&#x2F;vmware&#x2F;ssl&#x2F;&quot; and rename them to &quot;rui.crt&quot; and &quot;rui.key&quot; respectively.
+
+Restart management agents to implement the new certificate:
+
+# services.sh restart</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000230</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host Secure Shell (SSH) daemon must disable port forwarding.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          While enabling Transmission Control Protocol (TCP) tunnels is a valuable function of sshd, this feature is not appropriate for use on the ESXi hypervisor.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000230</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host Secure Shell (SSH) daemon must disable port forwarding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">While enabling Transmission Control Protocol (TCP) tunnels is a valuable function of sshd, this feature is not appropriate for use on the ESXi hypervisor.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware&#x2F;openssh&#x2F;bin&#x2F;sshd -T | grep allowtcpforwarding
+
+Expected result:
+
+allowtcpforwarding no
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, add or update the following line in &quot;&#x2F;etc&#x2F;ssh&#x2F;sshd_config&quot;:
+
+AllowTcpForwarding no</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000231</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host OpenSLP service must be disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          OpenSLP implements the Service Location Protocol to help CIM clients discover CIM servers over TCP 427. This service is not widely needed and has had vulnerabilities exposed in the past. To reduce attack surface area and following the minimum functionality principal, the OpenSLP service must be disabled unless explicitly needed and approved.
+
+Note: Disabling the OpenSLP service may affect monitoring and third-party systems that use the WBEM DTMF protocols.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Policy stdout.strip is expected to cmp &#x3D;&#x3D; &quot;off&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-VMHostService | Where {$_.Label -eq &#39;slpd&#39;} | Select-Object -ExpandProperty Running stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000231</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host OpenSLP service must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">OpenSLP implements the Service Location Protocol to help CIM clients discover CIM servers over TCP 427. This service is not widely needed and has had vulnerabilities exposed in the past. To reduce attack surface area and following the minimum functionality principal, the OpenSLP service must be disabled unless explicitly needed and approved.
+
+Note: Disabling the OpenSLP service may affect monitoring and third-party systems that use the WBEM DTMF protocols.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot;, locate the &quot;slpd&quot; service and verify it is &quot;Stopped&quot; and the &quot;Startup Policy&quot; is set to &quot;Start and stop manually&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;}
+
+If the slpd service does not have a &quot;Policy&quot; of &quot;off&quot; or is running, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Services.
+
+Under &quot;Services&quot; select the &quot;slpd&quot; service and click the &quot;Stop&quot; button.
+
+Click &quot;Edit Startup policy...&quot; and select the &quot;Start and stop manually&quot; radio button. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;} | Set-VMHostService -Policy Off
+Get-VMHost | Get-VMHostService | Where {$_.Label -eq &quot;slpd&quot;} | Stop-VMHostService</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000232</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable audit logging.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000232</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable audit logging.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.storageEnable&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable
+
+If the &quot;Syslog.global.auditRecord.storageEnable&quot; setting is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.storageEnable&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.storageEnable | Set-AdvancedSetting -Value &quot;true&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000233</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must off-load audit records via syslog.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000233</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must off-load audit records via syslog.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ESXi offers both local and remote audit recordkeeping to meet the requirements of the NIAP Virtualization Protection Profile and Server Virtualization Extended Package. Local records are stored on any accessible local or VMFS path. Remote records are sent to the global syslog servers configured elsewhere.
+
+To operate in the NIAP validated state, ESXi must enable and properly configure this audit system. This system is disabled by default.
+
+Note: Audit records can be viewed locally via the &quot;&#x2F;bin&#x2F;viewAudit&quot; utility over SSH or at the ESXi shell.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.auditRecord.remoteEnable&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable
+
+If the &quot;Syslog.global.auditRecord.remoteEnable&quot; setting is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.auditRecord.remoteEnable&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.auditRecord.remoteEnable | Set-AdvancedSetting -Value &quot;true&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000234</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enable strict x509 verification for SSL syslog endpoints.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When sending syslog data to a remote host via SSL, the ESXi host is presented with the endpoint&#39;s SSL server certificate. In addition to trust verification, configured elsewhere, this &quot;x509-strict&quot; option performs additional validity checks on CA root certificates during verification.
+
+These checks are generally not performed (CA roots are inherently trusted) and might cause incompatibilities with existing, misconfigured CA roots. The NIAP requirements in the Virtualization Protection Profile and Server Virtualization Extended Package, however, require even CA roots to pass validations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000234</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enable strict x509 verification for SSL syslog endpoints.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When sending syslog data to a remote host via SSL, the ESXi host is presented with the endpoint&#39;s SSL server certificate. In addition to trust verification, configured elsewhere, this &quot;x509-strict&quot; option performs additional validity checks on CA root certificates during verification.
+
+These checks are generally not performed (CA roots are inherently trusted) and might cause incompatibilities with existing, misconfigured CA roots. The NIAP requirements in the Virtualization Protection Profile and Server Virtualization Extended Package, however, require even CA roots to pass validations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If SSL is not used for a syslog target, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.certificate.strictX509Compliance&quot; value and verify it is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance
+
+If the &quot;Syslog.global.certificate.strictX509Compliance&quot; setting is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.certificate.strictX509Compliance&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.certificate.strictX509Compliance | Set-AdvancedSetting -Value &quot;true&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000235</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must forward audit records containing information to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user&#x2F;process&#x2F;VM identifiers, event descriptions, success&#x2F;fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in the ESXi audit logs provides a means of investigating an attack; recognizing resource utilization or capacity thresholds; or identifying an improperly configured host.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logLevel | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: info
+     got: error
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name Syslog.global.logLevel | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: info
+     got: error
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000235</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must forward audit records containing information to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+
+Audit record content that may be necessary to satisfy this requirement includes, for example, time stamps, source and destination addresses, user&#x2F;process&#x2F;VM identifiers, event descriptions, success&#x2F;fail indications, filenames involved, and access control or flow control rules invoked.
+
+Associating event types with detected events in the ESXi audit logs provides a means of investigating an attack; recognizing resource utilization or capacity thresholds; or identifying an improperly configured host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logLevel&quot; value and verify it is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logLevel
+
+If the &quot;Syslog.global.logLevel&quot; setting is not set to &quot;info&quot;, this is a finding.
+
+Note: Verbose logging level is acceptable for troubleshooting purposes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logLevel&quot; value and configure it to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logLevel | Set-AdvancedSetting -Value &quot;info&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000236</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not be configured to override virtual machine (VM) configurations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000236</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not be configured to override virtual machine (VM) configurations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# stat -c &quot;%s&quot; &#x2F;etc&#x2F;vmware&#x2F;settings
+
+Expected result:
+
+0
+
+If the output does not match the expected result, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# echo -n &gt;&#x2F;etc&#x2F;vmware&#x2F;settings</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000237</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not be configured to override virtual machine (VM) logger settings.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000237</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not be configured to override virtual machine (VM) logger settings.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Each VM on an ESXi host runs in its own &quot;vmx&quot; process. Upon creation, a vmx process will look in two locations for configuration items, the ESXi host itself and the per-vm *.vmx file in the VM storage path on the datastore. The settings on the ESXi host are read first and take precedence over settings in the *.vmx file.
+
+This can be a convenient way to set a setting in one place and have it apply to all VMs running on that host. The difficulty is in managing those settings and determining the effective state. Since managing per-VM vmx settings can be fully automated and customized while the ESXi setting cannot be easily queried, the ESXi configuration must not be used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# grep &quot;^vmx\.log&quot; &#x2F;etc&#x2F;vmware&#x2F;config
+
+If the command produces any output, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following commands:
+
+# cp &#x2F;etc&#x2F;vmware&#x2F;config &#x2F;etc&#x2F;vmware&#x2F;config.bak
+# grep -v &quot;^vmx\.log&quot; &#x2F;etc&#x2F;vmware&#x2F;config.bak&gt;&#x2F;etc&#x2F;vmware&#x2F;config</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000238</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must require TPM-based configuration encryption.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An ESXi host&#39;s configuration consists of configuration files for each service that runs on the host. The configuration files typically reside in the &#x2F;etc&#x2F; directory, but they can also reside in other namespaces. The configuration files contain run-time information about the state of the services. Over time, the default values in the configuration files might change, for example, when settings on the ESXi host are changed.
+
+A cron job backs up the ESXi configuration files periodically, when ESXi shuts down gracefully or on demand, and creates an archived configuration file in the boot bank. When ESXi reboots, it reads the archived configuration file and recreates the state that ESXi was in when the backup was taken.
+
+Before vSphere 7.0 Update 2, the archived ESXi configuration file is not encrypted. In vSphere 7.0 Update 2 and later, the archived configuration file is encrypted. When the ESXi host is configured with a Trusted Platform Module (TPM), the TPM is used to &quot;seal&quot; the configuration to the host, providing a strong security guarantee and additional protection from offline attacks.
+
+Configuration encryption uses the physical TPM when it is available and supported at install or upgrade time. If the TPM was added or enabled later, the ESXi host must be told to reconfigure to use the newly available TPM. Once the TPM configuration encryption is enabled, it cannot be disabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty Mode stdout.strip is expected to cmp &#x3D;&#x3D; &quot;TPM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TPM
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.encryption.get.invoke() | Select-Object -ExpandProperty Mode stdout.strip is expected to cmp &#x3D;&#x3D; &quot;TPM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TPM
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000238</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must require TPM-based configuration encryption.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An ESXi host&#39;s configuration consists of configuration files for each service that runs on the host. The configuration files typically reside in the &#x2F;etc&#x2F; directory, but they can also reside in other namespaces. The configuration files contain run-time information about the state of the services. Over time, the default values in the configuration files might change, for example, when settings on the ESXi host are changed.
+
+A cron job backs up the ESXi configuration files periodically, when ESXi shuts down gracefully or on demand, and creates an archived configuration file in the boot bank. When ESXi reboots, it reads the archived configuration file and recreates the state that ESXi was in when the backup was taken.
+
+Before vSphere 7.0 Update 2, the archived ESXi configuration file is not encrypted. In vSphere 7.0 Update 2 and later, the archived configuration file is encrypted. When the ESXi host is configured with a Trusted Platform Module (TPM), the TPM is used to &quot;seal&quot; the configuration to the host, providing a strong security guarantee and additional protection from offline attacks.
+
+Configuration encryption uses the physical TPM when it is available and supported at install or upgrade time. If the TPM was added or enabled later, the ESXi host must be told to reconfigure to use the newly available TPM. Once the TPM configuration encryption is enabled, it cannot be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.encryption.get.invoke() | Select Mode
+
+Expected result:
+
+Mode: TPM
+
+If the &quot;Mode&quot; is not set to &quot;TPM&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Ensure the TPM 2.0 chip is enabled in the BIOS and the ESX UI does not show any errors about a present but unavailable TPM.
+
+This setting cannot be configured until the TPM is properly enabled in firmware.
+
+From an ESXi shell, run the following command:
+
+# esxcli system settings encryption set --mode&#x3D;TPM
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.encryption.set.CreateArgs()
+$arguments.mode &#x3D; &quot;TPM&quot;
+$esxcli.system.settings.encryption.set.Invoke($arguments)
+
+Evacuate the host and gracefully reboot for changes to take effect.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000239</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure the firewall to restrict access to services running on the host.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unrestricted access to services running on an ESXi host can expose a host to outside attacks and unauthorized access. Reduce the risk by configuring the ESXi firewall to only allow access from authorized networks.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">False is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">False is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000239</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure the firewall to restrict access to services running on the host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unrestricted access to services running on an ESXi host can expose a host to outside attacks and unauthorized access. Reduce the risk by configuring the ESXi firewall to only allow access from authorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Firewall.
+
+Under the &quot;Allowed IP addresses&quot; column, review the allowed IPs for each service.
+
+Check this for &quot;Incoming&quot; and &quot;Outgoing&quot; sections.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-VMHostFirewallException | Where {$_.Enabled -eq $true} | Select Name,Enabled,@{N&#x3D;&quot;AllIPEnabled&quot;;E&#x3D;{$_.ExtensionData.AllowedHosts.AllIP}}
+
+If for an enabled service &quot;Allow connections from any IP address&quot; is selected, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Firewall.
+
+Click &quot;Edit...&quot;. For each enabled service, uncheck the check box to &quot;Allow connections from any IP address&quot; and input the site-specific network(s) required.
+
+The following example formats are acceptable:
+
+192.168.0.0&#x2F;24
+192.168.1.2, 2001::1&#x2F;64
+fd3e:29a6:0a81:e478::&#x2F;64
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+#This disables the allow all rule for the target service. We are targeting the sshServer service in this example.
+$arguments &#x3D; $esxcli.network.firewall.ruleset.set.CreateArgs()
+$arguments.rulesetid &#x3D; &quot;sshServer&quot;
+$arguments.allowedall &#x3D; $false
+$esxcli.network.firewall.ruleset.set.Invoke($arguments)
+
+#Next add the allowed IPs for the service. Note doing the &quot;vSphere Web Client&quot; service this way may disable access but may be done through vCenter or through the console.
+$arguments &#x3D; $esxcli.network.firewall.ruleset.allowedip.add.CreateArgs()
+$arguments.rulesetid &#x3D; &quot;sshServer&quot;
+$arguments.ipaddress &#x3D; &quot;10.0.0.0&#x2F;8&quot;
+$esxcli.network.firewall.ruleset.allowedip.add.Invoke($arguments)
+
+This must be done for each enabled service.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000240</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host when using Host Profiles and&#x2F;or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If a host is configured to join an Active Directory domain using Host Profiles and&#x2F;or Auto Deploy, the Active Directory credentials are saved in the profile and are transmitted over the network.
+
+To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network, use the vSphere Authentication Proxy.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no attached host profiles host: 10.186.25.26. This control is not applicable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no attached host profiles host: 10.186.25.26. This control is not applicable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000240</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host when using Host Profiles and&#x2F;or Auto Deploy must use the vSphere Authentication Proxy to protect passwords when adding themselves to Active Directory.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If a host is configured to join an Active Directory domain using Host Profiles and&#x2F;or Auto Deploy, the Active Directory credentials are saved in the profile and are transmitted over the network.
+
+To avoid having to save Active Directory credentials in the Host Profile and to avoid transmitting Active Directory credentials over the network, use the vSphere Authentication Proxy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For environments that do not use vCenter server to manage ESXi, this is not applicable.
+
+If the organization is not using Host Profiles to join Active Directory, this is not applicable.
+
+From the vSphere Client, go to Home &gt;&gt; Policies and Profiles &gt;&gt; Host Profiles.
+
+Click a Host Profile &gt;&gt; Configure &gt;&gt; Security and Services &gt;&gt; Security Settings &gt;&gt; Authentication Configuration &gt;&gt; Active Directory Configuration &gt;&gt; Join Domain Method.
+
+If the method used to join hosts to a domain is not set to &quot;Use vSphere Authentication Proxy to add the host to domain&quot;, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to vCenter, run the following command:
+
+Get-VMHost | Select Name, &#x60; @{N&#x3D;&quot;HostProfile&quot;;E&#x3D;{$_ | Get-VMHostProfile}}, &#x60; @{N&#x3D;&quot;JoinADEnabled&quot;;E&#x3D;{($_ | Get-VmHostProfile).ExtensionData.Config.ApplyProfile.Authentication.ActiveDirectory.Enabled}}, &#x60; @{N&#x3D;&quot;JoinDomainMethod&quot;;E&#x3D;{(($_ | Get-VMHostProfile).ExtensionData.Config.ApplyProfile.Authentication.ActiveDirectory | Select -ExpandProperty Policy | Where {$_.Id -eq &quot;JoinDomainMethodPolicy&quot;}).Policyoption.Id}}
+
+If &quot;JoinADEnabled&quot; is &quot;True&quot; and &quot;JoinDomainMethod&quot; is not &quot;FixedCAMConfigOption&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Home &gt;&gt; Policies and Profiles &gt;&gt; Host Profiles.
+
+Click a Host Profile &gt;&gt; Configure &gt;&gt; Security and Services &gt;&gt; Security Settings &gt;&gt; Authentication Configuration &gt;&gt; Active Directory Configuration.
+
+Click &quot;Edit Host Profile...&quot;. Set the &quot;Join Domain Method&quot; to &quot;Use vSphere Authentication Proxy to add the host to domain&quot; and provide the IP address of the vSphere Authentication Proxy server.
+
+Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000241</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not use the default Active Directory ESX Admin group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When adding ESXi hosts to Active Directory, all user&#x2F;group accounts assigned to the Active Directory group &quot;ESX Admins&quot; will have full administrative access to the host.
+
+If this group is not controlled or known to the system administrators, it may be used for inappropriate access to the host. Therefore, the default group must be changed to a site-specific Active Directory group and membership must be severely restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000241</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not use the default Active Directory ESX Admin group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When adding ESXi hosts to Active Directory, all user&#x2F;group accounts assigned to the Active Directory group &quot;ESX Admins&quot; will have full administrative access to the host.
+
+If this group is not controlled or known to the system administrators, it may be used for inappropriate access to the host. Therefore, the default group must be changed to a site-specific Active Directory group and membership must be severely restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For systems that do not use Active Directory, this is not applicable.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; value and verify it is not set to &quot;ESX Admins&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.hostsvc.esxAdminsGroup
+
+If the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; setting is set to &quot;ESX Admins&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Config.HostAgent.plugins.hostsvc.esxAdminsGroup&quot; key and configure its value to an appropriate Active Directory group other than &quot;ESX Admins&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Config.HostAgent.plugins.hostsvc.esxAdminsGroup | Set-AdvancedSetting -Value &quot;&lt;site specific AD group&gt;&quot;
+
+Note: Changing the group name does not remove the permissions of the previous group.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000243</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must configure a persistent log location for all locally stored logs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ESXi can be configured to store log files on an in-memory file system. This occurs when the host&#39;s &quot;&#x2F;scratch&quot; directory is linked to &quot;&#x2F;tmp&#x2F;scratch&quot;. When this is done, only a single day&#39;s worth of logs are stored at any time. In addition, log files will be reinitialized upon each reboot.
+
+This presents a security risk as user activity logged on the host is only stored temporarily and will not persist across reboots. This can also complicate auditing and make it harder to monitor events and diagnose issues. ESXi host logging should always be configured to a persistent datastore.
+
+Note: Scratch space is configured automatically during installation or first boot of an ESXi host and does not usually need to be configured manually.
+
+If ESXi is installed on an SD card or USB device, a persistent log location may not be configured upon install as normal.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.get.Invoke() | Select-Object -ExpandProperty LocalLogOutputIsPersistent stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.get.Invoke() | Select-Object -ExpandProperty LocalLogOutputIsPersistent stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000243</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must configure a persistent log location for all locally stored logs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ESXi can be configured to store log files on an in-memory file system. This occurs when the host&#39;s &quot;&#x2F;scratch&quot; directory is linked to &quot;&#x2F;tmp&#x2F;scratch&quot;. When this is done, only a single day&#39;s worth of logs are stored at any time. In addition, log files will be reinitialized upon each reboot.
+
+This presents a security risk as user activity logged on the host is only stored temporarily and will not persist across reboots. This can also complicate auditing and make it harder to monitor events and diagnose issues. ESXi host logging should always be configured to a persistent datastore.
+
+Note: Scratch space is configured automatically during installation or first boot of an ESXi host and does not usually need to be configured manually.
+
+If ESXi is installed on an SD card or USB device, a persistent log location may not be configured upon install as normal.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;Syslog.global.logDir&quot; value and verify it is set to a persistent location.
+
+If the value of the setting is &quot;[] &#x2F;scratch&#x2F;logs&quot;, verify the advanced setting &quot;ScratchConfig.CurrentScratchLocation&quot; is not set to &quot;&#x2F;tmp&#x2F;scratch&quot;. This is a nonpersistent location.
+
+If &quot;Syslog.global.logDir&quot; is not configured to a persistent location, this is a finding.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.syslog.config.get.Invoke() | Select LocalLogOutput,LocalLogOutputIsPersistent
+
+If the &quot;LocalLogOutputIsPersistent&quot; value is not true, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;Syslog.global.logDir&quot; value and set it to a known persistent location.
+
+An example is shown below, where 51dda02d-fade5016-8a08-005056171889 is the UUID of the target datastore:
+
+&#x2F;vmfs&#x2F;volumes&#x2F;51dda02d-fade5016-8a08-005056171889
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name Syslog.global.logDir | Set-AdvancedSetting -Value &quot;New Log Location&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000244</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must enforce the exclusive running of executables from approved VIBs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;execInstalledOnly&quot; advanced ESXi boot option, when set to TRUE, guarantees that the VMkernel executes only those binaries that have been packaged as part of a signed VIB. While this option is effective on its own, it can be further enhanced by telling the Secure Boot to check with the TPM to make sure that the boot process does not proceed unless this setting is enabled. This further protects against malicious offline changes to ESXi configuration to disable the &quot;execInstalledOnly&quot; option.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VMHost -Name 10.186.25.26 | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000244</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must enforce the exclusive running of executables from approved VIBs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;execInstalledOnly&quot; advanced ESXi boot option, when set to TRUE, guarantees that the VMkernel executes only those binaries that have been packaged as part of a signed VIB. While this option is effective on its own, it can be further enhanced by telling the Secure Boot to check with the TPM to make sure that the boot process does not proceed unless this setting is enabled. This further protects against malicious offline changes to ESXi configuration to disable the &quot;execInstalledOnly&quot; option.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the ESXi host does not have a compatible TPM, this finding is downgraded to a CAT III.
+
+From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Select the &quot;VMkernel.Boot.execInstalledOnly&quot; value and verify that it is &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly
+
+If the &quot;VMkernel.Boot.execInstalledOnly&quot; setting is not &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Hosts and Clusters.
+
+Select the ESXi Host &gt;&gt; Configure &gt;&gt; System &gt;&gt; Advanced System Settings.
+
+Click &quot;Edit&quot;. Select the &quot;VMkernel.Boot.execInstalledOnly&quot; value and configure it to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following command:
+
+Get-VMHost | Get-AdvancedSetting -Name VMkernel.Boot.execInstalledOnly | Set-AdvancedSetting -Value True</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000245</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must use sufficient entropy for cryptographic operations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host.
+
+In computing, the term &quot;entropy&quot; refers to random characters and data that are collected for use in cryptography, such as generating encryption keys to secure data transmitted over a network. Entropy is required by security for generating keys and communicating securely over the network. Entropy is often collected from a variety of sources on a system.
+
+FIPS entropy handling is the default behavior if the following conditions are true:
+
+-The hardware supports RDSEED.
+-The disableHwrng VMkernel boot option isn&#39;t present or is FALSE.
+-The entropySources VMkernel boot option isn&#39;t present or is 0 (zero).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;disableHwrng&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;entropySources&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;disableHwrng&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.settings.kernel.list.invoke()| Where {$_.Name -eq &quot;entropySources&quot;} | Select-Object -ExpandProperty Configured stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000245</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must use sufficient entropy for cryptographic operations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Starting in vSphere 8.0, the ESXi Entropy implementation supports the FIPS 140-3 and EAL4 certifications. Kernel boot options control which entropy sources to activate on an ESXi host.
+
+In computing, the term &quot;entropy&quot; refers to random characters and data that are collected for use in cryptography, such as generating encryption keys to secure data transmitted over a network. Entropy is required by security for generating keys and communicating securely over the network. Entropy is often collected from a variety of sources on a system.
+
+FIPS entropy handling is the default behavior if the following conditions are true:
+
+-The hardware supports RDSEED.
+-The disableHwrng VMkernel boot option isn&#39;t present or is FALSE.
+-The entropySources VMkernel boot option isn&#39;t present or is 0 (zero).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following commands:
+
+# esxcli system settings kernel list -o disableHwrng
+# esxcli system settings kernel list -o entropySources
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.settings.kernel.list.invoke() | Where {$_.Name -eq &quot;disableHwrng&quot; -or $_.Name -eq &quot;entropySources&quot;}
+
+If &quot;disableHwrng&quot; is not set to &quot;false&quot;, this is a finding.
+If &quot;entropySources&quot; is not set to &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following commands:
+
+# esxcli system settings kernel set -s disableHwrng -v FALSE
+# esxcli system settings kernel set -s entropySources -v 0
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.settings.kernel.set.CreateArgs()
+$arguments.setting &#x3D; &quot;disableHwrng&quot;
+$arguments.value &#x3D; &quot;FALSE&quot;
+$esxcli.system.settings.kernel.set.invoke($arguments)
+$arguments.setting &#x3D; &quot;entropySources&quot;
+$arguments.value &#x3D; &quot;0&quot;
+$esxcli.system.settings.kernel.set.invoke($arguments)
+
+Reboot the ESXi host after updating entropy settings.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">ESXI-80-000246</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ESXi host must not enable log filtering.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The log filtering capability lets you modify the logging policy of the syslog service that is running on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi logs and to deny specific log events entirely.
+
+Setting a limit to the amount of logging information restricts the ability to detect and respond to potential security issues or system failures properly.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.logfilter.get.invoke() | Select-Object -ExpandProperty LogFilteringEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vmhost &#x3D; Get-VMHost -Name 10.186.25.26; $esxcli &#x3D; Get-EsxCli -VMHost $vmhost -V2; $esxcli.system.syslog.config.logfilter.get.invoke() | Select-Object -ExpandProperty LogFilteringEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">ESXI-80-000246</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ESXi host must not enable log filtering.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The log filtering capability lets you modify the logging policy of the syslog service that is running on an ESXi host. You can create log filters to reduce the number of repetitive entries in the ESXi logs and to deny specific log events entirely.
+
+Setting a limit to the amount of logging information restricts the ability to detect and respond to potential security issues or system failures properly.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system syslog config logfilter get
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$esxcli.system.syslog.config.logfilter.get.invoke()
+
+If &quot;LogFilteringEnabled&quot; is not set to &quot;false&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From an ESXi shell, run the following command:
+
+# esxcli system syslog config logfilter set --log-filtering-enabled&#x3D;false
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host, run the following commands:
+
+$esxcli &#x3D; Get-EsxCli -v2
+$arguments &#x3D; $esxcli.system.syslog.config.logfilter.set.CreateArgs()
+$arguments.logfilteringenabled &#x3D; $false
+$esxcli.system.syslog.config.logfilter.set.invoke($arguments)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000009</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-17 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (8)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000068
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000382
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001184
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001453
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001941
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001942
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002418
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002420
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002421
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002422
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000009</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must use TLS 1.2, at a minimum, to protect the confidentiality of sensitive data during electronic dissemination using remote access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-17 (2), CM-7 b, IA-2 (8), IA-2 (9), SC-13, SC-23, SC-8, SC-8 (1), SC-8 (2)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">At the command prompt on the vCenter Server Appliance, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware-TlsReconfigurator&#x2F;VcTlsReconfigurator&#x2F;reconfigureVc scan
+
+If the output indicates versions of TLS other than 1.2 are enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">At the command prompt on the vCenter Server Appliance, run the following command:
+
+# &#x2F;usr&#x2F;lib&#x2F;vmware-TlsReconfigurator&#x2F;VcTlsReconfigurator&#x2F;reconfigureVc update -p TLSv1.2
+
+vCenter services will be restarted as part of the reconfiguration. The operating system will not be restarted.
+
+The &quot;--no-restart&quot; flag can be added to restart services at a later time.
+
+Changes will not take effect until all services are restarted or the appliance is rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000023</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enforce the limit of three consecutive invalid login attempts by a user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000044
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).MaxFailedAttempts stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 3
+     got: 5
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).MaxFailedAttempts stdout.strip is expected to cmp &#x3D;&#x3D; &quot;3&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 3
+     got: 5
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000023</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enforce the limit of three consecutive invalid login attempts by a user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+The following lockout policy should be set as follows:
+
+Maximum number of failed login attempts: 3
+
+If this account lockout policy is not configured as stated, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Maximum number of failed login attempts&quot; to &quot;3&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000024</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-8 c 1
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000048
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000050
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001384
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Display of the DOD-approved use notification before granting access to the application ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with DTM-08-060. Use the following verbiage for applications that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for operating systems that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000024</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Display of the DOD-approved use notification before granting access to the application ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
+
+System use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.
+
+The banner must be formatted in accordance with DTM-08-060. Use the following verbiage for applications that can accommodate banners of 1300 characters:
+
+&quot;You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
+
+By using this IS (which includes any device attached to this IS), you consent to the following conditions:
+
+-The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
+
+-At any time, the USG may inspect and seize data stored on this IS.
+
+-Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
+
+-This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
+
+-Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.&quot;
+
+Use the following verbiage for operating systems that have severe limitations on the number of characters that can be displayed in the banner:
+
+&quot;I&#39;ve read (literal ampersand) consent to terms in IS user agreem&#39;t.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-8 a, AC-8 b, AC-8 c 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Login Message.
+
+If the selection box next to &quot;Show login message&quot; is disabled, &quot;Details of login message&quot; is not configured to the standard DOD User Agreement, or the &quot;Consent checkbox&quot; is disabled, this is a finding.
+
+Note: Refer to vulnerability discussion for user agreement language.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Login Message.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Show login message&quot; slider to enable.
+
+Configure the &quot;Login message&quot; to &quot;DOD User Agreement&quot;.
+
+Click the &quot;Consent checkbox&quot; slider to enable.
+
+Set the &quot;Details of login message&quot; to the Standard Mandatory DOD Notice and Consent Banner text.
+
+Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000034</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must produce audit records containing information to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.log.level | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;info&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000034</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must produce audit records containing information to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without establishing what types of events occurred, it would be difficult to establish, correlate, and investigate the events leading up to an outage or attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify the &quot;config.log.level&quot; value is set to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.log.level and verify it is set to &quot;info&quot;.
+
+If the &quot;config.log.level&quot; value is not set to &quot;info&quot; or does not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;config.log.level&quot; setting to &quot;info&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.log.level | Set-AdvancedSetting -Value info</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000057</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>vCenter Server plugins must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, web-based functionality.
+
+vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
+
+Additionally, vCenter comes with a number of plugins preinstalled that may or may not be necessary for proper operation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000057</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">vCenter Server plugins must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, web-based functionality.
+
+vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.
+
+Additionally, vCenter comes with a number of plugins preinstalled that may or may not be necessary for proper operation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Solutions &gt;&gt; Client Plug-Ins.
+
+View the Installed&#x2F;Available Plug-ins list and verify they are all identified as authorized VMware, third-party (partner), and&#x2F;or site-specific approved plug-ins.
+
+If any installed&#x2F;available plug-ins in the viewable list cannot be verified as allowed vSphere Client plug-ins from trusted sources or are not in active use, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Solutions &gt;&gt; Client Plug-Ins, click the radio button next to the unknown plug-in, and click &quot;Disable&quot;.
+
+If the plugin will not be needed in the future, proceed to uninstall the plug-in.
+
+To uninstall plug-ins, do the following:
+
+If vCenter Server is in linked mode, perform this procedure on the vCenter Server that is used to install the plug-in initially and then restart the vCenter Server services on the linked vCenter Server:
+
+In a web browser, navigate to &quot;http:&#x2F;&#x2F;vCenter_Server_name_or_IP&#x2F;mob&quot;, where &quot;vCenter_Server_name_or_IP&#x2F;mob&quot; is the name of the vCenter Server or its IP address.
+
+Click &quot;Content&quot;.
+
+Click &quot;ExtensionManager&quot;.
+
+Select and copy the name of the plug-in to be removed from the list of values under &quot;Properties&quot;.
+
+Click &quot;UnregisterExtension&quot;. A new window appears.
+
+Paste the name of the plug-in and click &quot;Invoke Method&quot;. This removes the plug-in.
+
+Close the window.
+
+Refresh the Managed Object Type:ManagedObjectReference:ExtensionManager window to verify the plug-in is removed successfully.
+
+Note: If the plug-in still appears, restart the vSphere Client.
+
+Note: The Managed Object Browser (MOB) may have to be enabled temporarily if it was disabled previously.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000059</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-4 e
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000764
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000770
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000795
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000804
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001682
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses except the following.
+
+(i) Accesses explicitly identified and documented by the organization. Organizations document specific user actions that can be performed on the information system without identification or authentication; and
+(ii) Accesses that occur through authorized use of group authenticators without individual authentication. Organizations may require unique identification of individuals in group accounts (e.g., shared privilege accounts) or for detailed accountability of individual activity.
+
+Using Active Directory or an identity provider for authentication provides more robust account management capabilities and accountability.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000059</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To ensure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and compromise of the system.
+
+Organizational users include organizational employees or individuals the organization deems to have equivalent status of employees (e.g., contractors). Organizational users (and any processes acting on behalf of users) must be uniquely identified and authenticated for all accesses except the following.
+
+(i) Accesses explicitly identified and documented by the organization. Organizations document specific user actions that can be performed on the information system without identification or authentication; and
+(ii) Accesses that occur through authorized use of group authenticators without individual authentication. Organizations may require unique identification of individuals in group accounts (e.g., shared privilege accounts) or for detailed accountability of individual activity.
+
+Using Active Directory or an identity provider for authentication provides more robust account management capabilities and accountability.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), IA-2, IA-2 (5), IA-4 e, IA-8</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+If the identity provider type is &quot;embedded&quot; and there is no identity source of type &quot;Active Directory&quot; (either Windows Integrated Authentication or LDAP), this is a finding.
+
+If the identity provider type is &quot;Microsoft ADFS&quot; or another supported identity provider, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">When using the embedded identity provider type, perform the following:
+
+From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Identity Sources.
+
+Click &quot;Add&quot;.
+
+Select either &quot;Active Directory over LDAP&quot; or &quot;Active Directory (Windows Integrated Authentication)&quot; and configure appropriately.
+
+Note: Windows Integrated Authentication requires that the vCenter server be joined to Active Directory before configuration via Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Active Directory Domain.
+
+OR
+
+To change the identity provider type to a third-party identity provider such as Microsoft ADFS, perform the following:
+
+From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click &quot;Change Identity Provider&quot;.
+
+Select &quot;Microsoft ADFS&quot; and click &quot;Next&quot;.
+
+Enter the ADFS server information and User and Group details and click &quot;Finish&quot;.
+
+For additional information on configuring ADFS for use with vCenter, refer to the vSphere documentation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000060</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must require multifactor authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000166
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000765
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000766
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001953
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002009
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.
+
+Multifactor authentication requires using two or more factors to achieve authentication.
+
+Factors include:
+(i) something a user knows (e.g., password&#x2F;PIN);
+(ii) something a user has (e.g., cryptographic identification device, token); or
+(iii) something a user is (e.g., biometric).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000060</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must require multifactor authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased.
+
+Multifactor authentication requires using two or more factors to achieve authentication.
+
+Factors include:
+(i) something a user knows (e.g., password&#x2F;PIN);
+(ii) something a user has (e.g., cryptographic identification device, token); or
+(iii) something a user is (e.g., biometric).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-10, IA-2 (1), IA-2 (12), IA-2 (2), IA-8 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Web Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+If the embedded identity provider is used, click on &quot;Smart Card Authentication&quot;.
+
+If the embedded identity provider is used and &quot;Smart Card Authentication&quot; is not enabled, this is a finding.
+
+If a third-party identity provider is used, such as Microsoft ADFS, and it does not require multifactor authentication to log on to vCenter, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To configure smart card authentication for vCenter when using the embedded identity provider, refer to the vSphere documentation.
+
+For vCenter Servers using a third-party identity provider, consult the product&#39;s documentation for enabling multifactor authentication.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000069</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must be at least 15 characters in length.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000205
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Use of more characters in a password helps to exponentially increase the time and&#x2F;or resources required to compromise the password.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinLength stdout.strip is expected to cmp &gt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 15
+     got: 8
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinLength stdout.strip is expected to cmp &gt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 15
+     got: 8
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000069</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must be at least 15 characters in length.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to determine strength and how long it takes to crack a password. The shorter the password, the lower the number of possible combinations that need to be tested before the password is compromised.
+
+Use of more characters in a password helps to exponentially increase the time and&#x2F;or resources required to compromise the password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Minimum Length&quot; setting.
+
+Minimum Length: 15
+
+If the password policy is not configured with a &quot;Minimum Length&quot; policy of &quot;15&quot; or more, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Minimum Length&quot; to &quot;15&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000070</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must prohibit password reuse for a minimum of five generations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000200
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+To meet password policy requirements, passwords must be changed at specific policy-based intervals.
+
+If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).ProhibitedPreviousPasswordsCount stdout.strip is expected to cmp &gt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).ProhibitedPreviousPasswordsCount stdout.strip is expected to cmp &gt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000070</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must prohibit password reuse for a minimum of five generations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+To meet password policy requirements, passwords must be changed at specific policy-based intervals.
+
+If the information system or application allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the result is a password that is not changed per policy requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (e)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Restrict reuse&quot; setting.
+
+Restrict reuse: Users cannot reuse any previous 5 passwords
+
+If the password policy is not configured with a &quot;Restrict reuse&quot; policy of &quot;5&quot; or more, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Restrict reuse&quot; to &quot;5&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000071</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must contain at least one uppercase character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password is, the greater the number of possible combinations that need to be tested before the password is compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinUppercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinUppercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000071</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must contain at least one uppercase character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password is, the greater the number of possible combinations that need to be tested before the password is compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 uppercase characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more uppercase characters, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;uppercase characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000072</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must contain at least one lowercase character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000193
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinLowercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinLowercaseCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000072</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must contain at least one lowercase character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 lowercase characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more lowercase characters, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;lowercase characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000073</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must contain at least one numeric character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000194
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinNumericCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinNumericCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000073</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must contain at least one numeric character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor of several that determine how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 numeric characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more numeric characters, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;numeric characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000074</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server passwords must contain at least one special character.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001619
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor in determining how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Special characters are not alphanumeric. Examples include: ~ ! @ # $ % ^ *.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinSpecialCharCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).MinSpecialCharCount stdout.strip is expected to cmp &gt;&#x3D; 1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000074</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server passwords must contain at least one special character.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks.
+
+Password complexity is one factor in determining how long it takes to crack a password. The more complex the password, the greater the number of possible combinations that need to be tested before the password is compromised.
+
+Special characters are not alphanumeric. Examples include: ~ ! @ # $ % ^ *.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Character requirements&quot; setting.
+
+Character requirements: At least 1 special characters
+
+If the password policy is not configured with &quot;Character requirements&quot; policy requiring &quot;1&quot; or more special characters, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;special characters&quot; to at least &quot;1&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000077</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enable FIPS-validated cryptography.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-7
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000197
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000803
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001188
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001199
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001967
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-003123
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements.
+
+In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).
+
+vSphere 7.0 Update 2 and later adds additional FIPS-validated cryptography to vCenter Server Appliance. By default, this FIPS validation option is disabled and must be enabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Invoke-GetSystemGlobalFips | Select-Object -ExpandProperty enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Invoke-GetSystemGlobalFips | Select-Object -ExpandProperty enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: True
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000077</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enable FIPS-validated cryptography.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">FIPS 140-2 is the current standard for validating that mechanisms used to access cryptographic modules use authentication that meets DOD requirements.
+
+In vSphere 6.7 and later, ESXi and vCenter Server use FIPS-validated cryptography to protect management interfaces and the VMware Certificate Authority (VMCA).
+
+vSphere 7.0 Update 2 and later adds additional FIPS-validated cryptography to vCenter Server Appliance. By default, this FIPS validation option is disabled and must be enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3 (1), IA-5 (1) (c), IA-7, MA-4 (6), SC-13, SC-23 (3), SC-28</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Web Client, go to Developer Center &gt;&gt; API Explorer.
+
+From the &quot;Select API&quot; drop-down menu, select appliance.
+
+Expand system&#x2F;security&#x2F;global_fips &gt;&gt; GET.
+
+Click &quot;Execute&quot; and then &quot;Copy Response&quot; to view the results.
+
+Example response:
+
+{
+    &quot;enabled&quot;: true
+}
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Invoke-GetSystemGlobalFips
+
+If global FIPS mode is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Web Client go to Developer Center &gt;&gt; API Explorer.
+
+From the &quot;Select API&quot; drop-down menu, select appliance.
+
+Expand system&#x2F;security&#x2F;global_fips &gt;&gt; PUT.
+
+In the response body under &quot;Try it out&quot; paste the following:
+
+{
+    &quot;enabled&quot;: true
+}
+
+Click &quot;Execute&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$spec &#x3D; Initialize-SystemSecurityGlobalFipsUpdateSpec -Enabled $true; Invoke-SetSystemGlobalFips -SystemSecurityGlobalFipsUpdateSpec $spec
+
+Note: The vCenter server reboots after FIPS is enabled or disabled.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000079</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enforce a 90-day maximum password lifetime restriction.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any password, no matter how complex, can eventually be cracked. Therefore, passwords must be changed at specific intervals.
+
+One method of minimizing this risk is to use complex passwords and periodically change them. If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the system and&#x2F;or application passwords could be compromised.
+
+This requirement does not include emergency administration accounts, which are meant for access to the application in case of failure. These accounts are not required to have maximum password lifetime restrictions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).PasswordLifetimeDays stdout.strip is expected to cmp &lt;&#x3D; 90</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoPasswordPolicy).PasswordLifetimeDays stdout.strip is expected to cmp &lt;&#x3D; 90</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000079</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enforce a 90-day maximum password lifetime restriction.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any password, no matter how complex, can eventually be cracked. Therefore, passwords must be changed at specific intervals.
+
+One method of minimizing this risk is to use complex passwords and periodically change them. If the application does not limit the lifetime of passwords and force users to change their passwords, there is the risk that the system and&#x2F;or application passwords could be compromised.
+
+This requirement does not include emergency administration accounts, which are meant for access to the application in case of failure. These accounts are not required to have maximum password lifetime restrictions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+View the value of the &quot;Maximum lifetime&quot; setting.
+
+Maximum lifetime: Password must be changed every 90 days
+
+If the password policy is not configured with &quot;Maximum lifetime&quot; policy of &quot;90&quot; or less, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Password Policy.
+
+Click &quot;Edit&quot;.
+
+Set &quot;Maximum lifetime&quot; to &quot;90&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000080</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enable revocation checking for certificate-based authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000185
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001954
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001991
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002010
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The system must establish the validity of the user-supplied identity certificate using Online Certificate Status Protocol (OCSP) and&#x2F;or Certificate Revocation List (CRL) revocation checking.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).UseInCertCRL stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).UseInCertCRL stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000080</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enable revocation checking for certificate-based authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The system must establish the validity of the user-supplied identity certificate using Online Certificate Status Protocol (OCSP) and&#x2F;or Certificate Revocation List (CRL) revocation checking.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (12), IA-5 (2) (a), IA-5 (2) (d), IA-8 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a federated identity provider is configured and used for an identity source and supports Smartcard authentication, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under Smart card authentication settings &gt;&gt; Certificate revocation, verify &quot;Revocation check&quot; does not show as disabled.
+
+If &quot;Revocation check&quot; shows as disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under Smart card authentication settings &gt;&gt; Certificate revocation, click the &quot;Edit&quot; button.
+
+Configure revocation checking per site requirements. OCSP with CRL failover is recommended.
+
+By default, both locations are pulled from the cert. CRL location can be overridden in this screen, and local responders can be specified via the sso-config command line tool. See the vSphere documentation for more information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000089</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must terminate vSphere Client sessions after 15 minutes of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-12
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-11
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002038
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002361
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free resources committed by the managed network element.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000089</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must terminate vSphere Client sessions after 15 minutes of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended. In addition, quickly terminating an idle session will also free resources committed by the managed network element.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-12, IA-11, SC-10</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Client Configuration.
+
+View the value of the &quot;Session timeout&quot; setting.
+
+If the &quot;Session timeout&quot; is not set to &quot;15 minute(s)&quot; or less this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Client Configuration.
+
+Click &quot;Edit&quot; and enter &quot;15&quot; minutes into the &quot;Session timeout&quot; setting. Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000095</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server user roles must be verified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001082
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001084
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001813
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Users and service accounts must only be assigned privileges they require. Least privilege requires that these privileges must only be assigned if needed to reduce risk of confidentiality, availability, or integrity loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000095</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server user roles must be verified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Users and service accounts must only be assigned privileges they require. Least privilege requires that these privileges must only be assigned if needed to reduce risk of confidentiality, availability, or integrity loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (1), SC-2, SC-3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+View each role and verify the users and&#x2F;or groups assigned to it by clicking on &quot;Usage&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Sort Role | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+Application service account and user required privileges should be documented.
+
+If any user or service account has more privileges than required, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To update a user&#39;s or group&#39;s permissions to an existing role with reduced permissions, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Global Permissions.
+
+Select the user or group, click the pencil button, change the assigned role, and click &quot;OK&quot;.
+
+Note: If permissions are assigned on a specific object, the role must be updated where it is assigned (for example, at the cluster level).
+
+To create a new role with reduced permissions, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Click the green plus sign and enter a name for the role and select only the specific permissions required.
+
+Users can then be assigned to the newly created role.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000110</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I&#x2F;O Control (NIOC).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001095
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+Managing excess capacity ensures sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.NetworkResourceManagementEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000110</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must manage excess capacity, bandwidth, or other redundancy to limit the effects of information flooding types of denial-of-service (DoS) attacks by enabling Network I&#x2F;O Control (NIOC).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DoS is a condition when a resource is not available for legitimate users. When this occurs, the organization either cannot accomplish its mission or must operate at degraded capacity.
+
+Managing excess capacity ensures sufficient capacity is available to counter flooding attacks. Employing increased capacity and service redundancy may reduce the susceptibility to some DoS attacks. Managing excess capacity may include, for example, establishing selected usage priorities, quotas, or partitioning.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5 (2)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+View the &quot;Properties&quot; pane and verify &quot;Network I&#x2F;O Control&quot; is &quot;Enabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;NIOC Enabled&quot;;E&#x3D;{$_.ExtensionData.config.NetworkResourceManagementEnabled}}
+
+If &quot;Network I&#x2F;O Control&quot; is disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Networking.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+In the &quot;Properties&quot; pane, click &quot;Edit&quot;. Change &quot;Network I&#x2F;O Control&quot; to &quot;Enabled&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDSwitch &quot;VDSwitch Name&quot; | Get-View).EnableNetworkResourceManagement($true)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000123</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001683
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001684
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001685
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001686
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002132
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to create a new account. They may also try to hijack an existing account by changing a password or enabling a previously disabled account. Therefore, all actions performed on accounts in the SSO domain much be alerted on in vCenter at a minimum and ideally on a Security Information and Event Management (SIEM) system as well.
+
+To ensure the appropriate personnel are alerted about SSO account actions, create a new vCenter alarm for the &quot;com.vmware.sso.PrincipalManagement&quot; event ID and configure the alert mechanisms appropriately.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AlarmDefinition | Where-Object {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AlarmDefinition | Where-Object {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select-Object -ExpandProperty Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000123</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often attempt to create a persistent method of reestablishing access. One way to accomplish this is for the attacker to create a new account. They may also try to hijack an existing account by changing a password or enabling a previously disabled account. Therefore, all actions performed on accounts in the SSO domain much be alerted on in vCenter at a minimum and ideally on a Security Information and Event Management (SIEM) system as well.
+
+To ensure the appropriate personnel are alerted about SSO account actions, create a new vCenter alarm for the &quot;com.vmware.sso.PrincipalManagement&quot; event ID and configure the alert mechanisms appropriately.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Security &gt;&gt; Alarm Definitions.
+
+Verify there is an alarm created to alert upon all SSO account actions.
+
+The alarm name may vary, but it is suggested to name it &quot;SSO account actions - com.vmware.sso.PrincipalManagement&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AlarmDefinition | Where {$_.ExtensionData.Info.Expression.Expression.EventTypeId -eq &quot;com.vmware.sso.PrincipalManagement&quot;} | Select Name,Enabled,@{N&#x3D;&quot;EventTypeId&quot;;E&#x3D;{$_.ExtensionData.Info.Expression.Expression.EventTypeId}}
+
+If an alarm is not created to alert on SSO account actions, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Security &gt;&gt; Alarm Definitions.
+
+Click &quot;Add&quot;.
+
+Provide the alarm name of &quot;SSO account actions - com.vmware.sso.PrincipalManagement&quot; and an optional description.
+
+From the &quot;Target type&quot; dropdown menu, select &quot;vCenter Server&quot;.
+
+Click &quot;Next&quot;.
+
+Paste &quot;com.vmware.sso.PrincipalManagement&quot; (without quotes) in the line after &quot;IF&quot; and press &quot;Enter&quot;.
+
+Next to &quot;Trigger the alarm and&quot;, select &quot;Show as Warning&quot;.
+
+Configure the desired notification actions that will inform the SA and ISSO of the event.
+
+Click &quot;Next&quot;. Click &quot;Next&quot; again. Click &quot;Create&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000145</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002238
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).FailedAttemptIntervalSec stdout.strip is expected to cmp &gt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 900
+     got: 180
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).FailedAttemptIntervalSec stdout.strip is expected to cmp &gt;&#x3D; 900</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 900
+     got: 180
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000145</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute forcing, is reduced. Limits are imposed by locking the account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+View the value of the &quot;Time interval between failures&quot; setting.
+
+Time interval between failures: 900 seconds
+
+If the lockout policy is not configured with &quot;Time interval between failures&quot; policy of &quot;900&quot; or more, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Time interval between failures&quot; to &quot;900&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000148</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must be configured to send logs to a central log server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter must be configured to send near real-time log data to syslog collectors so information will be available to investigators in the case of a security incident or to assist in troubleshooting.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No log servers configured: [] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to be falsey, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No log servers configured: [] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to be falsey, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000148</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must be configured to send logs to a central log server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter must be configured to send near real-time log data to syslog collectors so information will be available to investigators in the case of a security incident or to assist in troubleshooting.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Syslog&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify at least one site-specific syslog receiver is configured and is listed as &quot;Reachable&quot;.
+
+If no valid syslog collector is configured or if the collector is not listed as &quot;Reachable&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Syslog&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Edit&quot; or &quot;Configure&quot;.
+
+Edit or add the address and port of a site-specific syslog aggregator or Security Information Event Management (SIEM) system with the appropriate protocol.
+
+User Datagram Protocol (UDP) is discouraged due to its stateless and unencrypted nature. Transport Layer Security (TLS) is preferred.
+
+Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000150</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-3 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001744
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001858
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system operation may be adversely affected.
+
+Alerts provide organizations with urgent messages. Real-time alerts provide these messages immediately (i.e., the time from event detection to alert occurs in seconds or less).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000150</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. Without a real-time alert, security personnel may be unaware of an impending failure of the audit capability and system operation may be adversely affected.
+
+Alerts provide organizations with urgent messages. Real-time alerts provide these messages immediately (i.e., the time from event detection to alert occurs in seconds or less).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, AU-5 (2), CM-3 (5)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the Central Logging Server being used to verify it is configured to alert the SA and ISSO, at a minimum, on any AO-defined events. Otherwise, this is a finding.
+
+If there are no AO-defined events, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the Central Logging Server being used to alert the SA and ISSO, at a minimum, on any AO-defined events.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000158</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-8 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001891
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity.
+
+Synchronizing internal information system clocks to an authoritative time server provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Timesync Configuration: HOST is expected to cmp &#x3D;&#x3D; &quot;NTP&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NTP
+     got: HOST
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Timesync Configuration: HOST is expected to cmp &#x3D;&#x3D; &quot;NTP&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NTP
+     got: HOST
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000158</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must compare internal information system clocks at least every 24 hours with an authoritative time server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity.
+
+Synchronizing internal information system clocks to an authoritative time server provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-8 (1) (a)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Time&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify at least one authorized time server is configured and is listed as &quot;Reachable&quot;.
+
+If &quot;NTP&quot; is not enabled and at least one authorized time server configured, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Time&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Edit&quot; under &quot;Time Synchronization&quot;.
+
+Select &quot;NTP&quot; for &quot;Mode&quot; and enter a list of authorized time servers separated by commas. Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000195</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server Machine Secure Sockets Layer (SSL) certificate must be issued by a DOD certificate authority.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002470
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Untrusted certificate authorities (CA) can issue certificates, but they may be issued by organizations or individuals that seek to compromise DOD systems or by organizations with insufficient security controls. If the CA used for verifying the certificate is not a DOD-approved CA, trust of this CA has not been established.
+
+The DOD will only accept public key infrastructure (PKI) certificates obtained from a DOD-approved internal or external certificate authority. Reliance on CAs for the establishment of secure sessions includes, for example, the use of Transport Layer Security (TLS) certificates.
+
+The default self-signed, VMware Certificate Authority (VMCA)-issued vCenter reverse proxy certificate must be replaced with a DOD-approved certificate. The use of a DOD certificate on the vCenter reverse proxy and other services assures clients that the service they are connecting to is legitimate and trusted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ssl_certificate for &#39;10.186.30.81&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">ssl_certificate for &#39;10.186.30.81&#39; issuer_organization is expected to cmp &#x3D;&#x3D; &quot;U.S. Government&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: U.S. Government
+     got: sc2-10-186-30-81.eng.vmware.com
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000195</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server Machine Secure Sockets Layer (SSL) certificate must be issued by a DOD certificate authority.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Untrusted certificate authorities (CA) can issue certificates, but they may be issued by organizations or individuals that seek to compromise DOD systems or by organizations with insufficient security controls. If the CA used for verifying the certificate is not a DOD-approved CA, trust of this CA has not been established.
+
+The DOD will only accept public key infrastructure (PKI) certificates obtained from a DOD-approved internal or external certificate authority. Reliance on CAs for the establishment of secure sessions includes, for example, the use of Transport Layer Security (TLS) certificates.
+
+The default self-signed, VMware Certificate Authority (VMCA)-issued vCenter reverse proxy certificate must be replaced with a DOD-approved certificate. The use of a DOD certificate on the vCenter reverse proxy and other services assures clients that the service they are connecting to is legitimate and trusted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-23 (5)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Certificates &gt;&gt; Certificate Management &gt;&gt; Machine SSL Certificate.
+
+Click &quot;View Details&quot; and examine the &quot;Issuer Information&quot; block.
+
+If the issuer specified is not a DOD approved certificate authority, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Obtain a DOD-issued certificate and private key for each vCenter in the system following the requirements below:
+
+Key size: 2048 bits or more (PEM encoded)
+CRT format (Base-64)
+x509 version 3
+SubjectAltName must contain DNS Name&#x3D;&lt;machine_FQDN&gt;
+Contains the following Key Usages: Digital Signature, Non Repudiation, Key Encipherment
+
+Export the entire certificate issuing chain up to the root in Base-64 format. Concatenate the individual certificates into one file with the &quot;.cer&quot; extension.
+
+From the vSphere Client, go to Administration &gt;&gt; Certificates &gt;&gt; Certificate Management &gt;&gt; Machine SSL Certificate.
+
+Click Actions &gt;&gt; Import and Replace Certificate.
+
+Select the &quot;Replace with external CA certificate&quot; radio button and click &quot;Next&quot;.
+
+Supply the CA-issued certificate , the exported roots file, and the private key.
+
+Click &quot;Replace&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000196</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enable data at rest encryption for vSAN.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002475
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications handling data requiring &quot;data at rest&quot; protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+
+Data encryption is a common technique used in environments that require additional levels of security.  It consists of a process to ensure that data can only be consumed by systems that have appropriate levels of access.  Approved systems must have and use the appropriate cryptographic keys to encrypt and decrypt the data.  Systems that do not have the keys will not be able to consume the data in any meaningful way, as it will remain encrypted in accordance to the commonly used Advanced Encryption Standard (AES) from the National Institute of Standards and Technology, or NIST.
+
+vSAN supports Data-At-Rest Encryption and Data-in-Transit Encryption and uses an AES 256 cipher. Data is encrypted after all other processing, such as deduplication, is performed. Data at rest encryption protects data on storage devices, in case a device is removed from the cluster.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-Cluster -Name cluster0 | Get-VsanClusterConfiguration | Select-Object -ExpandProperty EncryptionEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-Cluster -Name cluster0 | Get-VsanClusterConfiguration | Select-Object -ExpandProperty EncryptionEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000196</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enable data at rest encryption for vSAN.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications handling data requiring &quot;data at rest&quot; protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
+
+Data encryption is a common technique used in environments that require additional levels of security.  It consists of a process to ensure that data can only be consumed by systems that have appropriate levels of access.  Approved systems must have and use the appropriate cryptographic keys to encrypt and decrypt the data.  Systems that do not have the keys will not be able to consume the data in any meaningful way, as it will remain encrypted in accordance to the commonly used Advanced Encryption Standard (AES) from the National Institute of Standards and Technology, or NIST.
+
+vSAN supports Data-At-Rest Encryption and Data-in-Transit Encryption and uses an AES 256 cipher. Data is encrypted after all other processing, such as deduplication, is performed. Data at rest encryption protects data on storage devices, in case a device is removed from the cluster.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-28 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Review the &quot;Data-at-rest encryption&quot; status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-Cluster | Where-Object {$_.VsanEnabled -eq $true} | Get-VsanClusterConfiguration | Select-Object Name,EncryptionEnabled
+
+If &quot;Data-At-Rest encryption&quot; is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the target cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Click &quot;Edit&quot;.
+
+Enable &quot;Data-At-Rest encryption&quot; and select a pre-configured key provider from the drop down. Click &quot;Apply&quot;.
+
+Note: Before enabling, read and understand the operational implications of enabling data at rest encryption in vSAN and how it effects capacity, performance, and recovery scenarios.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000248</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable the Customer Experience Improvement Program (CEIP).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes this feature must be disabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000248</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable the Customer Experience Improvement Program (CEIP).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The VMware CEIP sends VMware anonymized system information that is used to improve the quality, reliability, and functionality of VMware products and services. For confidentiality purposes this feature must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Customer Experience Improvement Program.
+
+If Customer Experience Improvement &quot;Program Status&quot; is &quot;Joined&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Deployment &gt;&gt; Customer Experience Improvement Program.
+
+Click &quot;Leave Program&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000253</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must enforce SNMPv3 security features where SNMP is required.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001967
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. SNMPv3 can be configured for identification and cryptographically based authentication.
+
+SNMPv3 defines a user-based security model (USM) and a view-based access control model (VACM). SNMPv3 USM provides data integrity, data origin authentication, message replay protection, and protection against disclosure of the message payload. SNMPv3 VACM provides access control to determine whether a specific type of access (read or write) to the management information is allowed. Implement both VACM and USM for full protection.
+
+SNMPv3 must be disabled by default and enabled only if used. SNMP v3 provides security feature enhancements to SNMP, including encryption and message authentication.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000253</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must enforce SNMPv3 security features where SNMP is required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. SNMPv3 can be configured for identification and cryptographically based authentication.
+
+SNMPv3 defines a user-based security model (USM) and a view-based access control model (VACM). SNMPv3 USM provides data integrity, data origin authentication, message replay protection, and protection against disclosure of the message payload. SNMPv3 VACM provides access control to determine whether a specific type of access (read or write) to the management information is allowed. Implement both VACM and USM for full protection.
+
+SNMPv3 must be disabled by default and enabled only if used. SNMP v3 provides security feature enhancements to SNMP, including encryption and message authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">At the command prompt on the vCenter Server Appliance, run the following commands:
+
+# appliancesh
+# snmp.get
+
+Note: The &quot;appliancesh&quot; command is not needed if the default shell has not been changed for root.
+
+If &quot;Enable&quot; is set to &quot;False&quot;, this is not a finding.
+
+If &quot;Enable&quot; is set to &quot;True&quot; and &quot;Authentication&quot; is not set to &quot;SHA1&quot;, this is a finding.
+
+If &quot;Enable&quot; is set to &quot;True&quot; and &quot;Privacy&quot; is not set to &quot;AES128&quot;, this is a finding.
+
+If any &quot;Users&quot; are configured with a &quot;Sec_level&quot; that does not equal &quot;priv&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">At the command prompt on the vCenter Server Appliance, run the following commands:
+
+# appliancesh
+# snmp.set --authentication SHA1
+# snmp.set --privacy AES128
+
+To change the security level of a user, run the following command:
+
+# snmp.set --users &lt;username&gt;&#x2F;&lt;auth_password&gt; &lt;priv_password&gt;&#x2F;priv</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000265</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must disable SNMPv1&#x2F;2 receivers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001967
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1&#x2F;2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1&#x2F;2 in the UI and SNMPv3 in the CLI.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.1.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: False
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.2.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.3.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.4.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.1.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: False
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.2.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.3.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-View -Id &#39;OptionManager-VpxSettings&#39;).setting | Where-Object {$_.key -match &#39;snmp.receiver.4.enabled&#39;} | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000265</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must disable SNMPv1&#x2F;2 receivers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1&#x2F;2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1&#x2F;2 in the UI and SNMPv3 in the CLI.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-3 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;SNMP receivers&quot; tab, note the presence of any enabled receiver.
+
+If there are any enabled receivers, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;SNMP receivers&quot; tab, ensure all receivers are disabled.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000266</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002238
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By requiring that Single Sign-On (SSO) accounts be unlocked manually, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. When the account unlock time is set to zero, once an account is locked it can only be unlocked manually by an administrator.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).AutoUnlockIntervalSec stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 300
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoLockoutPolicy).AutoUnlockIntervalSec stdout.strip is expected to cmp &#x3D;&#x3D; &quot;0&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 0
+     got: 300
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000266</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must require an administrator to unlock an account locked due to excessive login failures.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By requiring that Single Sign-On (SSO) accounts be unlocked manually, the risk of unauthorized access via user password guessing, otherwise known as brute forcing, is reduced. When the account unlock time is set to zero, once an account is locked it can only be unlocked manually by an administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+View the value of the &quot;Unlock time&quot; setting.
+
+Unlock time: 0 seconds
+
+If the lockout policy is not configured with &quot;Unlock time&quot; policy of &quot;0&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Local Accounts &gt;&gt; Lockout Policy.
+
+Click &quot;Edit&quot;.
+
+Set the &quot;Unlock time&quot; to &quot;0&quot; and click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000267</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable the distributed virtual switch health check.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Network health check is disabled by default. Once enabled, the health check packets contain information on host#, vds#, and port#, which an attacker would find useful. It is recommended that network health check be used for troubleshooting and turned off when troubleshooting is finished.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 1 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Health check for VDSwitch STIG 2 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000267</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable the distributed virtual switch health check.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Network health check is disabled by default. Once enabled, the health check packets contain information on host#, vds#, and port#, which an attacker would find useful. It is recommended that network health check be used for troubleshooting and turned off when troubleshooting is finished.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Health Check.
+
+View the health check pane and verify the &quot;VLAN and MTU&quot; and &quot;Teaming and failover&quot; checks are &quot;Disabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$vds &#x3D; Get-VDSwitch
+$vds.ExtensionData.Config.HealthCheckConfig
+
+If the health check feature is enabled on distributed switches and is not on temporarily for troubleshooting purposes, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Health Check.
+
+Click &quot;Edit&quot;.
+
+Disable the &quot;VLAN and MTU&quot; and &quot;Teaming and failover&quot; checks.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-View -ViewType DistributedVirtualSwitch | ?{($_.config.HealthCheckConfig | ?{$_.enable -notmatch &quot;False&quot;})}| %{$_.UpdateDVSHealthCheckConfig(@((New-Object Vmware.Vim.VMwareDVSVlanMtuHealthCheckConfig -property @{enable&#x3D;0}),(New-Object Vmware.Vim.VMwareDVSTeamingHealthCheckConfig -property @{enable&#x3D;0})))}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000268</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must set the distributed port group Forged Transmits policy to &quot;Reject&quot;.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the virtual machine operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+When the &quot;Forged Transmits&quot; option is set to &quot;Accept&quot;, ESXi does not compare source and effective MAC addresses.
+
+To protect against MAC impersonation, set the &quot;Forged Transmits&quot; option to &quot;Reject&quot;. The host compares the source MAC address being transmitted by the guest operating system with the effective MAC address for its virtual machine adapter to determine if they match. If the addresses do not match, the ESXi host drops the packet.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty ForgedTransmits stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000268</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must set the distributed port group Forged Transmits policy to &quot;Reject&quot;.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the virtual machine operating system changes the Media Access Control (MAC) address, the operating system can send frames with an impersonated source MAC address at any time. This allows an operating system to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+When the &quot;Forged Transmits&quot; option is set to &quot;Accept&quot;, ESXi does not compare source and effective MAC addresses.
+
+To protect against MAC impersonation, set the &quot;Forged Transmits&quot; option to &quot;Reject&quot;. The host compares the source MAC address being transmitted by the guest operating system with the effective MAC address for its virtual machine adapter to determine if they match. If the addresses do not match, the ESXi host drops the packet.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;Forged Transmits&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;Forged Transmits&quot; policy is set to accept for a non-uplink port, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;Forged Transmits&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -ForgedTransmits $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -ForgedTransmits $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000269</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to &quot;Reject&quot;.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the virtual machine operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent virtual machines from changing their effective MAC address and will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty MacChanges stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000269</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to &quot;Reject&quot;.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the virtual machine operating system changes the MAC address, it can send frames with an impersonated source MAC address at any time. This allows it to stage malicious attacks on the devices in a network by impersonating a network adaptor authorized by the receiving network.
+
+This will prevent virtual machines from changing their effective MAC address and will affect applications that require this functionality. This will also affect how a layer 2 bridge will operate and will affect applications that require a specific MAC address for licensing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;MAC Address Changes&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;MAC Address Changes&quot; policy is set to accept, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;MAC Address Changes&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -MacChanges $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -MacChanges $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000270</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must set the distributed port group Promiscuous Mode policy to &quot;Reject&quot;.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When promiscuous mode is enabled for a virtual switch, all virtual machines connected to the port group have the potential of reading all packets across that network, meaning only the virtual machines connected to that port group.
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;) | Get-VDSecurityPolicy | Select-Object -ExpandProperty AllowPromiscuous stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000270</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must set the distributed port group Promiscuous Mode policy to &quot;Reject&quot;.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When promiscuous mode is enabled for a virtual switch, all virtual machines connected to the port group have the potential of reading all packets across that network, meaning only the virtual machines connected to that port group.
+
+Promiscuous mode is disabled by default on the ESXi Server, and this is the recommended setting.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Verify &quot;Promiscuous Mode&quot; is set to &quot;Reject&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy
+
+If the &quot;Promiscuous Mode&quot; policy is set to accept, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Security&quot; tab.
+
+Set &quot;Promiscuous Mode&quot; to &quot;Reject&quot;.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+Get-VDSwitch | Get-VDSecurityPolicy | Set-VDSecurityPolicy -AllowPromiscuous $false
+Get-VDPortgroup | ?{$_.IsUplink -eq $false} | Get-VDSecurityPolicy | Set-VDSecurityPolicy -AllowPromiscuous $false</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000271</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must only send NetFlow traffic to authorized collectors.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and can contain information about the virtual network, making it easier for a man-in-the-middle attack to be executed successfully. If NetFlow export is required, verify that all NetFlow target Internet Protocols (IPs) are correct.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000271</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must only send NetFlow traffic to authorized collectors.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The distributed virtual switch can export NetFlow information about traffic crossing the switch. NetFlow exports are not encrypted and can contain information about the virtual network, making it easier for a man-in-the-middle attack to be executed successfully. If NetFlow export is required, verify that all NetFlow target Internet Protocols (IPs) are correct.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+To view NetFlow Collector IPs configured on distributed switches:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; NetFlow.
+
+View the NetFlow pane and verify any collector IP addresses are valid and in use for troubleshooting.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;NetFlowCollectorIPs&quot;;E&#x3D;{$_.ExtensionData.config.IpfixConfig.CollectorIpAddress}}
+
+To view if NetFlow is enabled on any distributed port groups:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed port group &gt;&gt; Manage &gt;&gt; Settings &gt;&gt; Policies.
+
+Go to &quot;Monitoring&quot; and view the NetFlow status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | Select Name,VirtualSwitch,@{N&#x3D;&quot;NetFlowEnabled&quot;;E&#x3D;{$_.Extensiondata.Config.defaultPortConfig.ipfixEnabled.Value}}
+
+If NetFlow is configured and the collector IP is not known and documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To remove collector IPs, do the following:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; NetFlow.
+
+Click &quot;Edit&quot;.
+
+Remove any unknown collector IPs.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$dvs &#x3D; Get-VDSwitch dvswitch | Get-View
+ForEach($vs in $dvs){
+$spec &#x3D; New-Object VMware.Vim.VMwareDVSConfigSpec
+$spec.configversion &#x3D; $vs.Config.ConfigVersion
+$spec.IpfixConfig &#x3D; New-Object VMware.Vim.VMwareIpfixConfig
+$spec.IpfixConfig.CollectorIpAddress &#x3D; &quot;&quot;
+$spec.IpfixConfig.CollectorPort &#x3D; &quot;0&quot;
+$spec.IpfixConfig.ActiveFlowTimeout &#x3D; &quot;60&quot;
+$spec.IpfixConfig.IdleFlowTimeout &#x3D; &quot;15&quot;
+$spec.IpfixConfig.SamplingRate &#x3D; &quot;0&quot;
+$spec.IpfixConfig.InternalFlowsOnly &#x3D; $False
+$vs.ReconfigureDvs_Task($spec)
+}
+
+Note: This will reset the NetFlow collector configuration back to the defaults.
+
+To disable NetFlow on a distributed port group, do the following:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;Monitoring&quot; tab.
+
+Change &quot;NetFlow&quot; to &quot;Disabled&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.defaultPortConfig &#x3D; New-Object VMware.Vim.VMwareDVSPortSetting
+$spec.defaultPortConfig.ipfixEnabled &#x3D; New-Object VMware.Vim.BoolPolicy
+$spec.defaultPortConfig.ipfixEnabled.inherited &#x3D; $false
+$spec.defaultPortConfig.ipfixEnabled.value &#x3D; $false
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000272</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          ESXi does not use the concept of native VLAN. Frames with VLAN specified in the port group will have a tag, but frames with VLAN not specified in the port group are not tagged and therefore will end up belonging to native VLAN of the physical switch.
+
+For example, frames on VLAN 1 from a Cisco physical switch will be untagged, because this is considered as the native VLAN. However, frames from ESXi specified as VLAN 1 will be tagged with a &quot;1&quot;; therefore, traffic from ESXi that is destined for the native VLAN will not be correctly routed (because it is tagged with a &quot;1&quot; instead of being untagged), and traffic from the physical switch coming from the native VLAN will not be visible (because it is not tagged).
+
+If the ESXi virtual switch port group uses the native VLAN ID, traffic from those virtual machines will not be visible to the native VLAN on the switch, because the switch is expecting untagged traffic.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000272</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must configure all port groups to a value other than that of the native virtual local area network (VLAN).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">ESXi does not use the concept of native VLAN. Frames with VLAN specified in the port group will have a tag, but frames with VLAN not specified in the port group are not tagged and therefore will end up belonging to native VLAN of the physical switch.
+
+For example, frames on VLAN 1 from a Cisco physical switch will be untagged, because this is considered as the native VLAN. However, frames from ESXi specified as VLAN 1 will be tagged with a &quot;1&quot;; therefore, traffic from ESXi that is destined for the native VLAN will not be correctly routed (because it is tagged with a &quot;1&quot; instead of being untagged), and traffic from the physical switch coming from the native VLAN will not be visible (because it is not tagged).
+
+If the ESXi virtual switch port group uses the native VLAN ID, traffic from those virtual machines will not be visible to the native VLAN on the switch, because the switch is expecting untagged traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group VLAN tags and verify they are not set to the native VLAN ID of the attached physical switch.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | select Name, VlanConfiguration
+
+If any port group is configured with the native VLAN of the ESXi hosts attached physical switch, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+Change the VLAN ID to a non-native VLAN.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup &quot;portgroup name&quot; | Set-VDVlanConfiguration -VlanId &quot;New VLAN#&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000273</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When a port group is set to VLAN Trunking, the vSwitch passes all network frames in the specified range to the attached virtual machines without modifying the virtual local area network (VLAN) tags. In vSphere, this is referred to as VGT.
+
+The virtual machine must process the VLAN information itself via an 802.1Q driver in the operating system. VLAN Trunking must only be implemented if the attached virtual machines have been specifically authorized and are capable of managing VLAN tags themselves.
+
+If VLAN Trunking is enabled inappropriately, it may cause a denial of service or allow a virtual machine to interact with traffic on an unauthorized VLAN.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000273</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must not configure VLAN Trunking unless Virtual Guest Tagging (VGT) is required and authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When a port group is set to VLAN Trunking, the vSwitch passes all network frames in the specified range to the attached virtual machines without modifying the virtual local area network (VLAN) tags. In vSphere, this is referred to as VGT.
+
+The virtual machine must process the VLAN information itself via an 802.1Q driver in the operating system. VLAN Trunking must only be implemented if the attached virtual machines have been specifically authorized and are capable of managing VLAN tags themselves.
+
+If VLAN Trunking is enabled inappropriately, it may cause a denial of service or allow a virtual machine to interact with traffic on an unauthorized VLAN.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group &quot;VLAN Type&quot; and &quot;VLAN trunk range&quot;, if present.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | Where {$_.ExtensionData.Config.Uplink -ne &quot;True&quot;} | Select Name,VlanConfiguration
+
+If any port group is configured with &quot;VLAN trunking&quot; and is not documented as a needed exception (such as NSX appliances), this is a finding.
+
+If any port group is authorized to be configured with &quot;VLAN trunking&quot; but is not configured with the most limited range necessary, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+If &quot;VLAN trunking&quot; is not authorized, remove it by setting &quot;VLAN type&quot; to &quot;VLAN&quot; and configure an appropriate VLAN ID. Click &quot;OK&quot;.
+
+If &quot;VLAN trunking&quot; is authorized but the range is too broad, modify the range in the &quot;VLAN trunk range&quot; field to the minimum necessary and authorized range. An example range would be &quot;1,3-5,8&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command to configure trunking:
+
+Get-VDPortgroup &quot;Portgroup Name&quot; | Set-VDVlanConfiguration -VlanTrunkRange &quot;&lt;VLAN Range(s) comma separated&gt;&quot;
+
+or
+
+Run this command to configure a single VLAN ID:
+
+Get-VDPortgroup &quot;Portgroup Name&quot; | Set-VDVlanConfiguration -VlanId &quot;&lt;New VLAN#&gt;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000274</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For example, Cisco Catalyst switches typically reserve VLANs 1001 to 1024 and 4094, while Nexus switches typically reserve 3968 to 4094.
+
+Check with the documentation for the organization&#39;s specific switch. Using a reserved VLAN might result in a denial of service on the network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.DefaultPortConfig.Vlan.VlanId stdout.strip is expected not to be in &quot;1001&quot;, &quot;1024&quot;, &quot;3968&quot;, &quot;4047&quot;, and &quot;4094&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000274</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Certain physical switches reserve certain VLAN IDs for internal purposes and often disallow traffic configured to these values. For example, Cisco Catalyst switches typically reserve VLANs 1001 to 1024 and 4094, while Nexus switches typically reserve 3968 to 4094.
+
+Check with the documentation for the organization&#39;s specific switch. Using a reserved VLAN might result in a denial of service on the network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Review the port group VLAN tags and verify that they are not set to a reserved VLAN ID.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup | select Name, VlanConfiguration
+
+If any port group is configured with a reserved VLAN ID, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Policies.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab. Change the VLAN ID to an unreserved VLAN ID.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDPortgroup &quot;portgroup name&quot; | Set-VDVlanConfiguration -VlanId &quot;New VLAN#&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000275</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must configure the &quot;vpxuser&quot; auto-password to be changed every 30 days.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By default, vCenter will change the &quot;vpxuser&quot; password automatically every 30 days. Ensure this setting meets site policies. If it does not, configure it to meet password aging policies.
+
+Note: It is very important the password aging policy is not shorter than the default interval that is set to automatically change the &quot;vpxuser&quot; password to preclude the possibility that vCenter might be locked out of an ESXi host.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name VirtualCenter.VimPasswordExpirationInDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name VirtualCenter.VimPasswordExpirationInDays | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000275</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must configure the &quot;vpxuser&quot; auto-password to be changed every 30 days.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By default, vCenter will change the &quot;vpxuser&quot; password automatically every 30 days. Ensure this setting meets site policies. If it does not, configure it to meet password aging policies.
+
+Note: It is very important the password aging policy is not shorter than the default interval that is set to automatically change the &quot;vpxuser&quot; password to preclude the possibility that vCenter might be locked out of an ESXi host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;VirtualCenter.VimPasswordExpirationInDays&quot; is set to &quot;30&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays
+
+If the &quot;VirtualCenter.VimPasswordExpirationInDays&quot; is set to a value other than &quot;30&quot; or does not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;VirtualCenter.VimPasswordExpirationInDays&quot; value to &quot;30&quot; or if the value does not exist create it by entering the values in the &quot;Key&quot; and &quot;Value&quot; fields and clicking &quot;Add&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+If the setting already exists:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays | Set-AdvancedSetting -Value 30
+
+If the setting does not exist:
+
+New-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name VirtualCenter.VimPasswordExpirationInDays -Value 30</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000276</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must configure the &quot;vpxuser&quot; password to meet length policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The &quot;vpxuser&quot; password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet password length policies.
+
+Longer passwords make brute-force password attacks more difficult. The &quot;vpxuser&quot; password is added by vCenter, meaning no manual intervention is normally required. The &quot;vpxuser&quot; password length must never be modified to less than the default length of 32 characters.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.vpxd.hostPasswordLength | Select-Object -ExpandProperty Value stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name config.vpxd.hostPasswordLength | Select-Object -ExpandProperty Value stdout.strip is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000276</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must configure the &quot;vpxuser&quot; password to meet length policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The &quot;vpxuser&quot; password default length is 32 characters. Ensure this setting meets site policies; if not, configure to meet password length policies.
+
+Longer passwords make brute-force password attacks more difficult. The &quot;vpxuser&quot; password is added by vCenter, meaning no manual intervention is normally required. The &quot;vpxuser&quot; password length must never be modified to less than the default length of 32 characters.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;config.vpxd.hostPasswordLength&quot; is set to &quot;32&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.vpxd.hostPasswordLength and verify it is set to 32.
+
+If the &quot;config.vpxd.hostPasswordLength&quot; is set to a value other than &quot;32, this is a finding.
+
+If the setting does not exist, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;config.vpxd.hostPasswordLength&quot; value to &quot;32&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name config.vpxd.hostPasswordLength | Set-AdvancedSetting -Value 32</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000277</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter and the embedded Lifecycle Manager system must never have a direct route to the internet. Despite this, updates and patches sourced from VMware on the internet must be delivered in a timely manner.
+
+There are two methods to accomplish this: a proxy server and the Update Manager Download Service (UMDS). UMDS is an optional module for Lifecycle Manager that fetches upgrades for virtual appliances, patch metadata, patch binaries, and notifications that would not otherwise be available to an isolated Lifecycle Manager directly.
+
+Alternatively, a proxy for Lifecycle Manager can be configured to allow controlled, limited access to the public internet for the sole purpose of patch gathering. Either solution mitigates the risk of internet connectivity by limiting its scope and use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000277</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter and the embedded Lifecycle Manager system must never have a direct route to the internet. Despite this, updates and patches sourced from VMware on the internet must be delivered in a timely manner.
+
+There are two methods to accomplish this: a proxy server and the Update Manager Download Service (UMDS). UMDS is an optional module for Lifecycle Manager that fetches upgrades for virtual appliances, patch metadata, patch binaries, and notifications that would not otherwise be available to an isolated Lifecycle Manager directly.
+
+Alternatively, a proxy for Lifecycle Manager can be configured to allow controlled, limited access to the public internet for the sole purpose of patch gathering. Either solution mitigates the risk of internet connectivity by limiting its scope and use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the following conditions:
+
+1. Lifecycle Manager must be configured to use the UMDS.
+
+OR
+
+2. Lifecycle Manager must be configured to use a proxy server for access to VMware patch repositories.
+
+OR
+
+3. Lifecycle Manager must disable internet patch repositories and any patches must be manually validated and imported as needed.
+
+Option 1:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Verify the &quot;Download patches from a UMDS shared repository&quot; radio button is selected and that a valid UMDS repository is supplied.
+
+Click &quot;Cancel&quot;.
+
+If this is not set, this is a finding.
+
+Option 2:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Verify the &quot;Download patches directly from the internet&quot; radio button is selected.
+
+Click &quot;Cancel&quot;.
+
+Navigate to the vCenter Server Management interface at https:&#x2F;&#x2F;&lt;vcenter dns&gt;:5480 &gt;&gt; Networking &gt;&gt; Proxy Settings.
+
+Verify that &quot;HTTPS&quot; is &quot;Enabled&quot;.
+
+Click the &quot;HTTPS&quot; row.
+
+Verify the proxy server configuration is accurate.
+
+If this is not set, this is a finding.
+
+Option 3:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Downloads.
+
+Verify the &quot;Automatic downloads&quot; option is disabled.
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Verify any download sources are disabled.
+
+If this is not set, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Option 1:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Select the &quot;Download patches from a UMDS shared repository&quot; radio button and supply a valid UMDS repository.
+
+Click &quot;Save&quot;.
+
+Option 2:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Setup.
+
+Click the &quot;Change Download Source&quot; button.
+
+Select the &quot;Download patches directly from the internet&quot; radio button.
+
+Click &quot;Save&quot;.
+
+Navigate to the vCenter Server Management interface at https:&#x2F;&#x2F;&lt;vcenter dns&gt;:5480 &gt;&gt; Networking &gt;&gt; Proxy Settings.
+
+Click &quot;Edit&quot;.
+
+Slide &quot;HTTPS&quot; to &quot;Enabled&quot;.
+
+Supply the appropriate proxy server configuration.
+
+Click &quot;Save&quot;.
+
+Option 3:
+
+From the vSphere Client, go to Lifecycle Manager &gt;&gt; Settings &gt;&gt; Patch Downloads.
+
+Click &quot;Edit&quot; and uncheck &quot;Download patches&quot;.
+
+Under &quot;Patch Setup&quot; select each download source and click Disable.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000278</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must use unique service accounts when applications connect to vCenter.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To not violate nonrepudiation (i.e., deny the authenticity of who is connecting to vCenter), when applications need to connect to vCenter they must use unique service accounts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000278</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must use unique service accounts when applications connect to vCenter.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To not violate nonrepudiation (i.e., deny the authenticity of who is connecting to vCenter), when applications need to connect to vCenter they must use unique service accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify each external application that connects to vCenter has a unique service account dedicated to that application.
+
+For example, there should be separate accounts for Log Insight, Operations Manager, or anything else that requires an account to access vCenter.
+
+If any application shares a service account that is used to connect to vCenter, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For applications sharing service accounts, create a new service account to assign to the application so that no application shares a service account with another.
+
+When standing up a new application that requires access to vCenter, always create a new service account prior to installation and grant only the permissions needed for that application.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000279</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Virtual machines might share virtual switches and virtual local area networks (VLAN) with the IP-based storage configurations.
+
+IP-based storage includes vSAN, Internet Small Computer System Interface (iSCSI), and Network File System (NFS). This configuration might expose IP-based storage traffic to unauthorized virtual machine users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from the production traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and virtual machines will limit unauthorized users from viewing the traffic.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000279</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating Internet Protocol (IP)-based storage traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Virtual machines might share virtual switches and virtual local area networks (VLAN) with the IP-based storage configurations.
+
+IP-based storage includes vSAN, Internet Small Computer System Interface (iSCSI), and Network File System (NFS). This configuration might expose IP-based storage traffic to unauthorized virtual machine users. IP-based storage frequently is not encrypted. It can be viewed by anyone with access to this network.
+
+To restrict unauthorized users from viewing the IP-based storage traffic, the IP-based storage network must be logically separated from the production traffic. Configuring the IP-based storage adaptors on separate VLANs or network segments from other VMkernels and virtual machines will limit unauthorized users from viewing the traffic.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If IP-based storage is not used, this is not applicable.
+
+IP-based storage (iSCSI, NFS, vSAN) VMkernel port groups must be in a dedicated VLAN that can be on a standard or distributed virtual switch that is logically separated from other traffic types.
+
+The check for this will be unique per environment.
+
+To check a standard switch, do the following:
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; Virtual switches. Select a standard switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and note the VLAN ID associated with each port group.
+
+Verify it is dedicated to that purpose and is logically separated from other traffic types.
+
+To check a distributed switch, do the following,
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select and expand a distributed switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and navigate to the &quot;Summary&quot; tab.
+
+Note the VLAN ID associated with each port group and verify it is dedicated to that purpose and is logically separated from other traffic types.
+
+If any IP-based storage networks are not isolated from other traffic types, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configuration of an IP-based VMkernel will be unique to each environment.
+
+To configure VLANs and traffic types, do the following:
+
+Standard switch:
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; VMkernel adapters.
+
+Select the Storage VMkernel (for any IP-based storage). Click &quot;Edit...&quot; and click the &quot;Port properties&quot; tab.
+
+Uncheck everything (unless vSAN).
+
+Click the &quot;IPv4&quot; settings or &quot;IPv6&quot; settings tab.
+
+Enter the appropriate IP address and subnet information.
+
+Click &quot;OK&quot;.
+
+From the vSphere Client, select the ESXi host and go to Configure &gt;&gt; Networking &gt;&gt; Virtual switches. Select a standard switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and click &quot;...&quot;. Click &quot;Edit Settings&quot;. On the &quot;Properties&quot; tab, enter the appropriate VLAN ID and click &quot;OK&quot;.
+
+Distributed switch:
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Topology.
+
+Select the Storage VMkernel (for any IP-based storage). Click &quot;...&quot; and click &quot;Edit Settings&quot;.
+
+On the &quot;Port properties&quot; tab, uncheck everything (unless vSAN).
+
+Click the &quot;IPv4&quot; settings or &quot;IPv6&quot; settings tab.
+
+Enter the appropriate IP address and subnet information.
+
+Click &quot;OK&quot;.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select and expand a distributed switch.
+
+For each storage port group (iSCSI, NFS, vSAN), select the port group and navigate to Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Click the &quot;VLAN&quot; tab.
+
+Enter the appropriate VLAN type and ID and click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000280</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must be configured to send events to a central log server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001851
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter server generates volumes of security-relevant application-level events. Examples include logins, system reconfigurations, system degradation warnings, and more. To ensure these events are available for forensic analysis and correlation, they must be sent to the syslog and forwarded on to the configured Security Information and Event Management (SIEM) system and&#x2F;or central log server.
+
+The vCenter server sends events to syslog by default, but this configuration must be verified and maintained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name vpxd.event.syslog.enabled | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name vpxd.event.syslog.enabled | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000280</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must be configured to send events to a central log server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter server generates volumes of security-relevant application-level events. Examples include logins, system reconfigurations, system degradation warnings, and more. To ensure these events are available for forensic analysis and correlation, they must be sent to the syslog and forwarded on to the configured Security Information and Event Management (SIEM) system and&#x2F;or central log server.
+
+The vCenter server sends events to syslog by default, but this configuration must be verified and maintained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4 (1)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Verify that &quot;vpxd.event.syslog.enabled&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name vpxd.event.syslog.enabled
+
+If the &quot;vpxd.event.syslog.enabled&quot; value is not set to &quot;true&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Advanced Settings.
+
+Click &quot;Edit Settings&quot; and configure the &quot;vpxd.event.syslog.enabled&quot; setting to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-AdvancedSetting -Entity &lt;vcenter server name&gt; -Name vpxd.event.syslog.enabled | Set-AdvancedSetting -Value true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000281</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSAN Health Check is able to download the HCL from VMware to check compliance against the underlying vSAN Cluster hosts. To ensure the vCenter server is not directly downloading content from the internet, this functionality must be disabled. If this feature is necessary, an external proxy server must be configured.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vsanhealthview &#x3D; Get-VsanView -Id VsanVcClusterHealthSystem-vsan-cluster-health-system; $vsanhealthview.VsanHealthQueryVsanProxyConfig().Host stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vsanhealthview &#x3D; Get-VsanView -Id VsanVcClusterHealthSystem-vsan-cluster-health-system; $vsanhealthview.VsanHealthQueryVsanProxyConfig().Host stdout.strip is expected not to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000281</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable or restrict the connectivity between vSAN Health Check and public Hardware Compatibility List (HCL) by use of an external proxy server.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSAN Health Check is able to download the HCL from VMware to check compliance against the underlying vSAN Cluster hosts. To ensure the vCenter server is not directly downloading content from the internet, this functionality must be disabled. If this feature is necessary, an external proxy server must be configured.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Internet Connectivity.
+
+If the HCL internet download is not required, verify &quot;Status&quot; is &quot;Disabled&quot;.
+
+If the &quot;Status&quot; is &quot;Enabled&quot;, this is a finding.
+
+If the HCL internet download is required, verify &quot;Status&quot; is &quot;Enabled&quot; and a proxy host is configured.
+
+If &quot;Status&quot; is &quot;Enabled&quot; and a proxy is not configured, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Internet Connectivity.
+
+Click &quot;Edit&quot;.
+
+If the HCL internet download is not required, ensure that &quot;Status&quot; is &quot;Disabled&quot;.
+
+If the HCL internet download is required, ensure that &quot;Status&quot; is &quot;Enabled&quot; and that a proxy host is appropriately configured.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000282</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must configure the vSAN Datastore name to a unique name.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A vSAN Datastore name by default is &quot;vsanDatastore&quot;. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">is expected not to cmp &#x3D;&#x3D; &quot;vsanDatastore&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: vsanDatastore
+     got: vsanDatastore
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">is expected not to cmp &#x3D;&#x3D; &quot;vsanDatastore&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: vsanDatastore
+     got: vsanDatastore
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000282</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must configure the vSAN Datastore name to a unique name.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A vSAN Datastore name by default is &quot;vsanDatastore&quot;. If more than one vSAN cluster is present in vCenter, both datastores will have the same name by default, potentially leading to confusion and manually misplaced workloads.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Datastores.
+
+Review the datastores and identify any datastores with &quot;vSAN&quot; as the datastore type.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
+Write-Host &quot;vSAN Enabled Cluster found&quot;
+Get-Cluster | where {$_.VsanEnabled} | Get-Datastore | where {$_.type -match &quot;vsan&quot;}
+}
+else{
+Write-Host &quot;vSAN is not enabled, this finding is not applicable.&quot;
+}
+
+If vSAN is enabled and a datastore is named &quot;vsanDatastore&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Datastores.
+
+Right-click on the datastore named &quot;vsanDatastore&quot; and select &quot;Rename&quot;.
+
+Rename the datastore based on site-specific naming standards.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+If($(Get-Cluster | where {$_.VsanEnabled} | Measure).Count -gt 0){
+Write-Host &quot;vSAN Enabled Cluster found&quot;
+$Clusters &#x3D; Get-Cluster | where {$_.VsanEnabled}
+Foreach ($clus in $clusters){
+ $clus | Get-Datastore | where {$_.type -match &quot;vsan&quot;} | Set-Datastore -Name $(($clus.name) + &quot;_vSAN_Datastore&quot;)
+}
+}
+else{
+Write-Host &quot;vSAN is not enabled, this finding is not applicable.&quot;
+}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000283</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable Username&#x2F;Password and Windows Integrated Authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          All forms of authentication other than Common Access Card (CAC) must be disabled. Password authentication can be temporarily reenabled for emergency access to the local Single Sign-On (SSO) accounts or Active Directory user&#x2F;pass accounts, but it must be disabled as soon as CAC authentication is functional.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).PasswordAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).WindowsAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).SmartCardAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: False
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).PasswordAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-SsoAuthenticationPolicy).WindowsAuthnEnabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: false
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000283</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable Username&#x2F;Password and Windows Integrated Authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">All forms of authentication other than Common Access Card (CAC) must be disabled. Password authentication can be temporarily reenabled for emergency access to the local Single Sign-On (SSO) accounts or Active Directory user&#x2F;pass accounts, but it must be disabled as soon as CAC authentication is functional.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a federated identity provider is configured and used for an identity source, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Under &quot;Authentication method&quot;, examine the allowed methods.
+
+If &quot;Smart card authentication&quot; is not enabled and &quot;Password and windows session authentication&quot; is not disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider &gt;&gt; Smart Card Authentication.
+
+Next to &quot;Authentication method&quot;, click &quot;Edit&quot;.
+
+Select to radio button to &quot;Enable smart card authentication&quot;.
+
+Click &quot;Save&quot;.
+
+To re-enable password authentication for troubleshooting purposes, run the following command on the vCenter Server Appliance:
+
+# &#x2F;opt&#x2F;vmware&#x2F;bin&#x2F;sso-config.sh -set_authn_policy -pwdAuthn true -winAuthn false -certAuthn false -securIDAuthn false -t vsphere.local</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000284</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must restrict access to the default roles with cryptographic permissions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In vSphere, the built-in &quot;Administrator&quot; role contains permission to perform cryptographic operations such as Key Management Server (KMS) functions and encrypting and decrypting virtual machine disks. This role must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use.
+
+A new built-in role called &quot;No Cryptography Administrator&quot; exists to provide all administrative permissions except cryptographic operations. Permissions must be restricted such that normal vSphere administrators are assigned the &quot;No Cryptography Administrator&quot; role or more restrictive.
+
+The &quot;Administrator&quot; role must be tightly controlled and must not be applied to administrators who will not be doing cryptographic work. Catastrophic data loss can result from poorly administered cryptography.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrator is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrator is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\Administrators is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VSPHERE.LOCAL\vCLSAdmin is expected to be in &quot;VSPHERE.LOCAL\\Administrator&quot;, &quot;VSPHERE.LOCAL\\Administrators&quot;, and &quot;VSPHERE.LOCAL\\vCLSAdmin&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000284</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must restrict access to the default roles with cryptographic permissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In vSphere, the built-in &quot;Administrator&quot; role contains permission to perform cryptographic operations such as Key Management Server (KMS) functions and encrypting and decrypting virtual machine disks. This role must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use.
+
+A new built-in role called &quot;No Cryptography Administrator&quot; exists to provide all administrative permissions except cryptographic operations. Permissions must be restricted such that normal vSphere administrators are assigned the &quot;No Cryptography Administrator&quot; role or more restrictive.
+
+The &quot;Administrator&quot; role must be tightly controlled and must not be applied to administrators who will not be doing cryptographic work. Catastrophic data loss can result from poorly administered cryptography.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">By default, there are four roles that contain cryptographic related permissions: Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager.
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Where {$_.Role -eq &quot;Admin&quot; -or $_.Role -eq &quot;NoTrustedAdmin&quot; -or $_.Role -eq &quot;vCLSAdmin&quot; -or $_.Role -eq &quot;vSphereKubernetesManager&quot;} | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+If there are any users or groups assigned to the default roles with cryptographic permissions and are not explicitly designated to perform cryptographic operations, this is a finding.
+
+The built-in solution users assigned to the administrator role are NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Move any accounts not explicitly designated for cryptographic operations, other than Solution Users, to other roles such as &quot;No Cryptography Administrator&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000285</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must restrict access to cryptographic permissions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          These permissions must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use. Catastrophic data loss can result from poorly administered cryptography.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">NoTrustedAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Admin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vSphereKubernetesManager is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vCLSAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">NoTrustedAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Admin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vSphereKubernetesManager is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vCLSAdmin is expected to be in &quot;Admin&quot;, &quot;NoTrustedAdmin&quot;, &quot;vCLSAdmin&quot;, and &quot;vSphereKubernetesManager&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000285</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must restrict access to cryptographic permissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">These permissions must be reserved for cryptographic administrators where virtual machine encryption and&#x2F;or vSAN encryption is in use. Catastrophic data loss can result from poorly administered cryptography.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">By default, there are four roles that contain cryptographic related permissions: Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager.
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Highlight each role and click the &#39;Privileges&quot; button in the right pane.
+
+Verify that only the Administrator, No Trusted Infrastructure Administrator, vCLSAdmin, and vSphere Kubernetes Manager and any site-specific cryptographic roles have the following permissions:
+
+Cryptographic Operations privileges
+Global.Diagnostics
+Host.Inventory.Add host to cluster
+Host.Inventory.Add standalone host
+Host.Local operations.Manage user groups
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$roles &#x3D; Get-VIRole
+ForEach($role in $roles){
+    $privileges &#x3D; $role.PrivilegeList
+    If($privileges -match &quot;Crypto*&quot; -or $privileges -match &quot;Global.Diagnostics&quot; -or $privileges -match &quot;Host.Inventory.Add*&quot; -or $privileges -match &quot;Host.Local operations.Manage user groups&quot;){
+    Write-Host &quot;$role has Cryptographic privileges&quot;
+    }
+}
+
+If any role other than the four default roles contain the permissions listed above and is not authorized to perform cryptographic related operations, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+Highlight the target custom role and click &quot;Edit&quot;.
+
+Remove the following permissions from any custom role that is not authorized to perform cryptographic related operations:
+
+Cryptographic Operations privileges
+Global.Diagnostics
+Host.Inventory.Add host to cluster
+Host.Inventory.Add standalone host
+Host.Local operations.Manage user groups</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000286</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, the potential exists for a man-in-the-middle attack in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vSAN iSCSI service not enabled on cluster: cluster0...this is not applicable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vSAN iSCSI service not enabled on cluster: cluster0...this is not applicable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000286</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must have Mutual Challenge Handshake Authentication Protocol (CHAP) configured for vSAN Internet Small Computer System Interface (iSCSI) targets.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When enabled, vSphere performs bidirectional authentication of both the iSCSI target and host. When not authenticating both the iSCSI target and host, the potential exists for a man-in-the-middle attack in which an attacker might impersonate either side of the connection to steal data. Bidirectional authentication mitigates this risk.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN or if vSAN is enabled but iSCSI is not enabled, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; iSCSI Target Service.
+
+For each iSCSI target, review the value in the &quot;Authentication&quot; column.
+
+If the Authentication method is not set to &quot;CHAP_Mutual&quot; for any iSCSI target, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vSAN Enabled Cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; iSCSI Target Service.
+
+For each iSCSI target, select the item and click &quot;Edit&quot;.
+
+Change the &quot;Authentication&quot; field to &quot;Mutual CHAP&quot; and configure the incoming and outgoing users and secrets appropriately.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000287</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The KEK for a vSAN encrypted datastore is generated by the Key Management Server (KMS) and serves as a wrapper and lock around the Disk Encryption Key (DEK). The DEK is generated by the host and is used to encrypt and decrypt the datastore. A shallow rekey is a procedure in which the KMS issues a new KEK to the ESXi host, which rewraps the DEK but does not change the DEK or any data on disk.
+
+This operation must be done on a regular, site-defined interval and can be viewed as similar in criticality to changing an administrative password. If the KMS is compromised, a standing operational procedure to rekey will put a time limit on the usefulness of any stolen KMS data.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000287</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The KEK for a vSAN encrypted datastore is generated by the Key Management Server (KMS) and serves as a wrapper and lock around the Disk Encryption Key (DEK). The DEK is generated by the host and is used to encrypt and decrypt the datastore. A shallow rekey is a procedure in which the KMS issues a new KEK to the ESXi host, which rewraps the DEK but does not change the DEK or any data on disk.
+
+This operation must be done on a regular, site-defined interval and can be viewed as similar in criticality to changing an administrative password. If the KMS is compromised, a standing operational procedure to rekey will put a time limit on the usefulness of any stolen KMS data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If vSAN is not in use, this is not applicable.
+
+Interview the system administrator (SA) to determine that a procedure has been put in place to perform a shallow rekey of all vSAN encrypted datastores at regular, site-defined intervals.
+
+VMware recommends a 60-day rekey task, but this interval must be defined by the SA and the information system security officer (ISSO).
+
+If vSAN encryption is not in use, this is not a finding.
+
+If vSAN encryption is in use and a regular rekey procedure is not in place, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If vSAN encryption is in use, ensure that a regular rekey procedure is in place.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000288</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an LDAP identity source.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          LDAP is an industry standard protocol for querying directory services such as Active Directory. This protocol can operate in clear text or over a Secure Sockets Layer (SSL)&#x2F;Transport Layer Security (TLS) encrypted tunnel. To protect confidentiality of LDAP communications, secure LDAP (LDAPS) must be explicitly configured when adding an LDAP identity source in vSphere Single Sign-On (SSO).
+
+When configuring an identity source and supplying an SSL certificate, vCenter will enforce LDAPS. The server URLs do not need to be explicitly provided if an SSL certificate is uploaded.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000288</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must use secure Lightweight Directory Access Protocol (LDAPS) when adding an LDAP identity source.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">LDAP is an industry standard protocol for querying directory services such as Active Directory. This protocol can operate in clear text or over a Secure Sockets Layer (SSL)&#x2F;Transport Layer Security (TLS) encrypted tunnel. To protect confidentiality of LDAP communications, secure LDAP (LDAPS) must be explicitly configured when adding an LDAP identity source in vSphere Single Sign-On (SSO).
+
+When configuring an identity source and supplying an SSL certificate, vCenter will enforce LDAPS. The server URLs do not need to be explicitly provided if an SSL certificate is uploaded.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If LDAP is not used as an identity provider, this is not applicable.
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click the &quot;Identity Sources&quot; tab.
+
+For each identity source of type &quot;Active Directory over LDAP&quot;, if the &quot;Server URL&quot; does not indicate &quot;ldaps:&#x2F;&#x2F;&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Configuration &gt;&gt; Identity Provider.
+
+Click the &quot;Identity Sources&quot; tab.
+
+For each identity source of type &quot;Active Directory over LDAP&quot; where LDAPS is not configured, highlight the item and click &quot;Edit&quot;.
+
+Ensure the primary and secondary server URLs, if specified, are configured for &quot;ldaps:&#x2F;&#x2F;&quot;.
+
+At the bottom, click the &quot;Browse&quot; button, select the AD LDAP cert previously exported to your local computer, click &quot;Open&quot;, and &quot;Save&quot; to complete modifications.
+
+Note: With LDAPS, the server must be a specific domain controller and its specific certificate or the domain alias with a certificate that is valid for that URL.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000290</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must limit membership to the &quot;SystemConfiguration.BashShellAdministrators&quot; Single Sign-On (SSO) group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter SSO integrates with PAM in the underlying Photon operating system so members of the &quot;SystemConfiguration.BashShellAdministrators&quot; SSO group can log on to the operating system without needing a separate account. However, even though unique SSO users log on, they are transparently using a group account named &quot;sso-user&quot; as far as Photon auditing is concerned. While the audit trail can still be traced back to the individual SSO user, it is a more involved process.
+
+To force accountability and nonrepudiation, the SSO group &quot;SystemConfiguration.BashShellAdministrators&quot; must be severely restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Administrator is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no groups found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No groups found in SystemConfiguration.BashShellAdministrators is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Administrator is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d is expected to be in &quot;Administrator&quot; and &quot;vmware-applmgmtservice-7581d05c-eac0-4a70-b76c-f7b58b907e8d&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no groups found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No groups found in SystemConfiguration.BashShellAdministrators is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000290</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must limit membership to the &quot;SystemConfiguration.BashShellAdministrators&quot; Single Sign-On (SSO) group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter SSO integrates with PAM in the underlying Photon operating system so members of the &quot;SystemConfiguration.BashShellAdministrators&quot; SSO group can log on to the operating system without needing a separate account. However, even though unique SSO users log on, they are transparently using a group account named &quot;sso-user&quot; as far as Photon auditing is concerned. While the audit trail can still be traced back to the individual SSO user, it is a more involved process.
+
+To force accountability and nonrepudiation, the SSO group &quot;SystemConfiguration.BashShellAdministrators&quot; must be severely restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;SystemConfiguration.BashShellAdministrators&quot; group appears.
+
+Click &quot;SystemConfiguration.BashShellAdministrators&quot;.
+
+Review the members of the group and ensure that only authorized accounts are present.
+
+Note: By default the Administrator and a unique service account similar to &quot;vmware-applmgmtservice-714684a4-342f-4eff-a232-cdc21def00c2&quot; will be in the group and should not be removed.
+
+If there are any accounts present as members of SystemConfiguration.BashShellAdministrators that are not authorized, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;SystemConfiguration.BashShellAdministrators&quot; group appears.
+
+Click &quot;SystemConfiguration.BashShellAdministrators&quot;.
+
+Click the three vertical dots next to the name of each unauthorized account.
+
+Select &quot;Remove Member&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000291</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must limit membership to the &quot;TrustedAdmins&quot; Single Sign-On (SSO) group.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere &quot;TrustedAdmins&quot; group grants additional rights to administer the vSphere Trust Authority feature.
+
+To force accountability and nonrepudiation, the SSO group &quot;TrustedAdmins&quot; must be severely restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no users found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No users found in TrustedAdmins is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no groups found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No groups found in TrustedAdmins is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no users found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No users found in TrustedAdmins is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Stderr should be empty if no groups found is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">No groups found in TrustedAdmins is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000291</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must limit membership to the &quot;TrustedAdmins&quot; Single Sign-On (SSO) group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere &quot;TrustedAdmins&quot; group grants additional rights to administer the vSphere Trust Authority feature.
+
+To force accountability and nonrepudiation, the SSO group &quot;TrustedAdmins&quot; must be severely restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;TrustedAdmins&quot; group appears.
+
+Click &quot;TrustedAdmins&quot;.
+
+Review the members of the group and ensure that only authorized accounts are present.
+
+Note: These accounts act as root on the Photon operating system and have the ability to severely damage vCenter, inadvertently or otherwise.
+
+If there are any accounts present as members of TrustedAdmins that are not authorized, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Users and Groups &gt;&gt; Groups.
+
+Click the next page arrow until the &quot;TrustedAdmins&quot; group appears.
+
+Click &quot;TrustedAdmins&quot;.
+
+Click the three vertical dots next to the name of each unauthorized account.
+
+Select &quot;Remove Member&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000292</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server configuration must be backed up on a regular basis.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter server is the control plane for the vSphere infrastructure and all the workloads it hosts. As such, vCenter is usually a highly critical system in its own right. Backups of vCenter can now be made at a data and configuration level versus traditional storage&#x2F;image-based backups. This reduces recovery time by letting the system administrator (SA) spin up a new vCenter while simultaneously importing the backed-up data.
+
+For sites that implement the Native Key Provider (NKP), introduced in 7.0 Update 2, regular vCenter backups are critical. In a recovery scenario where the virtual machine files are intact but vCenter was lost, the encrypted virtual machines will not be able to boot as their private keys were stored in vCenter after it was last backed up. When using the NKP, vCenter becomes critical to the virtual machine workloads and ceases to be just the control plane.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File based backups should be enabled. is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">File based backups should be enabled. is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000292</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server configuration must be backed up on a regular basis.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter server is the control plane for the vSphere infrastructure and all the workloads it hosts. As such, vCenter is usually a highly critical system in its own right. Backups of vCenter can now be made at a data and configuration level versus traditional storage&#x2F;image-based backups. This reduces recovery time by letting the system administrator (SA) spin up a new vCenter while simultaneously importing the backed-up data.
+
+For sites that implement the Native Key Provider (NKP), introduced in 7.0 Update 2, regular vCenter backups are critical. In a recovery scenario where the virtual machine files are intact but vCenter was lost, the encrypted virtual machines will not be able to boot as their private keys were stored in vCenter after it was last backed up. When using the NKP, vCenter becomes critical to the virtual machine workloads and ceases to be just the control plane.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Option 1:
+
+If vCenter is backed up in a traditional manner, at the storage array level, interview the SA to determine configuration and schedule.
+
+Option 2:
+
+For vCenter native backup functionality, open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Backup&quot; on the left navigation pane.
+
+On the resulting pane on the right, verify the &quot;Status&quot; is &quot;Enabled&quot;.
+
+Click &quot;Status&quot; to expand the backup details.
+
+If vCenter server backups are not configured and there is no other vCenter backup system, this is a finding.
+
+If the backup configuration is not set to a proper, reachable location or if the schedule is anything less frequent than &quot;Daily&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Option 1:
+
+Implement and document a VMware-supported storage&#x2F;image-based backup schedule.
+
+Option 2:
+
+To configure vCenter native backup functionality, open the VAMI by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with an SSO account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Backup&quot; on the left navigation pane.
+
+On the resulting pane on the right, click &quot;Configure&quot; (or &quot;Edit&quot; for an existing configuration).
+
+Enter site-specific information for the backup job.
+
+Ensure &quot;Schedule&quot; is set to &quot;Daily&quot;. Limiting the number of retained backups is recommended but not required.
+
+Click &quot;Create&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000293</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must have task and event retention set to at least 30 days.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter tasks and events contain valuable historical actions, useful in troubleshooting availability issues and for incident forensics. While vCenter events are sent to central log servers in real time, it is important that administrators have quick access to this information when needed.
+
+vCenter retains 30 days of tasks and events by default, and this is sufficient for most purposes. The vCenter disk partitions are also sized with this in mind. Decreasing is not recommended for operational reasons, while increasing is not recommended unless guided by VMware support due to the partition sizing concerns.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name event.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name task.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name event.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-AdvancedSetting -Entity $global:DefaultViServers.Name -Name task.maxAge | Select-Object -ExpandProperty Value stdout.strip is expected to cmp &gt;&#x3D; &quot;30&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000293</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must have task and event retention set to at least 30 days.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter tasks and events contain valuable historical actions, useful in troubleshooting availability issues and for incident forensics. While vCenter events are sent to central log servers in real time, it is important that administrators have quick access to this information when needed.
+
+vCenter retains 30 days of tasks and events by default, and this is sufficient for most purposes. The vCenter disk partitions are also sized with this in mind. Decreasing is not recommended for operational reasons, while increasing is not recommended unless guided by VMware support due to the partition sizing concerns.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click to expand the &quot;Database&quot; section.
+
+Note the &quot;Task retention&quot; and &quot;Event retention&quot; values.
+
+If either value is configured to less than &quot;30&quot; days, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; General.
+
+Click &quot;Edit&quot;.
+
+On the &quot;Database&quot; tab, set the value for both &quot;Task retention&quot; and &quot;Event retention&quot; to &quot;30&quot; days (default) or greater, as required by your site.
+
+Click &quot;Save&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000294</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server Native Key Provider must be backed up with a strong password.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vCenter Native Key Provider feature was introduced in 7.0 U2 and acts as a key provider for encryption based capabilities such as encrypted virtual machines without requiring an external KMS solution.  When enabling this feature a backup must be taken which is a PKCS#12 formatted file and if no password is provided during the backup process this presents the opportunity for this to be used maliciously and compromise the environment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000294</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server Native Key Provider must be backed up with a strong password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vCenter Native Key Provider feature was introduced in 7.0 U2 and acts as a key provider for encryption based capabilities such as encrypted virtual machines without requiring an external KMS solution.  When enabling this feature a backup must be taken which is a PKCS#12 formatted file and if no password is provided during the backup process this presents the opportunity for this to be used maliciously and compromise the environment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the vCenter Native Key Provider feature is not in use, this is not applicable.
+
+Interview the system administrator and determine if a password was provided for any backups taken of the Native Key Provider.
+
+If backups exist for the Native Key Provider that are not password protected, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select a vCenter Server &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Key Providers.
+
+Select the Native Key Provider, click &quot;Back-up&quot;, and check the box &quot;Protect Native Key Provider data with password&quot;.
+
+Provide a strong password and click &quot;Back up key provider&quot;.
+
+Delete any previous backups that were not protected with a password.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000295</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must require authentication for published content libraries.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale. When publishing a content library it can be protected by requiring authentication for subscribers.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Authentication should be enabled on Content Library: STIG Content Library [&quot;publish_info&quot;, &quot;authentication_method&quot;] is expected to cmp &#x3D;&#x3D; &quot;BASIC&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: BASIC
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Authentication should be enabled on Content Library: STIG Content Library [&quot;publish_info&quot;, &quot;authentication_method&quot;] is expected to cmp &#x3D;&#x3D; &quot;BASIC&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: BASIC
+     got: NONE
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000295</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must require authentication for published content libraries.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale. When publishing a content library it can be protected by requiring authentication for subscribers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Content Libraries.
+
+Review the &quot;Password Protected&quot; column.
+
+If a content library is published and is not password protected, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Content Libraries.
+
+Select the target content library.
+
+Select &quot;Actions&quot; then &quot;Edit Settings&quot;.
+
+Click the checkbox to &quot;Enable user authentication for access to this content library&quot;.
+
+Enter and confirm a password for the content library. Click &quot;Ok&quot;.
+
+Note: Any subscribed content libraries will need to be updated to enable authentication and provide the password.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000296</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter server must enable the OVF security policy for content libraries.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale.
+
+You can protect the OVF items by applying default OVF security policy to a content library. The OVF security policy enforces strict validation on OVF items when you deploy or update the item, import items, or synchronize OVF and OVA templates. To make sure that the OVF and OVA templates are signed by a trusted certificate, you can add the OVF signing certificate from a trusted CA.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">OVF security policy should be enabled on Content Library: STIG Content Library [&quot;security_policy_id&quot;] is expected not to equal nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected not #&lt;NilClass:8&gt; &#x3D;&gt; nil
+         got #&lt;NilClass:8&gt; &#x3D;&gt; nil
+
+Compared using equal?, which compares object identity.
+
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">OVF security policy should be enabled on Content Library: STIG Content Library [&quot;security_policy_id&quot;] is expected not to equal nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected not #&lt;NilClass:8&gt; &#x3D;&gt; nil
+         got #&lt;NilClass:8&gt; &#x3D;&gt; nil
+
+Compared using equal?, which compares object identity.
+
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000296</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter server must enable the OVF security policy for content libraries.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In the vSphere Client, you can create a local or a subscribed content library. By using content libraries, you can store and manage content in one vCenter Server instance. Alternatively, you can distribute content across vCenter Server instances to increase consistency and facilitate the deployment workloads at scale.
+
+You can protect the OVF items by applying default OVF security policy to a content library. The OVF security policy enforces strict validation on OVF items when you deploy or update the item, import items, or synchronize OVF and OVA templates. To make sure that the OVF and OVA templates are signed by a trusted certificate, you can add the OVF signing certificate from a trusted CA.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Content Libraries.
+
+Review the &quot;Security Policy&quot; column.
+
+If a content library does not have the &quot;OVF default policy&quot; enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Content Libraries.
+
+Select the target content library.
+
+Select &quot;Actions&quot; then &quot;Edit Settings&quot;.
+
+Click the checkbox to &quot;Apply Security Policy&quot;. Click &quot;OK&quot;.
+
+Note: If you disable the security policy of a content library, you cannot reuse the existing OVF items.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000298</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must separate authentication and authorization for administrators.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Many organizations do both authentication and authorization using a centralized directory service such as Active Directory. Attackers who compromise an identity source can often add themselves to authorization groups, and simply log into systems they should not otherwise have access to. Additionally, reliance on central identity systems means that the administrators of those systems are potentially infrastructure administrators, too, as they can add themselves to infrastructure access groups at will.
+
+The use of local SSO groups for authorization helps prevent this avenue of attack by allowing the centralized identity source to still authenticate users but moving authorization into vCenter itself.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This check is a manual or policy based check and must be reviewed manually.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000298</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must separate authentication and authorization for administrators.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Many organizations do both authentication and authorization using a centralized directory service such as Active Directory. Attackers who compromise an identity source can often add themselves to authorization groups, and simply log into systems they should not otherwise have access to. Additionally, reliance on central identity systems means that the administrators of those systems are potentially infrastructure administrators, too, as they can add themselves to infrastructure access groups at will.
+
+The use of local SSO groups for authorization helps prevent this avenue of attack by allowing the centralized identity source to still authenticate users but moving authorization into vCenter itself.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Roles.
+
+View the Administrator role and any other role providing administrative access to vCenter to verify the users and&#x2F;or groups assigned to it by clicking on &quot;Usage&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VIPermission | Sort Role | Select Role,Principal,Entity,Propagate,IsGroup | FT -Auto
+
+If any user or group is directly assigned a role with administrative access to vCenter that is from an identity provider, this is a finding.
+
+Note: Users and&#x2F;or groups assigned to roles should be from the &quot;VSPHERE.LOCAL&quot; identity source.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To add groups from an identity provider to the local SSO Administrators group, as an example, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Single Sign On &gt;&gt; Groups.
+
+Select the Administrators group and click &quot;Edit&quot;.
+
+In the &quot;Add Members&quot; section, select the identity source and type the name of the target user&#x2F;group in the search bar.
+
+Select the target user&#x2F;group to add them and click &quot;Save&quot;.
+
+Note: A new SSO group or groups can be created as needed and used to provide authorization to vCenter.
+
+To remove identity provider users&#x2F;groups from a role, do the following:
+
+From the vSphere Client, go to Administration &gt;&gt; Access Control &gt;&gt; Global Permissions.
+
+Select the offending user&#x2F;group and click &quot;Delete&quot;.
+
+Note: If permissions are assigned on a specific object, then the role must be updated where it is assigned (for example, at the cluster level).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000299</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable CDP&#x2F;LLDP on distributed switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere Distributed Virtual Switch can participate in Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP), as a listener, advertiser, or both. The information is sensitive, including IP addresses, system names, software versions, and more. It can be used by an adversary to gain a better understanding of your environment, and to impersonate devices. It is also transmitted unencrypted on the network, and as such the recommendation is to disable it.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot; | Select -ExpandProperty LinkDiscoveryProtocolOperation stdout.strip is expected to cmp &#x3D;&#x3D; &quot;Disabled&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: Disabled
+     got: Listen
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000299</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable CDP&#x2F;LLDP on distributed switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere Distributed Virtual Switch can participate in Cisco Discovery Protocol (CDP) or Link Layer Discovery Protocol (LLDP), as a listener, advertiser, or both. The information is sensitive, including IP addresses, system names, software versions, and more. It can be used by an adversary to gain a better understanding of your environment, and to impersonate devices. It is also transmitted unencrypted on the network, and as such the recommendation is to disable it.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Discovery Protocol&quot; configuration.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | Select Name,LinkDiscoveryProtocolOperation
+
+If any distributed switch does not have &quot;Discovery Protocols&quot; disabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select the advanced tab and update the &quot;Type&quot; under &quot;Discovery Protocol&quot; to disabled and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch -Name &quot;DSwitch&quot; | Set-VDSwitch -LinkDiscoveryProtocolOperation &quot;Disabled&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000300</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must remove unauthorized port mirroring sessions on distributed switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The vSphere Distributed Virtual Switch can enable port mirroring sessions allowing traffic to be mirrored from one source to a destination. If port mirroring is configured unknowingly this could allow an attacker to observe network traffic of virtual machines.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 1&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDSwitch -Name &quot;VDSwitch STIG 2&quot;).ExtensionData.Config.VspanSession stdout.strip is expected to cmp &#x3D;&#x3D; &quot;&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000300</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must remove unauthorized port mirroring sessions on distributed switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The vSphere Distributed Virtual Switch can enable port mirroring sessions allowing traffic to be mirrored from one source to a destination. If port mirroring is configured unknowingly this could allow an attacker to observe network traffic of virtual machines.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Port Mirroring.
+
+Review any configured &quot;Port Mirroring&quot; sessions.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+Get-VDSwitch | select Name,@{N&#x3D;&quot;Port Mirroring Sessions&quot;;E&#x3D;{$_.ExtensionData.Config.VspanSession.Name}}
+
+If there are any unauthorized port mirroring sessions configured, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Port Mirroring.
+
+Select the unauthorized &quot;Port Mirroring&quot; session and click &quot;Remove&quot;. Click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000301</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must not override port group settings at the port level on distributed switches.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If there are cases where particular VMs require unique configurations then a different port group with the required configuration should be created instead of overriding port group settings.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VlanOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.UplinkTeamingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.SecurityPolicyOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.IpfixOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.MacManagementOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.ShapingOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.VendorConfigOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.LivePortMovingAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.NetworkResourcePoolOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.TrafficFilterOverrideAllowed stdout.strip is expected to cmp &#x3D;&#x3D; &quot;False&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000301</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must not override port group settings at the port level on distributed switches.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If there are cases where particular VMs require unique configurations then a different port group with the required configuration should be created instead of overriding port group settings.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Override port policies&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDPortgroup).ExtensionData.Config.Policy
+
+If there are any distributed port groups that allow overridden port policies, this is a finding.
+
+Note: This does not apply to the &quot;Block Ports&quot; or &quot;Configure reset at disconnect&quot; policies.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select advanced and update all port policies besides &quot;Block Ports&quot; to &quot;disabled&quot; and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.Policy &#x3D; New-Object VMware.Vim.VMwareDVSPortgroupPolicy
+$spec.Policy.VlanOverrideAllowed &#x3D; $False
+$spec.Policy.UplinkTeamingOverrideAllowed &#x3D; $False
+$spec.Policy.SecurityPolicyOverrideAllowed &#x3D; $False
+$spec.Policy.IpfixOverrideAllowed &#x3D; $False
+$spec.Policy.BlockOverrideAllowed &#x3D; $True
+$spec.Policy.ShapingOverrideAllowed &#x3D; $False
+$spec.Policy.VendorConfigOverrideAllowed &#x3D; $False
+$spec.Policy.TrafficFilterOverrideAllowed &#x3D; $False
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000302</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must reset port configuration when virtual machines are disconnected.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If any unknown or unauthorized per-port overrides exist and are not discarded when a virtual machine is disconnected from that port then a future virtual machine connected to that port may receive a less secure port.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 1-DVUplinks-40&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 1&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 2&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VDSwitch STIG 2-DVUplinks-44&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 3&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: (Get-VDPortgroup -Name &quot;VD PG 4&quot;).ExtensionData.Config.Policy.PortConfigResetAtDisconnect stdout.strip is expected to cmp &#x3D;&#x3D; &quot;True&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000302</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must reset port configuration when virtual machines are disconnected.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Port-level configuration overrides are disabled by default. Once enabled, this allows for different security settings to be set from what is established at the Port Group level. If overrides are not monitored, anyone who gains access to a VM with a less secure VDS configuration could exploit that broader access.
+
+If any unknown or unauthorized per-port overrides exist and are not discarded when a virtual machine is disconnected from that port then a future virtual machine connected to that port may receive a less secure port.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If distributed switches are not used, this is not applicable.
+
+From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Review the &quot;Configure reset at disconnect&quot; setting.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+(Get-VDPortgroup).ExtensionData.Config.Policy.PortConfigResetAtDisconnect
+
+If there are any distributed port groups with &quot;Configure reset at disconnect&quot; configured to &quot;disabled&quot; or &quot;False&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to &quot;Networking&quot;.
+
+Select a distributed switch &gt;&gt; Select a distributed port group &gt;&gt; Configure &gt;&gt; Settings &gt;&gt; Properties.
+
+Click &quot;Edit&quot;.
+
+Select advanced and update &quot;Configure reset at disconnect&quot; to be enabled and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following command:
+
+$pgs &#x3D; Get-VDPortgroup | Get-View
+ForEach($pg in $pgs){
+$spec &#x3D; New-Object VMware.Vim.DVPortgroupConfigSpec
+$spec.configversion &#x3D; $pg.Config.ConfigVersion
+$spec.Policy &#x3D; New-Object VMware.Vim.VMwareDVSPortgroupPolicy
+$spec.Policy.PortConfigResetAtDisconnect &#x3D; $True
+$pg.ReconfigureDVPortgroup_Task($spec)
+}</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000303</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must disable Secure Shell (SSH) access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.
+
+vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">True is expected not to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: True
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000303</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must disable Secure Shell (SSH) access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vCenter Server is delivered as an appliance, and intended to be managed through the VAMI, vSphere Client, and APIs. SSH is a troubleshooting and support tool and should only be enabled when necessary.
+
+vCenter Server High Availability uses SSH to coordinate the replication and failover between the nodes. Use of this feature requires SSH to remain enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Access&quot; on the left navigation pane.
+
+If &quot;SSH Login&quot; is not &quot;Deactivated&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Open the Virtual Appliance Management Interface (VAMI) by navigating to https:&#x2F;&#x2F;&lt;vCenter server&gt;:5480.
+
+Log in with local operating system administrative credentials or with a Single Sign-On (SSO) account that is a member of the &quot;SystemConfiguration.BashShellAdministrator&quot; group.
+
+Select &quot;Access&quot; on the left navigation pane.
+
+Click &quot;Edit&quot; then disable &quot;Activate SSH Login&quot; and click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VCSA-80-000304</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The vCenter Server must enable data in transit encryption for vSAN.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Transit encryption must be enabled to prevent unauthorized disclosure information and to protect the confidentiality of organizational information.
+
+vSAN data-in-transit encryption has the following characteristics:
+-vSAN uses AES-256 bit encryption on data in transit.
+-Forward secrecy is enforced for vSAN data-in-transit encryption.
+-Traffic between data hosts and witness hosts is encrypted.
+-File service data traffic between the VDFS proxy and VDFS server is encrypted.
+-vSAN file services inter-host connections are encrypted.
+-vSAN uses symmetric keys that are generated dynamically and shared between hosts. Hosts dynamically generate an encryption key when they establish a connection, and they use the key to encrypt all traffic between the hosts. You do not need a key management server to perform data-in-transit encryption.
+
+Each host is authenticated when it joins the cluster, ensuring connections only to trusted hosts are allowed. When a host is removed from the cluster, it is authentication certificate is removed.
+
+vSAN data-in-transit encryption is a cluster-wide setting. When enabled, all data and metadata traffic is encrypted as it transits across hosts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system; $vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name cluster0).ExtensionData.MoRef).DataInTransitEncryptionConfig.Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">PowerCLI Command: $vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system; $vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name cluster0).ExtensionData.MoRef).DataInTransitEncryptionConfig.Enabled stdout.strip is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: true
+     got: 
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VCSA-80-000304</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The vCenter Server must enable data in transit encryption for vSAN.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Transit encryption must be enabled to prevent unauthorized disclosure information and to protect the confidentiality of organizational information.
+
+vSAN data-in-transit encryption has the following characteristics:
+-vSAN uses AES-256 bit encryption on data in transit.
+-Forward secrecy is enforced for vSAN data-in-transit encryption.
+-Traffic between data hosts and witness hosts is encrypted.
+-File service data traffic between the VDFS proxy and VDFS server is encrypted.
+-vSAN file services inter-host connections are encrypted.
+-vSAN uses symmetric keys that are generated dynamically and shared between hosts. Hosts dynamically generate an encryption key when they establish a connection, and they use the key to encrypt all traffic between the hosts. You do not need a key management server to perform data-in-transit encryption.
+
+Each host is authenticated when it joins the cluster, ensuring connections only to trusted hosts are allowed. When a host is removed from the cluster, it is authentication certificate is removed.
+
+vSAN data-in-transit encryption is a cluster-wide setting. When enabled, all data and metadata traffic is encrypted as it transits across hosts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no clusters are enabled for vSAN, this is not applicable.
+
+From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Review the &quot;Data-in-transit encryption&quot; status.
+
+or
+
+From a PowerCLI command prompt while connected to the vCenter server, run the following commands:
+
+$vsanclusterconf &#x3D; Get-VsanView -Id VsanVcClusterConfigSystem-vsan-cluster-config-system
+$vsanclusterconf.VsanClusterGetConfig((Get-Cluster -Name &lt;cluster name&gt;).ExtensionData.MoRef).DataInTransitEncryptionConfig
+
+Repeat these steps for each vSAN enabled cluster in the environment.
+
+If &quot;Data-In-Transit encryption&quot; is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, go to Host and Clusters.
+
+Select the vCenter Server &gt;&gt; Select the target cluster &gt;&gt; Configure &gt;&gt; vSAN &gt;&gt; Services &gt;&gt; Data Services.
+
+Click &quot;Edit&quot;.
+
+Enable &quot;Data-In-Transit encryption&quot; and choose a rekey interval suitable for the environment then click &quot;Apply&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000189</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have copy operations disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000189</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have copy operations disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.copy.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.copy.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.copy.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.copy.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.copy.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.copy.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000191</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have drag and drop operations disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000191</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have drag and drop operations disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.dnd.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.dnd.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.dnd.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.dnd.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.dnd.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.dnd.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000192</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have paste operations disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000192</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have paste operations disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Copy and paste operations are disabled by default; however, explicitly disabling this feature will enable audit controls to verify this setting is correct. Copy, paste, drag and drop, or GUI copy&#x2F;paste operations between the guest operating system and the remote console could provide the means for an attacker to compromise the VM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.paste.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.paste.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.paste.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.paste.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.paste.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.paste.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000193</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have virtual disk shrinking disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Shrinking a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to shrink is available to nonadministrative users operating within the VM&#39;s guest operating system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000193</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have virtual disk shrinking disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Shrinking a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to shrink is available to nonadministrative users operating within the VM&#39;s guest operating system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.diskShrink.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskShrink.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.diskShrink.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.diskShrink.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.diskShrink.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskShrink.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000194</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have virtual disk wiping disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Shrinking and wiping (erasing) a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to wipe (erase) is available to nonadministrative users operating within the VM&#39;s guest operating system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000194</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have virtual disk wiping disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Shrinking and wiping (erasing) a virtual disk reclaims unused space in it. If there is empty space in the disk, this process reduces the amount of space the virtual disk occupies on the host drive. Normal users and processes (those without root or administrator privileges) within virtual machines have the capability to invoke this procedure.
+
+However, if this is done repeatedly, the virtual disk can become unavailable while this shrinking is being performed, effectively causing a denial of service. In most datacenter environments, disk shrinking is not done, so this feature must be disabled. Repeated disk shrinking can make a virtual disk unavailable. The capability to wipe (erase) is available to nonadministrative users operating within the VM&#39;s guest operating system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.tools.diskWiper.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskWiper.disable
+
+If the virtual machine advanced setting &quot;isolation.tools.diskWiper.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.tools.diskWiper.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.tools.diskWiper.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.tools.diskWiper.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000195</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must limit console sharing.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an administrator in the VM logs in using a VMware remote console during their session, a nonadministrator in the VM might connect to the console and observe the administrator&#39;s actions.
+
+Also, this could result in an administrator losing console access to a VM. For example, if a jump box is being used for an open console session and the administrator loses connection to that box, the console session remains open. Allowing two console sessions permits debugging via a shared session. For the highest security, allow only one remote console session at a time.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: 1
+     got: -1
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;1&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000195</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must limit console sharing.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an administrator in the VM logs in using a VMware remote console during their session, a nonadministrator in the VM might connect to the console and observe the administrator&#39;s actions.
+
+Also, this could result in an administrator losing console access to a VM. For example, if a jump box is being used for an open console session and the administrator loses connection to that box, the console session remains open. Allowing two console sessions permits debugging via a shared session. For the highest security, allow only one remote console session at a time.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;RemoteDisplay.maxConnections&quot; value is set to &quot;1&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name RemoteDisplay.maxConnections
+
+If the virtual machine advanced setting &quot;RemoteDisplay.maxConnections&quot; does not exist or is not set to &quot;1&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;RemoteDisplay.maxConnections&quot; value and set it to &quot;1&quot;.
+
+If the setting does not exist, add the Name and Value setting at the bottom of screen.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name RemoteDisplay.maxConnections | Set-AdvancedSetting -Value 1
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000196</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data stream to the host. This 1MB capacity should be sufficient for most cases, but this value can change if necessary.
+
+The value can be increased if large amounts of custom information are being stored in the configuration file. The default limit is 1MB.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000196</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data stream to the host. This 1MB capacity should be sufficient for most cases, but this value can change if necessary.
+
+The value can be increased if large amounts of custom information are being stored in the configuration file. The default limit is 1MB.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;tools.setinfo.sizeLimit&quot; value is set to &quot;1048576&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.setinfo.sizeLimit
+
+If the virtual machine advanced setting &quot;tools.setinfo.sizeLimit&quot; is not set to &quot;1048576&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.setinfo.sizeLimit&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;tools.setinfo.sizeLimit&quot; value and set it to &quot;1048576&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.setinfo.sizeLimit | Set-AdvancedSetting -Value 1048576
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000197</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must prevent unauthorized removal, connection and modification of devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use the virtual machine settings editor or configuration editor to remove unneeded or unused hardware devices. To use the device again, prevent a user or running process in the virtual machine from connecting, disconnecting, or modifying a device from within the guest operating system.
+
+By default, a rogue user with nonadministrator privileges in a virtual machine can:
+
+1. Connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive.
+2. Disconnect a network adaptor to isolate the virtual machine from its network, which is a denial of service.
+3. Modify settings on a device.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000197</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must prevent unauthorized removal, connection and modification of devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use the virtual machine settings editor or configuration editor to remove unneeded or unused hardware devices. To use the device again, prevent a user or running process in the virtual machine from connecting, disconnecting, or modifying a device from within the guest operating system.
+
+By default, a rogue user with nonadministrator privileges in a virtual machine can:
+
+1. Connect a disconnected CD-ROM drive and access sensitive information on the media left in the drive.
+2. Disconnect a network adaptor to isolate the virtual machine from its network, which is a denial of service.
+3. Modify settings on a device.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;isolation.device.connectable.disable&quot; value is set to &quot;true&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.device.connectable.disable
+
+If the virtual machine advanced setting &quot;isolation.device.connectable.disable&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;isolation.device.connectable.disable&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;isolation.device.connectable.disable&quot; value and set it to &quot;true&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name isolation.device.connectable.disable | Set-AdvancedSetting -Value true
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000198</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must not be able to obtain host information from the hypervisor.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this information for performance monitoring. An adversary could use this information to inform further attacks on the host.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000198</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must not be able to obtain host information from the hypervisor.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this information for performance monitoring. An adversary could use this information to inform further attacks on the host.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;tools.guestlib.enableHostInfo&quot; value is set to &quot;false&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guestlib.enableHostInfo
+
+If the virtual machine advanced setting &quot;tools.guestlib.enableHostInfo&quot; is not set to &quot;false&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.guestlib.enableHostInfo&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;tools.guestlib.enableHostInfo&quot; value and set it to &quot;false&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guestlib.enableHostInfo | Set-AdvancedSetting -Value false
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000199</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must have shared salt values disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When salting is enabled (Mem.ShareForceSalting&#x3D;1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced option for each virtual machine. The salt values can be specified manually in the virtual machine&#39;s advanced settings with the new option &quot;sched.mem.pshare.salt&quot;.
+
+If this option is not present in the virtual machine&#39;s advanced settings, the value of the &quot;vc.uuid&quot; option is taken as the default value. Because the &quot;vc.uuid&quot; is unique to each virtual machine, by default Transparent Page Sharing (TPS) happens only among the pages belonging to a particular virtual machine (Intra-VM).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000199</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must have shared salt values disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When salting is enabled (Mem.ShareForceSalting&#x3D;1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced option for each virtual machine. The salt values can be specified manually in the virtual machine&#39;s advanced settings with the new option &quot;sched.mem.pshare.salt&quot;.
+
+If this option is not present in the virtual machine&#39;s advanced settings, the value of the &quot;vc.uuid&quot; option is taken as the default value. Because the &quot;vc.uuid&quot; is unique to each virtual machine, by default Transparent Page Sharing (TPS) happens only among the pages belonging to a particular virtual machine (Intra-VM).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;sched.mem.pshare.salt&quot; setting does not exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name sched.mem.pshare.salt
+
+If the virtual machine advanced setting &quot;sched.mem.pshare.salt&quot; exists, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Delete the &quot;sched.mem.pshare.salt&quot; setting.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name sched.mem.pshare.salt | Remove-AdvancedSetting
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000200</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must disable access through the &quot;dvfilter&quot; network Application Programming Interface (API).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An attacker might compromise a VM by using the &quot;dvFilter&quot; API. Configure only VMs that need this access to use the API.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000200</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must disable access through the &quot;dvfilter&quot; network Application Programming Interface (API).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An attacker might compromise a VM by using the &quot;dvFilter&quot; API. Configure only VMs that need this access to use the API.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the settings with the format &quot;ethernet*.filter*.name&quot; do not exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name &quot;ethernet*.filter*.name*&quot;
+
+If the virtual machine advanced setting &quot;ethernet*.filter*.name&quot; exists and dvfilters are not in use, this is a finding.
+
+If the virtual machine advanced setting &quot;ethernet*.filter*.name&quot; exists and the value is not valid, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Look for settings with the format &quot;ethernet*.filter*.name&quot;.
+
+Ensure only required VMs use this setting.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name ethernetX.filterY.name | Remove-AdvancedSetting
+
+Note: Change the X and Y values to match the specific setting in the organization&#39;s environment.
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000201</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must be configured to lock when the last console connection is closed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000201</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must be configured to lock when the last console connection is closed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When accessing the VM console, the guest operating system must be locked when the last console user disconnects, limiting the possibility of session hijacking. This setting only applies to Windows-based VMs with VMware tools installed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; VMware Remote Console Options.
+
+Verify the option &quot;Lock the guest operating system when the last remote user disconnects&quot; is checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guest.desktop.autolock
+
+If the virtual machine advanced setting &quot;tools.guest.desktop.autolock&quot; is not set to &quot;true&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;tools.guest.desktop.autolock&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; VMware Remote Console Options.
+
+Check the box next to &quot;Lock the guest operating system when the last remote user disconnects&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name tools.guest.desktop.autolock | Set-AdvancedSetting -Value true</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000202</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must disable 3D features when not required.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          For performance reasons, it is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality (e.g., most server workloads or desktops not using 3D applications).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000202</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must disable 3D features when not required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">For performance reasons, it is recommended that 3D acceleration be disabled on virtual machines that do not require 3D functionality (e.g., most server workloads or desktops not using 3D applications).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings.
+
+Expand the &quot;Video card&quot; and verify the &quot;Enable 3D Support&quot; checkbox is unchecked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name mks.enable3d
+
+If the virtual machine advanced setting &quot;mks.enable3d&quot; exists and is not set to &quot;false&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;mks.enable3d&quot; does not exist, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings.
+
+Expand the &quot;Video card&quot; and uncheck the &quot;Enable 3D Support&quot; checkbox.
+
+Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name mks.enable3d | Set-AdvancedSetting -Value &quot;false&quot;
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000203</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must enable encryption for vMotion.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the vMotion network. As of vSphere 6.5, this transfer can be transparently encrypted using 256-bit AES-GCM with negligible performance impact.
+
+vSphere enables encrypted vMotion by default as &quot;Opportunistic&quot;, meaning that encrypted channels are used where supported, but the operation will continue in plain text where encryption is not supported.
+
+For example, when vMotioning between two hosts, encryption will always be used. However, because 6.0 and earlier releases do not support this feature, vMotion from a 7.0 host to a 6.0 host would be allowed but would not be encrypted. If the encryption is set to &quot;Required&quot;, vMotions to unsupported hosts will fail. This must be set to &quot;Opportunistic&quot; or &quot;Required&quot;.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;opportunistic&quot; and &quot;required&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000203</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must enable encryption for vMotion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">vMotion migrations in vSphere 6.0 and earlier transferred working memory and CPU state information in clear text over the vMotion network. As of vSphere 6.5, this transfer can be transparently encrypted using 256-bit AES-GCM with negligible performance impact.
+
+vSphere enables encrypted vMotion by default as &quot;Opportunistic&quot;, meaning that encrypted channels are used where supported, but the operation will continue in plain text where encryption is not supported.
+
+For example, when vMotioning between two hosts, encryption will always be used. However, because 6.0 and earlier releases do not support this feature, vMotion from a 7.0 host to a 6.0 host would be allowed but would not be encrypted. If the encryption is set to &quot;Required&quot;, vMotions to unsupported hosts will fail. This must be set to &quot;Opportunistic&quot; or &quot;Required&quot;.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {($_.ExtensionData.Config.MigrateEncryption -eq &quot;disabled&quot;)}
+
+If the &quot;Encrypted vMotion&quot; setting does not have a value of &quot;Opportunistic&quot; or &quot;Required&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+For &quot;Encrypted vMotion&quot; set the value to &quot;Opportunistic&quot; or &quot;Required&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.MigrateEncryption &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpecEncryptedVMotionModes
+$spec.MigrateEncryption &#x3D; $true
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000204</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must enable encryption for Fault Tolerance.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Fault Tolerance log traffic can be encrypted. This could contain sensitive data from the protected machine&#39;s memory or CPU instructions.
+
+vSphere Fault Tolerance performs frequent checks between a primary VM and secondary VM so the secondary VM can quickly resume from the last successful checkpoint. The checkpoint contains the VM state that has been modified since the previous checkpoint.
+
+When Fault Tolerance is turned on, FT encryption is set to &quot;Opportunistic&quot; by default, which means it enables encryption only if both the primary and secondary host are capable of encryption.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to be in &quot;ftEncryptionOpportunistic&quot; and &quot;ftEncryptionRequired&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000204</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must enable encryption for Fault Tolerance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Fault Tolerance log traffic can be encrypted. This could contain sensitive data from the protected machine&#39;s memory or CPU instructions.
+
+vSphere Fault Tolerance performs frequent checks between a primary VM and secondary VM so the secondary VM can quickly resume from the last successful checkpoint. The checkpoint contains the VM state that has been modified since the previous checkpoint.
+
+When Fault Tolerance is turned on, FT encryption is set to &quot;Opportunistic&quot; by default, which means it enables encryption only if both the primary and secondary host are capable of encryption.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the Virtual Machine does not have Fault Tolerance enabled, this is not applicable.
+
+For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {($_.ExtensionData.Config.FtEncryptionMode -ne &quot;ftEncryptionOpportunistic&quot;) -and ($_.ExtensionData.Config.FtEncryptionMode -ne &quot;ftEncryptionRequired&quot;)}
+
+If the &quot;Encrypted FT&quot; setting does not have a value of &quot;Opportunistic&quot; or &quot;Required&quot;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Encryption.
+
+For &quot;Encrypted FT&quot; set the value to &quot;Opportunistic&quot; or &quot;Required&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.FTEncryption &#x3D; New-Object VMware.Vim.VMware.Vim.VirtualMachineConfigSpecEncryptedFtModes
+$spec.FT &#x3D; ftEncryptionOpportunistic or ftEncryptionRequired
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000205</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must configure log size.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, the size of these logs is unlimited, and they are only rotated on vMotion or power events. This can cause storage issues at scale for VMs that do not vMotion or power cycle often.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;2048000&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000205</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must configure log size.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, the size of these logs is unlimited, and they are only rotated on vMotion or power events. This can cause storage issues at scale for VMs that do not vMotion or power cycle often.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;log.rotateSize&quot; value is set to &quot;2048000&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.rotateSize
+
+If the virtual machine advanced setting &quot;log.rotateSize&quot; is not set to &quot;2048000&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;log.rotateSize&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;log.rotateSize&quot; value and set it to &quot;2048000&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.rotateSize | Set-AdvancedSetting -Value 2048000
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000206</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must configure log retention.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, 10 of these logs are retained. This is normally sufficient for most environments, but this configuration must be verified and maintained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;10&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000206</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must configure log retention.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including but not limited to power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations, and machine clones.
+
+By default, 10 of these logs are retained. This is normally sufficient for most environments, but this configuration must be verified and maintained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Verify the &quot;log.keepOld&quot; value is set to &quot;10&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.keepOld
+
+If the virtual machine advanced setting &quot;log.keepOld&quot; is not set to &quot;10&quot;, this is a finding.
+
+If the virtual machine advanced setting &quot;log.keepOld&quot; does NOT exist, this is NOT a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; Advanced Parameters.
+
+Find the &quot;log.keepOld&quot; value and set it to &quot;10&quot;.
+
+If the setting does not exist no action is needed.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-AdvancedSetting -Name log.keepOld | Set-AdvancedSetting -Value 10
+
+Note: The VM must be powered off to configure the advanced settings through the vSphere Client. Therefore, it is recommended to configure these settings with PowerCLI as this can be done while the VM is powered on. Settings do not take effect via either method until the virtual machine is cold started, not rebooted.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000207</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must enable logging.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including, but not limited to, power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations and machine clones. Due to the value these logs provide for the continued availability of each VM and potential security incidents, these logs must be enabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stig vm2 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: stigvm1 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 is expected to cmp &#x3D;&#x3D; &quot;true&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000207</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must enable logging.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The ESXi hypervisor maintains logs for each individual VM by default. These logs contain information including, but not limited to, power events, system failure information, tools status and activity, time sync, virtual hardware changes, vMotion migrations and machine clones. Due to the value these logs provide for the continued availability of each VM and potential security incidents, these logs must be enabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Advanced.
+
+Ensure that the checkbox next to &quot;Enable logging&quot; is checked.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Flags.EnableLogging -ne &quot;True&quot;}
+
+If logging is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to Edit Settings &gt;&gt; VM Options &gt;&gt; Advanced.
+
+Click the checkbox next to &quot;Enable logging&quot;. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.Flags &#x3D; New-Object VMware.Vim.VirtualMachineFlagInfo
+$spec.Flags.enableLogging &#x3D; $true
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000208</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must not use independent, non-persistent disks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The security issue with nonpersistent disk mode is that successful attackers, with a simple shutdown or reboot, might undo or remove any traces they were ever on the machine. To safeguard against this risk, production virtual machines should be set to use persistent disk mode; additionally, ensure activity within the VM is logged remotely on a separate server, such as a syslog server or equivalent Windows-based event collector. Without a persistent record of activity on a VM, administrators might never know whether they have been attacked or hacked.
+
+There can be valid use cases for these types of disks, such as with an application presentation solution where read-only disks are desired, and such cases should be identified and documented.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Non-Persistent Hard Disks is expected not to cmp &#x3D;&#x3D; &quot;IndependentNonPersistent&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000208</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must not use independent, non-persistent disks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The security issue with nonpersistent disk mode is that successful attackers, with a simple shutdown or reboot, might undo or remove any traces they were ever on the machine. To safeguard against this risk, production virtual machines should be set to use persistent disk mode; additionally, ensure activity within the VM is logged remotely on a separate server, such as a syslog server or equivalent Windows-based event collector. Without a persistent record of activity on a VM, administrators might never know whether they have been attacked or hacked.
+
+There can be valid use cases for these types of disks, such as with an application presentation solution where read-only disks are desired, and such cases should be identified and documented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the attached hard disks and verify they are not configured as independent nonpersistent disks.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Select Parent, Name, Filename, DiskType, Persistence | FT -AutoSize
+
+If the virtual machine has attached disks that are in independent nonpersistent mode and are not documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the target hard disk and change the mode to persistent or uncheck Independent.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run one of the following commands:
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Set-HardDisk -Persistence IndependentPersistent
+
+or
+
+Get-VM &quot;VM Name&quot; | Get-HardDisk | Set-HardDisk -Persistence Persistent</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000209</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded floppy devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for Floppy drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000209</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded floppy devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Get-FloppyDrive | Select Parent, Name, ConnectionState
+
+If a virtual machine has a floppy drive connected, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Floppy drives are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+The VM must be powered off to remove a floppy drive.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-FloppyDrive | Remove-FloppyDrive</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000210</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded CD&#x2F;DVD devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for CD&#x2F;DVD drives is expected to cmp &#x3D;&#x3D; &quot;false&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for CD&#x2F;DVD drives is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000210</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded CD&#x2F;DVD devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no CD&#x2F;DVD drives are connected.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Get-CDDrive | Where {$_.extensiondata.connectable.connected -eq $true} | Select Parent,Name
+
+If a virtual machine has a CD&#x2F;DVD drive connected other than temporarily, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the CD&#x2F;DVD drive and uncheck &quot;Connected&quot; and &quot;Connect at power on&quot; and remove any attached ISOs.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-CDDrive | Set-CDDrive -NoMedia</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000211</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded parallel devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for parallel devices is expected not to match &quot;Parallel&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000211</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded parallel devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;parallel&quot;}
+
+If a virtual machine has a parallel device present, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Parallel devices are no longer visible through the vSphere Client and must be done via the Application Programming Interface (API) or PowerCLI.
+
+The VM must be powered off to remove a parallel device.
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+$pport &#x3D; (Get-VM -Name &lt;vmname&gt;).ExtensionData.Config.Hardware.Device | Where {$_.DeviceInfo.Label -match &quot;Parallel&quot;}
+$spec &#x3D; New-Object VMware.Vim.VirtualMachineConfigSpec
+$spec.DeviceChange +&#x3D; New-Object VMware.Vim.VirtualDeviceConfigSpec
+$spec.DeviceChange[-1].device &#x3D; $pport
+$spec.DeviceChange[-1].operation &#x3D; &quot;remove&quot;
+(Get-VM -Name &lt;vmname&gt;).ExtensionData.ReconfigVM($spec)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000212</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded serial devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for serial devices is expected not to match &quot;Serial&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000212</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded serial devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no serial devices exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;serial&quot;}
+
+If a virtual machine has a serial device present, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">The VM must be powered off to remove a serial device.
+
+For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the serial device, click the circled &quot;X&quot; to remove it, and click &quot;OK&quot;.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000213</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must remove unneeded USB devices.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &quot;IDE 0\r\nIDE 1\r\nPS2 controller 0\r\nPCI controller 0\r\nSIO controller 0\r\nKeyboard \r\nPointing ...er \r\nSCSI controller 0\r\nSATA controller 0\r\nCD&#x2F;DVD drive 1\r\nHard disk 1\r\nNetwork adapter 1&quot; not to match &quot;USB&quot;
+Diff:
+@@ -1,15 +1,29 @@
+-USB
++IDE 0
++IDE 1
++PS2 controller 0
++PCI controller 0
++SIO controller 0
++Keyboard 
++Pointing device
++Video card 
++VMCI device
++USB xHCI controller 
++SCSI controller 0
++SATA controller 0
++CD&#x2F;DVD drive 1
++Hard disk 1
++Network adapter 1
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for USB devices is expected not to match &quot;USB&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000213</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must remove unneeded USB devices.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are rarely used for virtual machines in a data center environment, and CD&#x2F;DVD drives are usually connected only temporarily during software installation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Review the VMs hardware and verify no USB devices exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following commands:
+
+Get-VM | Where {$_.ExtensionData.Config.Hardware.Device.DeviceInfo.Label -match &quot;usb&quot;}
+Get-VM | Get-UsbDevice
+
+If a virtual machine has any USB devices or USB controllers present, this is a finding.
+
+If USB smart card readers are used to pass smart cards through the VM console to a VM, the use of a USB controller and USB devices for that purpose is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, right-click the Virtual Machine and go to &quot;Edit Settings&quot;.
+
+Select the USB controller, click the circled &quot;X&quot; to remove it, and click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-USBDevice | Remove-USBDevice
+
+Note:  This will not remove the USB controller, just any connected devices.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">VMCH-80-000214</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Virtual machines (VMs) must disable DirectPath I&#x2F;O devices when not required.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          VMDirectPath I&#x2F;O (PCI passthrough) enables direct assignment of hardware PCI functions to VMs. This gives the VM access to the PCI functions with minimal intervention from the ESXi host. This is a powerful feature for legitimate applications such as virtualized storage appliances, backup appliances, dedicated graphics, etc., but it also allows a potential attacker highly privileged access to underlying hardware and the PCI bus.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stig vm2 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: stigvm1 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-1446f2cc-b6b7-4778-84b7-f73f758dd46c for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-28a51340-7070-4437-b4b1-a87b7480ac7d for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Checking the VM: vCLS-b680b5a0-5434-48a0-8420-82c95e5ab481 for PCI passthrough devices is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">VMCH-80-000214</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Virtual machines (VMs) must disable DirectPath I&#x2F;O devices when not required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">VMDirectPath I&#x2F;O (PCI passthrough) enables direct assignment of hardware PCI functions to VMs. This gives the VM access to the PCI functions with minimal intervention from the ESXi host. This is a powerful feature for legitimate applications such as virtualized storage appliances, backup appliances, dedicated graphics, etc., but it also allows a potential attacker highly privileged access to underlying hardware and the PCI bus.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For each virtual machine do the following:
+
+From the vSphere Client, view the Summary tab.
+
+Review the PCI devices section and verify none exist.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-PassthroughDevice
+
+If the virtual machine has passthrough devices present, and the specific device returned is not approved, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From the vSphere Client, select the Virtual Machine, right click and go to Edit Settings &gt;&gt; Virtual Hardware tab.
+
+Find the unexpected PCI device returned from the check.
+
+Hover the mouse over the device and click the circled &quot;X&quot; to remove the device. Click &quot;OK&quot;.
+
+or
+
+From a PowerCLI command prompt while connected to the ESXi host or vCenter server, run the following command:
+
+Get-VM &quot;VM Name&quot; | Get-PassthroughDevice | Remove-PassthroughDevice</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+        </div>
+      </div>
+    </div>
+    <script type="text/javascript">
+      /*!
+* TW Elements 1.1.0
+* 
+* TW Elements is an open-source UI kit of advanced components for TailwindCSS.
+* Copyright © 2023 MDBootstrap.com
+* 
+* Unless a custom, individually assigned license has been granted, this program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
+* In addition, a custom license may be available upon request, subject to the terms and conditions of that license. Please contact tailwind@mdbootstrap.com for more information on obtaining a custom license.
+* This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
+* 
+* If you would like to purchase a COMMERCIAL, non-AGPL license for TWE, please check out our pricing: https://tw-elements.com/pro/
+*/
+(function(N,mt){typeof exports=="object"&&typeof module<"u"?mt(exports):typeof define=="function"&&define.amd?define(["exports"],mt):(N=typeof globalThis<"u"?globalThis:N||self,mt(N.te={}))})(this,function(N){"use strict";var xL=Object.defineProperty;var CL=(N,mt,O)=>mt in N?xL(N,mt,{enumerable:!0,configurable:!0,writable:!0,value:O}):N[mt]=O;var ke=(N,mt,O)=>(CL(N,typeof mt!="symbol"?mt+"":mt,O),O);const mt=(()=>{const s={};let t=1;return{set(e,i,n){typeof e[i]>"u"&&(e[i]={key:i,id:t},t++),s[e[i].id]=n},get(e,i){if(!e||typeof e[i]>"u")return null;const n=e[i];return n.key===i?s[n.id]:null},delete(e,i){if(typeof e[i]>"u")return;const n=e[i];n.key===i&&(delete s[n.id],delete e[i])}}})(),O={setData(s,t,e){mt.set(s,t,e)},getData(s,t){return mt.get(s,t)},removeData(s,t){mt.delete(s,t)}},lm=1e6,cm=1e3,xa="transitionend",hm=s=>s==null?`${s}`:{}.toString.call(s).match(/\s([a-z]+)/i)[1].toLowerCase(),bt=s=>{do s+=Math.floor(Math.random()*lm);while(document.getElementById(s));return s},ch=s=>{let t=s.getAttribute("data-te-target");if(!t||t==="#"){let e=s.getAttribute("href");if(!e||!e.includes("#")&&!e.startsWith("."))return null;e.includes("#")&&!e.startsWith("#")&&(e=`#${e.split("#")[1]}`),t=e&&e!=="#"?e.trim():null}return t},Ca=s=>{const t=ch(s);return t&&document.querySelector(t)?t:null},Ne=s=>{const t=ch(s);return t?document.querySelector(t):null},oo=s=>{if(!s)return 0;let{transitionDuration:t,transitionDelay:e}=window.getComputedStyle(s);const i=Number.parseFloat(t),n=Number.parseFloat(e);return!i&&!n?0:(t=t.split(",")[0],e=e.split(",")[0],(Number.parseFloat(t)+Number.parseFloat(e))*cm)},hh=s=>{s.dispatchEvent(new Event(xa))},Wi=s=>!s||typeof s!="object"?!1:(typeof s.jquery<"u"&&(s=s[0]),typeof s.nodeType<"u"),Be=s=>Wi(s)?s.jquery?s[0]:s:typeof s=="string"&&s.length>0?document.querySelector(s):null,L=(s,t,e)=>{Object.keys(e).forEach(i=>{const n=e[i],o=t[i],r=o&&Wi(o)?"element":hm(o);if(!new RegExp(n).test(r))throw new Error(`${s.toUpperCase()}: Option "${i}" provided type "${r}" but expected type "${n}".`)})},ae=s=>{if(!s||s.getClientRects().length===0)return!1;if(s.style&&s.parentNode&&s.parentNode.style){const t=getComputedStyle(s),e=getComputedStyle(s.parentNode);return getComputedStyle(s).getPropertyValue("visibility")==="visible"||t.display!=="none"&&e.display!=="none"&&t.visibility!=="hidden"}return!1},ci=s=>!s||s.nodeType!==Node.ELEMENT_NODE||s.classList.contains("disabled")?!0:typeof s.disabled<"u"?s.disabled:s.hasAttribute("disabled")&&s.getAttribute("disabled")!=="false",dh=s=>{if(!document.documentElement.attachShadow)return null;if(typeof s.getRootNode=="function"){const t=s.getRootNode();return t instanceof ShadowRoot?t:null}return s instanceof ShadowRoot?s:s.parentNode?dh(s.parentNode):null},ro=()=>function(){},zi=s=>{s.offsetHeight},uh=()=>{const{jQuery:s}=window;return s&&!document.body.hasAttribute("data-te-no-jquery")?s:null},Aa=[],ph=s=>{document.readyState==="loading"?(Aa.length||document.addEventListener("DOMContentLoaded",()=>{Aa.forEach(t=>t())}),Aa.push(s)):s()},et=()=>document.documentElement.dir==="rtl",dm=s=>Array.from(s),$=s=>document.createElement(s),hi=s=>{typeof s=="function"&&s()},fh=(s,t,e=!0)=>{if(!e){hi(s);return}const i=5,n=oo(t)+i;let o=!1;const r=({target:a})=>{a===t&&(o=!0,t.removeEventListener(xa,r),hi(s))};t.addEventListener(xa,r),setTimeout(()=>{o||hh(t)},n)},_h=(s,t,e,i)=>{let n=s.indexOf(t);if(n===-1)return s[!e&&i?s.length-1:0];const o=s.length;return n+=e?1:-1,i&&(n=(n+o)%o),s[Math.max(0,Math.min(n,o-1))]},um=/[^.]*(?=\..*)\.|.*/,pm=/\..*/,fm=/::\d+$/,wa={};let gh=1;const _m={mouseenter:"mouseover",mouseleave:"mouseout"},gm=/^(mouseenter|mouseleave)/i,mh=new Set(["click","dblclick","mouseup","mousedown","contextmenu","mousewheel","DOMMouseScroll","mouseover","mouseout","mousemove","selectstart","selectend","keydown","keypress","keyup","orientationchange","touchstart","touchmove","touchend","touchcancel","pointerdown","pointermove","pointerup","pointerleave","pointercancel","gesturestart","gesturechange","gestureend","focus","blur","change","reset","select","submit","focusin","focusout","load","unload","beforeunload","resize","move","DOMContentLoaded","readystatechange","error","abort","scroll"]);function bh(s,t){return t&&`${t}::${gh++}`||s.uidEvent||gh++}function vh(s){const t=bh(s);return s.uidEvent=t,wa[t]=wa[t]||{},wa[t]}function mm(s,t){return function e(i){return i.delegateTarget=s,e.oneOff&&_.off(s,i.type,t),t.apply(s,[i])}}function bm(s,t,e){return function i(n){const o=s.querySelectorAll(t);for(let{target:r}=n;r&&r!==this;r=r.parentNode)for(let a=o.length;a--;"")if(o[a]===r)return n.delegateTarget=r,i.oneOff&&_.off(s,n.type,e),e.apply(r,[n]);return null}}function yh(s,t,e=null){const i=Object.keys(s);for(let n=0,o=i.length;n<o;n++){const r=s[i[n]];if(r.originalHandler===t&&r.delegationSelector===e)return r}return null}function Th(s,t,e){const i=typeof t=="string",n=i?e:t;let o=xh(s);return mh.has(o)||(o=s),[i,n,o]}function Eh(s,t,e,i,n){if(typeof t!="string"||!s)return;if(e||(e=i,i=null),gm.test(t)){const p=f=>function(b){if(!b.relatedTarget||b.relatedTarget!==b.delegateTarget&&!b.delegateTarget.contains(b.relatedTarget))return f.call(this,b)};i?i=p(i):e=p(e)}const[o,r,a]=Th(t,e,i),l=vh(s),c=l[a]||(l[a]={}),h=yh(c,r,o?e:null);if(h){h.oneOff=h.oneOff&&n;return}const d=bh(r,t.replace(um,"")),u=o?bm(s,e,i):mm(s,e);u.delegationSelector=o?e:null,u.originalHandler=r,u.oneOff=n,u.uidEvent=d,c[d]=u,s.addEventListener(a,u,o)}function ka(s,t,e,i,n){const o=yh(t[e],i,n);o&&(s.removeEventListener(e,o,!!n),delete t[e][o.uidEvent])}function vm(s,t,e,i){const n=t[e]||{};Object.keys(n).forEach(o=>{if(o.includes(i)){const r=n[o];ka(s,t,e,r.originalHandler,r.delegationSelector)}})}function xh(s){return s=s.replace(pm,""),_m[s]||s}const _={on(s,t,e,i){Eh(s,t,e,i,!1)},one(s,t,e,i){Eh(s,t,e,i,!0)},off(s,t,e,i){if(typeof t!="string"||!s)return;const[n,o,r]=Th(t,e,i),a=r!==t,l=vh(s),c=t.startsWith(".");if(typeof o<"u"){if(!l||!l[r])return;ka(s,l,r,o,n?e:null);return}c&&Object.keys(l).forEach(d=>{vm(s,l,d,t.slice(1))});const h=l[r]||{};Object.keys(h).forEach(d=>{const u=d.replace(fm,"");if(!a||t.includes(u)){const p=h[d];ka(s,l,r,p.originalHandler,p.delegationSelector)}})},trigger(s,t,e){if(typeof t!="string"||!s)return null;const i=uh(),n=xh(t),o=t!==n,r=mh.has(n);let a,l=!0,c=!0,h=!1,d=null;return o&&i&&(a=i.Event(t,e),i(s).trigger(a),l=!a.isPropagationStopped(),c=!a.isImmediatePropagationStopped(),h=a.isDefaultPrevented()),r?(d=document.createEvent("HTMLEvents"),d.initEvent(n,l,!0)):d=new CustomEvent(t,{bubbles:l,cancelable:!0}),typeof e<"u"&&Object.keys(e).forEach(u=>{Object.defineProperty(d,u,{get(){return e[u]}})}),h&&d.preventDefault(),c&&s.dispatchEvent(d),d.defaultPrevented&&typeof a<"u"&&a.preventDefault(),d}},ct={on(s,t,e,i){const n=t.split(" ");for(let o=0;o<n.length;o++)_.on(s,n[o],e,i)},off(s,t,e,i){const n=t.split(" ");for(let o=0;o<n.length;o++)_.off(s,n[o],e,i)}},ym="5.1.3";class Mt{constructor(t){t=Be(t),t&&(this._element=t,O.setData(this._element,this.constructor.DATA_KEY,this))}dispose(){O.removeData(this._element,this.constructor.DATA_KEY),_.off(this._element,this.constructor.EVENT_KEY),Object.getOwnPropertyNames(this).forEach(t=>{this[t]=null})}_queueCallback(t,e,i=!0){fh(t,e,i)}static getInstance(t){return O.getData(Be(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static get VERSION(){return ym}static get NAME(){throw new Error('You have to implement the static method "NAME", for each component!')}static get DATA_KEY(){return`te.${this.NAME}`}static get EVENT_KEY(){return`.${this.DATA_KEY}`}}const Tm="button",Em="active";class ao extends Mt{static get NAME(){return Tm}toggle(){this._element.setAttribute("aria-pressed",this._element.classList.toggle(Em))}static jQueryInterface(t){return this.each(function(){const e=ao.getOrCreateInstance(this);t==="toggle"&&e[t]()})}}var vt="top",Lt="bottom",$t="right",yt="left",Ps="auto",ji=[vt,Lt,$t,yt],di="start",Yi="end",Ch="clippingParents",Sa="viewport",Ki="popper",Ah="reference",Oa=ji.reduce(function(s,t){return s.concat([t+"-"+di,t+"-"+Yi])},[]),Ia=[].concat(ji,[Ps]).reduce(function(s,t){return s.concat([t,t+"-"+di,t+"-"+Yi])},[]),wh="beforeRead",kh="read",Sh="afterRead",Oh="beforeMain",Ih="main",Dh="afterMain",Mh="beforeWrite",Lh="write",$h="afterWrite",lo=[wh,kh,Sh,Oh,Ih,Dh,Mh,Lh,$h];function le(s){return s?(s.nodeName||"").toLowerCase():null}function Rt(s){if(s==null)return window;if(s.toString()!=="[object Window]"){var t=s.ownerDocument;return t&&t.defaultView||window}return s}function ui(s){var t=Rt(s).Element;return s instanceof t||s instanceof Element}function Pt(s){var t=Rt(s).HTMLElement;return s instanceof t||s instanceof HTMLElement}function Da(s){if(typeof ShadowRoot>"u")return!1;var t=Rt(s).ShadowRoot;return s instanceof t||s instanceof ShadowRoot}function xm(s){var t=s.state;Object.keys(t.elements).forEach(function(e){var i=t.styles[e]||{},n=t.attributes[e]||{},o=t.elements[e];!Pt(o)||!le(o)||(Object.assign(o.style,i),Object.keys(n).forEach(function(r){var a=n[r];a===!1?o.removeAttribute(r):o.setAttribute(r,a===!0?"":a)}))})}function Cm(s){var t=s.state,e={popper:{position:t.options.strategy,left:"0",top:"0",margin:"0"},arrow:{position:"absolute"},reference:{}};return Object.assign(t.elements.popper.style,e.popper),t.styles=e,t.elements.arrow&&Object.assign(t.elements.arrow.style,e.arrow),function(){Object.keys(t.elements).forEach(function(i){var n=t.elements[i],o=t.attributes[i]||{},r=Object.keys(t.styles.hasOwnProperty(i)?t.styles[i]:e[i]),a=r.reduce(function(l,c){return l[c]="",l},{});!Pt(n)||!le(n)||(Object.assign(n.style,a),Object.keys(o).forEach(function(l){n.removeAttribute(l)}))})}}const Ma={name:"applyStyles",enabled:!0,phase:"write",fn:xm,effect:Cm,requires:["computeStyles"]};function Qt(s){return s.split("-")[0]}var pi=Math.max,co=Math.min,Ui=Math.round;function La(){var s=navigator.userAgentData;return s!=null&&s.brands&&Array.isArray(s.brands)?s.brands.map(function(t){return t.brand+"/"+t.version}).join(" "):navigator.userAgent}function Rh(){return!/^((?!chrome|android).)*safari/i.test(La())}function Xi(s,t,e){t===void 0&&(t=!1),e===void 0&&(e=!1);var i=s.getBoundingClientRect(),n=1,o=1;t&&Pt(s)&&(n=s.offsetWidth>0&&Ui(i.width)/s.offsetWidth||1,o=s.offsetHeight>0&&Ui(i.height)/s.offsetHeight||1);var r=ui(s)?Rt(s):window,a=r.visualViewport,l=!Rh()&&e,c=(i.left+(l&&a?a.offsetLeft:0))/n,h=(i.top+(l&&a?a.offsetTop:0))/o,d=i.width/n,u=i.height/o;return{width:d,height:u,top:h,right:c+d,bottom:h+u,left:c,x:c,y:h}}function $a(s){var t=Xi(s),e=s.offsetWidth,i=s.offsetHeight;return Math.abs(t.width-e)<=1&&(e=t.width),Math.abs(t.height-i)<=1&&(i=t.height),{x:s.offsetLeft,y:s.offsetTop,width:e,height:i}}function Ph(s,t){var e=t.getRootNode&&t.getRootNode();if(s.contains(t))return!0;if(e&&Da(e)){var i=t;do{if(i&&s.isSameNode(i))return!0;i=i.parentNode||i.host}while(i)}return!1}function Jt(s){return Rt(s).getComputedStyle(s)}function Am(s){return["table","td","th"].indexOf(le(s))>=0}function He(s){return((ui(s)?s.ownerDocument:s.document)||window.document).documentElement}function ho(s){return le(s)==="html"?s:s.assignedSlot||s.parentNode||(Da(s)?s.host:null)||He(s)}function Nh(s){return!Pt(s)||Jt(s).position==="fixed"?null:s.offsetParent}function wm(s){var t=/firefox/i.test(La()),e=/Trident/i.test(La());if(e&&Pt(s)){var i=Jt(s);if(i.position==="fixed")return null}var n=ho(s);for(Da(n)&&(n=n.host);Pt(n)&&["html","body"].indexOf(le(n))<0;){var o=Jt(n);if(o.transform!=="none"||o.perspective!=="none"||o.contain==="paint"||["transform","perspective"].indexOf(o.willChange)!==-1||t&&o.willChange==="filter"||t&&o.filter&&o.filter!=="none")return n;n=n.parentNode}return null}function Ns(s){for(var t=Rt(s),e=Nh(s);e&&Am(e)&&Jt(e).position==="static";)e=Nh(e);return e&&(le(e)==="html"||le(e)==="body"&&Jt(e).position==="static")?t:e||wm(s)||t}function Ra(s){return["top","bottom"].indexOf(s)>=0?"x":"y"}function Bs(s,t,e){return pi(s,co(t,e))}function km(s,t,e){var i=Bs(s,t,e);return i>e?e:i}function Bh(){return{top:0,right:0,bottom:0,left:0}}function Hh(s){return Object.assign({},Bh(),s)}function Vh(s,t){return t.reduce(function(e,i){return e[i]=s,e},{})}var Sm=function(t,e){return t=typeof t=="function"?t(Object.assign({},e.rects,{placement:e.placement})):t,Hh(typeof t!="number"?t:Vh(t,ji))};function Om(s){var t,e=s.state,i=s.name,n=s.options,o=e.elements.arrow,r=e.modifiersData.popperOffsets,a=Qt(e.placement),l=Ra(a),c=[yt,$t].indexOf(a)>=0,h=c?"height":"width";if(!(!o||!r)){var d=Sm(n.padding,e),u=$a(o),p=l==="y"?vt:yt,f=l==="y"?Lt:$t,b=e.rects.reference[h]+e.rects.reference[l]-r[l]-e.rects.popper[h],v=r[l]-e.rects.reference[l],y=Ns(o),T=y?l==="y"?y.clientHeight||0:y.clientWidth||0:0,x=b/2-v/2,E=d[p],C=T-u[h]-d[f],A=T/2-u[h]/2+x,w=Bs(E,A,C),S=l;e.modifiersData[i]=(t={},t[S]=w,t.centerOffset=w-A,t)}}function Im(s){var t=s.state,e=s.options,i=e.element,n=i===void 0?"[data-popper-arrow]":i;if(n!=null&&!(typeof n=="string"&&(n=t.elements.popper.querySelector(n),!n))){if({}.NODE_ENV!=="production"&&(Pt(n)||console.error(['Popper: "arrow" element must be an HTMLElement (not an SVGElement).',"To use an SVG arrow, wrap it in an HTMLElement that will be used as","the arrow."].join(" "))),!Ph(t.elements.popper,n)){({}).NODE_ENV!=="production"&&console.error(['Popper: "arrow" modifier\'s `element` must be a child of the popper',"element."].join(" "));return}t.elements.arrow=n}}const Fh={name:"arrow",enabled:!0,phase:"main",fn:Om,effect:Im,requires:["popperOffsets"],requiresIfExists:["preventOverflow"]};function Gi(s){return s.split("-")[1]}var Dm={top:"auto",right:"auto",bottom:"auto",left:"auto"};function Mm(s,t){var e=s.x,i=s.y,n=t.devicePixelRatio||1;return{x:Ui(e*n)/n||0,y:Ui(i*n)/n||0}}function Wh(s){var t,e=s.popper,i=s.popperRect,n=s.placement,o=s.variation,r=s.offsets,a=s.position,l=s.gpuAcceleration,c=s.adaptive,h=s.roundOffsets,d=s.isFixed,u=r.x,p=u===void 0?0:u,f=r.y,b=f===void 0?0:f,v=typeof h=="function"?h({x:p,y:b}):{x:p,y:b};p=v.x,b=v.y;var y=r.hasOwnProperty("x"),T=r.hasOwnProperty("y"),x=yt,E=vt,C=window;if(c){var A=Ns(e),w="clientHeight",S="clientWidth";if(A===Rt(e)&&(A=He(e),Jt(A).position!=="static"&&a==="absolute"&&(w="scrollHeight",S="scrollWidth")),A=A,n===vt||(n===yt||n===$t)&&o===Yi){E=Lt;var k=d&&A===C&&C.visualViewport?C.visualViewport.height:A[w];b-=k-i.height,b*=l?1:-1}if(n===yt||(n===vt||n===Lt)&&o===Yi){x=$t;var D=d&&A===C&&C.visualViewport?C.visualViewport.width:A[S];p-=D-i.width,p*=l?1:-1}}var I=Object.assign({position:a},c&&Dm),M=h===!0?Mm({x:p,y:b},Rt(e)):{x:p,y:b};if(p=M.x,b=M.y,l){var P;return Object.assign({},I,(P={},P[E]=T?"0":"",P[x]=y?"0":"",P.transform=(C.devicePixelRatio||1)<=1?"translate("+p+"px, "+b+"px)":"translate3d("+p+"px, "+b+"px, 0)",P))}return Object.assign({},I,(t={},t[E]=T?b+"px":"",t[x]=y?p+"px":"",t.transform="",t))}function Lm(s){var t=s.state,e=s.options,i=e.gpuAcceleration,n=i===void 0?!0:i,o=e.adaptive,r=o===void 0?!0:o,a=e.roundOffsets,l=a===void 0?!0:a;if({}.NODE_ENV!=="production"){var c=Jt(t.elements.popper).transitionProperty||"";r&&["transform","top","right","bottom","left"].some(function(d){return c.indexOf(d)>=0})&&console.warn(["Popper: Detected CSS transitions on at least one of the following",'CSS properties: "transform", "top", "right", "bottom", "left".',`
+
+`,'Disable the "computeStyles" modifier\'s `adaptive` option to allow',"for smooth transitions, or remove these properties from the CSS","transition declaration on the popper element if only transitioning","opacity or background-color for example.",`
+
+`,"We recommend using the popper element as a wrapper around an inner","element that can have any CSS property transitioned for animations."].join(" "))}var h={placement:Qt(t.placement),variation:Gi(t.placement),popper:t.elements.popper,popperRect:t.rects.popper,gpuAcceleration:n,isFixed:t.options.strategy==="fixed"};t.modifiersData.popperOffsets!=null&&(t.styles.popper=Object.assign({},t.styles.popper,Wh(Object.assign({},h,{offsets:t.modifiersData.popperOffsets,position:t.options.strategy,adaptive:r,roundOffsets:l})))),t.modifiersData.arrow!=null&&(t.styles.arrow=Object.assign({},t.styles.arrow,Wh(Object.assign({},h,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:l})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})}const Pa={name:"computeStyles",enabled:!0,phase:"beforeWrite",fn:Lm,data:{}};var uo={passive:!0};function $m(s){var t=s.state,e=s.instance,i=s.options,n=i.scroll,o=n===void 0?!0:n,r=i.resize,a=r===void 0?!0:r,l=Rt(t.elements.popper),c=[].concat(t.scrollParents.reference,t.scrollParents.popper);return o&&c.forEach(function(h){h.addEventListener("scroll",e.update,uo)}),a&&l.addEventListener("resize",e.update,uo),function(){o&&c.forEach(function(h){h.removeEventListener("scroll",e.update,uo)}),a&&l.removeEventListener("resize",e.update,uo)}}const Na={name:"eventListeners",enabled:!0,phase:"write",fn:function(){},effect:$m,data:{}};var Rm={left:"right",right:"left",bottom:"top",top:"bottom"};function po(s){return s.replace(/left|right|bottom|top/g,function(t){return Rm[t]})}var Pm={start:"end",end:"start"};function zh(s){return s.replace(/start|end/g,function(t){return Pm[t]})}function Ba(s){var t=Rt(s),e=t.pageXOffset,i=t.pageYOffset;return{scrollLeft:e,scrollTop:i}}function Ha(s){return Xi(He(s)).left+Ba(s).scrollLeft}function Nm(s,t){var e=Rt(s),i=He(s),n=e.visualViewport,o=i.clientWidth,r=i.clientHeight,a=0,l=0;if(n){o=n.width,r=n.height;var c=Rh();(c||!c&&t==="fixed")&&(a=n.offsetLeft,l=n.offsetTop)}return{width:o,height:r,x:a+Ha(s),y:l}}function Bm(s){var t,e=He(s),i=Ba(s),n=(t=s.ownerDocument)==null?void 0:t.body,o=pi(e.scrollWidth,e.clientWidth,n?n.scrollWidth:0,n?n.clientWidth:0),r=pi(e.scrollHeight,e.clientHeight,n?n.scrollHeight:0,n?n.clientHeight:0),a=-i.scrollLeft+Ha(s),l=-i.scrollTop;return Jt(n||e).direction==="rtl"&&(a+=pi(e.clientWidth,n?n.clientWidth:0)-o),{width:o,height:r,x:a,y:l}}function Va(s){var t=Jt(s),e=t.overflow,i=t.overflowX,n=t.overflowY;return/auto|scroll|overlay|hidden/.test(e+n+i)}function jh(s){return["html","body","#document"].indexOf(le(s))>=0?s.ownerDocument.body:Pt(s)&&Va(s)?s:jh(ho(s))}function Hs(s,t){var e;t===void 0&&(t=[]);var i=jh(s),n=i===((e=s.ownerDocument)==null?void 0:e.body),o=Rt(i),r=n?[o].concat(o.visualViewport||[],Va(i)?i:[]):i,a=t.concat(r);return n?a:a.concat(Hs(ho(r)))}function Fa(s){return Object.assign({},s,{left:s.x,top:s.y,right:s.x+s.width,bottom:s.y+s.height})}function Hm(s,t){var e=Xi(s,!1,t==="fixed");return e.top=e.top+s.clientTop,e.left=e.left+s.clientLeft,e.bottom=e.top+s.clientHeight,e.right=e.left+s.clientWidth,e.width=s.clientWidth,e.height=s.clientHeight,e.x=e.left,e.y=e.top,e}function Yh(s,t,e){return t===Sa?Fa(Nm(s,e)):ui(t)?Hm(t,e):Fa(Bm(He(s)))}function Vm(s){var t=Hs(ho(s)),e=["absolute","fixed"].indexOf(Jt(s).position)>=0,i=e&&Pt(s)?Ns(s):s;return ui(i)?t.filter(function(n){return ui(n)&&Ph(n,i)&&le(n)!=="body"}):[]}function Fm(s,t,e,i){var n=t==="clippingParents"?Vm(s):[].concat(t),o=[].concat(n,[e]),r=o[0],a=o.reduce(function(l,c){var h=Yh(s,c,i);return l.top=pi(h.top,l.top),l.right=co(h.right,l.right),l.bottom=co(h.bottom,l.bottom),l.left=pi(h.left,l.left),l},Yh(s,r,i));return a.width=a.right-a.left,a.height=a.bottom-a.top,a.x=a.left,a.y=a.top,a}function Kh(s){var t=s.reference,e=s.element,i=s.placement,n=i?Qt(i):null,o=i?Gi(i):null,r=t.x+t.width/2-e.width/2,a=t.y+t.height/2-e.height/2,l;switch(n){case vt:l={x:r,y:t.y-e.height};break;case Lt:l={x:r,y:t.y+t.height};break;case $t:l={x:t.x+t.width,y:a};break;case yt:l={x:t.x-e.width,y:a};break;default:l={x:t.x,y:t.y}}var c=n?Ra(n):null;if(c!=null){var h=c==="y"?"height":"width";switch(o){case di:l[c]=l[c]-(t[h]/2-e[h]/2);break;case Yi:l[c]=l[c]+(t[h]/2-e[h]/2);break}}return l}function qi(s,t){t===void 0&&(t={});var e=t,i=e.placement,n=i===void 0?s.placement:i,o=e.strategy,r=o===void 0?s.strategy:o,a=e.boundary,l=a===void 0?Ch:a,c=e.rootBoundary,h=c===void 0?Sa:c,d=e.elementContext,u=d===void 0?Ki:d,p=e.altBoundary,f=p===void 0?!1:p,b=e.padding,v=b===void 0?0:b,y=Hh(typeof v!="number"?v:Vh(v,ji)),T=u===Ki?Ah:Ki,x=s.rects.popper,E=s.elements[f?T:u],C=Fm(ui(E)?E:E.contextElement||He(s.elements.popper),l,h,r),A=Xi(s.elements.reference),w=Kh({reference:A,element:x,strategy:"absolute",placement:n}),S=Fa(Object.assign({},x,w)),k=u===Ki?S:A,D={top:C.top-k.top+y.top,bottom:k.bottom-C.bottom+y.bottom,left:C.left-k.left+y.left,right:k.right-C.right+y.right},I=s.modifiersData.offset;if(u===Ki&&I){var M=I[n];Object.keys(D).forEach(function(P){var X=[$t,Lt].indexOf(P)>=0?1:-1,R=[vt,Lt].indexOf(P)>=0?"y":"x";D[P]+=M[R]*X})}return D}function Wm(s,t){t===void 0&&(t={});var e=t,i=e.placement,n=e.boundary,o=e.rootBoundary,r=e.padding,a=e.flipVariations,l=e.allowedAutoPlacements,c=l===void 0?Ia:l,h=Gi(i),d=h?a?Oa:Oa.filter(function(f){return Gi(f)===h}):ji,u=d.filter(function(f){return c.indexOf(f)>=0});u.length===0&&(u=d,{}.NODE_ENV!=="production"&&console.error(["Popper: The `allowedAutoPlacements` option did not allow any","placements. Ensure the `placement` option matches the variation","of the allowed placements.",'For example, "auto" cannot be used to allow "bottom-start".','Use "auto-start" instead.'].join(" ")));var p=u.reduce(function(f,b){return f[b]=qi(s,{placement:b,boundary:n,rootBoundary:o,padding:r})[Qt(b)],f},{});return Object.keys(p).sort(function(f,b){return p[f]-p[b]})}function zm(s){if(Qt(s)===Ps)return[];var t=po(s);return[zh(s),t,zh(t)]}function jm(s){var t=s.state,e=s.options,i=s.name;if(!t.modifiersData[i]._skip){for(var n=e.mainAxis,o=n===void 0?!0:n,r=e.altAxis,a=r===void 0?!0:r,l=e.fallbackPlacements,c=e.padding,h=e.boundary,d=e.rootBoundary,u=e.altBoundary,p=e.flipVariations,f=p===void 0?!0:p,b=e.allowedAutoPlacements,v=t.options.placement,y=Qt(v),T=y===v,x=l||(T||!f?[po(v)]:zm(v)),E=[v].concat(x).reduce(function(we,Zt){return we.concat(Qt(Zt)===Ps?Wm(t,{placement:Zt,boundary:h,rootBoundary:d,padding:c,flipVariations:f,allowedAutoPlacements:b}):Zt)},[]),C=t.rects.reference,A=t.rects.popper,w=new Map,S=!0,k=E[0],D=0;D<E.length;D++){var I=E[D],M=Qt(I),P=Gi(I)===di,X=[vt,Lt].indexOf(M)>=0,R=X?"width":"height",z=qi(t,{placement:I,boundary:h,rootBoundary:d,altBoundary:u,padding:c}),Y=X?P?$t:yt:P?Lt:vt;C[R]>A[R]&&(Y=po(Y));var Gt=po(Y),oe=[];if(o&&oe.push(z[M]<=0),a&&oe.push(z[Y]<=0,z[Gt]<=0),oe.every(function(we){return we})){k=I,S=!1;break}w.set(I,oe)}if(S)for(var re=f?3:1,li=function(Zt){var Pe=E.find(function(Ta){var Vi=w.get(Ta);if(Vi)return Vi.slice(0,Zt).every(function(rh){return rh})});if(Pe)return k=Pe,"break"},qt=re;qt>0;qt--){var Ae=li(qt);if(Ae==="break")break}t.placement!==k&&(t.modifiersData[i]._skip=!0,t.placement=k,t.reset=!0)}}const Uh={name:"flip",enabled:!0,phase:"main",fn:jm,requiresIfExists:["offset"],data:{_skip:!1}};function Xh(s,t,e){return e===void 0&&(e={x:0,y:0}),{top:s.top-t.height-e.y,right:s.right-t.width+e.x,bottom:s.bottom-t.height+e.y,left:s.left-t.width-e.x}}function Gh(s){return[vt,$t,Lt,yt].some(function(t){return s[t]>=0})}function Ym(s){var t=s.state,e=s.name,i=t.rects.reference,n=t.rects.popper,o=t.modifiersData.preventOverflow,r=qi(t,{elementContext:"reference"}),a=qi(t,{altBoundary:!0}),l=Xh(r,i),c=Xh(a,n,o),h=Gh(l),d=Gh(c);t.modifiersData[e]={referenceClippingOffsets:l,popperEscapeOffsets:c,isReferenceHidden:h,hasPopperEscaped:d},t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-reference-hidden":h,"data-popper-escaped":d})}const qh={name:"hide",enabled:!0,phase:"main",requiresIfExists:["preventOverflow"],fn:Ym};function Km(s,t,e){var i=Qt(s),n=[yt,vt].indexOf(i)>=0?-1:1,o=typeof e=="function"?e(Object.assign({},t,{placement:s})):e,r=o[0],a=o[1];return r=r||0,a=(a||0)*n,[yt,$t].indexOf(i)>=0?{x:a,y:r}:{x:r,y:a}}function Um(s){var t=s.state,e=s.options,i=s.name,n=e.offset,o=n===void 0?[0,0]:n,r=Ia.reduce(function(h,d){return h[d]=Km(d,t.rects,o),h},{}),a=r[t.placement],l=a.x,c=a.y;t.modifiersData.popperOffsets!=null&&(t.modifiersData.popperOffsets.x+=l,t.modifiersData.popperOffsets.y+=c),t.modifiersData[i]=r}const Zh={name:"offset",enabled:!0,phase:"main",requires:["popperOffsets"],fn:Um};function Xm(s){var t=s.state,e=s.name;t.modifiersData[e]=Kh({reference:t.rects.reference,element:t.rects.popper,strategy:"absolute",placement:t.placement})}const Wa={name:"popperOffsets",enabled:!0,phase:"read",fn:Xm,data:{}};function Gm(s){return s==="x"?"y":"x"}function qm(s){var t=s.state,e=s.options,i=s.name,n=e.mainAxis,o=n===void 0?!0:n,r=e.altAxis,a=r===void 0?!1:r,l=e.boundary,c=e.rootBoundary,h=e.altBoundary,d=e.padding,u=e.tether,p=u===void 0?!0:u,f=e.tetherOffset,b=f===void 0?0:f,v=qi(t,{boundary:l,rootBoundary:c,padding:d,altBoundary:h}),y=Qt(t.placement),T=Gi(t.placement),x=!T,E=Ra(y),C=Gm(E),A=t.modifiersData.popperOffsets,w=t.rects.reference,S=t.rects.popper,k=typeof b=="function"?b(Object.assign({},t.rects,{placement:t.placement})):b,D=typeof k=="number"?{mainAxis:k,altAxis:k}:Object.assign({mainAxis:0,altAxis:0},k),I=t.modifiersData.offset?t.modifiersData.offset[t.placement]:null,M={x:0,y:0};if(A){if(o){var P,X=E==="y"?vt:yt,R=E==="y"?Lt:$t,z=E==="y"?"height":"width",Y=A[E],Gt=Y+v[X],oe=Y-v[R],re=p?-S[z]/2:0,li=T===di?w[z]:S[z],qt=T===di?-S[z]:-w[z],Ae=t.elements.arrow,we=p&&Ae?$a(Ae):{width:0,height:0},Zt=t.modifiersData["arrow#persistent"]?t.modifiersData["arrow#persistent"].padding:Bh(),Pe=Zt[X],Ta=Zt[R],Vi=Bs(0,w[z],we[z]),rh=x?w[z]/2-re-Vi-Pe-D.mainAxis:li-Vi-Pe-D.mainAxis,mL=x?-w[z]/2+re+Vi+Ta+D.mainAxis:qt+Vi+Ta+D.mainAxis,ah=t.elements.arrow&&Ns(t.elements.arrow),bL=ah?E==="y"?ah.clientTop||0:ah.clientLeft||0:0,Zg=(P=I==null?void 0:I[E])!=null?P:0,vL=Y+rh-Zg-bL,yL=Y+mL-Zg,Qg=Bs(p?co(Gt,vL):Gt,Y,p?pi(oe,yL):oe);A[E]=Qg,M[E]=Qg-Y}if(a){var Jg,TL=E==="x"?vt:yt,EL=E==="x"?Lt:$t,Fi=A[C],Ea=C==="y"?"height":"width",tm=Fi+v[TL],em=Fi-v[EL],lh=[vt,yt].indexOf(y)!==-1,im=(Jg=I==null?void 0:I[C])!=null?Jg:0,sm=lh?tm:Fi-w[Ea]-S[Ea]-im+D.altAxis,nm=lh?Fi+w[Ea]+S[Ea]-im-D.altAxis:em,om=p&&lh?km(sm,Fi,nm):Bs(p?sm:tm,Fi,p?nm:em);A[C]=om,M[C]=om-Fi}t.modifiersData[i]=M}}const Qh={name:"preventOverflow",enabled:!0,phase:"main",fn:qm,requiresIfExists:["offset"]};function Zm(s){return{scrollLeft:s.scrollLeft,scrollTop:s.scrollTop}}function Qm(s){return s===Rt(s)||!Pt(s)?Ba(s):Zm(s)}function Jm(s){var t=s.getBoundingClientRect(),e=Ui(t.width)/s.offsetWidth||1,i=Ui(t.height)/s.offsetHeight||1;return e!==1||i!==1}function tb(s,t,e){e===void 0&&(e=!1);var i=Pt(t),n=Pt(t)&&Jm(t),o=He(t),r=Xi(s,n,e),a={scrollLeft:0,scrollTop:0},l={x:0,y:0};return(i||!i&&!e)&&((le(t)!=="body"||Va(o))&&(a=Qm(t)),Pt(t)?(l=Xi(t,!0),l.x+=t.clientLeft,l.y+=t.clientTop):o&&(l.x=Ha(o))),{x:r.left+a.scrollLeft-l.x,y:r.top+a.scrollTop-l.y,width:r.width,height:r.height}}function eb(s){var t=new Map,e=new Set,i=[];s.forEach(function(o){t.set(o.name,o)});function n(o){e.add(o.name);var r=[].concat(o.requires||[],o.requiresIfExists||[]);r.forEach(function(a){if(!e.has(a)){var l=t.get(a);l&&n(l)}}),i.push(o)}return s.forEach(function(o){e.has(o.name)||n(o)}),i}function ib(s){var t=eb(s);return lo.reduce(function(e,i){return e.concat(t.filter(function(n){return n.phase===i}))},[])}function sb(s){var t;return function(){return t||(t=new Promise(function(e){Promise.resolve().then(function(){t=void 0,e(s())})})),t}}function Ve(s){for(var t=arguments.length,e=new Array(t>1?t-1:0),i=1;i<t;i++)e[i-1]=arguments[i];return[].concat(e).reduce(function(n,o){return n.replace(/%s/,o)},s)}var fi='Popper: modifier "%s" provided an invalid %s property, expected %s but got %s',nb='Popper: modifier "%s" requires "%s", but "%s" modifier is not available',Jh=["name","enabled","phase","fn","effect","requires","options"];function ob(s){s.forEach(function(t){[].concat(Object.keys(t),Jh).filter(function(e,i,n){return n.indexOf(e)===i}).forEach(function(e){switch(e){case"name":typeof t.name!="string"&&console.error(Ve(fi,String(t.name),'"name"','"string"','"'+String(t.name)+'"'));break;case"enabled":typeof t.enabled!="boolean"&&console.error(Ve(fi,t.name,'"enabled"','"boolean"','"'+String(t.enabled)+'"'));break;case"phase":lo.indexOf(t.phase)<0&&console.error(Ve(fi,t.name,'"phase"',"either "+lo.join(", "),'"'+String(t.phase)+'"'));break;case"fn":typeof t.fn!="function"&&console.error(Ve(fi,t.name,'"fn"','"function"','"'+String(t.fn)+'"'));break;case"effect":t.effect!=null&&typeof t.effect!="function"&&console.error(Ve(fi,t.name,'"effect"','"function"','"'+String(t.fn)+'"'));break;case"requires":t.requires!=null&&!Array.isArray(t.requires)&&console.error(Ve(fi,t.name,'"requires"','"array"','"'+String(t.requires)+'"'));break;case"requiresIfExists":Array.isArray(t.requiresIfExists)||console.error(Ve(fi,t.name,'"requiresIfExists"','"array"','"'+String(t.requiresIfExists)+'"'));break;case"options":case"data":break;default:console.error('PopperJS: an invalid property has been provided to the "'+t.name+'" modifier, valid properties are '+Jh.map(function(i){return'"'+i+'"'}).join(", ")+'; but "'+e+'" was provided.')}t.requires&&t.requires.forEach(function(i){s.find(function(n){return n.name===i})==null&&console.error(Ve(nb,String(t.name),i,i))})})})}function rb(s,t){var e=new Set;return s.filter(function(i){var n=t(i);if(!e.has(n))return e.add(n),!0})}function ab(s){var t=s.reduce(function(e,i){var n=e[i.name];return e[i.name]=n?Object.assign({},n,i,{options:Object.assign({},n.options,i.options),data:Object.assign({},n.data,i.data)}):i,e},{});return Object.keys(t).map(function(e){return t[e]})}var td="Popper: Invalid reference or popper argument provided. They must be either a DOM element or virtual element.",lb="Popper: An infinite loop in the modifiers cycle has been detected! The cycle has been interrupted to prevent a browser crash.",ed={placement:"bottom",modifiers:[],strategy:"absolute"};function id(){for(var s=arguments.length,t=new Array(s),e=0;e<s;e++)t[e]=arguments[e];return!t.some(function(i){return!(i&&typeof i.getBoundingClientRect=="function")})}function fo(s){s===void 0&&(s={});var t=s,e=t.defaultModifiers,i=e===void 0?[]:e,n=t.defaultOptions,o=n===void 0?ed:n;return function(a,l,c){c===void 0&&(c=o);var h={placement:"bottom",orderedModifiers:[],options:Object.assign({},ed,o),modifiersData:{},elements:{reference:a,popper:l},attributes:{},styles:{}},d=[],u=!1,p={state:h,setOptions:function(y){var T=typeof y=="function"?y(h.options):y;b(),h.options=Object.assign({},o,h.options,T),h.scrollParents={reference:ui(a)?Hs(a):a.contextElement?Hs(a.contextElement):[],popper:Hs(l)};var x=ib(ab([].concat(i,h.options.modifiers)));if(h.orderedModifiers=x.filter(function(I){return I.enabled}),{}.NODE_ENV!=="production"){var E=rb([].concat(x,h.options.modifiers),function(I){var M=I.name;return M});if(ob(E),Qt(h.options.placement)===Ps){var C=h.orderedModifiers.find(function(I){var M=I.name;return M==="flip"});C||console.error(['Popper: "auto" placements require the "flip" modifier be',"present and enabled to work."].join(" "))}var A=Jt(l),w=A.marginTop,S=A.marginRight,k=A.marginBottom,D=A.marginLeft;[w,S,k,D].some(function(I){return parseFloat(I)})&&console.warn(['Popper: CSS "margin" styles cannot be used to apply padding',"between the popper and its reference element or boundary.","To replicate margin, use the `offset` modifier, as well as","the `padding` option in the `preventOverflow` and `flip`","modifiers."].join(" "))}return f(),p.update()},forceUpdate:function(){if(!u){var y=h.elements,T=y.reference,x=y.popper;if(!id(T,x)){({}).NODE_ENV!=="production"&&console.error(td);return}h.rects={reference:tb(T,Ns(x),h.options.strategy==="fixed"),popper:$a(x)},h.reset=!1,h.placement=h.options.placement,h.orderedModifiers.forEach(function(I){return h.modifiersData[I.name]=Object.assign({},I.data)});for(var E=0,C=0;C<h.orderedModifiers.length;C++){if({}.NODE_ENV!=="production"&&(E+=1,E>100)){console.error(lb);break}if(h.reset===!0){h.reset=!1,C=-1;continue}var A=h.orderedModifiers[C],w=A.fn,S=A.options,k=S===void 0?{}:S,D=A.name;typeof w=="function"&&(h=w({state:h,options:k,name:D,instance:p})||h)}}},update:sb(function(){return new Promise(function(v){p.forceUpdate(),v(h)})}),destroy:function(){b(),u=!0}};if(!id(a,l))return{}.NODE_ENV!=="production"&&console.error(td),p;p.setOptions(c).then(function(v){!u&&c.onFirstUpdate&&c.onFirstUpdate(v)});function f(){h.orderedModifiers.forEach(function(v){var y=v.name,T=v.options,x=T===void 0?{}:T,E=v.effect;if(typeof E=="function"){var C=E({state:h,name:y,instance:p,options:x}),A=function(){};d.push(C||A)}})}function b(){d.forEach(function(v){return v()}),d=[]}return p}}var cb=fo(),hb=[Na,Wa,Pa,Ma],db=fo({defaultModifiers:hb}),ub=[Na,Wa,Pa,Ma,Zh,Uh,Qh,Fh,qh],Fe=fo({defaultModifiers:ub});const sd=Object.freeze(Object.defineProperty({__proto__:null,afterMain:Dh,afterRead:Sh,afterWrite:$h,applyStyles:Ma,arrow:Fh,auto:Ps,basePlacements:ji,beforeMain:Oh,beforeRead:wh,beforeWrite:Mh,bottom:Lt,clippingParents:Ch,computeStyles:Pa,createPopper:Fe,createPopperBase:cb,createPopperLite:db,detectOverflow:qi,end:Yi,eventListeners:Na,flip:Uh,hide:qh,left:yt,main:Ih,modifierPhases:lo,offset:Zh,placements:Ia,popper:Ki,popperGenerator:fo,popperOffsets:Wa,preventOverflow:Qh,read:kh,reference:Ah,right:$t,start:di,top:vt,variationPlacements:Oa,viewport:Sa,write:Lh},Symbol.toStringTag,{value:"Module"}));function za(s){return s==="true"?!0:s==="false"?!1:s===Number(s).toString()?Number(s):s===""||s==="null"?null:s}function ja(s){return s.replace(/[A-Z]/g,t=>`-${t.toLowerCase()}`)}const g={setDataAttribute(s,t,e){s.setAttribute(`data-te-${ja(t)}`,e)},removeDataAttribute(s,t){s.removeAttribute(`data-te-${ja(t)}`)},getDataAttributes(s){if(!s)return{};const t={};return Object.keys(s.dataset).filter(e=>e.startsWith("te")).forEach(e=>{if(e.startsWith("teClass"))return;let i=e.replace(/^te/,"");i=i.charAt(0).toLowerCase()+i.slice(1,i.length),t[i]=za(s.dataset[e])}),t},getDataClassAttributes(s){if(!s)return{};const t={...s.dataset};return Object.keys(t).filter(e=>e.startsWith("teClass")).forEach(e=>{let i=e.replace(/^teClass/,"");i=i.charAt(0).toLowerCase()+i.slice(1,i.length),t[i]=za(t[e])}),t},getDataAttribute(s,t){return za(s.getAttribute(`data-te-${ja(t)}`))},offset(s){const t=s.getBoundingClientRect();return{top:t.top+document.body.scrollTop,left:t.left+document.body.scrollLeft}},position(s){return{top:s.offsetTop,left:s.offsetLeft}},style(s,t){Object.assign(s.style,t)},toggleClass(s,t){s&&Ya(t).forEach(e=>{s.classList.contains(e)?s.classList.remove(e):s.classList.add(e)})},addClass(s,t){Ya(t).forEach(e=>!s.classList.contains(e)&&s.classList.add(e))},addStyle(s,t){Object.keys(t).forEach(e=>{s.style[e]=t[e]})},removeClass(s,t){Ya(t).forEach(e=>s.classList.contains(e)&&s.classList.remove(e))},hasClass(s,t){return s.classList.contains(t)},maxOffset(s){const t=s.getBoundingClientRect();return{top:t.top+Math.max(document.body.scrollTop,document.documentElement.scrollTop,window.scrollY),left:t.left+Math.max(document.body.scrollLeft,document.documentElement.scrollLeft,window.scrollX)}}};function Ya(s){return typeof s=="string"?s.split(" "):Array.isArray(s)?s:!1}const pb=3,m={closest(s,t){return s.closest(t)},matches(s,t){return s.matches(t)},find(s,t=document.documentElement){return[].concat(...Element.prototype.querySelectorAll.call(t,s))},findOne(s,t=document.documentElement){return Element.prototype.querySelector.call(t,s)},children(s,t){return[].concat(...s.children).filter(i=>i.matches(t))},parents(s,t){const e=[];let i=s.parentNode;for(;i&&i.nodeType===Node.ELEMENT_NODE&&i.nodeType!==pb;)this.matches(i,t)&&e.push(i),i=i.parentNode;return e},prev(s,t){let e=s.previousElementSibling;for(;e;){if(e.matches(t))return[e];e=e.previousElementSibling}return[]},next(s,t){let e=s.nextElementSibling;for(;e;){if(this.matches(e,t))return[e];e=e.nextElementSibling}return[]},focusableChildren(s){const t=["a","button","input","textarea","select","details","[tabindex]",'[contenteditable="true"]'].map(e=>`${e}:not([tabindex^="-"])`).join(", ");return this.find(t,s).filter(e=>!ci(e)&&ae(e))}},Ka="dropdown",_i=".te.dropdown",Ua=".data-api",_o="Escape",nd="Space",od="Tab",Xa="ArrowUp",go="ArrowDown",fb=2,_b=new RegExp(`${Xa}|${go}|${_o}`),gb=`hide${_i}`,mb=`hidden${_i}`,bb=`show${_i}`,vb=`shown${_i}`,yb=`click${_i}${Ua}`,rd=`keydown${_i}${Ua}`,Tb=`keyup${_i}${Ua}`,We="show",Eb="dropup",xb="dropend",Cb="dropstart",Ab="[data-te-navbar-ref]",mo="[data-te-dropdown-toggle-ref]",Ga="[data-te-dropdown-menu-ref]",wb="[data-te-navbar-nav-ref]",kb="[data-te-dropdown-menu-ref] [data-te-dropdown-item-ref]:not(.disabled):not(:disabled)",Sb=et()?"top-end":"top-start",Ob=et()?"top-start":"top-end",Ib=et()?"bottom-end":"bottom-start",Db=et()?"bottom-start":"bottom-end",Mb=et()?"left-start":"right-start",Lb=et()?"right-start":"left-start",$b=[{opacity:"0"},{opacity:"1"}],Rb=[{opacity:"1"},{opacity:"0"}],ad={iterations:1,easing:"ease",fill:"both"},Pb={offset:[0,2],boundary:"clippingParents",reference:"toggle",display:"dynamic",popperConfig:null,autoClose:!0,dropdownAnimation:"on",animationDuration:550},Nb={offset:"(array|string|function)",boundary:"(string|element)",reference:"(string|element|object)",display:"string",popperConfig:"(null|object|function)",autoClose:"(boolean|string)",dropdownAnimation:"string",animationDuration:"number"};class Ft extends Mt{constructor(t,e){super(t),this._popper=null,this._config=this._getConfig(e),this._menu=this._getMenuElement(),this._inNavbar=this._detectNavbar(),this._fadeOutAnimate=null;const i=window.matchMedia("(prefers-reduced-motion: reduce)").matches;this._animationCanPlay=this._config.dropdownAnimation==="on"&&!i,this._didInit=!1,this._init()}static get Default(){return Pb}static get DefaultType(){return Nb}static get NAME(){return Ka}toggle(){return this._isShown()?this.hide():this.show()}show(){if(ci(this._element)||this._isShown(this._menu))return;const t={relatedTarget:this._element};if(_.trigger(this._element,bb,t).defaultPrevented)return;const i=Ft.getParentFromElement(this._element);this._inNavbar?g.setDataAttribute(this._menu,"popper","none"):this._createPopper(i),"ontouchstart"in document.documentElement&&!i.closest(wb)&&[].concat(...document.body.children).forEach(n=>_.on(n,"mouseover",ro)),this._element.focus(),this._element.setAttribute("aria-expanded",!0),this._menu.setAttribute(`data-te-dropdown-${We}`,""),this._animationCanPlay&&this._menu.animate($b,{...ad,duration:this._config.animationDuration}),this._element.setAttribute(`data-te-dropdown-${We}`,""),setTimeout(()=>{_.trigger(this._element,vb,t)},this._animationCanPlay?this._config.animationDuration:0)}hide(){if(ci(this._element)||!this._isShown(this._menu))return;const t={relatedTarget:this._element};this._completeHide(t)}dispose(){this._popper&&this._popper.destroy(),super.dispose()}update(){this._inNavbar=this._detectNavbar(),this._popper&&this._popper.update()}_init(){this._didInit||(_.on(document,rd,mo,Ft.dataApiKeydownHandler),_.on(document,rd,Ga,Ft.dataApiKeydownHandler),_.on(document,yb,Ft.clearMenus),_.on(document,Tb,Ft.clearMenus),this._didInit=!0)}_completeHide(t){this._fadeOutAnimate&&this._fadeOutAnimate.playState==="running"||_.trigger(this._element,gb,t).defaultPrevented||("ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(i=>_.off(i,"mouseover",ro)),this._animationCanPlay&&(this._fadeOutAnimate=this._menu.animate(Rb,{...ad,duration:this._config.animationDuration})),setTimeout(()=>{this._popper&&this._popper.destroy(),this._menu.removeAttribute(`data-te-dropdown-${We}`),this._element.removeAttribute(`data-te-dropdown-${We}`),this._element.setAttribute("aria-expanded","false"),g.removeDataAttribute(this._menu,"popper"),_.trigger(this._element,mb,t)},this._animationCanPlay?this._config.animationDuration:0))}_getConfig(t){if(t={...this.constructor.Default,...g.getDataAttributes(this._element),...t},L(Ka,t,this.constructor.DefaultType),typeof t.reference=="object"&&!Wi(t.reference)&&typeof t.reference.getBoundingClientRect!="function")throw new TypeError(`${Ka.toUpperCase()}: Option "reference" provided type "object" without a required "getBoundingClientRect" method.`);return t}_createPopper(t){if(typeof sd>"u")throw new TypeError("Bootstrap's dropdowns require Popper (https://popper.js.org)");let e=this._element;this._config.reference==="parent"?e=t:Wi(this._config.reference)?e=Be(this._config.reference):typeof this._config.reference=="object"&&(e=this._config.reference);const i=this._getPopperConfig(),n=i.modifiers.find(o=>o.name==="applyStyles"&&o.enabled===!1);this._popper=Fe(e,this._menu,i),n&&g.setDataAttribute(this._menu,"popper","static")}_isShown(t=this._element){return t.dataset[`teDropdown${We.charAt(0).toUpperCase()+We.slice(1)}`]===""}_getMenuElement(){return m.next(this._element,Ga)[0]}_getPlacement(){const t=this._element.parentNode;if(t.dataset.teDropdownPosition===xb)return Mb;if(t.dataset.teDropdownPosition===Cb)return Lb;const e=t.dataset.teDropdownAlignment==="end";return t.dataset.teDropdownPosition===Eb?e?Ob:Sb:e?Db:Ib}_detectNavbar(){return this._element.closest(Ab)!==null}_getOffset(){const{offset:t}=this._config;return typeof t=="string"?t.split(",").map(e=>Number.parseInt(e,10)):typeof t=="function"?e=>t(e,this._element):t}_getPopperConfig(){const t={placement:this._getPlacement(),modifiers:[{name:"preventOverflow",options:{boundary:this._config.boundary}},{name:"offset",options:{offset:this._getOffset()}}]};return this._config.display==="static"&&(t.modifiers=[{name:"applyStyles",enabled:!1}]),{...t,...typeof this._config.popperConfig=="function"?this._config.popperConfig(t):this._config.popperConfig}}_selectMenuItem({key:t,target:e}){const i=m.find(kb,this._menu).filter(ae);i.length&&_h(i,e,t===go,!i.includes(e)).focus()}static jQueryInterface(t){return this.each(function(){const e=Ft.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}static clearMenus(t){if(t&&(t.button===fb||t.type==="keyup"&&t.key!==od))return;const e=m.find(mo);for(let i=0,n=e.length;i<n;i++){const o=Ft.getInstance(e[i]);if(!o||o._config.autoClose===!1||!o._isShown())continue;const r={relatedTarget:o._element};if(t){const a=t.composedPath(),l=a.includes(o._menu);if(a.includes(o._element)||o._config.autoClose==="inside"&&!l||o._config.autoClose==="outside"&&l||o._menu.contains(t.target)&&(t.type==="keyup"&&t.key===od||/input|select|option|textarea|form/i.test(t.target.tagName)))continue;t.type==="click"&&(r.clickEvent=t)}o._completeHide(r)}}static getParentFromElement(t){return Ne(t)||t.parentNode}static dataApiKeydownHandler(t){if(/input|textarea/i.test(t.target.tagName)?t.key===nd||t.key!==_o&&(t.key!==go&&t.key!==Xa||t.target.closest(Ga)):!_b.test(t.key))return;const e=this.dataset[`teDropdown${We.charAt(0).toUpperCase()+We.slice(1)}`]==="";if(!e&&t.key===_o||(t.preventDefault(),t.stopPropagation(),ci(this)))return;const i=this.matches(mo)?this:m.prev(this,mo)[0],n=Ft.getOrCreateInstance(i);if(t.key===_o){n.hide();return}if(t.key===Xa||t.key===go){e||n.show(),n._selectMenuItem(t);return}(!e||t.key===nd)&&Ft.clearMenus()}}const qa="collapse",ld="te.collapse",bo=`.${ld}`,cd={toggle:!0,parent:null},Bb={toggle:"boolean",parent:"(null|element)"},Hb=`show${bo}`,Vb=`shown${bo}`,Fb=`hide${bo}`,Wb=`hidden${bo}`,Za="data-te-collapse-show",hd="data-te-collapse-collapsed",vo="data-te-collapse-collapsing",zb="data-te-collapse-horizontal",Zi="data-te-collapse-item",dd=`:scope [${Zi}] [${Zi}]`,jb="width",Yb="height",Kb="[data-te-collapse-item][data-te-collapse-show], [data-te-collapse-item][data-te-collapse-collapsing]",ud="[data-te-collapse-init]",Ub={visible:"!visible",hidden:"hidden",baseTransition:"overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none",collapsing:"h-0 transition-[height] overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none",collapsingHorizontal:"w-0 h-auto transition-[width] overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none"},Xb={visible:"string",hidden:"string",baseTransition:"string",collapsing:"string",collapsingHorizontal:"string"};class ce extends Mt{constructor(t,e,i){super(t),this._isTransitioning=!1,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._triggerArray=[];const n=m.find(ud);for(let o=0,r=n.length;o<r;o++){const a=n[o],l=Ca(a),c=m.find(l).filter(h=>h===this._element);l!==null&&c.length&&(this._selector=l,this._triggerArray.push(a))}this._initializeChildren(),this._config.parent||this._addAriaAndCollapsedClass(this._triggerArray,this._isShown()),this._config.toggle&&this.toggle()}static get Default(){return cd}static get NAME(){return qa}toggle(){this._isShown()?this.hide():this.show()}show(){if(this._isTransitioning||this._isShown())return;let t=[],e;if(this._config.parent){const h=m.find(dd,this._config.parent);t=m.find(Kb,this._config.parent).filter(d=>!h.includes(d))}const i=m.findOne(this._selector);if(t.length){const h=t.find(d=>i!==d);if(e=h?ce.getInstance(h):null,e&&e._isTransitioning)return}if(_.trigger(this._element,Hb).defaultPrevented)return;t.forEach(h=>{i!==h&&ce.getOrCreateInstance(h,{toggle:!1}).hide(),e||O.setData(h,ld,null)});const o=this._getDimension(),r=o==="height"?this._classes.collapsing:this._classes.collapsingHorizontal;g.removeClass(this._element,this._classes.visible),g.removeClass(this._element,this._classes.hidden),g.addClass(this._element,r),this._element.removeAttribute(Zi),this._element.setAttribute(vo,""),this._element.style[o]=0,this._addAriaAndCollapsedClass(this._triggerArray,!0),this._isTransitioning=!0;const a=()=>{this._isTransitioning=!1,g.removeClass(this._element,this._classes.hidden),g.removeClass(this._element,r),g.addClass(this._element,this._classes.visible),this._element.removeAttribute(vo),this._element.setAttribute(Zi,""),this._element.setAttribute(Za,""),this._element.style[o]="",_.trigger(this._element,Vb)},c=`scroll${o[0].toUpperCase()+o.slice(1)}`;this._queueCallback(a,this._element,!0),this._element.style[o]=`${this._element[c]}px`}hide(){if(this._isTransitioning||!this._isShown()||_.trigger(this._element,Fb).defaultPrevented)return;const e=this._getDimension(),i=e==="height"?this._classes.collapsing:this._classes.collapsingHorizontal;this._element.style[e]=`${this._element.getBoundingClientRect()[e]}px`,zi(this._element),g.addClass(this._element,i),g.removeClass(this._element,this._classes.visible),g.removeClass(this._element,this._classes.hidden),this._element.setAttribute(vo,""),this._element.removeAttribute(Zi),this._element.removeAttribute(Za);const n=this._triggerArray.length;for(let r=0;r<n;r++){const a=this._triggerArray[r],l=Ne(a);l&&!this._isShown(l)&&this._addAriaAndCollapsedClass([a],!1)}this._isTransitioning=!0;const o=()=>{this._isTransitioning=!1,g.removeClass(this._element,i),g.addClass(this._element,this._classes.visible),g.addClass(this._element,this._classes.hidden),this._element.removeAttribute(vo),this._element.setAttribute(Zi,""),_.trigger(this._element,Wb)};this._element.style[e]="",this._queueCallback(o,this._element,!0)}_isShown(t=this._element){return t.hasAttribute(Za)}_getConfig(t){return t={...cd,...g.getDataAttributes(this._element),...t},t.toggle=!!t.toggle,t.parent=Be(t.parent),L(qa,t,Bb),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Ub,...e,...t},L(qa,t,Xb),t}_getDimension(){return this._element.hasAttribute(zb)?jb:Yb}_initializeChildren(){if(!this._config.parent)return;const t=m.find(dd,this._config.parent);m.find(ud,this._config.parent).filter(e=>!t.includes(e)).forEach(e=>{const i=Ne(e);i&&this._addAriaAndCollapsedClass([e],this._isShown(i))})}_addAriaAndCollapsedClass(t,e){t.length&&t.forEach(i=>{e?i.removeAttribute(hd):i.setAttribute(`${hd}`,""),i.setAttribute("aria-expanded",e)})}static jQueryInterface(t){return this.each(function(){const e={};typeof t=="string"&&/show|hide/.test(t)&&(e.toggle=!1);const i=ce.getOrCreateInstance(this,e);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t]()}})}}const pd=".fixed-top, .fixed-bottom, .is-fixed, .sticky-top",fd=".sticky-top";class Qi{constructor(){this._element=document.body}getWidth(){const t=document.documentElement.clientWidth;return Math.abs(window.innerWidth-t)}hide(){const t=this.getWidth();this._disableOverFlow(),this._setElementAttributes(this._element,"paddingRight",e=>e+t),this._setElementAttributes(pd,"paddingRight",e=>e+t),this._setElementAttributes(fd,"marginRight",e=>e-t)}_disableOverFlow(){this._saveInitialAttribute(this._element,"overflow"),this._element.style.overflow="hidden"}_setElementAttributes(t,e,i){const n=this.getWidth(),o=r=>{if(r!==this._element&&window.innerWidth>r.clientWidth+n)return;this._saveInitialAttribute(r,e);const a=window.getComputedStyle(r)[e];r.style[e]=`${i(Number.parseFloat(a))}px`};this._applyManipulationCallback(t,o)}reset(){this._resetElementAttributes(this._element,"overflow"),this._resetElementAttributes(this._element,"paddingRight"),this._resetElementAttributes(pd,"paddingRight"),this._resetElementAttributes(fd,"marginRight")}_saveInitialAttribute(t,e){const i=t.style[e];i&&g.setDataAttribute(t,e,i)}_resetElementAttributes(t,e){const i=n=>{const o=g.getDataAttribute(n,e);typeof o>"u"?n.style.removeProperty(e):(g.removeDataAttribute(n,e),n.style[e]=o)};this._applyManipulationCallback(t,i)}_applyManipulationCallback(t,e){Wi(t)?e(t):m.find(t,this._element).forEach(e)}isOverflowing(){return this.getWidth()>0}}const Gb={isVisible:!0,isAnimated:!1,rootElement:"body",clickCallback:null,backdropClasses:null},qb={isVisible:"boolean",isAnimated:"boolean",rootElement:"(element|string)",clickCallback:"(function|null)",backdropClasses:"(array|string|null)"},_d="backdrop",gd=`mousedown.te.${_d}`;class Qa{constructor(t){this._config=this._getConfig(t),this._isAppended=!1,this._element=null}show(t){if(!this._config.isVisible){hi(t);return}this._append(),this._config.isAnimated&&zi(this._getElement());const e=this._config.backdropClasses||["opacity-50","transition-all","duration-300","ease-in-out","fixed","top-0","left-0","z-[1040]","bg-black","w-screen","h-screen"];g.removeClass(this._getElement(),"opacity-0"),g.addClass(this._getElement(),e),this._element.setAttribute("data-te-backdrop-show",""),this._emulateAnimation(()=>{hi(t)})}hide(t){if(!this._config.isVisible){hi(t);return}this._element.removeAttribute("data-te-backdrop-show"),this._getElement().classList.add("opacity-0"),this._getElement().classList.remove("opacity-50"),this._emulateAnimation(()=>{this.dispose(),hi(t)})}_getElement(){if(!this._element){const t=document.createElement("div");t.className=this._config.className,this._config.isAnimated&&t.classList.add("opacity-50"),this._element=t}return this._element}_getConfig(t){return t={...Gb,...typeof t=="object"?t:{}},t.rootElement=Be(t.rootElement),L(_d,t,qb),t}_append(){this._isAppended||(this._config.rootElement.append(this._getElement()),_.on(this._getElement(),gd,()=>{hi(this._config.clickCallback)}),this._isAppended=!0)}dispose(){this._isAppended&&(_.off(this._element,gd),this._element.remove(),this._isAppended=!1)}_emulateAnimation(t){fh(t,this._getElement(),this._config.isAnimated)}}class Vs{constructor(t,e={},i){this._element=t,this._toggler=i,this._event=e.event||"blur",this._condition=e.condition||(()=>!0),this._selector=e.selector||'button, a, input, select, textarea, [tabindex]:not([tabindex="-1"])',this._onlyVisible=e.onlyVisible||!1,this._focusableElements=[],this._firstElement=null,this._lastElement=null,this.handler=n=>{this._condition(n)&&!n.shiftKey&&n.target===this._lastElement?(n.preventDefault(),this._firstElement.focus()):this._condition(n)&&n.shiftKey&&n.target===this._firstElement&&(n.preventDefault(),this._lastElement.focus())}}trap(){this._setElements(),this._init(),this._setFocusTrap()}disable(){this._focusableElements.forEach(t=>{t.removeEventListener(this._event,this.handler)}),this._toggler&&this._toggler.focus()}update(){this._setElements(),this._setFocusTrap()}_init(){const t=e=>{!this._firstElement||e.key!=="Tab"||this._focusableElements.includes(e.target)||(e.preventDefault(),this._firstElement.focus(),window.removeEventListener("keydown",t))};window.addEventListener("keydown",t)}_filterVisible(t){return t.filter(e=>{if(!ae(e))return!1;const i=m.parents(e,"*");for(let n=0;n<i.length;n++){const o=window.getComputedStyle(i[n]);if(o&&(o.display==="none"||o.visibility==="hidden"))return!1}return!0})}_setElements(){this._focusableElements=m.focusableChildren(this._element),this._onlyVisible&&(this._focusableElements=this._filterVisible(this._focusableElements)),this._firstElement=this._focusableElements[0],this._lastElement=this._focusableElements[this._focusableElements.length-1]}_setFocusTrap(){this._focusableElements.forEach((t,e)=>{e===this._focusableElements.length-1||e===0?t.addEventListener(this._event,this.handler):t.removeEventListener(this._event,this.handler)})}}let md=[];const yo=(s,t="hide")=>{const e=`click.dismiss${s.EVENT_KEY}`,i=s.NAME;md.includes(i)||(md.push(i),_.on(document,e,`[data-te-${i}-dismiss]`,function(n){if(["A","AREA"].includes(this.tagName)&&n.preventDefault(),ci(this))return;const o=Ne(this)||this.closest(`.${i}`)||this.closest(`[data-te-${i}-init]`);if(!o)return;s.getOrCreateInstance(o)[t]()}))},bd="offcanvas",Ji=".te.offcanvas",Zb=`load${Ji}.data-api`,Qb="Escape",vd={backdrop:!0,keyboard:!0,scroll:!1},Jb={backdrop:"boolean",keyboard:"boolean",scroll:"boolean"},yd="show",tv="[data-te-offcanvas-init][data-te-offcanvas-show]",ev=`show${Ji}`,iv=`shown${Ji}`,sv=`hide${Ji}`,nv=`hidden${Ji}`,ov=`keydown.dismiss${Ji}`;class ts extends Mt{constructor(t,e){super(t),this._config=this._getConfig(e),this._isShown=!1,this._backdrop=this._initializeBackDrop(),this._focustrap=this._initializeFocusTrap(),this._addEventListeners(),this._didInit=!1,this._init()}static get NAME(){return bd}static get Default(){return vd}toggle(t){return this._isShown?this.hide():this.show(t)}show(t){if(this._isShown||_.trigger(this._element,ev,{relatedTarget:t}).defaultPrevented)return;this._isShown=!0,this._element.style.visibility="visible",this._backdrop.show(),this._config.scroll||new Qi().hide(),this._element.removeAttribute("aria-hidden"),this._element.setAttribute("aria-modal",!0),this._element.setAttribute("role","dialog"),this._element.setAttribute(`data-te-offcanvas-${yd}`,"");const i=()=>{this._config.scroll||this._focustrap.trap(),_.trigger(this._element,iv,{relatedTarget:t})};this._queueCallback(i,this._element,!0)}hide(){if(!this._isShown||_.trigger(this._element,sv).defaultPrevented)return;this._focustrap.disable(),this._element.blur(),this._isShown=!1,this._element.removeAttribute(`data-te-offcanvas-${yd}`),this._backdrop.hide();const e=()=>{this._element.setAttribute("aria-hidden",!0),this._element.removeAttribute("aria-modal"),this._element.removeAttribute("role"),this._element.style.visibility="hidden",this._config.scroll||new Qi().reset(),_.trigger(this._element,nv)};this._queueCallback(e,this._element,!0)}dispose(){this._backdrop.dispose(),this._focustrap.disable(),super.dispose()}_init(){this._didInit||(_.on(window,Zb,()=>m.find(tv).forEach(t=>ts.getOrCreateInstance(t).show())),this._didInit=!0,yo(ts))}_getConfig(t){return t={...vd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(bd,t,Jb),t}_initializeBackDrop(){return new Qa({isVisible:this._config.backdrop,isAnimated:!0,rootElement:this._element.parentNode,clickCallback:()=>this.hide()})}_initializeFocusTrap(){return new Vs(this._element,{event:"keydown",condition:t=>t.key==="Tab"})}_addEventListeners(){_.on(this._element,ov,t=>{this._config.keyboard&&t.key===Qb&&this.hide()})}static jQueryInterface(t){return this.each(function(){const e=ts.getOrCreateInstance(this,t);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Ja="alert",Td=".te.alert",rv=`close${Td}`,av=`closed${Td}`,Fs="data-te-alert-show",lv={animation:"boolean",autohide:"boolean",autoclose:"boolean",delay:"number"},Ed={animation:!0,autohide:!0,autoclose:!1,delay:1e3},cv={fadeIn:"animate-[fade-in_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none",fadeOut:"animate-[fade-out_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none"},hv={fadeIn:"string",fadeOut:"string"};class Ws extends Mt{constructor(t,e,i){super(t),this._element=t,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._didInit=!1,this._init()}static get DefaultType(){return lv}static get Default(){return Ed}static get NAME(){return Ja}close(){if(_.trigger(this._element,rv).defaultPrevented)return;let e=0;this._config.animation&&(e=300,g.addClass(this._element,this._classes.fadeOut)),this._element.removeAttribute(Fs),setTimeout(()=>{this._queueCallback(()=>this._destroyElement(),this._element,this._config.animation)},e)}show(){if(this._element){if(this._config.autohide&&this._setupAutohide(),(this._config.autoclose||this._config.autoclose&&this._config.autohide)&&this._setupAutoclose(),!this._element.hasAttribute(Fs)&&(g.removeClass(this._element,"hidden"),g.addClass(this._element,"block"),ae(this._element))){const t=e=>{g.removeClass(this._element,"hidden"),g.addClass(this._element,"block"),_.off(e.target,"animationend",t)};this._element.setAttribute(Fs,""),_.on(this._element,"animationend",t)}this._config.animation&&(g.removeClass(this._element,this._classes.fadeOut),g.addClass(this._element,this._classes.fadeIn))}}hide(){if(this._element&&this._element.hasAttribute(Fs)){this._element.removeAttribute(Fs);const t=e=>{g.addClass(this._element,"hidden"),g.removeClass(this._element,"block"),this._timeout!==null&&(clearTimeout(this._timeout),this._timeout=null),_.off(e.target,"animationend",t)};_.on(this._element,"animationend",t),g.removeClass(this._element,this._classes.fadeIn),g.addClass(this._element,this._classes.fadeOut)}}_init(){this._didInit||(yo(Ws,"close"),this._didInit=!0)}_getConfig(t){return t={...Ed,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(Ja,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cv,...e,...t},L(Ja,t,hv),t}_setupAutohide(){this._timeout=setTimeout(()=>{this.hide()},this._config.delay)}_setupAutoclose(){this._timeout=setTimeout(()=>{this.close()},this._config.delay)}_destroyElement(){this._element.remove(),_.trigger(this._element,av),this.dispose()}static jQueryInterface(t){return this.each(function(){const e=Ws.getOrCreateInstance(this);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const tl="carousel",Nt=".te.carousel",xd=".data-api",dv="ArrowLeft",uv="ArrowRight",pv=500,fv=40,Cd={interval:5e3,keyboard:!0,ride:!1,pause:"hover",wrap:!0,touch:!0},_v={interval:"(number|boolean)",keyboard:"boolean",ride:"(boolean|string)",pause:"(string|boolean)",wrap:"boolean",touch:"boolean"},gv={pointer:"touch-pan-y",block:"!block",visible:"data-[te-carousel-fade]:opacity-100 data-[te-carousel-fade]:z-[1]",invisible:"data-[te-carousel-fade]:z-0 data-[te-carousel-fade]:opacity-0 data-[te-carousel-fade]:duration-[600ms] data-[te-carousel-fade]:delay-600",slideRight:"translate-x-full",slideLeft:"-translate-x-full"},mv={pointer:"string",block:"string",visible:"string",invisible:"string",slideRight:"string",slideLeft:"string"},gi="next",mi="prev",bi="left",zs="right",bv={[dv]:zs,[uv]:bi},vv=`slide${Nt}`,el=`slid${Nt}`,yv=`keydown${Nt}`,Tv=`mouseenter${Nt}`,Ev=`mouseleave${Nt}`,xv=`touchstart${Nt}`,Cv=`touchmove${Nt}`,Av=`touchend${Nt}`,wv=`pointerdown${Nt}`,kv=`pointerup${Nt}`,Sv=`dragstart${Nt}`,Ov=`load${Nt}${xd}`,Iv=`click${Nt}${xd}`,Ad="data-te-carousel-init",vi="data-te-carousel-active",Dv="data-te-carousel-item-end",il="data-te-carousel-item-start",Mv="data-te-carousel-item-next",Lv="data-te-carousel-item-prev",$v="data-te-carousel-pointer-event",Rv="[data-te-carousel-init]",wd="[data-te-carousel-active]",sl="[data-te-carousel-item]",es=`${wd}${sl}`,Pv=`${sl} img`,Nv="[data-te-carousel-item-next], [data-te-carousel-item-prev]",Bv="[data-te-carousel-indicators]",Hv="[data-te-target]",Vv="[data-te-slide], [data-te-slide-to]",Fv="touch",Wv="pen";class he extends Mt{constructor(t,e,i){super(t),this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.touchStartX=0,this.touchDeltaX=0,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._indicatorsElement=m.findOne(Bv,this._element),this._touchSupported="ontouchstart"in document.documentElement||navigator.maxTouchPoints>0,this._pointerEvent=!!window.PointerEvent,this._setActiveElementClass(),this._addEventListeners(),this._didInit=!1,this._init(),this._config.ride==="carousel"&&this.cycle()}static get Default(){return Cd}static get NAME(){return tl}next(){this._slide(gi)}nextWhenVisible(){!document.hidden&&ae(this._element)&&this.next()}prev(){this._slide(mi)}pause(t){t||(this._isPaused=!0),m.findOne(Nv,this._element)&&(hh(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null}cycle(t){t||(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config&&this._config.interval&&!this._isPaused&&(this._updateInterval(),this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))}to(t){this._activeElement=m.findOne(es,this._element);const e=this._getItemIndex(this._activeElement);if(t>this._items.length-1||t<0)return;if(this._isSliding){_.one(this._element,el,()=>this.to(t));return}if(e===t){this.pause(),this.cycle();return}const i=t>e?gi:mi;this._slide(i,this._items[t])}_init(){this._didInit||(_.on(document,Iv,Vv,he.dataApiClickHandler),_.on(window,Ov,()=>{const t=m.find(Rv);for(let e=0,i=t.length;e<i;e++)he.carouselInterface(t[e],he.getInstance(t[e]))}),this._didInit=!0)}_getConfig(t){return t={...Cd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(tl,t,_v),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...gv,...e,...t},L(tl,t,mv),t}_enableCycle(){if(this._config.ride){if(this._isSliding){_.one(this._element,el,()=>this.cycle());return}this.cycle()}}_applyInitialClasses(){const t=m.findOne(es,this._element);t.classList.add(this._classes.block,...this._classes.visible.split(" ")),this._setActiveIndicatorElement(t)}_handleSwipe(){const t=Math.abs(this.touchDeltaX);if(t<=fv)return;const e=t/this.touchDeltaX;this.touchDeltaX=0,e&&this._slide(e>0?zs:bi)}_setActiveElementClass(){this._activeElement=m.findOne(es,this._element),g.addClass(this._activeElement,"hidden")}_addEventListeners(){this._config.keyboard&&_.on(this._element,yv,t=>this._keydown(t)),this._config.pause==="hover"&&(_.on(this._element,Tv,t=>this.pause(t)),_.on(this._element,Ev,t=>this._enableCycle(t))),this._config.touch&&this._touchSupported&&this._addTouchEventListeners(),this._applyInitialClasses()}_addTouchEventListeners(){const t=o=>this._pointerEvent&&(o.pointerType===Wv||o.pointerType===Fv),e=o=>{t(o)?this.touchStartX=o.clientX:this._pointerEvent||(this.touchStartX=o.touches[0].clientX)},i=o=>{this.touchDeltaX=o.touches&&o.touches.length>1?0:o.touches[0].clientX-this.touchStartX},n=o=>{t(o)&&(this.touchDeltaX=o.clientX-this.touchStartX),this._handleSwipe(),this._config.pause==="hover"&&(this.pause(),this.touchTimeout&&clearTimeout(this.touchTimeout),this.touchTimeout=setTimeout(r=>this._enableCycle(r),pv+this._config.interval))};m.find(Pv,this._element).forEach(o=>{_.on(o,Sv,r=>r.preventDefault())}),this._pointerEvent?(_.on(this._element,wv,o=>e(o)),_.on(this._element,kv,o=>n(o)),this._element.classList.add(this._classes.pointer),this._element.setAttribute(`${$v}`,"")):(_.on(this._element,xv,o=>e(o)),_.on(this._element,Cv,o=>i(o)),_.on(this._element,Av,o=>n(o)))}_keydown(t){if(/input|textarea/i.test(t.target.tagName))return;const e=bv[t.key];e&&(t.preventDefault(),this._slide(e))}_getItemIndex(t){return this._items=t&&t.parentNode?m.find(sl,t.parentNode):[],this._items.indexOf(t)}_getItemByOrder(t,e){const i=t===gi;return _h(this._items,e,i,this._config.wrap)}_triggerSlideEvent(t,e){const i=this._getItemIndex(t),n=this._getItemIndex(m.findOne(es,this._element));return _.trigger(this._element,vv,{relatedTarget:t,direction:e,from:n,to:i})}_setActiveIndicatorElement(t){if(this._indicatorsElement){const e=m.findOne(wd,this._indicatorsElement);e.removeAttribute(vi),e.removeAttribute("aria-current"),e.classList.remove("!opacity-100");const i=m.find(Hv,this._indicatorsElement);for(let n=0;n<i.length;n++)if(Number.parseInt(i[n].getAttribute("data-te-slide-to"),10)===this._getItemIndex(t)){i[n].setAttribute(`${vi}`,""),i[n].setAttribute("aria-current","true"),i[n].classList.add("!opacity-100");break}}}_updateInterval(){const t=this._activeElement||m.findOne(es,this._element);if(!t)return;const e=Number.parseInt(t.getAttribute("data-te-interval"),10);e?(this._config.defaultInterval=this._config.defaultInterval||this._config.interval,this._config.interval=e):this._config.interval=this._config.defaultInterval||this._config.interval}_slide(t,e){const i=this._directionToOrder(t),n=m.findOne(es,this._element),o=this._getItemIndex(n),r=e||this._getItemByOrder(i,n),a=this._getItemIndex(r),l=!!this._interval,c=i===gi,h=c?il:Dv,d=c?Mv:Lv,u=this._orderToDirection(i),p=h===il?this._classes.slideLeft:this._classes.slideRight,f=h!==il?this._classes.slideLeft:this._classes.slideRight;if(r&&r.hasAttribute(vi)){this._isSliding=!1;return}if(this._isSliding||this._triggerSlideEvent(r,u).defaultPrevented||!n||!r)return;this._isSliding=!0,l&&this.pause(),this._setActiveIndicatorElement(r),this._activeElement=r;const v=()=>{_.trigger(this._element,el,{relatedTarget:r,direction:u,from:o,to:a})};if(this._element.hasAttribute(Ad)){r.setAttribute(`${d}`,""),r.classList.add(this._classes.block,f),zi(r),n.setAttribute(`${h}`,""),n.classList.add(p,...this._classes.invisible.split(" ")),n.classList.remove(...this._classes.visible.split(" ")),r.setAttribute(`${h}`,""),r.classList.add(...this._classes.visible.split(" ")),r.classList.remove(this._classes.slideRight,this._classes.slideLeft);const y=()=>{r.removeAttribute(h),r.removeAttribute(d),r.setAttribute(`${vi}`,""),n.removeAttribute(vi),n.classList.remove(p,...this._classes.invisible.split(" "),this._classes.block),n.removeAttribute(d),n.removeAttribute(h),this._isSliding=!1,setTimeout(v,0)};this._queueCallback(y,n,!0)}else n.removeAttribute(vi),n.classList.remove(this._classes.block),r.setAttribute(`${vi}`,""),r.classList.add(this._classes.block),this._isSliding=!1,v();l&&this.cycle()}_directionToOrder(t){return[zs,bi].includes(t)?et()?t===bi?mi:gi:t===bi?gi:mi:t}_orderToDirection(t){return[gi,mi].includes(t)?et()?t===mi?bi:zs:t===mi?zs:bi:t}static carouselInterface(t,e){const i=he.getOrCreateInstance(t,e);let{_config:n}=i;typeof e=="object"&&(n={...n,...e});const o=typeof e=="string"?e:e.slide;if(typeof e=="number"){i.to(e);return}if(typeof o=="string"){if(typeof i[o]>"u")throw new TypeError(`No method named "${o}"`);i[o]()}else n.interval&&n.ride===!0&&i.pause()}static jQueryInterface(t){return this.each(function(){he.carouselInterface(this,t)})}static dataApiClickHandler(t){const e=Ne(this);if(!e||!e.hasAttribute(Ad))return;const i={...g.getDataAttributes(e),...g.getDataAttributes(this)},n=this.getAttribute("data-te-slide-to");n&&(i.interval=!1),he.carouselInterface(e,i),n&&he.getInstance(e).to(n),t.preventDefault()}}const nl="modal",te=".te.modal",kd="Escape",Sd={backdrop:!0,keyboard:!0,focus:!0,modalNonInvasive:!1},zv={backdrop:"(boolean|string)",keyboard:"boolean",focus:"boolean",modalNonInvasive:"boolean"},jv={show:"transform-none",static:"scale-[1.02]",staticProperties:"transition-scale duration-300 ease-in-out",backdrop:"opacity-50 transition-all duration-300 ease-in-out fixed top-0 left-0 z-[1040] bg-black w-screen h-screen"},Yv={show:"string",static:"string",staticProperties:"string",backdrop:"string"},Kv=`hide${te}`,Uv=`hidePrevented${te}`,Xv=`hidden${te}`,Gv=`show${te}`,qv=`shown${te}`,Od=`resize${te}`,Id=`click.dismiss${te}`,Dd=`keydown.dismiss${te}`,Zv=`mouseup.dismiss${te}`,Md=`mousedown.dismiss${te}`,Ld="data-te-modal-open",$d="data-te-open",js="[data-te-modal-dialog-ref]",Qv="[data-te-modal-body-ref]";class Ys extends Mt{constructor(t,e,i){super(t),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._dialog=m.findOne(js,this._element),this._backdrop=this._config.modalNonInvasive?null:this._initializeBackDrop(),this._focustrap=this._initializeFocusTrap(),this._isShown=!1,this._ignoreBackdropClick=!1,this._isTransitioning=!1,this._scrollBar=new Qi,this._didInit=!1,this._init()}static get Default(){return Sd}static get NAME(){return nl}toggle(t){return this._isShown?this.hide():this.show(t)}show(t){this._isShown||this._isTransitioning||_.trigger(this._element,Gv,{relatedTarget:t}).defaultPrevented||(this._isShown=!0,this._isAnimated()&&(this._isTransitioning=!0),!this._config.modalNonInvasive&&this._scrollBar.hide(),document.body.setAttribute(Ld,"true"),this._adjustDialog(),this._setEscapeEvent(),this._setResizeEvent(),_.on(this._dialog,Md,()=>{_.one(this._element,Zv,i=>{i.target===this._element&&(this._ignoreBackdropClick=!0)})}),this._showElement(t),!this._config.modalNonInvasive&&this._showBackdrop())}hide(){if(!this._isShown||this._isTransitioning||_.trigger(this._element,Kv).defaultPrevented)return;this._isShown=!1;const e=this._isAnimated();e&&(this._isTransitioning=!0),this._setEscapeEvent(),this._setResizeEvent(),this._focustrap.disable(),m.findOne(js,this._element).classList.remove(this._classes.show),_.off(this._element,Id),_.off(this._dialog,Md),this._queueCallback(()=>this._hideModal(),this._element,e),this._element.removeAttribute($d)}dispose(){[window,document,this._dialog].forEach(t=>_.off(t,te)),this._backdrop&&this._backdrop.dispose(),this._focustrap.disable(),super.dispose()}handleUpdate(){this._adjustDialog()}_init(){this._didInit||(yo(Ys),this._didInit=!0)}_initializeBackDrop(){return new Qa({isVisible:!!this._config.backdrop,isAnimated:this._isAnimated(),backdropClasses:this._classes.backdrop})}_initializeFocusTrap(){return new Vs(this._element,{event:"keydown",condition:t=>t.key==="Tab"})}_getConfig(t){return t={...Sd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(nl,t,zv),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...jv,...e,...t},L(nl,t,Yv),t}_showElement(t){const e=this._isAnimated(),i=m.findOne(Qv,this._dialog);(!this._element.parentNode||this._element.parentNode.nodeType!==Node.ELEMENT_NODE)&&document.body.append(this._element),this._element.style.display="block",this._element.classList.remove("hidden"),this._element.removeAttribute("aria-hidden"),this._element.setAttribute("aria-modal",!0),this._element.setAttribute("role","dialog"),this._element.setAttribute(`${$d}`,"true"),this._element.scrollTop=0;const n=m.findOne(js,this._element);n.classList.add(this._classes.show),n.classList.remove("opacity-0"),n.classList.add("opacity-100"),i&&(i.scrollTop=0),e&&zi(this._element);const o=()=>{this._config.focus&&this._focustrap.trap(),this._isTransitioning=!1,_.trigger(this._element,qv,{relatedTarget:t})};this._queueCallback(o,this._dialog,e)}_setEscapeEvent(){this._isShown?_.on(document,Dd,t=>{this._config.keyboard&&t.key===kd?(t.preventDefault(),this.hide()):!this._config.keyboard&&t.key===kd&&this._triggerBackdropTransition()}):_.off(this._element,Dd)}_setResizeEvent(){this._isShown?_.on(window,Od,()=>this._adjustDialog()):_.off(window,Od)}_hideModal(){const t=m.findOne(js,this._element);t.classList.remove(this._classes.show),t.classList.remove("opacity-100"),t.classList.add("opacity-0");const e=oo(t);setTimeout(()=>{this._element.style.display="none"},e),this._element.setAttribute("aria-hidden",!0),this._element.removeAttribute("aria-modal"),this._element.removeAttribute("role"),this._isTransitioning=!1,this._backdrop&&this._backdrop.hide(()=>{document.body.removeAttribute(Ld),this._resetAdjustments(),!this._config.modalNonInvasive&&this._scrollBar.reset(),_.trigger(this._element,Xv)})}_showBackdrop(t){_.on(this._element,Id,e=>{if(this._ignoreBackdropClick){this._ignoreBackdropClick=!1;return}e.target===e.currentTarget&&(this._config.backdrop===!0?this.hide():this._config.backdrop==="static"&&this._triggerBackdropTransition())}),this._backdrop&&this._backdrop.show(t)}_isAnimated(){return!!m.findOne(js,this._element)}_triggerBackdropTransition(){if(_.trigger(this._element,Uv).defaultPrevented)return;const{classList:e,scrollHeight:i,style:n}=this._element,o=i>document.documentElement.clientHeight;if(!o&&n.overflowY==="hidden"||e.contains(this._classes.static))return;o||(n.overflowY="hidden"),e.add(...this._classes.static.split(" ")),e.add(...this._classes.staticProperties.split(" "));const r=oo(this._element);this._queueCallback(()=>{e.remove(this._classes.static),setTimeout(()=>{e.remove(...this._classes.staticProperties.split(" "))},r),o||this._queueCallback(()=>{n.overflowY=""},this._dialog)},this._dialog),this._element.focus()}_adjustDialog(){const t=this._element.scrollHeight>document.documentElement.clientHeight,e=this._scrollBar.getWidth(),i=e>0;(!i&&t&&!et()||i&&!t&&et())&&(this._element.style.paddingLeft=`${e}px`),(i&&!t&&!et()||!i&&t&&et())&&(this._element.style.paddingRight=`${e}px`)}_resetAdjustments(){this._element.style.paddingLeft="",this._element.style.paddingRight=""}static jQueryInterface(t,e){return this.each(function(){const i=Ys.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}}const Jv=new Set(["background","cite","href","itemtype","longdesc","poster","src","xlink:href"]),Rd=/^aria-[\w-]*$/i,t0=/^data-te-[\w-]*$/i,e0=/^(?:(?:https?|mailto|ftp|tel|file|sms):|[^#&/:?]*(?:[#/?]|$))/i,i0=/^data:(?:image\/(?:bmp|gif|jpeg|jpg|png|tiff|webp)|video\/(?:mpeg|mp4|ogg|webm)|audio\/(?:mp3|oga|ogg|opus));base64,[\d+/a-z]+=*$/i,s0=(s,t)=>{const e=s.nodeName.toLowerCase();if(t.includes(e))return Jv.has(e)?!!(e0.test(s.nodeValue)||i0.test(s.nodeValue)):!0;const i=t.filter(n=>n instanceof RegExp);for(let n=0,o=i.length;n<o;n++)if(i[n].test(e))return!0;return!1},Pd={"*":["class","dir","id","lang","role",Rd,t0],a:["target","href","title","rel"],area:[],b:[],br:[],col:[],code:[],div:[],em:[],hr:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],i:[],img:["src","srcset","alt","title","width","height"],li:[],ol:[],p:[],pre:[],s:[],small:[],span:[],sub:[],sup:[],strong:[],u:[],ul:[]},n0={"*":["class","dir","id","lang","role",Rd],a:["target","href","title","rel"],area:[],b:[],br:[],col:[],code:[],div:[],em:[],hr:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],i:[],img:["src","srcset","alt","title","width","height"],li:[],ol:[],p:[],pre:[],s:[],small:[],span:[],sub:[],sup:[],strong:[],u:[],ul:[]};function To(s,t,e){if(!s.length)return s;if(e&&typeof e=="function")return e(s);const n=new window.DOMParser().parseFromString(s,"text/html"),o=[].concat(...n.body.querySelectorAll("*"));for(let r=0,a=o.length;r<a;r++){const l=o[r],c=l.nodeName.toLowerCase();if(!Object.keys(t).includes(c)){l.remove();continue}const h=[].concat(...l.attributes),d=[].concat(t["*"]||[],t[c]||[]);h.forEach(u=>{s0(u,d)||l.removeAttribute(u.nodeName)})}return n.body.innerHTML}const Nd="tooltip",de=".te.tooltip",o0="te-tooltip",r0=new Set(["sanitize","allowList","sanitizeFn"]),a0={animation:"boolean",template:"string",title:"(string|element|function)",trigger:"string",delay:"(number|object)",html:"boolean",selector:"(string|boolean)",placement:"(string|function)",offset:"(array|string|function)",container:"(string|element|boolean)",fallbackPlacements:"array",boundary:"(string|element)",customClass:"(string|function)",sanitize:"boolean",sanitizeFn:"(null|function)",allowList:"object",popperConfig:"(null|object|function)"},l0={AUTO:"auto",TOP:"top",RIGHT:et()?"left":"right",BOTTOM:"bottom",LEFT:et()?"right":"left"},c0={animation:!0,template:'<div class="opacity-0 transition-opacity duration-300 ease-in-out absolute z-[1080] block m-0 text-sm not-italic font-normal text-left no-underline underline-offset-auto normal-case leading-6 tracking-normal break-normal whitespace-normal" role="tooltip"><div data-te-tooltip-inner-ref class="tooltip-inner max-w-[200px] text-sm py-1.5 px-4 text-white text-center bg-[#6d6d6d] rounded"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,selector:!1,placement:"top",offset:[0,0],container:!1,fallbackPlacements:["top","right","bottom","left"],boundary:"clippingParents",customClass:"",sanitize:!0,sanitizeFn:null,allowList:n0,popperConfig:{hide:!0}},h0={HIDE:`hide${de}`,HIDDEN:`hidden${de}`,SHOW:`show${de}`,SHOWN:`shown${de}`,INSERTED:`inserted${de}`,CLICK:`click${de}`,FOCUSIN:`focusin${de}`,FOCUSOUT:`focusout${de}`,MOUSEENTER:`mouseenter${de}`,MOUSELEAVE:`mouseleave${de}`},d0="fade",u0="modal",ol="show",Ks="show",rl="out",Bd=".tooltip-inner",Hd=`.${u0}`,Vd="hide.te.modal",Us="hover",al="focus",p0="click",f0="manual";let is=class rm extends Mt{constructor(t,e){if(typeof sd>"u")throw new TypeError("Bootstrap's tooltips require Popper (https://popper.js.org)");super(t),this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._popper=null,this._config=this._getConfig(e),this.tip=null,this._setListeners()}static get Default(){return c0}static get NAME(){return Nd}static get Event(){return h0}static get DefaultType(){return a0}enable(){this._isEnabled=!0}disable(){this._isEnabled=!1}toggleEnabled(){this._isEnabled=!this._isEnabled}toggle(t){if(this._isEnabled)if(t){const e=this._initializeOnDelegatedTarget(t);e._activeTrigger.click=!e._activeTrigger.click,e._isWithActiveTrigger()?e._enter(null,e):e._leave(null,e)}else{if(this.getTipElement().classList.contains(ol)){this._leave(null,this);return}this._enter(null,this)}}dispose(){clearTimeout(this._timeout),_.off(this._element.closest(Hd),Vd,this._hideModalHandler),this.tip&&this.tip.remove(),this._disposePopper(),super.dispose()}show(){if(this._element.style.display==="none")throw new Error("Please use show on visible elements");if(!(this.isWithContent()&&this._isEnabled))return;const t=_.trigger(this._element,this.constructor.Event.SHOW),e=dh(this._element),i=e===null?this._element.ownerDocument.documentElement.contains(this._element):e.contains(this._element);if(t.defaultPrevented||!i)return;this.constructor.NAME==="tooltip"&&this.tip&&this.getTitle()!==this.tip.querySelector(Bd).innerHTML&&(this._disposePopper(),this.tip.remove(),this.tip=null);const n=this.getTipElement(),o=bt(this.constructor.NAME);n.setAttribute("id",o),this._element.setAttribute("aria-describedby",o),this._config.animation&&setTimeout(()=>{this.tip.classList.add("opacity-100"),this.tip.classList.remove("opacity-0")},100);const r=typeof this._config.placement=="function"?this._config.placement.call(this,n,this._element):this._config.placement,a=this._getAttachment(r);this._addAttachmentClass(a);const{container:l}=this._config;if(O.setData(n,this.constructor.DATA_KEY,this),this._element.ownerDocument.documentElement.contains(this.tip)||(l.append(n),_.trigger(this._element,this.constructor.Event.INSERTED)),this._popper?this._popper.update():this._popper=Fe(this._element,n,this._getPopperConfig(a)),n.getAttribute("id").includes("tooltip"))switch(r){case"bottom":n.classList.add("py-[0.4rem]");break;case"left":n.classList.add("px-[0.4rem]");break;case"right":n.classList.add("px-[0.4rem]");break;default:n.classList.add("py-[0.4rem]");break}const h=this._resolvePossibleFunction(this._config.customClass);h&&n.classList.add(...h.split(" ")),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(p=>{_.on(p,"mouseover",ro)});const d=()=>{const p=this._hoverState;this._hoverState=null,_.trigger(this._element,this.constructor.Event.SHOWN),p===rl&&this._leave(null,this)},u=this.tip.classList.contains("transition-opacity");this._queueCallback(d,this.tip,u)}hide(){if(!this._popper)return;const t=this.getTipElement(),e=()=>{this._isWithActiveTrigger()||(this._hoverState!==Ks&&t.remove(),this._cleanTipClass(),this._element.removeAttribute("aria-describedby"),_.trigger(this._element,this.constructor.Event.HIDDEN),this._disposePopper())};if(_.trigger(this._element,this.constructor.Event.HIDE).defaultPrevented)return;t.classList.add("opacity-0"),t.classList.remove("opacity-100"),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(o=>_.off(o,"mouseover",ro)),this._activeTrigger[p0]=!1,this._activeTrigger[al]=!1,this._activeTrigger[Us]=!1;const n=this.tip.classList.contains("opacity-0");this._queueCallback(e,this.tip,n),this._hoverState=""}update(){this._popper!==null&&this._popper.update()}isWithContent(){return!!this.getTitle()}getTipElement(){if(this.tip)return this.tip;const t=document.createElement("div");t.innerHTML=this._config.template;const e=t.children[0];return this.setContent(e),e.classList.remove(d0,ol),this.tip=e,this.tip}setContent(t){this._sanitizeAndSetContent(t,this.getTitle(),Bd)}_sanitizeAndSetContent(t,e,i){const n=m.findOne(i,t);if(!e&&n){n.remove();return}this.setElementContent(n,e)}setElementContent(t,e){if(t!==null){if(Wi(e)){e=Be(e),this._config.html?e.parentNode!==t&&(t.innerHTML="",t.append(e)):t.textContent=e.textContent;return}this._config.html?(this._config.sanitize&&(e=To(e,this._config.allowList,this._config.sanitizeFn)),t.innerHTML=e):t.textContent=e}}getTitle(){const t=this._element.getAttribute("data-te-original-title")||this._config.title;return this._resolvePossibleFunction(t)}updateAttachment(t){return t==="right"?"end":t==="left"?"start":t}_initializeOnDelegatedTarget(t,e){return e||this.constructor.getOrCreateInstance(t.delegateTarget,this._getDelegateConfig())}_getOffset(){const{offset:t}=this._config;return typeof t=="string"?t.split(",").map(e=>Number.parseInt(e,10)):typeof t=="function"?e=>t(e,this._element):t}_resolvePossibleFunction(t){return typeof t=="function"?t.call(this._element):t}_getPopperConfig(t){const e={placement:t,modifiers:[{name:"flip",options:{fallbackPlacements:this._config.fallbackPlacements}},{name:"offset",options:{offset:this._getOffset()}},{name:"preventOverflow",options:{boundary:this._config.boundary}},{name:"arrow",options:{element:`.${this.constructor.NAME}-arrow`}},{name:"onChange",enabled:!0,phase:"afterWrite",fn:i=>this._handlePopperPlacementChange(i)}],onFirstUpdate:i=>{i.options.placement!==i.placement&&this._handlePopperPlacementChange(i)}};return{...e,...typeof this._config.popperConfig=="function"?this._config.popperConfig(e):this._config.popperConfig}}_addAttachmentClass(t){this.getTipElement().classList.add(`${this._getBasicClassPrefix()}-${this.updateAttachment(t)}`)}_getAttachment(t){return l0[t.toUpperCase()]}_setListeners(){this._config.trigger.split(" ").forEach(e=>{if(e==="click")_.on(this._element,this.constructor.Event.CLICK,this._config.selector,i=>this.toggle(i));else if(e!==f0){const i=e===Us?this.constructor.Event.MOUSEENTER:this.constructor.Event.FOCUSIN,n=e===Us?this.constructor.Event.MOUSELEAVE:this.constructor.Event.FOCUSOUT;_.on(this._element,i,this._config.selector,o=>this._enter(o)),_.on(this._element,n,this._config.selector,o=>this._leave(o))}}),this._hideModalHandler=()=>{this._element&&this.hide()},_.on(this._element.closest(Hd),Vd,this._hideModalHandler),this._config.selector?this._config={...this._config,trigger:"manual",selector:""}:this._fixTitle()}_fixTitle(){const t=this._element.getAttribute("title"),e=typeof this._element.getAttribute("data-te-original-title");(t||e!=="string")&&(this._element.setAttribute("data-te-original-title",t||""),t&&!this._element.getAttribute("aria-label")&&!this._element.textContent&&this._element.setAttribute("aria-label",t),this._element.setAttribute("title",""))}_enter(t,e){if(e=this._initializeOnDelegatedTarget(t,e),t&&(e._activeTrigger[t.type==="focusin"?al:Us]=!0),e.getTipElement().classList.contains(ol)||e._hoverState===Ks){e._hoverState=Ks;return}if(clearTimeout(e._timeout),e._hoverState=Ks,!e._config.delay||!e._config.delay.show){e.show();return}e._timeout=setTimeout(()=>{e._hoverState===Ks&&e.show()},e._config.delay.show)}_leave(t,e){if(e=this._initializeOnDelegatedTarget(t,e),t&&(e._activeTrigger[t.type==="focusout"?al:Us]=e._element.contains(t.relatedTarget)),!e._isWithActiveTrigger()){if(clearTimeout(e._timeout),e._hoverState=rl,!e._config.delay||!e._config.delay.hide){e.hide();return}e._timeout=setTimeout(()=>{e._hoverState===rl&&e.hide()},e._config.delay.hide)}}_isWithActiveTrigger(){for(const t in this._activeTrigger)if(this._activeTrigger[t])return!0;return!1}_getConfig(t){const e=g.getDataAttributes(this._element);return Object.keys(e).forEach(i=>{r0.has(i)&&delete e[i]}),t={...this.constructor.Default,...e,...typeof t=="object"&&t?t:{}},t.container=t.container===!1?document.body:Be(t.container),typeof t.delay=="number"&&(t.delay={show:t.delay,hide:t.delay}),typeof t.title=="number"&&(t.title=t.title.toString()),typeof t.content=="number"&&(t.content=t.content.toString()),L(Nd,t,this.constructor.DefaultType),t.sanitize&&(t.template=To(t.template,t.allowList,t.sanitizeFn)),t}_getDelegateConfig(){const t={};for(const e in this._config)this.constructor.Default[e]!==this._config[e]&&(t[e]=this._config[e]);return t}_cleanTipClass(){const t=this.getTipElement(),e=new RegExp(`(^|\\s)${this._getBasicClassPrefix()}\\S+`,"g"),i=t.getAttribute("class").match(e);i!==null&&i.length>0&&i.map(n=>n.trim()).forEach(n=>t.classList.remove(n))}_getBasicClassPrefix(){return o0}_handlePopperPlacementChange(t){const{state:e}=t;e&&(this.tip=e.elements.popper,this._cleanTipClass(),this._addAttachmentClass(this._getAttachment(e.placement)))}_disposePopper(){this._popper&&(this._popper.destroy(),this._popper=null)}static jQueryInterface(t){return this.each(function(){const e=rm.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}};const _0="popover",ue=".te.popover",g0="te-popover",m0={...is.Default,placement:"right",offset:[0,8],trigger:"click",content:"",template:'<div class="opacity-0 transition-opacity duration-150 ease-in-out absolute top-0 left-0 z-[1070] block max-w-[267px] break-words bg-white bg-clip-padding border border-neutral-100 rounded-lg shadow-[0_0px_3px_0_rgba(0,0,0,0.07),0_2px_2px_0_rgba(0,0,0,0.04)] text-sm not-italic font-normal text-left no-underline underline-offset-auto normal-case leading-6 tracking-normal break-normal whitespace-normal dark:bg-neutral-700 dark:border-0 dark:text-white data-[popper-reference-hidden]:hidden" role="tooltip"><h3 class="popover-header py-2 px-4 mb-0 border-b-2 border-neutral-100 rounded-t-lg font-medium empty:hidden dark:border-neutral-500"></h3><div class="popover-body p-4 text-[#212529] dark:text-white"></div></div>'},b0={...is.DefaultType,content:"(string|element|function)"},v0={HIDE:`hide${ue}`,HIDDEN:`hidden${ue}`,SHOW:`show${ue}`,SHOWN:`shown${ue}`,INSERTED:`inserted${ue}`,CLICK:`click${ue}`,FOCUSIN:`focusin${ue}`,FOCUSOUT:`focusout${ue}`,MOUSEENTER:`mouseenter${ue}`,MOUSELEAVE:`mouseleave${ue}`},y0=".popover-header",T0=".popover-body";class Eo extends is{static get Default(){return m0}static get NAME(){return _0}static get Event(){return v0}static get DefaultType(){return b0}isWithContent(){return this.getTitle()||this._getContent()}setContent(t){this._sanitizeAndSetContent(t,this.getTitle(),y0),this._sanitizeAndSetContent(t,this._getContent(),T0)}_getContent(){return this._resolvePossibleFunction(this._config.content)}_getBasicClassPrefix(){return g0}static jQueryInterface(t){return this.each(function(){const e=Eo.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const ll="scrollspy",cl=".te.scrollspy",Fd={offset:10,method:"auto",target:""},E0={offset:"number",method:"string",target:"(string|element)"},x0={active:"!text-primary dark:!text-primary-400 font-semibold border-l-[0.125rem] border-solid border-primary dark:border-primary-400"},C0={active:"string"},A0=`activate${cl}`,w0=`scroll${cl}`,hl="data-te-nav-link-active",Wd="[data-te-dropdown-item-ref]",k0="[data-te-nav-list-ref]",dl="[data-te-nav-link-ref]",S0="[data-te-nav-item-ref]",zd="[data-te-list-group-item-ref]",ul=`${dl}, ${zd}, ${Wd}`,O0="[data-te-dropdown-ref]",I0="[data-te-dropdown-toggle-ref]",D0="maxOffset",jd="position";class xo extends Mt{constructor(t,e,i){super(t),this._scrollElement=this._element.tagName==="BODY"?window:this._element,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._offsets=[],this._targets=[],this._activeTarget=null,this._scrollHeight=0,_.on(this._scrollElement,w0,()=>this._process()),this.refresh(),this._process()}static get Default(){return Fd}static get NAME(){return ll}refresh(){const t=this._scrollElement===this._scrollElement.window?D0:jd,e=this._config.method==="auto"?t:this._config.method,i=e===jd?this._getScrollTop():0;this._offsets=[],this._targets=[],this._scrollHeight=this._getScrollHeight(),m.find(ul,this._config.target).map(o=>{const r=Ca(o),a=r?m.findOne(r):null;if(a){const l=a.getBoundingClientRect();if(l.width||l.height)return[g[e](a).top+i,r]}return null}).filter(o=>o).sort((o,r)=>o[0]-r[0]).forEach(o=>{this._offsets.push(o[0]),this._targets.push(o[1])})}dispose(){_.off(this._scrollElement,cl),super.dispose()}_getConfig(t){return t={...Fd,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},t.target=Be(t.target)||document.documentElement,L(ll,t,E0),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...x0,...e,...t},L(ll,t,C0),t}_getScrollTop(){return this._scrollElement===window?this._scrollElement.pageYOffset:this._scrollElement.scrollTop}_getScrollHeight(){return this._scrollElement.scrollHeight||Math.max(document.body.scrollHeight,document.documentElement.scrollHeight)}_getOffsetHeight(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height}_process(){const t=this._getScrollTop()+this._config.offset,e=this._getScrollHeight(),i=this._config.offset+e-this._getOffsetHeight();if(this._scrollHeight!==e&&this.refresh(),t>=i){const n=this._targets[this._targets.length-1];this._activeTarget!==n&&this._activate(n);return}if(this._activeTarget&&t<this._offsets[0]&&this._offsets[0]>0){this._activeTarget=null,this._clear();return}for(let n=this._offsets.length;n--;)this._activeTarget!==this._targets[n]&&t>=this._offsets[n]&&(typeof this._offsets[n+1]>"u"||t<this._offsets[n+1])&&this._activate(this._targets[n])}_activate(t){this._activeTarget=t,this._clear();const e=ul.split(",").map(n=>`${n}[data-te-target="${t}"],${n}[href="${t}"]`),i=m.findOne(e.join(","),this._config.target);i.classList.add(...this._classes.active.split(" ")),i.setAttribute(hl,""),i.getAttribute(Wd)?m.findOne(I0,i.closest(O0)).classList.add(...this._classes.active.split(" ")):m.parents(i,k0).forEach(n=>{m.prev(n,`${dl}, ${zd}`).forEach(o=>{o.classList.add(...this._classes.active.split(" ")),o.setAttribute(hl,"")}),m.prev(n,S0).forEach(o=>{m.children(o,dl).forEach(r=>r.classList.add(...this._classes.active.split(" ")))})}),_.trigger(this._scrollElement,A0,{relatedTarget:t})}_clear(){m.find(ul,this._config.target).filter(t=>t.classList.contains(...this._classes.active.split(" "))).forEach(t=>{t.classList.remove(...this._classes.active.split(" ")),t.removeAttribute(hl)})}static jQueryInterface(t){return this.each(function(){const e=xo.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const Yd="tab",Co=".te.tab",M0=`hide${Co}`,L0=`hidden${Co}`,$0=`show${Co}`,R0=`shown${Co}`,P0="data-te-dropdown-menu-ref",ss="data-te-tab-active",Ao="data-te-nav-active",N0="[data-te-dropdown-ref]",B0="[data-te-nav-ref]",Kd=`[${ss}]`,H0=`[${Ao}]`,Ud=":scope > li > .active",V0="[data-te-dropdown-toggle-ref]",F0=":scope > [data-te-dropdown-menu-ref] [data-te-dropdown-show]",W0={show:"opacity-100",hide:"opacity-0"},z0={show:"string",hide:"string"};class wo extends Mt{constructor(t,e){super(t),this._classes=this._getClasses(e)}static get NAME(){return Yd}show(){if(this._element.parentNode&&this._element.parentNode.nodeType===Node.ELEMENT_NODE&&this._element.getAttribute(Ao)==="")return;let t;const e=Ne(this._element),i=this._element.closest(B0),n=m.findOne(H0,i);if(i){const l=i.nodeName==="UL"||i.nodeName==="OL"?Ud:Kd;t=m.find(l,i),t=t[t.length-1]}const o=t?_.trigger(t,M0,{relatedTarget:this._element}):null;if(_.trigger(this._element,$0,{relatedTarget:t}).defaultPrevented||o!==null&&o.defaultPrevented)return;this._activate(this._element,i,null,n,this._element);const a=()=>{_.trigger(t,L0,{relatedTarget:this._element}),_.trigger(this._element,R0,{relatedTarget:t})};e?this._activate(e,e.parentNode,a,n,this._element):a()}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...W0,...e,...t},L(Yd,t,z0),t}_activate(t,e,i,n,o){const a=(e&&(e.nodeName==="UL"||e.nodeName==="OL")?m.find(Ud,e):m.children(e,Kd))[0],l=i&&a&&a.hasAttribute(ss),c=()=>this._transitionComplete(t,a,i,n,o);a&&l?(g.removeClass(a,this._classes.show),g.addClass(a,this._classes.hide),this._queueCallback(c,t,!0)):c()}_transitionComplete(t,e,i,n,o){if(e&&n){e.removeAttribute(ss),n.removeAttribute(Ao);const a=m.findOne(F0,e.parentNode);a&&a.removeAttribute(ss),e.getAttribute("role")==="tab"&&e.setAttribute("aria-selected",!1)}t.setAttribute(ss,""),o.setAttribute(Ao,""),t.getAttribute("role")==="tab"&&t.setAttribute("aria-selected",!0),zi(t),t.classList.contains(this._classes.hide)&&(g.removeClass(t,this._classes.hide),g.addClass(t,this._classes.show));let r=t.parentNode;if(r&&r.nodeName==="LI"&&(r=r.parentNode),r&&r.hasAttribute(P0)){const a=t.closest(N0);a&&m.find(V0,a).forEach(l=>l.setAttribute(ss,"")),t.setAttribute("aria-expanded",!0)}i&&i()}static jQueryInterface(t){return this.each(function(){const e=wo.getOrCreateInstance(this);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const pl="toast",ze=".te.toast",j0=`mouseover${ze}`,Y0=`mouseout${ze}`,K0=`focusin${ze}`,U0=`focusout${ze}`,X0=`hide${ze}`,G0=`hidden${ze}`,q0=`show${ze}`,Z0=`shown${ze}`,Xd="data-te-toast-hide",fl="data-te-toast-show",ko="data-te-toast-showing",Q0={animation:"boolean",autohide:"boolean",delay:"number"},Gd={animation:!0,autohide:!0,delay:5e3},J0={fadeIn:"animate-[fade-in_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none",fadeOut:"animate-[fade-out_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none"},ty={fadeIn:"string",fadeOut:"string"};class Xs extends Mt{constructor(t,e,i){super(t),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._timeout=null,this._hasMouseInteraction=!1,this._hasKeyboardInteraction=!1,this._setListeners(),this._didInit=!1,this._init()}static get DefaultType(){return Q0}static get Default(){return Gd}static get NAME(){return pl}show(){if(_.trigger(this._element,q0).defaultPrevented)return;this._clearTimeout(),this._config.animation&&(g.removeClass(this._element,this._classes.fadeOut),g.addClass(this._element,this._classes.fadeIn));const e=()=>{this._element.removeAttribute(ko),_.trigger(this._element,Z0),this._maybeScheduleHide()};this._element.removeAttribute(Xd),zi(this._element),this._element.setAttribute(fl,""),this._element.setAttribute(ko,""),this._queueCallback(e,this._element,this._config.animation)}hide(){if(!this._element||this._element.dataset.teToastShow===void 0||_.trigger(this._element,X0).defaultPrevented)return;const e=()=>{let i=0;this._config.animation&&(i=300,g.removeClass(this._element,this._classes.fadeIn),g.addClass(this._element,this._classes.fadeOut)),setTimeout(()=>{this._element.setAttribute(Xd,""),this._element.removeAttribute(ko),this._element.removeAttribute(fl),_.trigger(this._element,G0)},i)};this._element.setAttribute(ko,""),this._queueCallback(e,this._element,this._config.animation)}dispose(){this._clearTimeout(),this._element.dataset.teToastShow!==void 0&&this._element.removeAttribute(fl),super.dispose()}_init(){this._didInit||(yo(Xs),this._didInit=!0)}_getConfig(t){return t={...Gd,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(pl,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...J0,...e,...t},L(pl,t,ty),t}_maybeScheduleHide(){this._config.autohide&&(this._hasMouseInteraction||this._hasKeyboardInteraction||(this._timeout=setTimeout(()=>{this.hide()},this._config.delay)))}_onInteraction(t,e){switch(t.type){case"mouseover":case"mouseout":this._hasMouseInteraction=e;break;case"focusin":case"focusout":this._hasKeyboardInteraction=e;break}if(e){this._clearTimeout();return}const i=t.relatedTarget;this._element===i||this._element.contains(i)||this._maybeScheduleHide()}_setListeners(){_.on(this._element,j0,t=>this._onInteraction(t,!0)),_.on(this._element,Y0,t=>this._onInteraction(t,!1)),_.on(this._element,K0,t=>this._onInteraction(t,!0)),_.on(this._element,U0,t=>this._onInteraction(t,!1))}_clearTimeout(){clearTimeout(this._timeout),this._timeout=null}static jQueryInterface(t){return this.each(function(){const e=Xs.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}(()=>{var s={454:(i,n,o)=>{o.d(n,{Z:()=>l});var r=o(645),a=o.n(r)()(function(c){return c[1]});a.push([i.id,"INPUT:-webkit-autofill,SELECT:-webkit-autofill,TEXTAREA:-webkit-autofill{animation-name:onautofillstart}INPUT:not(:-webkit-autofill),SELECT:not(:-webkit-autofill),TEXTAREA:not(:-webkit-autofill){animation-name:onautofillcancel}@keyframes onautofillstart{}@keyframes onautofillcancel{}",""]);const l=a},645:i=>{i.exports=function(n){var o=[];return o.toString=function(){return this.map(function(r){var a=n(r);return r[2]?"@media ".concat(r[2]," {").concat(a,"}"):a}).join("")},o.i=function(r,a,l){typeof r=="string"&&(r=[[null,r,""]]);var c={};if(l)for(var h=0;h<this.length;h++){var d=this[h][0];d!=null&&(c[d]=!0)}for(var u=0;u<r.length;u++){var p=[].concat(r[u]);l&&c[p[0]]||(a&&(p[2]?p[2]="".concat(a," and ").concat(p[2]):p[2]=a),o.push(p))}},o}},810:()=>{(function(){if(typeof window<"u")try{var i=new window.CustomEvent("test",{cancelable:!0});if(i.preventDefault(),i.defaultPrevented!==!0)throw new Error("Could not prevent default")}catch{var n=function(r,a){var l,c;return(a=a||{}).bubbles=!!a.bubbles,a.cancelable=!!a.cancelable,(l=document.createEvent("CustomEvent")).initCustomEvent(r,a.bubbles,a.cancelable,a.detail),c=l.preventDefault,l.preventDefault=function(){c.call(this);try{Object.defineProperty(this,"defaultPrevented",{get:function(){return!0}})}catch{this.defaultPrevented=!0}},l};n.prototype=window.Event.prototype,window.CustomEvent=n}})()},379:(i,n,o)=>{var r,a=function(){var x={};return function(E){if(x[E]===void 0){var C=document.querySelector(E);if(window.HTMLIFrameElement&&C instanceof window.HTMLIFrameElement)try{C=C.contentDocument.head}catch{C=null}x[E]=C}return x[E]}}(),l=[];function c(x){for(var E=-1,C=0;C<l.length;C++)if(l[C].identifier===x){E=C;break}return E}function h(x,E){for(var C={},A=[],w=0;w<x.length;w++){var S=x[w],k=E.base?S[0]+E.base:S[0],D=C[k]||0,I="".concat(k," ").concat(D);C[k]=D+1;var M=c(I),P={css:S[1],media:S[2],sourceMap:S[3]};M!==-1?(l[M].references++,l[M].updater(P)):l.push({identifier:I,updater:T(P,E),references:1}),A.push(I)}return A}function d(x){var E=document.createElement("style"),C=x.attributes||{};if(C.nonce===void 0){var A=o.nc;A&&(C.nonce=A)}if(Object.keys(C).forEach(function(S){E.setAttribute(S,C[S])}),typeof x.insert=="function")x.insert(E);else{var w=a(x.insert||"head");if(!w)throw new Error("Couldn't find a style target. This probably means that the value for the 'insert' parameter is invalid.");w.appendChild(E)}return E}var u,p=(u=[],function(x,E){return u[x]=E,u.filter(Boolean).join(`
+`)});function f(x,E,C,A){var w=C?"":A.media?"@media ".concat(A.media," {").concat(A.css,"}"):A.css;if(x.styleSheet)x.styleSheet.cssText=p(E,w);else{var S=document.createTextNode(w),k=x.childNodes;k[E]&&x.removeChild(k[E]),k.length?x.insertBefore(S,k[E]):x.appendChild(S)}}function b(x,E,C){var A=C.css,w=C.media,S=C.sourceMap;if(w?x.setAttribute("media",w):x.removeAttribute("media"),S&&typeof btoa<"u"&&(A+=`
+/*# sourceMappingURL=data:application/json;base64,`.concat(btoa(unescape(encodeURIComponent(JSON.stringify(S))))," */")),x.styleSheet)x.styleSheet.cssText=A;else{for(;x.firstChild;)x.removeChild(x.firstChild);x.appendChild(document.createTextNode(A))}}var v=null,y=0;function T(x,E){var C,A,w;if(E.singleton){var S=y++;C=v||(v=d(E)),A=f.bind(null,C,S,!1),w=f.bind(null,C,S,!0)}else C=d(E),A=b.bind(null,C,E),w=function(){(function(k){if(k.parentNode===null)return!1;k.parentNode.removeChild(k)})(C)};return A(x),function(k){if(k){if(k.css===x.css&&k.media===x.media&&k.sourceMap===x.sourceMap)return;A(x=k)}else w()}}i.exports=function(x,E){(E=E||{}).singleton||typeof E.singleton=="boolean"||(E.singleton=(r===void 0&&(r=!!(window&&document&&document.all&&!window.atob)),r));var C=h(x=x||[],E);return function(A){if(A=A||[],Object.prototype.toString.call(A)==="[object Array]"){for(var w=0;w<C.length;w++){var S=c(C[w]);l[S].references--}for(var k=h(A,E),D=0;D<C.length;D++){var I=c(C[D]);l[I].references===0&&(l[I].updater(),l.splice(I,1))}C=k}}}}},t={};function e(i){var n=t[i];if(n!==void 0)return n.exports;var o=t[i]={id:i,exports:{}};return s[i](o,o.exports,e),o.exports}e.n=i=>{var n=i&&i.__esModule?()=>i.default:()=>i;return e.d(n,{a:n}),n},e.d=(i,n)=>{for(var o in n)e.o(n,o)&&!e.o(i,o)&&Object.defineProperty(i,o,{enumerable:!0,get:n[o]})},e.o=(i,n)=>Object.prototype.hasOwnProperty.call(i,n),(()=>{var i=e(379),n=e.n(i),o=e(454);function r(l){if(!l.hasAttribute("autocompleted")){l.setAttribute("autocompleted","");var c=new window.CustomEvent("onautocomplete",{bubbles:!0,cancelable:!0,detail:null});l.dispatchEvent(c)||(l.value="")}}function a(l){l.hasAttribute("autocompleted")&&(l.removeAttribute("autocompleted"),l.dispatchEvent(new window.CustomEvent("onautocomplete",{bubbles:!0,cancelable:!1,detail:null})))}n()(o.Z,{insert:"head",singleton:!1}),o.Z.locals,e(810),document.addEventListener("animationstart",function(l){l.animationName==="onautofillstart"?r(l.target):a(l.target)},!0),document.addEventListener("input",function(l){l.inputType!=="insertReplacementText"&&"data"in l?a(l.target):r(l.target)},!0)})()})();const _l="input",So="te.input",qd="data-te-input-wrapper-init",Zd="data-te-input-notch-ref",Qd="data-te-input-notch-leading-ref",Jd="data-te-input-notch-middle-ref",ey="data-te-input-notch-trailing-ref",iy="data-te-input-helper-ref",sy="data-te-input-placeholder-active",je="data-te-input-state-active",tu="data-te-input-focused",eu="data-te-input-form-counter",Oo=`[${qd}] input`,Io=`[${qd}] textarea`,ns=`[${Zd}]`,iu=`[${Qd}]`,su=`[${Jd}]`,ny=`[${iy}]`,oy={inputFormWhite:!1},ry={inputFormWhite:"(boolean)"},nu={notch:"group flex absolute left-0 top-0 w-full max-w-full h-full text-left pointer-events-none",notchLeading:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none left-0 top-0 h-full w-2 border-r-0 rounded-l-[0.25rem] group-data-[te-input-focused]:border-r-0 group-data-[te-input-state-active]:border-r-0",notchLeadingNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[-1px_0_0_#3b71ca,_0_1px_0_0_#3b71ca,_0_-1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchLeadingWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[-1px_0_0_#ffffff,_0_1px_0_0_#ffffff,_0_-1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",notchMiddle:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none grow-0 shrink-0 basis-auto w-auto max-w-[calc(100%-1rem)] h-full border-r-0 border-l-0 group-data-[te-input-focused]:border-x-0 group-data-[te-input-state-active]:border-x-0 group-data-[te-input-focused]:border-t group-data-[te-input-state-active]:border-t group-data-[te-input-focused]:border-solid group-data-[te-input-state-active]:border-solid group-data-[te-input-focused]:border-t-transparent group-data-[te-input-state-active]:border-t-transparent",notchMiddleNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[0_1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchMiddleWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[0_1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",notchTrailing:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none grow h-full border-l-0 rounded-r-[0.25rem] group-data-[te-input-focused]:border-l-0 group-data-[te-input-state-active]:border-l-0",notchTrailingNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[1px_0_0_#3b71ca,_0_-1px_0_0_#3b71ca,_0_1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchTrailingWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[1px_0_0_#ffffff,_0_-1px_0_0_#ffffff,_0_1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",counter:"text-right leading-[1.6]"},ay={notch:"string",notchLeading:"string",notchLeadingNormal:"string",notchLeadingWhite:"string",notchMiddle:"string",notchMiddleNormal:"string",notchMiddleWhite:"string",notchTrailing:"string",notchTrailingNormal:"string",notchTrailingWhite:"string",counter:"string"};class Z{constructor(t,e,i){this._config=this._getConfig(e,t),this._element=t,this._classes=this._getClasses(i),this._label=null,this._labelWidth=0,this._labelMarginLeft=0,this._notchLeading=null,this._notchMiddle=null,this._notchTrailing=null,this._initiated=!1,this._helper=null,this._counter=!1,this._counterElement=null,this._maxLength=0,this._leadingIcon=null,this._element&&(O.setData(t,So,this),this.init())}static get NAME(){return _l}get input(){return m.findOne("input",this._element)||m.findOne("textarea",this._element)}init(){this._initiated||(this._getLabelData(),this._applyDivs(),this._applyNotch(),this._activate(),this._getHelper(),this._getCounter(),this._getEvents(),this._initiated=!0)}update(){this._getLabelData(),this._getNotchData(),this._applyNotch(),this._activate(),this._getHelper(),this._getCounter()}forceActive(){this.input.setAttribute(je,""),m.findOne(ns,this.input.parentNode).setAttribute(je,"")}forceInactive(){this.input.removeAttribute(je),m.findOne(ns,this.input.parentNode).removeAttribute(je)}dispose(){this._removeBorder(),O.removeData(this._element,So),this._element=null}_getConfig(t,e){return t={...oy,...g.getDataAttributes(e),...typeof t=="object"?t:{}},L(_l,t,ry),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...nu,...e,...t},L(_l,t,ay),t}_getLabelData(){this._label=m.findOne("label",this._element),this._label===null?this._showPlaceholder():(this._getLabelWidth(),this._getLabelPositionInInputGroup(),this._toggleDefaultDatePlaceholder())}_getHelper(){this._helper=m.findOne(ny,this._element)}_getCounter(){this._counter=g.getDataAttribute(this.input,"inputShowcounter"),this._counter&&(this._maxLength=this.input.maxLength,this._showCounter())}_getEvents(){_.on(this._element,"focus","input",Z.activate(new Z)),_.on(this._element,"input","input",Z.activate(new Z)),_.on(this._element,"blur","input",Z.deactivate(new Z)),_.on(this._element,"focus","textarea",Z.activate(new Z)),_.on(this._element,"input","textarea",Z.activate(new Z)),_.on(this._element,"blur","textarea",Z.deactivate(new Z)),_.on(window,"shown.te.modal",t=>{m.find(Oo,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.update()}),m.find(Io,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.update()})}),_.on(window,"shown.te.dropdown",t=>{const e=t.target.parentNode.querySelector("[data-te-dropdown-menu-ref]");e&&(m.find(Oo,e).forEach(i=>{const n=Z.getInstance(i.parentNode);n&&n.update()}),m.find(Io,e).forEach(i=>{const n=Z.getInstance(i.parentNode);n&&n.update()}))}),_.on(window,"shown.te.tab",t=>{let e;t.target.href?e=t.target.href.split("#")[1]:e=g.getDataAttribute(t.target,"target").split("#")[1];const i=m.findOne(`#${e}`);m.find(Oo,i).forEach(n=>{const o=Z.getInstance(n.parentNode);o&&o.update()}),m.find(Io,i).forEach(n=>{const o=Z.getInstance(n.parentNode);o&&o.update()})}),_.on(window,"reset",t=>{m.find(Oo,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.forceInactive()}),m.find(Io,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.forceInactive()})}),_.on(window,"onautocomplete",t=>{const e=Z.getInstance(t.target.parentNode);!e||!t.cancelable||e.forceActive()})}_showCounter(){if(m.find(`[${eu}]`,this._element).length>0)return;this._counterElement=document.createElement("div"),g.addClass(this._counterElement,this._classes.counter),this._counterElement.setAttribute(eu,"");const e=this.input.value.length;this._counterElement.innerHTML=`${e} / ${this._maxLength}`,this._helper.appendChild(this._counterElement),this._bindCounter()}_bindCounter(){_.on(this.input,"input",()=>{const t=this.input.value.length;this._counterElement.innerHTML=`${t} / ${this._maxLength}`})}_toggleDefaultDatePlaceholder(t=this.input){if(!(t.getAttribute("type")==="date"))return;!(document.activeElement===t)&&!t.value?t.style.opacity=0:t.style.opacity=1}_showPlaceholder(){this.input.setAttribute(sy,"")}_getNotchData(){this._notchMiddle=m.findOne(su,this._element),this._notchLeading=m.findOne(iu,this._element)}_getLabelWidth(){this._labelWidth=this._label.clientWidth*.8+8}_getLabelPositionInInputGroup(){if(this._labelMarginLeft=0,!this._element.hasAttribute("data-te-input-group-ref"))return;const t=this.input,e=m.prev(t,"[data-te-input-group-text-ref]")[0];e===void 0?this._labelMarginLeft=0:this._labelMarginLeft=e.offsetWidth-1}_applyDivs(){const t=this._config.inputFormWhite?this._classes.notchLeadingWhite:this._classes.notchLeadingNormal,e=this._config.inputFormWhite?this._classes.notchMiddleWhite:this._classes.notchMiddleNormal,i=this._config.inputFormWhite?this._classes.notchTrailingWhite:this._classes.notchTrailingNormal,n=m.find(ns,this._element),o=$("div");g.addClass(o,this._classes.notch),o.setAttribute(Zd,""),this._notchLeading=$("div"),g.addClass(this._notchLeading,`${this._classes.notchLeading} ${t}`),this._notchLeading.setAttribute(Qd,""),this._notchMiddle=$("div"),g.addClass(this._notchMiddle,`${this._classes.notchMiddle} ${e}`),this._notchMiddle.setAttribute(Jd,""),this._notchTrailing=$("div"),g.addClass(this._notchTrailing,`${this._classes.notchTrailing} ${i}`),this._notchTrailing.setAttribute(ey,""),!(n.length>=1)&&(o.append(this._notchLeading),o.append(this._notchMiddle),o.append(this._notchTrailing),this._element.append(o))}_applyNotch(){this._notchMiddle.style.width=`${this._labelWidth}px`,this._notchLeading.style.width=`${this._labelMarginLeft+9}px`,this._label!==null&&(this._label.style.marginLeft=`${this._labelMarginLeft}px`)}_removeBorder(){const t=m.findOne(ns,this._element);t&&t.remove()}_activate(t){ph(()=>{this._getElements(t);const e=t?t.target:this.input,i=m.findOne(ns,this._element);t&&t.type==="focus"&&i&&i.setAttribute(tu,""),e.value!==""&&(e.setAttribute(je,""),i&&i.setAttribute(je,"")),this._toggleDefaultDatePlaceholder(e)})}_getElements(t){if(t&&(this._element=t.target.parentNode,this._label=m.findOne("label",this._element)),t&&this._label){const e=this._labelWidth;this._getLabelData(),e!==this._labelWidth&&(this._notchMiddle=m.findOne(su,t.target.parentNode),this._notchLeading=m.findOne(iu,t.target.parentNode),this._applyNotch())}}_deactivate(t){const e=t?t.target:this.input,i=m.findOne(ns,e.parentNode);i.removeAttribute(tu),e.value===""&&(e.removeAttribute(je),i.removeAttribute(je)),this._toggleDefaultDatePlaceholder(e)}static activate(t){return function(e){t._activate(e)}}static deactivate(t){return function(e){t._deactivate(e)}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,So);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Z(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,So)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const ou="animation",gl="te.animation",ly={animation:"string",animationStart:"string",animationShowOnLoad:"boolean",onStart:"(null|function)",onEnd:"(null|function)",onHide:"(null|function)",onShow:"(null|function)",animationOnScroll:"(string)",animationWindowHeight:"number",animationOffset:"(number|string)",animationDelay:"(number|string)",animationReverse:"boolean",animationInterval:"(number|string)",animationRepeat:"(number|boolean)",animationReset:"boolean"},cy={animation:"fade",animationStart:"onClick",animationShowOnLoad:!0,onStart:null,onEnd:null,onHide:null,onShow:null,animationOnScroll:"once",animationWindowHeight:0,animationOffset:0,animationDelay:0,animationReverse:!1,animationInterval:0,animationRepeat:!1,animationReset:!1};class Gs{constructor(t,e){this._element=t,this._animateElement=this._getAnimateElement(),this._isFirstScroll=!0,this._repeatAnimateOnScroll=!0,this._options=this._getConfig(e),this._element&&(O.setData(t,gl,this),this._init())}static get NAME(){return ou}init(){this._init()}startAnimation(){this._startAnimation()}stopAnimation(){this._clearAnimationClass()}changeAnimationType(t){this._options.animation=t}dispose(){_.off(this._element,"mousedown"),_.off(this._animateElement,"animationend"),_.off(window,"scroll"),_.off(this._element,"mouseover"),O.removeData(this._element,gl),this._element=null,this._animateElement=null,this._isFirstScroll=null,this._repeatAnimateOnScroll=null,this._options=null}_init(){switch(this._options.animationStart){case"onHover":this._bindHoverEvents();break;case"onLoad":this._startAnimation();break;case"onScroll":this._bindScrollEvents();break;case"onClick":this._bindClickEvents();break}this._bindTriggerOnEndCallback(),this._options.animationReset&&this._bindResetAnimationAfterFinish()}_getAnimateElement(){const t=g.getDataAttribute(this._element,"animation-target");return t?m.find(t)[0]:this._element}_getConfig(t){const e=g.getDataAttributes(this._animateElement);return t={...cy,...e,...t},L(ou,t,ly),t}_animateOnScroll(){const t=g.offset(this._animateElement).top,e=this._animateElement.offsetHeight,i=window.innerHeight,n=t+this._options.animationOffset<=i&&t+this._options.animationOffset+e>=0,o=this._animateElement.style.visibility==="visible";switch(!0){case(n&&this._isFirstScroll):this._isFirstScroll=!1,this._startAnimation();break;case(!n&&this._isFirstScroll):this._isFirstScroll=!1,this._hideAnimateElement();break;case(n&&!o&&this._repeatAnimateOnScroll):this._options.animationOnScroll!=="repeat"&&(this._repeatAnimateOnScroll=!1),this._callback(this._options.onShow),this._showAnimateElement(),this._startAnimation();break;case(!n&&o&&this._repeatAnimateOnScroll):this._hideAnimateElement(),this._clearAnimationClass(),this._callback(this._options.onHide);break}}_addAnimatedClass(){g.addClass(this._animateElement,`animate-${this._options.animation}`)}_clearAnimationClass(){this._animateElement.classList.remove(`animate-${this._options.animation}`)}_startAnimation(){this._callback(this._options.onStart),this._addAnimatedClass(),this._options.animationRepeat&&!this._options.animationInterval&&this._setAnimationRepeat(),this._options.animationReverse&&this._setAnimationReverse(),this._options.animationDelay&&this._setAnimationDelay(),this._options.animationDuration&&this._setAnimationDuration(),this._options.animationInterval&&this._setAnimationInterval()}_setAnimationReverse(){g.style(this._animateElement,{animationIterationCount:this._options.animationRepeat===!0?"infinite":"2",animationDirection:"alternate"})}_setAnimationDuration(){g.style(this._animateElement,{animationDuration:`${this._options.animationDuration}ms`})}_setAnimationDelay(){g.style(this._animateElement,{animationDelay:`${this._options.animationDelay}ms`})}_setAnimationRepeat(){g.style(this._animateElement,{animationIterationCount:this._options.animationRepeat===!0?"infinite":this._options.animationRepeat})}_setAnimationInterval(){_.on(this._animateElement,"animationend",()=>{this._clearAnimationClass(),setTimeout(()=>{this._addAnimatedClass()},this._options.animationInterval)})}_hideAnimateElement(){g.style(this._animateElement,{visibility:"hidden"})}_showAnimateElement(){g.style(this._animateElement,{visibility:"visible"})}_bindResetAnimationAfterFinish(){_.on(this._animateElement,"animationend",()=>{this._clearAnimationClass()})}_bindTriggerOnEndCallback(){_.on(this._animateElement,"animationend",()=>{this._callback(this._options.onEnd)})}_bindScrollEvents(){this._options.animationShowOnLoad||this._animateOnScroll(),_.on(window,"scroll",()=>{this._animateOnScroll()})}_bindClickEvents(){_.on(this._element,"mousedown",()=>{this._startAnimation()})}_bindHoverEvents(){_.one(this._element,"mouseover",()=>{this._startAnimation()}),_.one(this._animateElement,"animationend",()=>{setTimeout(()=>{this._bindHoverEvents()},100)})}_callback(t){t instanceof Function&&t()}static autoInit(t){t._init()}static jQueryInterface(t){new Gs(this[0],t).init()}static getInstance(t){return O.getData(t,gl)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const hy={property:"color",defaultValue:null,inherit:!0},os=(s,t)=>{const{property:e,defaultValue:i,inherit:n}={...hy,...t},o=document.createElement("div");o.classList.add(s),document.body.appendChild(o);const a=window.getComputedStyle(o)[e]||i,c=window.getComputedStyle(o.parentElement)[e];return document.body.removeChild(o),!n&&c&&a===c?i:a||i},ml="ripple",Do="te.ripple",dy="rgba({{color}}, 0.2) 0, rgba({{color}}, 0.3) 40%, rgba({{color}}, 0.4) 50%, rgba({{color}}, 0.5) 60%, rgba({{color}}, 0) 70%",uy=["[data-te-ripple-init]"],Mo=[0,0,0],py=[{name:"primary",gradientColor:os("text-primary",{defaultValue:"#3B71CA",inherit:!1})},{name:"secondary",gradientColor:os("text-secondary",{defaultValue:"#9FA6B2",inherit:!1})},{name:"success",gradientColor:os("text-success",{defaultValue:"#14A44D",inherit:!1})},{name:"danger",gradientColor:os("text-danger",{defaultValue:"#DC4C64",inherit:!1})},{name:"warning",gradientColor:os("text-warning",{defaultValue:"#E4A11B",inherit:!1})},{name:"info",gradientColor:os("text-info",{defaultValue:"#54B4D3",inherit:!1})},{name:"light",gradientColor:"#fbfbfb"},{name:"dark",gradientColor:"#262626"}],ru=.5,fy={rippleCentered:!1,rippleColor:"",rippleColorDark:"",rippleDuration:"500ms",rippleRadius:0,rippleUnbound:!1},_y={rippleCentered:"boolean",rippleColor:"string",rippleColorDark:"string",rippleDuration:"string",rippleRadius:"number",rippleUnbound:"boolean"},gy={ripple:"relative overflow-hidden inline-block align-bottom",rippleWave:"rounded-[50%] opacity-50 pointer-events-none absolute touch-none scale-0 transition-[transform,_opacity] ease-[cubic-bezier(0,0,0.15,1),_cubic-bezier(0,0,0.15,1)] z-[999]",unbound:"overflow-visible"},my={ripple:"string",rippleWave:"string",unbound:"string"};class Ye{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._element&&(O.setData(t,Do,this),g.addClass(this._element,this._classes.ripple)),this._clickHandler=this._createRipple.bind(this),this._rippleTimer=null,this._isMinWidthSet=!1,this._initialClasses=null,this.init()}static get NAME(){return ml}init(){this._addClickEvent(this._element)}dispose(){O.removeData(this._element,Do),_.off(this._element,"click",this._clickHandler),this._element=null,this._options=null}_autoInit(t){uy.forEach(e=>{m.closest(t.target,e)&&(this._element=m.closest(t.target,e))}),this._element.style.minWidth||(g.style(this._element,{"min-width":getComputedStyle(this._element).width}),this._isMinWidthSet=!0),this._options=this._getConfig(),this._classes=this._getClasses(),this._initialClasses=[...this._element.classList],g.addClass(this._element,this._classes.ripple),this._createRipple(t)}_addClickEvent(t){_.on(t,"mousedown",this._clickHandler)}_createRipple(t){this._element.className.indexOf(this._classes.ripple)<0&&g.addClass(this._element,this._classes.ripple);const{layerX:e,layerY:i}=t,n=t.offsetX||e,o=t.offsetY||i,r=this._element.offsetHeight,a=this._element.offsetWidth,l=this._durationToMsNumber(this._options.rippleDuration),c={offsetX:this._options.rippleCentered?r/2:n,offsetY:this._options.rippleCentered?a/2:o,height:r,width:a},h=this._getDiameter(c),d=this._options.rippleRadius||h/2,u={delay:l*ru,duration:l-l*ru},p={left:this._options.rippleCentered?`${a/2-d}px`:`${n-d}px`,top:this._options.rippleCentered?`${r/2-d}px`:`${o-d}px`,height:`${this._options.rippleRadius*2||h}px`,width:`${this._options.rippleRadius*2||h}px`,transitionDelay:`0s, ${u.delay}ms`,transitionDuration:`${l}ms, ${u.duration}ms`},f=$("div");this._createHTMLRipple({wrapper:this._element,ripple:f,styles:p}),this._removeHTMLRipple({ripple:f,duration:l})}_createHTMLRipple({wrapper:t,ripple:e,styles:i}){Object.keys(i).forEach(n=>e.style[n]=i[n]),g.addClass(e,this._classes.rippleWave),e.setAttribute("data-te-ripple-ref",""),this._addColor(e,t),this._toggleUnbound(t),this._appendRipple(e,t)}_removeHTMLRipple({ripple:t,duration:e}){this._rippleTimer&&(clearTimeout(this._rippleTimer),this._rippleTimer=null),t&&setTimeout(()=>{t.classList.add("!opacity-0")},10),this._rippleTimer=setTimeout(()=>{if(t&&(t.remove(),this._element)){m.find("[data-te-ripple-ref]",this._element).forEach(n=>{n.remove()}),this._isMinWidthSet&&(g.style(this._element,{"min-width":""}),this._isMinWidthSet=!1);const i=this._initialClasses?this._addedNewRippleClasses(this._classes.ripple,this._initialClasses):this._classes.ripple.split(" ");g.removeClass(this._element,i)}},e)}_addedNewRippleClasses(t,e){return t.split(" ").filter(i=>e.findIndex(n=>i===n)===-1)}_durationToMsNumber(t){return Number(t.replace("ms","").replace("s","000"))}_getConfig(t={}){const e=g.getDataAttributes(this._element);return t={...fy,...e,...t},L(ml,t,_y),t}_getClasses(t={}){const e=g.getDataClassAttributes(this._element);return t={...gy,...e,...t},L(ml,t,my),t}_getDiameter({offsetX:t,offsetY:e,height:i,width:n}){const o=e<=i/2,r=t<=n/2,a=(u,p)=>Math.sqrt(u**2+p**2),l=e===i/2&&t===n/2,c={first:o===!0&&r===!1,second:o===!0&&r===!0,third:o===!1&&r===!0,fourth:o===!1&&r===!1},h={topLeft:a(t,e),topRight:a(n-t,e),bottomLeft:a(t,i-e),bottomRight:a(n-t,i-e)};let d=0;return l||c.fourth?d=h.topLeft:c.third?d=h.topRight:c.second?d=h.bottomRight:c.first&&(d=h.bottomLeft),d*2}_appendRipple(t,e){e.appendChild(t),setTimeout(()=>{g.addClass(t,"opacity-0 scale-100")},50)}_toggleUnbound(t){this._options.rippleUnbound===!0?g.addClass(t,this._classes.unbound):g.removeClass(t,this._classes.unbound)}_addColor(t){let e=this._options.rippleColor||"rgb(0,0,0)";(localStorage.theme==="dark"||!("theme"in localStorage)&&window.matchMedia("(prefers-color-scheme: dark)").matches)&&(e=this._options.rippleColorDark||this._options.rippleColor);const i=py.find(r=>r.name===e.toLowerCase()),n=i?this._colorToRGB(i.gradientColor).join(","):this._colorToRGB(e).join(","),o=dy.split("{{color}}").join(`${n}`);t.style.backgroundImage=`radial-gradient(circle, ${o})`}_colorToRGB(t){function e(o){return o.length<7&&(o=`#${o[1]}${o[1]}${o[2]}${o[2]}${o[3]}${o[3]}`),[parseInt(o.substr(1,2),16),parseInt(o.substr(3,2),16),parseInt(o.substr(5,2),16)]}function i(o){const r=document.body.appendChild(document.createElement("fictum")),a="rgb(1, 2, 3)";return r.style.color=a,r.style.color!==a||(r.style.color=o,r.style.color===a||r.style.color==="")?Mo:(o=getComputedStyle(r).color,document.body.removeChild(r),o)}function n(o){return o=o.match(/[.\d]+/g).map(r=>+Number(r)),o.length=3,o}return t.toLowerCase()==="transparent"?Mo:t[0]==="#"?e(t):(t.indexOf("rgb")===-1&&(t=i(t)),t.indexOf("rgb")===0?n(t):Mo)}static autoInitial(t){return function(e){t._autoInit(e)}}static jQueryInterface(t){return this.each(function(){return O.getData(this,Do)?null:new Ye(this,t)})}static getInstance(t){return O.getData(t,Do)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}function Tt(s){return s.getDate()}function Lo(s){return s.getDay()}function ot(s){return s.getMonth()}function K(s){return s.getFullYear()}function by(s,t,e){const i=e.startDay,n=i>0?7-i:0,r=new Date(s,t).getDay()+n;return r>=7?r-7:r}function bl(s){return vy(s).getDate()}function vy(s){return ee(s.getFullYear(),s.getMonth()+1,0)}function rs(){return new Date}function kt(s,t){return St(s,t*12)}function St(s,t){const e=ee(s.getFullYear(),s.getMonth()+t,s.getDate()),i=Tt(s),n=Tt(e);return i!==n&&e.setDate(0),e}function as(s,t){return ee(s.getFullYear(),s.getMonth(),s.getDate()+t)}function ee(s,t,e){const i=new Date(s,t,e);return s>=0&&s<100&&i.setFullYear(i.getFullYear()-1900),i}function au(s){const t=s.split("-"),e=t[0],i=t[1],n=t[2];return ee(e,i,n)}function yy(s){return!Number.isNaN(s.getTime())}function ls(s,t){return K(s)-K(t)||ot(s)-ot(t)||Tt(s)-Tt(t)}function yi(s,t){return s.setHours(0,0,0,0),t.setHours(0,0,0,0),s.getTime()===t.getTime()}function $o(s,t){const i=K(s)-Ey();return Ty(i,t)}function Ty(s,t){return(s%t+t)%t}function Ey(s,t,e){let i=0;return e?i=K(e)-s+1:t&&(i=K(t)),i}function Ro(s,t,e,i,n,o){const r=new Date;r.setHours(0,0,0,0);const a=t&&ls(s,t)<=-1,l=e&&ls(s,e)>=1,c=n&&ls(s,r)<=-1,h=o&&ls(s,r)>=1,d=i&&i(s)===!1;return a||l||d||c||h}function lu(s,t,e,i,n,o){const r=new Date,a=i&&K(i),l=i&&ot(i),c=e&&K(e),h=e&&ot(e),d=K(r),u=ot(r),p=l&&a&&(t>a||t===a&&s>l),f=h&&c&&(t<c||t===c&&s<h),b=n&&(t<d||t===d&&s<u),v=o&&(t>d||t===d&&s>u);return p||f||b||v}function vl(s,t,e,i,n){const o=t&&K(t),r=e&&K(e),a=K(new Date),l=r&&s>r,c=o&&s<o,h=i&&s<a,d=n&&s>a;return l||c||h||d}function xy(s,t,e,i,n,o,r,a){const l=new Date;return l.setHours(0,0,0,0),(s&&o&&ls(o,l)<0||s)&&(o=l),o&&qs(t,o,e,i,n,o,r,a)}function Cy(s,t,e,i,n,o,r,a){const l=new Date;return l.setHours(0,0,0,0),(s&&n&&ls(n,l)<0||s)&&(n=l),n&&qs(t,n,e,i,n,o,r,a)}function qs(s,t,e,i,n,o,r,a){return e==="days"?K(s)===K(t)&&ot(s)===ot(t):e==="months"?K(s)===K(t):e==="years"?K(t)>=a&&K(t)<=r:!1}const Ay="data-te-datepicker-modal-container-ref",wy="data-te-datepicker-dropdown-container-ref",ky="data-te-dropdown-backdrop-ref",Sy="data-te-datepicker-date-text-ref",cu="data-te-datepicker-view-ref",Oy="data-te-datepicker-previous-button-ref",Iy="data-te-datepicker-next-button-ref",Dy="data-te-datepicker-ok-button-ref",My="data-te-datepicker-cancel-button-ref",Ly="data-te-datepicker-clear-button-ref",$y="data-te-datepicker-view-change-button-ref";function Ry(s,t,e,i,n,o,r,a,l,c){const h=ot(s),d=K(s),u=Tt(s),p=Lo(s),f=$("div"),b=`
+        ${hu(s,h,d,t,e,i,n,o,r,a,c)}
+    `,v=`
+      ${Ny(u,p,h,n,c)}
+      ${hu(s,h,d,t,e,i,n,o,r,a,c)}
+    `;return n.inline?(g.addClass(f,c.datepickerDropdownContainer),f.setAttribute(wy,l),f.innerHTML=b):(g.addClass(f,c.modalContainer),f.setAttribute(Ay,l),f.innerHTML=v),f}function Py(s){const t=$("div");return g.addClass(t,s),t.setAttribute(ky,""),t}function Ny(s,t,e,i,n){return`
+      <div class="${n.datepickerHeader}" data-te-datepicker-header>
+        <div class="${n.datepickerTitle}">
+          <span class="${n.datepickerTitleText}">${i.title}</span>
+        </div>
+        <div class="${n.datepickerDate}">
+          <span class="${n.datepickerDateText}" ${Sy} >${i.weekdaysShort[t]}, ${i.monthsShort[e]} ${s}</span>
+        </div>
+      </div>
+    `}function hu(s,t,e,i,n,o,r,a,l,c,h){let d;return r.inline?d=`
+    <div class="${h.datepickerMain}">
+      ${uu(t,e,r,h)}
+      <div class="${h.datepickerView}" ${cu} tabindex="0">
+        ${du(s,e,i,n,o,r,a,l,c,h)}
+      </div>
+    </div>
+  `:d=`
+    <div class="${h.datepickerMain}">
+      ${uu(t,e,r,h)}
+      <div class="${h.datepickerView}" ${cu} tabindex="0">
+        ${du(s,e,i,n,o,r,a,l,c,h)}
+      </div>
+      ${By(r,h)}
+    </div>
+  `,d}function du(s,t,e,i,n,o,r,a,l,c){let h;return o.view==="days"?h=Po(s,e,o,c):o.view==="months"?h=No(t,i,n,o,r,c):h=Bo(s,i,o,a,l,c),h}function uu(s,t,e,i){return`
+    <div class="${i.datepickerDateControls}">
+      <button class="${i.datepickerViewChangeButton}" aria-label="${e.switchToMultiYearViewLabel}" ${$y}>
+        ${e.monthsFull[s]} ${t} ${pe(e,i)}
+      </button>
+      <div class="${i.datepickerArrowControls}">
+        <button class="${i.datepickerPreviousButton}" aria-label="${e.prevMonthLabel}" ${Oy}>${e.changeMonthIconTemplate}</button>
+        <button class="${i.datepickerNextButton}" aria-label="${e.nextMonthLabel}" ${Iy}>${e.changeMonthIconTemplate}</button>
+      </div>
+    </div>
+    `}function pe(s,t){return`
+  <span class="${t.datepickerViewChangeIcon}">
+  ${s.viewChangeIconTemplate}
+  </span>
+  `}function By(s,t){const e=`<button class="${t.datepickerFooterBtn}" aria-label="${s.okBtnLabel}" ${Dy}>${s.okBtnText}</button>`,i=`<button class="${t.datepickerFooterBtn}" aria-label="${s.cancelBtnLabel}" ${My}>${s.cancelBtnText}</button>`,n=`<button class="${t.datepickerFooterBtn} ${t.datepickerClearBtn}" aria-label="${s.clearBtnLabel}" ${Ly}>${s.clearBtnText}</button>`;return`
+        <div class="${t.datepickerFooter}">
+          
+        ${s.removeClearBtn?"":n}
+        ${s.removeCancelBtn?"":i}
+        ${s.removeOkBtn?"":e}
+        </div>
+      `}function Po(s,t,e,i){const n=Hy(s,t,e),r=`
+      <tr>
+        ${e.weekdaysNarrow.map((l,c)=>`<th class="${i.datepickerDayHeading}" scope="col" aria-label="${e.weekdaysFull[c]}">${l}</th>`).join("")}
+      </tr>
+    `,a=n.map(l=>`
+        <tr>
+          ${l.map(c=>`
+              <td
+              class="${i.datepickerCell} ${i.datepickerCellSmall}"
+              data-te-date="${K(c.date)}-${ot(c.date)}-${Tt(c.date)}"
+              aria-label="${c.date}"
+              aria-selected="${c.isSelected}"
+              ${c.isSelected?"data-te-datepicker-cell-selected":""}
+              ${!c.currentMonth||c.disabled?"data-te-datepicker-cell-disabled":""}
+              ${c.isToday?"data-te-datepicker-cell-current":""}
+              >
+                <div
+                  class="${i.datepickerCellContent} ${i.datepickerCellContentSmall}"
+                  style="${c.currentMonth?"display: block":"display: none"}"
+                  >
+                  ${c.dayNumber}
+                  </div>
+              </td>
+            `).join("")}
+        </tr>
+      `).join("");return`
+      <table class="${i.datepickerTable}">
+        <thead>
+          ${r}
+        </thead>
+        <tbody>
+         ${a}
+        </tbody>
+      </table>
+    `}function Hy(s,t,e){const i=[],n=ot(s),o=ot(St(s,-1)),r=ot(St(s,1)),a=K(s),l=by(a,n,e),c=bl(s),h=bl(St(s,-1)),d=7;let u=1,p=!1;for(let f=1;f<d;f++){const b=[];if(f===1){const v=h-l+1;for(let T=v;T<=h;T++){const x=ee(a,o,T);b.push({date:x,currentMonth:p,isSelected:t&&yi(x,t),isToday:yi(x,rs()),dayNumber:Tt(x)})}p=!0;const y=d-b.length;for(let T=0;T<y;T++){const x=ee(a,n,u);b.push({date:x,currentMonth:p,isSelected:t&&yi(x,t),isToday:yi(x,rs()),dayNumber:Tt(x),disabled:Ro(x,e.min,e.max,e.filter,e.disablePast,e.disableFuture)}),u++}}else for(let v=1;v<8;v++){u>c&&(u=1,p=!1);const y=ee(a,p?n:r,u);b.push({date:y,currentMonth:p,isSelected:t&&yi(y,t),isToday:yi(y,rs()),dayNumber:Tt(y),disabled:Ro(y,e.min,e.max,e.filter,e.disablePast,e.disableFuture)}),u++}i.push(b)}return i}function No(s,t,e,i,n,o){const r=Vy(i,n),a=ot(rs()),l=K(rs()),c=`
+      ${r.map(h=>`
+          <tr>
+            ${h.map(d=>{const u=i.monthsShort.indexOf(d);return`
+                <td class="${o.datepickerCell} ${o.datepickerCellLarge}"
+                ${lu(u,s,i.min,i.max,i.disablePast,i.disableFuture)?"data-te-datepicker-cell-disabled":""}
+                
+                data-te-month="${u}" data-te-year="${s}" aria-label="${d}, ${s}"
+                ${u===e&&s===t?"data-te-datepicker-cell-selected":""}
+                ${u===a&&s===l?"data-te-datepicker-cell-current":""}" data-te-month="${u}" data-te-year="${s}" aria-label="${d}, ${s}">
+                  <div class="${o.datepickerCellContent} ${o.datepickerCellContentLarge}">${d}</div>
+                </td>
+              `}).join("")}
+          </tr>
+        `).join("")}
+    `;return`
+      <table class="${o.datepickerTable}">
+        <tbody>
+         ${c}
+        </tbody>
+      </table>
+    `}function Vy(s,t){const e=[];let i=[];for(let n=0;n<s.monthsShort.length;n++)if(i.push(s.monthsShort[n]),i.length===t){const o=i;e.push(o),i=[]}return e}function Bo(s,t,e,i,n,o){const r=Fy(s,i,n),a=K(rs()),l=`
+    ${r.map(c=>`
+        <tr>
+          ${c.map(h=>`
+              <td class="${o.datepickerCell} ${o.datepickerCellLarge}"  aria-label="${h}" data-te-year="${h}"
+              ${vl(h,e.min,e.max,e.disablePast,e.disableFuture)?"data-te-datepicker-cell-disabled":""}
+              ${h===t?"data-te-datepicker-cell-selected":""}
+              ${h===a?"data-te-datepicker-cell-current":""}
+              >
+                <div class="${o.datepickerCellContent} ${o.datepickerCellContentLarge}">${h}</div>
+              </td>
+            `).join("")}
+        </tr>
+      `).join("")}
+  `;return`
+      <table class="${o.datepickerTable}">
+        <tbody>
+        ${l}
+        </tbody>
+      </table>
+    `}function Fy(s,t,e){const i=[],n=K(s),o=$o(s,t),r=n-o;let a=[];for(let l=0;l<t;l++)if(a.push(r+l),a.length===e){const c=a;i.push(c),a=[]}return i}function Wy(s,t){return`
+    <button id="${s}" type="button" class="${t}" data-te-datepicker-toggle-button-ref data-te-datepicker-toggle-ref>
+      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+      <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+      </svg>  
+    </button>
+  `}const cs=37,ut=38,hs=39,ht=40,Ti=36,Ei=35,yl=33,Tl=34,Et=13,Ho=32,xi=27,Ci=9,zy=8,jy=46,ie=24,Vo=4,Fo=4,El="datepicker",Wo="te.datepicker",zo=`.${Wo}`,Yy=".data-api",Ky=`close${zo}`,Uy=`open${zo}`,Xy=`dateChange${zo}`,jo=`click${zo}${Yy}`,pu="data-te-datepicker-modal-container-ref",fu="data-te-datepicker-dropdown-container-ref",Yo="[data-te-datepicker-toggle-ref]",Gy=`[${pu}]`,qy=`[${fu}]`,Zy="[data-te-datepicker-view-change-button-ref]",Qy="[data-te-datepicker-previous-button-ref]",Jy="[data-te-datepicker-next-button-ref]",tT="[data-te-datepicker-ok-button-ref]",eT="[data-te-datepicker-cancel-button-ref]",iT="[data-te-datepicker-clear-button-ref]",sT="[data-te-datepicker-view-ref]",nT="[data-te-datepicker-toggle-button-ref]",oT="[data-te-datepicker-date-text-ref]",rT="[data-te-dropdown-backdrop-ref]",aT="animate-[fade-in_0.3s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",lT="animate-[fade-out_0.3s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",cT="animate-[fade-in_0.15s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",hT="animate-[fade-out_0.15s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",dT="flex flex-col fixed top-1/2 left-1/2 -translate-x-1/2 -translate-y-1/2 w-[328px] h-[512px] bg-white rounded-[0.6rem] shadow-lg z-[1066] xs:max-md:landscape:w-[475px] xs:max-md:landscape:h-[360px] xs:max-md:landscape:flex-row dark:bg-zinc-700",uT="w-full h-full fixed top-0 right-0 left-0 bottom-0 bg-black/40 z-[1065]",pT="relative h-full",fT="xs:max-md:landscape:h-full h-[120px] px-6 bg-primary flex flex-col rounded-t-lg dark:bg-zinc-800",_T="h-8 flex flex-col justify-end",gT="text-[10px] font-normal uppercase tracking-[1.7px] text-white",mT="xs:max-md:landscape:mt-24 h-[72px] flex flex-col justify-end",bT="text-[34px] font-normal text-white",vT="outline-none px-3",yT="px-3 pt-2.5 pb-0 flex justify-between text-black/[64]",TT="flex items-center outline-none p-2.5 text-neutral-500 font-medium text-[0.9rem] rounded-xl shadow-none bg-transparent m-0 border-none hover:bg-neutral-200 focus:bg-neutral-200  dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10",ET="mt-2.5",xT="p-0 w-10 h-10 leading-10 border-none outline-none m-0 text-gray-600 bg-transparent mr-6 hover:bg-neutral-200 hover:rounded-[50%] focus:bg-neutral-200 focus:rounded-[50%] dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10 [&>svg]:w-4 [&>svg]:h-4 [&>svg]:mx-auto",CT="p-0 w-10 h-10 leading-10 border-none outline-none m-0 text-gray-600 bg-transparent hover:bg-neutral-200 hover:rounded-[50%] focus:bg-neutral-200 focus:rounded-[50%] dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10 [&>svg]:w-4 [&>svg]:h-4 [&>svg]:rotate-180 [&>svg]:mx-auto",AT="h-14 flex absolute w-full bottom-0 justify-end items-center px-3",wT="outline-none bg-white text-primary border-none cursor-pointer py-0 px-2.5 uppercase text-[0.8rem] leading-10 font-medium h-10 tracking-[.1rem] rounded-[10px] mb-2.5 hover:bg-neutral-200 focus:bg-neutral-200 dark:bg-transparent dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10",kT="mr-auto",ST="w-10 h-10 text-center text-[12px] font-normal dark:text-white",OT="text-center data-[te-datepicker-cell-disabled]:text-neutral-300 data-[te-datepicker-cell-disabled]:cursor-default data-[te-datepicker-cell-disabled]:pointer-events-none data-[te-datepicker-cell-disabled]:hover:cursor-default hover:cursor-pointer group",IT="w-10 h-10 xs:max-md:landscape:w-8 xs:max-md:landscape:h-8",DT="w-[76px] h-[42px]",MT="mx-auto group-[:not([data-te-datepicker-cell-disabled]):not([data-te-datepicker-cell-selected]):hover]:bg-neutral-300 group-[[data-te-datepicker-cell-selected]]:bg-primary group-[[data-te-datepicker-cell-selected]]:text-white group-[:not([data-te-datepicker-cell-selected])[data-te-datepicker-cell-focused]]:bg-neutral-100 group-[[data-te-datepicker-cell-focused]]:data-[te-datepicker-cell-selected]:bg-primary group-[[data-te-datepicker-cell-current]]:border-solid group-[[data-te-datepicker-cell-current]]:border-black group-[[data-te-datepicker-cell-current]]:border dark:group-[:not([data-te-datepicker-cell-disabled]):not([data-te-datepicker-cell-selected]):hover]:bg-white/10 dark:group-[[data-te-datepicker-cell-current]]:border-white dark:text-white dark:group-[:not([data-te-datepicker-cell-selected])[data-te-datepicker-cell-focused]]:bg-white/10 dark:group-[[data-te-datepicker-cell-disabled]]:text-neutral-500",LT="w-9 h-9 leading-9 rounded-[50%] text-[13px]",$T="w-[72px] h-10 leading-10 py-[1px] px-0.5 rounded-[999px]",RT="mx-auto w-[304px]",PT="flex items-center justify-content-center [&>svg]:w-5 [&>svg]:h-5 absolute outline-none border-none bg-transparent right-0.5 top-1/2 -translate-x-1/2 -translate-y-1/2 hover:text-primary focus:text-primary dark:hover:text-primary-400 dark:focus:text-primary-400 dark:text-neutral-200",NT="inline-block pointer-events-none ml-[3px] [&>svg]:w-4 [&>svg]:h-4 [&>svg]:fill-neutral-500 dark:[&>svg]:fill-white",BT="w-[328px] h-[380px] bg-white rounded-lg shadow-[0px_2px_15px_-3px_rgba(0,0,0,.07),_0px_10px_20px_-2px_rgba(0,0,0,.04)] z-[1066] dark:bg-zinc-700",HT={title:"Select date",container:"body",disablePast:!1,disableFuture:!1,monthsFull:["January","February","March","April","May","June","July","August","September","October","November","December"],monthsShort:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],weekdaysFull:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],weekdaysShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],weekdaysNarrow:["S","M","T","W","T","F","S"],okBtnText:"Ok",clearBtnText:"Clear",cancelBtnText:"Cancel",okBtnLabel:"Confirm selection",clearBtnLabel:"Clear selection",cancelBtnLabel:"Cancel selection",nextMonthLabel:"Next month",prevMonthLabel:"Previous month",nextYearLabel:"Next year",prevYearLabel:"Previous year",changeMonthIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-6 h-6">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M15.75 19.5L8.25 12l7.5-7.5" />
+  </svg>
+  `,nextMultiYearLabel:"Next 24 years",prevMultiYearLabel:"Previous 24 years",switchToMultiYearViewLabel:"Choose year and month",switchToMonthViewLabel:"Choose date",switchToDayViewLabel:"Choose date",startDate:null,startDay:0,format:"dd/mm/yyyy",view:"days",viewChangeIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="0" stroke="currentColor" class="w-6 h-6">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+  </svg>
+  `,min:null,max:null,filter:null,inline:!1,toggleButton:!0,disableToggleButton:!1,disableInput:!1,animations:!0,confirmDateOnSelect:!1,removeOkBtn:!1,removeCancelBtn:!1,removeClearBtn:!1},VT={title:"string",container:"string",disablePast:"boolean",disableFuture:"boolean",monthsFull:"array",monthsShort:"array",weekdaysFull:"array",weekdaysShort:"array",weekdaysNarrow:"array",okBtnText:"string",clearBtnText:"string",cancelBtnText:"string",okBtnLabel:"string",clearBtnLabel:"string",cancelBtnLabel:"string",nextMonthLabel:"string",prevMonthLabel:"string",nextYearLabel:"string",prevYearLabel:"string",nextMultiYearLabel:"string",prevMultiYearLabel:"string",changeMonthIconTemplate:"string",switchToMultiYearViewLabel:"string",switchToMonthViewLabel:"string",switchToDayViewLabel:"string",startDate:"(null|string|date)",startDay:"number",format:"string",view:"string",viewChangeIconTemplate:"string",min:"(null|string|date)",max:"(null|string|date)",filter:"(null|function)",inline:"boolean",toggleButton:"boolean",disableToggleButton:"boolean",disableInput:"boolean",animations:"boolean",confirmDateOnSelect:"boolean",removeOkBtn:"boolean",removeCancelBtn:"boolean",removeClearBtn:"boolean"},FT={fadeIn:aT,fadeOut:lT,fadeInShort:cT,fadeOutShort:hT,modalContainer:dT,datepickerBackdrop:uT,datepickerMain:pT,datepickerHeader:fT,datepickerTitle:_T,datepickerTitleText:gT,datepickerDate:mT,datepickerDateText:bT,datepickerView:vT,datepickerDateControls:yT,datepickerViewChangeButton:TT,datepickerViewChangeIcon:NT,datepickerArrowControls:ET,datepickerPreviousButton:xT,datepickerNextButton:CT,datepickerFooter:AT,datepickerFooterBtn:wT,datepickerClearBtn:kT,datepickerDayHeading:ST,datepickerCell:OT,datepickerCellSmall:IT,datepickerCellLarge:DT,datepickerCellContent:MT,datepickerCellContentSmall:LT,datepickerCellContentLarge:$T,datepickerTable:RT,datepickerToggleButton:PT,datepickerDropdownContainer:BT},WT={fadeIn:"string",fadeOut:"string",fadeInShort:"string",fadeOutShort:"string",modalContainer:"string",datepickerBackdrop:"string",datepickerMain:"string",datepickerHeader:"string",datepickerTitle:"string",datepickerTitleText:"string",datepickerDate:"string",datepickerDateText:"string",datepickerView:"string",datepickerDateControls:"string",datepickerViewChangeButton:"string",datepickerArrowControls:"string",datepickerPreviousButton:"string",datepickerNextButton:"string",datepickerFooter:"string",datepickerFooterBtn:"string",datepickerClearBtn:"string",datepickerDayHeading:"string",datepickerCell:"string",datepickerCellSmall:"string",datepickerCellLarge:"string",datepickerCellContent:"string",datepickerCellContentSmall:"string",datepickerCellContentLarge:"string",datepickerTable:"string",datepickerToggleButton:"string",datepickerDropdownContainer:"string"};class xl{constructor(t,e,i){this._element=t,this._input=m.findOne("input",this._element),this._options=this._getConfig(e),this._classes=this._getClasses(i),this._activeDate=new Date,this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this._headerDate=null,this._headerYear=null,this._headerMonth=null,this._view=this._options.view,this._popper=null,this._focusTrap=null,this._isOpen=!1,this._toggleButtonId=bt("datepicker-toggle-"),this._animations=!window.matchMedia("(prefers-reduced-motion: reduce)").matches&&this._options.animations,this._scrollBar=new Qi,this._element&&O.setData(t,Wo,this),this._init(),this.toggleButton&&this._options.disableToggle&&(this.toggleButton.disabled="true"),this._options.disableInput&&(this._input.disabled="true")}static get NAME(){return El}get container(){return m.findOne(`[${pu}='${this._toggleButtonId}']`)||m.findOne(`[${fu}='${this._toggleButtonId}']`)}get options(){return this._options}get activeCell(){let t;return this._view==="days"&&(t=this._getActiveDayCell()),this._view==="months"&&(t=this._getActiveMonthCell()),this._view==="years"&&(t=this._getActiveYearCell()),t}get activeDay(){return Tt(this._activeDate)}get activeMonth(){return ot(this._activeDate)}get activeYear(){return K(this._activeDate)}get firstYearInView(){return this.activeYear-$o(this._activeDate,ie)}get lastYearInView(){return this.firstYearInView+ie-1}get viewChangeButton(){return m.findOne(Zy,this.container)}get previousButton(){return m.findOne(Qy,this.container)}get nextButton(){return m.findOne(Jy,this.container)}get okButton(){return m.findOne(tT,this.container)}get cancelButton(){return m.findOne(eT,this.container)}get clearButton(){return m.findOne(iT,this.container)}get datesContainer(){return m.findOne(sT,this.container)}get toggleButton(){return m.findOne(nT,this._element)}update(t={}){this._options=this._getConfig({...this._options,...t})}_getConfig(t){const e=g.getDataAttributes(this._element);if(t={...HT,...e,...t},L(El,t,VT),t.max&&typeof t.max=="string"&&(t.max=new Date(t.max)),t.min&&typeof t.min=="string"&&(t.min=new Date(t.min)),t.startDay&&t.startDay!==0){const i=this._getNewDaysOrderArray(t);t.weekdaysNarrow=i}return t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...FT,...e,...t},L(El,t,WT),t}_getContainer(){return m.findOne(this._options.container)}_getNewDaysOrderArray(t){const e=t.startDay,i=t.weekdaysNarrow;return i.slice(e).concat(i.slice(0,e))}_init(){!this.toggleButton&&this._options.toggleButton&&(this._appendToggleButton(),(this._input.readOnly||this._input.disabled)&&(this.toggleButton.style.pointerEvents="none")),this._listenToUserInput(),this._listenToToggleClick(),this._listenToToggleKeydown()}_appendToggleButton(){const t=Wy(this._toggleButtonId,this._classes.datepickerToggleButton);this._element.insertAdjacentHTML("beforeend",t)}open(){if(this._input.readOnly||this._input.disabled)return;const t=_.trigger(this._element,Uy);if(this._isOpen||t.defaultPrevented)return;this._setInitialDate();const e=Py(this._classes.datepickerBackdrop),i=Ry(this._activeDate,this._selectedDate,this._selectedYear,this._selectedMonth,this._options,Fo,ie,Vo,this._toggleButtonId,this._classes);this._options.inline?this._openDropdown(i):(this._openModal(e,i),this._scrollBar.hide()),this._animations&&(g.addClass(this.container,this._classes.fadeIn),g.addClass(e,this._classes.fadeInShort)),this._setFocusTrap(this.container),this._listenToDateSelection(),this._addControlsListeners(),this._updateControlsDisabledState(),this._listenToEscapeClick(),this._listenToKeyboardNavigation(),this._listenToDatesContainerFocus(),this._listenToDatesContainerBlur(),this._asyncFocusDatesContainer(),this._updateViewControlsAndAttributes(this._view),this._isOpen=!0,setTimeout(()=>{this._listenToOutsideClick()},0)}_openDropdown(t){this._popper=Fe(this._input,t,{placement:"bottom-start"}),this._getContainer().appendChild(t)}_openModal(t,e){const i=this._getContainer();i.appendChild(t),i.appendChild(e)}_setFocusTrap(t){this._focusTrap=new Vs(t,{event:"keydown",condition:e=>e.key==="Tab"}),this._focusTrap.trap()}_listenToUserInput(){_.on(this._input,"input",t=>{this._handleUserInput(t.target.value)})}_listenToToggleClick(){_.on(this._element,jo,Yo,t=>{t.preventDefault(),this.open()})}_listenToToggleKeydown(){_.on(this._element,"keydown",Yo,t=>{t.keyCode===Et&&!this._isOpen&&this.open()})}_listenToDateSelection(){_.on(this.datesContainer,"click",t=>{this._handleDateSelection(t)})}_handleDateSelection(t){const e=t.target.nodeName==="DIV"?t.target.parentNode.dataset:t.target.dataset,i=t.target.nodeName==="DIV"?t.target.parentNode:t.target;if(e.teDate&&this._pickDay(e.teDate,i),e.teMonth&&e.teYear){const n=parseInt(e.teMonth,10),o=parseInt(e.teYear,10);this._pickMonth(n,o)}if(e.teYear&&!e.teMonth){const n=parseInt(e.teYear,10);this._pickYear(n)}this._options.inline||this._updateHeaderDate(this._activeDate,this._options.monthsShort,this._options.weekdaysShort)}_updateHeaderDate(t,e,i){const n=m.findOne(oT,this.container),o=ot(t),r=Tt(t),a=Lo(t);n.innerHTML=`${i[a]}, ${e[o]} ${r}`}_addControlsListeners(){_.on(this.nextButton,"click",()=>{this._view==="days"?this.nextMonth():this._view==="years"?this.nextYears():this.nextYear(),this._updateControlsDisabledState()}),_.on(this.previousButton,"click",()=>{this._view==="days"?this.previousMonth():this._view==="years"?this.previousYears():this.previousYear(),this._updateControlsDisabledState()}),_.on(this.viewChangeButton,"click",()=>{this._view==="days"?this._changeView("years"):(this._view==="years"||this._view==="months")&&this._changeView("days")}),this._options.inline||this._listenToFooterButtonsClick()}_listenToFooterButtonsClick(){_.on(this.okButton,"click",()=>this.handleOk()),_.on(this.cancelButton,"click",()=>this.handleCancel()),_.on(this.clearButton,"click",()=>this.handleClear())}_listenToOutsideClick(){_.on(document,jo,t=>{const e=t.target===this.container,i=this.container&&this.container.contains(t.target);!e&&!i&&this.close()})}_listenToEscapeClick(){_.on(document,"keydown",t=>{t.keyCode===xi&&this._isOpen&&this.close()})}_listenToKeyboardNavigation(){_.on(this.datesContainer,"keydown",t=>{this._handleKeydown(t)})}_listenToDatesContainerFocus(){_.on(this.datesContainer,"focus",()=>{this._focusActiveCell(this.activeCell)})}_listenToDatesContainerBlur(){_.on(this.datesContainer,"blur",()=>{this._removeCurrentFocusStyles()})}_handleKeydown(t){this._view==="days"&&this._handleDaysViewKeydown(t),this._view==="months"&&this._handleMonthsViewKeydown(t),this._view==="years"&&this._handleYearsViewKeydown(t)}_handleDaysViewKeydown(t){const e=this._activeDate,i=this.activeCell;switch(t.keyCode){case cs:this._activeDate=as(this._activeDate,et()?1:-1);break;case hs:this._activeDate=as(this._activeDate,et()?-1:1);break;case ut:this._activeDate=as(this._activeDate,-7);break;case ht:this._activeDate=as(this._activeDate,7);break;case Ti:this._activeDate=as(this._activeDate,1-Tt(this._activeDate));break;case Ei:this._activeDate=as(this._activeDate,bl(this._activeDate)-Tt(this._activeDate));break;case yl:this._activeDate=St(this._activeDate,-1);break;case Tl:this._activeDate=St(this._activeDate,1);break;case Et:case Ho:this._selectDate(this._activeDate),this._handleDateSelection(t),t.preventDefault();return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("days"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_asyncFocusDatesContainer(){setTimeout(()=>{this.datesContainer.focus()},0)}_focusActiveCell(t){t&&t.setAttribute("data-te-datepicker-cell-focused","")}_removeHighlightFromCell(t){t&&t.removeAttribute("data-te-datepicker-cell-focused")}_getActiveDayCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>{const n=au(i.dataset.teDate);return yi(n,this._activeDate)})}_handleMonthsViewKeydown(t){const e=this._activeDate,i=this.activeCell;switch(t.keyCode){case cs:this._activeDate=St(this._activeDate,et()?1:-1);break;case hs:this._activeDate=St(this._activeDate,et()?-1:1);break;case ut:this._activeDate=St(this._activeDate,-4);break;case ht:this._activeDate=St(this._activeDate,4);break;case Ti:this._activeDate=St(this._activeDate,-this.activeMonth);break;case Ei:this._activeDate=St(this._activeDate,11-this.activeMonth);break;case yl:this._activeDate=kt(this._activeDate,-1);break;case Tl:this._activeDate=kt(this._activeDate,1);break;case Et:case Ho:this._selectMonth(this.activeMonth);return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("months"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_getActiveMonthCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>{const n=parseInt(i.dataset.teYear,10),o=parseInt(i.dataset.teMonth,10);return n===this.activeYear&&o===this.activeMonth})}_handleYearsViewKeydown(t){const e=this._activeDate,i=this.activeCell,n=4,o=24;switch(t.keyCode){case cs:this._activeDate=kt(this._activeDate,et()?1:-1);break;case hs:this._activeDate=kt(this._activeDate,et()?-1:1);break;case ut:this._activeDate=kt(this._activeDate,-n);break;case ht:this._activeDate=kt(this._activeDate,n);break;case Ti:this._activeDate=kt(this._activeDate,-$o(this._activeDate,o));break;case Ei:this._activeDate=kt(this._activeDate,o-$o(this._activeDate,o)-1);break;case yl:this._activeDate=kt(this._activeDate,-o);break;case Tl:this._activeDate=kt(this._activeDate,o);break;case Et:case Ho:this._selectYear(this.activeYear);return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("years"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_getActiveYearCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>parseInt(i.dataset.teYear,10)===this.activeYear)}_setInitialDate(){this._input.value?this._handleUserInput(this._input.value):this._options.startDate?this._activeDate=new Date(this._options.startDate):this._activeDate=new Date}close(){const t=_.trigger(this._element,Ky);!this._isOpen||t.defaultPrevented||(this._removeDatepickerListeners(),this._animations&&g.addClass(this.container,this._classes.fadeOut),this._options.inline?this._closeDropdown():this._closeModal(),this._isOpen=!1,this._view=this._options.view,this.toggleButton?this.toggleButton.focus():this._input.focus())}_closeDropdown(){const t=m.findOne(qy),e=this._getContainer();window.matchMedia("(prefers-reduced-motion: reduce)").matches&&(t&&e.removeChild(t),this._popper&&this._popper.destroy()),t.addEventListener("animationend",()=>{t&&e.removeChild(t),this._popper&&this._popper.destroy()}),this._removeFocusTrap()}_closeModal(){const t=m.findOne(rT),e=m.findOne(Gy);!e||!t||(this._animations?(g.addClass(t,this._classes.fadeOutShort),t.addEventListener("animationend",()=>{this._removePicker(t,e),this._scrollBar.reset()})):(this._removePicker(t,e),this._scrollBar.reset()))}_removePicker(t,e){const i=this._getContainer();i.removeChild(t),i.removeChild(e)}_removeFocusTrap(){this._focusTrap&&(this._focusTrap.disable(),this._focusTrap=null)}_removeDatepickerListeners(){_.off(this.nextButton,"click"),_.off(this.previousButton,"click"),_.off(this.viewChangeButton,"click"),_.off(this.okButton,"click"),_.off(this.cancelButton,"click"),_.off(this.clearButton,"click"),_.off(this.datesContainer,"click"),_.off(this.datesContainer,"keydown"),_.off(this.datesContainer,"focus"),_.off(this.datesContainer,"blur"),_.off(document,jo)}dispose(){this._isOpen&&this.close(),this._removeInputAndToggleListeners();const t=m.findOne(`#${this._toggleButtonId}`);t&&this._element.removeChild(t),O.removeData(this._element,Wo),this._element=null,this._input=null,this._options=null,this._activeDate=null,this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this._headerDate=null,this._headerYear=null,this._headerMonth=null,this._view=null,this._popper=null,this._focusTrap=null}_removeInputAndToggleListeners(){_.off(this._input,"input"),_.off(this._element,jo,Yo),_.off(this._element,"keydown",Yo)}handleOk(){this._confirmSelection(this._headerDate),this.close()}_selectDate(t,e=this.activeCell){const{min:i,max:n,filter:o,disablePast:r,disableFuture:a}=this._options;Ro(t,i,n,o,r,a)||(this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._selectedDate=t,this._selectedYear=K(t),this._selectedMonth=ot(t),this._headerDate=t,(this._options.inline||this.options.confirmDateOnSelect)&&(this._confirmSelection(t),this.close()))}_selectYear(t,e=this.activeCell){this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._headerYear=t,this._asyncChangeView("months")}_selectMonth(t,e=this.activeCell){this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._headerMonth=t,this._asyncChangeView("days")}_removeSelectedStyles(t){t&&t.removeAttribute("data-te-datepicker-cell-selected")}_addSelectedStyles(t){t&&t.setAttribute("data-te-datepicker-cell-selected","")}_confirmSelection(t){if(t){const e=this.formatDate(t);this._input.value=e,_.trigger(this._element,Xy,{date:t}),_.trigger(this._input,"input")}}handleCancel(){this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this.close()}handleClear(){this._selectedDate=null,this._selectedMonth=null,this._selectedYear=null,this._headerDate=null,this._headerMonth=null,this._headerYear=null,this._removeCurrentSelectionStyles(),this._input.value="",this._setInitialDate(),this._changeView("days"),this._updateHeaderDate(this._activeDate,this._options.monthsShort,this._options.weekdaysShort)}_removeCurrentSelectionStyles(){const t=m.findOne("[data-te-datepicker-cell-selected]",this.container);t&&t.removeAttribute("data-te-datepicker-cell-selected")}_removeCurrentFocusStyles(){const t=m.findOne("[data-te-datepicker-cell-focused]",this.container);t&&t.removeAttribute("data-te-datepicker-cell-focused")}formatDate(t){const e=Tt(t),i=this._addLeadingZero(Tt(t)),n=this._options.weekdaysShort[Lo(t)],o=this._options.weekdaysFull[Lo(t)],r=ot(t)+1,a=this._addLeadingZero(ot(t)+1),l=this._options.monthsShort[ot(t)],c=this._options.monthsFull[ot(t)],h=K(t).toString().length===2?K(t):K(t).toString().slice(2,4),d=K(t),u=this._options.format.split(/(d{1,4}|m{1,4}|y{4}|yy|!.)/g);let p="";return u.forEach(f=>{switch(f){case"dddd":f=f.replace(f,o);break;case"ddd":f=f.replace(f,n);break;case"dd":f=f.replace(f,i);break;case"d":f=f.replace(f,e);break;case"mmmm":f=f.replace(f,c);break;case"mmm":f=f.replace(f,l);break;case"mm":f=f.replace(f,a);break;case"m":f=f.replace(f,r);break;case"yyyy":f=f.replace(f,d);break;case"yy":f=f.replace(f,h);break}p+=f}),p}_addLeadingZero(t){return parseInt(t,10)<10?`0${t}`:t}_pickDay(t,e){const i=au(t),{min:n,max:o,filter:r,disablePast:a,disableFuture:l}=this._options;Ro(i,n,o,r,a,l)||(this._activeDate=i,this._selectDate(i,e))}_pickYear(t){const{min:e,max:i,disablePast:n,disableFuture:o}=this._options;if(vl(t,e,i,n,o))return;const r=ee(t,this.activeMonth,this.activeDay);this._activeDate=r,this._selectedDate=r,this._selectYear(t)}_pickMonth(t,e){const{min:i,max:n,disablePast:o,disableFuture:r}=this._options;if(lu(t,e,i,n,o,r)||vl(e,i,n,o,r))return;const a=ee(e,t,this.activeDay);this._activeDate=a,this._selectMonth(t)}nextMonth(){const t=St(this._activeDate,1),e=Po(t,this._headerDate,this._options,this._classes);this._activeDate=t,this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}previousMonth(){const t=St(this._activeDate,-1);this._activeDate=t;const e=Po(t,this._headerDate,this._options,this._classes);this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}nextYear(){const t=kt(this._activeDate,1);this._activeDate=t,this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes);const e=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes);this.datesContainer.innerHTML=e}previousYear(){const t=kt(this._activeDate,-1);this._activeDate=t,this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes);const e=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes);this.datesContainer.innerHTML=e}nextYears(){const t=kt(this._activeDate,24);this._activeDate=t;const e=Bo(t,this._selectedYear,this._options,ie,Vo,this._classes);this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}previousYears(){const t=kt(this._activeDate,-24);this._activeDate=t;const e=Bo(t,this._selectedYear,this._options,ie,Vo,this._classes);this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}_asyncChangeView(t){setTimeout(()=>{this._changeView(t)},0)}_changeView(t){this._view=t,this.datesContainer.blur(),t==="days"&&(this.datesContainer.innerHTML=Po(this._activeDate,this._headerDate,this._options,this._classes)),t==="months"&&(this.datesContainer.innerHTML=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes)),t==="years"&&(this.datesContainer.innerHTML=Bo(this._activeDate,this._selectedYear,this._options,ie,Vo,this._classes)),this.datesContainer.focus(),this._updateViewControlsAndAttributes(t),this._updateControlsDisabledState()}_updateViewControlsAndAttributes(t){t==="days"&&(this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToMultiYearViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevMonthLabel),this.nextButton.setAttribute("aria-label",this._options.nextMonthLabel)),t==="months"&&(this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToDayViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevYearLabel),this.nextButton.setAttribute("aria-label",this._options.nextYearLabel)),t==="years"&&(this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToMonthViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevMultiYearLabel),this.nextButton.setAttribute("aria-label",this._options.nextMultiYearLabel))}_updateControlsDisabledState(){xy(this._options.disableFuture,this._activeDate,this._view,ie,this._options.min,this._options.max,this.lastYearInView,this.firstYearInView)?this.nextButton.disabled=!0:this.nextButton.disabled=!1,Cy(this._options.disablePast,this._activeDate,this._view,ie,this._options.min,this._options.max,this.lastYearInView,this.firstYearInView)?this.previousButton.disabled=!0:this.previousButton.disabled=!1}_handleUserInput(t){const e=this._getDelimeters(this._options.format),i=this._parseDate(t,this._options.format,e);yy(i)?(this._activeDate=i,this._selectedDate=i,this._selectedYear=K(i),this._selectedMonth=ot(i),this._headerDate=i):(this._activeDate=new Date,this._selectedDate=null,this._selectedMonth=null,this._selectedYear=null,this._headerDate=null,this._headerMonth=null,this._headerYear=null)}_getDelimeters(t){return t.match(/[^(dmy)]{1,}/g)}_parseDate(t,e,i){let n;i[0]!==i[1]?n=i[0]+i[1]:n=i[0];const o=new RegExp(`[${n}]`),r=t.split(o),a=e.split(o),l=e.indexOf("mmm")!==-1,c=[];for(let b=0;b<a.length;b++)a[b].indexOf("yy")!==-1&&(c[0]={value:r[b],format:a[b]}),a[b].indexOf("m")!==-1&&(c[1]={value:r[b],format:a[b]}),a[b].indexOf("d")!==-1&&a[b].length<=2&&(c[2]={value:r[b],format:a[b]});let h;e.indexOf("mmmm")!==-1?h=this._options.monthsFull:h=this._options.monthsShort;const d=Number(c[0].value),u=l?this.getMonthNumberByMonthName(c[1].value,h):Number(c[1].value)-1,p=Number(c[2].value);return ee(d,u,p)}getMonthNumberByMonthName(t,e){return e.findIndex(i=>i===t)}static getInstance(t){return O.getData(t,Wo)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zT=({format24:s,okLabel:t,cancelLabel:e,headID:i,footerID:n,bodyID:o,pickerID:r,clearLabel:a,inline:l,showClearBtn:c,amLabel:h,pmLabel:d},u)=>{const p=`<div id='${r}' class='${u.timepickerWrapper}' data-te-timepicker-wrapper>
+      <div class="${u.timepickerContainer}">
+        <div class="${u.timepickerElements}" data-te-timepicker-elements-wrapper>
+        <div id='${i}' class='${u.timepickerHead}' style='padding-right:${s?50:10}px'>
+        <div class='${u.timepickerHeadContent}'>
+            <div class="${u.timepickerCurrentWrapper}">
+              <span class="${u.timepickerCurrentButtonWrapper}">
+                <button type='button' class='${u.timepickerCurrentButton}' tabindex="0" data-te-timepicker-active data-te-timepicker-current data-te-timepicker-hour data-te-ripple-init>21</button>
+              </span>
+              <button type='button' class='${u.timepickerDot}' disabled>:</button>
+            <span class="${u.timepickerCurrentButtonWrapper}">
+              <button type='button' class='${u.timepickerCurrentButton}' tabindex="0" data-te-timepicker-current data-te-timepicker-minute data-te-ripple-init>21</button>
+            </span>
+            </div>
+            ${s?"":`<div class="${u.timepickerModeWrapper}">
+                  <button type='button' class="${u.timepickerModeAm}" tabindex="0" data-te-timepicker-am data-te-timepicker-hour-mode data-te-ripple-init>${h}</button>
+                  <button class="${u.timepickerModePm}" tabindex="0" data-te-timepicker-pm data-te-timepicker-hour-mode data-te-ripple-init>${d}</button>
+                </div>`}
+        </div>
+      </div>
+      ${l?"":`<div id='${o}' class='${u.timepickerClockWrapper}' data-te-timepicker-clock-wrapper>
+            <div class='${u.timepickerClock}' data-te-timepicker-clock>
+              <span class='${u.timepickerMiddleDot}' data-te-timepicker-middle-dot></span>
+              <div class='${u.timepickerHandPointer}' data-te-timepicker-hand-pointer>
+                <div class='${u.timepickerPointerCircle}' data-te-timepicker-circle></div>
+              </div>
+              ${s?'<div class="'+u.timepickerClockInner+'" data-te-timepicker-clock-inner></div>':""}
+            </div>
+          </div>`}
+    </div>
+    <div id='${n}' class='${u.timepickerFooterWrapper}'>
+      <div class="${u.timepickerFooter}">
+        ${c?`<button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-clear tabindex="0" data-te-ripple-init>${a}</button>`:""}
+        <button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-cancel tabindex="0" data-te-ripple-init>${e}</button>
+        <button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>
+      </div>
+    </div>
+  </div>
+</div>`,f=`<div id='${r}' class='${u.timepickerInlineWrapper}' data-te-timepicker-wrapper>
+        <div class="${u.timepickerInlineContainer}">
+          <div class="${u.timepickerInlineElements}" data-te-timepicker-elements-wrapper>
+          <div id='${i}' class='${u.timepickerInlineHead}'
+          style='padding-right:10px'>
+          <div class='${u.timepickerInlineHeadContent}'>
+              <div class="${u.timepickerCurrentWrapper}">
+                <span class="${u.timepickerInlineHourWrapper}" data-te-timepicker-inline-hour-icons>
+                  <span class="${u.timepickerInlineIconUp}" data-te-timepicker-icon-up data-te-timepicker-icon-inline-hour>
+                    <span class="${u.timepickerInlineIconSvg}">
+                      <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                      <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 15.75l7.5-7.5 7.5 7.5" />
+                      </svg>   
+                    </span>
+                  </span>
+                  <button type='button' class='${u.timepickerInlineCurrentButton}' data-te-timepicker-hour data-te-timepicker-current data-te-timepicker-current-inline tabindex="0" data-te-ripple-init>21</button>
+                  <span class="${u.timepickerInlineIconDown}" data-te-timepicker-icon-inline-hour data-te-timepicker-icon-down>
+                    <span class="${u.timepickerInlineIconSvg}">
+                      <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                      <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+                      </svg>  
+                    </span>
+                  </span>
+                </span>
+                <button type='button' class='${u.timepickerInlineDot}' data-te-timepicker-current-inline disabled>:</button>
+              <span class="${u.timepickerCurrentMinuteWrapper}">
+                <span class="${u.timepickerInlineIconUp}" data-te-timepicker-icon-up data-te-timepicker-icon-inline-minute>
+                  <span class="${u.timepickerInlineIconSvg}">
+                    <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                    <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 15.75l7.5-7.5 7.5 7.5" />
+                    </svg>
+                  </span>
+                </span>
+                <button type='button' class='${u.timepickerInlineCurrentButton}' data-te-timepicker-minute data-te-timepicker-current data-te-timepicker-current-inline tabindex="0" data-te-ripple-init>21</button>
+                <span class="${u.timepickerInlineIconDown}" data-te-timepicker-icon-inline-minute data-te-timepicker-icon-down>
+                  <span class="${u.timepickerInlineIconSvg}">
+                    <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                    <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+                    </svg> 
+                  </span>
+                </span>
+              </span>
+              </div>
+              ${s?"":`<div class="${u.timepickerInlineModeWrapper}">
+                      <button type='button' class="${u.timepickerInlineModeAm}" data-te-timepicker-am data-te-timepicker-hour-mode tabindex="0" data-te-ripple-init>${h}</button>
+                      <button class="${u.timepickerInlineModePm}" data-te-timepicker-hour-mode data-te-timepicker-pm tabindex="0" data-te-ripple-init>${d}</button>
+                      <button type='button' class='${u.timepickerInlineSubmitButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>
+                    </div>`}
+              ${s?`<button class='${u.timepickerInlineSubmitButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>`:""}
+          </div>
+        </div>
+      </div>
+    </div>
+</div>`;return l?f:p},jT=(s,t,e)=>{const{iconSVG:i}=s;return`
+  <button id="${t}" tabindex="0" type="button" class="${e.timepickerToggleButton}" data-te-toggle="timepicker" data-te-timepicker-toggle-button data-te-timepicker-icon>
+    ${i}
+  </button>
+`},Ko="data-te-timepicker-disabled",Uo="data-te-timepicker-active",Ai=s=>{if(s==="")return;let t,e,i,n;return _u(s)?(t=s.getHours(),n=t,e=s.getMinutes(),t%=12,n===0&&t===0&&(i="AM"),t=t||12,i===void 0&&(i=Number(n)>=12?"PM":"AM"),e=e<10?`0${e}`:e):([t,e,i]=j(s,!1),n=t,t%=12,n===0&&t===0&&(i="AM"),t=t||12,i===void 0&&(i=Number(n)>=12?"PM":"AM")),{hours:t,minutes:e,amOrPm:i}},_u=s=>s&&Object.prototype.toString.call(s)==="[object Date]"&&!Number.isNaN(s),gu=s=>{if(s==="")return;let t,e;return _u(s)?(t=s.getHours(),e=s.getMinutes()):[t,e]=j(s,!1),e=Number(e)<10?`0${Number(e)}`:e,{hours:t,minutes:e}},YT=(s,t,e)=>_.on(document,s,t,({target:i})=>{if(i.hasAttribute(Uo))return;document.querySelectorAll(t).forEach(o=>{o.hasAttribute(Uo)&&(g.removeClass(o,e.opacity),o.removeAttribute(Uo))}),g.addClass(i,e.opacity),i.setAttribute(Uo,"")}),mu=({clientX:s,clientY:t,touches:e},i,n=!1)=>{const{left:o,top:r}=i.getBoundingClientRect();let a={};return!n||!e?a={x:s-o,y:t-r}:n&&Object.keys(e).length>0&&(a={x:e[0].clientX-o,y:e[0].clientY-r}),a},Xo=()=>navigator.maxTouchPoints&&navigator.maxTouchPoints>2&&/MacIntel/.test(navigator.platform)||/Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent),j=(s,t=!0)=>t?s.value.replace(/:/gi," ").split(" "):s.replace(/:/gi," ").split(" "),bu=(s,t)=>{const[e,i,n]=j(s,!1),[o,r,a]=j(t,!1);return n==="PM"&&a==="AM"||n===a&&e>o||i>r},vu=()=>{const s=new Date,t=s.getHours(),e=s.getMinutes();return`${t}:${e<10?`0${e}`:e}`},Ke=(s,t,e)=>{if(!t)return s;let i=vu();return e&&(i=`${Ai(i).hours}:${Ai(i).minutes} ${Ai(i).amOrPm}`),(s!==""&&bu(i,s)||s==="")&&(s=i),s},Ue=(s,t,e)=>{if(!t)return s;let i=vu();return e&&(i=`${Ai(i).hours}:${Ai(i).minutes} ${Ai(i).amOrPm}`),(s!==""&&!bu(i,s)||s==="")&&(s=i),s},KT=({format12:s,maxTime:t,minTime:e,disablePast:i,disableFuture:n},o,r)=>{const a=j(o)[1];e=Ke(e,i,s),t=Ue(t,n,s);const[l,c,h]=j(t,!1),[d,u,p]=j(e,!1);if(h!==void 0||p!==void 0)return[r,a];if(!(l!==""&&d===""&&Number(r)>Number(l))&&!(l===""&&d!==""&&c===void 0&&u!==""&&Number(r)<Number(d)))return[r,a]},yu=(s,t,e,i)=>{s.forEach(n=>{t=t==="12"&&i?"0":t,(n.textContent==="00"||Number(n.textContent==="12"&&i?"0":n.textContent)>t)&&(g.addClass(n,e.tipsDisabled),n.setAttribute(Ko,""))})},Tu=(s,t,e,i)=>{s.forEach(n=>{t=t==="12"&&i?"0":t,n.textContent!=="00"&&Number(n.textContent==="12"&&i?"0":n.textContent)<Number(t)&&(g.addClass(n,e.tipsDisabled),n.setAttribute(Ko,""))})},Eu=(s,t,e,i)=>{if(t==="12"||t==="24")return;const n=e?12:24;return i==="max"?(Number(s)===n?0:Number(s))>Number(t):(Number(s)===n?0:Number(s))<Number(t)},UT=(s,t,e,i,n,o)=>{s.forEach(r=>{(Eu(i,e,o,"max")||Number(r.textContent)>t&&Number(i)===Number(e))&&(g.addClass(r,n.tipsDisabled),r.setAttribute(Ko,""))})},XT=(s,t,e,i,n,o)=>{s.forEach(r=>{(Eu(i,e,o,"min")||Number(r.textContent)<t&&Number(i)===Number(e))&&(g.addClass(r,n.tipsDisabled),r.setAttribute(Ko,""))})},GT=s=>s.startsWith("0")?Number(s.slice(1)):Number(s),Zs="timepicker",W=`data-te-${Zs}`,xu="[data-te-toggle]",Go=`te.${Zs}`,fe=`.${Go}`,_e=".data-api",Cu=`click${fe}${_e}`,qo=`keydown${fe}${_e}`,Au=`mousedown${fe}${_e}`,wu=`mouseup${fe}${_e}`,ku=`mousemove${fe}${_e}`,Su=`mouseleave${fe}${_e}`,Ou=`mouseover${fe}${_e}`,Iu=`touchmove${fe}${_e}`,Du=`touchend${fe}${_e}`,Mu=`touchstart${fe}${_e}`,qT=`[${W}-am]`,ZT=`[${W}-pm]`,QT=`[${W}-format24]`,Zo=`[${W}-current]`,Qo=`[${W}-hour-mode]`,JT=`[${W}-toggle-button]`,Cl=`${W}-cancel`,Lu=`${W}-clear`,Al=`${W}-submit`,tE=`${W}-icon`,wl=`${W}-icon-up`,kl=`${W}-icon-down`,eE=`${W}-icon-inline-hour`,iE=`${W}-icon-inline-minute`,$u=`${W}-inline-hour-icons`,sE=`${W}-current-inline`,nE="readonly",oE=`${W}-invalid-feedback`,Sl=`${W}-is-invalid`,Xe=`${W}-disabled`,J=`${W}-active`,rE=`${W}-input`,wi=`${W}-clock`,Qs=`${W}-clock-inner`,Ol=`${W}-wrapper`,Ru=`${W}-clock-wrapper`,Jo=`${W}-hour`,Il=`${W}-minute`,tr=`${W}-tips-element`,_t=`${W}-tips-hours`,xt=`${W}-tips-minutes`,Bt=`${W}-tips-inner`,er=`${W}-tips-inner-element`,Pu=`${W}-middle-dot`,Dl=`${W}-hand-pointer`,Ml=`${W}-circle`,Nu=`${W}-modal`,aE={appendValidationInfo:!0,bodyID:"",cancelLabel:"Cancel",clearLabel:"Clear",closeModalOnBackdropClick:!0,closeModalOnMinutesClick:!1,container:"body",defaultTime:"",disabled:!1,disablePast:!1,disableFuture:!1,enableValidation:!0,focusInputAfterApprove:!1,footerID:"",format12:!0,format24:!1,headID:"",increment:!1,inline:!1,invalidLabel:"Invalid Time Format",maxTime:"",minTime:"",modalID:"",okLabel:"Ok",overflowHidden:!0,pickerID:"",readOnly:!1,showClearBtn:!0,switchHoursToMinutesOnClick:!0,iconSVG:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z" />
+</svg>`,withIcon:!0,pmLabel:"PM",amLabel:"AM",animations:!0},lE={appendValidationInfo:"boolean",bodyID:"string",cancelLabel:"string",clearLabel:"string",closeModalOnBackdropClick:"boolean",closeModalOnMinutesClick:"boolean",container:"string",disabled:"boolean",disablePast:"boolean",disableFuture:"boolean",enableValidation:"boolean",footerID:"string",format12:"boolean",format24:"boolean",headID:"string",increment:"boolean",inline:"boolean",invalidLabel:"string",modalID:"string",okLabel:"string",overflowHidden:"boolean",pickerID:"string",readOnly:"boolean",showClearBtn:"boolean",switchHoursToMinutesOnClick:"boolean",defaultTime:"(string|date|number)",iconSVG:"string",withIcon:"boolean",pmLabel:"string",amLabel:"string",animations:"boolean"},cE={tips:"absolute rounded-[100%] w-[32px] h-[32px] text-center cursor-pointer text-[1.1rem] rounded-[100%] bg-transparent flex justify-center items-center font-light focus:outline-none selection:bg-transparent",tipsActive:"text-white bg-[#3b71ca] font-normal",tipsDisabled:"text-[#b3afaf] pointer-events-none bg-transparent",transform:"transition-[transform,height] ease-in-out duration-[400ms]",modal:"z-[1065]",clockAnimation:"animate-[show-up-clock_350ms_linear]",opacity:"!opacity-100",timepickerWrapper:"touch-none opacity-100 z-[1065] inset-0 bg-[#00000066] h-full flex items-center justify-center flex-col fixed",timepickerContainer:"flex items-center justify-center flex-col max-h-[calc(100%-64px)] overflow-y-auto shadow-[0_10px_15px_-3px_rgba(0,0,0,0.07),0_4px_6px_-2px_rgba(0,0,0,0.05)] min-[320px]:max-[825px]:landscape:rounded-lg",timepickerElements:"flex flex-col min-w-[310px] min-h-[325px] bg-white rounded-t-[0.6rem] min-[320px]:max-[825px]:landscape:!flex-row min-[320px]:max-[825px]:landscape:min-w-[auto] min-[320px]:max-[825px]:landscape:min-h-[auto] min-[320px]:max-[825px]:landscape:overflow-y-auto justify-around",timepickerHead:"bg-[#3b71ca] dark:bg-zinc-700 h-[100px] rounded-t-lg pr-[24px] pl-[50px] py-[10px] min-[320px]:max-[825px]:landscape:rounded-tr-none min-[320px]:max-[825px]:landscape:rounded-bl-none min-[320px]:max-[825px]:landscape:p-[10px] min-[320px]:max-[825px]:landscape:pr-[10px] min-[320px]:max-[825px]:landscape:h-auto min-[320px]:max-[825px]:landscape:min-h-[305px] flex flex-row items-center justify-center",timepickerHeadContent:"min-[320px]:max-[825px]:landscape:flex-col flex w-full justify-evenly",timepickerCurrentWrapper:"[direction:ltr] rtl:[direction:rtl]",timepickerCurrentButtonWrapper:"relative h-full",timepickerCurrentButton:"text-[3.75rem] font-light leading-[1.2] tracking-[-0.00833em] text-white opacity-[.54] border-none bg-transparent p-0 min-[320px]:max-[825px]:landscape:text-5xl min-[320px]:max-[825px]:landscape:font-normal cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none ",timepickerDot:"font-light leading-[1.2] tracking-[-0.00833em] text-[3.75rem] opacity-[.54] border-none bg-transparent p-0 text-white min-[320px]:max-[825px]:landscape:text-[3rem] min-[320px]:max-[825px]:landscape:font-normal",timepickerModeWrapper:"flex flex-col justify-center text-[18px] text-[#ffffff8a] min-[320px]:max-[825px]:landscape:!justify-around min-[320px]:max-[825px]:landscape:!flex-row",timepickerModeAm:"p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none",timepickerModePm:"p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none",timepickerClockWrapper:"min-w-[310px] max-w-[325px] min-h-[305px] overflow-x-hidden h-full flex justify-center flex-col items-center dark:bg-zinc-500",timepickerClock:"relative rounded-[100%] w-[260px] h-[260px] cursor-default my-0 mx-auto bg-[#00000012] dark:bg-zinc-600/50",timepickerMiddleDot:"top-1/2 left-1/2 w-[6px] h-[6px] -translate-y-1/2 -translate-x-1/2 rounded-[50%] bg-[#3b71ca] absolute",timepickerHandPointer:"bg-[#3b71ca] bottom-1/2 h-2/5 left-[calc(50%-1px)] rtl:!left-auto origin-[center_bottom_0] rtl:!origin-[50%_50%_0] w-[2px] absolute",timepickerPointerCircle:"-top-[21px] -left-[15px] w-[4px] border-[14px] border-solid border-[#3b71ca] h-[4px] box-content rounded-[100%] absolute",timepickerClockInner:"absolute top-1/2 left-1/2 -translate-y-1/2 -translate-x-1/2 w-[160px] h-[160px] rounded-[100%]",timepickerFooterWrapper:"rounded-b-lg flex justify-between items-center w-full h-[56px] px-[12px] bg-white dark:bg-zinc-500",timepickerFooter:"w-full flex justify-between",timepickerFooterButton:"text-[0.8rem] min-w-[64px] box-border font-medium leading-[40px] rounded-[10px] tracking-[0.1rem] uppercase text-[#3b71ca] dark:text-white border-none bg-transparent transition-[background-color,box-shadow,border] duration-[250ms] ease-[cubic-bezier(0.4,0,0.2,1)] delay-[0ms] outline-none py-0 px-[10px] h-[40px] mb-[10px] hover:bg-[#00000014] focus:bg-[#00000014] focus:outline-none",timepickerInlineWrapper:"touch-none opacity-100 z-[1065] inset-0 bg-[#00000066] h-full flex items-center justify-center flex-col rounded-lg",timepickerInlineContainer:"flex items-center justify-center flex-col max-h-[calc(100%-64px)] overflow-y-auto shadow-[0_10px_15px_-3px_rgba(0,0,0,0.07),0_4px_6px_-2px_rgba(0,0,0,0.05)]",timepickerInlineElements:"flex flex-col min-h-[auto] min-w-[310px] bg-white rounded-[0.6rem] min-[320px]:max-[825px]:landscape:!flex-row min-[320px]:max-[825px]:landscape:rounded-bl-lg min-[320px]:max-[825px]:landscape:min-w-[auto] min-[320px]:max-[825px]:landscape::min-h-[auto] min-[320px]:max-[825px]:landscape:overflow-y-auto justify-around",timepickerInlineHead:"bg-[#3b71ca] dark:bg-zinc-700 h-[100px] rounded-t-lg min-[320px]:max-[825px]:landscape:rounded-tr-none min-[320px]:max-[825px]:landscape:rounded-bl-none min-[320px]:max-[825px]:landscape:p-[10px] min-[320px]:max-[825px]:landscape:pr-[10px] min-[320px]:max-[825px]:landscape:h-auto min-[320px]:max-[825px]:landscape:min-h-[305px] flex flex-row items-center justify-center p-0 rounded-b-lg",timepickerInlineHeadContent:"min-[320px]:max-[825px]:landscape:flex-col flex w-full justify-evenly items-center",timepickerInlineHourWrapper:"relative h-full !opacity-100",timepickerCurrentMinuteWrapper:"relative h-full",timepickerInlineIconUp:"absolute text-white -top-[35px] opacity-0 hover:opacity-100 transition-all duration-200 ease-[ease] cursor-pointer -translate-x-1/2 -translate-y-1/2 left-1/2 w-[30px] h-[30px] flex justify-center items-center",timepickerInlineIconSvg:"h-4 w-4",timepickerInlineCurrentButton:"font-light leading-[1.2] tracking-[-0.00833em] text-white border-none bg-transparent p-0 min-[320px]:max-[825px]:landscape:text-5xl min-[320px]:max-[825px]:landscape:font-normal !opacity-100 cursor-pointer focus:bg-[#00000026] hover:outline-none focus:outline-none text-[2.5rem] hover:bg-[unset]",timepickerInlineIconDown:"absolute text-white -bottom-[47px] opacity-0 hover:opacity-100 transition-all duration-200 ease-[ease] cursor-pointer -translate-x-1/2 -translate-y-1/2 left-1/2 w-[30px] h-[30px] flex justify-center items-center",timepickerInlineDot:"font-light leading-[1.2] tracking-[-0.00833em] opacity-[.54] border-none bg-transparent p-0 text-white min-[320px]:max-[825px]:landscape:text-[3rem] min-[320px]:max-[825px]:landscape:font-normal text-[2.5rem]",timepickerInlineModeWrapper:"flex justify-center text-[18px] text-[#ffffff8a] min-[320px]:max-[825px]:landscape:!justify-around min-[320px]:max-[825px]:landscape:!flex-row",timepickerInlineModeAm:"hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer mr-2 ml-6",timepickerInlineModePm:"hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer",timepickerInlineSubmitButton:"hover:bg-[#00000014] focus:bg-[#00000014] focus:outline-none text-[0.8rem] box-border font-medium leading-[40px] tracking-[.1rem] uppercase border-none bg-transparent [transition:background-color_250ms_cubic-bezier(0.4,0,0.2,1)_0ms,box-shadow_250ms_cubic-bezier(0.4,0,0.2,1)_0ms,border_250ms_cubic-bezier(0.4,0,0.2,1)_0ms] outline-none rounded-[100%] h-[48px] min-w-[48px] inline-block ml-[30px] text-white py-1 px-2 mb-0",timepickerToggleButton:"h-4 w-4 ml-auto absolute outline-none border-none bg-transparent right-1.5 top-1/2 -translate-x-1/2 -translate-y-1/2 transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)] cursor-pointer hover:text-[#3b71ca] focus:text-[#3b71ca] dark:hover:text-[#3b71ca] dark:focus:text-[#3b71ca] dark:text-white"},hE={tips:"string",tipsActive:"string",tipsDisabled:"string",transform:"string",modal:"string",clockAnimation:"string",opacity:"string",timepickerWrapper:"string",timepickerContainer:"string",timepickerElements:"string",timepickerHead:"string",timepickerHeadContent:"string",timepickerCurrentWrapper:"string",timepickerCurrentButtonWrapper:"string",timepickerCurrentButton:"string",timepickerDot:"string",timepickerModeWrapper:"string",timepickerModeAm:"string",timepickerModePm:"string",timepickerClockWrapper:"string",timepickerClock:"string",timepickerMiddleDot:"string",timepickerHandPointer:"string",timepickerPointerCircle:"string",timepickerClockInner:"string",timepickerFooterWrapper:"string",timepickerFooterButton:"string",timepickerInlineWrapper:"string",timepickerInlineContainer:"string",timepickerInlineElements:"string",timepickerInlineHead:"string",timepickerInlineHeadContent:"string",timepickerInlineHourWrapper:"string",timepickerCurrentMinuteWrapper:"string",timepickerInlineIconUp:"string",timepickerInlineIconSvg:"string",timepickerInlineCurrentButton:"string",timepickerInlineIconDown:"string",timepickerInlineDot:"string",timepickerInlineModeWrapper:"string",timepickerInlineModeAm:"string",timepickerInlineModePm:"string",timepickerInlineSubmitButton:"string",timepickerToggleButton:"string"};class Ll{constructor(t,e={},i){ke(this,"_toggleAmPm",t=>{t==="PM"?(this._isPmEnabled=!0,this._isAmEnabled=!1):t==="AM"&&(this._isPmEnabled=!1,this._isAmEnabled=!0)});ke(this,"_toggleBackgroundColorCircle",t=>{if(this._modal.querySelector(`${t}[${J}]`)!==null){g.addStyle(this._circle,{backgroundColor:"#1976d2"});return}g.addStyle(this._circle,{backgroundColor:"transparent"})});ke(this,"_toggleClassActive",(t,{textContent:e},i)=>{const n=[...t].find(o=>Number(o)===Number(e));return i.forEach(o=>{if(!o.hasAttribute(Xe)){if(o.textContent===n){g.addClass(o,this._classes.tipsActive),o.setAttribute(J,"");return}g.removeClass(o,this._classes.tipsActive),o.removeAttribute(J)}})});ke(this,"_makeMinutesDegrees",(t,e)=>{const{increment:i}=this._options;return t<0?(e=Math.round(360+t/6)%60,t=360+Math.round(t/6)*6):(e=Math.round(t/6)%60,t=Math.round(t/6)*6),i&&(t=Math.round(t/30)*30,e=Math.round(t/6)*6/6,e===60&&(e="00")),t>=360&&(t=0),{degrees:t,minute:e,addDegrees:i?30:6}});ke(this,"_makeHourDegrees",(t,e,i)=>{if(t)return this._hasTargetInnerClass(t)?e<0?(i=Math.round(360+e/30)%24,e=360+e):(i=Math.round(e/30)+12,i===12&&(i="00")):e<0?(i=Math.round(360+e/30)%12,e=360+e):(i=Math.round(e/30)%12,(i===0||i>12)&&(i=12)),e>=360&&(e=0),{degrees:e,hour:i,addDegrees:30}});ke(this,"_makeInnerHoursDegrees",(t,e)=>(t<0?(e=Math.round(360+t/30)%24,t=360+t):(e=Math.round(t/30)+12,e===12&&(e="00")),{degrees:t,hour:e,addDegrees:30}));ke(this,"_getAppendClock",(t=[],e=`[${wi}]`,i)=>{let{minTime:n,maxTime:o}=this._options;const{inline:r,format12:a,disablePast:l,disableFuture:c}=this._options;n=Ke(n,l,a),o=Ue(o,c,a);const[h,d,u]=j(o,!1),[p,f,b]=j(n,!1);!r&&a&&this._isInvalidTimeFormat&&!this._AM.hasAttribute(J)&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,""));const v=m.findOne(e),y=360/t.length;function T(A){return A*(Math.PI/180)}if(v===null)return;const x=(v.offsetWidth-32)/2,E=(v.offsetHeight-32)/2,C=x-4;setTimeout(()=>{let A;a&&(A=m.findOne(`${Qo}[${J}]`).textContent),this._handleDisablingTipsMinTime(A,b,f,p),this._handleDisablingTipsMaxTime(A,u,d,h)},0),[...t].forEach((A,w)=>{const S=T(w*y),k=$("span"),D=$("span");D.innerHTML=A,g.addClass(k,this._classes.tips),k.setAttribute(i,"");const I=k.offsetWidth,M=k.offsetHeight;return g.addStyle(k,{left:`${x+Math.sin(S)*C-I}px`,bottom:`${E+Math.cos(S)*C-M}px`}),t.includes("05")&&k.setAttribute(xt,""),t.includes("13")?D.setAttribute(er,""):D.setAttribute(tr,""),k.appendChild(D),v.appendChild(k)})});this._element=t,this._element&&O.setData(t,Go,this),this._document=document,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._currentTime=null,this._toggleButtonId=bt("timepicker-toggle-"),this.hoursArray=["12","1","2","3","4","5","6","7","8","9","10","11"],this.innerHours=["00","13","14","15","16","17","18","19","20","21","22","23"],this.minutesArray=["00","05","10","15","20","25","30","35","40","45","50","55"],this.input=m.findOne("input",this._element),this.dataWithIcon=t.dataset.withIcon,this.dataToggle=t.dataset.toggle,this.customIcon=m.findOne(JT,this._element),this._checkToggleButton(),this.inputFormatShow=m.findOne(QT,this._element),this.inputFormat=this.inputFormatShow===null?"":Object.values(this.inputFormatShow.dataset)[0],this.elementToggle=m.findOne(xu,this._element),this.toggleElement=Object.values(t.querySelector(xu).dataset)[0],this._hour=null,this._minutes=null,this._AM=null,this._PM=null,this._wrapper=null,this._modal=null,this._hand=null,this._circle=null,this._focusTrap=null,this._popper=null,this._interval=null,this._timeoutInterval=null,this._inputValue=this._options.defaultTime!==""?this._options.defaultTime:this.input.value,this._options.format24&&(this._options.format12=!1,this._currentTime=gu(this._inputValue)),this._options.format12&&(this._options.format24=!1,this._currentTime=Ai(this._inputValue)),this._options.readOnly&&this.input.setAttribute(nE,!0),this.inputFormat==="true"&&this.inputFormat!==""&&(this._options.format12=!1,this._options.format24=!0,this._currentTime=gu(this._inputValue)),this._animations=!window.matchMedia("(prefers-reduced-motion: reduce)").matches&&this._options.animations,this.init(),this._isHours=!0,this._isMinutes=!1,this._isInvalidTimeFormat=!1,this._isMouseMove=!1,this._isInner=!1,this._isAmEnabled=!1,this._isPmEnabled=!1,this._options.format12&&!this._options.defaultTime&&(this._isPmEnabled=!0),this._objWithDataOnChange={degrees:null},this._scrollBar=new Qi}static get NAME(){return Zs}init(){const{format12:t,format24:e,enableValidation:i}=this._options;let n,o,r;if(this.input.setAttribute(rE,""),this._currentTime!==void 0){const{hours:a,minutes:l,amOrPm:c}=this._currentTime;n=Number(a)<10?0:"",o=`${n}${Number(a)}:${l}`,r=c,t?this.input.value=`${o} ${r}`:e&&(this.input.value=`${o}`)}else n="",o="",r="",this.input.value="";this.input.value.length>0&&this.input.value!==""&&(this.input.setAttribute(J,""),_.trigger(this.input,"input")),!(this._options===null&&this._element===null)&&(i&&this._getValidate("keydown change blur focus"),this._handleOpen(),this._listenToToggleKeydown())}dispose(){this._removeModal(),this._element!==null&&O.removeData(this._element,Go),setTimeout(()=>{this._element=null,this._options=null,this.input=null,this._focusTrap=null},350),_.off(this._element,"click",`[data-te-toggle='${this.toggleElement}']`),_.off(this._element,"keydown",`[data-te-toggle='${this.toggleElement}']`)}update(t={}){this._options=this._getConfig({...this._options,...t})}_checkToggleButton(){this.customIcon===null&&(this.dataWithIcon!==void 0&&(this._options.withIcon=null,this.dataWithIcon==="true"&&this._appendToggleButton(this._options)),this._options.withIcon&&this._appendToggleButton(this._options))}_appendToggleButton(){const t=jT(this._options,this._toggleButtonId,this._classes);this.input.insertAdjacentHTML("afterend",t)}_getDomElements(){this._hour=m.findOne(`[${Jo}]`),this._minutes=m.findOne(`[${Il}]`),this._AM=m.findOne(qT),this._PM=m.findOne(ZT),this._wrapper=m.findOne(`[${Ol}]`),this._modal=m.findOne(`[${Nu}]`),this._hand=m.findOne(`[${Dl}]`),this._circle=m.findOne(`[${Ml}]`),this._clock=m.findOne(`[${wi}]`),this._clockInner=m.findOne(`[${Qs}]`)}_handlerMaxMinHoursOptions(t,e,i,n,o,r){if(!e&&!i)return!0;const{format24:a,format12:l,disablePast:c,disableFuture:h}=this._options,{_isAmEnabled:d,_isPmEnabled:u}=this,p=r.keyCode,f=r.target.hasAttribute(Qs)||r.target.hasAttribute(Bt)||r.target.hasAttribute(er);i=Ke(i,c,l),e=Ue(e,h,l),typeof e!="number"&&(e=j(e,!1)[0]);const b=e!==""?e*30:"",v=i!==""?i*30:"";t<0&&(t=360+t),t=t===360?0:t;const y=()=>{const w=document.querySelectorAll(`[${tr}]`),S=document.querySelectorAll(`[${er}]`),k=GT(this._hour.innerText);let D,I,M;return p===ut?I=1:p===ht&&(I=-1),k===12&&p===ut?M=1:k===0&&p===ut?M=13:k===0&&p===ht?M=23:k===13&&p===ht?M=0:k===1&&p===ht?M=12:M=k+I,w.forEach(P=>{Number(P.textContent)===M&&(D=P)}),S.forEach(P=>{Number(P.textContent)===M&&(D=P)}),!D.parentElement.hasAttribute(Xe)},T=()=>{const w=i!==""&&i>12?(i-12)*30:"",S=e!==""&&e>12?(e-12)*30:"";if(!(w&&t<w||S&&t>S||e&&e<12))return!0};if(a&&r.type!=="keydown"&&f)return T();if(r.type==="keydown")return y();const x=!o||o==="PM"&&u||i!==""&&o==="AM"&&d,E=!n||n==="PM"&&u||e!==""&&n==="AM"&&d,C=()=>{const w=v===360&&l?0:v;if(i){if(o==="PM"&&d||x&&t<w)return}else return!0;return!0},A=()=>{const w=b===360&&l?0:b;if(e){if(n==="AM"&&u||E&&t>w)return}else return!0;return!0};return C()&&A()}_handleKeyboard(){_.on(this._document,qo,"",t=>{let e,i,n;const{increment:o,maxTime:r,minTime:a,format12:l,disablePast:c,disableFuture:h}=this._options;let d=j(a,!1)[0],u=j(r,!1)[0];const p=j(a,!1)[2],f=j(r,!1)[2];d=Ke(d,c,l),u=Ue(u,h,l),typeof u!="number"&&(u=j(u,!1)[0]);const b=m.findOne(`[${xt}]`)===null,v=m.findOne(`[${Bt}]`)!==null,y=Number(this._hand.style.transform.replace(/[^\d-]/g,"")),T=m.find(`[${xt}]`,this._modal),x=m.find(`[${_t}]`,this._modal),E=m.find(`[${Bt}]`,this._modal);let C=this._makeHourDegrees(t.target,y,e).hour;const{degrees:A,addDegrees:w}=this._makeHourDegrees(t.target,y,e);let{minute:S,degrees:k}=this._makeMinutesDegrees(y,i);const D=this._makeMinutesDegrees(y,i).addDegrees;let{hour:I}=this._makeInnerHoursDegrees(y,n);if(t.keyCode===xi){const M=m.findOne(`[${Cl}]`,this._modal);_.trigger(M,"click")}else if(b){if(v&&(t.keyCode===hs&&(this._isInner=!1,g.addStyle(this._hand,{height:"calc(40% + 1px)"}),this._hour.textContent=this._setHourOrMinute(C>12?1:C),this._toggleClassActive(this.hoursArray,this._hour,x),this._toggleClassActive(this.innerHours,this._hour,E)),t.keyCode===cs&&(this._isInner=!0,g.addStyle(this._hand,{height:"21.5%"}),this._hour.textContent=this._setHourOrMinute(I>=24||I==="00"?0:I),this._toggleClassActive(this.innerHours,this._hour,E),this._toggleClassActive(this.hoursArray,this._hour-1,x))),t.keyCode===ut){if(!this._handlerMaxMinHoursOptions(A+30,u,d,f,p,t))return;g.addStyle(this._hand,{transform:`rotateZ(${A+w}deg)`}),this._isInner?(I+=1,I===24?I=0:(I===25||I==="001")&&(I=13),this._hour.textContent=this._setHourOrMinute(I),this._toggleClassActive(this.innerHours,this._hour,E)):(C+=1,this._hour.textContent=this._setHourOrMinute(C>12?1:C),this._toggleClassActive(this.hoursArray,this._hour,x))}if(t.keyCode===ht){if(!this._handlerMaxMinHoursOptions(A-30,u,d,f,p,t))return;g.addStyle(this._hand,{transform:`rotateZ(${A-w}deg)`}),this._isInner?(I-=1,I===12?I=0:I===-1&&(I=23),this._hour.textContent=this._setHourOrMinute(I),this._toggleClassActive(this.innerHours,this._hour,E)):(C-=1,this._hour.textContent=this._setHourOrMinute(C===0?12:C),this._toggleClassActive(this.hoursArray,this._hour,x))}}else t.keyCode===ut&&(k+=D,g.addStyle(this._hand,{transform:`rotateZ(${k}deg)`}),S+=1,o&&(S+=4,S==="0014"&&(S=5)),this._minutes.textContent=this._setHourOrMinute(S>59?0:S),this._toggleClassActive(this.minutesArray,this._minutes,T),this._toggleBackgroundColorCircle(`[${xt}]`)),t.keyCode===ht&&(k-=D,g.addStyle(this._hand,{transform:`rotateZ(${k}deg)`}),o?S-=5:S-=1,S===-1?S=59:S===-5&&(S=55),this._minutes.textContent=this._setHourOrMinute(S),this._toggleClassActive(this.minutesArray,this._minutes,T),this._toggleBackgroundColorCircle(`[${xt}]`))})}_setActiveClassToTipsOnOpen(t,...e){if(!this._isInvalidTimeFormat)if(this._options.format24){const i=m.find(`[${_t}]`,this._modal),n=m.find(`[${Bt}]`,this._modal);this._addActiveClassToTip(i,t),this._addActiveClassToTip(n,t)}else{[...e].filter(n=>(n.toLowerCase()==="pm"?(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,"")):n.toLowerCase()==="am"?(g.addClass(this._AM,this._classes.opacity),this._AM.setAttribute(J,"")):(g.removeClass(this._AM,this._classes.opacity),g.removeClass(this._PM,this._classes.opacity),this._AM.removeAttribute(J),this._PM.removeAttribute(J)),n));const i=m.find(`[${_t}]`,this._modal);this._addActiveClassToTip(i,t)}}_setTipsAndTimesDependOnInputValue(t,e){const{inline:i,format12:n}=this._options;if(this._isInvalidTimeFormat)this._hour.textContent="12",this._minutes.textContent="00",i||g.addStyle(this._hand,{transform:"rotateZ(0deg)"}),n&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,""));else{const o=t>12?t*30-360:t*30;this._hour.textContent=t,this._minutes.textContent=e,i||(g.addStyle(this._hand,{transform:`rotateZ(${o}deg)`}),g.addStyle(this._circle,{backgroundColor:"#1976d2"}),(Number(t)>12||t==="00")&&g.addStyle(this._hand,{height:"21.5%"}))}}_listenToToggleKeydown(){_.on(this._element,"keydown",`[data-te-toggle='${this.toggleElement}']`,t=>{t.keyCode===Et&&(t.preventDefault(),_.trigger(this.elementToggle,"click"))})}_handleOpen(){const t=this._getContainer();ct.on(this._element,"click",`[data-te-toggle='${this.toggleElement}']`,e=>{if(this._options===null)return;const i=g.getDataAttribute(this.input,"toggle")!==null?200:0;setTimeout(()=>{g.addStyle(this.elementToggle,{pointerEvents:"none"}),this.elementToggle.blur();let n;j(this.input)[0]===""?n=["12","00","PM"]:n=j(this.input);const{modalID:o,inline:r,format12:a}=this._options,[l,c,h]=n,d=$("div");if((Number(l)>12||l==="00")&&(this._isInner=!0),this.input.blur(),e.target.blur(),d.innerHTML=zT(this._options,this._classes),g.addClass(d,this._classes.modal),d.setAttribute(Nu,""),d.setAttribute("role","dialog"),d.setAttribute("tabIndex","-1"),d.setAttribute("id",o),r?(this._popper=Fe(this.input,d,{placement:"bottom-start"}),t.appendChild(d)):(t.appendChild(d),this._scrollBar.hide()),this._getDomElements(),this._animations?this._toggleBackdropAnimation():g.addClass(this._wrapper,this._classes.opacity),this._setActiveClassToTipsOnOpen(l,c,h),this._appendTimes(),this._setActiveClassToTipsOnOpen(l,c,h),this._setTipsAndTimesDependOnInputValue(l,c),this.input.value===""){const u=m.find(`[${_t}]`,this._modal);a&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,"")),this._hour.textContent="12",this._minutes.textContent="00",this._addActiveClassToTip(u,Number(this._hour.textContent))}if(this._handleSwitchTimeMode(),this._handleOkButton(),this._handleClose(),r)this._handleHoverInlineBtn(),this._handleDocumentClickInline(),this._handleInlineClicks();else{this._handleSwitchHourMinute(),this._handleClockClick(),this._handleKeyboard();const u=document.querySelector(`${Zo}[${J}]`);g.addClass(u,this._classes.opacity),g.addStyle(this._hour,{pointerEvents:"none"}),g.addStyle(this._minutes,{pointerEvents:""})}this._focusTrap=new Vs(this._wrapper,{event:"keydown",condition:({key:u})=>u==="Tab"}),this._focusTrap.trap()},i)})}_handleInlineClicks(){let t,e;const i=p=>{let f=p;return f>59?f=0:f<0&&(f=59),f},n=p=>{let f=p;return this._options.format24?(f>24?f=1:f<0&&(f=23),f>23&&(f=0)):(f>12?f=1:f<1&&(f=12),f>12&&(f=1)),f},o=p=>{const f=n(p);this._hour.textContent=this._setHourOrMinute(f)},r=p=>{const f=i(p);this._minutes.textContent=this._setHourOrMinute(f)},a=()=>{t=n(t)+1,o(t)},l=()=>{e=i(e)+1,r(e)},c=()=>{t=n(t)-1,o(t)},h=()=>{e=i(e)-1,r(e)},d=()=>{clearInterval(this._interval),clearTimeout(this._timeoutInterval)},u=p=>{d(),this._timeoutInterval=setTimeout(()=>{this._interval=setInterval(p,100)},500)};ct.on(this._modal,"click mousedown mouseup touchstart touchend contextmenu",`[${wl}], [${kl}]`,p=>{t=Number(this._hour.textContent),e=Number(this._minutes.textContent);const{target:f,type:b}=p,v=b==="mousedown"||b==="touchstart";f.closest(`[${wl}]`)?f.closest(`[${wl}]`).parentNode.hasAttribute($u)?v?u(a):b==="mouseup"||b==="touchend"||b==="contextmenu"?d():a():v?u(l):b==="mouseup"||b==="touchend"||b==="contextmenu"?d():l():f.closest(`[${kl}]`)&&(f.closest(`[${kl}]`).parentNode.hasAttribute($u)?v?u(c):b==="mouseup"||b==="touchend"?d():c():v?u(h):b==="mouseup"||b==="touchend"?d():h())}),_.on(window,qo,p=>{const f=p.code,b=document.activeElement.hasAttribute(Jo),v=document.activeElement.hasAttribute(Il),y=document.activeElement===document.body;switch(t=Number(this._hour.textContent),e=Number(this._minutes.textContent),f){case"ArrowUp":p.preventDefault(),y||b?(this._hour.focus(),a()):v&&l();break;case"ArrowDown":p.preventDefault(),y||b?(this._hour.focus(),c()):v&&h();break}})}_handleClose(){_.on(this._modal,"click",`[${Ol}], [${Cl}], [${Lu}]`,({target:t})=>{const{closeModalOnBackdropClick:e}=this._options,i=()=>{var n;g.addStyle(this.elementToggle,{pointerEvents:"auto"}),this._animations&&this._toggleBackdropAnimation(!0),this._removeModal(),(n=this._focusTrap)==null||n.disable(),this._focusTrap=null,this.elementToggle?this.elementToggle.focus():this.input&&this.input.focus()};if(t.hasAttribute(Lu)){this._toggleAmPm("PM"),this.input.value="",this.input.removeAttribute(J);let n;j(this.input)[0]===""?n=["12","00","PM"]:n=j(this.input);const[o,r,a]=n;this._setTipsAndTimesDependOnInputValue("12","00"),this._setActiveClassToTipsOnOpen(o,r,a),this._hour.click()}else(t.hasAttribute(Cl)||t.hasAttribute(Al)||t.hasAttribute(Ol)&&e)&&i()})}showValueInput(){return this.input.value}_handleOkButton(){ct.on(this._modal,"click",`[${Al}]`,()=>{let{maxTime:t,minTime:e}=this._options;const{format12:i,format24:n,readOnly:o,focusInputAfterApprove:r,disablePast:a,disableFuture:l}=this._options,c=this._document.querySelector(`${Qo}[${J}]`),h=`${this._hour.textContent}:${this._minutes.textContent}`,d=Number(this._hour.textContent),u=d===12&&i?0:d,p=Number(this._minutes.textContent);e=Ke(e,a,i),t=Ue(t,l,i);let[f,b,v]=j(t,!1),[y,T,x]=j(e,!1);y=y==="12"&&i?"00":y,f=f==="12"&&i?"00":f;const E=u<Number(y),C=u>Number(f);let A=!0;c&&(A=v===c.textContent);let w=!0;c&&(w=x===c.textContent);const S=p>b&&u===Number(f),k=p<T&&u===Number(y);if(this.input.setAttribute(J,""),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),t!==""){if(A&&(C||S))return;if(v==="AM"&&c.textContent==="PM")return}e!==""&&(w&&(E||k)||x==="PM"&&c.textContent==="AM")||KT(this._options,this.input,this._hour.textContent)!==void 0&&(this._isInvalidTimeFormat&&this.input.removeAttribute(Sl),!o&&r&&this.input.focus(),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),n?this.input.value=h:c===null?this.input.value=`${h} PM`:this.input.value=`${h} ${c.textContent}`,this._animations&&this._toggleBackdropAnimation(!0),this._removeModal(),_.trigger(this.input,"input.te.timepicker"),_.trigger(this.input,"input"))})}_handleHoverInlineBtn(){ct.on(this._modal,"mouseover mouseleave",`[${sE}]`,({type:t,target:e})=>{const i=m.find(`[${eE}]`,this._modal),n=m.find(`[${iE}]`,this._modal),o=(l,c)=>l.forEach(h=>{if(c){g.addClass(h,this._classes.opacity),h.setAttribute(J,"");return}g.removeClass(h,this._classes.opacity),h.removeAttribute(J)}),a=e.hasAttribute(Jo)?i:n;o(a,t==="mouseover")})}_handleDocumentClickInline(){_.on(document,Cu,({target:t})=>{if(this._modal&&!this._modal.contains(t)&&!t.hasAttribute(tE)){if(clearInterval(this._interval),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),this._removeModal(),!this._animations)return;this._toggleBackdropAnimation(!0)}})}_handleSwitchHourMinute(){YT("click",Zo,this._classes),_.on(this._modal,"click",Zo,()=>{const{format24:t}=this._options,e=m.find(Zo,this._modal),i=m.find(`[${xt}]`,this._modal),n=m.find(`[${_t}]`,this._modal),o=m.find(`[${Bt}]`,this._modal),r=Number(this._hour.textContent),a=Number(this._minutes.textContent),l=(c,h)=>{n.forEach(u=>u.remove()),i.forEach(u=>u.remove()),g.addClass(this._hand,this._classes.transform),setTimeout(()=>{g.removeClass(this._hand,this._classes.transform)},401),this._getAppendClock(c,`[${wi}]`,h);const d=()=>{const u=m.find(`[${_t}]`,this._modal),p=m.find(`[${xt}]`,this._modal);this._addActiveClassToTip(u,r),this._addActiveClassToTip(p,a)};if(!t)setTimeout(()=>{d()},401);else{const u=m.find(`[${Bt}]`,this._modal);setTimeout(()=>{this._addActiveClassToTip(u,r),d()},401)}};e.forEach(c=>{c.hasAttribute(J)&&(c.hasAttribute(Il)?(g.addClass(this._hand,this._classes.transform),g.addStyle(this._hand,{transform:`rotateZ(${this._minutes.textContent*6}deg)`,height:"calc(40% + 1px)"}),t&&o.length>0&&o.forEach(h=>h.remove()),l(this.minutesArray,xt),this._hour.style.pointerEvents="",this._minutes.style.pointerEvents="none"):c.hasAttribute(Jo)&&(g.addStyle(this._hand,{transform:`rotateZ(${this._hour.textContent*30}deg)`}),Number(this._hour.textContent)>12?(g.addStyle(this._hand,{transform:`rotateZ(${this._hour.textContent*30-360}deg)`,height:"21.5%"}),Number(this._hour.textContent)>12&&g.addStyle(this._hand,{height:"21.5%"})):g.addStyle(this._hand,{height:"calc(40% + 1px)"}),t&&this._getAppendClock(this.innerHours,`[${Qs}]`,Bt),o.length>0&&o.forEach(h=>h.remove()),l(this.hoursArray,_t),g.addStyle(this._hour,{pointerEvents:"none"}),g.addStyle(this._minutes,{pointerEvents:""})))})})}_handleDisablingTipsMaxTime(t,e,i,n){if(!this._options.maxTime&&!this._options.disableFuture)return;const o=m.find(`[${_t}]`),r=m.find(`[${Bt}]`),a=m.find(`[${xt}]`);if(!e||e===t){yu(r,n,this._classes,this._options.format12),yu(o,n,this._classes,this._options.format12),UT(a,i,n,this._hour.textContent,this._classes,this._options.format12);return}e==="AM"&&t==="PM"&&(o.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}),a.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}))}_handleDisablingTipsMinTime(t,e,i,n){if(!this._options.minTime&&!this._options.disablePast)return;const o=m.find(`[${_t}]`),r=m.find(`[${Bt}]`),a=m.find(`[${xt}]`);!e||e===t?(Tu(o,n,this._classes,this._options.format12),Tu(r,n,this._classes,this._options.format12),XT(a,i,n,this._hour.textContent,this._classes,this._options.format12)):e==="PM"&&t==="AM"&&(o.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}),a.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}))}_handleSwitchTimeMode(){_.on(document,"click",Qo,({target:t})=>{let{maxTime:e,minTime:i}=this._options;const{disablePast:n,disableFuture:o,format12:r}=this._options;i=Ke(i,n,r),e=Ue(e,o,r);const[a,l,c]=j(e,!1),[h,d,u]=j(i,!1),p=m.find(`[${_t}]`),f=m.find(`[${xt}]`);(()=>{p.forEach(v=>{g.removeClass(v,this._classes.tipsDisabled),v.removeAttribute(Xe)}),f.forEach(v=>{g.removeClass(v,this._classes.tipsDisabled),v.removeAttribute(Xe)})})(),this._handleDisablingTipsMinTime(t.textContent,u,d,h),this._handleDisablingTipsMaxTime(t.textContent,c,l,a),this._toggleAmPm(t.textContent),t.hasAttribute(J)||(m.find(Qo).forEach(y=>{y.hasAttribute(J)&&(g.removeClass(y,this._classes.opacity),y.removeAttribute(J))}),g.addClass(t,this._classes.opacity),t.setAttribute(J,""))})}_handleClockClick(){let{maxTime:t,minTime:e}=this._options;const{disablePast:i,disableFuture:n,format12:o}=this._options;e=Ke(e,i,o),t=Ue(t,n,o);const r=j(t,!1)[2],a=j(e,!1)[2],l=j(t,!1)[0],c=j(e,!1)[0],h=m.findOne(`[${Ru}]`);ct.on(document,`${Au} ${wu} ${ku} ${Su} ${Ou} ${Mu} ${Iu} ${Du}`,"",d=>{Xo()||d.preventDefault();const{type:u,target:p}=d,{closeModalOnMinutesClick:f,switchHoursToMinutesOnClick:b}=this._options,v=m.findOne(`[${xt}]`,this._modal)!==null,y=m.findOne(`[${_t}]`,this._modal)!==null,T=m.findOne(`[${Bt}]`,this._modal)!==null,x=m.find(`[${xt}]`,this._modal),E=mu(d,h),C=h.offsetWidth/2;let A=Math.atan2(E.y-C,E.x-C);if(Xo()){const D=mu(d,h,!0);A=Math.atan2(D.y-C,D.x-C)}let w=null,S=null,k=null;if(u==="mousedown"||u==="mousemove"||u==="touchmove"||u==="touchstart")(u==="mousedown"||u==="touchstart"||u==="touchmove")&&(this._hasTargetInnerClass(p)||p.hasAttribute(Ru)||p.hasAttribute(wi)||p.hasAttribute(xt)||p.hasAttribute(_t)||p.hasAttribute(Ml)||p.hasAttribute(Dl)||p.hasAttribute(Pu)||p.hasAttribute(tr))&&(this._isMouseMove=!0,Xo()&&d.touches&&(w=d.touches[0].clientX,S=d.touches[0].clientY,k=document.elementFromPoint(w,S)));else if(u==="mouseup"||u==="touchend"){if(this._isMouseMove=!1,this._hasTargetInnerClass(p)||p.hasAttribute(wi)||p.hasAttribute(_t)||p.hasAttribute(Ml)||p.hasAttribute(Dl)||p.hasAttribute(Pu)||p.hasAttribute(tr)){if((y||T)&&b){const D=Number(this._hour.textContent)>l||Number(this._hour.textContent)<c;if(this._options.format24&&l!==""&&c!==""&&D)return;if(this._options.format24&&c!==""&&Number(this._hour.textContent)<c)return}_.trigger(this._minutes,"click")}if(v&&f){const D=m.findOne(`[${Al}]`,this._modal);_.trigger(D,"click")}}if(v){let D;const I=Math.trunc(A*180/Math.PI)+90,{degrees:M,minute:P}=this._makeMinutesDegrees(I,D);if(this._handlerMaxMinMinutesOptions(M,P)===void 0)return;const{degrees:X,minute:R}=this._handlerMaxMinMinutesOptions(M,P);if(this._isMouseMove){if(g.addStyle(this._hand,{transform:`rotateZ(${X}deg)`}),R===void 0)return;const z=()=>R>=10||R==="00"?R:`0${R}`;this._minutes.textContent=z(),this._toggleClassActive(this.minutesArray,this._minutes,x),this._toggleBackgroundColorCircle(`[${xt}]`),this._objWithDataOnChange.degreesMinutes=X,this._objWithDataOnChange.minutes=R}}if(y||T){let D,I=Math.trunc(A*180/Math.PI)+90;if(I=Math.round(I/30)*30,g.addStyle(this._circle,{backgroundColor:"#1976d2"}),this._makeHourDegrees(p,I,D)===void 0)return;const M=()=>{if(Xo()&&I&&k){const{degrees:P,hour:X}=this._makeHourDegrees(k,I,D);return this._handleMoveHand(k,X,P)}else{const{degrees:P,hour:X}=this._makeHourDegrees(p,I,D);return this._handleMoveHand(p,X,P)}};this._objWithDataOnChange.degreesHours=I,this._handlerMaxMinHoursOptions(I,l,c,r,a,d)&&M()}d.stopPropagation()})}_hasTargetInnerClass(t){return t.hasAttribute(Qs)||t.hasAttribute(Bt)||t.hasAttribute(er)}_handleMoveHand(t,e,i){const n=m.find(`[${_t}]`,this._modal),o=m.find(`[${Bt}]`,this._modal);this._isMouseMove&&(this._hasTargetInnerClass(t)?g.addStyle(this._hand,{height:"21.5%"}):g.addStyle(this._hand,{height:"calc(40% + 1px)"}),g.addStyle(this._hand,{transform:`rotateZ(${i}deg)`}),this._hour.textContent=e>=10||e==="00"?e:`0${e}`,this._toggleClassActive(this.hoursArray,this._hour,n),this._toggleClassActive(this.innerHours,this._hour,o),this._objWithDataOnChange.hour=e>=10||e==="00"?e:`0${e}`)}_handlerMaxMinMinutesOptions(t,e){let{maxTime:i,minTime:n}=this._options;const{format12:o,increment:r,disablePast:a,disableFuture:l}=this._options;n=Ke(n,a,o),i=Ue(i,l,o);const c=j(i,!1)[1],h=j(n,!1)[1],d=j(i,!1)[0],u=j(n,!1)[0],p=u==="12"&&o?"0":u,f=d==="12"&&o?"0":d,b=j(i,!1)[2],v=j(n,!1)[2],y=c!==""?c*6:"",T=h!==""?h*6:"",x=Number(this._hour.textContent),E=x===12&&o?0:x;if(!b&&!v){if(i!==""&&n!==""){if(Number(f)===E&&t>y||Number(p)===E&&t<T)return t}else if(n!==""&&E<=Number(p)){if(t<=T-6)return t}else if(i!==""&&E>=Number(f)&&t>=y+6)return t}else{if(n!==""){if(v==="PM"&&this._isAmEnabled)return;if(v==="PM"&&this._isPmEnabled){if(E<Number(p))return;if(E<=Number(p)&&t<=T-6)return t}else if(v==="AM"&&this._isAmEnabled){if(E<Number(p))return;if(E<=Number(p)&&t<=T-6)return t}}if(i!==""){if(b==="AM"&&this._isPmEnabled)return;if(b==="PM"&&this._isPmEnabled){if(E>=Number(f)&&t>=y+6)return t}else if(b==="AM"&&this._isAmEnabled&&E>=Number(f)&&t>=y+6)return t}}return r&&(t=Math.round(t/30)*30),t<0?t=360+t:t>=360&&(t=0),{degrees:t,minute:e}}_removeModal(){this._animations?setTimeout(()=>{this._removeModalElements(),this._scrollBar.reset()},300):(this._removeModalElements(),this._scrollBar.reset()),ct.off(this._document,`${Cu} ${qo} ${Au} ${wu} ${ku} ${Su} ${Ou} ${Mu} ${Iu} ${Du}`),_.off(window,qo)}_removeModalElements(){this._modal&&this._modal.remove()}_toggleBackdropAnimation(t=!1){t?this._wrapper.classList.add("animate-[fade-out_350ms_ease-in-out]"):(this._wrapper.classList.add("animate-[fade-in_350ms_ease-in-out]"),this._options.inline||g.addClass(this._clock,this._classes.clockAnimation)),setTimeout(()=>{this._wrapper.classList.remove("animate-[fade-out_350ms_ease-in-out]","animate-[fade-in_350ms_ease-in-out]")},351)}_addActiveClassToTip(t,e){t.forEach(i=>{Number(i.textContent)===Number(e)&&(g.addClass(i,this._classes.tipsActive),i.setAttribute(J,""))})}_setHourOrMinute(t){return t<10?`0${t}`:t}_appendTimes(){const{format24:t}=this._options;if(t){this._getAppendClock(this.hoursArray,`[${wi}]`,_t),this._getAppendClock(this.innerHours,`[${Qs}]`,Bt);return}this._getAppendClock(this.hoursArray,`[${wi}]`,_t)}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...aE,...e,...t},L(Zs,t,lE),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cE,...e,...t},L(Zs,t,hE),t}_getContainer(){return m.findOne(this._options.container)}_getValidate(t){const{format24:e,format12:i,appendValidationInfo:n}=this._options;ct.on(this.input,t,({target:o})=>{if(this._options===null||this.input.value==="")return;const r=/^(0?[1-9]|1[012])(:[0-5]\d) [APap][mM]$/,a=/^([01]\d|2[0-3])(:[0-5]\d)$/,l=r.test(o.value);if(a.test(o.value)!==!0&&e||l!==!0&&i){n&&this.input.setAttribute(Sl,""),g.addStyle(o,{marginBottom:0}),this._isInvalidTimeFormat=!0;return}this.input.removeAttribute(Sl),this._isInvalidTimeFormat=!1;const h=m.findOne(`[${oE}]`);h!==null&&h.remove()})}static getInstance(t){return O.getData(t,Go)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const dE={threshold:10,direction:"all"};let uE=class{constructor(t,e){this._element=t,this._startPosition=null,this._options={...dE,...e}}handleTouchStart(t){this._startPosition=this._getCoordinates(t)}handleTouchMove(t){if(!this._startPosition)return;const e=this._getCoordinates(t),i={x:e.x-this._startPosition.x,y:e.y-this._startPosition.y},n=this._getDirection(i);if(this._options.direction==="all"){if(n.y.value<this._options.threshold&&n.x.value<this._options.threshold)return;const r=n.y.value>n.x.value?n.y.direction:n.x.direction;_.trigger(this._element,`swipe${r}`),_.trigger(this._element,"swipe",{direction:r}),this._startPosition=null;return}const o=this._options.direction==="left"||this._options==="right"?"x":"y";n[o].direction===this._options.direction&&n[o].value>this._options.threshold&&(_.trigger(this._element,`swipe${n[o].direction}`),this._startPosition=null)}handleTouchEnd(){this._startPosition=null}_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection(t){return{x:{direction:t.x<0?"left":"right",value:Math.abs(t.x)},y:{direction:t.y<0?"up":"down",value:Math.abs(t.y)}}}},pE=class{constructor(t,e="swipe",i={}){this._element=t,this._event=e,this.swipe=new uE(t,i),this._touchStartHandler=this._handleTouchStart.bind(this),this._touchMoveHandler=this._handleTouchMove.bind(this),this._touchEndHandler=this._handleTouchEnd.bind(this)}dispose(){this._element.removeEventListener("touchstart",this._touchStartHandler),this._element.removeEventListener("touchmove",this._touchMoveHandler),window.removeEventListener("touchend",this._touchEndHandler)}init(){this._element.addEventListener("touchstart",t=>this._handleTouchStart(t)),this._element.addEventListener("touchmove",t=>this._handleTouchMove(t)),window.addEventListener("touchend",t=>this._handleTouchEnd(t))}_handleTouchStart(t){this[this._event].handleTouchStart(t)}_handleTouchMove(t){this[this._event].handleTouchMove(t)}_handleTouchEnd(t){this[this._event].handleTouchEnd(t)}};const $l="stepper",ir="te.stepper",ds=`.${ir}`,Js=`data-te-${$l}`,tn="horizontal",ge="vertical",fE=`onChangeStep${ds}`,_E=`onChangedStep${ds}`,gE={stepperType:"string",stepperLinear:"boolean",stepperNoEditable:"boolean",stepperActive:"string",stepperCompleted:"string",stepperInvalid:"string",stepperDisabled:"string",stepperVerticalBreakpoint:"number",stepperMobileBreakpoint:"number",stepperMobileBarBreakpoint:"number",stepperAnimationDuration:"number",slideInLeftAnimation:"string",slideOutLeftAnimation:"string",slideInRightAnimation:"string",slideOutRightAnimation:"string"},mE={stepperType:tn,stepperLinear:!1,stepperNoEditable:!1,stepperActive:"",stepperCompleted:"",stepperInvalid:"",stepperDisabled:"",stepperVerticalBreakpoint:0,stepperMobileBreakpoint:0,stepperMobileBarBreakpoint:4,stepperAnimationDuration:800,slideInLeftAnimation:"animate-[slide-in-left_0.8s_both]",slideOutLeftAnimation:"animate-[slide-out-left_0.8s_both]",slideInRightAnimation:"animate-[slide-in-right_0.8s_both]",slideOutRightAnimation:"animate-[slide-out-right_0.8s_both]"},Bu=`mousedown${ds}`,Hu=`keydown${ds}`,bE=`keyup${ds}`,Vu=`resize${ds}`,Ge=`[${Js}-step-ref]`,Ct=`[${Js}-head-ref]`,Fu=`[${Js}-head-text-ref]`,sr=`[${Js}-head-icon-ref]`,At=`[${Js}-content-ref]`;class Wu{constructor(t,e){this._element=t,this._options=this._getConfig(e),this._elementHeight=0,this._steps=m.find(`${Ge}`,this._element),this._currentView="",this._activeStepIndex=0,this._verticalStepperStyles=[],this._timeout=0,this._element&&(O.setData(t,ir,this),this._init())}static get NAME(){return $l}get activeStep(){return this._steps[this._activeStepIndex]}get activeStepIndex(){return this._activeStepIndex}dispose(){this._steps.forEach(t=>{_.off(t,Bu),_.off(t,Hu)}),_.off(window,Vu),O.removeData(this._element,ir),this._element=null}changeStep(t){this._toggleStep(t)}nextStep(){this._toggleStep(this._activeStepIndex+1)}previousStep(){this._toggleStep(this._activeStepIndex-1)}_init(){const t=m.find(`${Ge}`,this._element)[this._activeStepIndex].setAttribute("data-te","active-step"),e=m.find(`${Fu}`,this._element),i=m.find(`${sr}`,this._element);switch(t?(this._activeStepIndex=this._steps.indexOf(t),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperActive),e[this._activeStepIndex].classList.add("font-medium"),i[this._activeStepIndex].classList.add("!bg-primary-100"),i[this._activeStepIndex].classList.add("!text-primary-700")):(e[this._activeStepIndex].classList.add("font-medium"),i[this._activeStepIndex].classList.add("!bg-primary-100"),i[this._activeStepIndex].classList.add("!text-primary-700"),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperActive)),this._bindMouseDown(),this._bindKeysNavigation(),this._options.stepperType){case ge:this._toggleVertical();break;default:this._toggleHorizontal();break}(this._options.stepperVerticalBreakpoint||this._options.stepperMobileBreakpoint)&&this._toggleStepperView(),this._bindResize()}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...mE,...e,...t},L($l,t,gE),t}_bindMouseDown(){this._steps.forEach(t=>{const e=m.findOne(`${Ct}`,t);_.on(e,Bu,i=>{const n=m.parents(i.target,`${Ge}`)[0],o=this._steps.indexOf(n);i.preventDefault(),this._toggleStep(o)})})}_bindResize(){_.on(window,Vu,()=>{this._currentView===ge&&this._setSingleStepHeight(this.activeStep),this._currentView===tn&&this._setHeight(this.activeStep),(this._options.stepperVerticalBreakpoint||this._options.stepperMobileBreakpoint)&&this._toggleStepperView()})}_toggleStepperView(){const t=this._options.stepperVerticalBreakpoint<window.innerWidth,e=this._options.stepperVerticalBreakpoint>window.innerWidth,i=this._options.stepperMobileBreakpoint>window.innerWidth;t&&this._currentView!==tn&&this._toggleHorizontal(),e&&!i&&this._currentView!==ge&&(this._steps.forEach(n=>{const o=m.findOne(`${At}`,n);this._resetStepperHeight(),this._showElement(o)}),this._toggleVertical())}_toggleStep(t){if(this._activeStepIndex===t)return;this._options.stepperNoEditable&&this._toggleDisabled();const e=this._activeStepIndex,i=_.trigger(this.activeStep,fE,{currentStep:this._activeStepIndex,nextStep:t});t>this._activeStepIndex&&i.defaultPrevented||(this._showElement(m.findOne(`${At}`,this._steps[t])),this._toggleActive(t),t>this._activeStepIndex&&this._toggleCompleted(this._activeStepIndex),this._currentView===tn?this._animateHorizontalStep(t):(this._animateVerticalStep(t),this._setSingleStepHeight(this._steps[t])),this._toggleStepTabIndex(m.findOne(`${Ct}`,this.activeStep),m.findOne(`${Ct}`,this._steps[t])),this._activeStepIndex=t,this._steps[this._activeStepIndex].setAttribute("data-te","active-step"),this._steps.forEach((n,o)=>{n[this._activeStepIndex]!==o&&n.removeAttribute("data-te")}),_.trigger(this.activeStep,_E,{currentStep:this._activeStepIndex,prevStep:e}))}_resetStepperHeight(){this._element.style.height=""}_setStepsHeight(){this._steps.forEach(t=>{const e=m.findOne(`${At}`,t),i=window.getComputedStyle(e);this._verticalStepperStyles.push({paddingTop:parseFloat(i.paddingTop),paddingBottom:parseFloat(i.paddingBottom)});const n=e.scrollHeight;e.style.height=`${n}px`})}_setSingleStepHeight(t){const e=m.findOne(`${At}`,t),i=this.activeStep===t,n=this._steps.indexOf(t);let o;i?(e.style.height="",o=e.scrollHeight):o=e.scrollHeight+this._verticalStepperStyles[n].paddingTop+this._verticalStepperStyles[n].paddingBottom,e.style.height=`${o}px`}_toggleVertical(){this._currentView=ge,this._setStepsHeight(),this._hideInactiveSteps()}_toggleHorizontal(){this._currentView=tn,this._setHeight(this.activeStep),this._hideInactiveSteps()}_toggleStepperClass(){m.findOne("[data-te-stepper-type]",this._element)!==null&&this._steps.forEach(e=>{m.findOne(`${At}`,e).classList.remove("!my-0"),m.findOne(`${At}`,e).classList.remove("!py-0"),m.findOne(`${At}`,e).classList.remove("!h-0")})}_toggleStepClass(t,e,i){i&&this._steps[t].classList[e](i)}_bindKeysNavigation(){this._toggleStepTabIndex(!1,m.findOne(`${Ct}`,this.activeStep)),this._steps.forEach(t=>{const e=m.findOne(`${Ct}`,t);_.on(e,Hu,i=>{const n=m.parents(i.currentTarget,`${Ge}`)[0],o=m.next(n,`${Ge}`)[0],r=m.prev(n,`${Ge}`)[0],a=m.findOne(`${Ct}`,n),l=m.findOne(`${Ct}`,this.activeStep);let c=null,h=null;if(o&&(c=m.findOne(`${Ct}`,o)),r&&(h=m.findOne(`${Ct}`,r)),i.keyCode===cs&&this._currentView!==ge&&(h?(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus()):c&&(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus())),i.keyCode===hs&&this._currentView!==ge&&(c?(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus()):h&&(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus())),i.keyCode===ht&&this._currentView===ge&&(i.preventDefault(),c&&(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus())),i.keyCode===ut&&this._currentView===ge&&(i.preventDefault(),h&&(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus())),i.keyCode===Ti){const d=m.findOne(`${Ct}`,this._steps[0]);this._toggleStepTabIndex(a,d),this._toggleOutlineStyles(a,d),d.focus()}if(i.keyCode===Ei){const d=this._steps[this._steps.length-1],u=m.findOne(`${Ct}`,d);this._toggleStepTabIndex(a,u),this._toggleOutlineStyles(a,u),u.focus()}(i.keyCode===Et||i.keyCode===Ho)&&(i.preventDefault(),this.changeStep(this._steps.indexOf(n))),i.keyCode===Ci&&(this._toggleStepTabIndex(a,l),this._toggleOutlineStyles(a,!1),l.focus())}),_.on(e,bE,i=>{const n=m.parents(i.currentTarget,`${Ge}`)[0],o=m.findOne(`${Ct}`,n),r=m.findOne(`${Ct}`,this.activeStep);i.keyCode===Ci&&(this._toggleStepTabIndex(o,r),this._toggleOutlineStyles(!1,r),r.focus())})})}_toggleStepTabIndex(t,e){t&&t.setAttribute("tabIndex",-1),e&&e.setAttribute("tabIndex",0)}_toggleOutlineStyles(t,e){t&&(t.style.outline=""),e&&(e.style.outline="revert")}_toggleDisabled(){const t=m.find(`${Ct}`,this._element),e=m.find(`${sr}`,this._element);t[this._activeStepIndex].classList.add("color-[#858585]"),t[this._activeStepIndex].classList.add("cursor-default"),e[this._activeStepIndex].classList.add("!bg-[#858585]"),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperDisabled)}_toggleActive(t){const e=m.find(`${Fu}`,this._element),i=m.find(`${sr}`,this._element);e[t].classList.add("font-medium"),i[t].classList.add("!bg-primary-100"),i[t].classList.add("!text-primary-700"),i[t].classList.remove("!bg-success-100"),i[t].classList.remove("!text-success-700"),e[this._activeStepIndex].classList.remove("font-medium"),i[this._activeStepIndex].classList.remove("!bg-primary-100"),i[this._activeStepIndex].classList.remove("!text-primary-700"),this._toggleStepClass(t,"add",this._options.stepperActive),this._toggleStepClass(this._activeStepIndex,"remove",this._options.stepperActive)}_toggleCompleted(t){const e=m.find(`${sr}`,this._element);this._options.stepperNoEditable?this._steps[t].classList.add("pointer-events-none"):(e[t].classList.add("!bg-success-100"),e[t].classList.add("!text-success-700")),e[t].classList.remove("!bg-danger-100"),e[t].classList.remove("!text-danger-700"),this._toggleStepClass(t,"add",this._options.stepperCompleted),this._toggleStepClass(t,"remove",this._options.stepperInvalid)}_hideInactiveSteps(){this._steps.forEach(t=>{if(!t.getAttribute("data-te")){const e=m.findOne(`${At}`,t);e.classList.remove("translate-x-[150%]"),this._hideElement(e)}})}_setHeight(t){const e=m.findOne(`${At}`,t),i=getComputedStyle(e),n=m.findOne(`${Ct}`,t),o=getComputedStyle(n),r=e.offsetHeight+parseFloat(i.marginTop)+parseFloat(i.marginBottom),a=n.offsetHeight+parseFloat(o.marginTop)+parseFloat(o.marginBottom);this._element.style.height=`${a+r}px`}_hideElement(t){!m.parents(t,`${Ge}`)[0].getAttribute("data-te")&&this._currentView!==ge?t.style.display="none":(t.classList.add("!my-0"),t.classList.add("!py-0"),t.classList.add("!h-0"))}_showElement(t){this._currentView===ge?(t.classList.remove("!my-0"),t.classList.remove("!py-0"),t.classList.remove("!h-0")):t.style.display="block"}_animateHorizontalStep(t){clearTimeout(this._timeout),this._clearStepsAnimation();const e=t>this._activeStepIndex,i=m.findOne(`${At}`,this._steps[t]),n=m.findOne(`${At}`,this.activeStep);let o,r;this._steps.forEach((a,l)=>{const c=m.findOne(`${At}`,a);l!==t&&l!==this._activeStepIndex&&this._hideElement(c)}),e?(r=this._options.slideOutLeftAnimation,o=this._options.slideInRightAnimation):(r=this._options.slideOutRightAnimation,o=this._options.slideInLeftAnimation),n.classList.add(r),i.classList.add(o),this._setHeight(this._steps[t]),this._timeout=setTimeout(()=>{this._hideElement(n),this._clearStepsAnimation()},this._options.stepperAnimationDuration)}_clearStepsAnimation(){this._steps.forEach(t=>{m.findOne(`${At}`,t).classList.remove(this._options.slideInLeftAnimation,this._options.slideOutLeftAnimation,this._options.slideInRightAnimation,this._options.slideOutRightAnimation)})}_animateVerticalStep(t){const e=m.findOne(`${At}`,this._steps[t]),i=m.findOne(`${At}`,this.activeStep);this._hideElement(i),this._showElement(e)}static getInstance(t){return O.getData(t,ir)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zu="data-te-input-state-active",nr="data-te-input-selected",ju="data-te-input-multiple-active",Yu="[data-te-form-check-input]";class Ku{constructor(t,e,i,n,o,r,a,l,c,h,d){this.id=t,this.nativeOption=e,this.multiple=i,this.value=n,this.label=o,this.selected=r,this.disabled=a,this.hidden=l,this.secondaryText=c,this.groupId=h,this.icon=d,this.node=null,this.active=!1}select(){this.multiple?this._selectMultiple():this._selectSingle()}_selectSingle(){this.selected||(this.node.setAttribute(nr,""),this.node.setAttribute("aria-selected",!0),this.selected=!0,this.nativeOption&&(this.nativeOption.selected=!0))}_selectMultiple(){if(!this.selected){const t=m.findOne(Yu,this.node);t.checked=!0,this.node.setAttribute(nr,""),this.node.setAttribute("aria-selected",!0),this.selected=!0,this.nativeOption&&(this.nativeOption.selected=!0)}}deselect(){this.multiple?this._deselectMultiple():this._deselectSingle()}_deselectSingle(){this.selected&&(this.node.removeAttribute(nr),this.node.setAttribute("aria-selected",!1),this.selected=!1,this.nativeOption&&(this.nativeOption.selected=!1))}_deselectMultiple(){if(this.selected){const t=m.findOne(Yu,this.node);t.checked=!1,this.node.removeAttribute(nr),this.node.setAttribute("aria-selected",!1),this.selected=!1,this.nativeOption&&(this.nativeOption.selected=!1)}}setNode(t){this.node=t}setActiveStyles(){if(!this.active){if(this.multiple){this.node.setAttribute(ju,"");return}this.active=!0,this.node.setAttribute(zu,"")}}removeActiveStyles(){this.active&&(this.active=!1,this.node.removeAttribute(zu)),this.multiple&&this.node.removeAttribute(ju)}}class vE{constructor(t=!1){this._multiple=t,this._selections=[]}select(t){this._multiple?this._selections.push(t):this._selections=[t]}deselect(t){if(this._multiple){const e=this._selections.findIndex(i=>t===i);this._selections.splice(e,1)}else this._selections=[]}clear(){this._selections=[]}get selection(){return this._selections[0]}get selections(){return this._selections}get label(){return this._selections[0]&&this.selection.label}get labels(){return this._selections.map(t=>t.label).join(", ")}get value(){return this.selections[0]&&this.selection.value}get values(){return this._selections.map(t=>t.value)}}function Rl(s){return s.filter(t=>!t.disabled).every(t=>t.selected)}const yE="data-te-select-form-outline-ref",TE="data-te-select-wrapper-ref",EE="data-te-select-input-ref",xE="data-te-select-clear-btn-ref",CE="data-te-select-dropdown-container-ref",AE="data-te-select-dropdown-ref",wE="data-te-select-options-wrapper-ref",kE="data-te-select-options-list-ref",SE="data-te-select-input-filter-ref",Uu="data-te-select-option-ref",OE="data-te-select-option-all-ref",IE="data-te-select-option-text-ref",DE="data-te-form-check-input",ME="data-te-select-option-group-ref",LE="data-te-select-option-group-label-ref",Xu="data-te-select-selected",$E=`
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+</svg>
+`,RE=s=>{s.code==="Tab"||s.code==="Esc"||s.preventDefault()};function or(s,t,e,i,n){t.selectSize==="default"&&g.addClass(s,e),t.selectSize==="sm"&&g.addClass(s,i),t.selectSize==="lg"&&g.addClass(s,n)}function PE(s,t,e,i,n){const o=document.createElement("div");o.setAttribute("id",s),o.setAttribute(TE,"");const r=$("div");r.setAttribute(yE,""),g.addClass(r,i.formOutline);const a=$("input"),l=t.selectFilter?"combobox":"listbox",c=t.multiple?"true":"false",h=t.disabled?"true":"false";a.setAttribute(EE,""),g.addClass(a,i.selectInput),or(a,t,i.selectInputSizeDefault,i.selectInputSizeSm,i.selectInputSizeLg),t.selectFormWhite&&g.addClass(a,i.selectInputWhite),a.setAttribute("type","text"),a.setAttribute("role",l),a.setAttribute("aria-multiselectable",c),a.setAttribute("aria-disabled",h),a.setAttribute("aria-haspopup","true"),a.setAttribute("aria-expanded",!1),t.tabIndex&&a.setAttribute("tabIndex",t.tabIndex),t.disabled&&a.setAttribute("disabled",""),t.selectPlaceholder!==""&&a.setAttribute("placeholder",t.selectPlaceholder),t.selectValidation?(g.addStyle(a,{"pointer-events":"none","caret-color":"transparent"}),g.addStyle(r,{cursor:"pointer"})):a.setAttribute("readonly","true"),t.selectValidation&&(a.setAttribute("required","true"),a.setAttribute("aria-required","true"),a.addEventListener("keydown",RE));const d=$("div");g.addClass(d,i.selectValidationValid);const u=document.createTextNode(`${t.selectValidFeedback}`);d.appendChild(u);const p=$("div");g.addClass(p,i.selectValidationInvalid);const f=document.createTextNode(`${t.selectInvalidFeedback}`);p.appendChild(f);const b=$("span");b.setAttribute(xE,""),g.addClass(b,i.selectClearBtn),or(b,t,i.selectClearBtnDefault,i.selectClearBtnSm,i.selectClearBtnLg),t.selectFormWhite&&g.addClass(b,i.selectClearBtnWhite);const v=document.createTextNode("✕");b.appendChild(v),b.setAttribute("tabindex","0");const y=$("span");return g.addClass(y,i.selectArrow),or(y,t,i.selectArrowDefault,i.selectArrowSm,i.selectArrowLg),t.selectFormWhite&&g.addClass(y,i.selectArrowWhite),y.innerHTML=n||$E,r.appendChild(a),e&&(g.addClass(e,i.selectLabel),or(e,t,i.selectLabelSizeDefault,i.selectLabelSizeSm,i.selectLabelSizeLg),t.selectFormWhite&&g.addClass(e,i.selectLabelWhite),r.appendChild(e)),t.selectValidation&&(r.appendChild(d),r.appendChild(p)),t.selectClearButton&&r.appendChild(b),r.appendChild(y),o.appendChild(r),o}function Gu(s,t,e,i,n,o,r,a){const l=document.createElement("div");l.setAttribute(CE,""),g.addClass(l,a.selectDropdownContainer),l.setAttribute("id",`${s}`),l.style.width=`${e}px`;const c=document.createElement("div");c.setAttribute("tabindex",0),c.setAttribute(AE,""),g.addClass(c,a.dropdown);const h=$("div");h.setAttribute(wE,""),g.addClass(h,a.optionsWrapper),g.addClass(h,a.optionsWrapperScrollbar),h.style.maxHeight=`${i}px`;const d=qu(o,n,t,a);return h.appendChild(d),t.selectFilter&&c.appendChild(NE(t.selectSearchPlaceholder,a)),c.appendChild(h),r&&c.appendChild(r),l.appendChild(c),l}function qu(s,t,e,i){const n=$("div");n.setAttribute(kE,""),g.addClass(n,i.optionsList);let o;return e.multiple?o=HE(s,t,e,i):o=BE(s,e,i),o.forEach(r=>{n.appendChild(r)}),n}function NE(s,t){const e=$("div");g.addClass(e,t.inputGroup);const i=$("input");return i.setAttribute(SE,""),g.addClass(i,t.selectFilterInput),i.placeholder=s,i.setAttribute("role","searchbox"),i.setAttribute("type","text"),e.appendChild(i),e}function BE(s,t,e){return Zu(s,t,e)}function HE(s,t,e,i){let n=null;e.selectAll&&(n=VE(t,s,e,i));const o=Zu(s,e,i);return n?[n,...o]:o}function Zu(s,t,e){const i=[];return s.forEach(n=>{if(Object.prototype.hasOwnProperty.call(n,"options")){const r=jE(n,t,e);i.push(r)}else i.push(Qu(n,t,e))}),i}function VE(s,t,e,i){const n=Rl(t),o=$("div");o.setAttribute(Uu,"");const r=i.selectAllOption||i.selectOption;return g.addClass(o,r),o.setAttribute(OE,""),g.addStyle(o,{height:`${e.selectOptionHeight}px`}),o.setAttribute("role","option"),o.setAttribute("aria-selected",n),n&&o.setAttribute(Xu,""),o.appendChild(Ju(s,e,i)),s.setNode(o),o}function Qu(s,t,e){if(s.node)return s.node;const i=$("div");return i.setAttribute(Uu,""),g.addClass(i,e.selectOption),g.addStyle(i,{height:`${t.selectOptionHeight}px`}),g.setDataAttribute(i,"id",s.id),i.setAttribute("role","option"),i.setAttribute("aria-selected",s.selected),i.setAttribute("aria-disabled",s.disabled),s.selected&&i.setAttribute(Xu,""),s.disabled&&i.setAttribute("data-te-select-option-disabled",!0),s.hidden&&g.addClass(i,"hidden"),i.appendChild(Ju(s,t,e)),s.icon&&i.appendChild(zE(s,e)),s.setNode(i),i}function Ju(s,t,e){const i=$("span");i.setAttribute(IE,""),g.addClass(i,e.selectOptionText);const n=document.createTextNode(s.label);return t.multiple&&i.appendChild(WE(s,e)),i.appendChild(n),(s.secondaryText||typeof s.secondaryText=="number")&&i.appendChild(FE(s.secondaryText,e)),i}function FE(s,t){const e=$("span");g.addClass(e,t.selectOptionSecondaryText);const i=document.createTextNode(s);return e.appendChild(i),e}function WE(s,t){const e=$("input");e.setAttribute("type","checkbox"),g.addClass(e,t.formCheckInput),e.setAttribute(DE,"");const i=$("label");return s.selected&&e.setAttribute("checked",!0),s.disabled&&e.setAttribute("disabled",!0),e.appendChild(i),e}function zE(s,t){const e=$("span"),i=$("img");return g.addClass(i,t.selectOptionIcon),i.src=s.icon,e.appendChild(i),e}function jE(s,t,e){const i=$("div");i.setAttribute(ME,""),g.addClass(i,e.selectOptionGroup),i.setAttribute("role","group"),i.setAttribute("id",s.id),s.hidden&&g.addClass(i,"hidden");const n=$("label");return n.setAttribute(LE,""),g.addClass(n,e.selectOptionGroupLabel),g.addStyle(n,{height:`${t.selectOptionHeight}px`}),n.setAttribute("for",s.id),n.textContent=s.label,i.appendChild(n),s.options.forEach(o=>{i.appendChild(Qu(o,t,e))}),i}function YE(s,t){const e=$("div");return e.textContent=s,g.addClass(e,t.selectLabel),g.addClass(e,t.selectFakeValue),e}const Pl="select",en="te.select",sn=`.${en}`,KE=`close${sn}`,UE=`open${sn}`,tp=`optionSelect${sn}`,ep=`optionDeselect${sn}`,XE=`valueChange${sn}`,GE="change",ip="data-te-select-init",sp="data-te-select-no-results-ref",np="data-te-select-open",wt="data-te-input-state-active",qe="data-te-input-focused",Nl="data-te-input-disabled",qE="data-te-select-option-group-label-ref",ZE="data-te-select-option-all-ref",nn="data-te-select-selected",QE="[data-te-select-label-ref]",op="[data-te-select-input-ref]",JE="[data-te-select-input-filter-ref]",tx="[data-te-select-dropdown-ref]",ex="[data-te-select-options-wrapper-ref]",rp="[data-te-select-options-list-ref]",ix="[data-te-select-option-ref]",sx="[data-te-select-clear-btn-ref]",nx="[data-te-select-custom-content-ref]",ox=`[${sp}]`,ap="[data-te-select-form-outline-ref]",rx="[data-te-select-toggle]",Bl="[data-te-input-notch-ref]",ax={selectAutoSelect:!1,selectContainer:"body",selectClearButton:!1,disabled:!1,selectDisplayedLabels:5,selectFormWhite:!1,multiple:!1,selectOptionsSelectedLabel:"options selected",selectOptionHeight:38,selectAll:!0,selectAllLabel:"Select all",selectSearchPlaceholder:"Search...",selectSize:"default",selectVisibleOptions:5,selectFilter:!1,selectFilterDebounce:300,selectNoResultText:"No results",selectValidation:!1,selectValidFeedback:"Valid",selectInvalidFeedback:"Invalid",selectPlaceholder:""},lx={selectAutoSelect:"boolean",selectContainer:"string",selectClearButton:"boolean",disabled:"boolean",selectDisplayedLabels:"number",selectFormWhite:"boolean",multiple:"boolean",selectOptionsSelectedLabel:"string",selectOptionHeight:"number",selectAll:"boolean",selectAllLabel:"string",selectSearchPlaceholder:"string",selectSize:"string",selectVisibleOptions:"number",selectFilter:"boolean",selectFilterDebounce:"number",selectNoResultText:"string",selectValidation:"boolean",selectValidFeedback:"string",selectInvalidFeedback:"string",selectPlaceholder:"string"},cx={dropdown:"relative outline-none min-w-[100px] m-0 scale-y-[0.8] opacity-0 bg-white shadow-[0_2px_5px_0_rgba(0,0,0,0.16),_0_2px_10px_0_rgba(0,0,0,0.12)] transition duration-200 motion-reduce:transition-none data-[te-select-open]:scale-100 data-[te-select-open]:opacity-100 dark:bg-zinc-700",formCheckInput:"relative float-left mt-[0.15rem] mr-[8px] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 dark:border-neutral-600 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary dark:checked:border-primary checked:bg-primary dark:checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:ml-[0.25rem] checked:after:-mt-px checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-t-0 checked:after:border-l-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:ml-[0.25rem] checked:focus:after:-mt-px checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-t-0 checked:focus:after:border-l-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent",formOutline:"relative",initialized:"hidden",inputGroup:"flex items-center whitespace-nowrap p-2.5 text-center text-base font-normal leading-[1.6] text-gray-700 dark:bg-zinc-800 dark:text-gray-200 dark:placeholder:text-gray-200",noResult:"flex items-center px-4",optionsList:"list-none m-0 p-0",optionsWrapper:"overflow-y-auto",optionsWrapperScrollbar:"[&::-webkit-scrollbar]:w-1 [&::-webkit-scrollbar]:h-1 [&::-webkit-scrollbar-button]:block [&::-webkit-scrollbar-button]:h-0 [&::-webkit-scrollbar-button]:bg-transparent [&::-webkit-scrollbar-track-piece]:bg-transparent [&::-webkit-scrollbar-track-piece]:rounded-none [&::-webkit-scrollbar-track-piece]: [&::-webkit-scrollbar-track-piece]:rounded-l [&::-webkit-scrollbar-thumb]:h-[50px] [&::-webkit-scrollbar-thumb]:bg-[#999] [&::-webkit-scrollbar-thumb]:rounded",selectArrow:"absolute right-3 text-[0.8rem] cursor-pointer peer-focus:text-primary peer-data-[te-input-focused]:text-primary group-data-[te-was-validated]/validation:peer-valid:text-green-600 group-data-[te-was-validated]/validation:peer-invalid:text-[rgb(220,76,100)] w-5 h-5",selectArrowWhite:"text-gray-50 peer-focus:!text-white peer-data-[te-input-focused]:!text-white",selectArrowDefault:"top-2",selectArrowLg:"top-[13px]",selectArrowSm:"top-1",selectClearBtn:"absolute top-2 right-9 text-black cursor-pointer focus:text-primary outline-none dark:text-gray-200",selectClearBtnWhite:"!text-gray-50",selectClearBtnDefault:"top-2 text-base",selectClearBtnLg:"top-[11px] text-base",selectClearBtnSm:"top-1 text-[0.8rem]",selectDropdownContainer:"z-[1070]",selectFakeValue:"transform-none hidden data-[te-input-state-active]:block",selectFilterInput:"relative m-0 block w-full min-w-0 flex-auto rounded border border-solid border-gray-300 bg-transparent bg-clip-padding px-3 py-1.5 text-base font-normal text-gray-700 transition duration-300 ease-in-out motion-reduce:transition-none focus:border-primary focus:text-gray-700 focus:shadow-te-primary focus:outline-none dark:text-gray-200 dark:placeholder:text-gray-200",selectInput:"peer block min-h-[auto] w-full rounded border-0 bg-transparent outline-none transition-all duration-200 ease-linear focus:placeholder:opacity-100 data-[te-input-state-active]:placeholder:opacity-100 motion-reduce:transition-none dark:text-gray-200 dark:placeholder:text-gray-200 [&:not([data-te-input-placeholder-active])]:placeholder:opacity-0 cursor-pointer data-[te-input-disabled]:bg-[#e9ecef] data-[te-input-disabled]:cursor-default group-data-[te-was-validated]/validation:mb-4 dark:data-[te-input-disabled]:bg-zinc-600",selectInputWhite:"!text-gray-50",selectInputSizeDefault:"py-[0.32rem] px-3 leading-[1.6]",selectInputSizeLg:"py-[0.32rem] px-3 leading-[2.15]",selectInputSizeSm:"py-[0.33rem] px-3 text-xs leading-[1.5]",selectLabel:"pointer-events-none absolute top-0 left-3 mb-0 max-w-[90%] origin-[0_0] truncate text-gray-500 transition-all duration-200 ease-out peer-focus:scale-[0.8] peer-focus:text-primary peer-data-[te-input-state-active]:scale-[0.8] motion-reduce:transition-none dark:text-gray-200 dark:peer-focus:text-gray-200 data-[te-input-state-active]:scale-[0.8] dark:peer-focus:text-primary",selectLabelWhite:"!text-gray-50",selectLabelSizeDefault:"pt-[0.37rem] leading-[1.6] peer-focus:-translate-y-[0.9rem] peer-data-[te-input-state-active]:-translate-y-[0.9rem] data-[te-input-state-active]:-translate-y-[0.9rem]",selectLabelSizeLg:"pt-[0.37rem] leading-[2.15] peer-focus:-translate-y-[1.15rem] peer-data-[te-input-state-active]:-translate-y-[1.15rem] data-[te-input-state-active]:-translate-y-[1.15rem]",selectLabelSizeSm:"pt-[0.37rem] text-xs leading-[1.5] peer-focus:-translate-y-[0.75rem] peer-data-[te-input-state-active]:-translate-y-[0.75rem] data-[te-input-state-active]:-translate-y-[0.75rem]",selectOption:"flex flex-row items-center justify-between w-full px-4 truncate text-gray-700 bg-transparent select-none cursor-pointer data-[te-input-multiple-active]:bg-black/5 hover:[&:not([data-te-select-option-disabled])]:bg-black/5 data-[te-input-state-active]:bg-black/5 data-[te-select-option-selected]:data-[te-input-state-active]:bg-black/5 data-[te-select-selected]:data-[te-select-option-disabled]:cursor-default data-[te-select-selected]:data-[te-select-option-disabled]:text-gray-400 data-[te-select-selected]:data-[te-select-option-disabled]:bg-transparent data-[te-select-option-selected]:bg-black/[0.02] data-[te-select-option-disabled]:text-gray-400 data-[te-select-option-disabled]:cursor-default group-data-[te-select-option-group-ref]/opt:pl-7 dark:text-gray-200 dark:hover:[&:not([data-te-select-option-disabled])]:bg-white/30 dark:data-[te-input-state-active]:bg-white/30 dark:data-[te-select-option-selected]:data-[te-input-state-active]:bg-white/30 dark:data-[te-select-option-disabled]:text-gray-400 dark:data-[te-input-multiple-active]:bg-white/30",selectAllOption:"",selectOptionGroup:"group/opt",selectOptionGroupLabel:"flex flex-row items-center w-full px-4 truncate bg-transparent text-black/50 select-none dark:text-gray-300",selectOptionIcon:"w-7 h-7 rounded-full",selectOptionSecondaryText:"block text-[0.8rem] text-gray-500 dark:text-gray-300",selectOptionText:"group",selectValidationValid:"hidden absolute -mt-3 w-auto text-sm text-green-600 cursor-pointer group-data-[te-was-validated]/validation:peer-valid:block",selectValidationInvalid:"hidden absolute -mt-3 w-auto text-sm text-[rgb(220,76,100)] cursor-pointer group-data-[te-was-validated]/validation:peer-invalid:block"},hx={dropdown:"string",formCheckInput:"string",formOutline:"string",initialized:"string",inputGroup:"string",noResult:"string",optionsList:"string",optionsWrapper:"string",optionsWrapperScrollbar:"string",selectArrow:"string",selectArrowDefault:"string",selectArrowLg:"string",selectArrowSm:"string",selectClearBtn:"string",selectClearBtnDefault:"string",selectClearBtnLg:"string",selectClearBtnSm:"string",selectDropdownContainer:"string",selectFakeValue:"string",selectFilterInput:"string",selectInput:"string",selectInputSizeDefault:"string",selectInputSizeLg:"string",selectInputSizeSm:"string",selectLabel:"string",selectLabelSizeDefault:"string",selectLabelSizeLg:"string",selectLabelSizeSm:"string",selectOption:"string",selectAllOption:"string",selectOptionGroup:"string",selectOptionGroupLabel:"string",selectOptionIcon:"string",selectOptionSecondaryText:"string",selectOptionText:"string"};class on{constructor(t,e,i){this._element=t,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._config.selectPlaceholder&&!this._config.multiple&&this._addPlaceholderOption(),this._optionsToRender=this._getOptionsToRender(t),this._plainOptions=this._getPlainOptions(this._optionsToRender),this._filteredOptionsList=null,this._selectionModel=new vE(this.multiple),this._activeOptionIndex=-1,this._activeOption=null,this._wrapperId=bt("select-wrapper-"),this._dropdownContainerId=bt("select-dropdown-container-"),this._selectAllId=bt("select-all-"),this._debounceTimeoutId=null,this._dropdownHeight=this._config.selectOptionHeight*this._config.selectVisibleOptions,this._popper=null,this._input=null,this._label=m.next(this._element,QE)[0],this._notch=null,this._fakeValue=null,this._isFakeValueActive=!1,this._customContent=m.next(t,nx)[0],this._toggleButton=null,this._elementToggle=null,this._wrapper=null,this._inputEl=null,this._dropdownContainer=null,this._container=null,this._selectAllOption=null,this._init(),this._mutationObserver=null,this._isOpen=!1,this._addMutationObserver(),this._element&&O.setData(t,en,this)}static get NAME(){return Pl}get filterInput(){return m.findOne(JE,this._dropdownContainer)}get dropdown(){return m.findOne(tx,this._dropdownContainer)}get optionsList(){return m.findOne(rp,this._dropdownContainer)}get optionsWrapper(){return m.findOne(ex,this._dropdownContainer)}get clearButton(){return m.findOne(sx,this._wrapper)}get options(){return this._filteredOptionsList?this._filteredOptionsList:this._plainOptions}get value(){return this.multiple?this._selectionModel.values:this._selectionModel.value}get multiple(){return this._config.multiple}get hasSelectAll(){return this.multiple&&this._config.selectAll}get hasSelection(){return this._selectionModel.selection||this._selectionModel.selections.length>0}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...ax,...e,...t},this._element.hasAttribute("multiple")&&(t.multiple=!0),this._element.hasAttribute("disabled")&&(t.disabled=!0),this._element.tabIndex&&(t.tabIndex=this._element.getAttribute("tabIndex")),L(Pl,t,lx),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cx,...e,...t},L(Pl,t,hx),t}_addPlaceholderOption(){const t=new Option("","",!0,!0);t.hidden=!0,t.selected=!0,this._element.prepend(t)}_getOptionsToRender(t){const e=[];return t.childNodes.forEach(n=>{if(n.nodeName==="OPTGROUP"){const o={id:bt("group-"),label:n.label,disabled:n.hasAttribute("disabled"),hidden:n.hasAttribute("hidden"),options:[]};n.childNodes.forEach(a=>{a.nodeName==="OPTION"&&o.options.push(this._createOptionObject(a,o))}),e.push(o)}else n.nodeName==="OPTION"&&e.push(this._createOptionObject(n))}),e}_getPlainOptions(t){if(!m.findOne("optgroup",this._element))return t;const i=[];return t.forEach(n=>{Object.prototype.hasOwnProperty.call(n,"options")?n.options.forEach(r=>{i.push(r)}):i.push(n)}),i}_createOptionObject(t,e={}){const i=bt("option-"),n=e.id?e.id:null,o=e.disabled?e.disabled:!1,r=t.selected||t.hasAttribute(nn),a=t.hasAttribute("disabled")||o,l=t.hasAttribute("hidden")||e&&e.hidden,c=this.multiple,h=t.value,d=t.label,u=g.getDataAttribute(t,"selectSecondaryText"),p=g.getDataAttribute(t,"select-icon");return new Ku(i,t,c,h,d,r,a,l,u,n,p)}_getNavigationOptions(){const t=this.options.filter(e=>!e.hidden);return this.hasSelectAll?[this._selectAllOption,...t]:t}_init(){this._renderMaterialWrapper(),this._wrapper=m.findOne(`#${this._wrapperId}`),this._input=m.findOne(op,this._wrapper),this._config.disabled&&this._input.setAttribute(Nl,"");const t=this._config.selectContainer;t==="body"?this._container=document.body:this._container=m.findOne(t),this._initOutlineInput(),this._setDefaultSelections(),this._updateInputValue(),this._appendFakeValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._bindComponentEvents(),this.hasSelectAll&&(this._selectAllOption=this._createSelectAllOption()),this._dropdownContainer=Gu(this._dropdownContainerId,this._config,this._input.offsetWidth,this._dropdownHeight,this._selectAllOption,this._optionsToRender,this._customContent,this._classes),this._setFirstActiveOption(),this._listenToFocusChange()}_renderMaterialWrapper(){const t=PE(this._wrapperId,this._config,this._label,this._classes,this._config.customArrow);this._element.parentNode.insertBefore(t,this._element),g.addClass(this._element,this._classes.initialized),t.appendChild(this._element)}_initOutlineInput(){const t=m.findOne(ap,this._wrapper);new Z(t,{inputFormWhite:this._config.selectFormWhite},this._classes).init(),this._notch=m.findOne(Bl,this._wrapper)}_bindComponentEvents(){this._listenToComponentKeydown(),this._listenToWrapperClick(),this._listenToClearBtnClick(),this._listenToClearBtnKeydown()}_setDefaultSelections(){this.options.forEach(t=>{t.selected&&this._selectionModel.select(t)})}_listenToComponentKeydown(){_.on(this._wrapper,"keydown",this._handleKeydown.bind(this))}_handleKeydown(t){this._isOpen&&!this._config.selectFilter?this._handleOpenKeydown(t):this._handleClosedKeydown(t)}_handleOpenKeydown(t){const e=t.keyCode,i=e===xi||e===ut&&t.altKey||e===Ci;if(e===Ci&&this._config.selectAutoSelect&&!this.multiple&&this._handleAutoSelection(this._activeOption),i){this.close(),this._input.focus();return}switch(e){case ht:this._setNextOptionActive(),this._scrollToOption(this._activeOption);break;case ut:this._setPreviousOptionActive(),this._scrollToOption(this._activeOption);break;case Ti:this._setFirstOptionActive(),this._scrollToOption(this._activeOption);break;case Ei:this._setLastOptionActive(),this._scrollToOption(this._activeOption);break;case Et:t.preventDefault(),this._activeOption&&(this.hasSelectAll&&this._activeOptionIndex===0?this._handleSelectAll():this._handleSelection(this._activeOption));return;default:return}t.preventDefault()}_handleClosedKeydown(t){const e=t.keyCode;if(e===Et&&t.preventDefault(),(e===Et||e===ht&&t.altKey||e===ht&&this.multiple)&&this.open(),this.multiple)switch(e){case ht:this.open();break;case ut:this.open();break;default:return}else switch(e){case ht:this._setNextOptionActive(),this._handleSelection(this._activeOption);break;case ut:this._setPreviousOptionActive(),this._handleSelection(this._activeOption);break;case Ti:this._setFirstOptionActive(),this._handleSelection(this._activeOption);break;case Ei:this._setLastOptionActive(),this._handleSelection(this._activeOption);break;default:return}t.preventDefault()}_scrollToOption(t){if(!t)return;let e;const i=this.options.filter(h=>!h.hidden);this.hasSelectAll?e=i.indexOf(t)+1:e=i.indexOf(t);const n=this._getNumberOfGroupsBeforeOption(e),o=e+n,r=this.optionsWrapper,a=r.offsetHeight,l=this._config.selectOptionHeight,c=r.scrollTop;if(e>-1){const h=o*l,d=h+l>c+a;h<c?r.scrollTop=h:d?r.scrollTop=h-a+l:r.scrollTop=c}}_getNumberOfGroupsBeforeOption(t){const e=this.options.filter(r=>!r.hidden),i=this._optionsToRender.filter(r=>!r.hidden),n=this.hasSelectAll?t-1:t;let o=0;for(let r=0;r<=n;r++)e[r].groupId&&i[o]&&i[o].id&&e[r].groupId===i[o].id&&o++;return o}_setNextOptionActive(){let t=this._activeOptionIndex+1;const e=this._getNavigationOptions();if(e[t]){for(;e[t].disabled;)if(t+=1,!e[t])return;this._updateActiveOption(e[t],t)}}_setPreviousOptionActive(){let t=this._activeOptionIndex-1;const e=this._getNavigationOptions();if(e[t]){for(;e[t].disabled;)if(t-=1,!e[t])return;this._updateActiveOption(e[t],t)}}_setFirstOptionActive(){const e=this._getNavigationOptions();this._updateActiveOption(e[0],0)}_setLastOptionActive(){const t=this._getNavigationOptions(),e=t.length-1;this._updateActiveOption(t[e],e)}_updateActiveOption(t,e){const i=this._activeOption;i&&i.removeActiveStyles(),t.setActiveStyles(),this._activeOptionIndex=e,this._activeOption=t}_listenToWrapperClick(){_.on(this._wrapper,"click",()=>{this.toggle()})}_listenToClearBtnClick(){_.on(this.clearButton,"click",t=>{t.preventDefault(),t.stopPropagation(),this._handleClear()})}_listenToClearBtnKeydown(){_.on(this.clearButton,"keydown",t=>{t.keyCode===Et&&(this._handleClear(),t.preventDefault(),t.stopPropagation())})}_handleClear(){if(this.multiple)this._selectionModel.clear(),this._deselectAllOptions(this.options),this.hasSelectAll&&this._updateSelectAllState();else{const t=this._selectionModel.selection;this._selectionModel.clear(),t.deselect()}this._fakeValue.textContent="",this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._emitValueChangeEvent(null),this._emitNativeChangeEvent()}_listenToOptionsClick(){_.on(this.optionsWrapper,"click",t=>{if(t.target.hasAttribute(qE))return;const i=t.target.nodeName==="DIV"?t.target:m.closest(t.target,ix);if(i.hasAttribute(ZE)){this._handleSelectAll();return}const o=i.dataset.teId,r=this.options.find(a=>a.id===o);r&&!r.disabled&&this._handleSelection(r)})}_handleSelectAll(){this._selectAllOption.selected?(this._deselectAllOptions(this.options),this._selectAllOption.deselect()):(this._selectAllOptions(this.options),this._selectAllOption.select()),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent()}_selectAllOptions(t){t.forEach(e=>{!e.selected&&!e.disabled&&(this._selectionModel.select(e),e.select())})}_deselectAllOptions(t){t.forEach(e=>{e.selected&&!e.disabled&&(this._selectionModel.deselect(e),e.deselect())})}_handleSelection(t){this.multiple?(this._handleMultiSelection(t),this.hasSelectAll&&this._updateSelectAllState()):this._handleSingleSelection(t),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility()}_handleAutoSelection(t){this._singleOptionSelect(t),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility()}_handleSingleSelection(t){this._singleOptionSelect(t),this.close(),this._input.focus()}_singleOptionSelect(t){const e=this._selectionModel.selections[0];e&&e!==t&&(this._selectionModel.deselect(e),e.deselect(),e.node.setAttribute(nn,!1),_.trigger(this._element,ep,{value:e.value})),(!e||e&&t!==e)&&(this._selectionModel.select(t),t.select(),t.node.setAttribute(nn,!0),_.trigger(this._element,tp,{value:t.value}),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent())}_handleMultiSelection(t){t.selected?(this._selectionModel.deselect(t),t.deselect(),t.node.setAttribute(nn,!1),_.trigger(this._element,ep,{value:t.value})):(this._selectionModel.select(t),t.select(),t.node.setAttribute(nn,!0),_.trigger(this._element,tp,{value:t.value})),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent()}_emitValueChangeEvent(t){_.trigger(this._element,XE,{value:t})}_emitNativeChangeEvent(){_.trigger(this._element,GE)}_updateInputValue(){const t=this.multiple?this._selectionModel.labels:this._selectionModel.label;let e;this.multiple&&this._config.selectDisplayedLabels!==-1&&this._selectionModel.selections.length>this._config.selectDisplayedLabels?e=`${this._selectionModel.selections.length} ${this._config.selectOptionsSelectedLabel}`:e=t,!this.multiple&&!this._isSelectionValid(this._selectionModel.selection)?this._input.value="":this._isLabelEmpty(this._selectionModel.selection)?this._input.value=" ":e?this._input.value=e:this.multiple||!this._optionsToRender[0]?this._input.value="":this._input.value=this._optionsToRender[0].label}_isSelectionValid(t){return!(t&&(t.disabled||t.value===""))}_isLabelEmpty(t){return!!(t&&t.label==="")}_appendFakeValue(){if(!this._selectionModel.selection||this._selectionModel._multiple)return;const t=this._selectionModel.selection.label;this._fakeValue=YE(t,this._classes),m.findOne(ap,this._wrapper).appendChild(this._fakeValue)}_updateLabelPosition(){const t=this._element.hasAttribute(ip),e=this._input.value!=="";this._label&&(t&&(e||this._isOpen||this._isFakeValueActive)?(this._label.setAttribute(wt,""),this._notch.setAttribute(wt,"")):(this._label.removeAttribute(wt),this._notch.removeAttribute(wt,"")))}_updateLabelPositionWhileClosing(){this._label&&(this._input.value!==""||this._isFakeValueActive?(this._label.setAttribute(wt,""),this._notch.setAttribute(wt,"")):(this._label.removeAttribute(wt),this._notch.removeAttribute(wt)))}_updateFakeLabelPosition(){this._fakeValue&&(this._input.value===""&&this._fakeValue.innerHTML!==""&&!this._config.selectPlaceholder?(this._isFakeValueActive=!0,this._fakeValue.setAttribute(wt,"")):(this._isFakeValueActive=!1,this._fakeValue.removeAttribute(wt)))}_updateClearButtonVisibility(){if(!this.clearButton)return;this._selectionModel.selection||this._selectionModel.selections.length>0?g.addStyle(this.clearButton,{display:"block"}):g.addStyle(this.clearButton,{display:"none"})}_updateSelectAllState(){const t=this._selectAllOption.selected,e=Rl(this.options);!e&&t?this._selectAllOption.deselect():e&&!t&&this._selectAllOption.select()}toggle(){this._isOpen?this.close():this.open()}open(){const t=this._config.disabled,e=_.trigger(this._element,UE);this._isOpen||t||e.defaultPrevented||(this._openDropdown(),this._updateDropdownWidth(),this._setFirstActiveOption(),this._scrollToOption(this._activeOption),this._config.selectFilter&&(setTimeout(()=>{this.filterInput.focus()},0),this._listenToSelectSearch(),this._listenToDropdownKeydown()),this._listenToOptionsClick(),this._listenToOutsideClick(),this._listenToWindowResize(),this._isOpen=!0,this._updateLabelPosition(),this._setInputActiveStyles())}_openDropdown(){this._popper=Fe(this._input,this._dropdownContainer,{placement:"bottom-start",modifiers:[{name:"offset",options:{offset:[0,1]}}]}),this._container.appendChild(this._dropdownContainer),setTimeout(()=>{this.dropdown.setAttribute(np,"")},0)}_updateDropdownWidth(){const t=this._input.offsetWidth;g.addStyle(this._dropdownContainer,{width:`${t}px`})}_setFirstActiveOption(){const t=this._getNavigationOptions(),e=this._activeOption;e&&e.removeActiveStyles();const i=this.multiple?this._selectionModel.selections[0]:this._selectionModel.selection;i?(this._activeOption=i,i.setActiveStyles(),this._activeOptionIndex=t.findIndex(n=>n===i)):(this._activeOption=null,this._activeOptionIndex=-1)}_setInputActiveStyles(){this._input.setAttribute(qe,""),m.findOne(Bl,this._wrapper).setAttribute(qe,"")}_listenToWindowResize(){_.on(window,"resize",this._handleWindowResize.bind(this))}_handleWindowResize(){this._dropdownContainer&&this._updateDropdownWidth()}_listenToSelectSearch(){this.filterInput.addEventListener("input",t=>{const e=t.target.value,i=this._config.selectFilterDebounce;this._debounceFilter(e,i)})}_debounceFilter(t,e){this._debounceTimeoutId&&clearTimeout(this._debounceTimeoutId),this._debounceTimeoutId=setTimeout(()=>{this._filterOptions(t)},e)}_filterOptions(t){const e=[];this._optionsToRender.forEach(o=>{const r=Object.prototype.hasOwnProperty.call(o,"options"),a=!r&&o.label.toLowerCase().includes(t.toLowerCase()),l={};r&&(l.label=o.label,l.options=this._filter(t,o.options),l.options.length>0&&e.push(l)),a&&e.push(o)});const i=this._config.selectNoResultText!=="",n=e.length!==0;if(n)this._updateOptionsListTemplate(e),this._popper.forceUpdate(),this._filteredOptionsList=this._getPlainOptions(e),this.hasSelectAll&&this._updateSelectAllState(),this._setFirstActiveOption();else if(!n&&i){const o=this._getNoResultTemplate();this.optionsWrapper.innerHTML=o}}_updateOptionsListTemplate(t){const e=m.findOne(rp,this._dropdownContainer)||m.findOne(ox,this._dropdownContainer),i=qu(t,this._selectAllOption,this._config,this._classes);this.optionsWrapper.removeChild(e),this.optionsWrapper.appendChild(i)}_getNoResultTemplate(){return`<div class="${this._classes.noResult}" ${sp} style="height: ${this._config.selectOptionHeight}px">${this._config.selectNoResultText}</div>`}_filter(t,e){const i=t.toLowerCase();return e.filter(n=>n.label.toLowerCase().includes(i))}_listenToDropdownKeydown(){_.on(this.dropdown,"keydown",this._handleOpenKeydown.bind(this))}_listenToOutsideClick(){this._outsideClick=this._handleOutSideClick.bind(this),_.on(document,"click",this._outsideClick)}_listenToFocusChange(t=!0){if(t===!1){_.off(this._input,"focus",()=>this._notch.setAttribute(qe,"")),_.off(this._input,"blur",()=>this._notch.removeAttribute(qe));return}_.on(this._input,"focus",()=>this._notch.setAttribute(qe,"")),_.on(this._input,"blur",()=>this._notch.removeAttribute(qe))}_handleOutSideClick(t){const e=this._wrapper&&this._wrapper.contains(t.target),i=t.target===this._dropdownContainer,n=this._dropdownContainer&&this._dropdownContainer.contains(t.target);let o;this._toggleButton||(this._elementToggle=m.find(rx)),this._elementToggle&&this._elementToggle.forEach(r=>{const a=g.getDataAttribute(r,"select-toggle");(a===this._element.id||this._element.classList.contains(a))&&(this._toggleButton=r,o=this._toggleButton.contains(t.target))}),!e&&!i&&!n&&!o&&this.close()}close(){const t=_.trigger(this._element,KE),e=oo(this._dropdownContainer.children[0]);!this._isOpen||t.defaultPrevented||(this._config.selectFilter&&this.hasSelectAll&&(this._resetFilterState(),this._updateOptionsListTemplate(this._optionsToRender),this._config.multiple&&this._updateSelectAllState()),this._removeDropdownEvents(),this.dropdown.removeAttribute(np),setTimeout(()=>{this._input.removeAttribute(qe),this._input.blur(),m.findOne(Bl,this._wrapper).removeAttribute(qe),this._label&&!this.hasSelection&&(this._label.removeAttribute(wt),this._notch.setAttribute(wt,""),this._input.removeAttribute(wt),this._notch.removeAttribute(wt)),this._updateLabelPositionWhileClosing()},0),setTimeout(()=>{this._container&&this._dropdownContainer.parentNode===this._container&&this._container.removeChild(this._dropdownContainer),this._popper.destroy(),this._isOpen=!1,_.off(this.dropdown,"transitionend")},e))}_resetFilterState(){this.filterInput.value="",this._filteredOptionsList=null}_removeDropdownEvents(){_.off(document,"click",this._outsideClick),this._config.selectFilter&&_.off(this.dropdown,"keydown"),_.off(this.optionsWrapper,"click")}_addMutationObserver(){this._mutationObserver=new MutationObserver(()=>{this._wrapper&&(this._updateSelections(),this._updateDisabledState())}),this._observeMutationObserver()}_updateSelections(){this._optionsToRender=this._getOptionsToRender(this._element),this._plainOptions=this._getPlainOptions(this._optionsToRender),this._selectionModel.clear(),this._setDefaultSelections(),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this.hasSelectAll&&this._updateSelectAllState();const t=this._config.filter&&this.filterInput&&this.filterInput.value;this._isOpen&&!t?(this._updateOptionsListTemplate(this._optionsToRender),this._setFirstActiveOption()):this._isOpen&&t?(this._filterOptions(this.filterInput.value),this._setFirstActiveOption()):this._dropdownContainer=Gu(this._dropdownContainerId,this._config,this._input.offsetWidth,this._dropdownHeight,this._selectAllOption,this._optionsToRender,this._customContent,this._classes)}_updateDisabledState(){const t=m.findOne(op,this._wrapper);this._element.hasAttribute("disabled")?(this._config.disabled=!0,t.setAttribute("disabled",""),t.setAttribute(Nl,"")):(this._config.disabled=!1,t.removeAttribute("disabled"),t.removeAttribute(Nl))}_observeMutationObserver(){this._mutationObserver&&this._mutationObserver.observe(this._element,{attributes:!0,childList:!0,characterData:!0,subtree:!0})}_disconnectMutationObserver(){this.mutationObserver&&(this._mutationObserver.disconnect(),this._mutationObserver=null)}_createSelectAllOption(){const t=this._selectAllId,e=null,i=!0,n="select-all",o=this._config.selectAllLabel,r=Rl(this.options),a=!1,l=!1,c=null,h=null,d=null;return new Ku(t,e,i,n,o,r,a,l,c,h,d)}dispose(){this._removeComponentEvents(),this._destroyMaterialSelect(),this._listenToFocusChange(!1),O.removeData(this._element,en)}_removeComponentEvents(){_.off(this.input,"click"),_.off(this.wrapper,this._handleKeydown.bind(this)),_.off(this.clearButton,"click"),_.off(this.clearButton,"keydown"),_.off(window,"resize",this._handleWindowResize.bind(this))}_destroyMaterialSelect(){this._isOpen&&this.close(),this._destroyMaterialTemplate()}_destroyMaterialTemplate(){const t=this._wrapper.parentNode,e=m.find("label",this._wrapper);t.appendChild(this._element),e.forEach(i=>{t.appendChild(i)}),e.forEach(i=>{i.removeAttribute(wt)}),g.removeClass(this._element,this._classes.initialized),this._element.removeAttribute(ip),t.removeChild(this._wrapper)}setValue(t){this.options.filter(i=>i.selected).forEach(i=>i.nativeOption.selected=!1),Array.isArray(t)?t.forEach(i=>{this._selectByValue(i)}):this._selectByValue(t),this._updateSelections(),this._emitValueChangeEvent(this.value)}_selectByValue(t){const e=this.options.find(i=>i.value===t);return e?(e.nativeOption.selected=!0,!0):!1}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,en);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new on(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,en)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const dx=({inputID:s,labelText:t},e)=>`<div data-te-chips-input-wrapper data-te-input-wrapper-init class="${e.chipsInputWrapper}">
+      <input
+          type="text"
+          class="${e.chipsInput}"
+          id="${s}"
+          placeholder="Example label" />
+        <label
+          for="${s}"
+          class="${e.chipsLabel}"
+          >${t}
+        </label>
+      </div>
+    </div>`,ux=({text:s,iconSVG:t},e)=>`<div data-te-chip-init data-te-ripple-init class="${e.chipElement}">
+    <span data-te-chip-text>${s}</span> 
+      <span data-te-chip-close class="${e.chipCloseIcon}">
+        ${t}
+      </span>
+  </div>`,rr="chip",px=`te.${rr}`,lp="data-te-chip-close",Hl=`[${lp}]`,fx="delete.te.chips",_x="select.te.chip",gx='<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-3 h-3"> <path stroke-linecap="round" stroke-linejoin="round" d="M6 18L18 6M6 6l12 12" /></svg>',mx={text:"string",closeIcon:"boolean",img:"object",iconSVG:"string"},bx={text:"",closeIcon:!1,img:{path:"",alt:""},iconSVG:gx},vx={icon:"float-right pl-[8px] text-[16px] opacity-[.53] cursor-pointer fill-[#afafaf] hover:text-[#8b8b8b] transition-all duration-200 ease-in-out",chipElement:"flex justify-between items-center h-[32px] leading-loose py-[5px] px-[12px] mr-4 my-[5px] text-[13px] font-normal text-[#4f4f4f] cursor-pointer bg-[#eceff1] dark:text-white dark:bg-neutral-600 rounded-[16px] transition-[opacity] duration-300 ease-linear [word-wrap: break-word] shadow-none normal-case hover:!shadow-none active:bg-[#cacfd1] inline-block font-medium leading-normal text-[#4f4f4f] text-center no-underline align-middle cursor-pointer select-none border-[.125rem] border-solid border-transparent py-1.5 px-3 text-xs rounded",chipCloseIcon:"w-4 float-right pl-[8px] text-[16px] opacity-[.53] cursor-pointer fill-[#afafaf] hover:fill-[#8b8b8b] dark:fill-gray-400 dark:hover:fill-gray-100 transition-all duration-200 ease-in-out"},yx={icon:"string",chipElement:"string",chipCloseIcon:"string"};class ki{constructor(t,e={},i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i)}static get NAME(){return rr}init(){this._appendCloseIcon(),this._handleDelete(),this._handleTextChip(),this._handleClickOnChip()}dispose(){this._element=null,this._options=null,_.off(this._element,"click")}appendChip(){const{text:t,closeIcon:e,iconSVG:i}=this._options;return ux({text:t,closeIcon:e,iconSVG:i},this._classes)}_appendCloseIcon(t=this._element){if(!(m.find(Hl,this._element).length>0)&&this._options.closeIcon){const e=$("span");e.classList=this._classes.icon,e.setAttribute(lp),e.innerHTML=this._options.iconSVG,t.insertAdjacentElement("beforeend",e)}}_handleClickOnChip(){_.on(this._element,"click",t=>{const{textContent:e}=t.target,i={};i.tag=e.trim(),_.trigger(_x,{event:t,obj:i})})}_handleDelete(){m.find(Hl,this._element).length!==0&&_.on(this._element,"click",Hl,()=>{_.trigger(this._element,fx),this._element.remove()})}_handleTextChip(){this._element.innerText===""&&(this._element.innerText=this._options.text)}_getConfig(t){const e={...bx,...g.getDataAttributes(this._element),...t};return L(rr,e,mx),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...vx,...e,...t},L(rr,t,yx),t}static getInstance(t){return O.getData(t,px)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const rn="chips",an=`data-te-${rn}`,cp=`te.${rn}`,Tx=`${an}-input-init`,Wt=`${an}-active`,hp=`${an}-initial`,dp=`${an}-placeholder`,Ex=`${an}-input-wrapper`,Vl="data-te-chip-init",up="data-te-chip-close",pp="data-te-chip-text",xx=`[${Wt}]`,Fl=`[${Vl}]`,Cx=`${Fl}${xx}`,Wl=`[${up}]`,Ax=`[${Ex}]`,wx=`[${pp}]`,kx=`[${dp}]`,Sx="data-te-input-notch-leading-ref",Ox="data-te-input-notch-middle-ref",Ix=`[${Sx}]`,Dx=`[${Ox}]`,us="data-te-input-state-active",zl="[data-te-input-notch-ref]",Mx="add.te.chips",Lx="arrowDown.te.chips",$x="arrowLeft.te.chips",Rx="arrowRight.te.chips",Px="arrowUp.te.chips",fp="delete.te.chips",_p="select.te.chips",Nx={inputID:"string",parentSelector:"string",initialValues:"array",editable:"boolean",labelText:"string",inputClasses:"object",inputOptions:"object"},Bx={inputID:bt("chips-input-"),parentSelector:"",initialValues:[{tag:"init1"},{tag:"init2"}],editable:!1,labelText:"Example label",inputClasses:{},inputOptions:{}},Hx={opacity:"opacity-0",inputWrapperPadding:"p-[5px]",transition:"transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)]",contentEditable:"outline-none !border-[3px] !border-solid !border-[#b2b3b4]",chipsInputWrapper:"relative flex items-center flex-wrap transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)]",chipsInput:"peer block min-h-[auto] w-[150px] rounded border-0 bg-transparent py-[0.32rem] px-3 leading-[1.6] outline-none transition-all duration-200 ease-linear focus:placeholder:opacity-100 data-[te-input-state-active]:placeholder:opacity-100 motion-reduce:transition-none dark:text-gray-200 dark:placeholder:text-gray-200 [&:not([data-te-input-placeholder-active])]:placeholder:opacity-0",chipsLabel:"pointer-events-none absolute top-0 left-3 mb-0 max-w-[90%] origin-[0_0] truncate pt-[0.37rem] leading-[1.6] text-gray-500 transition-all duration-200 ease-out peer-focus:-translate-y-[0.9rem] peer-focus:scale-[0.8] peer-focus:text-primary peer-data-[te-input-state-active]:-translate-y-[0.9rem] peer-data-[te-input-state-active]:scale-[0.8] motion-reduce:transition-none dark:text-gray-200 dark:peer-focus:text-gray-200"},Vx={opacity:"string",inputWrapperPadding:"string",transition:"string",contentEditable:"string",chipsInputWrapper:"string",chipsInput:"string",chipsLabel:"string"};class gp extends ki{constructor(e,i={},n){super(e,i);ke(this,"_handleBlurInput",({target:e})=>{e.value.length>0&&this._handleCreateChip(e,e.value),this.allChips.length>0?(e.setAttribute(Wt,""),this.input.setAttribute(us,""),m.findOne(zl,this.input.parentNode).setAttribute(us,""),this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" "))):(e.removeAttribute(Wt),this.input.removeAttribute(us),m.findOne(zl,this.input.parentNode).removeAttribute(us),this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" "))),this.allChips.forEach(i=>i.removeAttribute(Wt))});this._element=e,this._inputInstance=null,this._element&&O.setData(e,cp,this),this._options=this._getConfig(i),this._classes=this._getClasses(n),this.numberClicks=0,this.init()}static get NAME(){return rn}get activeChip(){return m.findOne(Cx,this._element)}get input(){return m.findOne("input",this._element)}get allChips(){return m.find(Fl,this._element)}get chipsInputWrapper(){return m.findOne(Ax,this._element)}init(){this._setChipsClass(),this._appendInputToElement(dp),this._handleInitialValue(),this._handleInputText(),this._handleKeyboard(),this._handleChipsOnSelect(),this._handleEditable(),this._handleChipsFocus(),this._handleClicksOnChips(),this._inputInstance._getLabelWidth(),this._inputInstance._applyNotch()}dispose(){this._element=null,this._options=null}_getNotchData(){this._notchMiddle=m.findOne(Dx,this._element),this._notchLeading=m.findOne(Ix,this._element)}_setChipsClass(){this._element.setAttribute(Tx,"")}_handleDeleteEvents(e){const[i]=this.allChips.slice(-1);if(this.activeChip===null)i.remove(),this._handleEvents(e,fp);else{const n=this.allChips.findIndex(a=>a===this.activeChip),o=this._handleActiveChipAfterRemove(n),r=[];if(this.activeChip===null)return;this.activeChip.remove(),this._handleEvents(e,fp),this.numberClicks=n,o.setAttribute(Wt,""),this.allChips.forEach(a=>{a.hasAttribute(Wt)&&(r.push(a),r.length>1&&this.allChips.forEach(l=>l.remove()))})}}_handleUpEvents(e){this.numberClicks+=1,this.numberClicks===this.allChips.length+1&&(this.numberClicks=0),this._handleRightKeyboardArrow(this.numberClicks),this._handleEvents(e,Rx),this._handleEvents(e,Px)}_handleDownEvents(e){this.numberClicks-=1,this.numberClicks<=0&&(this.numberClicks=this.allChips.length),this._handleLeftKeyboardArrow(this.numberClicks),this._handleEvents(e,$x),this._handleEvents(e,Lx)}_keyboardEvents(e){const{target:i,keyCode:n,ctrlKey:o}=e;i.value.length>0||this.allChips.length===0||(n===zy||n===jy?this._handleDeleteEvents(e):n===hs||n===ut?this._handleUpEvents(e):n===cs||n===ht?this._handleDownEvents(e):n===65&&o&&this._handleAddActiveClass())}_handleKeyboard(){_.on(this.input,"keydown",e=>this._keyboardEvents(e))}_handleEditable(){const{editable:e}=this._options;e&&this.allChips.forEach(i=>{_.on(i,"dblclick",n=>{const o=m.findOne(Wl,i);i.classList.add(...this._classes.contentEditable.split(" ")),i.contentEditable=!0,i.focus(),setTimeout(()=>{g.addStyle(o,{display:"none"})},200),o.classList.add(...this._classes.opacity.split(" ")),n.target.textContent,_.trigger(i,_p,{event:n,allChips:this.allChips})}),_.on(document,"click",({target:n})=>{const o=m.findOne(Wl,i),r=m.findOne(wx,i),a=n===i,l=i&&i.contains(n);!a&&!l&&(i.contentEditable=!1,i.classList.remove(...this._classes.contentEditable.split(" ")),r.textContent!==""&&setTimeout(()=>{g.addStyle(o,{display:"block"}),o.classList.remove(...this._classes.opacity.split(" "))},160)),r.textContent===""&&(setTimeout(()=>{i.classList.add(...this._classes.opacity.split(" "))},200),setTimeout(()=>{i.remove()},300))})})}_handleRemoveActiveClass(){this.allChips.forEach(e=>e.removeAttribute(Wt))}_handleAddActiveClass(){this.allChips.forEach(e=>e.setAttribute(Wt,""))}_handleRightKeyboardArrow(e){this._handleRemoveActiveClass(),e===0&&(e=1),this._handleAddActiveClassWithKebyboard(e)}_handleLeftKeyboardArrow(e){this._handleRemoveActiveClass(),this._handleAddActiveClassWithKebyboard(e)}_handleActiveChipAfterRemove(e){const i=e===0?1:e-1;return this.allChips[i]}_handleClicksOnChips(){_.on(this._element,"click",()=>{this.allChips.length===0&&(this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" ")),this.input.removeAttribute(Wt))})}_handleTextContent(){const e=[];return this.allChips.forEach(i=>e.push({tag:i.textContent.trim()})),e}_handleEvents(e,i){const n=this._handleTextContent(),o=this.allChips.filter(r=>r.hasAttribute(Wt)&&r);_.trigger(this._element,i,{event:e,allChips:this.allChips,arrOfObjects:n,active:o,activeObj:{tag:o.length<=0?"":o[0].textContent.trim()}})}_handleChipsFocus(){_.on(this._element,"click",({target:{attributes:e}})=>{const i=[...e].map(n=>n.name);i.includes(Vl)||i.includes(up)||i.includes(pp)||this.input.focus()})}_handleInitialValue(){if(this._appendInputToElement(hp),this._element.hasAttribute(hp)){const{initialValues:e}=this._options;e.forEach(({tag:i})=>this._handleCreateChip(this.input,i)),m.findOne(zl,this.input.parentNode).setAttribute(us,""),this.input.setAttribute(Wt,""),this.input.setAttribute(us,"")}this.allChips.length>0&&(this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" ")),this.chipsInputWrapper.classList.add(...this._classes.transition.split(" ")))}_handleKeysInputToElement(e){const{keyCode:i,target:n}=e;if(n.hasAttribute(Vl)){const o=m.findOne(Wl,n);i===Et&&(n.contentEditable=!1,n.classList.remove(...this._classes.contentEditable.split(" ")),n.textContent!==""?setTimeout(()=>{g.addStyle(o,{display:"block"}),o.classList.remove(...this._classes.opacity.split(" "))},160):n.textContent===""&&(setTimeout(()=>{n.classList.add(...this._classes.opacity.split(" "))},200),setTimeout(()=>{n.remove()},300)));return}if(i===Et){if(n.value==="")return;this._handleCreateChip(n,n.value),this._handleRemoveActiveClass(),this.numberClicks=this.allChips.length+1,this._handleEvents(e,Mx)}this.allChips.length>0?(this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" ")),this.chipsInputWrapper.classList.add(...this._classes.transition.split(" "))):this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" "))}_handleInputText(){const e=m.findOne(kx,this._element);_.on(this._element,"keyup",e,i=>this._handleKeysInputToElement(i)),_.on(this.input,"blur",i=>this._handleBlurInput(i))}_appendInputToElement(e){if(!this._element.hasAttribute(e))return;const i=dx(this._options,this._classes);this._element.insertAdjacentHTML("beforeend",i);const n=m.findOne("[data-te-chips-input-wrapper]",this._element);this._inputInstance=new Z(n,this._options.inputOptions,this._options.inputClasses)}_handleCreateChip(e,i){const n=$("div"),o=ki.getInstance(n),r=new ki(o,{text:i},this._classes);this._options.parentSelector!==""?document.querySelector(this._options.parentSelector).insertAdjacentHTML("beforeend",r.appendChip()):e.insertAdjacentHTML("beforebegin",r.appendChip()),e.value="",m.find(Fl).forEach(a=>{let l=ki.getInstance(a);return l||(l=new ki(a,{},this._classes)),l.init()}),this._handleEditable()}_handleChipsOnSelect(){this.allChips.forEach(e=>{_.on(this._element,"click",i=>{_.trigger(e,_p,{event:i,allChips:this.allChips})})})}_handleAddActiveClassWithKebyboard(e){let i;this.allChips[e-1]===void 0?i=this.allChips[e-2]:i=this.allChips[e-1],i.setAttribute(Wt)}_getConfig(e){const i={...Bx,...g.getDataAttributes(this._element),...e};return L(rn,i,Nx),i}_getClasses(e){const i=g.getDataClassAttributes(this._element);return e={...Hx,...i,...e},L(rn,e,Vx),e}static getInstance(e){return O.getData(e,cp)}static getOrCreateInstance(e,i={}){return this.getInstance(e)||new this(e,typeof i=="object"?i:null)}}const Ze={plugins:{legend:{labels:{color:"rgb(102,102,102)"}}}},ln={line:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.0)",borderColor:"rgb(59, 112, 202)",borderWidth:2,tension:0},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},datasets:{borderColor:"red"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!1,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},bar:{options:{...Ze,backgroundColor:"rgb(59, 112, 202)",borderWidth:0,responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!0,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},pie:{options:{...Ze,elements:{arc:{backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},doughnut:{options:{...Ze,elements:{arc:{backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},polarArea:{options:{...Ze,elements:{arc:{backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0}}},radar:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.5)",borderColor:"rgb(59, 112, 202)",borderWidth:2},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},scatter:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.5)",borderColor:"rgb(59, 112, 202)",borderWidth:2,tension:0},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},datasets:{borderColor:"red"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!1,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},bubble:{options:{...Ze,elements:{point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0},scales:{x:{grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}}};var Fx=function(t){return Wx(t)&&!zx(t)};function Wx(s){return!!s&&typeof s=="object"}function zx(s){var t=Object.prototype.toString.call(s);return t==="[object RegExp]"||t==="[object Date]"||Kx(s)}var jx=typeof Symbol=="function"&&Symbol.for,Yx=jx?Symbol.for("react.element"):60103;function Kx(s){return s.$$typeof===Yx}function Ux(s){return Array.isArray(s)?[]:{}}function cn(s,t){return t.clone!==!1&&t.isMergeableObject(s)?ps(Ux(s),s,t):s}function Xx(s,t,e){return s.concat(t).map(function(i){return cn(i,e)})}function Gx(s,t){if(!t.customMerge)return ps;var e=t.customMerge(s);return typeof e=="function"?e:ps}function qx(s){return Object.getOwnPropertySymbols?Object.getOwnPropertySymbols(s).filter(function(t){return Object.propertyIsEnumerable.call(s,t)}):[]}function mp(s){return Object.keys(s).concat(qx(s))}function bp(s,t){try{return t in s}catch{return!1}}function Zx(s,t){return bp(s,t)&&!(Object.hasOwnProperty.call(s,t)&&Object.propertyIsEnumerable.call(s,t))}function Qx(s,t,e){var i={};return e.isMergeableObject(s)&&mp(s).forEach(function(n){i[n]=cn(s[n],e)}),mp(t).forEach(function(n){Zx(s,n)||(bp(s,n)&&e.isMergeableObject(t[n])?i[n]=Gx(n,e)(s[n],t[n],e):i[n]=cn(t[n],e))}),i}function ps(s,t,e){e=e||{},e.arrayMerge=e.arrayMerge||Xx,e.isMergeableObject=e.isMergeableObject||Fx,e.cloneUnlessOtherwiseSpecified=cn;var i=Array.isArray(t),n=Array.isArray(s),o=i===n;return o?i?e.arrayMerge(s,t,e):Qx(s,t,e):cn(t,e)}ps.all=function(t,e){if(!Array.isArray(t))throw new Error("first argument should be an array");return t.reduce(function(i,n){return ps(i,n,e)},{})};var Jx=ps,jl=Jx;const vp="chart",ar="te.chart",tC="chart",Yl=(s,t,e)=>{const i=(n,o,r)=>{const a=n.slice();return o.forEach((l,c)=>{typeof a[c]>"u"?a[c]=r.cloneUnlessOtherwiseSpecified(l,r):r.isMergeableObject(l)?a[c]=jl(n[c],l,r):n.indexOf(l)===-1&&a.push(l)}),a};return jl(e[t],s,{arrayMerge:i})},eC={darkTicksColor:"#fff",darkLabelColor:"#fff",darkGridLinesColor:"#555",darkmodeOff:"undefined",darkMode:null,darkBgColor:"#262626",darkBgColorLight:"#fff",options:null},iC={darkTicksColor:"string",darkLabelColor:"string",darkGridLinesColor:"string",darkmodeOff:"(string|null)",darkMode:"(string|null)",darkBgColor:"string",darkBgColorLight:"string",options:"(object|null)"};let yp=class am{constructor(t,e,i={},n={}){this._waitForCharts(t,e,i,n)}async _getChartjs(){const{Chart:t,ArcElement:e,LineElement:i,BarElement:n,PointElement:o,BarController:r,BubbleController:a,DoughnutController:l,LineController:c,PieController:h,PolarAreaController:d,RadarController:u,ScatterController:p,CategoryScale:f,LinearScale:b,LogarithmicScale:v,RadialLinearScale:y,TimeScale:T,TimeSeriesScale:x,Decimation:E,Filler:C,Legend:A,Title:w,Tooltip:S,SubTitle:k}=await Promise.resolve().then(()=>UM);return t.register(e,i,n,o,r,a,l,c,h,d,u,p,f,b,v,y,T,x,E,C,A,w,S,k),t}async _getChartDataLabels(){return await Promise.resolve().then(()=>gL)}async _waitForCharts(t,e,i={},n={}){if(this._Chartjs=await this._getChartjs(),this._ChartDataLabels=await this._getChartDataLabels(),this._element=t,this._data=e,this._options=i,this._type=e.type,this._canvas=null,this._chart=null,this._darkOptions=this._getDarkConfig(n),this._darkModeClassContainer=document.querySelector("html"),this._prevConfig=null,this._observer=null,this._element&&(O.setData(t,ar,this),g.addClass(this._element,tC),this._chartConstructor()),this._darkOptions.darkmodeOff!==null){const o=this._darkOptions.darkMode==="dark"?"dark":this._darkOptions.darkMode==="light"?"light":this.systemColorMode;this._handleMode(o),this._observer=new MutationObserver(this._observerCallback.bind(this)),this._observer.observe(this._darkModeClassContainer,{attributes:!0})}}static get NAME(){return vp}get systemColorMode(){return localStorage.theme||(this._darkModeClassContainer.classList.contains("dark")?"dark":"light")}dispose(){this._observer.disconnect(),O.removeData(this._element,ar),this._element=null}update(t,e){t&&(this._data={...this._data,...t},this._chart.data=this._data);const i=Object.prototype.hasOwnProperty.call(e,"options")?e:{options:{...e}};this._options=jl(this._options,i),this._chart.options=Yl(this._options,this._type,ln).options,this._chart.update()}setTheme(t){t!=="dark"&&t!=="light"||!this._data||this._handleMode(t)}_getDarkConfig(t){let e={};const i=g.getDataAttributes(this._element);Object.keys(i).forEach(c=>c.startsWith("dark")&&(e[c]=i[c])),e={...eC,...e};const n={y:{ticks:{color:e.darkTicksColor},grid:{color:e.darkGridLinesColor}},x:{ticks:{color:e.darkTicksColor},grid:{color:e.darkGridLinesColor}}},o={r:{ticks:{color:e.darkTicksColor,backdropColor:e.darkBgColor},grid:{color:e.darkGridLinesColor},pointLabels:{color:e.darkTicksColor}}},l={scales:["pie","doughnut","polarArea","radar"].includes(this._type)?["polarArea","radar"].includes(this._type)?o:{}:n,plugins:{legend:{labels:{color:e.darkLabelColor}}}};return t={...e,options:{...l},...t},L(vp,t,iC),t}_chartConstructor(){if(this._data){this._createCanvas();const t=Yl(this._options,this._type,ln),e=[];t.dataLabelsPlugin&&e.push(this._ChartDataLabels.default),this._prevConfig=t,this._chart=new this._Chartjs(this._canvas,{...this._data,...t,plugins:e})}}_createCanvas(){this._canvas||(this._element.nodeName==="CANVAS"?this._canvas=this._element:(this._canvas=$("canvas"),this._element.appendChild(this._canvas)))}_handleMode(t){t==="dark"?(this._changeDatasetBorderColor(),this.update(null,this._darkOptions.options)):(this._changeDatasetBorderColor(!1),this._prevConfig&&this.update(null,this._prevConfig))}_observerCallback(t){for(const e of t)e.type==="attributes"&&this._handleMode(this.systemColorMode)}_changeDatasetBorderColor(t=!0){[...this._data.data.datasets].forEach(e=>["pie","doughnut","polarArea"].includes(this._type)&&(e.borderColor=t?this._darkOptions.darkBgColor:this._darkOptions.darkBgColorLight))}static jQueryInterface(t,e,i){return this.each(function(){let n=O.getData(this,ar);if(!(!n&&/dispose/.test(t))){if(!n){const o=e?Yl(e,i,ln):ln[i];n=new am(this,{...t,...o})}if(typeof t=="string"){if(typeof n[t]>"u")throw new TypeError(`No method named "${t}"`);n[t](e,i)}}})}static getInstance(t){return O.getData(t,ar)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}};/*!
+ * perfect-scrollbar v1.5.3
+ * Copyright 2021 Hyunje Jun, MDBootstrap and Contributors
+ * Licensed under MIT
+ */function me(s){return getComputedStyle(s)}function Ot(s,t){for(var e in t){var i=t[e];typeof i=="number"&&(i=i+"px"),s.style[e]=i}return s}function lr(s){var t=document.createElement("div");return t.className=s,t}var Tp=typeof Element<"u"&&(Element.prototype.matches||Element.prototype.webkitMatchesSelector||Element.prototype.mozMatchesSelector||Element.prototype.msMatchesSelector);function Qe(s,t){if(!Tp)throw new Error("No element matching method supported");return Tp.call(s,t)}function fs(s){s.remove?s.remove():s.parentNode&&s.parentNode.removeChild(s)}function Ep(s,t){return Array.prototype.filter.call(s.children,function(e){return Qe(e,t)})}var at={main:"ps",rtl:"ps__rtl",element:{thumb:function(s){return"ps__thumb-"+s},rail:function(s){return"ps__rail-"+s},consuming:"ps__child--consume"},state:{focus:"ps--focus",clicking:"ps--clicking",active:function(s){return"ps--active-"+s},scrolling:function(s){return"ps--scrolling-"+s}}},xp={x:null,y:null};function Cp(s,t){var e=s.element.classList,i=at.state.scrolling(t);e.contains(i)?clearTimeout(xp[t]):e.add(i)}function Ap(s,t){xp[t]=setTimeout(function(){return s.isAlive&&s.element.classList.remove(at.state.scrolling(t))},s.settings.scrollingThreshold)}function sC(s,t){Cp(s,t),Ap(s,t)}var hn=function(t){this.element=t,this.handlers={}},wp={isEmpty:{configurable:!0}};hn.prototype.bind=function(t,e){typeof this.handlers[t]>"u"&&(this.handlers[t]=[]),this.handlers[t].push(e),this.element.addEventListener(t,e,!1)},hn.prototype.unbind=function(t,e){var i=this;this.handlers[t]=this.handlers[t].filter(function(n){return e&&n!==e?!0:(i.element.removeEventListener(t,n,!1),!1)})},hn.prototype.unbindAll=function(){for(var t in this.handlers)this.unbind(t)},wp.isEmpty.get=function(){var s=this;return Object.keys(this.handlers).every(function(t){return s.handlers[t].length===0})},Object.defineProperties(hn.prototype,wp);var _s=function(){this.eventElements=[]};_s.prototype.eventElement=function(t){var e=this.eventElements.filter(function(i){return i.element===t})[0];return e||(e=new hn(t),this.eventElements.push(e)),e},_s.prototype.bind=function(t,e,i){this.eventElement(t).bind(e,i)},_s.prototype.unbind=function(t,e,i){var n=this.eventElement(t);n.unbind(e,i),n.isEmpty&&this.eventElements.splice(this.eventElements.indexOf(n),1)},_s.prototype.unbindAll=function(){this.eventElements.forEach(function(t){return t.unbindAll()}),this.eventElements=[]},_s.prototype.once=function(t,e,i){var n=this.eventElement(t),o=function(r){n.unbind(e,o),i(r)};n.bind(e,o)};function cr(s){if(typeof window.CustomEvent=="function")return new CustomEvent(s);var t=document.createEvent("CustomEvent");return t.initCustomEvent(s,!1,!1,void 0),t}function hr(s,t,e,i,n){i===void 0&&(i=!0),n===void 0&&(n=!1);var o;if(t==="top")o=["contentHeight","containerHeight","scrollTop","y","up","down"];else if(t==="left")o=["contentWidth","containerWidth","scrollLeft","x","left","right"];else throw new Error("A proper axis should be provided");nC(s,e,o,i,n)}function nC(s,t,e,i,n){var o=e[0],r=e[1],a=e[2],l=e[3],c=e[4],h=e[5];i===void 0&&(i=!0),n===void 0&&(n=!1);var d=s.element;s.reach[l]=null,d[a]<1&&(s.reach[l]="start"),d[a]>s[o]-s[r]-1&&(s.reach[l]="end"),t&&(d.dispatchEvent(cr("ps-scroll-"+l)),t<0?d.dispatchEvent(cr("ps-scroll-"+c)):t>0&&d.dispatchEvent(cr("ps-scroll-"+h)),i&&sC(s,l)),s.reach[l]&&(t||n)&&d.dispatchEvent(cr("ps-"+l+"-reach-"+s.reach[l]))}function st(s){return parseInt(s,10)||0}function oC(s){return Qe(s,"input,[contenteditable]")||Qe(s,"select,[contenteditable]")||Qe(s,"textarea,[contenteditable]")||Qe(s,"button,[contenteditable]")}function rC(s){var t=me(s);return st(t.width)+st(t.paddingLeft)+st(t.paddingRight)+st(t.borderLeftWidth)+st(t.borderRightWidth)}var gs={isWebKit:typeof document<"u"&&"WebkitAppearance"in document.documentElement.style,supportsTouch:typeof window<"u"&&("ontouchstart"in window||"maxTouchPoints"in window.navigator&&window.navigator.maxTouchPoints>0||window.DocumentTouch&&document instanceof window.DocumentTouch),supportsIePointer:typeof navigator<"u"&&navigator.msMaxTouchPoints,isChrome:typeof navigator<"u"&&/Chrome/i.test(navigator&&navigator.userAgent)};function Se(s){var t=s.element,e=Math.floor(t.scrollTop),i=t.getBoundingClientRect();s.containerWidth=Math.round(i.width),s.containerHeight=Math.round(i.height),s.contentWidth=t.scrollWidth,s.contentHeight=t.scrollHeight,t.contains(s.scrollbarXRail)||(Ep(t,at.element.rail("x")).forEach(function(n){return fs(n)}),t.appendChild(s.scrollbarXRail)),t.contains(s.scrollbarYRail)||(Ep(t,at.element.rail("y")).forEach(function(n){return fs(n)}),t.appendChild(s.scrollbarYRail)),!s.settings.suppressScrollX&&s.containerWidth+s.settings.scrollXMarginOffset<s.contentWidth?(s.scrollbarXActive=!0,s.railXWidth=s.containerWidth-s.railXMarginWidth,s.railXRatio=s.containerWidth/s.railXWidth,s.scrollbarXWidth=kp(s,st(s.railXWidth*s.containerWidth/s.contentWidth)),s.scrollbarXLeft=st((s.negativeScrollAdjustment+t.scrollLeft)*(s.railXWidth-s.scrollbarXWidth)/(s.contentWidth-s.containerWidth))):s.scrollbarXActive=!1,!s.settings.suppressScrollY&&s.containerHeight+s.settings.scrollYMarginOffset<s.contentHeight?(s.scrollbarYActive=!0,s.railYHeight=s.containerHeight-s.railYMarginHeight,s.railYRatio=s.containerHeight/s.railYHeight,s.scrollbarYHeight=kp(s,st(s.railYHeight*s.containerHeight/s.contentHeight)),s.scrollbarYTop=st(e*(s.railYHeight-s.scrollbarYHeight)/(s.contentHeight-s.containerHeight))):s.scrollbarYActive=!1,s.scrollbarXLeft>=s.railXWidth-s.scrollbarXWidth&&(s.scrollbarXLeft=s.railXWidth-s.scrollbarXWidth),s.scrollbarYTop>=s.railYHeight-s.scrollbarYHeight&&(s.scrollbarYTop=s.railYHeight-s.scrollbarYHeight),aC(t,s),s.scrollbarXActive?t.classList.add(at.state.active("x")):(t.classList.remove(at.state.active("x")),s.scrollbarXWidth=0,s.scrollbarXLeft=0,t.scrollLeft=s.isRtl===!0?s.contentWidth:0),s.scrollbarYActive?t.classList.add(at.state.active("y")):(t.classList.remove(at.state.active("y")),s.scrollbarYHeight=0,s.scrollbarYTop=0,t.scrollTop=0)}function kp(s,t){return s.settings.minScrollbarLength&&(t=Math.max(t,s.settings.minScrollbarLength)),s.settings.maxScrollbarLength&&(t=Math.min(t,s.settings.maxScrollbarLength)),t}function aC(s,t){var e={width:t.railXWidth},i=Math.floor(s.scrollTop);t.isRtl?e.left=t.negativeScrollAdjustment+s.scrollLeft+t.containerWidth-t.contentWidth:e.left=s.scrollLeft,t.isScrollbarXUsingBottom?e.bottom=t.scrollbarXBottom-i:e.top=t.scrollbarXTop+i,Ot(t.scrollbarXRail,e);var n={top:i,height:t.railYHeight};t.isScrollbarYUsingRight?t.isRtl?n.right=t.contentWidth-(t.negativeScrollAdjustment+s.scrollLeft)-t.scrollbarYRight-t.scrollbarYOuterWidth-9:n.right=t.scrollbarYRight-s.scrollLeft:t.isRtl?n.left=t.negativeScrollAdjustment+s.scrollLeft+t.containerWidth*2-t.contentWidth-t.scrollbarYLeft-t.scrollbarYOuterWidth:n.left=t.scrollbarYLeft+s.scrollLeft,Ot(t.scrollbarYRail,n),Ot(t.scrollbarX,{left:t.scrollbarXLeft,width:t.scrollbarXWidth-t.railBorderXWidth}),Ot(t.scrollbarY,{top:t.scrollbarYTop,height:t.scrollbarYHeight-t.railBorderYWidth})}function lC(s){s.element,s.event.bind(s.scrollbarY,"mousedown",function(t){return t.stopPropagation()}),s.event.bind(s.scrollbarYRail,"mousedown",function(t){var e=t.pageY-window.pageYOffset-s.scrollbarYRail.getBoundingClientRect().top,i=e>s.scrollbarYTop?1:-1;s.element.scrollTop+=i*s.containerHeight,Se(s),t.stopPropagation()}),s.event.bind(s.scrollbarX,"mousedown",function(t){return t.stopPropagation()}),s.event.bind(s.scrollbarXRail,"mousedown",function(t){var e=t.pageX-window.pageXOffset-s.scrollbarXRail.getBoundingClientRect().left,i=e>s.scrollbarXLeft?1:-1;s.element.scrollLeft+=i*s.containerWidth,Se(s),t.stopPropagation()})}function cC(s){Sp(s,["containerWidth","contentWidth","pageX","railXWidth","scrollbarX","scrollbarXWidth","scrollLeft","x","scrollbarXRail"]),Sp(s,["containerHeight","contentHeight","pageY","railYHeight","scrollbarY","scrollbarYHeight","scrollTop","y","scrollbarYRail"])}function Sp(s,t){var e=t[0],i=t[1],n=t[2],o=t[3],r=t[4],a=t[5],l=t[6],c=t[7],h=t[8],d=s.element,u=null,p=null,f=null;function b(T){T.touches&&T.touches[0]&&(T[n]=T.touches[0].pageY),d[l]=u+f*(T[n]-p),Cp(s,c),Se(s),T.stopPropagation(),T.type.startsWith("touch")&&T.changedTouches.length>1&&T.preventDefault()}function v(){Ap(s,c),s[h].classList.remove(at.state.clicking),s.event.unbind(s.ownerDocument,"mousemove",b)}function y(T,x){u=d[l],x&&T.touches&&(T[n]=T.touches[0].pageY),p=T[n],f=(s[i]-s[e])/(s[o]-s[a]),x?s.event.bind(s.ownerDocument,"touchmove",b):(s.event.bind(s.ownerDocument,"mousemove",b),s.event.once(s.ownerDocument,"mouseup",v),T.preventDefault()),s[h].classList.add(at.state.clicking),T.stopPropagation()}s.event.bind(s[r],"mousedown",function(T){y(T)}),s.event.bind(s[r],"touchstart",function(T){y(T,!0)})}function hC(s){var t=s.element,e=function(){return Qe(t,":hover")},i=function(){return Qe(s.scrollbarX,":focus")||Qe(s.scrollbarY,":focus")};function n(o,r){var a=Math.floor(t.scrollTop);if(o===0){if(!s.scrollbarYActive)return!1;if(a===0&&r>0||a>=s.contentHeight-s.containerHeight&&r<0)return!s.settings.wheelPropagation}var l=t.scrollLeft;if(r===0){if(!s.scrollbarXActive)return!1;if(l===0&&o<0||l>=s.contentWidth-s.containerWidth&&o>0)return!s.settings.wheelPropagation}return!0}s.event.bind(s.ownerDocument,"keydown",function(o){if(!(o.isDefaultPrevented&&o.isDefaultPrevented()||o.defaultPrevented)&&!(!e()&&!i())){var r=document.activeElement?document.activeElement:s.ownerDocument.activeElement;if(r){if(r.tagName==="IFRAME")r=r.contentDocument.activeElement;else for(;r.shadowRoot;)r=r.shadowRoot.activeElement;if(oC(r))return}var a=0,l=0;switch(o.which){case 37:o.metaKey?a=-s.contentWidth:o.altKey?a=-s.containerWidth:a=-30;break;case 38:o.metaKey?l=s.contentHeight:o.altKey?l=s.containerHeight:l=30;break;case 39:o.metaKey?a=s.contentWidth:o.altKey?a=s.containerWidth:a=30;break;case 40:o.metaKey?l=-s.contentHeight:o.altKey?l=-s.containerHeight:l=-30;break;case 32:o.shiftKey?l=s.containerHeight:l=-s.containerHeight;break;case 33:l=s.containerHeight;break;case 34:l=-s.containerHeight;break;case 36:l=s.contentHeight;break;case 35:l=-s.contentHeight;break;default:return}s.settings.suppressScrollX&&a!==0||s.settings.suppressScrollY&&l!==0||(t.scrollTop-=l,t.scrollLeft+=a,Se(s),n(a,l)&&o.preventDefault())}})}function dC(s){var t=s.element;function e(r,a){var l=Math.floor(t.scrollTop),c=t.scrollTop===0,h=l+t.offsetHeight===t.scrollHeight,d=t.scrollLeft===0,u=t.scrollLeft+t.offsetWidth===t.scrollWidth,p;return Math.abs(a)>Math.abs(r)?p=c||h:p=d||u,p?!s.settings.wheelPropagation:!0}function i(r){var a=r.deltaX,l=-1*r.deltaY;return(typeof a>"u"||typeof l>"u")&&(a=-1*r.wheelDeltaX/6,l=r.wheelDeltaY/6),r.deltaMode&&r.deltaMode===1&&(a*=10,l*=10),a!==a&&l!==l&&(a=0,l=r.wheelDelta),r.shiftKey?[-l,-a]:[a,l]}function n(r,a,l){if(!gs.isWebKit&&t.querySelector("select:focus"))return!0;if(!t.contains(r))return!1;for(var c=r;c&&c!==t;){if(c.classList.contains(at.element.consuming))return!0;var h=me(c);if(l&&h.overflowY.match(/(scroll|auto)/)){var d=c.scrollHeight-c.clientHeight;if(d>0&&(c.scrollTop>0&&l<0||c.scrollTop<d&&l>0))return!0}if(a&&h.overflowX.match(/(scroll|auto)/)){var u=c.scrollWidth-c.clientWidth;if(u>0&&(c.scrollLeft>0&&a<0||c.scrollLeft<u&&a>0))return!0}c=c.parentNode}return!1}function o(r){var a=i(r),l=a[0],c=a[1];if(!n(r.target,l,c)){var h=!1;s.settings.useBothWheelAxes?s.scrollbarYActive&&!s.scrollbarXActive?(c?t.scrollTop-=c*s.settings.wheelSpeed:t.scrollTop+=l*s.settings.wheelSpeed,h=!0):s.scrollbarXActive&&!s.scrollbarYActive&&(l?t.scrollLeft+=l*s.settings.wheelSpeed:t.scrollLeft-=c*s.settings.wheelSpeed,h=!0):(t.scrollTop-=c*s.settings.wheelSpeed,t.scrollLeft+=l*s.settings.wheelSpeed),Se(s),h=h||e(l,c),h&&!r.ctrlKey&&(r.stopPropagation(),r.preventDefault())}}typeof window.onwheel<"u"?s.event.bind(t,"wheel",o):typeof window.onmousewheel<"u"&&s.event.bind(t,"mousewheel",o)}function uC(s){if(!gs.supportsTouch&&!gs.supportsIePointer)return;var t=s.element;function e(f,b){var v=Math.floor(t.scrollTop),y=t.scrollLeft,T=Math.abs(f),x=Math.abs(b);if(x>T){if(b<0&&v===s.contentHeight-s.containerHeight||b>0&&v===0)return window.scrollY===0&&b>0&&gs.isChrome}else if(T>x&&(f<0&&y===s.contentWidth-s.containerWidth||f>0&&y===0))return!0;return!0}function i(f,b){t.scrollTop-=b,t.scrollLeft-=f,Se(s)}var n={},o=0,r={},a=null;function l(f){return f.targetTouches?f.targetTouches[0]:f}function c(f){return f.pointerType&&f.pointerType==="pen"&&f.buttons===0?!1:!!(f.targetTouches&&f.targetTouches.length===1||f.pointerType&&f.pointerType!=="mouse"&&f.pointerType!==f.MSPOINTER_TYPE_MOUSE)}function h(f){if(c(f)){var b=l(f);n.pageX=b.pageX,n.pageY=b.pageY,o=new Date().getTime(),a!==null&&clearInterval(a)}}function d(f,b,v){if(!t.contains(f))return!1;for(var y=f;y&&y!==t;){if(y.classList.contains(at.element.consuming))return!0;var T=me(y);if(v&&T.overflowY.match(/(scroll|auto)/)){var x=y.scrollHeight-y.clientHeight;if(x>0&&(y.scrollTop>0&&v<0||y.scrollTop<x&&v>0))return!0}if(b&&T.overflowX.match(/(scroll|auto)/)){var E=y.scrollWidth-y.clientWidth;if(E>0&&(y.scrollLeft>0&&b<0||y.scrollLeft<E&&b>0))return!0}y=y.parentNode}return!1}function u(f){if(c(f)){var b=l(f),v={pageX:b.pageX,pageY:b.pageY},y=v.pageX-n.pageX,T=v.pageY-n.pageY;if(d(f.target,y,T))return;i(y,T),n=v;var x=new Date().getTime(),E=x-o;E>0&&(r.x=y/E,r.y=T/E,o=x),e(y,T)&&f.preventDefault()}}function p(){s.settings.swipeEasing&&(clearInterval(a),a=setInterval(function(){if(s.isInitialized){clearInterval(a);return}if(!r.x&&!r.y){clearInterval(a);return}if(Math.abs(r.x)<.01&&Math.abs(r.y)<.01){clearInterval(a);return}if(!s.element){clearInterval(a);return}i(r.x*30,r.y*30),r.x*=.8,r.y*=.8},10))}gs.supportsTouch?(s.event.bind(t,"touchstart",h),s.event.bind(t,"touchmove",u),s.event.bind(t,"touchend",p)):gs.supportsIePointer&&(window.PointerEvent?(s.event.bind(t,"pointerdown",h),s.event.bind(t,"pointermove",u),s.event.bind(t,"pointerup",p)):window.MSPointerEvent&&(s.event.bind(t,"MSPointerDown",h),s.event.bind(t,"MSPointerMove",u),s.event.bind(t,"MSPointerUp",p)))}var pC=function(){return{handlers:["click-rail","drag-thumb","keyboard","wheel","touch"],maxScrollbarLength:null,minScrollbarLength:null,scrollingThreshold:1e3,scrollXMarginOffset:0,scrollYMarginOffset:0,suppressScrollX:!1,suppressScrollY:!1,swipeEasing:!0,useBothWheelAxes:!1,wheelPropagation:!0,wheelSpeed:1}},fC={"click-rail":lC,"drag-thumb":cC,keyboard:hC,wheel:dC,touch:uC},dn=function(t,e){var i=this;if(e===void 0&&(e={}),typeof t=="string"&&(t=document.querySelector(t)),!t||!t.nodeName)throw new Error("no element is specified to initialize PerfectScrollbar");this.element=t,t.classList.add(at.main),this.settings=pC();for(var n in e)this.settings[n]=e[n];this.containerWidth=null,this.containerHeight=null,this.contentWidth=null,this.contentHeight=null;var o=function(){return t.classList.add(at.state.focus)},r=function(){return t.classList.remove(at.state.focus)};this.isRtl=me(t).direction==="rtl",this.isRtl===!0&&t.classList.add(at.rtl),this.isNegativeScroll=function(){var c=t.scrollLeft,h=null;return t.scrollLeft=-1,h=t.scrollLeft<0,t.scrollLeft=c,h}(),this.negativeScrollAdjustment=this.isNegativeScroll?t.scrollWidth-t.clientWidth:0,this.event=new _s,this.ownerDocument=t.ownerDocument||document,this.scrollbarXRail=lr(at.element.rail("x")),t.appendChild(this.scrollbarXRail),this.scrollbarX=lr(at.element.thumb("x")),this.scrollbarXRail.appendChild(this.scrollbarX),this.scrollbarX.setAttribute("tabindex",0),this.event.bind(this.scrollbarX,"focus",o),this.event.bind(this.scrollbarX,"blur",r),this.scrollbarXActive=null,this.scrollbarXWidth=null,this.scrollbarXLeft=null;var a=me(this.scrollbarXRail);this.scrollbarXBottom=parseInt(a.bottom,10),isNaN(this.scrollbarXBottom)?(this.isScrollbarXUsingBottom=!1,this.scrollbarXTop=st(a.top)):this.isScrollbarXUsingBottom=!0,this.railBorderXWidth=st(a.borderLeftWidth)+st(a.borderRightWidth),Ot(this.scrollbarXRail,{display:"block"}),this.railXMarginWidth=st(a.marginLeft)+st(a.marginRight),Ot(this.scrollbarXRail,{display:""}),this.railXWidth=null,this.railXRatio=null,this.scrollbarYRail=lr(at.element.rail("y")),t.appendChild(this.scrollbarYRail),this.scrollbarY=lr(at.element.thumb("y")),this.scrollbarYRail.appendChild(this.scrollbarY),this.scrollbarY.setAttribute("tabindex",0),this.event.bind(this.scrollbarY,"focus",o),this.event.bind(this.scrollbarY,"blur",r),this.scrollbarYActive=null,this.scrollbarYHeight=null,this.scrollbarYTop=null;var l=me(this.scrollbarYRail);this.scrollbarYRight=parseInt(l.right,10),isNaN(this.scrollbarYRight)?(this.isScrollbarYUsingRight=!1,this.scrollbarYLeft=st(l.left)):this.isScrollbarYUsingRight=!0,this.scrollbarYOuterWidth=this.isRtl?rC(this.scrollbarY):null,this.railBorderYWidth=st(l.borderTopWidth)+st(l.borderBottomWidth),Ot(this.scrollbarYRail,{display:"block"}),this.railYMarginHeight=st(l.marginTop)+st(l.marginBottom),Ot(this.scrollbarYRail,{display:""}),this.railYHeight=null,this.railYRatio=null,this.reach={x:t.scrollLeft<=0?"start":t.scrollLeft>=this.contentWidth-this.containerWidth?"end":null,y:t.scrollTop<=0?"start":t.scrollTop>=this.contentHeight-this.containerHeight?"end":null},this.isAlive=!0,this.settings.handlers.forEach(function(c){return fC[c](i)}),this.lastScrollTop=Math.floor(t.scrollTop),this.lastScrollLeft=t.scrollLeft,this.event.bind(this.element,"scroll",function(c){return i.onScroll(c)}),Se(this)};dn.prototype.update=function(){this.isAlive&&(this.negativeScrollAdjustment=this.isNegativeScroll?this.element.scrollWidth-this.element.clientWidth:0,Ot(this.scrollbarXRail,{display:"block"}),Ot(this.scrollbarYRail,{display:"block"}),this.railXMarginWidth=st(me(this.scrollbarXRail).marginLeft)+st(me(this.scrollbarXRail).marginRight),this.railYMarginHeight=st(me(this.scrollbarYRail).marginTop)+st(me(this.scrollbarYRail).marginBottom),Ot(this.scrollbarXRail,{display:"none"}),Ot(this.scrollbarYRail,{display:"none"}),Se(this),hr(this,"top",0,!1,!0),hr(this,"left",0,!1,!0),Ot(this.scrollbarXRail,{display:""}),Ot(this.scrollbarYRail,{display:""}))},dn.prototype.onScroll=function(t){this.isAlive&&(Se(this),hr(this,"top",this.element.scrollTop-this.lastScrollTop),hr(this,"left",this.element.scrollLeft-this.lastScrollLeft),this.lastScrollTop=Math.floor(this.element.scrollTop),this.lastScrollLeft=this.element.scrollLeft)},dn.prototype.destroy=function(){this.isAlive&&(this.event.unbindAll(),fs(this.scrollbarX),fs(this.scrollbarY),fs(this.scrollbarXRail),fs(this.scrollbarYRail),this.removePsClasses(),this.element=null,this.scrollbarX=null,this.scrollbarY=null,this.scrollbarXRail=null,this.scrollbarYRail=null,this.isAlive=!1)},dn.prototype.removePsClasses=function(){this.element.className=this.element.className.split(" ").filter(function(t){return!t.match(/^ps([-_].+|)$/)}).join(" ")};const Kl="perfectScrollbar",_C="perfect-scrollbar",dr="te.perfectScrollbar",be="te",ve="ps",Ul=[{te:`scrollX.${be}.${ve}`,ps:"ps-scroll-x"},{te:`scrollY.${be}.${ve}`,ps:"ps-scroll-y"},{te:`scrollUp.${be}.${ve}`,ps:"ps-scroll-up"},{te:`scrollDown.${be}.${ve}`,ps:"ps-scroll-down"},{te:`scrollLeft.${be}.${ve}`,ps:"ps-scroll-left"},{te:`scrollRight.${be}.${ve}`,ps:"ps-scroll-right"},{te:`scrollXEnd.${be}.${ve}`,ps:"ps-x-reach-end"},{te:`scrollYEnd.${be}.${ve}`,ps:"ps-y-reach-end"},{te:`scrollXStart.${be}.${ve}`,ps:"ps-x-reach-start"},{te:`scrollYStart.${be}.${ve}`,ps:"ps-y-reach-start"}],gC={handlers:["click-rail","drag-thumb","keyboard","wheel","touch"],wheelSpeed:1,wheelPropagation:!0,swipeEasing:!0,minScrollbarLength:null,maxScrollbarLength:null,scrollingThreshold:1e3,useBothWheelAxes:!1,suppressScrollX:!1,suppressScrollY:!1,scrollXMarginOffset:0,scrollYMarginOffset:0,positionRight:!0},mC={handlers:"(string|array)",wheelSpeed:"number",wheelPropagation:"boolean",swipeEasing:"boolean",minScrollbarLength:"(number|null)",maxScrollbarLength:"(number|null)",scrollingThreshold:"number",useBothWheelAxes:"boolean",suppressScrollX:"boolean",suppressScrollY:"boolean",scrollXMarginOffset:"number",scrollYMarginOffset:"number",positionRight:"boolean"},bC={ps:"group/ps overflow-hidden [overflow-anchor:none] touch-none",railX:"group/x absolute bottom-0 h-[0.9375rem] hidden opacity-0 transition-[background-color,_opacity] duration-200 ease-linear motion-reduce:transition-none z-[1035] group-[&.ps--active-x]/ps:block group-hover/ps:opacity-60 group-focus/ps:opacity-60 group-[&.ps--scrolling-x]/ps:opacity-60 hover:!opacity-90 focus:!opacity-90 [&.ps--clicking]:!opacity-90 outline-none",railXColors:"group-[&.ps--active-x]/ps:bg-transparent hover:!bg-[#eee] focus:!bg-[#eee] [&.ps--clicking]:!bg-[#eee] dark:hover:!bg-[#555] dark:focus:!bg-[#555] dark:[&.ps--clicking]:!bg-[#555]",railXThumb:"absolute bottom-0.5 rounded-md h-1.5 group-focus/ps:opacity-100 group-active/ps:opacity-100 [transition:background-color_.2s_linear,_height_.2s_ease-in-out] group-hover/x:h-[11px] group-focus/x:h-[0.6875rem] group-[&.ps--clicking]/x:bg-[#999] group-[&.ps--clicking]/x:h-[11px] outline-none",railXThumbColors:"bg-[#aaa] group-hover/x:bg-[#999] group-focus/x:bg-[#999]",railY:"group/y absolute right-0 w-[0.9375rem] hidden opacity-0 transition-[background-color,_opacity] duration-200 ease-linear motion-reduce:transition-none z-[1035] group-[&.ps--active-y]/ps:block group-hover/ps:opacity-60 group-focus/ps:opacity-60 group-[&.ps--scrolling-y]/ps:opacity-60 hover:!opacity-90 focus:!opacity-90 [&.ps--clicking]:!opacity-90 outline-none",railYColors:"group-[&.ps--active-y]/ps:bg-transparent hover:!bg-[#eee] focus:!bg-[#eee] [&.ps--clicking]:!bg-[#eee] dark:hover:!bg-[#555] dark:focus:!bg-[#555] dark:[&.ps--clicking]:!bg-[#555]",railYThumb:"absolute right-0.5 rounded-md w-1.5 group-focus/ps:opacity-100 group-active/ps:opacity-100 [transition:background-color_.2s_linear,_width_.2s_ease-in-out,_opacity] group-hover/y:w-[11px] group-focus/y:w-[0.6875rem] group-[&.ps--clicking]/y:w-[11px] outline-none",railYThumbColors:"bg-[#aaa] group-hover/y:bg-[#999] group-focus/y:bg-[#999] group-[&.ps--clicking]/y:bg-[#999]"},vC={ps:"string",railX:"string",railXColors:"string",railXThumb:"string",railXThumbColors:"string",railY:"string",railYColors:"string",railYThumb:"string",railYThumbColors:"string"};class ms{constructor(t,e={},i={}){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this.perfectScrollbar=null,this._observer=null,this._psClasses=[{ps:"ps__rail-x",te:this._classes.railX,teColor:this._classes.railXColors},{ps:"ps__rail-y",te:this._classes.railY,teColor:this._classes.railYColors},{ps:"ps__thumb-x",te:this._classes.railXThumb,teColor:this._classes.railXThumbColors},{ps:"ps__thumb-y",te:this._classes.railYThumb,teColor:this._classes.railYThumbColors}],this._element&&(O.setData(t,dr,this),g.addClass(this._element,_C)),this.init()}static get NAME(){return Kl}get railX(){return m.findOne(".ps__rail-x",this._element)}get railY(){return m.findOne(".ps__rail-y",this._element)}_getConfig(t){const e=g.getDataAttributes(this._element);return e.handlers!==void 0&&(e.handlers=e.handlers.split(" ")),t={...gC,...e,...t},L(Kl,t,mC),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...bC,...e,...t},L(Kl,t,vC),t}dispose(){this._options.positionRight&&this._observer.disconnect(),O.removeData(this._element,dr),this._element=null,this._dataAttrOptions=null,this._options=null,this.perfectScrollbar.destroy(),this.removeEvent(Ul),this.perfectScrollbar=null}init(){if(this.perfectScrollbar=new dn(this._element,this._options),this._addPerfectScrollbarStyles(),this._updateScrollPosition(),this.perfectScrollbar.update(),this._initEvents(Ul),this._options.positionRight){this._observer=new ResizeObserver(()=>{setTimeout(()=>{this._updateScrollPosition()},100)});const t={attributes:!0,attributeFilter:["class","className"]};this._observer.observe(this._element,t)}}_updateScrollPosition(){const t=getComputedStyle(this._element).getPropertyValue("height"),e=getComputedStyle(this._element).getPropertyValue("width");this.railX&&(this.railX.style.transform=`translateY(calc(-100% + ${this._canTransform(t)?t:"0px"}))`),this.railY&&(this.railY.style.transform=`translateX(calc(-100% + ${this._canTransform(e)?e:"0px"}))`)}_canTransform(t){return t&&t.includes("px")}update(){return this.perfectScrollbar.update()}_initEvents(t=[]){t.forEach(({ps:e,te:i})=>_.on(this._element,e,n=>_.trigger(this._element,i,{e:n})))}_addPerfectScrollbarStyles(){this._psClasses.forEach(t=>{const e=m.findOne(`.${t.ps}`,this._element);g.addClass(e,t.te),g.addClass(e,t.teColor)}),g.addClass(this._element,this._classes.ps),g.removeClass(this._element,"ps")}removeEvent(t){let e=[];typeof t=="string"&&(e=Ul.filter(({te:i})=>i===t)),e.forEach(({ps:i,te:n})=>{_.off(this._element,i),_.off(this._element,n)})}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,dr);const i=typeof t=="object"&&t;if(!(!e&&/dispose|hide/.test(t))&&(e||(e=new ms(this,i)),typeof t=="string")){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}static getInstance(t){return O.getData(t,dr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const yC="data-te-datatable-select-ref",TC="data-te-datatable-pagination-nav-ref",EC="data-te-datatable-pagination-right-ref",xC="data-te-datatable-pagination-left-ref",CC="data-te-datatable-pagination-start-ref",AC="data-te-datatable-pagination-end-ref",wC=({text:s,entries:t,entriesOptions:e,fullPagination:i,rowsText:n,allText:o,paginationStartIconTemplate:r,paginationLeftIconTemplate:a,paginationRightIconTemplate:l,paginationEndIconTemplate:c,classes:h},d,u)=>{const p=e.map(f=>f==="All"?`<option value="${f}" ${f===t?"selected":""}>${o}</option>`:`<option value="${f}" ${f===t?"selected":""}>${f}</option>`).join(`
+`);return`
+<div class="${h.pagination} ${u?`${h.paginationBordered}`:""} ${h.borderColor} ${h.color}">
+  <div class="${h.selectItemsWrapper}">  
+    <p class="${h.paginationRowsText} ${d?`${h.loadingPaginationRowsText}`:""}">${n}</p>
+    <div class="${h.selectWrapper} ${d?`${h.loadingPaginationSelectWrapper}`:""}">
+      <select name="entries"
+        ${d?"disabled":""} class="select" ${yC}>
+        ${p}
+      </select>
+    </div>
+  </div>
+  <div class="${h.paginationNav} ${d?`${h.loadingPaginationNav}`:""}" ${TC}>
+  ${s}
+  </div>
+  <div class="${h.paginationButtonsWrapper}">
+    ${i?`<button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationStartButton}" ${CC}>
+           ${r}
+          </button>`:""}
+    <button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationLeftButton}" ${xC}>
+      ${a}
+  </button>
+    <button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationRightButton}" ${EC}>
+      ${l}
+  </button>
+    ${i?`<button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationEndButton}" ${AC}>
+           ${c}
+          </button>`:""}
+  </div>
+</div>
+`},kC="data-te-datatable-sort-icon-ref",SC="data-te-datatable-header-checkbox-ref",OC=(s,t,e,i,n,o,r,a)=>{const l=e?`
+  <th scope="col">
+    <div class="${a.checkboxHeaderWrapper}">
+      <input
+        class="${a.checkboxHeader}"
+        type="checkbox"
+        value=""
+        ${SC}
+        />
+    </div>
+  </th>
+  `:'<th scope="col"></th>',c=s.map((h,d)=>{const u=h.fixed?s.filter((p,f)=>p.fixed===h.fixed&&f<d).reduce((p,f)=>p+f.width,0):null;return`<th class="${a.column} ${i?`${a.tableBordered}`:""} ${a.borderColor} ${n?`${a.sm}`:""} ${h.fixed?`${a.fixedHeader} ${a.color}`:""} ${o?`${a.loadingColumn}`:""}" style="${h.fixed?`${h.fixed==="right"?"right":"left"}: ${u}px;`:""}" scope="col">${h.sort?`<div class="${a.sortIconWrapper}"><span class="${a.sortIcon} ${o?"invisible":""}" data-te-sort="${h.field}" ${kC}>${r}</span>`:""} <span class="${h.sort?"":"pl-[18px]"}">${h.label}</span></div></th>`});return[t?l:"",...c].join(`
+`)},IC="data-te-datatable-row-ref",DC="data-te-datatable-row-checkbox-ref",MC="data-te-datatable-cell-ref",LC=({rows:s,columns:t,noFoundMessage:e,edit:i,selectable:n,loading:o,bordered:r,borderless:a,striped:l,hover:c,sm:h,classes:d})=>{const u=s.map(p=>{const f=`
+      <td data-te-field="checkbox" class="${r?`${d.tableBordered} ${d.borderColor}`:""}">
+        <div class="${d.checkboxRowWrapper}">
+          <input
+            class="${d.checkboxRow}"
+            type="checkbox"
+            value=""
+            data-te-row-index="${p.rowIndex}"  ${DC}/>
+        </div>
+      </td>`,b=t.map((v,y)=>{const T={};if(v.width&&(T["min-width"]=`${v.width-1}px`,T["max-width"]=`${v.width}px`,T.width=`${v.width}px`),v.fixed){const E=t.filter((C,A)=>C.fixed===v.fixed&&A<y).reduce((C,A)=>C+A.width,0);T[v.fixed==="right"?"right":"left"]=`${E}px`}return`<td style="${Object.keys(T).map(E=>`${E}: ${T[E]}`).join("; ")}" class="${d.rowItem} ${d.borderColor} ${i?`${d.edit}`:""} ${r?`${d.tableBordered}`:""} ${h?`${d.sm}`:""} ${v.fixed?`${d.fixedHeader} ${d.color}`:""}" ${MC} data-te-field="${v.field}" ${i&&'contenteditable="true"'}>${p[v.field]}</td>`}).join("");return`<tr scope="row" class="${d.row} ${d.borderColor} ${d.rowAnimation} ${l?`${d.striped}`:""} ${a?`${d.borderless}`:""} ${c?`${d.hoverRow}`:""}" data-te-index="${p.rowIndex}" ${IC}>${n?f:""}${b}</tr>`});return s.length>0||o?u.join(`
+`):`<tr class="${d.noFoundMessageWrapper} ${d.borderColor}"><td class="${d.noFoundMessage}">${e}</td></tr>`},$C="data-te-datatable-inner-ref",RC="data-te-datatable-header-ref",Op=({columns:s,rows:t,noFoundMessage:e,edit:i,multi:n,selectable:o,loading:r,loadingMessage:a,pagination:l,bordered:c,borderless:h,striped:d,hover:u,fixedHeader:p,sm:f,sortIconTemplate:b,classes:v})=>{const y=LC({rows:t,columns:s,noFoundMessage:e,edit:i,loading:r,selectable:o,bordered:c,borderless:h,striped:d,hover:u,sm:f,classes:v}),T=OC(s,o,n,c,f,r,b,v);return{table:`
+<div class="${v.color}" ${$C}>
+  <table class="${v.table}">
+    <thead class="${v.tableHeader} ${c?`${v.tableBordered}`:""} ${h?`${v.borderless}`:""} ${v.borderColor}" ${RC}>
+      <tr>
+        ${T}
+      </tr>
+    </thead>
+    <tbody class="${p?`${v.fixedHeaderBody}`:""}">
+      ${r?"":y}
+    </tbody>
+  </table>
+</div>
+${r?`
+  <div class="${v.loadingItemsWrapper}">
+    <div class="${v.loadingProgressBarWrapper}">
+      <div class="${v.loadingProgressBar}"></div>
+    </div>
+  </div>
+<p class="${v.loadingMessage}">${a}</p>
+`:""}
+${l.enable?wC(l,r,c):""}
+  `,rows:y,column:T}},PC=({rows:s,field:t,order:e})=>s.sort((n,o)=>{let r=n[t],a=o[t];return typeof r=="string"&&(r=r.toLowerCase()),typeof a=="string"&&(a=a.toLowerCase()),r<a?e==="desc"?1:-1:r>a?e==="desc"?-1:1:0}),NC=(s,t,e)=>{if(!t)return s;const i=n=>{const o=document.createElement("div");return o.innerHTML=n,n=o.textContent||o.innerText||"",n.toString().toLowerCase().match(t.toLowerCase())};return s.filter(n=>{if(e&&typeof e=="string")return i(n[e]);let o=Object.values(n);return e&&Array.isArray(e)&&(o=Object.keys(n).filter(r=>e.includes(r)).map(r=>n[r])),o.filter(r=>i(r)).length>0})},Ip=({rows:s,entries:t,activePage:e})=>{const i=e*t;return s.slice(i,i+Number(t))},un="datatable",Ht=`data-te-${un}`,pn=`te.${un}`,ur=`.${pn}`,BC=`[${Ht}-inner-ref]`,Xl=`[${Ht}-cell-ref]`,HC=`[${Ht}-header-ref]`,VC=`[${Ht}-header-checkbox-ref]`,FC=`[${Ht}-pagination-right-ref]`,WC=`[${Ht}-pagination-left-ref]`,zC=`[${Ht}-pagination-start-ref]`,jC=`[${Ht}-pagination-end-ref]`,YC=`[${Ht}-pagination-nav-ref]`,KC=`[${Ht}-select-ref]`,Gl=`[${Ht}-sort-icon-ref]`,fn=`[${Ht}-row-ref]`,ql=`[${Ht}-row-checkbox-ref]`,UC=`selectRows${ur}`,Dp=`render${ur}`,XC=`rowClick${ur}`,GC=`update${ur}`,qC=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 10.5L12 3m0 0l7.5 7.5M12 3v18" />
+</svg>`,ZC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M18.75 19.5l-7.5-7.5 7.5-7.5m-6 15L5.25 12l7.5-7.5" />
+</svg>`,QC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M15.75 19.5L8.25 12l7.5-7.5" />
+</svg>`,JC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M8.25 4.5l7.5 7.5-7.5 7.5" />
+</svg>`,tA=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M11.25 4.5l7.5 7.5-7.5 7.5m-6-15l7.5 7.5-7.5 7.5"/>
+</svg>`,eA="border-neutral-200 dark:border-neutral-500",iA="border-none",sA="relative float-left -ml-[1.5rem] mr-[6px] mt-[0.15rem] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:-mt-px checked:after:ml-[0.25rem] checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-l-0 checked:after:border-t-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:-mt-px checked:focus:after:ml-[0.25rem] checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-l-0 checked:focus:after:border-t-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent dark:border-neutral-600 dark:checked:border-primary dark:checked:bg-primary dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:border-neutral-400",nA="mb-[0.125rem] min-h-[1.5rem] pl-[1.5rem] ml-3 flex items-center",oA="relative float-left -ml-[1.5rem] mr-[6px] mt-[0.15rem] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:-mt-px checked:after:ml-[0.25rem] checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-l-0 checked:after:border-t-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:-mt-px checked:focus:after:ml-[0.25rem] checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-l-0 checked:focus:after:border-t-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent dark:border-neutral-600 dark:checked:border-primary dark:checked:bg-primary dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:border-neutral-400",rA="mb-[0.125rem] min-h-[1.5rem] pl-[1.5rem] ml-3 flex items-center",aA="bg-white dark:bg-neutral-800",lA="py-4 pl-1 text-clip overflow-hidden text-[#212529] dark:text-white",cA="focus:outline-none",hA="sticky top-0 z-30",dA="sticky z-10 bg-inherit",uA="hover:bg-neutral-100 dark:hover:bg-neutral-700",pA="pointer-events-none cursor-none text-neutral-400 dark:text-neutral-300",fA="h-[2px] relative w-full overflow-hidden",_A="text-center text-neutral-500 font-ligh text-sm my-4 dark:text-neutral-400",gA="text-neutral-500 dark:text-neutral-300",mA="text-neutral-500 dark:text-neutral-300",bA="pointer-events-none cursor-none",vA="h-full w-[45%] bg-primary-400 dark:bg-primary-600",yA="h-full animate-[progress_3s_ease-in-out_infinite]",TA="pl-2 py-3 font-light text-sm dark:text-neutral-300",EA="border-b",xA="flex md:flex-row justify-end items-center py-2 space-x-4 text-sm flex-col leading-[1.6]",CA="border border-t-0",AA="order-1 my-3 md:order-none md:my-0 md:pr-1",wA="inline-block rounded p-2.5 text-xs font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",kA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",SA="font-normal order-2 mb-3 md:order-none md:mb-0",OA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",IA="font-light",DA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",MA="border-b",LA="transition ease-in-out duration-300 motion-reduce:transition-none",$A="whitespace-nowrap text-clip overflow-auto px-[1.4rem] py-4",RA="relative",PA="!bg-neutral-100 dark:!bg-neutral-600",NA="flex items-center space-x-4 order-3 md:order-none",BA="w-[70px]",HA="!py-2",VA="w-[15px] h-[10px] origin-bottom font-black mr-1 opacity-0 text-neutral-500 group-hover:opacity-100 transition hover:ease-in-out transform ease-linear duration-300 motion-reduce:transition-none dark:text-neutral-400",FA="flex flex-row group",WA="[&:nth-child(odd)]:bg-neutral-50 [&:nth-child(odd)]:dark:bg-neutral-700",zA="border",jA="border-b font-normal px-[1.4rem]",YA="text-left text-sm font-light w-full leading-[1.6]",KA={bordered:"boolean",borderless:"boolean",clickableRows:"boolean",defaultValue:"string",edit:"boolean",entries:"(number|string)",entriesOptions:"array",fullPagination:"boolean",hover:"boolean",loading:"boolean",loadingMessage:"string",maxWidth:"(null|number|string)",maxHeight:"(null|number|string)",multi:"boolean",noFoundMessage:"string",pagination:"boolean",selectable:"boolean",sm:"boolean",sortField:"(null|string)",sortOrder:"string",fixedHeader:"boolean",striped:"boolean",rowsText:"string",ofText:"string",allText:"string",forceSort:"boolean",sortIconTemplate:"string",paginationStartIconTemplate:"string",paginationEndIconTemplate:"string",paginationLeftIconTemplate:"string",paginationRightIconTemplate:"string"},UA={bordered:!1,borderless:!1,clickableRows:!1,defaultValue:"-",edit:!1,entries:10,entriesOptions:[10,25,50,200],fixedHeader:!1,fullPagination:!1,hover:!1,loading:!1,loadingMessage:"Loading results...",maxWidth:null,maxHeight:null,multi:!1,noFoundMessage:"No matching results found",pagination:!0,selectable:!1,sm:!1,sortField:null,sortOrder:"asc",striped:!1,rowsText:"Rows per page:",ofText:"of",allText:"All",forceSort:!1,sortIconTemplate:qC,paginationStartIconTemplate:ZC,paginationEndIconTemplate:tA,paginationLeftIconTemplate:QC,paginationRightIconTemplate:JC},XA={label:"string",field:"string",fixed:"(boolean|string)",format:"(function|null)",width:"(number|null)",sort:"boolean",columnIndex:"number"},GA={label:"",field:"",fixed:!1,format:null,width:null,sort:!0,columnIndex:0},qA={table:YA,tableHeader:jA,column:lA,pagination:xA,selectWrapper:BA,scroll:RA,tableBordered:zA,paginationBordered:CA,borderless:iA,checkboxRowWrapper:rA,checkboxRow:oA,checkboxHeaderWrapper:nA,checkboxHeader:sA,row:MA,rowItem:$A,striped:WA,sortIconWrapper:FA,sortIcon:VA,paginationRowsText:IA,paginationNav:SA,paginationButtonsWrapper:AA,hoverRow:uA,borderColor:eA,color:aA,fixedHeader:hA,fixedHeaderBody:dA,selectableRow:PA,rowAnimation:LA,sm:HA,edit:cA,selectItemsWrapper:NA,paginationStartButton:DA,paginationLeftButton:kA,paginationRightButton:OA,paginationEndButton:wA,loadingItemsWrapper:fA,loadingProgressBarWrapper:yA,loadingProgressBar:vA,loadingMessage:_A,loadingPaginationRowsText:mA,loadingPaginationSelectWrapper:bA,loadingPaginationNav:gA,loadingColumn:pA,noFoundMessageWrapper:EA,noFoundMessage:TA},ZA={table:"string",tableHeader:"string",column:"string",pagination:"string",selectWrapper:"string",scroll:"string",tableBordered:"string",paginationBordered:"string",borderless:"string",checkboxRowWrapper:"string",checkboxRow:"string",checkboxHeaderWrapper:"string",checkboxHeader:"string",row:"string",rowItem:"string",striped:"string",sortIconWrapper:"string",sortIcon:"string",paginationRowsText:"string",paginationNav:"string",paginationButtonsWrapper:"string",hoverRow:"string",borderColor:"string",color:"string",fixedHeader:"string",fixedHeaderBody:"string",selectableRow:"string",rowAnimation:"string",sm:"string",edit:"string",selectItemsWrapper:"string",paginationStartButton:"string",paginationLeftButton:"string",paginationRightButton:"string",paginationEndButton:"string",loadingItemsWrapper:"string",loadingProgressBarWrapper:"string",loadingProgressBar:"string",loadingMessage:"string",loadingPaginationRowsText:"string",loadingPaginationSelectWrapper:"string",loadingPaginationNav:"string",loadingColumn:"string",noFoundMessageWrapper:"string",noFoundMessage:"string"};class pr{constructor(t,e={},i={},n={}){this._element=t,this._options=this._getOptions(i),this._classes=this._getClasses(n),this._sortReverse=!1,this._activePage=0,this._search="",this._searchColumn=null,this._paginationLeft=null,this._paginationRight=null,this._paginationStart=null,this._paginationEnd=null,this._select=null,this._selectInstance=null,this._selected=[],this._checkboxes=null,this._headerCheckbox=null,this._rows=this._getRows(e.rows),this._columns=this._getColumns(e.columns),this._element&&(O.setData(t,pn,this),this._perfectScrollbar=null,this._setup())}static get NAME(){return un}get columns(){return this._columns.map((t,e)=>{let i={...GA,field:`field_${e}`,columnIndex:e};return typeof t=="string"?i.label=t:typeof t=="object"&&(i={...i,...t}),L("column",i,XA),i})}get rows(){return this._rows.map((t,e)=>{const i={rowIndex:e};return Array.isArray(t)?this.columns.forEach((n,o)=>{t[o]===0?i[n.field]=t[o]:i[n.field]=t[o]||this._options.defaultValue}):typeof t=="object"&&this.columns.forEach(n=>{t[n.field]===0?i[n.field]=t[n.field]:i[n.field]=t[n.field]||this._options.defaultValue}),i})}get searchResult(){return NC(this.rows,this._search,this._searchColumn)}get computedRows(){let t=[...this.searchResult];return this._options.sortOrder&&(t=PC({rows:t,field:this._options.sortField,order:this._options.sortOrder})),this._options.pagination&&(this._options.entries==="All"?t=Ip({rows:t,entries:t.length,activePage:this._activePage}):t=Ip({rows:t,entries:this._options.entries,activePage:this._activePage})),t}get pages(){return this._options.entries==="All"?1:Math.ceil(this.searchResult.length/this._options.entries)}get navigationText(){const t=this._activePage*this._options.entries;return this.searchResult.length===0?`0 ${this._options.ofText} 0`:this._options.entries==="All"?`1 - ${this.searchResult.length} ${this._options.ofText} ${this.searchResult.length}`:`${t+1} - ${this.computedRows.length+t} ${this._options.ofText} ${this.searchResult.length}`}get tableOptions(){return{classes:this._classes,columns:this.columns,rows:this.computedRows,noFoundMessage:this._options.noFoundMessage,edit:this._options.edit,loading:this._options.loading,loaderClass:this._options.loaderClass,loadingMessage:this._options.loadingMessage,selectable:this._options.selectable,multi:this._options.multi,bordered:this._options.bordered,borderless:this._options.borderless,striped:this._options.striped,hover:this._options.hover,fixedHeader:this._options.fixedHeader,sm:this._options.sm,sortIconTemplate:this._options.sortIconTemplate,pagination:{enable:this._options.pagination,text:this.navigationText,entries:this._options.entries,entriesOptions:this._options.entriesOptions,fullPagination:this._options.fullPagination,rowsText:this._options.rowsText,ofText:this._options.ofText,allText:this._options.allText,paginationStartIconTemplate:this._options.paginationStartIconTemplate,paginationLeftIconTemplate:this._options.paginationLeftIconTemplate,paginationRightIconTemplate:this._options.paginationRightIconTemplate,paginationEndIconTemplate:this._options.paginationEndIconTemplate,classes:this._classes},forceSort:this._options.forceSort}}update(t,e={}){t&&t.rows&&(this._rows=t.rows),t&&t.columns&&(this._columns=t.columns),this._clearClassList(e),this._options=this._getOptions({...this._options,...e}),this._setup(),this._performSort()}dispose(){this._selectInstance&&this._selectInstance.dispose(),O.removeData(this._element,pn),this._removeEventListeners(),this._perfectScrollbar.destroy(),this._element=null}search(t,e){this._search=t,this._searchColumn=e,this._activePage=0,this._options.pagination&&this._toggleDisableState(),this._renderRows(),this._options.maxHeight&&(this._perfectScrollbar.element.scrollTop=0,this._perfectScrollbar.update())}sort(t,e="asc"){this._options.sortOrder=e,typeof t=="string"?this._options.sortField=this.columns.find(n=>n.label===t).field:this._options.sortField=t.field;const i=m.findOne(`[data-te-sort="${this._options.sortField}"]`,this._element);this._activePage=0,this._toggleDisableState(),this._renderRows(),this._setActiveSortIcon(i)}setActivePage(t){t<this.pages&&this._changeActivePage(t)}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...qA,...e,...t},L(un,t,ZA),t}_changeActivePage(t){this._activePage=t,this._toggleDisableState(),this._renderRows()}_clearClassList(t){["hover","bordered","borderless","sm","striped"].forEach(e=>{this._options[e]&&!t[e]&&g.removeDataAttribute(`data-te-${e}`)})}_emitSelectEvent(){_.trigger(this._element,UC,{selectedRows:this.rows.filter(t=>this._selected.indexOf(t.rowIndex)!==-1),selectedIndexes:this._selected,allSelected:this._selected.length===this.rows.length})}_getRows(t=[]){const e=m.findOne("tbody",this._element);return e?[...m.find("tr",e).map(n=>m.find("td",n).map(o=>o.innerHTML)),...t]:t}_getColumns(t=[]){const e=m.findOne("thead",this._element);if(!e)return t;const i=m.findOne("tr",e);return[...m.find("th",i).map(o=>({label:o.innerHTML,...g.getDataAttributes(o)})),...t]}_getCSSValue(t){return typeof t=="string"?t:`${t}px`}_getOptions(t){const e={...UA,...g.getDataAttributes(this._element),...t};return L(un,e,KA),e}_setActiveRows(){m.find(fn,this._element).forEach(t=>{this._selected.includes(g.getDataAttribute(t,"index"))?g.addClass(t,`active ${this._classes.selectableRow}`):g.removeClass(t,`active ${this._classes.selectableRow}`)})}_setEntries(t){this._options=this._getOptions({...this._options,entries:t.target.value}),this._activePage>this.pages-1&&(this._activePage=this.pages-1),this._toggleDisableState(),this._renderRows()}_setSelected(){m.find(ql,this._element).forEach(t=>{const e=g.getDataAttribute(t,"rowIndex");t.checked=this._selected.includes(e)}),this._setActiveRows()}_setActiveSortIcon(t){m.find(Gl,this._element).forEach(e=>{const i=this._options.sortOrder==="desc"&&e===t?180:0;g.style(e,{transform:`rotate(${i}deg)`}),e===t&&this._options.sortOrder?g.addClass(e,"opacity-100"):g.removeClass(e,"opacity-100")})}_setup(){this._renderTable(),this._options.pagination&&this._setupPagination(),this._options.edit&&this._setupEditable(),this._options.clickableRows&&this._setupClickableRows(),this._options.selectable&&this._setupSelectable(),this._setupScroll(),this._setupSort()}_setupClickableRows(){m.find(fn,this._element).forEach(t=>{const e=g.getDataAttribute(t,"index");g.addClass(t,"cursor-pointer"),_.on(t,"click",i=>{m.matches(i.target,ql)||_.trigger(this._element,XC,{index:e,row:this.rows[e]})})})}_setupEditable(){m.find(fn,this._element).forEach(t=>{const e=g.getDataAttribute(t,"index");m.find(Xl,t).forEach(i=>{_.on(i,"input",n=>this._updateRow(n,e))})})}_setupScroll(){const t=m.findOne(BC,this._element),e={};if(this._options.maxHeight&&(e.maxHeight=this._getCSSValue(this._options.maxHeight)),this._options.maxWidth){const i=this._getCSSValue(this._options.maxWidth);e.maxWidth=i,g.style(this._element,{maxWidth:i})}if(g.style(t,e),g.addClass(t,`${this._classes.scroll}`),this._options.fixedHeader){let i=m.find(HC,this._element);this._options.selectable&&(i=i.filter((n,o)=>(g.addClass(n,`${this._classes.fixedHeader} ${this._classes.color}`),o!==0))),i.forEach((n,o)=>{g.addClass(n,`${this._classes.fixedHeader} ${this._classes.color}`),this.columns[o].fixed&&g.addClass(n,"!z-40")})}this._perfectScrollbar=new ms(t)}_setupSort(){m.find(Gl,this._element).forEach(t=>{const e=g.getDataAttribute(t,"sort"),[i]=m.parents(t,"th");if(this.columns.sort)g.addClass(i,"cursor-pointer");else return;e===this._options.sortField&&this._setActiveSortIcon(t),_.on(i,"click",()=>{this._options.sortField===e&&this._options.sortOrder==="asc"?this._options.sortOrder="desc":this._options.sortField===e&&this._options.sortOrder==="desc"?this._options.sortOrder=this._options.forceSort?"asc":null:this._options.sortOrder="asc",this._options.sortField=e,this._activePage=0,this._performSort(),this._setActiveSortIcon(t)})})}_performSort(){this._toggleDisableState(),this._renderRows()}_setupSelectable(){this._checkboxes=m.find(ql,this._element),this._headerCheckbox=m.findOne(VC,this._element),_.on(this._headerCheckbox,"input",t=>this._toggleSelectAll(t)),this._checkboxes.forEach(t=>{const e=g.getDataAttribute(t,"rowIndex");_.on(t,"input",i=>this._toggleSelectRow(i,e))})}_setupPagination(){this._paginationRight=m.findOne(FC,this._element),this._paginationLeft=m.findOne(WC,this._element),_.on(this._paginationRight,"click",()=>this._changeActivePage(this._activePage+1)),_.on(this._paginationLeft,"click",()=>this._changeActivePage(this._activePage-1)),this._options.fullPagination&&(this._paginationStart=m.findOne(zC,this._element),this._paginationEnd=m.findOne(jC,this._element),_.on(this._paginationStart,"click",()=>this._changeActivePage(0)),_.on(this._paginationEnd,"click",()=>this._changeActivePage(this.pages-1))),this._toggleDisableState(),this._setupPaginationSelect()}_setupPaginationSelect(){this._select=m.findOne(KC,this._element),this._selectInstance=new on(this._select),_.on(this._select,"valueChange.te.select",t=>this._setEntries(t))}_removeEventListeners(){this._options.pagination&&(_.off(this._paginationRight,"click"),_.off(this._paginationLeft,"click"),_.off(this._select,"valueChange.te.select"),this._options.fullPagination&&(_.off(this._paginationStart,"click"),_.off(this._paginationEnd,"click"))),this._options.edit&&m.find(Xl,this._element).forEach(t=>{_.off(t,"input")}),this._options.clickableRows&&m.find(fn,this._element).forEach(t=>{_.off(t,"click")}),m.find(Gl,this._element).forEach(t=>{const[e]=m.parents(t,"th");_.off(e,"click")}),this._options.selectable&&(_.off(this._headerCheckbox,"input"),this._checkboxes.forEach(t=>{_.off(t,"input")}))}_renderTable(){this._element.innerHTML=Op(this.tableOptions).table,this._formatCells(),_.trigger(this._element,Dp)}_renderRows(){const t=m.findOne("tbody",this._element);if(this._options.pagination){const e=m.findOne(YC,this._element);e.innerText=this.navigationText}t.innerHTML=Op(this.tableOptions).rows,this._formatCells(),this._options.edit&&this._setupEditable(),this._options.selectable&&(this._setupSelectable(),this._setSelected()),this._options.clickableRows&&this._setupClickableRows(),_.trigger(this._element,Dp)}_formatCells(){m.find(fn,this._element).forEach(e=>{const i=g.getDataAttribute(e,"index");m.find(Xl,e).forEach(o=>{const r=g.getDataAttribute(o,"field"),a=this.columns.find(l=>l.field===r);a&&a.format!==null&&a.format(o,this.rows[i][r])})})}_toggleDisableState(){this._options.pagination!==!1&&(this._activePage===0||this._options.loading?(this._paginationLeft.setAttribute("disabled",""),this._options.fullPagination&&this._paginationStart.setAttribute("disabled","")):(this._paginationLeft.removeAttribute("disabled"),this._options.fullPagination&&this._paginationStart.removeAttribute("disabled")),this._activePage===this.pages-1||this._options.loading||this.pages===0?(this._paginationRight.setAttribute("disabled",""),this._options.fullPagination&&this._paginationEnd.setAttribute("disabled","")):(this._paginationRight.removeAttribute("disabled"),this._options.fullPagination&&this._paginationEnd.removeAttribute("disabled")))}_toggleSelectAll(t){t.target.checked?this._selected=this.rows.map(e=>e.rowIndex):this._selected=[],this._setSelected(),this._emitSelectEvent()}_toggleSelectRow(t,e){t.target.checked?this._options.multi&&!this._selected.includes(e)?this._selected=[...this._selected,e]:(this._selected=[e],this._checkboxes.forEach(i=>{i!==t.target&&(i.checked=!1)})):this._selected=this._selected.filter(i=>i!==e),this._options.multi&&!t.target.checked&&(this._headerCheckbox.checked=!1),this._setActiveRows(),this._emitSelectEvent()}_updateRow(t,e){const i=g.getDataAttribute(t.target,"field"),n=t.target.textContent,o=this._rows[e];if(Array.isArray(o)){const a=this.columns.find(l=>l.field===i).columnIndex;o[a]=n}else o[i]=n;_.trigger(this._element,GC,{rows:this._rows,columns:this._columns})}static jQueryInterface(t,e,i){return this.each(function(){let n=O.getData(this,pn);const o=typeof t=="object"&&t;if(!(!n&&/dispose/.test(t))&&(n||(n=new pr(this,o,e)),typeof t=="string")){if(typeof n[t]>"u")throw new TypeError(`No method named "${t}"`);n[t](e,i)}})}static getInstance(t){return O.getData(t,pn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Mp="rating",fr="te.rating",QA="data-te-rating-init",JA="[data-te-rating-icon-ref]",bs=`.${fr}`,tw="ArrowLeft",ew="ArrowRight",iw={tooltip:"string",value:"(string|number)",readonly:"boolean",after:"string",before:"string",dynamic:"boolean",active:"string"},sw={tooltip:"top",value:"",readonly:!1,after:"",before:"",dynamic:!1,active:"fill-current"},Lp=`onSelect${bs}`,nw=`onHover${bs}`,$p=`keyup${bs}`,Rp=`focusout${bs}`,Pp=`keydown${bs}`,Np=`mousedown${bs}`;class Bp{constructor(t,e){this._element=t,this._icons=m.find(JA,this._element),this._options=this._getConfig(e),this._index=-1,this._savedIndex=null,this._originalClassList=[],this._originalIcons=[],this._fn={},this._tooltips=[],this._element&&(O.setData(t,fr,this),this._init())}static get NAME(){return Mp}dispose(){O.removeData(this._element,fr),this._options.readonly||(_.off(this._element,$p),_.off(this._element,Rp),_.off(this._element,Pp),this._element.removeEventListener("mouseleave",this._fn.mouseleave),this._icons.forEach((t,e)=>{_.off(t,Np),t.removeEventListener("mouseenter",this._fn.mouseenter[e]),g.removeClass(t,"cursor-pointer")}),this._tooltips.forEach(t=>{t._element.removeAttribute(QA),t.dispose()}),this._icons.forEach(t=>t.removeAttribute("tabIndex"))),this._element=null}_init(){this._options.readonly||(this._bindMouseEnter(),this._bindMouseLeave(),this._bindMouseDown(),this._bindKeyDown(),this._bindKeyUp(),this._bindFocusLost(),this._icons.forEach(t=>{g.addClass(t,"cursor-pointer")})),this._options.dynamic&&(this._saveOriginalClassList(),this._saveOriginalIcons()),this._setCustomText(),this._setToolTips(),this._options.value&&(this._index=this._options.value-1,this._updateRating(this._index))}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...sw,...e,...t},L(Mp,t,iw),t}_bindMouseEnter(){this._fn.mouseenter=[],this._icons.forEach((t,e)=>{t.addEventListener("mouseenter",this._fn.mouseenter[e]=i=>{this._index=this._icons.indexOf(i.target),this._updateRating(this._index),this._triggerEvents(t,nw)})})}_bindMouseLeave(){this._element.addEventListener("mouseleave",this._fn.mouseleave=()=>{this._savedIndex!==null?(this._updateRating(this._savedIndex),this._index=this._savedIndex):this._options.value?(this._updateRating(this._options.value-1),this._index=this._options.value-1):(this._index=-1,this._clearRating())})}_bindMouseDown(){this._icons.forEach(t=>{_.on(t,Np,()=>{this._setElementOutline("none"),this._savedIndex=this._index,this._triggerEvents(t,Lp)})})}_bindKeyDown(){this._element.tabIndex=0,_.on(this._element,Pp,t=>this._updateAfterKeyDown(t))}_bindKeyUp(){_.on(this._element,$p,()=>this._setElementOutline("auto"))}_bindFocusLost(){_.on(this._element,Rp,()=>this._setElementOutline("none"))}_setElementOutline(t){this._element.style.outline=t}_triggerEvents(t,e){_.trigger(t,e,{value:this._index+1})}_updateAfterKeyDown(t){const e=this._icons.length-1,i=this._index;t.key===ew&&this._index<e&&(this._index+=1),t.key===tw&&this._index>-1&&(this._index-=1),i!==this._index&&(this._savedIndex=this._index,this._updateRating(this._savedIndex),this._triggerEvents(this._icons[this._savedIndex],Lp))}_updateRating(t){this._clearRating(),this._options.dynamic&&this._restoreOriginalIcon(t),this._icons.forEach((e,i)=>{i<=t&&g.addClass(e.querySelector("svg"),this._options.active)})}_clearRating(){this._icons.forEach((t,e)=>{const i=t.querySelector("svg");this._options.dynamic&&(t.classList=this._originalClassList[e],i.innerHTML=this._originalIcons[e]),g.removeClass(i,this._options.active)})}_setToolTips(){this._icons.forEach((t,e)=>{const i=g.getDataAttribute(t,"toggle");t.title&&!i&&(g.setDataAttribute(t,"toggle","tooltip"),this._tooltips[e]=new is(t,{placement:this._options.tooltip}))})}_setCustomText(){this._icons.forEach(t=>{const e=g.getDataAttribute(t,"after"),i=g.getDataAttribute(t,"before");e&&t.insertAdjacentHTML("afterEnd",e),i&&t.insertAdjacentHTML("beforeBegin",i)})}_saveOriginalClassList(){this._icons.forEach(t=>{const e=t.classList.value;this._originalClassList.push(e)})}_saveOriginalIcons(){this._icons.forEach(t=>{const e=t.querySelector("svg").innerHTML;this._originalIcons.push(e)})}_restoreOriginalIcon(t){const e=this._originalClassList[t],i=this._originalIcons[t];this._icons.forEach((n,o)=>{if(o<=t){const r=n.querySelector("svg");r.innerHTML=i,n.classList=e}})}static getInstance(t){return O.getData(t,fr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Zl="popconfirm",_n="te.popconfirm",Hp=`.${_n}`,ow=`cancel${Hp}`,rw=`confirm${Hp}`,aw="[data-te-popconfirm-body]",Ql="data-te-popconfirm-popover",lw="data-te-popconfirm-modal",Vp="data-te-popconfirm-backdrop",cw={popconfirmMode:"string",message:"string",cancelText:"(null|string)",okText:"(null|string)",popconfirmIconTemplate:"string",cancelLabel:"(null|string)",confirmLabel:"(null|string)",position:"(null|string)"},hw={popconfirmMode:"inline",message:"Are you sure?",cancelText:"Cancel",okText:"OK",popconfirmIconTemplate:"",cancelLabel:"Cancel",confirmLabel:"Confirm",position:"bottom"},dw={backdrop:"string",body:"string",btnCancel:"string",btnConfirm:"string",btnsContainer:"string",fade:"string",icon:"string",message:"string",messageText:"string",modal:"string",popover:"string"},uw={backdrop:"h-full w-full z-[1070] fixed top-0 left-0 bg-[#00000066] flex justify-center items-center",body:"p-[1rem] bg-white rounded-[0.5rem] opacity-0 dark:bg-neutral-700",btnCancel:"inline-block rounded bg-primary-100 px-4 pb-[5px] pt-[6px] text-xs font-medium uppercase leading-normal text-primary-700 transition duration-150 ease-in-out hover:bg-primary-accent-100 focus:bg-primary-accent-100 focus:outline-none focus:ring-0 active:bg-primary-accent-200",btnConfirm:"inline-block rounded bg-primary px-4 pb-[5px] pt-[6px] text-xs font-medium uppercase leading-normal text-white shadow-[0_4px_9px_-4px_#3b71ca] transition duration-150 ease-in-out hover:bg-primary-600 hover:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] focus:bg-primary-600 focus:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] focus:outline-none focus:ring-0 active:bg-primary-700 active:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] dark:shadow-[0_4px_9px_-4px_rgba(59,113,202,0.5)] dark:hover:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)] dark:focus:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)] dark:active:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)]",btnsContainer:"flex justify-end space-x-2",fade:"transition-opacity duration-[150ms] ease-linear",icon:"pr-2",message:"flex mb-3",messageText:"text-neutral-600 dark:text-white",modal:"absolute w-[300px] z-[1080] shadow-sm rounded-[0.5rem]",popover:"w-[300px] border-0 rounded-[0.5rem] z-[1080] shadow-sm"};class _r{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._popper=null,this._cancelButton="",this._confirmButton="",this._isOpen=!1,this._uid=this._element.id?`popconfirm-${this._element.id}`:bt("popconfirm-"),t&&O.setData(t,_n,this),this._clickHandler=this.open.bind(this),_.on(this._element,"click",this._clickHandler)}static get NAME(){return Zl}get container(){return m.findOne(`#${this._uid}`)}get popconfirmBody(){return m.findOne(aw,this.container)}dispose(){(this._isOpen||this.container!==null)&&this.close(),O.removeData(this._element,_n),_.off(this._element,"click",this._clickHandler),this._element=null}open(){this._isOpen||(this._options.popconfirmMode==="inline"?this._openPopover(this._getPopoverTemplate()):this._openModal(this._getModalTemplate()),this._handleCancelButtonClick(),this._handleConfirmButtonClick(),this._listenToEscapeKey(),this._listenToOutsideClick())}close(){if(this._isOpen){if(this._popper!==null||m.findOne(`[${Ql}]`)!==null)_.on(this.popconfirmBody,"transitionend",this._handlePopconfirmTransitionEnd.bind(this)),g.removeClass(this.popconfirmBody,"opacity-100");else{const t=m.findOne(`[${Vp}]`);g.removeClass(this.popconfirmBody,"opacity-100"),document.body.removeChild(t),this._isOpen=!1}_.off(document,"click",this._handleOutsideClick.bind(this)),_.off(document,"keydown",this._handleEscapeKey.bind(this))}}_handlePopconfirmTransitionEnd(t){if(t.target!==this.popconfirmBody)return;const e=m.findOne(`[${Ql}]`);_.off(this.popconfirmBody,"transitionend"),this._isOpen&&t&&t.propertyName==="opacity"&&(this._popper.destroy(),e&&document.body.removeChild(e),this._isOpen=!1)}_getPopoverTemplate(){const t=$("div"),e=this._getPopconfirmTemplate();return t.setAttribute(Ql,""),g.addClass(t,this._classes.popover),t.id=this._uid,t.innerHTML=e,t}_getModalTemplate(){const t=$("div"),e=this._getPopconfirmTemplate();return t.setAttribute(lw,""),g.addClass(t,`${this._classes.modal}`),t.id=this._uid,t.innerHTML=e,t}_getPopconfirmTemplate(){return`<div data-te-popconfirm-body class="${this._classes.body}">
+      <p class="${this._classes.message}">
+      ${this._options.popconfirmIconTemplate?`<span class="${this._classes.icon}">${this._options.popconfirmIconTemplate}</span>`:""}
+      <span class="${this._classes.messageText}">${this._options.message}</span>
+      </p>
+      <div class="${this._classes.btnsContainer}">
+      ${this._options.cancelText?`<button type="button" data-te-ripple-init data-te-ripple-color="light" id="popconfirm-button-cancel" aria-label="${this._options.cancelLabel}"
+        class="${this._classes.btnCancel}">${this._options.cancelText}</button>`:""}
+      <button type="button" data-te-ripple-init data-te-ripple-color="light" id="popconfirm-button-confirm"
+      aria-label="${this._options.confirmLabel}"
+      class="${this._classes.btnConfirm}">${this._options.okText?this._options.okText:"Ok"}</button>
+      </div>
+    </div>`}_getConfig(t){return t={...hw,...g.getDataAttributes(this._element),...t},L(Zl,t,cw),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...uw,...e,...t},L(Zl,t,dw),t}_openPopover(t){this._popper=Fe(this._element,t,{placement:this._translatePositionValue(),modifiers:[{name:"offset",options:{offset:[0,5]}}]}),document.body.appendChild(t),setTimeout(()=>{g.addClass(this.popconfirmBody,`${this._classes.fade} opacity-100`),this._isOpen=!0},0)}_openModal(t){const e=$("div");e.setAttribute(Vp,""),g.addClass(e,this._classes.backdrop),document.body.appendChild(e),e.appendChild(t),g.addClass(this.popconfirmBody,"opacity-100"),this._isOpen=!0}_handleCancelButtonClick(){const t=this.container;this._cancelButton=m.findOne("#popconfirm-button-cancel",t),Ye.getOrCreateInstance(this._cancelButton,{rippleColor:"light"}),this._cancelButton!==null&&_.on(this._cancelButton,"click",()=>{this.close(),_.trigger(this._element,ow)})}_handleConfirmButtonClick(){const t=this.container;this._confirmButton=m.findOne("#popconfirm-button-confirm",t),Ye.getOrCreateInstance(this._confirmButton,{rippleColor:"light"}),_.on(this._confirmButton,"click",()=>{this.close(),_.trigger(this._element,rw)})}_listenToEscapeKey(){_.on(document,"keydown",this._handleEscapeKey.bind(this))}_handleEscapeKey(t){t.keyCode===xi&&this.close()}_listenToOutsideClick(){_.on(document,"click",this._handleOutsideClick.bind(this))}_handleOutsideClick(t){const e=this.container,i=t.target===e,n=e&&e.contains(t.target),o=t.target===this._element,r=this._element&&this._element.contains(t.target);!i&&!n&&!o&&!r&&this.close()}_translatePositionValue(){switch(this._options.position){case"top left":return"top-end";case"top":return"top";case"top right":return"top-start";case"bottom left":return"bottom-end";case"bottom":return"bottom";case"bottom right":return"bottom-start";case"left":return"left";case"left top":return"left-end";case"left bottom":return"left-start";case"right":return"right";case"right top":return"right-end";case"right bottom":return"right-start";case void 0:return"bottom";default:return"bottom"}}static jQueryInterface(t,e){return this.each(function(){const i=O.getData(this,_n),n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))){if(!i)return new _r(this,n);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}}})}static getInstance(t){return O.getData(t,_n)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Jl="lightbox",gn="te.lightbox",vs=`click${`.${gn}`}.data-api`,Fp="[data-te-lightbox-init]",pw=`${Fp} img:not([data-te-lightbox-disabled])`,Wp="data-te-lightbox-caption",fw="data-te-lightbox-disabled",ye="data-te-lightbox-active",_w=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 12h-15m0 0l6.75 6.75M4.5 12l6.75-6.75" />
+</svg>
+`,gw=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 12h15m0 0l-6.75-6.75M19.5 12l-6.75 6.75" />
+</svg>
+`,mw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M3.75 3.75v4.5m0-4.5h4.5m-4.5 0L9 9M3.75 20.25v-4.5m0 4.5h4.5m-4.5 0L9 15M20.25 3.75h-4.5m4.5 0v4.5m0-4.5L15 9m5.25 11.25h-4.5m4.5 0v-4.5m0 4.5L15 15" />
+</svg>
+`,bw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M9 9V4.5M9 9H4.5M9 9L3.75 3.75M9 15v4.5M9 15H4.5M9 15l-5.25 5.25M15 9h4.5M15 9V4.5M15 9l5.25-5.25M15 15h4.5M15 15v4.5m0-4.5l5.25 5.25" />
+</svg>
+`,vw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-5.197-5.197m0 0A7.5 7.5 0 105.196 5.196a7.5 7.5 0 0010.607 10.607zM10.5 7.5v6m3-3h-6" />
+</svg>
+`,yw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+<path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-5.197-5.197m0 0A7.5 7.5 0 105.196 5.196a7.5 7.5 0 0010.607 10.607zM13.5 10.5h-6" />
+</svg>
+`,Tw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M6 18L18 6M6 6l12 12" />
+</svg>
+`,Ew={container:"string",zoomLevel:"(number|string)",prevIconTemplate:"string",nextIconTemplate:"string",showFullscreenIconTemplate:"string",hideFullscreenIconTemplate:"string",zoomInIconTemplate:"string",closeIconTemplate:"string",zoomOutIconTemplate:"string",spinnerContent:"string"},xw={container:"body",zoomLevel:1,prevIconTemplate:_w,nextIconTemplate:gw,showFullscreenIconTemplate:mw,hideFullscreenIconTemplate:bw,zoomInIconTemplate:vw,zoomOutIconTemplate:yw,closeIconTemplate:Tw,spinnerContent:"Loading..."},Cw={caption:"text-white text-ellipsis overflow-hidden whitespace-nowrap mx-[10px] text-center",captionWrapper:"fixed left-0 bottom-0 w-full h-[50px] flex justify-center items-center",closeBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",fullscreenBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",gallery:"invisible fixed left-0 top-0 w-full h-full z-[1100] pointer-events-none opacity-0 bg-[#000000e6] transition-all duration-[400ms] motion-reduce:transition-none",galleryContent:"fixed top-[50px] left-[50px] w-[calc(100%-100px)] h-[calc(100%-100px)]",galleryCounter:"flex justify-center items-center px-[10px] mb-0 h-full text-[#b3b3b3]",img:"absolute left-0 top-0 w-full max-h-full h-auto cursor-pointer pointer-events-auto",imgWrapper:"absolute top-0 left-0 w-full h-full opacity-0 transform scale-[0.25] transition-all duration-[400ms] ease-out pointer-events-none motion-reduce:transition-none motion-reduce:transform-none",leftTools:"float-left h-full",loader:"fixed left-0 top-0 z-[2] w-full h-full text-neutral-50 opacity-1 flex justify-center items-center pointer-events-none transition-opacity duration-[1000ms] motion-reduce:transition-none",nextBtn:"border-none bg-transparent w-full h-[50px] flex justify-center items-center text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",nextBtnWrapper:"fixed right-0 top-0 w-[50px] h-full flex justify-center items-center transition-opacity duration-[400ms] motion-reduce:transition-none",prevBtn:"border-none bg-transparent w-full h-[50px] flex justify-center items-center text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",prevBtnWrapper:"fixed left-0 top-0 w-[50px] h-full flex justify-center items-center transition-opacity duration-[400ms] motion-reduce:transition-none",rightTools:"float-right",spinner:"inline-block h-8 w-8 animate-[spinner-grow_0.75s_linear_infinite] rounded-full bg-current align-[-0.125em] motion-reduce:animate-[spinner-grow_1.5s_linear_infinite]",spinnerContent:"!absolute !-m-px !h-px !w-px !overflow-hidden !whitespace-nowrap !border-0 !p-0 ![clip:rect(0,0,0,0)]",toolbar:"absolute top-0 left-0 w-full h-[50px] z-20 transition-opacity duration-[400ms] motion-reduce:transition-none",vertical:"h-full max-h-full w-auto",zoomBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none"},Aw={caption:"string",captionWrapper:"string",closeBtn:"string",fullscreenBtn:"string",gallery:"string",galleryContent:"string",galleryCounter:"string",img:"string",imgWrapper:"string",leftTools:"string",loader:"string",nextBtn:"string",nextBtnWrapper:"string",prevBtn:"string",prevBtnWrapper:"string",rightTools:"string",spinner:"string",spinnerContent:"string",toolbar:"string",vertical:"string",zoomBtn:"string"};class ys{constructor(t,e={},i){this._element=t,this._options=e,this._classes=this._getClasses(i),this._getContainer(),this._id=`lightbox-${Math.random().toString(36).substr(2,9)}`,this._activeImg=0,this._images=[],this._zoom=1,this._gallery=null,this._galleryToolbar=null,this._galleryContent=null,this._loader=null,this._imgCounter=null,this._animating=!1,this._fullscreen=!1,this._zoomBtn=null,this._fullscreenBtn=null,this._toolsToggleTimer=0,this._mousedown=!1,this._mousedownPositionX=0,this._mousedownPositionY=0,this._originalPositionX=0,this._originalPositionY=0,this._positionX=0,this._positionY=0,this._zoomTimer=0,this._tapCounter=0,this._tapTime=0,this._rightArrow=null,this._leftArrowWrapper=null,this._rightArrowWrapper=null,this._initiated=!1,this._multitouch=!1,this._touchZoomPosition=[],this._element&&(O.setData(t,gn,this),this.init())}static get NAME(){return Jl}get activeImg(){return this._activeImg}get currentImg(){return m.findOne(`[${ye}]`,this._galleryContent)}get options(){const t={...xw,...g.getDataAttributes(this._element),...this._options};return L(Jl,t,Ew),t}init(){this._initiated||(this._appendTemplate(),this._initiated=!0)}open(t=0){this._getImages(),this._setActiveImg(t),this._sortImages(),this._triggerEvents("open","opened"),this._loadImages().then(e=>{this._resizeImages(e),this._toggleTemplate(),this._addEvents(),this._focusFullscreenBtn()})}close(){this.reset(),this._removeEvents(),this._toggleTemplate(),this._triggerEvents("close","closed")}slide(t="right"){this._animating===!0||this._images.length<=1||(this._triggerEvents("slide","slided"),this._beforeSlideEvents(),t==="right"&&this._slideHorizontally(t),t==="left"&&this._slideHorizontally(t),t==="first"&&this._slideToTarget(t),t==="last"&&this._slideToTarget(t),this._afterSlideEvents())}zoomIn(){this._zoom>=3||(this._triggerEvents("zoomIn","zoomedIn"),this._zoom+=parseFloat(this.options.zoomLevel),g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn())}zoomOut(){this._zoom<=1||(this._triggerEvents("zoomOut","zoomedOut"),this._zoom-=parseFloat(this.options.zoomLevel),g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn(),this._updateImgPosition())}toggleFullscreen(){this._fullscreen===!1?(this._fullscreenBtn.setAttribute(ye,""),this._fullscreenBtn.innerHTML=this.options.hideFullscreenIconTemplate,this._gallery.requestFullscreen&&this._gallery.requestFullscreen(),this._fullscreen=!0):(this._fullscreenBtn.removeAttribute(ye),document.exitFullscreen&&document.exitFullscreen(),this._fullscreen=!1)}reset(){this._restoreDefaultFullscreen(),this._restoreDefaultPosition(),this._restoreDefaultZoom(),clearTimeout(this._toolsToggleTimer),clearTimeout(this._doubleTapTimer)}dispose(){_.off(document,vs,pw,this.toggle),this._galleryContent&&this._removeEvents(),this._gallery&&this._gallery.remove(),O.removeData(this._element,gn),this._element=null}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Cw,...e,...t},L(Jl,t,Aw),t}_getImages(){const e=m.find("img",this._element).filter(i=>!i.hasAttribute(fw));this._images=e}_getContainer(){this._container=m.findOne(this.options.container)}_setActiveImg(t){this._activeImg=typeof t=="number"?t:this._images.indexOf(t.target)}_appendTemplate(){this._gallery=$("div"),g.addClass(this._gallery,`${this._classes.gallery}`),this._element.dataset.id=this._id,this._gallery.id=this._id,this._appendLoader(),this._appendToolbar(),this._appendContent(),this._appendArrows(),this._appendCaption(),this._container.append(this._gallery)}_appendToolbar(){this._galleryToolbar=$("div"),this._imgCounter=$("p"),this._fullscreenBtn=$("button"),this._zoomBtn=$("button");const t=$("button"),e=$("div"),i=$("div");g.addClass(this._galleryToolbar,`${this._classes.toolbar}`),g.addClass(this._imgCounter,`${this._classes.galleryCounter}`),g.addClass(this._fullscreenBtn,`${this._classes.fullscreenBtn}`),g.addClass(this._zoomBtn,`${this._classes.zoomInBtn}`),g.addClass(this._zoomBtn,this._classes.zoomBtn),g.addClass(e,`${this._classes.leftTools}`),g.addClass(i,`${this._classes.rightTools}`),g.addClass(t,`${this._classes.closeBtn}`),this._fullscreenBtn.innerHTML=this.options.showFullscreenIconTemplate,t.innerHTML=this.options.closeIconTemplate,this._zoomBtn.innerHTML=this.options.zoomInIconTemplate,this._fullscreenBtn.setAttribute("aria-label","Toggle fullscreen"),this._zoomBtn.setAttribute("aria-label","Zoom in"),t.setAttribute("aria-label","Close"),_.on(this._fullscreenBtn,vs,()=>this.toggleFullscreen()),_.on(this._zoomBtn,vs,()=>this._toggleZoom()),_.on(t,vs,()=>this.close()),e.append(this._imgCounter),i.append(this._fullscreenBtn),i.append(this._zoomBtn),i.append(t),this._galleryToolbar.append(e),this._galleryToolbar.append(i),this._gallery.append(this._galleryToolbar)}_appendContent(){this._galleryContent=$("div"),g.addClass(this._galleryContent,`${this._classes.galleryContent}`),this._gallery.append(this._galleryContent)}_appendLoader(){this._loader=$("div");const t=$("div"),e=$("span");g.addClass(this._loader,`${this._classes.loader}`),g.addClass(t,`${this._classes.spinner}`),g.addClass(e,`${this._classes.spinnerContent}`),t.setAttribute("role","status"),e.innerHTML=this.options.spinnerContent,t.append(e),this._loader.append(t),this._gallery.append(this._loader)}_appendArrows(){this._leftArrowWrapper=$("div"),g.addClass(this._leftArrowWrapper,`${this._classes.prevBtnWrapper}`);const t=$("button");t.setAttribute("aria-label","Previous"),g.addClass(t,`${this._classes.prevBtn}`),_.on(t,vs,()=>this.slide("left")),this._leftArrowWrapper.append(t),this._rightArrowWrapper=$("div"),g.addClass(this._rightArrowWrapper,`${this._classes.nextBtnWrapper}`),this._rightArrow=$("button"),this._rightArrow.setAttribute("aria-label","Next"),g.addClass(this._rightArrow,`${this._classes.nextBtn}`),_.on(this._rightArrow,vs,()=>this.slide()),this._rightArrowWrapper.append(this._rightArrow),this._rightArrow.innerHTML=this.options.nextIconTemplate,t.innerHTML=this.options.prevIconTemplate,this._getImages(),!(this._images.length<=1)&&(this._gallery.append(this._leftArrowWrapper),this._gallery.append(this._rightArrowWrapper))}_appendCaption(){const t=$("div"),e=$("p");e.setAttribute(Wp,""),g.addClass(t,`${this._classes.captionWrapper}`),g.addClass(e,`${this._classes.caption}`),t.append(e),this._gallery.append(t)}_sortImages(){for(let t=0;t<this._activeImg;t++)this._images.push(this._images.shift())}async _loadImages(){const t=[],e=[];this._galleryContent.innerHTML="";let i=0;return this._images.forEach((n,o)=>{t.push(new Promise(r=>{const a=new Image,l=$("div");g.addClass(l,`${this._classes.imgWrapper}`),g.addClass(a,`${this._classes.img}`),this._addImgStyles(a,l,i,o,n),l.append(a),this._galleryContent.append(l),a.onload=r,a.src=n.dataset.teImg||n.src,e.push(a),i+=100}))}),await Promise.all(t),e}_addImgStyles(t,e,i,n,o){t.alt=o.alt,t.draggable=!1,g.style(e,{position:"absolute",left:`${i}%`,top:0}),(o.dataset.teCaption||o.dataset.teCaption==="")&&(t.dataset.caption=o.dataset.teCaption),i===0?(o.width<o.height&&g.addClass(t,`${this._classes.vertical}`),g.style(e,{opacity:1}),t.setAttribute(ye,"")):t.removeAttribute(ye),n===this._images.length-1&&this._images.length>1&&g.style(e,{left:"-100%"})}_resizeImages(t){t.forEach(e=>{this._calculateImgSize(e)})}_calculateImgSize(t){t.width>=t.height?(t.style.width="100%",t.style.maxWidth="100%",t.style.height="auto",t.style.top=`${(t.parentNode.offsetHeight-t.height)/2}px`,t.style.left=0):(t.style.height="100%",t.style.maxHeight="100%",t.style.width="auto",t.style.left=`${(t.parentNode.offsetWidth-t.width)/2}px`,t.style.top=0),t.width>=t.parentNode.offsetWidth&&(t.style.width=`${t.parentNode.offsetWidth}px`,t.style.height="auto",t.style.left=0,t.style.top=`${(t.parentNode.offsetHeight-t.height)/2}px`),t.height>=t.parentNode.offsetHeight&&(t.style.height=`${t.parentNode.offsetHeight}px`,t.style.width="auto",t.style.top=0,t.style.left=`${(t.parentNode.offsetWidth-t.width)/2}px`),this._positionX=parseFloat(t.style.left)||0,this._positionY=parseFloat(t.style.top)||0}_onResize(){this._images=m.find("img",this._galleryContent),this._images.forEach(t=>{this._calculateImgSize(t)})}_onFullscreenChange(){(document.webkitIsFullScreen||document.mozFullScreen||document.msFullscreenElement)===void 0&&(this._fullscreen=!1,this._fullscreenBtn.innerHTML=this.options.showFullscreenIconTemplate,this._fullscreenBtn.removeAttribute(ye))}_beforeSlideEvents(){this._animationStart(),this._restoreDefaultZoom(),this._restoreDefaultPosition(),this._resetDoubleTap()}_slideHorizontally(t){this._images=m.find("img",this._galleryContent),this._images.forEach(e=>{let i;t==="right"?(i=parseInt(e.parentNode.style.left,10)-100,i<-100&&(i=(this._images.length-2)*100)):(i=parseInt(e.parentNode.style.left,10)+100,i===(this._images.length-1)*100&&(i=-100)),this._slideImg(e,i)}),this._updateActiveImg(t)}_slideImg(t,e){e===0?(t.setAttribute(ye,""),g.style(t.parentNode,{opacity:1,transform:"scale(1)"})):(t.removeAttribute(ye),g.style(t.parentNode,{opacity:0,transform:"scale(0.25)"})),t.parentNode.style.left=`${e}%`}_slideToTarget(t){t==="first"&&this._activeImg===0||t==="last"&&this._activeImg===this._images.length-1||(this.reset(),this._removeEvents(),this._showLoader(),this._getImages(),this._activeImg=t==="first"?0:this._images.length-1,this._sortImages(),g.style(this.currentImg.parentNode,{transform:"scale(0.25)",opacity:0}),setTimeout(()=>{this._loadImages().then(e=>{this._resizeImages(e),this._addEvents(),this._updateCaption(),this._hideLoader(),setTimeout(()=>{g.style(this.currentImg.parentNode,{transform:"scale(1)",opacity:1})},10)})},400))}_updateActiveImg(t){t==="right"&&(this._activeImg===this._images.length-1?this._activeImg=0:this._activeImg++),t==="left"&&(this._activeImg===0?this._activeImg=this._images.length-1:this._activeImg--)}_afterSlideEvents(){this._updateCounter(),this._updateCaption()}_updateCounter(){this._images.length<=1||setTimeout(()=>{this._imgCounter.innerHTML=`${this._activeImg+1} / ${this._images.length}`},200)}_updateCaption(){setTimeout(()=>{let t=this.currentImg.alt;(this.currentImg.dataset.caption||this.currentImg.dataset.caption==="")&&(t=this.currentImg.dataset.caption),m.findOne(`[${Wp}]`,this._gallery).innerHTML=t},200)}_toggleTemplate(){this._gallery.style.visibility==="visible"?(g.style(this.currentImg.parentNode,{transform:"scale(0.25)"}),setTimeout(()=>{this._hideGallery(),this._enableScroll(),this._showLoader()},100)):(this._showGallery(),this._disableScroll(),this._updateCounter(),this._updateCaption(),this._setToolsToggleTimout(),this._hideLoader())}_showLoader(){g.style(this._loader,{opacity:1})}_hideLoader(){g.style(this._loader,{opacity:0})}_hideGallery(){g.style(this._gallery,{opacity:0,pointerEvents:"none",visibility:"hidden"})}_showGallery(){g.style(this._gallery,{opacity:1,pointerEvents:"initial",visibility:"visible"}),setTimeout(()=>{g.style(this.currentImg.parentNode,{transform:"scale(1)"})},50)}_toggleZoom(){this._zoom!==1?this.zoomOut():this.zoomIn()}_updateZoomBtn(){this._zoom>1?(this._zoomBtn.setAttribute(ye,""),this._zoomBtn.setAttribute("aria-label","Zoom out"),this._zoomBtn.innerHTML=this.options.zoomOutIconTemplate):(this._zoomBtn.removeAttribute(ye),this._zoomBtn.setAttribute("aria-label","Zoom in"),this._zoomBtn.innerHTML=this.options.zoomInIconTemplate)}_updateImgPosition(){this._zoom===1&&this._restoreDefaultPosition()}_addEvents(){const t=m.find("img",this._galleryContent);this._onWindowTouchmove=this._onWindowTouchmove.bind(this),this._onWindowTouchstart=this._onWindowTouchstart.bind(this),this._onImgMousedown=this._onMousedown.bind(this),this._onImgMousemove=this._onMousemove.bind(this),this._onImgWheel=this._onZoom.bind(this),this._onImgMouseup=this._onMouseup.bind(this),this._onImgTouchend=this._onTouchend.bind(this),this._onImgDoubleClick=this._onDoubleClick.bind(this),this._onWindowResize=this._onResize.bind(this),this._onWindowFullscreenChange=this._onFullscreenChange.bind(this),this._onAnyImgAction=this._resetToolsToggler.bind(this),this._onGalleryClick=this._onBackdropClick.bind(this),this._onKeyupEvent=this._onKeyup.bind(this),this._onRightArrowKeydownEvent=this._onRightArrowKeydown.bind(this),this._onFullscreenBtnKeydownEvent=this._onFullscreenBtnKeydown.bind(this),t.forEach(e=>{_.on(e,"mousedown",this._onImgMousedown,{passive:!0}),_.on(e,"touchstart",this._onImgMousedown,{passive:!0}),_.on(e,"mousemove",this._onImgMousemove,{passive:!0}),_.on(e,"touchmove",this._onImgMousemove,{passive:!0}),_.on(e,"wheel",this._onImgWheel,{passive:!0}),_.on(e,"dblclick",this._onImgDoubleClick,{passive:!0})}),document.addEventListener("touchmove",this._onWindowTouchmove,{passive:!1}),_.on(window,"touchstart",this._onWindowTouchstart),_.on(window,"mouseup",this._onImgMouseup),_.on(window,"touchend",this._onImgTouchend),_.on(window,"resize",this._onWindowResize),_.on(window,"orientationchange",this._onWindowResize),_.on(window,"keyup",this._onKeyupEvent),_.on(window,"fullscreenchange",this._onWindowFullscreenChange),_.on(this._gallery,"mousemove",this._onAnyImgAction),_.on(this._gallery,"click",this._onGalleryClick),_.on(this._rightArrow,"keydown",this._onRightArrowKeydownEvent),_.on(this._fullscreenBtn,"keydown",this._onFullscreenBtnKeydownEvent)}_removeEvents(){m.find("img",this._galleryContent).forEach(e=>{_.off(e,"mousedown",this._onImgMousedown),_.off(e,"touchstart",this._onImgMousedown),_.off(e,"mousemove",this._onImgMousemove),_.off(e,"touchmove",this._onImgMousemove),_.off(e,"wheel",this._onImgWheel),_.off(e,"dblclick",this._onImgDoubleClick)}),document.removeEventListener("touchmove",this._onWindowTouchmove,{passive:!1}),_.off(window,"touchstart",this._onWindowTouchstart),_.off(window,"mouseup",this._onImgMouseup),_.off(window,"touchend",this._onImgTouchend),_.off(window,"resize",this._onWindowResize),_.off(window,"orientationchange",this._onWindowResize),_.off(window,"keyup",this._onKeyupEvent),_.off(window,"fullscreenchange",this._onWindowFullscreenChange),_.off(this._gallery,"mousemove",this._onAnyImgAction),_.off(this._gallery,"click",this._onGalleryClick),_.off(this._rightArrow,"keydown",this._onRightArrowKeydownEvent),_.off(this._fullscreenBtn,"keydown",this._onFullscreenBtnKeydownEvent)}_onMousedown(t){const e=t.touches,i=e?e[0].clientX:t.clientX,n=e?e[0].clientY:t.clientY;this._originalPositionX=parseFloat(this.currentImg.style.left)||0,this._originalPositionY=parseFloat(this.currentImg.style.top)||0,this._positionX=this._originalPositionX,this._positionY=this._originalPositionY,this._mousedownPositionX=i*(1/this._zoom)-this._positionX,this._mousedownPositionY=n*(1/this._zoom)-this._positionY,this._mousedown=!0,t.type==="touchstart"&&t.touches.length>1&&(this._multitouch=!0,this._touchZoomPosition=t.touches)}_onMousemove(t){if(!this._mousedown)return;const e=t.touches,i=e?e[0].clientX:t.clientX,n=e?e[0].clientY:t.clientY;if(e&&this._resetToolsToggler(),!this._multitouch)if(this._zoom!==1)this._positionX=i*(1/this._zoom)-this._mousedownPositionX,this._positionY=n*(1/this._zoom)-this._mousedownPositionY,g.style(this.currentImg,{left:`${this._positionX}px`,top:`${this._positionY}px`});else{if(this._images.length<=1)return;this._positionX=i*(1/this._zoom)-this._mousedownPositionX,g.style(this.currentImg,{left:`${this._positionX}px`})}}_onMouseup(t){this._mousedown=!1,this._moveImg(t.target)}_onTouchend(t){this._mousedown=!1,this._multitouch?t.targetTouches.length===0&&(this._multitouch=!1,this._touchZoomPosition=[]):this._multitouch||(this._checkDoubleTap(t),this._moveImg(t.target))}_calculateTouchZoom(t){const e=Math.hypot(this._touchZoomPosition[1].pageX-this._touchZoomPosition[0].pageX,this._touchZoomPosition[1].pageY-this._touchZoomPosition[0].pageY),i=Math.hypot(t.touches[1].pageX-t.touches[0].pageX,t.touches[1].pageY-t.touches[0].pageY),n=Math.abs(e-i),o=t.view.screen.width;n>o*.03&&(e<=i?this.zoomIn():this.zoomOut(),this._touchZoomPosition=t.touches)}_onWindowTouchstart(t){t.touches.length>1&&(this._multitouch=!0,this._touchZoomPosition=t.touches)}_onWindowTouchmove(t){t.preventDefault(),t.type==="touchmove"&&t.targetTouches.length>1&&this._calculateTouchZoom(t)}_onRightArrowKeydown(t){switch(t.keyCode){case 9:if(t.shiftKey)break;t.preventDefault(),this._focusFullscreenBtn();break}}_onFullscreenBtnKeydown(t){switch(t.keyCode){case 9:if(!t.shiftKey)break;t.preventDefault(),this._focusRightArrow();break}}_onKeyup(t){switch(this._resetToolsToggler(),t.keyCode){case 39:this.slide();break;case 37:this.slide("left");break;case 27:this.close();break;case 36:this.slide("first");break;case 35:this.slide("last");break;case 38:this.zoomIn();break;case 40:this.zoomOut();break}}_focusFullscreenBtn(){setTimeout(()=>{this._fullscreenBtn.focus()},100)}_focusRightArrow(){this._rightArrow.focus()}_moveImg(t){if(this._multitouch||this._zoom!==1||t!==this.currentImg||this._images.length<=1)return;const e=this._positionX-this._originalPositionX;e>0?this.slide("left"):e<0&&this.slide()}_checkDoubleTap(t){clearTimeout(this._doubleTapTimer);const i=new Date().getTime()-this._tapTime;this._tapCounter>0&&i<500?(this._onDoubleClick(t),this._doubleTapTimer=setTimeout(()=>{this._tapTime=new Date().getTime(),this._tapCounter=0},300)):(this._tapCounter++,this._tapTime=new Date().getTime())}_resetDoubleTap(){this._tapTime=0,this._tapCounter=0,clearTimeout(this._doubleTapTimer)}_onDoubleClick(t){this._multitouch||(t.touches||this._setNewPositionOnZoomIn(t),this._zoom!==1?this._restoreDefaultZoom():this.zoomIn())}_onZoom(t){if(t.deltaY>0)this.zoomOut();else{if(this._zoom>=3)return;this._setNewPositionOnZoomIn(t),this.zoomIn()}}_onBackdropClick(t){this._resetToolsToggler(),t.target.tagName==="DIV"&&this.close()}_setNewPositionOnZoomIn(t){clearTimeout(this._zoomTimer),this._positionX=window.innerWidth/2-t.offsetX-50,this._positionY=window.innerHeight/2-t.offsetY-50,this.currentImg.style.transition="all 0.5s ease-out",this.currentImg.style.left=`${this._positionX}px`,this.currentImg.style.top=`${this._positionY}px`,this._zoomTimer=setTimeout(()=>{this.currentImg.style.transition="none"},500)}_resetToolsToggler(){this._showTools(),clearTimeout(this._toolsToggleTimer),this._setToolsToggleTimout()}_setToolsToggleTimout(){this._toolsToggleTimer=setTimeout(()=>{this._hideTools(),clearTimeout(this._toolsToggleTimer)},4e3)}_hideTools(){g.style(this._galleryToolbar,{opacity:0}),g.style(this._leftArrowWrapper,{opacity:0}),g.style(this._rightArrowWrapper,{opacity:0})}_showTools(){g.style(this._galleryToolbar,{opacity:1}),g.style(this._leftArrowWrapper,{opacity:1}),g.style(this._rightArrowWrapper,{opacity:1})}_disableScroll(){g.addClass(document.body,"overflow-y-hidden relative"),document.documentElement.scrollHeight>document.documentElement.clientHeight&&g.addClass(document.body,"md:pr-[17px]")}_enableScroll(){setTimeout(()=>{g.removeClass(document.body,"overflow-y-hidden relative"),g.removeClass(document.body,"md:pr-[17px]")},300)}_animationStart(){this._animating=!0,setTimeout(()=>{this._animating=!1},400)}_restoreDefaultZoom(){this._zoom!==1&&(this._zoom=1,g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn(),this._updateImgPosition())}_restoreDefaultFullscreen(){this._fullscreen&&this.toggleFullscreen()}_restoreDefaultPosition(){clearTimeout(this._zoomTimer);const t=this.currentImg;g.style(this.currentImg.parentNode,{left:0,top:0}),g.style(this.currentImg,{transition:"all 0.5s ease-out",left:0,top:0}),this._calculateImgSize(t),setTimeout(()=>{g.style(this.currentImg,{transition:"none"})},500)}async _triggerEvents(t,e){_.trigger(this._element,`${t}.te.lightbox`),e&&await setTimeout(()=>{_.trigger(this._element,`${e}.te.lightbox`)},505)}static getInstance(t){return O.getData(t,gn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static toggle(){return function(t){const e=m.closest(t.target,`${Fp}`);(ys.getInstance(e)||new ys(e)).open(t)}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,gn);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new ys(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}}const ww={isRequired:"This is required",isEmail:"Please enter a valid email address",isLongerThan:"This field must be longer than {length} characters",isShorterThan:"This field must be shorter than {length} characters",isChecked:"This is required",isPhone:"Please enter a valid phone number",isNumber:"Expected value with type Number",isString:"Expected value with type String",isBoolean:"Expected value with type Boolean",isDate:"Please enter a valid date",is12hFormat:"Please enter a valid time in 12h format",is24hFormat:"Please enter a valid time in 24h format"},kw={isRequired:(s,t)=>(s==null?void 0:s.trim())?!0:t,isEmail:(s,t)=>/^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/.test(s)?!0:t,isLongerThan:(s,t,e)=>s.length>e?!0:t.replace("{length}",e),isShorterThan:(s,t,e)=>s.length<e?!0:t.replace("{length}",e),isChecked:s=>s?!0:"This is required",isPhone:(s,t)=>s.length===9?!0:t,isNumber:(s,t)=>s&&!isNaN(Number(s))?!0:t,isString:(s,t)=>typeof s=="string"?!0:t,isBoolean:(s,t)=>typeof s=="boolean"?!0:t,isDate:(s,t)=>{const e=/^([0-9]{1,2})\/([0-9]{1,2})\/([0-9]{4})$/;return s.match(e)?!0:t},is12hFormat:(s,t)=>{const e=/^(0?[1-9]|1[0-2]):[0-5][0-9] [APap][mM]$/;return s.match(e)?!0:t},is24hFormat:(s,t)=>{const e=/^(?:[01]\d|2[0-3]):[0-5][0-9]$/;return s.match(e)?!0:t}},tc="validation",ec="te.validation",gr=`.${ec}`,zp="data-te-validate",mr="data-te-validated",br="data-te-validation-state",vr="data-te-validation-feedback",ic="data-te-valid-feedback",yr="data-te-invalid-feedback",jp="data-te-validation-ruleset",Sw="data-te-submit-btn-ref",Ow=`[${zp}]`,Iw="[data-te-input-notch-ref] div",Dw=`[${Sw}]`,Mw=`validated${gr}`,Lw=`valid${gr}`,$w=`invalid${gr}`,Rw=`changed${gr}`,Pw={validFeedback:"string",invalidFeedback:"string",disableFeedback:"boolean",customRules:"object",customErrorMessages:"object",activeValidation:"boolean",submitCallback:"(function|null)"},Yp={validFeedback:"Looks good!",invalidFeedback:"Something is wrong!",disableFeedback:!1,customRules:{},customErrorMessages:{},activeValidation:!1,submitCallback:null},Nw={notchLeadingValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[-1px_0_0_#14a44d,_0_1px_0_0_#14a44d,_0_-1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchMiddleValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[0_1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchTrailingValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[1px_0_0_#14a44d,_0_-1px_0_0_#14a44d,_0_1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchLeadingInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[-1px_0_0_#dc4c64,_0_1px_0_0_#dc4c64,_0_-1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",notchMiddleInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[0_1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",notchTrailingInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[1px_0_0_#dc4c64,_0_-1px_0_0_#dc4c64,_0_1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",basicInputValid:"!border-[#14a44d] focus:!border-[#14a44d] focus:!shadow-[inset_0_0_0_1px_#14a44d]",basicInputInvalid:"!border-[#dc4c64] focus:!border-[#dc4c64] focus:!shadow-[inset_0_0_0_1px_#dc4c64]",checkboxValid:"checked:!border-[#14a44d] checked:!bg-[#14a44d] checked:after:!bg-[#14a44d]",checkboxInvalid:"checked:!border-[#dc4c64] checked:!bg-[#dc4c64] checked:after:!bg-[#dc4c64]",radioValid:"checked:!border-[#14a44d] checked:after:!bg-[#14a44d]",radioInvalid:"checked:!border-[#dc4c64] checked:after:!bg-[#dc4c64]",labelValid:"!text-[#14a44d]",labelInvalid:"!text-[#dc4c64]",validFeedback:"absolute top-full left-0 m-1 w-auto text-sm text-[#14a44d] animate-[fade-in_0.3s_both]",invalidFeedback:"absolute top-full left-0 m-1 w-auto text-sm text-[#dc4c64] animate-[fade-in_0.3s_both]",elementValidated:"mb-8"},Bw={notchLeadingValid:"string",notchMiddleValid:"string",notchTrailingValid:"string",notchLeadingInvalid:"string",notchMiddleInvalid:"string",notchTrailingInvalid:"string",basicInputValid:"string",basicInputInvalid:"string",checkboxValid:"string",checkboxInvalid:"string",radioValid:"string",radioInvalid:"string",labelValid:"string",labelInvalid:"string",validFeedback:"string",invalidFeedback:"string",elementValidated:"string"};class Tr extends Mt{constructor(t,e,i){super(t),this._element=t,this._element&&O.setData(t,ec,this),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._isValid=!0,this._shouldApplyInputEvents=!0,this._submitCallback=null,this._errorMessages={...ww,...this._config.customErrorMessages},this._validationElements=this._getValidationElements(),this._validationElements.forEach(({element:n,input:o})=>{this._createFeedbackWrapper(n,o)}),this._validationObserver=this._watchForValidationChanges(),this._validationObserver.observe(this._element,{attributes:!0}),this._submitButton=null,this._handleSubmitButton(),this._validationResult=[]}static get DefaultType(){return Pw}static get Default(){return Yp}static get NAME(){return tc}dispose(){var t;(t=this._validationObserver)==null||t.disconnect(),this._validationObserver=null,this._submitCallback=null,this._element.removeAttribute(mr),this._removeInputEvents(),this._removeValidationTraces(),this._validationResult=[],this._submitButton&&_.off(this._submitButton,"click"),this._config.activeValidation&&(this._validationElements.forEach(e=>{const{input:i}=e;_.off(i,"input")}),this._shouldApplyInputEvents=!0)}_removeValidationTraces(){this._removeFeedbackWrapper(),this._validationElements.forEach(({element:t,classes:e,initialHTML:i})=>{t.className=e,t.innerHTML=i,t.removeAttribute(br),t.removeAttribute(yr),t.removeAttribute(ic)}),this._validationElements=[]}_getValidationElements(){return m.find(Ow,this._element).map(e=>{const i=m.findOne("input",e)||m.findOne("textarea",e),n=m.findOne("select",e);return{id:i.name||i.id||(n==null?void 0:n.name)||bt("validation-"),element:e,type:e.getAttribute(zp),input:i,validFeedback:e.getAttribute(ic),invalidFeedback:e.getAttribute(yr),classes:e.className,initialHTML:e.innerHTML,ruleset:e.getAttribute(jp)}})}_createFeedbackWrapper(t,e){if(t.querySelectorAll(`[${vr}]`).length>0)return;const i=document.createElement("span");i.setAttribute(vr,""),e.parentNode.appendChild(i)}_removeFeedbackWrapper(){m.find(`[${vr}]`,this._element).forEach(e=>{e.remove()})}_watchForValidationChanges(){return new MutationObserver(e=>{e.forEach(i=>{const{attributeName:n}=i;n===mr&&(this._handleValidation(),this._config.activeValidation&&this._shouldApplyInputEvents&&this._applyInputEvents())})})}_handleValidation(){this._element.getAttribute(mr)&&(this._validationResult=[],this._isValid=!0,this._validationElements.forEach(t=>this._validateSingleElement(t)),this._emitEvents(this._isValid),this._submitCallback&&this._submitCallback(this._isValid))}_validateSingleElement(t){var c;const{element:e,type:i,input:n,ruleset:o,id:r}=t;o&&this._validateByRuleset(t);const a=e.getAttribute(br);if(a!=="valid"&&a!=="invalid")return;const l=a.replace(a.charAt(0),a.charAt(0).toUpperCase());i==="input"&&this._restyleNotches(e,l),i==="basic"&&this._restyleBasicInputs(n,l),(i==="checkbox"||i==="radio")&&this._restyleCheckboxes(n,l,i),this._restyleLabels(e,l),a==="invalid"&&(this._isValid=!1),this._config.disableFeedback||this._applyFeedback(e,a),_.trigger(this._element,Rw,{value:{name:r,result:a,validation:(c=this._validationResult[r])==null?void 0:c.validation}})}_validateByRuleset({element:t,type:e,invalidFeedback:i,input:n,id:o}){const r=this._getRuleset(t);if(!r.length)return;const a=e==="checkbox"||e==="radio"?n.checked:n.value;let l="",c=[];for(const h of r){const d=h.callback(a,this._errorMessages[h.name]||this._config.invalidFeedback,h.parameter);c.push({result:d===!0,name:h.name,fullName:h.fullName}),typeof d=="string"&&!l&&(l=d)}if(this._validationResult[o]={element:t,validation:c},!l){t.setAttribute(br,"valid");return}t.setAttribute(br,"invalid"),i||t.setAttribute(yr,l)}_handleInputChange(t){this._validateSingleElement(t)}_getRuleset(t){const i=t.getAttribute(jp).split("|");let n=[];const o={...kw,...this._config.customRules};return i.forEach(r=>{const a=this._getRuleData(r,o);a.callback?n.push(a):console.warn(`Rule ${r} does not exist`)}),n}_getRuleData(t,e){const i=t.split("(");return{callback:e[i[0]],parameter:i[1]?i[1].split(")")[0]:null,name:i[0],fullName:t}}_applyFeedback(t,e){const i=m.findOne(`[${vr}]`,t),n=t.getAttribute(ic)||this._config.validFeedback,o=t.getAttribute(yr)||this._config.invalidFeedback;g.addClass(t,this._classes.elementValidated),i.textContent=e==="valid"?n:o,i.className=this._classes[e==="valid"?"validFeedback":"invalidFeedback"]}_restyleCheckboxes(t,e,i){g.removeClass(t,this._classes.checkboxValid),g.removeClass(t,this._classes.checkboxInvalid),g.addClass(t,this._classes[`${i}${e}`])}_restyleBasicInputs(t,e){g.removeClass(t,this._classes.basicInputValid),g.removeClass(t,this._classes.basicInputInvalid),g.addClass(t,this._classes[`basicInput${e}`])}_restyleNotches(t,e){m.find(Iw,t).forEach((n,o)=>{let r=o===0?"notchLeading":o===1?"notchMiddle":"notchTrailing";n.className="",g.addClass(n,nu[r]),r+=e,g.addClass(n,this._classes[r])})}_restyleLabels(t,e){const i=m.find("label",t);i.length&&i.forEach(n=>{g.removeClass(n,this._classes.labelValid),g.removeClass(n,this._classes.labelInvalid),g.addClass(n,this._classes[`label${e}`])})}_emitEvents(t){if(_.trigger(this._element,Mw),t){_.trigger(this._element,Lw,{value:this._validationResult});return}_.trigger(this._element,$w,{value:this._validationResult})}_applyInputEvents(){this._validationElements.forEach(t=>{const{input:e,element:i}=t;_.on(e,"input",()=>this._handleInputChange(t)),_.on(i,"valueChange.te.select",()=>this._delayedInputChange(t)),_.on(i,"itemSelect.te.autocomplete",()=>this._delayedInputChange(t))}),this._shouldApplyInputEvents=!1}_removeInputEvents(){this._validationElements.forEach(t=>{const{input:e,element:i}=t;_.off(e,"input",()=>this._handleInputChange(t)),_.off(i,"valueChange.te.select",()=>this._delayedInputChange(t)),_.off(i,"itemSelect.te.autocomplete",()=>this._delayedInputChange(t))})}_delayedInputChange(t){setTimeout(()=>{this._handleInputChange(t)},10)}_handleSubmitButton(){this._submitButton=m.findOne(Dw,this._element),this._submitButton&&_.on(this._submitButton,"click",t=>this._handleSubmitButtonClick(t))}_handleSubmitButtonClick(t){if(this._element.setAttribute(mr,!0),this._config.submitCallback){this._submitCallback=e=>this._config.submitCallback(t,e);return}}_getConfig(t){return t={...Yp,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(tc,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Nw,...e,...t},L(tc,t,Bw),t}static getInstance(t){return O.getData(t,ec)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){const e=Tr.getOrCreateInstance(this);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}class mn{_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection({x:t,y:e}){return{x:{direction:t<0?"left":"right",value:Math.abs(t)},y:{direction:e<0?"up":"down",value:Math.abs(e)}}}_getOrigin({x:t,y:e},{x:i,y:n}){return{x:t-i,y:e-n}}_getDistanceBetweenTwoPoints(t,e,i,n){return Math.hypot(e-t,n-i)}_getMidPoint({x1:t,x2:e,y1:i,y2:n}){return{x:(t+e)/2,y:(i+n)/2}}_getVectorLength({x1:t,x2:e,y1:i,y2:n}){return Math.sqrt((e-t)**2+(n-i)**2)}_getRightMostTouch(t){let e=null;const i=Number.MIN_VALUE;return t.forEach(n=>{n.clientX>i&&(e=n)}),e}_getAngle(t,e,i,n){return Math.atan2(n-e,i-t)}_getAngularDistance(t,e){return e-t}_getCenterXY({x1:t,x2:e,y1:i,y2:n}){return{x:t+(e-t)/2,y:i+(n-i)/2}}_getPinchTouchOrigin(t){const[e,i]=t,n={x1:e.clientX,x2:i.clientX,y1:e.clientY,y2:i.clientY};return[this._getVectorLength(n),this._getCenterXY(n)]}_getPosition({x1:t,x2:e,y1:i,y2:n}){return{x1:t,x2:e,y1:i,y2:n}}}const sc="press",Hw="pressup",Vw={time:"number",pointers:"number"},Fw={time:250,pointers:1};class Ww extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._timer=null}static get NAME(){return sc}handleTouchStart(t){const{time:e,pointers:i}=this._options;t.touches.length===i&&(this._timer=setTimeout(()=>{_.trigger(this._element,sc,{touch:t,time:e}),_.trigger(this._element,Hw,{touch:t})},e))}handleTouchEnd(){clearTimeout(this._timer)}_getConfig(t){const e={...Fw,...g.getDataAttributes(this._element),...t};return L(sc,e,Vw),e}}const zw="swipe",jw={threshold:"number",direction:"string"},Yw={threshold:10,direction:"all"};class Kw{constructor(t,e){this._element=t,this._startPosition=null,this._options=this._getConfig(e)}handleTouchStart(t){this._startPosition=this._getCoordinates(t)}handleTouchMove(t){if(!this._startPosition)return;const e=this._getCoordinates(t),i={x:e.x-this._startPosition.x,y:e.y-this._startPosition.y},n=this._getDirection(i);if(this._options.direction==="all"){if(n.y.value<this._options.threshold&&n.x.value<this._options.threshold)return;const r=n.y.value>n.x.value?n.y.direction:n.x.direction;_.trigger(this._element,`swipe${r}`,{touch:t}),_.trigger(this._element,"swipe",{touch:t,direction:r}),this._startPosition=null;return}const o=this._options.direction==="left"||this._options==="right"?"x":"y";n[o].direction===this._options.direction&&n[o].value>this._options.threshold&&(_.trigger(this._element,`swipe${n[o].direction}`,{touch:t}),this._startPosition=null)}handleTouchEnd(){this._startPosition=null}_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection(t){return{x:{direction:t.x<0?"left":"right",value:Math.abs(t.x)},y:{direction:t.y<0?"up":"down",value:Math.abs(t.y)}}}_getConfig(t){const e={...Yw,...g.getDataAttributes(this._element),...t};return L(zw,e,jw),e}}const Je="pan",Uw=`${Je}start`,Xw=`${Je}end`,Gw=`${Je}move`,qw="left",Zw="right",Qw={threshold:"number",direction:"string",pointers:"number"},Jw={threshold:20,direction:"all",pointers:1};class tk extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._startTouch=null}static get NAME(){return Je}handleTouchStart(t){this._startTouch=this._getCoordinates(t),this._movedTouch=t,_.trigger(this._element,Uw,{touch:t})}handleTouchMove(t){t.type==="touchmove"&&t.preventDefault();const{threshold:e,direction:i}=this._options,n=this._getCoordinates(t),o=this._getCoordinates(this._movedTouch),r=this._getOrigin(n,this._startTouch),a=this._getOrigin(n,o),l=this._getDirection(r),c=this._getDirection(a),{x:h,y:d}=l;if(i==="all"&&(d.value>e||h.value>e)){const p=d.value>h.value?d.direction:h.direction;_.trigger(this._element,`${Je}${p}`,{touch:t}),_.trigger(this._element,Je,{...a,touch:t})}const u=i===qw||i===Zw?"x":"y";c[u].direction===i&&l[u].value>e&&_.trigger(this._element,`${Je}${i}`,{touch:t,[u]:n[u]-o[u]}),this._movedTouch=t,_.trigger(this._element,Gw,{touch:t})}handleTouchEnd(t){t.type==="touchend"&&t.preventDefault(),this._movedTouch=null,this._startTouch=null,_.trigger(this._element,Xw,{touch:t})}_getConfig(t){const e={...Jw,...g.getDataAttributes(this._element),...t};return L(Je,e,Qw),e}}const Ts="pinch",ek=`${Ts}end`,ik=`${Ts}start`,sk=`${Ts}move`,nk={threshold:"number",pointers:"number"},ok={threshold:10,pointers:2};class rk extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._startTouch=null,this._origin=null,this._touch=null,this._math=null,this._ratio=null}static get NAME(){return Ts}get isNumber(){return typeof this._startTouch=="number"&&typeof this._touch=="number"&&!isNaN(this._startTouch)&&!isNaN(this._touch)}handleTouchStart(t){if(t.touches.length!==this._options.pointers)return;t.type==="touchstart"&&t.preventDefault();const[e,i]=this._getPinchTouchOrigin(t.touches);this._touch=e,this._origin=i,this._startTouch=this._touch,_.trigger(this._element,ik,{touch:t,ratio:this._ratio,origin:this._origin})}handleTouchMove(t){const{threshold:e,pointers:i}=this._options;t.touches.length===i&&(t.type==="touchmove"&&t.preventDefault(),this._touch=this._getPinchTouchOrigin(t.touches)[0],this._ratio=this._touch/this._startTouch,this.isNumber&&(this._origin.x>e||this._origin.y>e)&&(this._startTouch=this._touch,_.trigger(this._element,Ts,{touch:t,ratio:this._ratio,origin:this._origin}),_.trigger(this._element,sk,{touch:t,ratio:this._ratio,origin:this._origin})))}handleTouchEnd(t){this.isNumber&&(this._startTouch=null,_.trigger(this._element,ek,{touch:t,ratio:this._ratio,origin:this._origin}))}_getConfig(t){const e={...ok,...g.getDataAttributes(this._element),...t};return L(Ts,e,nk),e}}const nc="tap",ak={interval:"number",time:"number",taps:"number",pointers:"number"},lk={interval:500,time:250,taps:1,pointers:1};class ck extends mn{constructor(t,e){super(),this._element=t,this._options=this._getConfig(e),this._timer=null,this._tapCount=0}static get NAME(){return nc}handleTouchStart(t){const{x:e,y:i}=this._getCoordinates(t),{interval:n,taps:o,pointers:r}=this._options;return t.touches.length===r&&(this._tapCount+=1,this._tapCount===1&&(this._timer=setTimeout(()=>{this._tapCount=0},n)),this._tapCount===o&&(clearTimeout(this._timer),this._tapCount=0,_.trigger(this._element,nc,{touch:t,origin:{x:e,y:i}}))),t}handleTouchEnd(){}handleTouchMove(){}_getConfig(t){const e={...lk,...g.getDataAttributes(this._element),...t};return L(nc,e,ak),e}}const bn="rotate",hk=`${bn}end`,dk=`${bn}start`,uk={angle:"number",pointers:"number"},pk={angle:0,pointers:2};class fk extends mn{constructor(t,e){super(),this._element=t,this._options=this._getConfig(e),this._origin={}}static get NAME(){return bn}handleTouchStart(t){t.type==="touchstart"&&t.preventDefault(),!(t.touches.length<2)&&(this._startTouch=t,this._origin={},_.trigger(this._element,dk,{touch:t}))}handleTouchMove(t){t.type==="touchmove"&&t.preventDefault();let e,i;const n=t.touches;if(n.length===1&&this._options.pointers===1){const{left:o,top:r,width:a,height:l}=this._element.getBoundingClientRect();e={x:o+a/2,y:r+l/2},i=n[0]}else if(t.touches.length===2&&this._options.pointers===2){const[o,r]=t.touches,a={x1:r.clientX,x2:o.clientX,y1:r.clientY,y2:o.clientY};e=this._getMidPoint(a),i=this._getRightMostTouch(t.touches)}else return;this.currentAngle=this._getAngle(e.x,e.y,i.clientX,i.clientY),this._origin.initialAngle?(this._origin.change=this._getAngularDistance(this._origin.previousAngle,this.currentAngle),this._origin.distance+=this._origin.change):(this._origin.initialAngle=this._origin.previousAngle=this.currentAngle,this._origin.distance=this._origin.change=0),this._origin.previousAngle=this.currentAngle,this.rotate={currentAngle:this.currentAngle,distance:this._origin.distance,change:this._origin.change},_.trigger(this._element,bn,{...this.rotate,touch:t})}handleTouchEnd(t){t.type==="touchend"&&t.preventDefault(),this._origin={},_.trigger(this._element,hk,{touch:t})}_getConfig(t){const e={...pk,...g.getDataAttributes(this._element),...t};return L(bn,e,uk),e}}const oc="touch",rc=`te.${oc}`,_k={event:"string"},gk={event:"swipe"};class Er{constructor(t,e={}){this._element=t,this._options=this._getConfig(e),this._event=this._options.event,this.swipe=this._event==="swipe"?new Kw(t,e):null,this.press=this._event==="press"?new Ww(t,e):null,this.pan=this._event==="pan"?new tk(t,e):null,this.pinch=this._event==="pinch"?new rk(t,e):null,this.tap=this._event==="tap"?new ck(t,e):null,this.rotate=this._event==="rotate"?new fk(t,e):null,this._touchStartHandler=i=>this._handleTouchStart(i),this._touchMoveHandler=i=>this._handleTouchMove(i),this._touchEndHandler=i=>this._handleTouchEnd(i),_.on(this._element,"touchstart",this._touchStartHandler),_.on(this._element,"touchmove",this._touchMoveHandler),_.on(this._element,"touchend",this._touchEndHandler),this._element&&O.setData(t,rc,this)}static get NAME(){return oc}dispose(){_.off(this._element,"touchstart",this._touchStartHandler),_.off(this._element,"touchmove",this._touchMoveHandler),_.off(this._element,"touchend",this._touchEndHandler),this.swipe=null,this.press=null,this.pan=null,this.pinch=null,this.tap=null,this.rotate=null}_getConfig(t){const e={...gk,...g.getDataAttributes(this._element),...t};return L(oc,e,_k),e}_handleTouchStart(t){this[this._event].handleTouchStart(t)}_handleTouchMove(t){this[this._event].handleTouchMove&&this[this._event].handleTouchMove(t)}_handleTouchEnd(t){this[this._event].handleTouchEnd(t)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,rc);const i=typeof t=="object"&&t;if(!(!e&&/dispose/.test(t))&&(e||(e=new Er(this,i)),typeof t=="string")){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);return e[t]}})}static getInstance(t){return O.getData(t,rc)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const ac="smoothScroll",vn=`te.${ac}`,lc=`.${vn}`,mk={container:"string",offset:"number",easing:"string",duration:"number"},bk={container:"body",offset:0,easing:"linear",duration:500},vk=`scrollStart${lc}`,yk=`scrollEnd${lc}`,Tk=`scrollCancel${lc}`;class xr{constructor(t,e={}){this._element=t,this._options=this._getConfig(e),this._href=this._element.getAttribute("href"),this.isCancel=!1,this._element&&(O.setData(t,vn,this),this._setup())}static get NAME(){return ac}get isWindow(){return this._options.container==="body"}get containerToScroll(){return this.isWindow?document.documentElement:m.findOne(this._options.container,document.documentElement)}get elFromHrefExist(){return!!m.findOne(this._href,this.containerToScroll)}get offsetFromEl(){const t=this.containerToScroll.scrollTop,e=m.findOne(this._href,this.containerToScroll);if(this.isWindow)return g.offset(e).top-this._options.offset+t;const i=e.getBoundingClientRect().y,n=this.containerToScroll.getBoundingClientRect().y;return i-n-this._options.offset+t}get easingFunction(){const t=this._options.easing,e=`_motion${t[0].toUpperCase()}${t.slice(1)}`;return this[e]?this[e]:this._motionLinear}dispose(){_.off(this._element,"click",this._handleClick),O.removeData(this._element,vn),this._element=null}cancelScroll(){this.isCancel=!0}_getConfig(t){const e={...bk,...g.getDataAttributes(this._element),...t};return L(ac,e,mk),e}_inViewport(){if(this.isWindow)return!0;const t=this.containerToScroll.getBoundingClientRect();return t.top>=0&&t.bottom<=(window.innerHeight||document.documentElement.clientHeight)}_setup(){const t=typeof this._href<"u",e=this._href.includes("#");t&&e&&this.elFromHrefExist&&(this._scrollOnClickEvent(),this._preventNativeScroll())}_scrollOnClickEvent(){_.on(this._element,"click",t=>{this._handleClick(t)})}_handleClick(t){t.preventDefault(),this.isCancel=!1,_.trigger(this._element,vk);const e=this.containerToScroll,i=this.containerToScroll.scrollTop,n=this.offsetFromEl,o=0,r=1/this._options.duration,a=4.25,l=this.easingFunction;this._inViewport()?this._scrollOnNextTick(e,i,n,o,r,a,l):(this._scrollOnNextTick(document.documentElement,document.documentElement.scrollTop,this.containerToScroll.offsetTop,o,r,a,l),setTimeout(()=>{this._scrollOnNextTick(e,i,n,o,r,a,l),this.isCancel=!1},this._options.duration))}_scrollOnNextTick(t,e,i,n,o,r,a){const l=n<0,c=n>1,h=o<=0;if(l||c||h||this.isCancel){if(this.isCancel){this.isInViewport&&(this.isCancel=!1),_.trigger(this._element,Tk);return}_.trigger(this._element,yk),t.scrollTop=i;return}t.scrollTo({top:e-(e-i)*a(n)}),n+=o*r,setTimeout(()=>{this._scrollOnNextTick(t,e,i,n,o,r,a)})}_preventDefault(t){t.preventDefault()}_preventNativeScroll(){let t=!1;try{window.addEventListener("test",null,Object.defineProperty({},"passive",{get:()=>t=!0}))}catch(n){this._scrollError=n}const e=t?{passive:!1}:!1,i="onwheel"in $("div")?"wheel":"mousewheel";this.isWindow&&(this._deleteScrollOnStart(e,i),this._addScrollOnEnd(e,i),this._addScrollOnCancel(e,i))}_deleteScrollOnStart(t,e){_.on(this._element,"scrollStart.te.smoothScroll",()=>{window.addEventListener(e,this._preventDefault,t),window.addEventListener("touchmove",this._preventDefault,t)})}_addScrollOnEnd(t,e){_.on(this._element,"scrollEnd.te.smoothScroll",()=>{window.removeEventListener(e,this._preventDefault,t),window.removeEventListener("touchmove",this._preventDefault,t)})}_addScrollOnCancel(t,e){_.on(this._element,"scrollCancel.te.smoothScroll",()=>{window.removeEventListener(e,this._preventDefault,t),window.removeEventListener("touchmove",this._preventDefault,t)})}_motionLinear(t){return t}_motionEaseInQuad(t){return t*t}_motionEaseInCubic(t){return t*t*t}_motionEaseInQuart(t){return t*t*t*t}_motionEaseInQuint(t){return t*t*t*t*t}_motionEaseInOutQuad(t){return t<.5?2*t*t:-1+(4-2*t)*t}_motionEaseInOutCubic(t){return t/=.5,t<1?t*t*t/2:(t-=2,(t*t*t+2)/2)}_motionEaseInOutQuart(t){return t/=.5,t<1?.5*t*t*t*t:(t-=2,-(t*t*t*t-2)/2)}_motionEaseInOutQuint(t){return t/=.5,t<1?t*t*t*t*t/2:(t-=2,(t*t*t*t*t+2)/2)}_motionEaseOutQuad(t){return-t*(t-2)}_motionEaseOutCubic(t){return t--,t*t*t+1}_motionEaseOutQuart(t){return t--,-(t*t*t*t-1)}_motionEaseOutQuint(t){return t--,t*t*t*t*t+1}static getInstance(t){return O.getData(t,vn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,vn);const i=typeof t=="object"&&t;if(e||(e=new xr(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Kp="lazyLoad",Cr="te.lazyLoad",Ek="[data-te-lazy-load-init]",Up="data-te-lazy-load",xk="onLoad.te.lazy",Ck="onError.te.lazy",Xp=["img","video"],Ak={lazySrc:"(string|null)",lazyDelay:"number",lazyAnimation:"string",lazyOffset:"number",lazyPlaceholder:"(string|undefined)",lazyError:"(string|undefined)"},wk={lazySrc:null,lazyDelay:500,lazyAnimation:"[fade-in_1s_ease-in-out]",lazyOffset:0};class yn{constructor(t,e){this._element=t,this._element&&O.setData(t,Cr,this),this._options=this._getConfig(e),this.scrollHandler=this._scrollHandler.bind(this),this.errorHandler=this._setElementError.bind(this),this._childrenInstances=null,this._init()}static get NAME(){return Kp}get offsetValues(){return this._element.getBoundingClientRect()}get inViewport(){if(this.parent){const t=this.parent.getBoundingClientRect();return t.y>0&&t.y<window.innerHeight&&this.offsetValues.y>=t.y&&this.offsetValues.y<=t.y+t.height&&this.offsetValues.y<=window.innerHeight}return this.offsetValues.top+this._options.lazyOffset<=window.innerHeight&&this.offsetValues.bottom>=0}get parent(){const[t]=m.parents(this._element,Ek);return t}get node(){return this._element.nodeName}get isContainer(){return!m.matches(this._element,Xp)}dispose(){O.removeData(this._element,Cr),this._animation&&(this._animation.dispose(),this._animation=null),this._element=null,this._childrenInstances&&this._childrenInstances.forEach(t=>t.dispose())}_init(){if(this._element.setAttribute(Up,""),this.isContainer){this._setupContainer();return}this._setupElement()}_setupElement(){_.one(this._element,"error",this.errorHandler),this._options.lazyPlaceholder&&this._setPlaceholder(),this._animation=new Gs(this._element,{animation:`${this._options.lazyAnimation}`,animationStart:"onLoad"}),_.one(this._element,"load",()=>this._scrollHandler()),this.parent&&_.on(this.parent,"scroll",this.scrollHandler),_.on(window,"scroll",this.scrollHandler)}_scrollHandler(){this.inViewport&&(this._timeout=setTimeout(()=>{this._setSrc(),this._element.removeAttribute(Up),this._removeAttrs(),this._animation.init()},this._options.lazyDelay),this.parent&&_.off(this.parent,"scroll",this.scrollHandler),_.off(window,"scroll",this.scrollHandler))}_setElementError(){!this._options.lazyError||this._element.src===this._options.lazyError?this._element.alt="404 not found":this._element.setAttribute("src",this._options.lazyError),_.trigger(this._element,Ck)}_setSrc(){this._element.setAttribute("src",this._options.lazySrc),_.trigger(this._element,xk)}_setPlaceholder(){this.node==="IMG"?this._element.setAttribute("src",this._options.lazyPlaceholder):this.node==="VIDEO"&&this._element.setAttribute("poster",this._options.lazyPlaceholder)}_removeAttrs(){["src","delay","animation","placeholder","offset","error"].forEach(t=>{g.removeDataAttribute(this._element,`lazy-${t}`)})}_setupContainer(){this._childrenInstances=m.children(this._element,Xp).map(t=>new yn(t,this._options))}_getConfig(t){const e={...wk,...t,...g.getDataAttributes(this._element)};return L(Kp,e,Ak),e}static getInstance(t){return O.getData(t,Cr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Cr);const i=typeof t=="object"&&t;if(e||(e=new yn(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Gp="clipboard",Tn="te.clipboard",kk=`.${Tn}`,Sk={clipboardTarget:null},Ok={clipboardTarget:"null|string"},Ik=`copy${kk}`;class Ar{constructor(t,e={}){this._element=t,this._options=e,this._element&&(O.setData(t,Tn,this),this._initCopy=this._initCopy.bind(this),this._setup())}static get NAME(){return Gp}get options(){const t={...Sk,...g.getDataAttributes(this._element),...this._options};return L(Gp,t,Ok),t}get clipboardTarget(){return m.findOne(this.options.clipboardTarget)}get copyText(){const t=this.clipboardTarget.hasAttribute("data-te-clipboard-text"),e=this.clipboardTarget.value,i=this.clipboardTarget.textContent;return t?this.clipboardTarget.getAttribute("data-te-clipboard-text"):e||i}dispose(){_.off(this._element,"click",this._initCopy),O.removeData(this._element,Tn),this._element=null}_setup(){_.on(this._element,"click",this._initCopy)}_initCopy(){const t=this._createNewInput();document.body.appendChild(t),this._selectInput(t),_.trigger(this._element,Ik,{copyText:this.copyText}),t.remove()}_createNewInput(){const t=this.clipboardTarget.tagName==="TEXTAREA"?"textarea":"input",e=$(t);return e.value=this.copyText,g.addClass(e,"-left-[9999px] absolute"),e}_selectInput(t){t.select(),t.focus(),t.setSelectionRange(0,99999),document.execCommand("copy")}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Tn);const i=typeof t=="object"&&t;if(e||(e=new Ar(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}static getInstance(t){return O.getData(t,Tn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const cc="infiniteScroll",wr=`te.${cc}`,Dk={infiniteDirection:"y"},Mk={infiniteDirection:"string"};class kr{constructor(t,e){this._element=t,this._element&&O.setData(t,wr,this),this._options=this._getConfig(e),this.scrollHandler=this._scrollHandler.bind(this),this._init()}static get NAME(){return cc}get rect(){return this._element.getBoundingClientRect()}get condition(){return this._element===window?Math.abs(window.scrollY+window.innerHeight-document.documentElement.scrollHeight)<1:this._options.infiniteDirection==="x"?this.rect.width+this._element.scrollLeft+10>=this._element.scrollWidth:Math.ceil(this.rect.height+this._element.scrollTop)>=this._element.scrollHeight}dispose(){_.off(this._element,"scroll",this.scrollHandler),O.removeData(this._element,wr),this._element=null}_init(){_.on(this._element,"scroll",()=>this._scrollHandler())}_scrollHandler(){this.condition&&_.trigger(this._element,"complete.te.infiniteScroll"),_.off(this._element,"scroll",this.scrollHandler)}_getConfig(t){const e={...Dk,...this._element!==window?g.getDataAttributes(this._element):{},...t};return L(cc,e,Mk),e}static getInstance(t){return O.getData(t,wr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,wr);const i=typeof t=="object"&&t;if(e||(e=new kr(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}function Lk({backdropID:s},t){const e=$("div");return g.addClass(e,`${t.backdrop} ${t.backdropColor}`),e.id=s,e}const En="loadingManagement",Sr=`te.${En}`,$k="[data-te-loading-icon-ref]",Rk="[data-te-loading-text-ref]",Pk=`show.te.${En}`,Nk={backdrop:"(null|boolean)",backdropID:"(null|string|number)",delay:"(null|number)",loader:"(null|string|number)",parentSelector:"(null|string)",loadingIcon:"boolean",loadingText:"boolean",scroll:"boolean"},Bk={backdrop:!0,backdropID:null,delay:0,loader:"",parentSelector:null,scroll:!0,loadingText:!0,loadingIcon:!0},Hk={loadingSpinner:"absolute top-[50%] left-[50%] -translate-x-[50%] -translate-y-[50%] flex flex-col justify-center items-center z-40",spinnerColor:"text-primary dark:text-primary-400",backdrop:"w-full h-full fixed top-0 left-0 bottom-0 right-0 z-30",backdropColor:"bg-[rgba(0,0,0,0.4)]"},Vk={loadingSpinner:"string",spinnerColor:"string",backdrop:"string",backdropColor:"string"};class Or{constructor(t,e={},i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._element&&O.setData(t,Sr,this),this._backdropElement=null,this._parentElement=m.findOne(this._options.parentSelector),this._loadingIcon=m.findOne($k,this._element),this._loadingText=m.findOne(Rk,this._element),this.init()}static get NAME(){return En}init(){const t=this._loadingIcon.cloneNode(!0),e=this._loadingText.cloneNode(!0);this._removeElementsOnStart(),setTimeout(()=>{g.addClass(this._element,`${this._classes.loadingSpinner} ${this._classes.spinnerColor}`),this._setBackdrop(),this._setLoadingIcon(t),this._setLoadingText(e),this._setScrollOption(),_.trigger(this._element,Pk)},this._options.delay)}dispose(){O.removeData(this._element,Sr),g.removeClass(this._element,`${this._classes.loadingSpinner} ${this._classes.spinnerColor}`);const t=this._options.delay;setTimeout(()=>{this._removeBackdrop(),this._backdropElement=null,this._element=null,this._options=null},t)}_setBackdrop(){const{backdrop:t}=this._options;t&&(this._backdropElement=Lk(this._options,this._classes),this._parentElement!==null?(g.addClass(this._element,"absolute"),g.addClass(this._parentElement,"relative"),g.addClass(this._backdropElement,"absolute"),this._parentElement.appendChild(this._backdropElement)):(g.addClass(this._element,"!fixed"),document.body.appendChild(this._backdropElement),document.body.appendChild(this._element)))}_removeBackdrop(){const{backdrop:t}=this._options;t&&(this._parentElement!==null?(g.removeClass(this._element,"absolute"),g.removeClass(this._parentElement,"relative"),this._backdropElement.remove()):(this._backdropElement.remove(),this._element.remove()))}_setLoadingIcon(t){if(!this._options.loadingIcon){t.remove();return}this._element.appendChild(t),t.id=this._options.loader}_setLoadingText(t){if(!this._options.loadingText){t.remove();return}this._element.appendChild(t)}_removeElementsOnStart(){this._element!==null&&(this._loadingIcon.remove(),this._loadingText.remove())}_setScrollOption(){if(this._options.scroll){if(this._parentElement===null){g.addClass(document.body,"overflow-auto");return}g.addClass(this._parentElement,"overflow-auto")}else{if(this._parentElement===null){g.addClass(document.body,"overflow-hidden");return}g.addClass(this._parentElement,"overflow-hidden")}}_getConfig(t){const e={...Bk,...g.getDataAttributes(this._element),...t};return L(En,e,Nk),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Hk,...e,...t},L(En,t,Vk),t}static getInstance(t){return O.getData(t,Sr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Sr);const i=typeof t=="object"&&t;if(e||(e=new Or(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Fk=s=>{const t=/^(0?[1-9]|1[012])(:[0-5]\d) [APap][mM]$/,e=/^([0-9]|0[0-9]|1[0-9]|2[0-3]):[0-5][0-9](:[0-5][0-9])?$/;return s.match(t)||s.match(e)},Wk=s=>s&&Object.prototype.toString.call(s)==="[object Date]"&&!isNaN(s),zk=s=>s.getMonth(),jk=s=>s.getFullYear(),Yk=s=>s.match(/[^(dmy)]{1,}/g),Kk=(s,t,e,i)=>{let n;e[0]!==e[1]?n=e[0]+e[1]:n=e[0];const o=new RegExp(`[${n}]`),r=s.split(o),a=t.split(o),l=t.indexOf("mmm")!==-1,c=[];for(let b=0;b<a.length;b++)a[b].indexOf("yy")!==-1&&(c[0]={value:r[b],format:a[b]}),a[b].indexOf("m")!==-1&&(c[1]={value:r[b],format:a[b]}),a[b].indexOf("d")!==-1&&a[b].length<=2&&(c[2]={value:r[b],format:a[b]});let h;t.indexOf("mmmm")!==-1?h=i.monthsFull:h=i.monthsShort;const d=Number(c[0].value),u=l?Uk(c[1].value,h):Number(c[1].value)-1,p=Number(c[2].value);return ee(d,u,p)},Uk=(s,t)=>t.findIndex(e=>e===s),Xk=(s,t,e)=>`
+  <button type="button" class="${e.pickerIcon}" data-te-datepicker-toggle-button-ref>
+    ${s}
+  </button>
+  <button type="button" class="${e.pickerIcon}" data-te-timepicker-toggle-button-ref>
+    ${t}
+  </button>
+`,Gk=(s,t)=>`
+  <button type="button" class="${t.toggleButton}" data-te-date-timepicker-toggle-ref>
+    ${s} 
+  </button>
+`,Ir="datetimepicker",xn=`te.${Ir}`,hc=`.${xn}`,qp="data-te-datepicker-init",Zp="data-te-timepicker-init",qk="data-te-datepicker-header",Zk="data-te-datepicker-cancel-button-ref",Qk="data-te-datepicker-ok-button-ref",dc="data-te-timepicker-wrapper",Qp="data-te-timepicker-cancel",Jk="data-te-timepicker-submit",tS="data-te-timepicker-clear",Jp="data-te-buttons-timepicker",eS="data-te-date-timepicker-toggle-ref",iS="data-te-datepicker-toggle-button-ref",sS="data-te-timepicker-toggle-button-ref",nS=`[${Zp}]`,oS=`[${qp}]`,rS=`[${eS}]`,aS=`[${sS}]`,lS="[data-te-input-notch-ref]",cS="[data-te-date-timepicker-toggle-ref]",hS="[data-te-timepicker-elements-wrapper]",dS="[data-te-timepicker-clock-wrapper]",uS=`open${hc}`,pS=`close${hc}`,fS=`datetimeChange${hc}`,tf="close.te.datepicker",ef="input.te.timepicker",Es=$("div"),sf={inline:!1,toggleButton:!0,container:"body",disabled:!1,disablePast:!1,disableFuture:!1,defaultTime:"",defaultDate:"",timepicker:{},datepicker:{},showFormat:!1,dateTimepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+  <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+  </svg>`,datepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+  <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+  </svg>`,timepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z" />
+  </svg>`},_S={inline:"boolean",toggleButton:"boolean",container:"string",disabled:"boolean",disablePast:"boolean",disableFuture:"boolean",defaultTime:"(string|date|number)",defaultDate:"(string|date|number)",timepicker:"object",datepicker:"object",showFormat:"boolean",dateTimepickerToggleIconTemplate:"string",datepickerToggleIconTemplate:"string",timepickerToggleIconTemplate:"string"},gS={toggleButton:"flex items-center justify-content-center [&>svg]:w-5 [&>svg]:h-5 absolute outline-none border-none bg-transparent right-0.5 top-1/2 -translate-x-1/2 -translate-y-1/2 hover:text-primary focus:text-primary dark:hover:text-primary-400 dark:focus:text-primary-400 dark:text-neutral-200",pickerIcon:"[&>svg]:w-6 [&>svg]:h-6 [&>svg]:mx-auto [&>svg]:pointer-events-none w-1/2 px-1.5 py-[1px] rounded-[10px] min-h-[40px] cursor-pointer outline-none border-none text-white hover:bg-primary-600 dark:hover:bg-neutral-600",buttonsContainer:"flex justify-evenly items-end bg-primary dark:bg-zinc-800 dark:data-[te-buttons-timepicker]:bg-zinc-700",timepicker:{},datepicker:{}},mS={toggleButton:"string",pickerIcon:"string",buttonsContainer:"string",timepicker:"object",datepicker:"object"};class Dr{constructor(t,e,i){this._element=t,this._input=m.findOne("input",this._element),this._options=this._getConfig(e),this._classes=this._getClasses(i),this._timepicker=null,this._datepicker=null,this._dateValue=this._options.defaultDate?this._options.defaultDate:"",this._timeValue=this._options.defaultTime?this._options.defaultTime:"",this._isInvalidTimeFormat=!1,this._format=this._options.datepicker.format?this._options.datepicker.format:"dd/mm/yyyy",this._cancel=!1,this._scrollBar=new Qi,this._element&&O.setData(t,xn,this),this._init()}static get NAME(){return Ir}get toggleButton(){return m.findOne(rS,this._element)}get notch(){return m.findOne(lS,this._element)}dispose(){_.off(this._element,"click",this._openDatePicker),_.off(this._input,"input",this._handleInput),_.off(this._element,"click"),O.removeData(this._element,xn),this._removeTimePicker(),this._removeDatepicker(),this.toggleButton.remove(),this._options=sf,this._timepicker=null,this._datepicker=null,this._dateValue=null,this._timeValue=null,this._isInvalidTimeFormat=null}update(t={}){const e=this._getConfig({...this._options,...t});this.dispose(),this._options=e,this._init()}_init(){this._addDatepicker(),this._addTimePicker(),this._appendToggleButton(),this._listenToToggleClick(),this._listenToUserInput(),this._disableInput(),this._setInitialDefaultInput(),this._applyFormatPlaceholder(),this._options.disablePast&&this._handleTimepickerDisablePast(),this._options.disableFuture&&this._handleTimepickerDisableFuture()}_removeDatepicker(){const t=this._element.querySelector(oS);t&&t.remove()}_addDatepicker(){const t=$("div");t.id=this._element.id?`datepicker-${this._element.id}`:bt("datepicker-");const e='<input type="text">';t.innerHTML=e,t.setAttribute(qp,""),this._element.appendChild(t),g.addClass(t,"hidden");let i={...this._options.datepicker,container:this._options.container,disablePast:this._options.disablePast,disableFuture:this._options.disableFuture};(this._options.inline||this._options.datepicker.inline)&&(i={...i,inline:!0}),this._datepicker=new xl(t,i,{...this._classes.datepicker}),this._datepicker._input.value=this._dateValue}_removeTimePicker(){const t=this._element.querySelector(nS);t&&(t.remove(),this._scrollBar.reset())}_addTimePicker(){const t=$("div");t.id=this._element.id?`timepicker-${this._element.id}`:bt("timepicker-");const e='<input type="text">';t.innerHTML=e,t.setAttribute(Zp,""),this._element.appendChild(t),g.addClass(t,"hidden");let i={...this._options.timepicker,container:this._options.container};(this._options.inline||this._options.timepicker.inline)&&(i={...i,inline:!0}),this._timepicker=new Ll(t,i,{...this._classes.timepicker}),this._timepicker.input.value=this._timeValue}_addIconButtons(){if(g.addClass(Es,this._classes.buttonsContainer),Es.innerHTML=Xk(this._options.datepickerToggleIconTemplate,this._options.timepickerToggleIconTemplate,this._classes),Es.removeAttribute(Jp),!(this._options.inline||this._options.datepicker.inline)){if(this._scrollBar.hide(),this._datepicker._isOpen)m.findOne(`[${qk}]`,document.body).appendChild(Es);else if(this._timepicker._modal&&!this._options.timepicker.inline){const t=m.findOne(hS,document.body),e=m.findOne(dS,document.body);Es.setAttribute(Jp,""),t.insertBefore(Es,e)}}}_enableOrDisableToggleButton(){this._options.disabled?(this.toggleButton.disabled=!0,g.addClass(this.toggleButton,"pointer-events-none")):(this.toggleButton.disabled=!1,g.removeClass(this.toggleButton,"pointer-events-none"))}_appendToggleButton(){this._options.toggleButton&&(this._element.insertAdjacentHTML("beforeend",Gk(this._options.dateTimepickerToggleIconTemplate,this._classes)),this._enableOrDisableToggleButton())}_applyFormatPlaceholder(){this._options.showFormat&&(this._input.placeholder=this._format)}_listenToCancelClick(){const t=m.findOne(`[${Zk}]`,document.body);_.one(t,"mousedown",()=>{this._cancel=!0,this._scrollBar.reset(),_.off(t,"mousedown")})}_listenToToggleClick(){_.on(this._element,"click",cS,t=>{t.preventDefault(),this._openDatePicker()})}_listenToUserInput(){_.on(this._input,"input",t=>{this._handleInput(t.target.value)})}_disableInput(){this._options.disabled&&(this._input.disabled="true")}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...sf,...e,...t},L(Ir,t,_S),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...gS,...e,...t},L(Ir,t,mS),t}_handleInput(t){const e=t.split(", "),i=Yk(this._format),n=e[0],o=e[1]||"",r=Kk(n,this._format,i,this._datepicker._options);e.length===2&&(Wk(r)&&Fk(o)?(this._dateValue=n,this._timeValue=o,this._datepicker._input.value=this._dateValue,this._datepicker._activeDate=this._dateValue,this._datepicker._selectedYear=jk(r),this._datepicker._selectedMonth=zk(r),this._datepicker._headerDate=r,this._timepicker.input.value=this._timeValue,this._timepicker._isInvalidTimeFormat=!1):(this._datepicker._activeDate=new Date,this._datepicker._selectedDate=null,this._datepicker._selectedMonth=null,this._datepicker._selectedYear=null,this._datepicker._headerDate=null,this._datepicker._headerMonth=null,this._datepicker._headerYear=null,this._timepicker._isInvalidTimeFormat=!0))}_openDatePicker(){if(_.trigger(this._element,uS).defaultPrevented)return;this._datepicker.open(),this._options.inline||this._scrollBar.hide(),(this._options.inline||this._options.datepicker.inline)&&this._openDropdownDate(),this._addIconButtons(),this._listenToCancelClick(),this._options.inline&&this._datepicker._isOpen&&g.addClass(this.toggleButton,"pointer-events-none"),_.one(this._datepicker._element,tf,()=>{if(this._dateValue=this._datepicker._input.value,this._updateInputValue(),this._cancel){this._cancel=!1;return}let i=!1;_.on(this._datepicker.container,"click",n=>{!this._datepicker._selectedDate&&n.target.hasAttribute(Qk)||i||(this._openTimePicker(),i=!0,setTimeout(()=>{i=!1},500))}),setTimeout(()=>{m.findOne(`[${dc}]`,document.body)||this._scrollBar.reset()},10),this._options.inline&&g.removeClass(this.toggleButton,"pointer-events-none")});const e=m.findOne(aS,document.body);_.on(e,"click",()=>{this._datepicker.close(),this._scrollBar.hide(),_.trigger(this._datepicker._element,tf)})}_handleTimepickerDisablePast(){const t=new Date;t.setHours(0,0,0,0),_.on(this._datepicker._element,"dateChange.te.datepicker",()=>{this._datepicker._selectedDate.getTime()===t.getTime()?this._timepicker.update({disablePast:!0}):this._timepicker.update({disablePast:!1})})}_handleTimepickerDisableFuture(){const t=new Date;t.setHours(0,0,0,0),_.on(this._datepicker._element,"dateChange.te.datepicker",()=>{this._datepicker._selectedDate.getTime()===t.getTime()?this._timepicker.update({disableFuture:!0}):this._timepicker.update({disableFuture:!1})})}_handleEscapeKey(){_.one(document.body,"keyup",()=>{setTimeout(()=>{m.findOne(`[${dc}]`,document.body)||this._scrollBar.reset()},250)})}_handleCancelButton(){const t=m.findOne(`[${Qp}]`,document.body);_.one(t,"mousedown",()=>{this._scrollBar.reset()})}_openDropdownDate(){const t=this._datepicker._popper;t.state.elements.reference=this._input,this._scrollBar.reset()}_openTimePicker(){_.trigger(this._timepicker.elementToggle,"click"),setTimeout(()=>{if(this._addIconButtons(),(this._options.inline||this._options.timepicker.inline)&&this._openDropdownTime(),this._timepicker._modal){const t=m.findOne(`[${Qp}]`,document.body);this._handleEscapeKey(),this._handleCancelButton(),_.on(this._timepicker._modal,"click",e=>{(e.target.hasAttribute(dc)||e.target.hasAttribute(Jk))&&setTimeout(()=>{this._scrollBar.reset()},200),e.target.hasAttribute(tS)&&_.trigger(this._timepicker._element,ef),e.target.hasAttribute(iS)&&(_.trigger(t,"click"),setTimeout(()=>{this._openDatePicker(),this._scrollBar.hide()},200))})}}),_.one(this._timepicker._element,ef,()=>{this._timeValue=this._timepicker.input.value,this._updateInputValue(),_.trigger(this._element,pS)})}_openDropdownTime(){const t=this._timepicker._popper;t.state.elements.reference=this._input,t.update(),this._scrollBar.reset()}_setInitialDefaultInput(){(this._options.defaultDate||this._options.defaultTime)&&this._updateInputValue()}_updateInputValue(){this._timeValue&&this._dateValue&&(this._input.value=`${this._dateValue}, ${this._timeValue}`,_.trigger(this._element,fS,{value:this._input.value}).defaultPrevented)||(_.trigger(this._input,"focus"),this.notch&&this.notch.removeAttribute("data-te-input-focused"))}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,xn);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Dr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,xn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Mr="sticky",Cn=`te.${Mr}`,nf=`.${Cn}`,bS=`active${nf}`,vS=`inactive${nf}`,yS={stickyAnimationSticky:"",stickyAnimationUnsticky:"",stickyBoundary:!1,stickyDelay:0,stickyDirection:"down",stickyMedia:0,stickyOffset:0,stickyPosition:"top",stickyZIndex:100},TS={stickyAnimationSticky:"string",stickyAnimationUnsticky:"string",stickyBoundary:"(boolean|string)",stickyDelay:"number",stickyDirection:"string",stickyMedia:"number",stickyOffset:"number",stickyPosition:"string",stickyZIndex:"(string|number)"},ES={stickyActive:""},xS={stickyActive:"string"};class Lr{constructor(t,e,i){this._element=t,this._hiddenElement=null,this._elementPositionStyles={},this._scrollDirection="",this._isSticked=!1,this._elementOffsetTop=null,this._scrollTop=0,this._pushPoint="",this._manuallyDeactivated=!1,this._element&&(this._options=this._getConfig(e),this._classes=this._getClasses(i),O.setData(t,Cn,this),this._init())}static get NAME(){return Mr}dispose(){const{stickyAnimationUnsticky:t}=this._options;let{animationDuration:e}=getComputedStyle(this._element);e=t!==""?parseFloat(e)*1e3:0,this._disableSticky(),setTimeout(()=>{O.removeData(this._element,Cn),this._element=null,this._options=null,this._hiddenElement=null,this._elementPositionStyles=null,this._scrollDirection=null,this._isSticked=null,this._elementOffsetTop=null,this._scrollTop=null,this._pushPoint=null,this._manuallyDeactivated=null},e)}active(){this._isSticked||(this._createHiddenElement(),this._enableSticky(),this._changeBoundaryPosition(),this._isSticked=!0,this._manuallyDeactivated=!1)}inactive(){this._isSticked&&(this._disableSticky(),this._isSticked=!1,this._manuallyDeactivated=!0)}_init(){this._userActivityListener()}_userActivityListener(){_.on(window,"resize",()=>{this._updateElementPosition(),this._updateElementOffset()}),_.on(window,"scroll",()=>{if(!this._element||window.innerWidth<=this._options.stickyMedia||this._manuallyDeactivated)return;const t=document.documentElement,{stickyDirection:e}=this._options,i=window.pageYOffset||t.scrollTop;this._updateElementOffset(),this._updatePushPoint(),this._updateScrollDirection(i),this._clearInProgressAnimations();const n=[this._scrollDirection,"both"].includes(e),o=this._pushPoint<=i,r=o&&!this._isSticked&&n,a=(!o||!n)&&this._isSticked;r&&(this._createHiddenElement(),this._enableSticky(),this._changeBoundaryPosition(),this._isSticked=!0),a&&(this._disableSticky(),this._isSticked=!1),this._isSticked&&(this._updatePosition({styles:this._elementPositionStyles}),this._changeBoundaryPosition()),this._scrollTop=i<=0?0:i})}_updatePushPoint(){this._options.stickyPosition==="top"?this._pushPoint=this._elementOffsetTop-this._options.stickyDelay:this._pushPoint=this._elementOffsetTop+this._element.height-document.body.scrollHeight+this._options.stickyDelay}_updateElementOffset(){this._hiddenElement?this._elementOffsetTop=this._hiddenElement.offsetTop:this._elementOffsetTop=this._element.offsetTop,this._options.stickyAnimationUnsticky&&(this._elementOffsetTop+=this._element.height||0)}_updateElementPosition(){if(this._hiddenElement){const{left:t}=this._hiddenElement.getBoundingClientRect();this._elementPositionStyles={left:`${t}px`}}else this._elementPositionStyles={};this._setStyle(this._element,this._elementPositionStyles)}_updateScrollDirection(t){t>this._scrollTop?this._scrollDirection="down":this._scrollDirection="up"}_clearInProgressAnimations(){const t=this._scrollDirection==="up",e=this._element.classList.contains(this._options.stickyAnimationUnsticky),i=window.scrollY<=this._elementOffsetTop-this._element.height;t&&e&&i&&(this._removeUnstickyAnimation(),this._resetStyles(),this._removeHiddenElement())}_enableSticky(){const{stickyAnimationSticky:t,stickyAnimationUnsticky:e,stickyOffset:i,stickyPosition:n,stickyZIndex:o}=this._options,{height:r,left:a,width:l}=this._element.getBoundingClientRect();t!==""&&this._toggleClass(t,e,this._element),this._toggleClass(this._classes.stickyActive,"",this._element),this._setStyle(this._element,{top:n==="top"&&`${0+i}px`,bottom:n==="bottom"&&`${0+i}px`,height:`${r}px`,width:`${l}px`,left:`${a}px`,zIndex:`${o}`,position:"fixed"}),this._hiddenElement.hidden=!1,_.trigger(this._element,bS)}_changeBoundaryPosition(){const{stickyPosition:t,stickyBoundary:e,stickyOffset:i}=this._options,{height:n}=this._element.getBoundingClientRect(),o={height:this._element.parentElement.getBoundingClientRect().height,...this._getOffset(this._element.parentElement)};let r;const a=m.findOne(e);a?r=this._getOffset(a).top-n-i:r=o.height+o[t]-n-i;const l=t==="top",c=t==="bottom",h=e,d=r<0,u=r>o.height-n;let p;l&&(d&&h?p={top:`${i+r}px`}:p={top:`${i+0}px`}),c&&(d&&h?p={bottom:`${i+r}px`}:u&&h?p={bottom:`${i+o.bottom}px`}:p={bottom:`${i+0}px`}),this._setStyle(this._element,p)}_disableSticky(){const{stickyAnimationUnsticky:t,stickyAnimationSticky:e}=this._options;let{animationDuration:i}=getComputedStyle(this._element);i=t!==""?parseFloat(i)*1e3:0,this._options.stickyAnimationUnsticky!==""&&this._toggleClass(t,e,this._element),setTimeout(()=>{this._element.classList.contains(e)||(this._removeUnstickyAnimation(),this._resetStyles(),this._removeHiddenElement(),this._toggleClass("",this._classes.stickyActive,this._element),_.trigger(this._element,vS))},i)}_createHiddenElement(){this._hiddenElement||(this._hiddenElement=this._copyElement(this._element))}_removeHiddenElement(){this._hiddenElement&&(this._hiddenElement.remove(),this._hiddenElement=null)}_removeUnstickyAnimation(){this._toggleClass("",this._options.stickyAnimationUnsticky,this._element)}_resetStyles(){this._setStyle(this._element,{top:null,bottom:null,position:null,left:null,zIndex:null,width:null,height:null})}_updatePosition({styles:t}){this._setStyle(this._element,t)}_toggleClass(t,e,i){t&&g.addClass(i,t),e&&g.removeClass(i,e)}_getOffset(t){const e=g.offset(t),i=t.getBoundingClientRect(),n=e.left===0&&e.top===0?0:window.innerHeight-i.bottom;return{...e,bottom:n}}_copyElement(t){const{height:e,width:i}=t.getBoundingClientRect(),n=t.cloneNode(!1);return n.hidden=!0,this._setStyle(n,{height:`${e}px`,width:`${i}px`,opacity:"0"}),t.parentElement.insertBefore(n,t),n}_getConfig(t={}){const e=g.getDataAttributes(this._element);return t={...yS,...e,...t},L(Mr,t,TS),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...ES,...e,...t},L(Mr,t,xS),t}_setStyle(t,e){Object.keys(e).forEach(i=>{t.style[i]=e[i]})}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Cn);const n=typeof t=="object"&&t;if(!(!i&&/dispose|hide/.test(t))&&(i||(i=new Lr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Cn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const CS="data-te-autocomplete-dropdown-ref",AS="data-te-autocomplete-items-list-ref",wS="data-te-autocomplete-item-ref",kS="data-te-autocomplete-loader-ref";function SS(s,t){const{id:e,items:i,width:n,options:o}=s,r=$("div");g.addClass(r,t.dropdownContainer),g.addStyle(r,{width:`${n}px`}),r.setAttribute("id",e);const a=$("div");a.setAttribute(CS,""),g.addClass(a,t.dropdown);const l=$("ul"),c=o.listHeight;l.setAttribute(AS,""),g.addClass(l,t.autocompleteList),g.addClass(l,t.scrollbar),g.addStyle(l,{maxHeight:`${c}px`}),l.setAttribute("role","listbox");const h=of(i,o);return l.innerHTML=h,a.appendChild(l),r.appendChild(a),r}function of(s=[],t,e){const i=t.displayValue,n=t.itemContent;return`
+    ${s.map((o,r)=>{const a=typeof n=="function"?To(n(o),Pd,null):i(o);return`<li data-te-index="${r}" role="option" class="${e}" ${wS} >${a}</li>`}).join("")}
+  `}function OS(s){const t=$("div");t.setAttribute(kS,""),g.addClass(t,s.autocompleteLoader),g.addClass(t,s.spinnerIcon),t.setAttribute("role","status");const e='<span class="absolute -m-px h-px w-px overflow-hidden whitespace-nowrap border-0 p-0 [clip:rect(0,0,0,0)]">Loading...</span>';return t.innerHTML=e,t}function IS(s,t){return`<li class="${t.autocompleteItem}">${s}</li>`}const uc="autocomplete",An="te.autocomplete",xs="data-te-input-state-active",pc="data-te-autocomplete-item-active",rf="data-te-input-focused",af="data-te-autocomplete-state-open",DS="data-te-autocomplete-custom-content-ref",MS="[data-te-autocomplete-dropdown-ref]",$r="[data-te-autocomplete-items-list-ref]",lf="[data-te-autocomplete-item-ref]",LS="[data-te-autocomplete-loader-ref]",$S=`[${DS}]`,RS="[data-te-input-notch-ref]",Rr=`.${An}`,PS=`close${Rr}`,NS=`open${Rr}`,cf=`itemSelect${Rr}`,BS=`update${Rr}`,HS={autoSelect:!1,container:"body",customContent:"",debounce:300,displayValue:s=>s,filter:null,itemContent:null,listHeight:190,loaderCloseDelay:300,noResults:"No results found",threshold:0},VS={autoSelect:"boolean",container:"string",customContent:"string",debounce:"number",displayValue:"function",filter:"(null|function)",itemContent:"(null|function)",listHeight:"number",loaderCloseDelay:"number",noResults:"string",threshold:"number"},FS={autocompleteItem:"flex flex-row items-center justify-between w-full px-4 py-[0.4375rem] truncate text-gray-700 bg-transparent select-none cursor-pointer hover:[&:not([data-te-autocomplete-option-disabled])]:bg-black/5 data-[te-autocomplete-item-active]:bg-black/5 data-[data-te-autocomplete-option-disabled]:text-gray-400 data-[data-te-autocomplete-option-disabled]:cursor-default dark:text-gray-200 dark:hover:[&:not([data-te-autocomplete-option-disabled])]:bg-white/30 dark:data-[te-autocomplete-item-active]:bg-white/30",autocompleteList:"list-none m-0 p-0 overflow-y-auto",autocompleteLoader:"absolute right-1 top-2 w-[1.4rem] h-[1.4rem] border-[0.15em]",dropdown:"relative outline-none min-w-[100px] m-0 scale-y-[0.8] opacity-0 bg-white shadow-[0_2px_5px_0_rgba(0,0,0,0.16),_0_2px_10px_0_rgba(0,0,0,0.12)] transition duration-200 motion-reduce:transition-none data-[te-autocomplete-state-open]:scale-y-100 data-[te-autocomplete-state-open]:opacity-100 dark:bg-zinc-700",dropdownContainer:"z-[1070]",scrollbar:"[&::-webkit-scrollbar]:w-1 [&::-webkit-scrollbar]:h-1 [&::-webkit-scrollbar-button]:block [&::-webkit-scrollbar-button]:h-0 [&::-webkit-scrollbar-button]:bg-transparent [&::-webkit-scrollbar-track-piece]:bg-transparent [&::-webkit-scrollbar-track-piece]:rounded-none [&::-webkit-scrollbar-track-piece]: [&::-webkit-scrollbar-track-piece]:rounded-l [&::-webkit-scrollbar-thumb]:h-[50px] [&::-webkit-scrollbar-thumb]:bg-[#999] [&::-webkit-scrollbar-thumb]:rounded",spinnerIcon:"inline-block h-8 w-8 animate-spin rounded-full border-4 border-solid border-current border-r-transparent align-[-0.125em] motion-reduce:animate-[spin_1.5s_linear_infinite]"},WS={autocompleteItem:"string",autocompleteList:"string",autocompleteLoader:"string",dropdown:"string",dropdownContainer:"string",scrollbar:"string",spinnerIcon:"string"};class Pr{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._getContainer(),this._input=m.findOne("input",t),this._notch=m.findOne(RS,t),this._customContent=m.findOne($S,t),this._loader=OS(this._classes),this._popper=null,this._debounceTimeoutId=null,this._loaderTimeout=null,this._activeItemIndex=-1,this._activeItem=null,this._filteredResults=null,this._lastQueryValue=null,this._canOpenOnFocus=!0,this._isOpen=!1,this._outsideClickHandler=this._handleOutsideClick.bind(this),this._inputFocusHandler=this._handleInputFocus.bind(this),this._userInputHandler=this._handleUserInput.bind(this),this._keydownHandler=this._handleKeydown.bind(this),t&&O.setData(t,An,this),this._init()}static get NAME(){return uc}get filter(){return this._options.filter}get dropdown(){return m.findOne(MS,this._dropdownContainer)}get items(){return m.find(lf,this._dropdownContainer)}get itemsList(){return m.findOne($r,this._dropdownContainer)}initSearch(t){this._filterResults(t)}_getContainer(){this._container=m.findOne(this._options.container)}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...HS,...e,...t},L(uc,t,VS),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...FS,...e,...t},L(uc,t,WS),t}_init(){this._initDropdown(),this._updateInputState(),this._setInputAriaAttributes(),this._listenToInputFocus(),this._listenToUserInput(),this._listenToKeydown()}_initDropdown(){this._dropdownContainerId=this._element.id?`autocomplete-dropdown-${this._element.id}`:bt("autocomplete-dropdown-");const t={id:this._dropdownContainerId,items:[],width:this._input.offsetWidth,options:this._options};if(this._dropdownContainer=SS(t,this._classes),this._options.customContent!==""){const e=this._options.customContent,i=To(e,Pd,null);this.dropdown.insertAdjacentHTML("beforeend",i)}}_setInputAriaAttributes(){this._input.setAttribute("role","combobox"),this._input.setAttribute("aria-expanded",!1),this._input.setAttribute("aria-owns",this._dropdownContainerId),this._input.setAttribute("aria-haspopup",!0),this._input.setAttribute("autocomplete","off")}_updateInputState(){var t,e;this._input.value!==""||this._isOpen?(this._input.setAttribute(xs,""),(t=this._notch)==null||t.setAttribute(xs,"")):(this._input.removeAttribute(xs),(e=this._notch)==null||e.removeAttribute(xs))}_listenToInputFocus(){_.on(this._input,"focus",this._inputFocusHandler)}_handleInputFocus(t){const{value:e}=t.target,i=this._options.threshold;if(!this._canOpenOnFocus){this._canOpenOnFocus=!0;return}e.length<i||(this._lastQueryValue!==e?this._filterResults(e):this.open())}_listenToWindowResize(){_.on(window,"resize",this._handleWindowResize.bind(this))}_handleWindowResize(){this._dropdownContainer&&this._updateDropdownWidth()}_updateDropdownWidth(){const t=this._input.offsetWidth;g.addStyle(this._dropdownContainer,{width:`${t}px`})}_listenToUserInput(){_.on(this._input,"input",this._userInputHandler)}_handleUserInput(t){const{value:e}=t.target,i=this._options.threshold,n=this._options.debounce;if(this.filter){if(e.length<i){this._isOpen&&this.close();return}this._debounceFilter(e,n)}}_debounceFilter(t,e){this._debounceTimeoutId&&clearTimeout(this._debounceTimeoutId),this._debounceTimeoutId=setTimeout(()=>{this._filterResults(t)},e)}_filterResults(t){this._lastQueryValue=t;const e=this.filter(t);this._isPromise(e)?this._asyncUpdateResults(e):this._updateResults(e)}_isPromise(t){return!!t&&typeof t.then=="function"}_asyncUpdateResults(t){this._resetActiveItem(),this._showLoader(),t.then(e=>{this._updateResults(e),this._loaderTimeout=setTimeout(()=>{this._hideLoader(),this._loaderTimeout=null},this._options.loaderCloseDelay)})}_resetActiveItem(){const t=this._activeItem;t&&(t.removeAttribute(pc),this._activeItem=null,this._activeItemIndex=-1)}_showLoader(){this._element.appendChild(this._loader)}_hideLoader(){m.findOne(LS,this._element)&&this._element.removeChild(this._loader)}_updateResults(t){this._resetActiveItem(),this._filteredResults=t,_.trigger(this._element,BS,{results:t});const e=m.findOne($r,this._dropdownContainer),i=of(t,this._options,this._classes.autocompleteItem),n=IS(this._options.noResults,this._classes);t.length===0&&this._options.noResults!==""?e.innerHTML=n:e.innerHTML=i,this._isOpen||this.open(),this._popper&&this._popper.forceUpdate()}_listenToKeydown(){_.on(this._element,"keydown",this._keydownHandler)}_handleKeydown(t){this._isOpen?this._handleOpenKeydown(t):this._handleClosedKeydown(t)}_handleOpenKeydown(t){const e=t.keyCode;if(e===Ci&&this._options.autoSelect&&this._selectActiveItem(),e===xi||e===ut&&t.altKey){this.close(),this._input.focus();return}if(e===xi||e===ut&&t.altKey||e===Ci){this.close(),this._input.focus();return}switch(e){case ht:this._setActiveItem(this._activeItemIndex+1),this._scrollToItem(this._activeItem);break;case ut:this._setActiveItem(this._activeItemIndex-1),this._scrollToItem(this._activeItem);break;case Ti:this._activeItemIndex>-1?(this._setActiveItem(0),this._scrollToItem(this._activeItem)):this._input.setSelectionRange(0,0);break;case Ei:if(this._activeItemIndex>-1)this._setActiveItem(this.items.length-1),this._scrollToItem(this._activeItem);else{const n=this._input.value.length;this._input.setSelectionRange(n,n)}break;case Et:if(t.preventDefault(),this._activeItemIndex>-1){const n=this._filteredResults[this._activeItemIndex];this._handleSelection(n)}return;default:return}t.preventDefault()}_setActiveItem(t){const e=this.items;e[t]&&this._updateActiveItem(e[t],t)}_updateActiveItem(t,e){const i=this._activeItem;i&&i.removeAttribute(pc),t.setAttribute(pc,""),this._activeItemIndex=e,this._activeItem=t}_scrollToItem(t){if(!t)return;const e=this.itemsList,i=e.offsetHeight,n=this.items.indexOf(t),o=t.offsetHeight,r=e.scrollTop;if(n>-1){const a=n*o,l=a+o>r+i;a<r?e.scrollTop=a:l?e.scrollTop=a-i+o:e.scrollTop=r}}_handleClosedKeydown(t){t.key==="Enter"&&t.preventDefault();const e=t.keyCode;(e===Et||e===ht||e===ht)&&this.open()}open(){this._lastQueryValue===null&&this._filterResults("");const t=_.trigger(this._element,NS);this._isOpen||t.defaultPrevented||(this._updateDropdownWidth(),this._listenToWindowResize(),this._popper=Fe(this._element,this._dropdownContainer,{modifiers:[{name:"offset",options:{offset:[0,1]}}]}),this._container.appendChild(this._dropdownContainer),this._listenToOutsideClick(),this._listenToItemsClick(),setTimeout(()=>{this.dropdown.setAttribute(af,""),this._isOpen=!0,this._setInputActiveStyles(),this._updateInputState()},0))}_listenToOutsideClick(){_.on(document,"click",this._outsideClickHandler)}_handleOutsideClick(t){const e=this._input===t.target,i=t.target===this._dropdownContainer,n=this._dropdownContainer&&this._dropdownContainer.contains(t.target);!e&&!i&&!n&&this.close()}_listenToItemsClick(){const t=m.findOne($r,this._dropdownContainer);_.on(t,"click",this._handleItemsClick.bind(this))}_handleItemsClick(t){const e=m.closest(t.target,lf),i=g.getDataAttribute(e,"index"),n=this._filteredResults[i];this._handleSelection(n)}_selectActiveItem(){const t=this._filteredResults[this._activeItemIndex];if(!t)return;const e=this._options.displayValue(t);_.trigger(this._element,cf,{value:t}).defaultPrevented||setTimeout(()=>{this._canOpenOnFocus=!1,this._updateInputValue(e),this._updateInputState()},0)}_handleSelection(t){const e=this._options.displayValue(t),i=_.trigger(this._element,cf,{value:t});t!==void 0&&(i.defaultPrevented||setTimeout(()=>{this._canOpenOnFocus=!1,this._updateInputValue(e),this._updateInputState(),this._input.focus(),this.close()},0))}_updateInputValue(t){this._input.value=t}_setInputActiveStyles(){this._input.setAttribute(rf,"")}close(){var e;const t=_.trigger(this._element,PS);!this._isOpen||t.defaultPrevented||(this._resetActiveItem(),this._removeDropdownEvents(),this.dropdown.removeAttribute(af),_.on(this.dropdown,"transitionend",this._handleDropdownTransitionEnd.bind(this)),this._input.removeAttribute(rf),this._input.value||(this._input.removeAttribute(xs),(e=this._notch)==null||e.removeAttribute(xs)))}_removeDropdownEvents(){const t=m.findOne($r,this._dropdownContainer);_.off(t,"click"),_.off(document,"click",this._outsideClickHandler),_.off(window,"resize",this._handleWindowResize.bind(this))}_handleDropdownTransitionEnd(t){this._isOpen&&t&&t.propertyName==="opacity"&&(this._popper.destroy(),this._dropdownContainer&&this._container.removeChild(this._dropdownContainer),this._isOpen=!1,_.off(this.dropdown,"transitionend"),this._canOpenOnFocus=!0)}dispose(){this._isOpen&&this.close(),this._removeInputAndElementEvents(),this._dropdownContainer.remove(),O.removeData(this._element,An)}_removeInputAndElementEvents(){_.off(this._input,"focus",this._inputFocusHandler),_.off(this._input,"input",this._userInputHandler),_.off(this._element,"keydown",this._keydownHandler)}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,An);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Pr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,An)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zS=(s,t)=>`<div class="${s.connectContainer}" ${t}>
+  <div class="${s.connect}"></div>
+  </div>`,jS=(s,t)=>`<div class="${s.hand}" ${t}>
+    <span></span>
+  </div>`,YS=(s,t)=>`
+    <span class="${s.tooltip}" ${t}>
+      <span class="${s.tooltipValue}"></span>
+    </span>
+    `,Si=s=>s.type==="touchmove"?s.touches[0].clientX:s.clientX,Nr="multiRangeSlider",Br=`te.${Nr}`,hf=`valueChanged${`.${Br}`}`,Oi="data-te-active",df="data-te-multi-range-slider-hand-ref",uf="data-te-multi-range-slider-connect-ref",pf="data-te-multi-range-slider-tooltip-ref",KS={max:"number",min:"number",numberOfRanges:"number",startValues:"(array|string)",step:"(string|null|number)",tooltip:"boolean"},US={max:100,min:0,numberOfRanges:2,startValues:[0,100],step:null,tooltip:!1},XS={connect:"z-10 h-full w-full bg-[#eee] will-change-transform dark:bg-[#4f4f4f]",connectContainer:"relative border-[1px] border-[#eee] z-0 h-full w-full overflow-hidden dark:border-[#4f4f4f]",container:"apperance-none relative m-auto w-full cursor-pointer h-1 border-0 bg-transparent p-0 focus:outline-none dark:border-[#4f4f4f]",hand:"apperance-none absolute top-[50%] border-0 -mt-1 h-4 w-4 cursor-pointer rounded-[50%] border-0 bg-primary transition-colors ease-in-out will-change-transform active:bg-[#c4d4ef] active:z-60",tooltip:"absolute -top-[18px] origin-[50%_50%] -translate-x-[6px] -rotate-45 scale-0 rounded-bl-none rounded-br-2xl rounded-tl-2xl rounded-tr-2xl bg-primary text-white transition-all duration-[200ms] data-[te-active]:-top-[38px] data-[te-active]:scale-100",tooltipValue:"block h-[30px] w-[30px] -translate-x-[6px] translate-y-[6px] rotate-45 text-center text-[10px]"},GS={container:"string",connectContainer:"string",connect:"string",hand:"string",tooltip:"string",tooltipValue:"string"};class Hr extends Mt{constructor(t,e,i){super(t),this._options=this._getConfig(e),this._mousemove=!1,this._classes=this._getClasses(i),this._maxTranslation=null,this._minTranslation=null,this._currentStepValue=null,this._canChangeStep=!1,this.init()}static get NAME(){return Nr}get hands(){return m.find(`[${df}]`,this._element)}get connect(){return m.findOne(`[${uf}]`,this._element)}get leftConnectRect(){return this.connect.getBoundingClientRect().left}get handActive(){return m.findOne(`[${Oi}]`)}get activeTooltipValue(){return m.find(`[${pf}]`).filter(n=>n.hasAttribute(Oi))[0].children[0]}init(){this._setContainerClasses(),this._setRangeConnectsElement(),this._setRangeHandleElements(),this._setMaxAndMinTranslation(),this._setTransofrmationOnStart(),this._handleClickEventOnHand(),this._handleEndMoveEventDocument(),this._handleClickOnRange(),this._setTooltipToHand()}dispose(){O.removeData(this._element,Br),this._options=null,this._mousemove=null,this._maxTranslation=null,this._minTranslation=null,this._currentStepValue=null,this._canChangeStep=null,this.hands.forEach(t=>{ct.off(t,"mousedown touchstart"),ct.off(t,"mouseup touchend")}),ct.off(document,"mousemove touchmove"),ct.off(document,"mouseup touchend"),ct.off(this.connect,"mousedown touchstart")}_setMaxAndMinTranslation(){this._maxTranslation=this.connect.offsetWidth-this.hands[0].offsetWidth/2,this._minTranslation=this.connect.offsetLeft-this.hands[0].offsetWidth/2}_setTransofrmationOnStart(){const{max:t,min:e}=this._options;let{startValues:i}=this._options;typeof i=="string"&&(i=JSON.parse(i.replace(/'/g,'"'))),i.length===0?this.hands.forEach(n=>{g.setDataAttribute(n,"translation",Math.round(this._minTranslation)),g.addStyle(n,{transform:`translate(${this._minTranslation}px,-25%)`})}):this.hands.forEach((n,o)=>{if(i[o]>t||i[o]<e)return;if(i[o]===void 0){g.setDataAttribute(n,"translation",Math.round(this._maxTranslation)),g.addStyle(n,{transform:`translate(${this._maxTranslation}px,-25%)`,zIndex:this.hands.length-o});return}const a=(i[o]-e)/(t-e)*this.connect.offsetWidth-n.offsetWidth/2;g.setDataAttribute(n,"translation",Math.round(a)),g.addStyle(n,{transform:`translate(${a}px,-25%)`,zIndex:this.hands.length-o})})}_handleOutOfMaxRangeValue(t,e){this._updateHand(t,this._maxTranslation),this._options.tooltip&&(this.activeTooltipValue.innerText=e)}_handleOutOfMinRangeValue(t,e){this._updateHand(t,this._minTranslation),this._options.tooltip&&(this.activeTooltipValue.innerText=e)}_handleNormalMove(t,e,i){this._updateHand(t,e),this._options.tooltip&&(this.activeTooltipValue.innerText=Math.round(i))}_handleClickEventOnHand(){const{max:t,min:e,step:i}=this._options;this.hands.forEach(n=>{ct.on(n,"mousedown touchstart",o=>{if(this._mousemove=!0,n.setAttribute(Oi,""),this._options.tooltip&&n.children[1].setAttribute(Oi,""),this._handleMoveEvent(n),this._handleEndMoveEvent(n,o),!this._canChangeStep&&i!==null)return;const r=Si(o)-this.leftConnectRect-n.offsetWidth/2,a=(Si(o)-this.leftConnectRect)/(this.connect.offsetWidth/(t-e))%(t-e);r>=this._maxTranslation?this._handleOutOfMaxRangeValue(n,t):r<=this._minTranslation?this._handleOutOfMinRangeValue(n,e):this._handleNormalMove(n,r,a)})})}_setContainerClasses(){g.addClass(this._element,this._classes.container)}_setRangeConnectsElement(){this._element.insertAdjacentHTML("afterbegin",zS({connectContainer:this._classes.connectContainer,connect:this._classes.connect},uf))}_setRangeHandleElements(){for(let t=0;t<this._options.numberOfRanges;t++)this._element.insertAdjacentHTML("beforeend",jS({hand:this._classes.hand},df));this.hands.forEach((t,e)=>{t.setAttribute("aria-orientation","horizontal"),t.setAttribute("role","slider"),g.setDataAttribute(t,"handle",e)})}_setTooltipToHand(){this._options.tooltip&&this.hands.forEach(t=>t.insertAdjacentHTML("beforeend",YS({tooltip:this._classes.tooltip,tooltipValue:this._classes.tooltipValue},pf)))}_handleMoveEvent(t){const{tooltip:e,step:i}=this._options;ct.on(document,"mousemove touchmove",n=>{n.type==="mousemove"&&n.preventDefault();const{max:o,min:r,numberOfRanges:a}=this._options;if(t.hasAttribute(Oi)){const l=(Si(n)-this.leftConnectRect)/this.connect.offsetWidth*o;let c=(Si(n)-this.leftConnectRect)/(this.connect.offsetWidth/(o-r))%(o-r)+r;if((this._currentStepValue===Math.round(c)||Math.round(c)%i!==0)&&i!==null){this._canChangeStep=!1;return}this._canChangeStep=!0;let h=Si(n)-this.leftConnectRect-t.offsetWidth/2;const d=g.getDataAttribute(this.handActive,"handle"),u=g.getDataAttribute(this.handActive,"translation");if(c<r)h=r-t.offsetWidth/2,c=r;else if(l>=o)return;const p=this.hands.map(f=>g.getDataAttribute(f,"translation"));if(a<2)Math.round(c)%i===0&&i!==null?(this._currentStepValue=Math.round(c),g.addStyle(t,{transform:`translate(${h}px,-25%)`}),e&&(this.activeTooltipValue.innerText=Math.round(c))):i===null&&(g.addStyle(t,{transform:`translate(${h}px,-25%)`}),e&&(this.activeTooltipValue.innerText=Math.round(c))),g.setDataAttribute(t,"translation",h);else{const f=d>0&&d<a-1;let b=h,v=!1;const y=p[d+1],T=p[d-1];d===0&&u>=y?(b=y,v=h<=b):d===a-1&&u<=T?(b=T,v=h>=b):f&&(u>=y||u<=T)&&(b=u>=y?y:T,v=b===y?h<=b:h>=b),Math.round(c)%i===0&&i!==null?(this._currentStepValue=Math.round(c),g.addStyle(t,{transform:`translate(${b}px,-25%)`}),e&&b===h&&this.activeTooltipValue!==null&&(this.activeTooltipValue.innerText=Math.round(c))):i===null&&(g.addStyle(t,{transform:`translate(${b}px,-25%)`}),e&&b===h&&this.activeTooltipValue!==null&&(this.activeTooltipValue.innerText=Math.round(c))),g.setDataAttribute(t,"translation",v?h:b)}this._canChangeStep&&this._handleEventChangeValuesOnRange()}})}_handleEventChangeValuesOnRange(){const{max:t,min:e,numberOfRanges:i}=this._options,n=r=>{const a=r.getBoundingClientRect().left-this.leftConnectRect+r.offsetWidth/2;let l=a/(this.connect.offsetWidth/(t-e))%(t-e);return a===this.connect.offsetWidth?l=t:l+=e,g.setDataAttribute(r,"value",Math.round(l*10)/10),{value:l}};if(i<2){const{value:r}=n(this.hands[0]);_.trigger(this._element,hf,{values:{value:r+e,rounded:Math.round(r+e)}});return}const o=this.hands.map(r=>n(r));_.trigger(this._element,hf,{values:{value:o.map(({value:r})=>r+e),rounded:o.map(({value:r})=>Math.round(r+e))}})}_resetHandState(t,e){_.off(t,e),t.removeAttribute(Oi),this._options.tooltip&&t.children[1].removeAttribute(Oi)}_handleEndMoveEventDocument(){ct.on(document,"mouseup touchend",()=>{this._mousemove&&(this.hands.forEach(t=>{this._resetHandState(t,"mousemove")}),ct.off(document,"mousemove touchmove"),this._mousemove=!1)})}_handleEndMoveEvent(t){ct.on(t,"mouseup touchend",()=>{this._resetHandState(t,"mousemove"),ct.off(document,"mousemove touchmove"),this._mousemove=!1})}_handleClickOnRange(){this._options.step===null&&ct.on(this.connect,"mousedown touchstart",t=>{const e=[];let i=0;if(this.hands.forEach(n=>{this._mousemove=!0;const o=Si(t),r=n.offsetWidth,a=g.getDataAttribute(n,"translation"),l=o-this.leftConnectRect-r/2;this._options.numberOfRanges<2?this._updateHand(n,l):(e.push(Math.abs(l-a)),e.forEach((c,h)=>{c<e[i]&&(i=h)}))}),this._options.numberOfRanges>=2){const n=Si(t)-this.leftConnectRect-this.hands[i].offsetWidth/2;this._updateAdjacentHands(i,n)}this._handleEventChangeValuesOnRange()})}_updateHand(t,e){g.addStyle(t,{transform:`translate(${e}px,-25%)`}),g.setDataAttribute(t,"translation",e)}_updateAdjacentHands(t,e){const i=this.hands[t+1],n=this.hands[t-1],o=i?g.getDataAttribute(i,"translation"):void 0,r=n?g.getDataAttribute(n,"translation"):void 0;i&&e>o?this._updateHand(i,e):n&&e<r?this._updateHand(n,e):this._updateHand(this.hands[t],e)}_getConfig(t){const e={...US,...g.getDataAttributes(this._element),...t};return L(Nr,e,KS),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...XS,...e,...t},L(Nr,t,GS),t}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Br);const n=typeof t=="object"&&t;if(!(!i&&/dispose|hide/.test(t))&&(i||(i=new Hr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Br)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const qS=s=>{ph(()=>{const t=uh();if(t){const e=s.NAME,i=t.fn[e];t.fn[e]=s.jQueryInterface,t.fn[e].Constructor=s,t.fn[e].noConflict=()=>(t.fn[e]=i,s.jQueryInterface)}})},ZS=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,function(e){e.preventDefault(),s.getOrCreateInstance(this).toggle()})},QS=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){if(["A","AREA"].includes(this.tagName)&&e.preventDefault(),ci(this))return;s.getOrCreateInstance(this).show()})},JS=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){const i=Ne(this);if(["A","AREA"].includes(this.tagName)&&e.preventDefault(),ci(this))return;_.one(i,s.EVENT_HIDDEN,()=>{ae(this)&&this.focus()});const n=m.findOne(s.OPEN_SELECTOR);n&&n!==i&&s.getInstance(n).hide(),s.getOrCreateInstance(i).toggle(this)})},tO=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,e=>{e.preventDefault();const i=e.target.closest(t);s.getOrCreateInstance(i).toggle()})},eO=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,function(e){const i=Ne(this);["A","AREA"].includes(this.tagName)&&e.preventDefault(),_.one(i,s.EVENT_SHOW,r=>{r.defaultPrevented||_.one(i,s.EVENT_HIDDEN,()=>{ae(this)&&this.focus()})});const n=m.findOne(`[${s.OPEN_SELECTOR}="true"]`);n&&s.getInstance(n).hide(),s.getOrCreateInstance(i).toggle(this)})},iO=(s,t)=>{_.one(document,"mousedown",t,s.autoInitial(new s))},sO=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){(e.target.tagName==="A"||e.delegateTarget&&e.delegateTarget.tagName==="A")&&e.preventDefault();const i=Ca(this);m.find(i).forEach(o=>{s.getOrCreateInstance(o,{toggle:!1}).toggle()})})},nO=(s,t)=>{[].slice.call(document.querySelectorAll(t)).map(function(i){return new s(i)})},oO=(s,t)=>{[].slice.call(document.querySelectorAll(t)).map(function(i){return new s(i)})},rO=(s,t)=>{m.find(t).forEach(e=>{new s(e)}),_.on(document,`click.te.${s.NAME}.data-api`,`${t} img:not([data-te-lightbox-disabled])`,s.toggle())},aO=(s,t)=>{const e=o=>o[0]==="{"&&o[o.length-1]==="}"||o[0]==="["&&o[o.length-1]==="]",i=o=>typeof o!="string"?o:e(o)?JSON.parse(o.replace(/'/g,'"')):o,n=o=>{const r={};return Object.keys(o).forEach(a=>{if(a.match(/dataset.*/)){const l=a.slice(7,8).toLowerCase().concat(a.slice(8));r[l]=i(o[a])}}),r};m.find(t).forEach(o=>{if(g.getDataAttribute(o,"chart")!=="bubble"&&g.getDataAttribute(o,"chart")!=="scatter"){const r=g.getDataAttributes(o),a={data:{datasets:[n(r)]}};return r.chart&&(a.type=r.chart),r.labels&&(a.data.labels=JSON.parse(r.labels.replace(/'/g,'"'))),new s(o,{...a,...ln[a.type]})}return null})};class lO{constructor(){this.inits=[]}get initialized(){return this.inits}isInited(t){return this.inits.includes(t)}add(t){this.isInited(t)||this.inits.push(t)}}const fc=new lO,wn={alert:{name:"Alert",selector:"[data-te-alert-init]",isToggler:!1},animation:{name:"Animate",selector:"[data-te-animation-init]",isToggler:!1},carousel:{name:"Carousel",selector:"[data-te-carousel-init]",isToggler:!1},chips:{name:"ChipsInput",selector:"[data-te-chips-input-init]",isToggler:!1},chip:{name:"Chip",selector:"[data-te-chip-init]",isToggler:!1,onInit:"init"},datepicker:{name:"Datepicker",selector:"[data-te-datepicker-init]",isToggler:!1},datetimepicker:{name:"Datetimepicker",selector:"[data-te-date-timepicker-init]",isToggler:!1},input:{name:"Input",selector:"[data-te-input-wrapper-init]",isToggler:!1},perfectScrollbar:{name:"PerfectScrollbar",selector:"[data-te-perfect-scrollbar-init]",isToggler:!1},rating:{name:"Rating",selector:"[data-te-rating-init]",isToggler:!1},scrollspy:{name:"ScrollSpy",selector:"[data-te-spy='scroll']",isToggler:!1},select:{name:"Select",selector:"[data-te-select-init]",isToggler:!1},sidenav:{name:"Sidenav",selector:"[data-te-sidenav-init]",isToggler:!1},stepper:{name:"Stepper",selector:"[data-te-stepper-init]",isToggler:!1},timepicker:{name:"Timepicker",selector:"[data-te-timepicker-init]",isToggler:!1},toast:{name:"Toast",selector:"[data-te-toast-init]",isToggler:!1},datatable:{name:"Datatable",selector:"[data-te-datatable-init]"},popconfirm:{name:"Popconfirm",selector:"[data-te-toggle='popconfirm']"},validation:{name:"Validation",selector:"[data-te-validation-init]"},smoothScroll:{name:"SmoothScroll",selector:"a[data-te-smooth-scroll-init]"},lazyLoad:{name:"LazyLoad",selector:"[data-te-lazy-load-init]"},clipboard:{name:"Clipboard",selector:"[data-te-clipboard-init]"},infiniteScroll:{name:"InfiniteScroll",selector:"[data-te-infinite-scroll-init]"},loadingManagement:{name:"LoadingManagement",selector:"[data-te-loading-management-init]"},sticky:{name:"Sticky",selector:"[data-te-sticky-init]"},multiRangeSlider:{name:"MultiRangeSlider",selector:"[data-te-multi-range-slider-init]"},chart:{name:"Chart",selector:"[data-te-chart]",isToggler:!1,advanced:aO},button:{name:"Button",selector:"[data-te-toggle='button']",isToggler:!0,callback:tO},collapse:{name:"Collapse",selector:"[data-te-collapse-init]",isToggler:!0,callback:sO},dropdown:{name:"Dropdown",selector:"[data-te-dropdown-toggle-ref]",isToggler:!0,callback:ZS},modal:{name:"Modal",selector:"[data-te-toggle='modal']",isToggler:!0,callback:eO},ripple:{name:"Ripple",selector:"[data-te-ripple-init]",isToggler:!0,callback:iO},offcanvas:{name:"Offcanvas",selector:"[data-te-offcanvas-toggle]",isToggler:!0,callback:JS},tab:{name:"Tab",selector:"[data-te-toggle='tab'], [data-te-toggle='pill'], [data-te-toggle='list']",isToggler:!0,callback:QS},tooltip:{name:"Tooltip",selector:"[data-te-toggle='tooltip']",isToggler:!1,callback:nO},popover:{name:"Popover",selector:"[data-te-toggle='popover']",isToggler:!0,callback:oO},lightbox:{name:"Lightbox",selector:"[data-te-lightbox-init]",isToggler:!0,callback:rO},touch:{name:"Touch",selector:"[data-te-touch-init]"}},cO=s=>wn[s.NAME]||null,hO=(s,t)=>{if(!s||!t.allowReinits&&fc.isInited(s.NAME))return;fc.add(s.NAME);const e=cO(s),i=(e==null?void 0:e.isToggler)||!1;if(qS(s),e!=null&&e.advanced){e==null||e.advanced(s,e==null?void 0:e.selector);return}if(i){e==null||e.callback(s,e==null?void 0:e.selector);return}m.find(e==null?void 0:e.selector).forEach(n=>{let o=s.getInstance(n);o||(o=new s(n),e!=null&&e.onInit&&o[e.onInit]())})},dO=(s,t)=>{s.forEach(e=>hO(e,t))},uO={allowReinits:!1,checkOtherImports:!1},ff=(s,t={})=>{t={...uO,...t};const e=Object.keys(wn).map(i=>{if(!!document.querySelector(wn[i].selector)){const o=s[wn[i].name];return!o&&!fc.isInited(i)&&t.checkOtherImports&&console.warn(`Please import ${wn[i].name} from "tw-elements" package and add it to a object parameter inside "initTE" function`),o}});dO(e,t)},_f="sidenav",Vr="te.sidenav",pO="data-te-sidenav-rotate-icon-ref",_c="[data-te-sidenav-toggle-ref]",fO="[data-te-collapse-init]",_O='[data-te-sidenav-slim="true"]',gO='[data-te-sidenav-slim="false"]',mO="[data-te-sidenav-menu-ref]",Cs="[data-te-sidenav-collapse-ref]",kn="[data-te-sidenav-link-ref]",bO=et()?100:-100,vO=et()?-100:100,yO={sidenavAccordion:"(boolean)",sidenavBackdrop:"(boolean)",sidenavBackdropClass:"(null|string)",sidenavCloseOnEsc:"(boolean)",sidenavColor:"(string)",sidenavContent:"(null|string)",sidenavExpandable:"(boolean)",sidenavExpandOnHover:"(boolean)",sidenavFocusTrap:"(boolean)",sidenavHidden:"(boolean)",sidenavMode:"(string)",sidenavModeBreakpointOver:"(null|string|number)",sidenavModeBreakpointSide:"(null|string|number)",sidenavModeBreakpointPush:"(null|string|number)",sidenavBreakpointSm:"(number)",sidenavBreakpointMd:"(number)",sidenavBreakpointLg:"(number)",sidenavBreakpointXl:"(number)",sidenavBreakpoint2xl:"(number)",sidenavScrollContainer:"(null|string)",sidenavSlim:"(boolean)",sidenavSlimCollapsed:"(boolean)",sidenavSlimWidth:"(number)",sidenavPosition:"(string)",sidenavRight:"(boolean)",sidenavTransitionDuration:"(number)",sidenavWidth:"(number)"},TO={sidenavAccordion:!1,sidenavBackdrop:!0,sidenavBackdropClass:null,sidenavCloseOnEsc:!0,sidenavColor:"primary",sidenavContent:null,sidenavExpandable:!0,sidenavExpandOnHover:!1,sidenavFocusTrap:!0,sidenavHidden:!0,sidenavMode:"over",sidenavModeBreakpointOver:null,sidenavModeBreakpointSide:null,sidenavModeBreakpointPush:null,sidenavBreakpointSm:640,sidenavBreakpointMd:768,sidenavBreakpointLg:1024,sidenavBreakpointXl:1280,sidenavBreakpoint2xl:1536,sidenavScrollContainer:null,sidenavSlim:!1,sidenavSlimCollapsed:!1,sidenavSlimWidth:77,sidenavPosition:"fixed",sidenavRight:!1,sidenavTransitionDuration:300,sidenavWidth:240};class Ii{constructor(t,e={}){ke(this,"_addBackdropOnInit",()=>{this._options.sidenavHidden||(this._backdrop.show(),_.off(this._element,"transitionend",this._addBackdropOnInit))});this._element=t,this._options=e,this._ID=bt(""),this._content=null,this._initialContentStyle=null,this._slimCollapsed=!1,this._activeNode=null,this._tempSlim=!1,this._backdrop=this._initializeBackDrop(),this._focusTrap=null,this._perfectScrollbar=null,this._touch=null,this._setModeFromBreakpoints(),this.escHandler=i=>{i.keyCode===xi&&this.toggler&&ae(this.toggler)&&(this._update(!1),_.off(window,"keydown",this.escHandler))},this.hashHandler=()=>{this._setActiveElements()},t&&(O.setData(t,Vr,this),this._setup()),this.options.sidenavBackdrop&&!this.options.sidenavHidden&&this.options.sidenavMode==="over"&&_.on(this._element,"transitionend",this._addBackdropOnInit),this._didInit=!1,this._init()}static get NAME(){return _f}get container(){if(this.options.sidenavPosition==="fixed")return m.findOne("body");const t=e=>!e.parentNode||e.parentNode===document?e:e.parentNode.style.position==="relative"||e.parentNode.classList.contains("relative")?e.parentNode:t(e.parentNode);return t(this._element)}get isVisible(){let t=0,e=window.innerWidth;if(this.options.sidenavPosition!=="fixed"){const n=this.container.getBoundingClientRect();t=n.x,e=n.x+n.width}const{x:i}=this._element.getBoundingClientRect();if(this.options.sidenavRight&&!et()||!this.options.sidenavRight&&et()){let n=0;if(this.container.scrollHeight>this.container.clientHeight&&(n=this.container.offsetWidth-this.container.clientWidth),this.container.tagName==="BODY"){const o=document.documentElement.clientWidth;n=Math.abs(window.innerWidth-o)}return Math.abs(i+n-e)>10}return Math.abs(i-t)<10}get links(){return m.find(kn,this._element)}get navigation(){return m.find(mO,this._element)}get options(){const t={...TO,...g.getDataAttributes(this._element),...this._options};return L(_f,t,yO),t}get sidenavStyle(){return{width:`${this.width}px`,height:this.options.sidenavPosition==="fixed"?"100vh":"100%",position:this.options.sidenavPosition,transition:`all ${this.transitionDuration} linear`}}get toggler(){return m.find(_c).find(e=>{const i=g.getDataAttribute(e,"target");return m.findOne(i)===this._element})}get transitionDuration(){return`${this.options.sidenavTransitionDuration/1e3}s`}get translation(){return this.options.sidenavRight?vO:bO}get width(){return this._slimCollapsed?this.options.sidenavSlimWidth:this.options.sidenavWidth}get isBackdropVisible(){return!!this._backdrop._element}changeMode(t){this._setMode(t)}dispose(){_.off(window,"keydown",this.escHandler),this.options.sidenavBackdrop&&this._backdrop.dispose(),_.off(window,"hashchange",this.hashHandler),this._touch.dispose(),O.removeData(this._element,Vr),this._element=null}hide(){this._emitEvents(!1),this._update(!1),this._options.sidenavBackdrop&&this.isBackdropVisible&&this._backdrop.hide()}show(){this._emitEvents(!0),this._update(!0),this._options.sidenavBackdrop&&this._options.sidenavMode==="over"&&this._backdrop.show()}toggle(){this._emitEvents(!this.isVisible),this._update(!this.isVisible)}toggleSlim(){this._setSlim(!this._slimCollapsed)}update(t){this._options=t,this._setup()}getBreakpoint(t){return this._transformBreakpointValuesToObject()[t]}_init(){this._didInit||(_.on(document,"click",_c,Ii.toggleSidenav()),this._didInit=!0)}_transformBreakpointValuesToObject(){return{sm:this.options.sidenavBreakpointSm,md:this.options.sidenavBreakpointMd,lg:this.options.sidenavBreakpointLg,xl:this.options.sidenavBreakpointXl,"2xl":this.options.sidenavBreakpoint2xl}}_setModeFromBreakpoints(){const t=window.innerWidth,e=this._transformBreakpointValuesToObject();if(t===void 0||!e)return;const i=typeof this.options.sidenavModeBreakpointOver=="number"?t-this.options.sidenavModeBreakpointOver:t-e[this.options.sidenavModeBreakpointOver],n=typeof this.options.sidenavModeBreakpointSide=="number"?t-this.options.sidenavModeBreakpointSide:t-e[this.options.sidenavModeBreakpointSide],o=typeof this.options.sidenavModeBreakpointPush=="number"?t-this.options.sidenavModeBreakpointPush:t-e[this.options.sidenavModeBreakpointPush],r=(l,c)=>l-c<0?-1:c-l<0?1:0,a=[i,n,o].filter(l=>l!=null&&l>=0).sort(r)[0];i>0&&i===a?(this._options.sidenavMode="over",this._options.sidenavHidden=!0):n>0&&n===a?this._options.sidenavMode="side":o>0&&o===a&&(this._options.sidenavMode="push")}_collapseItems(){this.navigation.forEach(t=>{m.find(Cs,t).forEach(i=>{ce.getInstance(i).hide()})})}_getOffsetValue(t,{index:e,property:i,offsets:n}){const o=this._getPxValue(this._initialContentStyle[e][n[i].property]),r=t?n[i].value:0;return o+r}_getProperty(...t){return t.map((e,i)=>i===0?e:e[0].toUpperCase().concat(e.slice(1))).join("")}_getPxValue(t){return t?parseFloat(t):0}_handleSwipe(t,e){e&&this._slimCollapsed&&this.options.sidenavSlim&&this.options.sidenavExpandable?this.toggleSlim():e||(this._slimCollapsed||!this.options.sidenavSlim||!this.options.sidenavExpandable?this.toggler&&ae(this.toggler)&&this.toggle():this.toggleSlim())}_isActive(t,e){return e?e===t:t.attributes.href?new URL(t,window.location.href).href===window.location.href:!1}_isAllToBeCollapsed(){return m.find(fO,this._element).filter(i=>i.getAttribute("aria-expanded")==="true").length===0}_isAllCollapsed(){return m.find(Cs,this._element).filter(t=>ae(t)).length===0}_initializeBackDrop(){if(!this.options.sidenavBackdrop)return;const t=this.options.sidenavBackdropClass?this.options.sidenavBackdropClass.split(" "):this.options.sidenavPosition?["opacity-50","transition-all","duration-300","ease-in-out",this.options.sidenavPosition,"top-0","left-0","z-50","bg-black/10","dark:bg-black-60","w-full","h-full",this._element.id]:null;return new Qa({isVisible:this.options.sidenavBackdrop,isAnimated:!0,rootElement:this._element.parentNode,backdropClasses:t,clickCallback:()=>this.hide()})}_updateBackdrop(t){if(this.options.sidenavMode==="over"){t?this._backdrop.show():this.isBackdropVisible&&this._backdrop.hide();return}this.isBackdropVisible&&this._backdrop.hide()}_setup(){this._setupTouch(),this.options.sidenavFocusTrap&&this._setupFocusTrap(),this._setupCollapse(),this.options.sidenavSlim&&this._setupSlim(),this._setupInitialStyling(),this._setupScrolling(),this.options.sidenavContent&&this._setupContent(),this._setupActiveState(),this._setupRippleEffect(),this.options.sidenavHidden||this._updateOffsets(!0,!0),this.options.sidenavMode==="over"&&this._setTabindex(!0)}_setupActiveState(){this._setActiveElements(),this.links.forEach(t=>{_.on(t,"click",()=>this._setActiveElements(t)),_.on(t,"keydown",e=>{e.keyCode===Et&&this._setActiveElements(t)})}),_.on(window,"hashchange",this.hashHandler)}_setupCollapse(){this.navigation.forEach((t,e)=>{m.find(Cs,t).forEach((n,o)=>this._setupCollapseList({list:n,index:o,menu:t,menuIndex:e}))})}_generateCollpaseID(t,e){return`sidenav-collapse-${this._ID}-${e}-${t}`}_setupCollapseList({list:t,index:e,menu:i,menuIndex:n}){const o=this._generateCollpaseID(e,n);t.setAttribute("id",o),t.setAttribute("data-te-collapse-item","");const[r]=m.prev(t,kn);g.setDataAttribute(r,"collapse-init",""),r.setAttribute("href",`#${o}`),r.setAttribute("role","button");const a=ce.getInstance(t)||new ce(t,{toggle:!1,parent:this.options.sidenavAccordion?i:t});(t.dataset.teSidenavStateShow===""||t.dataset.teCollapseShow==="")&&this._rotateArrow(r,!1),_.on(r,"click",l=>{this._toggleCategory(l,a,t),this._tempSlim&&this._isAllToBeCollapsed()&&(this._setSlim(!0),this._tempSlim=!1),this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()}),_.on(t,"show.te.collapse",()=>this._rotateArrow(r,!1)),_.on(t,"hide.te.collapse",()=>this._rotateArrow(r,!0)),_.on(t,"shown.te.collapse",()=>{this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()}),_.on(t,"hidden.te.collapse",()=>{this._tempSlim&&this._isAllCollapsed()&&(this._setSlim(!0),this._tempSlim=!1),this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()})}_setupContent(){this._content=m.find(this.options.sidenavContent),this._content.forEach(t=>{const e=["!p","!m","!px","!pl","!pr","!mx","!ml","!mr","!-p","!-m","!-px","!-pl","!-pr","!-mx","!-ml","!-mr"];[...t.classList].filter(n=>e.findIndex(o=>n.includes(o))>=0).forEach(n=>t.classList.remove(n))}),this._initialContentStyle=this._content.map(t=>{const{paddingLeft:e,paddingRight:i,marginLeft:n,marginRight:o,transition:r}=window.getComputedStyle(t);return{paddingLeft:e,paddingRight:i,marginLeft:n,marginRight:o,transition:r}})}_setupFocusTrap(){this._focusTrap=new Vs(this._element,{event:"keydown",condition:t=>t.keyCode===Ci,onlyVisible:!0},this.toggler)}_setupInitialStyling(){this._setColor(),g.style(this._element,this.sidenavStyle)}_setupScrolling(){let t=this._element;if(this.options.sidenavScrollContainer){t=m.findOne(this.options.sidenavScrollContainer,this._element);const i=dm(t.parentNode.children).filter(n=>n!==t).reduce((n,o)=>n+o.clientHeight,0);g.style(t,{maxHeight:`calc(100% - ${i}px)`,position:"relative"})}this._perfectScrollbar=new ms(t,{suppressScrollX:!0,handlers:["click-rail","drag-thumb","wheel","touch"]})}_setupSlim(){this._slimCollapsed=this.options.sidenavSlimCollapsed,this._toggleSlimDisplay(this._slimCollapsed),this.options.sidenavExpandOnHover&&(this._element.addEventListener("mouseenter",()=>{this._slimCollapsed&&this._setSlim(!1)}),this._element.addEventListener("mouseleave",()=>{this._slimCollapsed||this._setSlim(!0)}))}_setupRippleEffect(){this.links.forEach(t=>{let e=Ye.getInstance(t),i=this.options.sidenavColor;if(e&&e._options.sidenavColor!==this.options.sidenavColor)e.dispose();else if(e)return;(localStorage.theme==="dark"||!("theme"in localStorage)&&window.matchMedia("(prefers-color-scheme: dark)").matches)&&(i="white"),e=new Ye(t,{rippleColor:i})})}_setupTouch(){this._touch=new pE(this._element,"swipe",{threshold:20}),this._touch.init(),_.on(this._element,"swipeleft",t=>this._handleSwipe(t,this.options.sidenavRight)),_.on(this._element,"swiperight",t=>this._handleSwipe(t,!this.options.sidenavRight))}_setActive(t,e){t.setAttribute("data-te-sidebar-state-active",""),this._activeNode&&t.removeAttribute("data-te-sidebar-state-active"),this._activeNode=t;const[i]=m.parents(this._activeNode,Cs);if(!i){this._setActiveCategory();return}const[n]=m.prev(i,kn);this._setActiveCategory(n),!e&&!this._slimCollapsed&&ce.getInstance(i).show()}_setActiveCategory(t){this.navigation.forEach(e=>{m.find(Cs,e).forEach(n=>{const[o]=m.prev(n,kn);o!==t?o.removeAttribute("data-te-sidenav-state-active"):o.setAttribute("data-te-sidenav-state-active","")})})}_setActiveElements(t){this.navigation.forEach(e=>{m.find(kn,e).filter(n=>m.next(n,Cs).length===0).forEach(n=>{this._isActive(n,t)&&n!==this._activeNode&&this._setActive(n,t)})}),t&&this._updateFocus(this.isVisible)}_setColor(){const t=["primary","secondary","success","info","warning","danger","light","dark"],{sidenavColor:e}=this.options,i=t.includes(e)?e:"primary";t.forEach(n=>{this._element.classList.remove(`sidenav-${n}`)}),g.addClass(this._element,`sidenav-${i}`)}_setContentOffsets(t,e,i){this._content.forEach((n,o)=>{const r=this._getOffsetValue(t,{index:o,property:"padding",offsets:e}),a=this._getOffsetValue(t,{index:o,property:"margin",offsets:e}),l={};if(i||(l.transition=`all ${this.transitionDuration} linear`),l[e.padding.property]=`${r}px`,l[e.margin.property]=`${a}px`,g.style(n,l),!!t){if(i){g.style(n,{transition:this._initialContentStyle[o].transition});return}_.on(n,"transitionend",()=>{g.style(n,{transition:this._initialContentStyle[o].transition})})}})}_setMode(t){this.options.sidenavMode!==t&&(this._options.sidenavMode=t,this._update(this.isVisible))}_setSlim(t){const e=t?["collapse","collapsed"]:["expand","expanded"];this._triggerEvents(...e),t&&this._collapseItems(),this._slimCollapsed=t,this._toggleSlimDisplay(t),g.style(this._element,{width:`${this.width}px`}),this._updateOffsets(this.isVisible)}_setTabindex(t){this.links.forEach(e=>{e.tabIndex=t?0:-1})}_emitEvents(t){const e=t?["show","shown"]:["hide","hidden"];this._triggerEvents(...e)}_rotateArrow(t,e){const[i]=m.children(t,`[${pO}]`);i&&(e?g.removeClass(i,"rotate-180"):g.addClass(i,"rotate-180"))}_toggleCategory(t,e){t.preventDefault(),e.toggle(),this._slimCollapsed&&this.options.sidenavExpandable&&(this._tempSlim=!0,this._setSlim(!1))}_toggleSlimDisplay(t){const e=m.find(_O,this._element),i=m.find(gO,this._element),n=()=>{e.forEach(o=>{g.style(o,{display:this._slimCollapsed?"unset":"none"})}),i.forEach(o=>{g.style(o,{display:this._slimCollapsed?"none":"unset"})})};t?setTimeout(()=>n(),this.options.sidenavTransitionDuration):n()}async _triggerEvents(t,e){_.trigger(this._element,`${t}.te.sidenav`),e&&await setTimeout(()=>{_.trigger(this._element,`${e}.te.sidenav`)},this.options.sidenavTransitionDuration+5)}_isiPhone(){return/iPhone|iPod/i.test(navigator.userAgent)}_update(t){t&&this._isiPhone()&&g.addClass(this._element,"ps--scrolling-y"),this.toggler&&this._updateTogglerAria(t),this._updateDisplay(t),this.options.sidenavBackdrop&&this._updateBackdrop(t),this._updateOffsets(t),t&&this.options.sidenavCloseOnEsc&&this.options.sidenavMode!=="side"&&_.on(window,"keydown",this.escHandler),this.options.sidenavFocusTrap&&this._updateFocus(t)}_updateDisplay(t){const e=t?0:this.translation;g.style(this._element,{transform:`translateX(${e}%)`})}_updateFocus(t){if(this._setTabindex(t),this.options.sidenavMode==="over"&&this.options.sidenavFocusTrap){if(t){this._focusTrap.trap();return}this._focusTrap.disable()}this._focusTrap.disable()}_updateOffsets(t,e=!1){const[i,n]=this.options.sidenavRight?["right","left"]:["left","right"],o={property:this._getProperty("padding",i),value:this.options.sidenavMode==="over"?0:this.width},r={property:this._getProperty("margin",n),value:this.options.sidenavMode==="push"?-1*this.width:0};_.trigger(this._element,"update.te.sidenav",{margin:r,padding:o}),this._content&&(this._content.className="",this._setContentOffsets(t,{padding:o,margin:r},e))}_updateTogglerAria(t){this.toggler.setAttribute("aria-expanded",t)}static toggleSidenav(){return function(t){const e=m.closest(t.target,_c),i=g.getDataAttributes(e).target;m.find(i).forEach(n=>{(Ii.getInstance(n)||new Ii(n)).toggle()})}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Vr);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Ii(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Vr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}ff({Animate:Gs,Alert:Ws,Button:ao,ChipsInput:gp,Chip:ki,Dropdown:Ft,Carousel:he,Collapse:ce,Offcanvas:ts,Modal:Ys,Popover:Eo,ScrollSpy:xo,Select:on,Tab:wo,Toast:Xs,Tooltip:is,Ripple:Ye,Datepicker:xl,Timepicker:Ll,Sidenav:Ii,Stepper:Wu,Input:Z,PerfectScrollbar:ms,Rating:Bp,Chart:yp,Datatable:pr,Popconfirm:_r,SmoothScroll:xr,Lightbox:ys,Validation:Tr,Touch:Er,LazyLoad:yn,Datetimepicker:Dr,Clipboard:Ar,InfiniteScroll:kr,LoadingManagement:Or,Autocomplete:Pr,Sticky:Lr,MultiRangeSlider:Hr});/*!
+ * Chart.js v3.9.1
+ * https://www.chartjs.org
+ * (c) 2022 Chart.js Contributors
+ * Released under the MIT License
+ */function Oe(){}const EO=function(){let s=0;return function(){return s++}}();function H(s){return s===null||typeof s>"u"}function Q(s){if(Array.isArray&&Array.isArray(s))return!0;const t=Object.prototype.toString.call(s);return t.slice(0,7)==="[object"&&t.slice(-6)==="Array]"}function V(s){return s!==null&&Object.prototype.toString.call(s)==="[object Object]"}const rt=s=>(typeof s=="number"||s instanceof Number)&&isFinite(+s);function zt(s,t){return rt(s)?s:t}function B(s,t){return typeof s>"u"?t:s}const xO=(s,t)=>typeof s=="string"&&s.endsWith("%")?parseFloat(s)/100:s/t,gf=(s,t)=>typeof s=="string"&&s.endsWith("%")?parseFloat(s)/100*t:+s;function G(s,t,e){if(s&&typeof s.call=="function")return s.apply(e,t)}function U(s,t,e,i){let n,o,r;if(Q(s))if(o=s.length,i)for(n=o-1;n>=0;n--)t.call(e,s[n],n);else for(n=0;n<o;n++)t.call(e,s[n],n);else if(V(s))for(r=Object.keys(s),o=r.length,n=0;n<o;n++)t.call(e,s[r[n]],r[n])}function Fr(s,t){let e,i,n,o;if(!s||!t||s.length!==t.length)return!1;for(e=0,i=s.length;e<i;++e)if(n=s[e],o=t[e],n.datasetIndex!==o.datasetIndex||n.index!==o.index)return!1;return!0}function Wr(s){if(Q(s))return s.map(Wr);if(V(s)){const t=Object.create(null),e=Object.keys(s),i=e.length;let n=0;for(;n<i;++n)t[e[n]]=Wr(s[e[n]]);return t}return s}function mf(s){return["__proto__","prototype","constructor"].indexOf(s)===-1}function CO(s,t,e,i){if(!mf(s))return;const n=t[s],o=e[s];V(n)&&V(o)?Te(n,o,i):t[s]=Wr(o)}function Te(s,t,e){const i=Q(t)?t:[t],n=i.length;if(!V(s))return s;e=e||{};const o=e.merger||CO;for(let r=0;r<n;++r){if(t=i[r],!V(t))continue;const a=Object.keys(t);for(let l=0,c=a.length;l<c;++l)o(a[l],s,t,e)}return s}function Sn(s,t){return Te(s,t,{merger:AO})}function AO(s,t,e){if(!mf(s))return;const i=t[s],n=e[s];V(i)&&V(n)?Sn(i,n):Object.prototype.hasOwnProperty.call(t,s)||(t[s]=Wr(n))}const bf={"":s=>s,x:s=>s.x,y:s=>s.y};function ti(s,t){return(bf[t]||(bf[t]=wO(t)))(s)}function wO(s){const t=kO(s);return e=>{for(const i of t){if(i==="")break;e=e&&e[i]}return e}}function kO(s){const t=s.split("."),e=[];let i="";for(const n of t)i+=n,i.endsWith("\\")?i=i.slice(0,-1)+".":(e.push(i),i="");return e}function gc(s){return s.charAt(0).toUpperCase()+s.slice(1)}const jt=s=>typeof s<"u",ei=s=>typeof s=="function",vf=(s,t)=>{if(s.size!==t.size)return!1;for(const e of s)if(!t.has(e))return!1;return!0};function SO(s){return s.type==="mouseup"||s.type==="click"||s.type==="contextmenu"}const it=Math.PI,q=2*it,OO=q+it,zr=Number.POSITIVE_INFINITY,IO=it/180,nt=it/2,On=it/4,yf=it*2/3,Yt=Math.log10,Ee=Math.sign;function Tf(s){const t=Math.round(s);s=In(s,t,s/1e3)?t:s;const e=Math.pow(10,Math.floor(Yt(s))),i=s/e;return(i<=1?1:i<=2?2:i<=5?5:10)*e}function DO(s){const t=[],e=Math.sqrt(s);let i;for(i=1;i<e;i++)s%i===0&&(t.push(i),t.push(s/i));return e===(e|0)&&t.push(e),t.sort((n,o)=>n-o).pop(),t}function As(s){return!isNaN(parseFloat(s))&&isFinite(s)}function In(s,t,e){return Math.abs(s-t)<e}function MO(s,t){const e=Math.round(s);return e-t<=s&&e+t>=s}function Ef(s,t,e){let i,n,o;for(i=0,n=s.length;i<n;i++)o=s[i][e],isNaN(o)||(t.min=Math.min(t.min,o),t.max=Math.max(t.max,o))}function se(s){return s*(it/180)}function mc(s){return s*(180/it)}function xf(s){if(!rt(s))return;let t=1,e=0;for(;Math.round(s*t)/t!==s;)t*=10,e++;return e}function Cf(s,t){const e=t.x-s.x,i=t.y-s.y,n=Math.sqrt(e*e+i*i);let o=Math.atan2(i,e);return o<-.5*it&&(o+=q),{angle:o,distance:n}}function bc(s,t){return Math.sqrt(Math.pow(t.x-s.x,2)+Math.pow(t.y-s.y,2))}function LO(s,t){return(s-t+OO)%q-it}function Vt(s){return(s%q+q)%q}function Dn(s,t,e,i){const n=Vt(s),o=Vt(t),r=Vt(e),a=Vt(o-n),l=Vt(r-n),c=Vt(n-o),h=Vt(n-r);return n===o||n===r||i&&o===r||a>l&&c<h}function dt(s,t,e){return Math.max(t,Math.min(e,s))}function $O(s){return dt(s,-32768,32767)}function Ie(s,t,e,i=1e-6){return s>=Math.min(t,e)-i&&s<=Math.max(t,e)+i}function vc(s,t,e){e=e||(r=>s[r]<t);let i=s.length-1,n=0,o;for(;i-n>1;)o=n+i>>1,e(o)?n=o:i=o;return{lo:n,hi:i}}const De=(s,t,e,i)=>vc(s,e,i?n=>s[n][t]<=e:n=>s[n][t]<e),RO=(s,t,e)=>vc(s,e,i=>s[i][t]>=e);function PO(s,t,e){let i=0,n=s.length;for(;i<n&&s[i]<t;)i++;for(;n>i&&s[n-1]>e;)n--;return i>0||n<s.length?s.slice(i,n):s}const Af=["push","pop","shift","splice","unshift"];function NO(s,t){if(s._chartjs){s._chartjs.listeners.push(t);return}Object.defineProperty(s,"_chartjs",{configurable:!0,enumerable:!1,value:{listeners:[t]}}),Af.forEach(e=>{const i="_onData"+gc(e),n=s[e];Object.defineProperty(s,e,{configurable:!0,enumerable:!1,value(...o){const r=n.apply(this,o);return s._chartjs.listeners.forEach(a=>{typeof a[i]=="function"&&a[i](...o)}),r}})})}function wf(s,t){const e=s._chartjs;if(!e)return;const i=e.listeners,n=i.indexOf(t);n!==-1&&i.splice(n,1),!(i.length>0)&&(Af.forEach(o=>{delete s[o]}),delete s._chartjs)}function kf(s){const t=new Set;let e,i;for(e=0,i=s.length;e<i;++e)t.add(s[e]);return t.size===i?s:Array.from(t)}const Sf=function(){return typeof window>"u"?function(s){return s()}:window.requestAnimationFrame}();function Of(s,t,e){const i=e||(r=>Array.prototype.slice.call(r));let n=!1,o=[];return function(...r){o=i(r),n||(n=!0,Sf.call(window,()=>{n=!1,s.apply(t,o)}))}}function BO(s,t){let e;return function(...i){return t?(clearTimeout(e),e=setTimeout(s,t,i)):s.apply(this,i),t}}const yc=s=>s==="start"?"left":s==="end"?"right":"center",gt=(s,t,e)=>s==="start"?t:s==="end"?e:(t+e)/2,HO=(s,t,e,i)=>s===(i?"left":"right")?e:s==="center"?(t+e)/2:t;function If(s,t,e){const i=t.length;let n=0,o=i;if(s._sorted){const{iScale:r,_parsed:a}=s,l=r.axis,{min:c,max:h,minDefined:d,maxDefined:u}=r.getUserBounds();d&&(n=dt(Math.min(De(a,r.axis,c).lo,e?i:De(t,l,r.getPixelForValue(c)).lo),0,i-1)),u?o=dt(Math.max(De(a,r.axis,h,!0).hi+1,e?0:De(t,l,r.getPixelForValue(h),!0).hi+1),n,i)-n:o=i-n}return{start:n,count:o}}function Df(s){const{xScale:t,yScale:e,_scaleRanges:i}=s,n={xmin:t.min,xmax:t.max,ymin:e.min,ymax:e.max};if(!i)return s._scaleRanges=n,!0;const o=i.xmin!==t.min||i.xmax!==t.max||i.ymin!==e.min||i.ymax!==e.max;return Object.assign(i,n),o}const jr=s=>s===0||s===1,Mf=(s,t,e)=>-(Math.pow(2,10*(s-=1))*Math.sin((s-t)*q/e)),Lf=(s,t,e)=>Math.pow(2,-10*s)*Math.sin((s-t)*q/e)+1,Mn={linear:s=>s,easeInQuad:s=>s*s,easeOutQuad:s=>-s*(s-2),easeInOutQuad:s=>(s/=.5)<1?.5*s*s:-.5*(--s*(s-2)-1),easeInCubic:s=>s*s*s,easeOutCubic:s=>(s-=1)*s*s+1,easeInOutCubic:s=>(s/=.5)<1?.5*s*s*s:.5*((s-=2)*s*s+2),easeInQuart:s=>s*s*s*s,easeOutQuart:s=>-((s-=1)*s*s*s-1),easeInOutQuart:s=>(s/=.5)<1?.5*s*s*s*s:-.5*((s-=2)*s*s*s-2),easeInQuint:s=>s*s*s*s*s,easeOutQuint:s=>(s-=1)*s*s*s*s+1,easeInOutQuint:s=>(s/=.5)<1?.5*s*s*s*s*s:.5*((s-=2)*s*s*s*s+2),easeInSine:s=>-Math.cos(s*nt)+1,easeOutSine:s=>Math.sin(s*nt),easeInOutSine:s=>-.5*(Math.cos(it*s)-1),easeInExpo:s=>s===0?0:Math.pow(2,10*(s-1)),easeOutExpo:s=>s===1?1:-Math.pow(2,-10*s)+1,easeInOutExpo:s=>jr(s)?s:s<.5?.5*Math.pow(2,10*(s*2-1)):.5*(-Math.pow(2,-10*(s*2-1))+2),easeInCirc:s=>s>=1?s:-(Math.sqrt(1-s*s)-1),easeOutCirc:s=>Math.sqrt(1-(s-=1)*s),easeInOutCirc:s=>(s/=.5)<1?-.5*(Math.sqrt(1-s*s)-1):.5*(Math.sqrt(1-(s-=2)*s)+1),easeInElastic:s=>jr(s)?s:Mf(s,.075,.3),easeOutElastic:s=>jr(s)?s:Lf(s,.075,.3),easeInOutElastic(s){return jr(s)?s:s<.5?.5*Mf(s*2,.1125,.45):.5+.5*Lf(s*2-1,.1125,.45)},easeInBack(s){return s*s*((1.70158+1)*s-1.70158)},easeOutBack(s){return(s-=1)*s*((1.70158+1)*s+1.70158)+1},easeInOutBack(s){let t=1.70158;return(s/=.5)<1?.5*(s*s*(((t*=1.525)+1)*s-t)):.5*((s-=2)*s*(((t*=1.525)+1)*s+t)+2)},easeInBounce:s=>1-Mn.easeOutBounce(1-s),easeOutBounce(s){return s<1/2.75?7.5625*s*s:s<2/2.75?7.5625*(s-=1.5/2.75)*s+.75:s<2.5/2.75?7.5625*(s-=2.25/2.75)*s+.9375:7.5625*(s-=2.625/2.75)*s+.984375},easeInOutBounce:s=>s<.5?Mn.easeInBounce(s*2)*.5:Mn.easeOutBounce(s*2-1)*.5+.5};/*!
+ * @kurkle/color v0.2.1
+ * https://github.com/kurkle/color#readme
+ * (c) 2022 Jukka Kurkela
+ * Released under the MIT License
+ */function Ln(s){return s+.5|0}const ii=(s,t,e)=>Math.max(Math.min(s,e),t);function $n(s){return ii(Ln(s*2.55),0,255)}function si(s){return ii(Ln(s*255),0,255)}function Me(s){return ii(Ln(s/2.55)/100,0,1)}function $f(s){return ii(Ln(s*100),0,100)}const Kt={0:0,1:1,2:2,3:3,4:4,5:5,6:6,7:7,8:8,9:9,A:10,B:11,C:12,D:13,E:14,F:15,a:10,b:11,c:12,d:13,e:14,f:15},Tc=[..."0123456789ABCDEF"],VO=s=>Tc[s&15],FO=s=>Tc[(s&240)>>4]+Tc[s&15],Yr=s=>(s&240)>>4===(s&15),WO=s=>Yr(s.r)&&Yr(s.g)&&Yr(s.b)&&Yr(s.a);function zO(s){var t=s.length,e;return s[0]==="#"&&(t===4||t===5?e={r:255&Kt[s[1]]*17,g:255&Kt[s[2]]*17,b:255&Kt[s[3]]*17,a:t===5?Kt[s[4]]*17:255}:(t===7||t===9)&&(e={r:Kt[s[1]]<<4|Kt[s[2]],g:Kt[s[3]]<<4|Kt[s[4]],b:Kt[s[5]]<<4|Kt[s[6]],a:t===9?Kt[s[7]]<<4|Kt[s[8]]:255})),e}const jO=(s,t)=>s<255?t(s):"";function YO(s){var t=WO(s)?VO:FO;return s?"#"+t(s.r)+t(s.g)+t(s.b)+jO(s.a,t):void 0}const KO=/^(hsla?|hwb|hsv)\(\s*([-+.e\d]+)(?:deg)?[\s,]+([-+.e\d]+)%[\s,]+([-+.e\d]+)%(?:[\s,]+([-+.e\d]+)(%)?)?\s*\)$/;function Rf(s,t,e){const i=t*Math.min(e,1-e),n=(o,r=(o+s/30)%12)=>e-i*Math.max(Math.min(r-3,9-r,1),-1);return[n(0),n(8),n(4)]}function UO(s,t,e){const i=(n,o=(n+s/60)%6)=>e-e*t*Math.max(Math.min(o,4-o,1),0);return[i(5),i(3),i(1)]}function XO(s,t,e){const i=Rf(s,1,.5);let n;for(t+e>1&&(n=1/(t+e),t*=n,e*=n),n=0;n<3;n++)i[n]*=1-t-e,i[n]+=t;return i}function GO(s,t,e,i,n){return s===n?(t-e)/i+(t<e?6:0):t===n?(e-s)/i+2:(s-t)/i+4}function Ec(s){const e=s.r/255,i=s.g/255,n=s.b/255,o=Math.max(e,i,n),r=Math.min(e,i,n),a=(o+r)/2;let l,c,h;return o!==r&&(h=o-r,c=a>.5?h/(2-o-r):h/(o+r),l=GO(e,i,n,h,o),l=l*60+.5),[l|0,c||0,a]}function xc(s,t,e,i){return(Array.isArray(t)?s(t[0],t[1],t[2]):s(t,e,i)).map(si)}function Cc(s,t,e){return xc(Rf,s,t,e)}function qO(s,t,e){return xc(XO,s,t,e)}function ZO(s,t,e){return xc(UO,s,t,e)}function Pf(s){return(s%360+360)%360}function QO(s){const t=KO.exec(s);let e=255,i;if(!t)return;t[5]!==i&&(e=t[6]?$n(+t[5]):si(+t[5]));const n=Pf(+t[2]),o=+t[3]/100,r=+t[4]/100;return t[1]==="hwb"?i=qO(n,o,r):t[1]==="hsv"?i=ZO(n,o,r):i=Cc(n,o,r),{r:i[0],g:i[1],b:i[2],a:e}}function JO(s,t){var e=Ec(s);e[0]=Pf(e[0]+t),e=Cc(e),s.r=e[0],s.g=e[1],s.b=e[2]}function tI(s){if(!s)return;const t=Ec(s),e=t[0],i=$f(t[1]),n=$f(t[2]);return s.a<255?`hsla(${e}, ${i}%, ${n}%, ${Me(s.a)})`:`hsl(${e}, ${i}%, ${n}%)`}const Nf={x:"dark",Z:"light",Y:"re",X:"blu",W:"gr",V:"medium",U:"slate",A:"ee",T:"ol",S:"or",B:"ra",C:"lateg",D:"ights",R:"in",Q:"turquois",E:"hi",P:"ro",O:"al",N:"le",M:"de",L:"yello",F:"en",K:"ch",G:"arks",H:"ea",I:"ightg",J:"wh"},Bf={OiceXe:"f0f8ff",antiquewEte:"faebd7",aqua:"ffff",aquamarRe:"7fffd4",azuY:"f0ffff",beige:"f5f5dc",bisque:"ffe4c4",black:"0",blanKedOmond:"ffebcd",Xe:"ff",XeviTet:"8a2be2",bPwn:"a52a2a",burlywood:"deb887",caMtXe:"5f9ea0",KartYuse:"7fff00",KocTate:"d2691e",cSO:"ff7f50",cSnflowerXe:"6495ed",cSnsilk:"fff8dc",crimson:"dc143c",cyan:"ffff",xXe:"8b",xcyan:"8b8b",xgTMnPd:"b8860b",xWay:"a9a9a9",xgYF:"6400",xgYy:"a9a9a9",xkhaki:"bdb76b",xmagFta:"8b008b",xTivegYF:"556b2f",xSange:"ff8c00",xScEd:"9932cc",xYd:"8b0000",xsOmon:"e9967a",xsHgYF:"8fbc8f",xUXe:"483d8b",xUWay:"2f4f4f",xUgYy:"2f4f4f",xQe:"ced1",xviTet:"9400d3",dAppRk:"ff1493",dApskyXe:"bfff",dimWay:"696969",dimgYy:"696969",dodgerXe:"1e90ff",fiYbrick:"b22222",flSOwEte:"fffaf0",foYstWAn:"228b22",fuKsia:"ff00ff",gaRsbSo:"dcdcdc",ghostwEte:"f8f8ff",gTd:"ffd700",gTMnPd:"daa520",Way:"808080",gYF:"8000",gYFLw:"adff2f",gYy:"808080",honeyMw:"f0fff0",hotpRk:"ff69b4",RdianYd:"cd5c5c",Rdigo:"4b0082",ivSy:"fffff0",khaki:"f0e68c",lavFMr:"e6e6fa",lavFMrXsh:"fff0f5",lawngYF:"7cfc00",NmoncEffon:"fffacd",ZXe:"add8e6",ZcSO:"f08080",Zcyan:"e0ffff",ZgTMnPdLw:"fafad2",ZWay:"d3d3d3",ZgYF:"90ee90",ZgYy:"d3d3d3",ZpRk:"ffb6c1",ZsOmon:"ffa07a",ZsHgYF:"20b2aa",ZskyXe:"87cefa",ZUWay:"778899",ZUgYy:"778899",ZstAlXe:"b0c4de",ZLw:"ffffe0",lime:"ff00",limegYF:"32cd32",lRF:"faf0e6",magFta:"ff00ff",maPon:"800000",VaquamarRe:"66cdaa",VXe:"cd",VScEd:"ba55d3",VpurpN:"9370db",VsHgYF:"3cb371",VUXe:"7b68ee",VsprRggYF:"fa9a",VQe:"48d1cc",VviTetYd:"c71585",midnightXe:"191970",mRtcYam:"f5fffa",mistyPse:"ffe4e1",moccasR:"ffe4b5",navajowEte:"ffdead",navy:"80",Tdlace:"fdf5e6",Tive:"808000",TivedBb:"6b8e23",Sange:"ffa500",SangeYd:"ff4500",ScEd:"da70d6",pOegTMnPd:"eee8aa",pOegYF:"98fb98",pOeQe:"afeeee",pOeviTetYd:"db7093",papayawEp:"ffefd5",pHKpuff:"ffdab9",peru:"cd853f",pRk:"ffc0cb",plum:"dda0dd",powMrXe:"b0e0e6",purpN:"800080",YbeccapurpN:"663399",Yd:"ff0000",Psybrown:"bc8f8f",PyOXe:"4169e1",saddNbPwn:"8b4513",sOmon:"fa8072",sandybPwn:"f4a460",sHgYF:"2e8b57",sHshell:"fff5ee",siFna:"a0522d",silver:"c0c0c0",skyXe:"87ceeb",UXe:"6a5acd",UWay:"708090",UgYy:"708090",snow:"fffafa",sprRggYF:"ff7f",stAlXe:"4682b4",tan:"d2b48c",teO:"8080",tEstN:"d8bfd8",tomato:"ff6347",Qe:"40e0d0",viTet:"ee82ee",JHt:"f5deb3",wEte:"ffffff",wEtesmoke:"f5f5f5",Lw:"ffff00",LwgYF:"9acd32"};function eI(){const s={},t=Object.keys(Bf),e=Object.keys(Nf);let i,n,o,r,a;for(i=0;i<t.length;i++){for(r=a=t[i],n=0;n<e.length;n++)o=e[n],a=a.replace(o,Nf[o]);o=parseInt(Bf[r],16),s[a]=[o>>16&255,o>>8&255,o&255]}return s}let Kr;function iI(s){Kr||(Kr=eI(),Kr.transparent=[0,0,0,0]);const t=Kr[s.toLowerCase()];return t&&{r:t[0],g:t[1],b:t[2],a:t.length===4?t[3]:255}}const sI=/^rgba?\(\s*([-+.\d]+)(%)?[\s,]+([-+.e\d]+)(%)?[\s,]+([-+.e\d]+)(%)?(?:[\s,/]+([-+.e\d]+)(%)?)?\s*\)$/;function nI(s){const t=sI.exec(s);let e=255,i,n,o;if(t){if(t[7]!==i){const r=+t[7];e=t[8]?$n(r):ii(r*255,0,255)}return i=+t[1],n=+t[3],o=+t[5],i=255&(t[2]?$n(i):ii(i,0,255)),n=255&(t[4]?$n(n):ii(n,0,255)),o=255&(t[6]?$n(o):ii(o,0,255)),{r:i,g:n,b:o,a:e}}}function oI(s){return s&&(s.a<255?`rgba(${s.r}, ${s.g}, ${s.b}, ${Me(s.a)})`:`rgb(${s.r}, ${s.g}, ${s.b})`)}const Ac=s=>s<=.0031308?s*12.92:Math.pow(s,1/2.4)*1.055-.055,ws=s=>s<=.04045?s/12.92:Math.pow((s+.055)/1.055,2.4);function rI(s,t,e){const i=ws(Me(s.r)),n=ws(Me(s.g)),o=ws(Me(s.b));return{r:si(Ac(i+e*(ws(Me(t.r))-i))),g:si(Ac(n+e*(ws(Me(t.g))-n))),b:si(Ac(o+e*(ws(Me(t.b))-o))),a:s.a+e*(t.a-s.a)}}function Ur(s,t,e){if(s){let i=Ec(s);i[t]=Math.max(0,Math.min(i[t]+i[t]*e,t===0?360:1)),i=Cc(i),s.r=i[0],s.g=i[1],s.b=i[2]}}function Hf(s,t){return s&&Object.assign(t||{},s)}function Vf(s){var t={r:0,g:0,b:0,a:255};return Array.isArray(s)?s.length>=3&&(t={r:s[0],g:s[1],b:s[2],a:255},s.length>3&&(t.a=si(s[3]))):(t=Hf(s,{r:0,g:0,b:0,a:1}),t.a=si(t.a)),t}function aI(s){return s.charAt(0)==="r"?nI(s):QO(s)}class Xr{constructor(t){if(t instanceof Xr)return t;const e=typeof t;let i;e==="object"?i=Vf(t):e==="string"&&(i=zO(t)||iI(t)||aI(t)),this._rgb=i,this._valid=!!i}get valid(){return this._valid}get rgb(){var t=Hf(this._rgb);return t&&(t.a=Me(t.a)),t}set rgb(t){this._rgb=Vf(t)}rgbString(){return this._valid?oI(this._rgb):void 0}hexString(){return this._valid?YO(this._rgb):void 0}hslString(){return this._valid?tI(this._rgb):void 0}mix(t,e){if(t){const i=this.rgb,n=t.rgb;let o;const r=e===o?.5:e,a=2*r-1,l=i.a-n.a,c=((a*l===-1?a:(a+l)/(1+a*l))+1)/2;o=1-c,i.r=255&c*i.r+o*n.r+.5,i.g=255&c*i.g+o*n.g+.5,i.b=255&c*i.b+o*n.b+.5,i.a=r*i.a+(1-r)*n.a,this.rgb=i}return this}interpolate(t,e){return t&&(this._rgb=rI(this._rgb,t._rgb,e)),this}clone(){return new Xr(this.rgb)}alpha(t){return this._rgb.a=si(t),this}clearer(t){const e=this._rgb;return e.a*=1-t,this}greyscale(){const t=this._rgb,e=Ln(t.r*.3+t.g*.59+t.b*.11);return t.r=t.g=t.b=e,this}opaquer(t){const e=this._rgb;return e.a*=1+t,this}negate(){const t=this._rgb;return t.r=255-t.r,t.g=255-t.g,t.b=255-t.b,this}lighten(t){return Ur(this._rgb,2,t),this}darken(t){return Ur(this._rgb,2,-t),this}saturate(t){return Ur(this._rgb,1,t),this}desaturate(t){return Ur(this._rgb,1,-t),this}rotate(t){return JO(this._rgb,t),this}}function Ff(s){return new Xr(s)}function Wf(s){if(s&&typeof s=="object"){const t=s.toString();return t==="[object CanvasPattern]"||t==="[object CanvasGradient]"}return!1}function zf(s){return Wf(s)?s:Ff(s)}function wc(s){return Wf(s)?s:Ff(s).saturate(.5).darken(.1).hexString()}const Di=Object.create(null),kc=Object.create(null);function Rn(s,t){if(!t)return s;const e=t.split(".");for(let i=0,n=e.length;i<n;++i){const o=e[i];s=s[o]||(s[o]=Object.create(null))}return s}function Sc(s,t,e){return typeof t=="string"?Te(Rn(s,t),e):Te(Rn(s,""),t)}class lI{constructor(t){this.animation=void 0,this.backgroundColor="rgba(0,0,0,0.1)",this.borderColor="rgba(0,0,0,0.1)",this.color="#666",this.datasets={},this.devicePixelRatio=e=>e.chart.platform.getDevicePixelRatio(),this.elements={},this.events=["mousemove","mouseout","click","touchstart","touchmove"],this.font={family:"'Helvetica Neue', 'Helvetica', 'Arial', sans-serif",size:12,style:"normal",lineHeight:1.2,weight:null},this.hover={},this.hoverBackgroundColor=(e,i)=>wc(i.backgroundColor),this.hoverBorderColor=(e,i)=>wc(i.borderColor),this.hoverColor=(e,i)=>wc(i.color),this.indexAxis="x",this.interaction={mode:"nearest",intersect:!0,includeInvisible:!1},this.maintainAspectRatio=!0,this.onHover=null,this.onClick=null,this.parsing=!0,this.plugins={},this.responsive=!0,this.scale=void 0,this.scales={},this.showLine=!0,this.drawActiveElementsOnTop=!0,this.describe(t)}set(t,e){return Sc(this,t,e)}get(t){return Rn(this,t)}describe(t,e){return Sc(kc,t,e)}override(t,e){return Sc(Di,t,e)}route(t,e,i,n){const o=Rn(this,t),r=Rn(this,i),a="_"+e;Object.defineProperties(o,{[a]:{value:o[e],writable:!0},[e]:{enumerable:!0,get(){const l=this[a],c=r[n];return V(l)?Object.assign({},c,l):B(l,c)},set(l){this[a]=l}}})}}var F=new lI({_scriptable:s=>!s.startsWith("on"),_indexable:s=>s!=="events",hover:{_fallback:"interaction"},interaction:{_scriptable:!1,_indexable:!1}});function cI(s){return!s||H(s.size)||H(s.family)?null:(s.style?s.style+" ":"")+(s.weight?s.weight+" ":"")+s.size+"px "+s.family}function Gr(s,t,e,i,n){let o=t[n];return o||(o=t[n]=s.measureText(n).width,e.push(n)),o>i&&(i=o),i}function hI(s,t,e,i){i=i||{};let n=i.data=i.data||{},o=i.garbageCollect=i.garbageCollect||[];i.font!==t&&(n=i.data={},o=i.garbageCollect=[],i.font=t),s.save(),s.font=t;let r=0;const a=e.length;let l,c,h,d,u;for(l=0;l<a;l++)if(d=e[l],d!=null&&Q(d)!==!0)r=Gr(s,n,o,r,d);else if(Q(d))for(c=0,h=d.length;c<h;c++)u=d[c],u!=null&&!Q(u)&&(r=Gr(s,n,o,r,u));s.restore();const p=o.length/2;if(p>e.length){for(l=0;l<p;l++)delete n[o[l]];o.splice(0,p)}return r}function Mi(s,t,e){const i=s.currentDevicePixelRatio,n=e!==0?Math.max(e/2,.5):0;return Math.round((t-n)*i)/i+n}function jf(s,t){t=t||s.getContext("2d"),t.save(),t.resetTransform(),t.clearRect(0,0,s.width,s.height),t.restore()}function Oc(s,t,e,i){Yf(s,t,e,i,null)}function Yf(s,t,e,i,n){let o,r,a,l,c,h;const d=t.pointStyle,u=t.rotation,p=t.radius;let f=(u||0)*IO;if(d&&typeof d=="object"&&(o=d.toString(),o==="[object HTMLImageElement]"||o==="[object HTMLCanvasElement]")){s.save(),s.translate(e,i),s.rotate(f),s.drawImage(d,-d.width/2,-d.height/2,d.width,d.height),s.restore();return}if(!(isNaN(p)||p<=0)){switch(s.beginPath(),d){default:n?s.ellipse(e,i,n/2,p,0,0,q):s.arc(e,i,p,0,q),s.closePath();break;case"triangle":s.moveTo(e+Math.sin(f)*p,i-Math.cos(f)*p),f+=yf,s.lineTo(e+Math.sin(f)*p,i-Math.cos(f)*p),f+=yf,s.lineTo(e+Math.sin(f)*p,i-Math.cos(f)*p),s.closePath();break;case"rectRounded":c=p*.516,l=p-c,r=Math.cos(f+On)*l,a=Math.sin(f+On)*l,s.arc(e-r,i-a,c,f-it,f-nt),s.arc(e+a,i-r,c,f-nt,f),s.arc(e+r,i+a,c,f,f+nt),s.arc(e-a,i+r,c,f+nt,f+it),s.closePath();break;case"rect":if(!u){l=Math.SQRT1_2*p,h=n?n/2:l,s.rect(e-h,i-l,2*h,2*l);break}f+=On;case"rectRot":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+a,i-r),s.lineTo(e+r,i+a),s.lineTo(e-a,i+r),s.closePath();break;case"crossRot":f+=On;case"cross":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r);break;case"star":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r),f+=On,r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r);break;case"line":r=n?n/2:Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a);break;case"dash":s.moveTo(e,i),s.lineTo(e+Math.cos(f)*p,i+Math.sin(f)*p);break}s.fill(),t.borderWidth>0&&s.stroke()}}function Pn(s,t,e){return e=e||.5,!t||s&&s.x>t.left-e&&s.x<t.right+e&&s.y>t.top-e&&s.y<t.bottom+e}function qr(s,t){s.save(),s.beginPath(),s.rect(t.left,t.top,t.right-t.left,t.bottom-t.top),s.clip()}function Zr(s){s.restore()}function dI(s,t,e,i,n){if(!t)return s.lineTo(e.x,e.y);if(n==="middle"){const o=(t.x+e.x)/2;s.lineTo(o,t.y),s.lineTo(o,e.y)}else n==="after"!=!!i?s.lineTo(t.x,e.y):s.lineTo(e.x,t.y);s.lineTo(e.x,e.y)}function uI(s,t,e,i){if(!t)return s.lineTo(e.x,e.y);s.bezierCurveTo(i?t.cp1x:t.cp2x,i?t.cp1y:t.cp2y,i?e.cp2x:e.cp1x,i?e.cp2y:e.cp1y,e.x,e.y)}function Li(s,t,e,i,n,o={}){const r=Q(t)?t:[t],a=o.strokeWidth>0&&o.strokeColor!=="";let l,c;for(s.save(),s.font=n.string,pI(s,o),l=0;l<r.length;++l)c=r[l],a&&(o.strokeColor&&(s.strokeStyle=o.strokeColor),H(o.strokeWidth)||(s.lineWidth=o.strokeWidth),s.strokeText(c,e,i,o.maxWidth)),s.fillText(c,e,i,o.maxWidth),fI(s,e,i,c,o),i+=n.lineHeight;s.restore()}function pI(s,t){t.translation&&s.translate(t.translation[0],t.translation[1]),H(t.rotation)||s.rotate(t.rotation),t.color&&(s.fillStyle=t.color),t.textAlign&&(s.textAlign=t.textAlign),t.textBaseline&&(s.textBaseline=t.textBaseline)}function fI(s,t,e,i,n){if(n.strikethrough||n.underline){const o=s.measureText(i),r=t-o.actualBoundingBoxLeft,a=t+o.actualBoundingBoxRight,l=e-o.actualBoundingBoxAscent,c=e+o.actualBoundingBoxDescent,h=n.strikethrough?(l+c)/2:c;s.strokeStyle=s.fillStyle,s.beginPath(),s.lineWidth=n.decorationWidth||2,s.moveTo(r,h),s.lineTo(a,h),s.stroke()}}function Nn(s,t){const{x:e,y:i,w:n,h:o,radius:r}=t;s.arc(e+r.topLeft,i+r.topLeft,r.topLeft,-nt,it,!0),s.lineTo(e,i+o-r.bottomLeft),s.arc(e+r.bottomLeft,i+o-r.bottomLeft,r.bottomLeft,it,nt,!0),s.lineTo(e+n-r.bottomRight,i+o),s.arc(e+n-r.bottomRight,i+o-r.bottomRight,r.bottomRight,nt,0,!0),s.lineTo(e+n,i+r.topRight),s.arc(e+n-r.topRight,i+r.topRight,r.topRight,0,-nt,!0),s.lineTo(e+r.topLeft,i)}const _I=new RegExp(/^(normal|(\d+(?:\.\d+)?)(px|em|%)?)$/),gI=new RegExp(/^(normal|italic|initial|inherit|unset|(oblique( -?[0-9]?[0-9]deg)?))$/);function mI(s,t){const e=(""+s).match(_I);if(!e||e[1]==="normal")return t*1.2;switch(s=+e[2],e[3]){case"px":return s;case"%":s/=100;break}return t*s}const bI=s=>+s||0;function Ic(s,t){const e={},i=V(t),n=i?Object.keys(t):t,o=V(s)?i?r=>B(s[r],s[t[r]]):r=>s[r]:()=>s;for(const r of n)e[r]=bI(o(r));return e}function Kf(s){return Ic(s,{top:"y",right:"x",bottom:"y",left:"x"})}function $i(s){return Ic(s,["topLeft","topRight","bottomLeft","bottomRight"])}function pt(s){const t=Kf(s);return t.width=t.left+t.right,t.height=t.top+t.bottom,t}function lt(s,t){s=s||{},t=t||F.font;let e=B(s.size,t.size);typeof e=="string"&&(e=parseInt(e,10));let i=B(s.style,t.style);i&&!(""+i).match(gI)&&(console.warn('Invalid font style specified: "'+i+'"'),i="");const n={family:B(s.family,t.family),lineHeight:mI(B(s.lineHeight,t.lineHeight),e),size:e,style:i,weight:B(s.weight,t.weight),string:""};return n.string=cI(n),n}function tt(s,t,e,i){let n=!0,o,r,a;for(o=0,r=s.length;o<r;++o)if(a=s[o],a!==void 0&&(t!==void 0&&typeof a=="function"&&(a=a(t),n=!1),e!==void 0&&Q(a)&&(a=a[e%a.length],n=!1),a!==void 0))return i&&!n&&(i.cacheable=!1),a}function vI(s,t,e){const{min:i,max:n}=s,o=gf(t,(n-i)/2),r=(a,l)=>e&&a===0?0:a+l;return{min:r(i,-Math.abs(o)),max:r(n,o)}}function ni(s,t){return Object.assign(Object.create(s),t)}function Dc(s,t=[""],e=s,i,n=()=>s[0]){jt(i)||(i=Zf("_fallback",s));const o={[Symbol.toStringTag]:"Object",_cacheable:!0,_scopes:s,_rootScopes:e,_fallback:i,_getTarget:n,override:r=>Dc([r,...s],t,e,i)};return new Proxy(o,{deleteProperty(r,a){return delete r[a],delete r._keys,delete s[0][a],!0},get(r,a){return Xf(r,a,()=>kI(a,t,s,r))},getOwnPropertyDescriptor(r,a){return Reflect.getOwnPropertyDescriptor(r._scopes[0],a)},getPrototypeOf(){return Reflect.getPrototypeOf(s[0])},has(r,a){return Qf(r).includes(a)},ownKeys(r){return Qf(r)},set(r,a,l){const c=r._storage||(r._storage=n());return r[a]=c[a]=l,delete r._keys,!0}})}function ks(s,t,e,i){const n={_cacheable:!1,_proxy:s,_context:t,_subProxy:e,_stack:new Set,_descriptors:Uf(s,i),setContext:o=>ks(s,o,e,i),override:o=>ks(s.override(o),t,e,i)};return new Proxy(n,{deleteProperty(o,r){return delete o[r],delete s[r],!0},get(o,r,a){return Xf(o,r,()=>TI(o,r,a))},getOwnPropertyDescriptor(o,r){return o._descriptors.allKeys?Reflect.has(s,r)?{enumerable:!0,configurable:!0}:void 0:Reflect.getOwnPropertyDescriptor(s,r)},getPrototypeOf(){return Reflect.getPrototypeOf(s)},has(o,r){return Reflect.has(s,r)},ownKeys(){return Reflect.ownKeys(s)},set(o,r,a){return s[r]=a,delete o[r],!0}})}function Uf(s,t={scriptable:!0,indexable:!0}){const{_scriptable:e=t.scriptable,_indexable:i=t.indexable,_allKeys:n=t.allKeys}=s;return{allKeys:n,scriptable:e,indexable:i,isScriptable:ei(e)?e:()=>e,isIndexable:ei(i)?i:()=>i}}const yI=(s,t)=>s?s+gc(t):t,Mc=(s,t)=>V(t)&&s!=="adapters"&&(Object.getPrototypeOf(t)===null||t.constructor===Object);function Xf(s,t,e){if(Object.prototype.hasOwnProperty.call(s,t))return s[t];const i=e();return s[t]=i,i}function TI(s,t,e){const{_proxy:i,_context:n,_subProxy:o,_descriptors:r}=s;let a=i[t];return ei(a)&&r.isScriptable(t)&&(a=EI(t,a,s,e)),Q(a)&&a.length&&(a=xI(t,a,s,r.isIndexable)),Mc(t,a)&&(a=ks(a,n,o&&o[t],r)),a}function EI(s,t,e,i){const{_proxy:n,_context:o,_subProxy:r,_stack:a}=e;if(a.has(s))throw new Error("Recursion detected: "+Array.from(a).join("->")+"->"+s);return a.add(s),t=t(o,r||i),a.delete(s),Mc(s,t)&&(t=Lc(n._scopes,n,s,t)),t}function xI(s,t,e,i){const{_proxy:n,_context:o,_subProxy:r,_descriptors:a}=e;if(jt(o.index)&&i(s))t=t[o.index%t.length];else if(V(t[0])){const l=t,c=n._scopes.filter(h=>h!==l);t=[];for(const h of l){const d=Lc(c,n,s,h);t.push(ks(d,o,r&&r[s],a))}}return t}function Gf(s,t,e){return ei(s)?s(t,e):s}const CI=(s,t)=>s===!0?t:typeof s=="string"?ti(t,s):void 0;function AI(s,t,e,i,n){for(const o of t){const r=CI(e,o);if(r){s.add(r);const a=Gf(r._fallback,e,n);if(jt(a)&&a!==e&&a!==i)return a}else if(r===!1&&jt(i)&&e!==i)return null}return!1}function Lc(s,t,e,i){const n=t._rootScopes,o=Gf(t._fallback,e,i),r=[...s,...n],a=new Set;a.add(i);let l=qf(a,r,e,o||e,i);return l===null||jt(o)&&o!==e&&(l=qf(a,r,o,l,i),l===null)?!1:Dc(Array.from(a),[""],n,o,()=>wI(t,e,i))}function qf(s,t,e,i,n){for(;e;)e=AI(s,t,e,i,n);return e}function wI(s,t,e){const i=s._getTarget();t in i||(i[t]={});const n=i[t];return Q(n)&&V(e)?e:n}function kI(s,t,e,i){let n;for(const o of t)if(n=Zf(yI(o,s),e),jt(n))return Mc(s,n)?Lc(e,i,s,n):n}function Zf(s,t){for(const e of t){if(!e)continue;const i=e[s];if(jt(i))return i}}function Qf(s){let t=s._keys;return t||(t=s._keys=SI(s._scopes)),t}function SI(s){const t=new Set;for(const e of s)for(const i of Object.keys(e).filter(n=>!n.startsWith("_")))t.add(i);return Array.from(t)}function Jf(s,t,e,i){const{iScale:n}=s,{key:o="r"}=this._parsing,r=new Array(i);let a,l,c,h;for(a=0,l=i;a<l;++a)c=a+e,h=t[c],r[a]={r:n.parse(ti(h,o),c)};return r}const OI=Number.EPSILON||1e-14,Ss=(s,t)=>t<s.length&&!s[t].skip&&s[t],t_=s=>s==="x"?"y":"x";function II(s,t,e,i){const n=s.skip?t:s,o=t,r=e.skip?t:e,a=bc(o,n),l=bc(r,o);let c=a/(a+l),h=l/(a+l);c=isNaN(c)?0:c,h=isNaN(h)?0:h;const d=i*c,u=i*h;return{previous:{x:o.x-d*(r.x-n.x),y:o.y-d*(r.y-n.y)},next:{x:o.x+u*(r.x-n.x),y:o.y+u*(r.y-n.y)}}}function DI(s,t,e){const i=s.length;let n,o,r,a,l,c=Ss(s,0);for(let h=0;h<i-1;++h)if(l=c,c=Ss(s,h+1),!(!l||!c)){if(In(t[h],0,OI)){e[h]=e[h+1]=0;continue}n=e[h]/t[h],o=e[h+1]/t[h],a=Math.pow(n,2)+Math.pow(o,2),!(a<=9)&&(r=3/Math.sqrt(a),e[h]=n*r*t[h],e[h+1]=o*r*t[h])}}function MI(s,t,e="x"){const i=t_(e),n=s.length;let o,r,a,l=Ss(s,0);for(let c=0;c<n;++c){if(r=a,a=l,l=Ss(s,c+1),!a)continue;const h=a[e],d=a[i];r&&(o=(h-r[e])/3,a[`cp1${e}`]=h-o,a[`cp1${i}`]=d-o*t[c]),l&&(o=(l[e]-h)/3,a[`cp2${e}`]=h+o,a[`cp2${i}`]=d+o*t[c])}}function LI(s,t="x"){const e=t_(t),i=s.length,n=Array(i).fill(0),o=Array(i);let r,a,l,c=Ss(s,0);for(r=0;r<i;++r)if(a=l,l=c,c=Ss(s,r+1),!!l){if(c){const h=c[t]-l[t];n[r]=h!==0?(c[e]-l[e])/h:0}o[r]=a?c?Ee(n[r-1])!==Ee(n[r])?0:(n[r-1]+n[r])/2:n[r-1]:n[r]}DI(s,n,o),MI(s,o,t)}function Qr(s,t,e){return Math.max(Math.min(s,e),t)}function $I(s,t){let e,i,n,o,r,a=Pn(s[0],t);for(e=0,i=s.length;e<i;++e)r=o,o=a,a=e<i-1&&Pn(s[e+1],t),o&&(n=s[e],r&&(n.cp1x=Qr(n.cp1x,t.left,t.right),n.cp1y=Qr(n.cp1y,t.top,t.bottom)),a&&(n.cp2x=Qr(n.cp2x,t.left,t.right),n.cp2y=Qr(n.cp2y,t.top,t.bottom)))}function RI(s,t,e,i,n){let o,r,a,l;if(t.spanGaps&&(s=s.filter(c=>!c.skip)),t.cubicInterpolationMode==="monotone")LI(s,n);else{let c=i?s[s.length-1]:s[0];for(o=0,r=s.length;o<r;++o)a=s[o],l=II(c,a,s[Math.min(o+1,r-(i?0:1))%r],t.tension),a.cp1x=l.previous.x,a.cp1y=l.previous.y,a.cp2x=l.next.x,a.cp2y=l.next.y,c=a}t.capBezierPoints&&$I(s,e)}function e_(){return typeof window<"u"&&typeof document<"u"}function $c(s){let t=s.parentNode;return t&&t.toString()==="[object ShadowRoot]"&&(t=t.host),t}function Jr(s,t,e){let i;return typeof s=="string"?(i=parseInt(s,10),s.indexOf("%")!==-1&&(i=i/100*t.parentNode[e])):i=s,i}const ta=s=>window.getComputedStyle(s,null);function PI(s,t){return ta(s).getPropertyValue(t)}const NI=["top","right","bottom","left"];function Ri(s,t,e){const i={};e=e?"-"+e:"";for(let n=0;n<4;n++){const o=NI[n];i[o]=parseFloat(s[t+"-"+o+e])||0}return i.width=i.left+i.right,i.height=i.top+i.bottom,i}const BI=(s,t,e)=>(s>0||t>0)&&(!e||!e.shadowRoot);function HI(s,t){const e=s.touches,i=e&&e.length?e[0]:s,{offsetX:n,offsetY:o}=i;let r=!1,a,l;if(BI(n,o,s.target))a=n,l=o;else{const c=t.getBoundingClientRect();a=i.clientX-c.left,l=i.clientY-c.top,r=!0}return{x:a,y:l,box:r}}function Pi(s,t){if("native"in s)return s;const{canvas:e,currentDevicePixelRatio:i}=t,n=ta(e),o=n.boxSizing==="border-box",r=Ri(n,"padding"),a=Ri(n,"border","width"),{x:l,y:c,box:h}=HI(s,e),d=r.left+(h&&a.left),u=r.top+(h&&a.top);let{width:p,height:f}=t;return o&&(p-=r.width+a.width,f-=r.height+a.height),{x:Math.round((l-d)/p*e.width/i),y:Math.round((c-u)/f*e.height/i)}}function VI(s,t,e){let i,n;if(t===void 0||e===void 0){const o=$c(s);if(!o)t=s.clientWidth,e=s.clientHeight;else{const r=o.getBoundingClientRect(),a=ta(o),l=Ri(a,"border","width"),c=Ri(a,"padding");t=r.width-c.width-l.width,e=r.height-c.height-l.height,i=Jr(a.maxWidth,o,"clientWidth"),n=Jr(a.maxHeight,o,"clientHeight")}}return{width:t,height:e,maxWidth:i||zr,maxHeight:n||zr}}const Rc=s=>Math.round(s*10)/10;function FI(s,t,e,i){const n=ta(s),o=Ri(n,"margin"),r=Jr(n.maxWidth,s,"clientWidth")||zr,a=Jr(n.maxHeight,s,"clientHeight")||zr,l=VI(s,t,e);let{width:c,height:h}=l;if(n.boxSizing==="content-box"){const d=Ri(n,"border","width"),u=Ri(n,"padding");c-=u.width+d.width,h-=u.height+d.height}return c=Math.max(0,c-o.width),h=Math.max(0,i?Math.floor(c/i):h-o.height),c=Rc(Math.min(c,r,l.maxWidth)),h=Rc(Math.min(h,a,l.maxHeight)),c&&!h&&(h=Rc(c/2)),{width:c,height:h}}function i_(s,t,e){const i=t||1,n=Math.floor(s.height*i),o=Math.floor(s.width*i);s.height=n/i,s.width=o/i;const r=s.canvas;return r.style&&(e||!r.style.height&&!r.style.width)&&(r.style.height=`${s.height}px`,r.style.width=`${s.width}px`),s.currentDevicePixelRatio!==i||r.height!==n||r.width!==o?(s.currentDevicePixelRatio=i,r.height=n,r.width=o,s.ctx.setTransform(i,0,0,i,0,0),!0):!1}const WI=function(){let s=!1;try{const t={get passive(){return s=!0,!1}};window.addEventListener("test",null,t),window.removeEventListener("test",null,t)}catch{}return s}();function s_(s,t){const e=PI(s,t),i=e&&e.match(/^(\d+)(\.\d+)?px$/);return i?+i[1]:void 0}function Ni(s,t,e,i){return{x:s.x+e*(t.x-s.x),y:s.y+e*(t.y-s.y)}}function zI(s,t,e,i){return{x:s.x+e*(t.x-s.x),y:i==="middle"?e<.5?s.y:t.y:i==="after"?e<1?s.y:t.y:e>0?t.y:s.y}}function jI(s,t,e,i){const n={x:s.cp2x,y:s.cp2y},o={x:t.cp1x,y:t.cp1y},r=Ni(s,n,e),a=Ni(n,o,e),l=Ni(o,t,e),c=Ni(r,a,e),h=Ni(a,l,e);return Ni(c,h,e)}const n_=new Map;function YI(s,t){t=t||{};const e=s+JSON.stringify(t);let i=n_.get(e);return i||(i=new Intl.NumberFormat(s,t),n_.set(e,i)),i}function Bn(s,t,e){return YI(t,e).format(s)}const KI=function(s,t){return{x(e){return s+s+t-e},setWidth(e){t=e},textAlign(e){return e==="center"?e:e==="right"?"left":"right"},xPlus(e,i){return e-i},leftForLtr(e,i){return e-i}}},UI=function(){return{x(s){return s},setWidth(s){},textAlign(s){return s},xPlus(s,t){return s+t},leftForLtr(s,t){return s}}};function Os(s,t,e){return s?KI(t,e):UI()}function o_(s,t){let e,i;(t==="ltr"||t==="rtl")&&(e=s.canvas.style,i=[e.getPropertyValue("direction"),e.getPropertyPriority("direction")],e.setProperty("direction",t,"important"),s.prevTextDirection=i)}function r_(s,t){t!==void 0&&(delete s.prevTextDirection,s.canvas.style.setProperty("direction",t[0],t[1]))}function a_(s){return s==="angle"?{between:Dn,compare:LO,normalize:Vt}:{between:Ie,compare:(t,e)=>t-e,normalize:t=>t}}function l_({start:s,end:t,count:e,loop:i,style:n}){return{start:s%e,end:t%e,loop:i&&(t-s+1)%e===0,style:n}}function XI(s,t,e){const{property:i,start:n,end:o}=e,{between:r,normalize:a}=a_(i),l=t.length;let{start:c,end:h,loop:d}=s,u,p;if(d){for(c+=l,h+=l,u=0,p=l;u<p&&r(a(t[c%l][i]),n,o);++u)c--,h--;c%=l,h%=l}return h<c&&(h+=l),{start:c,end:h,loop:d,style:s.style}}function c_(s,t,e){if(!e)return[s];const{property:i,start:n,end:o}=e,r=t.length,{compare:a,between:l,normalize:c}=a_(i),{start:h,end:d,loop:u,style:p}=XI(s,t,e),f=[];let b=!1,v=null,y,T,x;const E=()=>l(n,x,y)&&a(n,x)!==0,C=()=>a(o,y)===0||l(o,x,y),A=()=>b||E(),w=()=>!b||C();for(let S=h,k=h;S<=d;++S)T=t[S%r],!T.skip&&(y=c(T[i]),y!==x&&(b=l(y,n,o),v===null&&A()&&(v=a(y,n)===0?S:k),v!==null&&w()&&(f.push(l_({start:v,end:S,loop:u,count:r,style:p})),v=null),k=S,x=y));return v!==null&&f.push(l_({start:v,end:d,loop:u,count:r,style:p})),f}function h_(s,t){const e=[],i=s.segments;for(let n=0;n<i.length;n++){const o=c_(i[n],s.points,t);o.length&&e.push(...o)}return e}function GI(s,t,e,i){let n=0,o=t-1;if(e&&!i)for(;n<t&&!s[n].skip;)n++;for(;n<t&&s[n].skip;)n++;for(n%=t,e&&(o+=n);o>n&&s[o%t].skip;)o--;return o%=t,{start:n,end:o}}function qI(s,t,e,i){const n=s.length,o=[];let r=t,a=s[t],l;for(l=t+1;l<=e;++l){const c=s[l%n];c.skip||c.stop?a.skip||(i=!1,o.push({start:t%n,end:(l-1)%n,loop:i}),t=r=c.stop?l:null):(r=l,a.skip&&(t=l)),a=c}return r!==null&&o.push({start:t%n,end:r%n,loop:i}),o}function ZI(s,t){const e=s.points,i=s.options.spanGaps,n=e.length;if(!n)return[];const o=!!s._loop,{start:r,end:a}=GI(e,n,o,i);if(i===!0)return d_(s,[{start:r,end:a,loop:o}],e,t);const l=a<r?a+n:a,c=!!s._fullLoop&&r===0&&a===n-1;return d_(s,qI(e,r,l,c),e,t)}function d_(s,t,e,i){return!i||!i.setContext||!e?t:QI(s,t,e,i)}function QI(s,t,e,i){const n=s._chart.getContext(),o=u_(s.options),{_datasetIndex:r,options:{spanGaps:a}}=s,l=e.length,c=[];let h=o,d=t[0].start,u=d;function p(f,b,v,y){const T=a?-1:1;if(f!==b){for(f+=l;e[f%l].skip;)f-=T;for(;e[b%l].skip;)b+=T;f%l!==b%l&&(c.push({start:f%l,end:b%l,loop:v,style:y}),h=y,d=b%l)}}for(const f of t){d=a?d:f.start;let b=e[d%l],v;for(u=d+1;u<=f.end;u++){const y=e[u%l];v=u_(i.setContext(ni(n,{type:"segment",p0:b,p1:y,p0DataIndex:(u-1)%l,p1DataIndex:u%l,datasetIndex:r}))),JI(v,h)&&p(d,u-1,f.loop,h),b=y,h=v}d<u-1&&p(d,u-1,f.loop,h)}return c}function u_(s){return{backgroundColor:s.backgroundColor,borderCapStyle:s.borderCapStyle,borderDash:s.borderDash,borderDashOffset:s.borderDashOffset,borderJoinStyle:s.borderJoinStyle,borderWidth:s.borderWidth,borderColor:s.borderColor}}function JI(s,t){return t&&JSON.stringify(s)!==JSON.stringify(t)}/*!
+ * Chart.js v3.9.1
+ * https://www.chartjs.org
+ * (c) 2022 Chart.js Contributors
+ * Released under the MIT License
+ */class tD{constructor(){this._request=null,this._charts=new Map,this._running=!1,this._lastDate=void 0}_notify(t,e,i,n){const o=e.listeners[n],r=e.duration;o.forEach(a=>a({chart:t,initial:e.initial,numSteps:r,currentStep:Math.min(i-e.start,r)}))}_refresh(){this._request||(this._running=!0,this._request=Sf.call(window,()=>{this._update(),this._request=null,this._running&&this._refresh()}))}_update(t=Date.now()){let e=0;this._charts.forEach((i,n)=>{if(!i.running||!i.items.length)return;const o=i.items;let r=o.length-1,a=!1,l;for(;r>=0;--r)l=o[r],l._active?(l._total>i.duration&&(i.duration=l._total),l.tick(t),a=!0):(o[r]=o[o.length-1],o.pop());a&&(n.draw(),this._notify(n,i,t,"progress")),o.length||(i.running=!1,this._notify(n,i,t,"complete"),i.initial=!1),e+=o.length}),this._lastDate=t,e===0&&(this._running=!1)}_getAnims(t){const e=this._charts;let i=e.get(t);return i||(i={running:!1,initial:!0,items:[],listeners:{complete:[],progress:[]}},e.set(t,i)),i}listen(t,e,i){this._getAnims(t).listeners[e].push(i)}add(t,e){!e||!e.length||this._getAnims(t).items.push(...e)}has(t){return this._getAnims(t).items.length>0}start(t){const e=this._charts.get(t);e&&(e.running=!0,e.start=Date.now(),e.duration=e.items.reduce((i,n)=>Math.max(i,n._duration),0),this._refresh())}running(t){if(!this._running)return!1;const e=this._charts.get(t);return!(!e||!e.running||!e.items.length)}stop(t){const e=this._charts.get(t);if(!e||!e.items.length)return;const i=e.items;let n=i.length-1;for(;n>=0;--n)i[n].cancel();e.items=[],this._notify(t,e,Date.now(),"complete")}remove(t){return this._charts.delete(t)}}var xe=new tD;const p_="transparent",eD={boolean(s,t,e){return e>.5?t:s},color(s,t,e){const i=zf(s||p_),n=i.valid&&zf(t||p_);return n&&n.valid?n.mix(i,e).hexString():t},number(s,t,e){return s+(t-s)*e}};class f_{constructor(t,e,i,n){const o=e[i];n=tt([t.to,n,o,t.from]);const r=tt([t.from,o,n]);this._active=!0,this._fn=t.fn||eD[t.type||typeof r],this._easing=Mn[t.easing]||Mn.linear,this._start=Math.floor(Date.now()+(t.delay||0)),this._duration=this._total=Math.floor(t.duration),this._loop=!!t.loop,this._target=e,this._prop=i,this._from=r,this._to=n,this._promises=void 0}active(){return this._active}update(t,e,i){if(this._active){this._notify(!1);const n=this._target[this._prop],o=i-this._start,r=this._duration-o;this._start=i,this._duration=Math.floor(Math.max(r,t.duration)),this._total+=o,this._loop=!!t.loop,this._to=tt([t.to,e,n,t.from]),this._from=tt([t.from,n,e])}}cancel(){this._active&&(this.tick(Date.now()),this._active=!1,this._notify(!1))}tick(t){const e=t-this._start,i=this._duration,n=this._prop,o=this._from,r=this._loop,a=this._to;let l;if(this._active=o!==a&&(r||e<i),!this._active){this._target[n]=a,this._notify(!0);return}if(e<0){this._target[n]=o;return}l=e/i%2,l=r&&l>1?2-l:l,l=this._easing(Math.min(1,Math.max(0,l))),this._target[n]=this._fn(o,a,l)}wait(){const t=this._promises||(this._promises=[]);return new Promise((e,i)=>{t.push({res:e,rej:i})})}_notify(t){const e=t?"res":"rej",i=this._promises||[];for(let n=0;n<i.length;n++)i[n][e]()}}const iD=["x","y","borderWidth","radius","tension"],sD=["color","borderColor","backgroundColor"];F.set("animation",{delay:void 0,duration:1e3,easing:"easeOutQuart",fn:void 0,from:void 0,loop:void 0,to:void 0,type:void 0});const nD=Object.keys(F.animation);F.describe("animation",{_fallback:!1,_indexable:!1,_scriptable:s=>s!=="onProgress"&&s!=="onComplete"&&s!=="fn"}),F.set("animations",{colors:{type:"color",properties:sD},numbers:{type:"number",properties:iD}}),F.describe("animations",{_fallback:"animation"}),F.set("transitions",{active:{animation:{duration:400}},resize:{animation:{duration:0}},show:{animations:{colors:{from:"transparent"},visible:{type:"boolean",duration:0}}},hide:{animations:{colors:{to:"transparent"},visible:{type:"boolean",easing:"linear",fn:s=>s|0}}}});class Pc{constructor(t,e){this._chart=t,this._properties=new Map,this.configure(e)}configure(t){if(!V(t))return;const e=this._properties;Object.getOwnPropertyNames(t).forEach(i=>{const n=t[i];if(!V(n))return;const o={};for(const r of nD)o[r]=n[r];(Q(n.properties)&&n.properties||[i]).forEach(r=>{(r===i||!e.has(r))&&e.set(r,o)})})}_animateOptions(t,e){const i=e.options,n=rD(t,i);if(!n)return[];const o=this._createAnimations(n,i);return i.$shared&&oD(t.options.$animations,i).then(()=>{t.options=i},()=>{}),o}_createAnimations(t,e){const i=this._properties,n=[],o=t.$animations||(t.$animations={}),r=Object.keys(e),a=Date.now();let l;for(l=r.length-1;l>=0;--l){const c=r[l];if(c.charAt(0)==="$")continue;if(c==="options"){n.push(...this._animateOptions(t,e));continue}const h=e[c];let d=o[c];const u=i.get(c);if(d)if(u&&d.active()){d.update(u,h,a);continue}else d.cancel();if(!u||!u.duration){t[c]=h;continue}o[c]=d=new f_(u,t,c,h),n.push(d)}return n}update(t,e){if(this._properties.size===0){Object.assign(t,e);return}const i=this._createAnimations(t,e);if(i.length)return xe.add(this._chart,i),!0}}function oD(s,t){const e=[],i=Object.keys(t);for(let n=0;n<i.length;n++){const o=s[i[n]];o&&o.active()&&e.push(o.wait())}return Promise.all(e)}function rD(s,t){if(!t)return;let e=s.options;if(!e){s.options=t;return}return e.$shared&&(s.options=e=Object.assign({},e,{$shared:!1,$animations:{}})),e}function __(s,t){const e=s&&s.options||{},i=e.reverse,n=e.min===void 0?t:0,o=e.max===void 0?t:0;return{start:i?o:n,end:i?n:o}}function aD(s,t,e){if(e===!1)return!1;const i=__(s,e),n=__(t,e);return{top:n.end,right:i.end,bottom:n.start,left:i.start}}function lD(s){let t,e,i,n;return V(s)?(t=s.top,e=s.right,i=s.bottom,n=s.left):t=e=i=n=s,{top:t,right:e,bottom:i,left:n,disabled:s===!1}}function g_(s,t){const e=[],i=s._getSortedDatasetMetas(t);let n,o;for(n=0,o=i.length;n<o;++n)e.push(i[n].index);return e}function m_(s,t,e,i={}){const n=s.keys,o=i.mode==="single";let r,a,l,c;if(t!==null){for(r=0,a=n.length;r<a;++r){if(l=+n[r],l===e){if(i.all)continue;break}c=s.values[l],rt(c)&&(o||t===0||Ee(t)===Ee(c))&&(t+=c)}return t}}function cD(s){const t=Object.keys(s),e=new Array(t.length);let i,n,o;for(i=0,n=t.length;i<n;++i)o=t[i],e[i]={x:o,y:s[o]};return e}function b_(s,t){const e=s&&s.options.stacked;return e||e===void 0&&t.stack!==void 0}function hD(s,t,e){return`${s.id}.${t.id}.${e.stack||e.type}`}function dD(s){const{min:t,max:e,minDefined:i,maxDefined:n}=s.getUserBounds();return{min:i?t:Number.NEGATIVE_INFINITY,max:n?e:Number.POSITIVE_INFINITY}}function uD(s,t,e){const i=s[t]||(s[t]={});return i[e]||(i[e]={})}function v_(s,t,e,i){for(const n of t.getMatchingVisibleMetas(i).reverse()){const o=s[n.index];if(e&&o>0||!e&&o<0)return n.index}return null}function y_(s,t){const{chart:e,_cachedMeta:i}=s,n=e._stacks||(e._stacks={}),{iScale:o,vScale:r,index:a}=i,l=o.axis,c=r.axis,h=hD(o,r,i),d=t.length;let u;for(let p=0;p<d;++p){const f=t[p],{[l]:b,[c]:v}=f,y=f._stacks||(f._stacks={});u=y[c]=uD(n,h,b),u[a]=v,u._top=v_(u,r,!0,i.type),u._bottom=v_(u,r,!1,i.type)}}function Nc(s,t){const e=s.scales;return Object.keys(e).filter(i=>e[i].axis===t).shift()}function pD(s,t){return ni(s,{active:!1,dataset:void 0,datasetIndex:t,index:t,mode:"default",type:"dataset"})}function fD(s,t,e){return ni(s,{active:!1,dataIndex:t,parsed:void 0,raw:void 0,element:e,index:t,mode:"default",type:"data"})}function Hn(s,t){const e=s.controller.index,i=s.vScale&&s.vScale.axis;if(i){t=t||s._parsed;for(const n of t){const o=n._stacks;if(!o||o[i]===void 0||o[i][e]===void 0)return;delete o[i][e]}}}const Bc=s=>s==="reset"||s==="none",T_=(s,t)=>t?s:Object.assign({},s),_D=(s,t,e)=>s&&!t.hidden&&t._stacked&&{keys:g_(e,!0),values:null};class Ut{constructor(t,e){this.chart=t,this._ctx=t.ctx,this.index=e,this._cachedDataOpts={},this._cachedMeta=this.getMeta(),this._type=this._cachedMeta.type,this.options=void 0,this._parsing=!1,this._data=void 0,this._objectData=void 0,this._sharedOptions=void 0,this._drawStart=void 0,this._drawCount=void 0,this.enableOptionSharing=!1,this.supportsDecimation=!1,this.$context=void 0,this._syncList=[],this.initialize()}initialize(){const t=this._cachedMeta;this.configure(),this.linkScales(),t._stacked=b_(t.vScale,t),this.addElements()}updateIndex(t){this.index!==t&&Hn(this._cachedMeta),this.index=t}linkScales(){const t=this.chart,e=this._cachedMeta,i=this.getDataset(),n=(d,u,p,f)=>d==="x"?u:d==="r"?f:p,o=e.xAxisID=B(i.xAxisID,Nc(t,"x")),r=e.yAxisID=B(i.yAxisID,Nc(t,"y")),a=e.rAxisID=B(i.rAxisID,Nc(t,"r")),l=e.indexAxis,c=e.iAxisID=n(l,o,r,a),h=e.vAxisID=n(l,r,o,a);e.xScale=this.getScaleForId(o),e.yScale=this.getScaleForId(r),e.rScale=this.getScaleForId(a),e.iScale=this.getScaleForId(c),e.vScale=this.getScaleForId(h)}getDataset(){return this.chart.data.datasets[this.index]}getMeta(){return this.chart.getDatasetMeta(this.index)}getScaleForId(t){return this.chart.scales[t]}_getOtherScale(t){const e=this._cachedMeta;return t===e.iScale?e.vScale:e.iScale}reset(){this._update("reset")}_destroy(){const t=this._cachedMeta;this._data&&wf(this._data,this),t._stacked&&Hn(t)}_dataCheck(){const t=this.getDataset(),e=t.data||(t.data=[]),i=this._data;if(V(e))this._data=cD(e);else if(i!==e){if(i){wf(i,this);const n=this._cachedMeta;Hn(n),n._parsed=[]}e&&Object.isExtensible(e)&&NO(e,this),this._syncList=[],this._data=e}}addElements(){const t=this._cachedMeta;this._dataCheck(),this.datasetElementType&&(t.dataset=new this.datasetElementType)}buildOrUpdateElements(t){const e=this._cachedMeta,i=this.getDataset();let n=!1;this._dataCheck();const o=e._stacked;e._stacked=b_(e.vScale,e),e.stack!==i.stack&&(n=!0,Hn(e),e.stack=i.stack),this._resyncElements(t),(n||o!==e._stacked)&&y_(this,e._parsed)}configure(){const t=this.chart.config,e=t.datasetScopeKeys(this._type),i=t.getOptionScopes(this.getDataset(),e,!0);this.options=t.createResolver(i,this.getContext()),this._parsing=this.options.parsing,this._cachedDataOpts={}}parse(t,e){const{_cachedMeta:i,_data:n}=this,{iScale:o,_stacked:r}=i,a=o.axis;let l=t===0&&e===n.length?!0:i._sorted,c=t>0&&i._parsed[t-1],h,d,u;if(this._parsing===!1)i._parsed=n,i._sorted=!0,u=n;else{Q(n[t])?u=this.parseArrayData(i,n,t,e):V(n[t])?u=this.parseObjectData(i,n,t,e):u=this.parsePrimitiveData(i,n,t,e);const p=()=>d[a]===null||c&&d[a]<c[a];for(h=0;h<e;++h)i._parsed[h+t]=d=u[h],l&&(p()&&(l=!1),c=d);i._sorted=l}r&&y_(this,u)}parsePrimitiveData(t,e,i,n){const{iScale:o,vScale:r}=t,a=o.axis,l=r.axis,c=o.getLabels(),h=o===r,d=new Array(n);let u,p,f;for(u=0,p=n;u<p;++u)f=u+i,d[u]={[a]:h||o.parse(c[f],f),[l]:r.parse(e[f],f)};return d}parseArrayData(t,e,i,n){const{xScale:o,yScale:r}=t,a=new Array(n);let l,c,h,d;for(l=0,c=n;l<c;++l)h=l+i,d=e[h],a[l]={x:o.parse(d[0],h),y:r.parse(d[1],h)};return a}parseObjectData(t,e,i,n){const{xScale:o,yScale:r}=t,{xAxisKey:a="x",yAxisKey:l="y"}=this._parsing,c=new Array(n);let h,d,u,p;for(h=0,d=n;h<d;++h)u=h+i,p=e[u],c[h]={x:o.parse(ti(p,a),u),y:r.parse(ti(p,l),u)};return c}getParsed(t){return this._cachedMeta._parsed[t]}getDataElement(t){return this._cachedMeta.data[t]}applyStack(t,e,i){const n=this.chart,o=this._cachedMeta,r=e[t.axis],a={keys:g_(n,!0),values:e._stacks[t.axis]};return m_(a,r,o.index,{mode:i})}updateRangeFromParsed(t,e,i,n){const o=i[e.axis];let r=o===null?NaN:o;const a=n&&i._stacks[e.axis];n&&a&&(n.values=a,r=m_(n,o,this._cachedMeta.index)),t.min=Math.min(t.min,r),t.max=Math.max(t.max,r)}getMinMax(t,e){const i=this._cachedMeta,n=i._parsed,o=i._sorted&&t===i.iScale,r=n.length,a=this._getOtherScale(t),l=_D(e,i,this.chart),c={min:Number.POSITIVE_INFINITY,max:Number.NEGATIVE_INFINITY},{min:h,max:d}=dD(a);let u,p;function f(){p=n[u];const b=p[a.axis];return!rt(p[t.axis])||h>b||d<b}for(u=0;u<r&&!(!f()&&(this.updateRangeFromParsed(c,t,p,l),o));++u);if(o){for(u=r-1;u>=0;--u)if(!f()){this.updateRangeFromParsed(c,t,p,l);break}}return c}getAllParsedValues(t){const e=this._cachedMeta._parsed,i=[];let n,o,r;for(n=0,o=e.length;n<o;++n)r=e[n][t.axis],rt(r)&&i.push(r);return i}getMaxOverflow(){return!1}getLabelAndValue(t){const e=this._cachedMeta,i=e.iScale,n=e.vScale,o=this.getParsed(t);return{label:i?""+i.getLabelForValue(o[i.axis]):"",value:n?""+n.getLabelForValue(o[n.axis]):""}}_update(t){const e=this._cachedMeta;this.update(t||"default"),e._clip=lD(B(this.options.clip,aD(e.xScale,e.yScale,this.getMaxOverflow())))}update(t){}draw(){const t=this._ctx,e=this.chart,i=this._cachedMeta,n=i.data||[],o=e.chartArea,r=[],a=this._drawStart||0,l=this._drawCount||n.length-a,c=this.options.drawActiveElementsOnTop;let h;for(i.dataset&&i.dataset.draw(t,o,a,l),h=a;h<a+l;++h){const d=n[h];d.hidden||(d.active&&c?r.push(d):d.draw(t,o))}for(h=0;h<r.length;++h)r[h].draw(t,o)}getStyle(t,e){const i=e?"active":"default";return t===void 0&&this._cachedMeta.dataset?this.resolveDatasetElementOptions(i):this.resolveDataElementOptions(t||0,i)}getContext(t,e,i){const n=this.getDataset();let o;if(t>=0&&t<this._cachedMeta.data.length){const r=this._cachedMeta.data[t];o=r.$context||(r.$context=fD(this.getContext(),t,r)),o.parsed=this.getParsed(t),o.raw=n.data[t],o.index=o.dataIndex=t}else o=this.$context||(this.$context=pD(this.chart.getContext(),this.index)),o.dataset=n,o.index=o.datasetIndex=this.index;return o.active=!!e,o.mode=i,o}resolveDatasetElementOptions(t){return this._resolveElementOptions(this.datasetElementType.id,t)}resolveDataElementOptions(t,e){return this._resolveElementOptions(this.dataElementType.id,e,t)}_resolveElementOptions(t,e="default",i){const n=e==="active",o=this._cachedDataOpts,r=t+"-"+e,a=o[r],l=this.enableOptionSharing&&jt(i);if(a)return T_(a,l);const c=this.chart.config,h=c.datasetElementScopeKeys(this._type,t),d=n?[`${t}Hover`,"hover",t,""]:[t,""],u=c.getOptionScopes(this.getDataset(),h),p=Object.keys(F.elements[t]),f=()=>this.getContext(i,n),b=c.resolveNamedOptions(u,p,f,d);return b.$shared&&(b.$shared=l,o[r]=Object.freeze(T_(b,l))),b}_resolveAnimations(t,e,i){const n=this.chart,o=this._cachedDataOpts,r=`animation-${e}`,a=o[r];if(a)return a;let l;if(n.options.animation!==!1){const h=this.chart.config,d=h.datasetAnimationScopeKeys(this._type,e),u=h.getOptionScopes(this.getDataset(),d);l=h.createResolver(u,this.getContext(t,i,e))}const c=new Pc(n,l&&l.animations);return l&&l._cacheable&&(o[r]=Object.freeze(c)),c}getSharedOptions(t){if(t.$shared)return this._sharedOptions||(this._sharedOptions=Object.assign({},t))}includeOptions(t,e){return!e||Bc(t)||this.chart._animationsDisabled}_getSharedOptions(t,e){const i=this.resolveDataElementOptions(t,e),n=this._sharedOptions,o=this.getSharedOptions(i),r=this.includeOptions(e,o)||o!==n;return this.updateSharedOptions(o,e,i),{sharedOptions:o,includeOptions:r}}updateElement(t,e,i,n){Bc(n)?Object.assign(t,i):this._resolveAnimations(e,n).update(t,i)}updateSharedOptions(t,e,i){t&&!Bc(e)&&this._resolveAnimations(void 0,e).update(t,i)}_setStyle(t,e,i,n){t.active=n;const o=this.getStyle(e,n);this._resolveAnimations(e,i,n).update(t,{options:!n&&this.getSharedOptions(o)||o})}removeHoverStyle(t,e,i){this._setStyle(t,i,"active",!1)}setHoverStyle(t,e,i){this._setStyle(t,i,"active",!0)}_removeDatasetHoverStyle(){const t=this._cachedMeta.dataset;t&&this._setStyle(t,void 0,"active",!1)}_setDatasetHoverStyle(){const t=this._cachedMeta.dataset;t&&this._setStyle(t,void 0,"active",!0)}_resyncElements(t){const e=this._data,i=this._cachedMeta.data;for(const[a,l,c]of this._syncList)this[a](l,c);this._syncList=[];const n=i.length,o=e.length,r=Math.min(o,n);r&&this.parse(0,r),o>n?this._insertElements(n,o-n,t):o<n&&this._removeElements(o,n-o)}_insertElements(t,e,i=!0){const n=this._cachedMeta,o=n.data,r=t+e;let a;const l=c=>{for(c.length+=e,a=c.length-1;a>=r;a--)c[a]=c[a-e]};for(l(o),a=t;a<r;++a)o[a]=new this.dataElementType;this._parsing&&l(n._parsed),this.parse(t,e),i&&this.updateElements(o,t,e,"reset")}updateElements(t,e,i,n){}_removeElements(t,e){const i=this._cachedMeta;if(this._parsing){const n=i._parsed.splice(t,e);i._stacked&&Hn(i,n)}i.data.splice(t,e)}_sync(t){if(this._parsing)this._syncList.push(t);else{const[e,i,n]=t;this[e](i,n)}this.chart._dataChanges.push([this.index,...t])}_onDataPush(){const t=arguments.length;this._sync(["_insertElements",this.getDataset().data.length-t,t])}_onDataPop(){this._sync(["_removeElements",this._cachedMeta.data.length-1,1])}_onDataShift(){this._sync(["_removeElements",0,1])}_onDataSplice(t,e){e&&this._sync(["_removeElements",t,e]);const i=arguments.length-2;i&&this._sync(["_insertElements",t,i])}_onDataUnshift(){this._sync(["_insertElements",0,arguments.length])}}Ut.defaults={},Ut.prototype.datasetElementType=null,Ut.prototype.dataElementType=null;function gD(s,t){if(!s._cache.$bar){const e=s.getMatchingVisibleMetas(t);let i=[];for(let n=0,o=e.length;n<o;n++)i=i.concat(e[n].controller.getAllParsedValues(s));s._cache.$bar=kf(i.sort((n,o)=>n-o))}return s._cache.$bar}function mD(s){const t=s.iScale,e=gD(t,s.type);let i=t._length,n,o,r,a;const l=()=>{r===32767||r===-32768||(jt(a)&&(i=Math.min(i,Math.abs(r-a)||i)),a=r)};for(n=0,o=e.length;n<o;++n)r=t.getPixelForValue(e[n]),l();for(a=void 0,n=0,o=t.ticks.length;n<o;++n)r=t.getPixelForTick(n),l();return i}function bD(s,t,e,i){const n=e.barThickness;let o,r;return H(n)?(o=t.min*e.categoryPercentage,r=e.barPercentage):(o=n*i,r=1),{chunk:o/i,ratio:r,start:t.pixels[s]-o/2}}function vD(s,t,e,i){const n=t.pixels,o=n[s];let r=s>0?n[s-1]:null,a=s<n.length-1?n[s+1]:null;const l=e.categoryPercentage;r===null&&(r=o-(a===null?t.end-t.start:a-o)),a===null&&(a=o+o-r);const c=o-(o-Math.min(r,a))/2*l;return{chunk:Math.abs(a-r)/2*l/i,ratio:e.barPercentage,start:c}}function yD(s,t,e,i){const n=e.parse(s[0],i),o=e.parse(s[1],i),r=Math.min(n,o),a=Math.max(n,o);let l=r,c=a;Math.abs(r)>Math.abs(a)&&(l=a,c=r),t[e.axis]=c,t._custom={barStart:l,barEnd:c,start:n,end:o,min:r,max:a}}function E_(s,t,e,i){return Q(s)?yD(s,t,e,i):t[e.axis]=e.parse(s,i),t}function x_(s,t,e,i){const n=s.iScale,o=s.vScale,r=n.getLabels(),a=n===o,l=[];let c,h,d,u;for(c=e,h=e+i;c<h;++c)u=t[c],d={},d[n.axis]=a||n.parse(r[c],c),l.push(E_(u,d,o,c));return l}function Hc(s){return s&&s.barStart!==void 0&&s.barEnd!==void 0}function TD(s,t,e){return s!==0?Ee(s):(t.isHorizontal()?1:-1)*(t.min>=e?1:-1)}function ED(s){let t,e,i,n,o;return s.horizontal?(t=s.base>s.x,e="left",i="right"):(t=s.base<s.y,e="bottom",i="top"),t?(n="end",o="start"):(n="start",o="end"),{start:e,end:i,reverse:t,top:n,bottom:o}}function xD(s,t,e,i){let n=t.borderSkipped;const o={};if(!n){s.borderSkipped=o;return}if(n===!0){s.borderSkipped={top:!0,right:!0,bottom:!0,left:!0};return}const{start:r,end:a,reverse:l,top:c,bottom:h}=ED(s);n==="middle"&&e&&(s.enableBorderRadius=!0,(e._top||0)===i?n=c:(e._bottom||0)===i?n=h:(o[C_(h,r,a,l)]=!0,n=c)),o[C_(n,r,a,l)]=!0,s.borderSkipped=o}function C_(s,t,e,i){return i?(s=CD(s,t,e),s=A_(s,e,t)):s=A_(s,t,e),s}function CD(s,t,e){return s===t?e:s===e?t:s}function A_(s,t,e){return s==="start"?t:s==="end"?e:s}function AD(s,{inflateAmount:t},e){s.inflateAmount=t==="auto"?e===1?.33:0:t}class Vn extends Ut{parsePrimitiveData(t,e,i,n){return x_(t,e,i,n)}parseArrayData(t,e,i,n){return x_(t,e,i,n)}parseObjectData(t,e,i,n){const{iScale:o,vScale:r}=t,{xAxisKey:a="x",yAxisKey:l="y"}=this._parsing,c=o.axis==="x"?a:l,h=r.axis==="x"?a:l,d=[];let u,p,f,b;for(u=i,p=i+n;u<p;++u)b=e[u],f={},f[o.axis]=o.parse(ti(b,c),u),d.push(E_(ti(b,h),f,r,u));return d}updateRangeFromParsed(t,e,i,n){super.updateRangeFromParsed(t,e,i,n);const o=i._custom;o&&e===this._cachedMeta.vScale&&(t.min=Math.min(t.min,o.min),t.max=Math.max(t.max,o.max))}getMaxOverflow(){return 0}getLabelAndValue(t){const e=this._cachedMeta,{iScale:i,vScale:n}=e,o=this.getParsed(t),r=o._custom,a=Hc(r)?"["+r.start+", "+r.end+"]":""+n.getLabelForValue(o[n.axis]);return{label:""+i.getLabelForValue(o[i.axis]),value:a}}initialize(){this.enableOptionSharing=!0,super.initialize();const t=this._cachedMeta;t.stack=this.getDataset().stack}update(t){const e=this._cachedMeta;this.updateElements(e.data,0,e.data.length,t)}updateElements(t,e,i,n){const o=n==="reset",{index:r,_cachedMeta:{vScale:a}}=this,l=a.getBasePixel(),c=a.isHorizontal(),h=this._getRuler(),{sharedOptions:d,includeOptions:u}=this._getSharedOptions(e,n);for(let p=e;p<e+i;p++){const f=this.getParsed(p),b=o||H(f[a.axis])?{base:l,head:l}:this._calculateBarValuePixels(p),v=this._calculateBarIndexPixels(p,h),y=(f._stacks||{})[a.axis],T={horizontal:c,base:b.base,enableBorderRadius:!y||Hc(f._custom)||r===y._top||r===y._bottom,x:c?b.head:v.center,y:c?v.center:b.head,height:c?v.size:Math.abs(b.size),width:c?Math.abs(b.size):v.size};u&&(T.options=d||this.resolveDataElementOptions(p,t[p].active?"active":n));const x=T.options||t[p].options;xD(T,x,y,r),AD(T,x,h.ratio),this.updateElement(t[p],p,T,n)}}_getStacks(t,e){const{iScale:i}=this._cachedMeta,n=i.getMatchingVisibleMetas(this._type).filter(l=>l.controller.options.grouped),o=i.options.stacked,r=[],a=l=>{const c=l.controller.getParsed(e),h=c&&c[l.vScale.axis];if(H(h)||isNaN(h))return!0};for(const l of n)if(!(e!==void 0&&a(l))&&((o===!1||r.indexOf(l.stack)===-1||o===void 0&&l.stack===void 0)&&r.push(l.stack),l.index===t))break;return r.length||r.push(void 0),r}_getStackCount(t){return this._getStacks(void 0,t).length}_getStackIndex(t,e,i){const n=this._getStacks(t,i),o=e!==void 0?n.indexOf(e):-1;return o===-1?n.length-1:o}_getRuler(){const t=this.options,e=this._cachedMeta,i=e.iScale,n=[];let o,r;for(o=0,r=e.data.length;o<r;++o)n.push(i.getPixelForValue(this.getParsed(o)[i.axis],o));const a=t.barThickness;return{min:a||mD(e),pixels:n,start:i._startPixel,end:i._endPixel,stackCount:this._getStackCount(),scale:i,grouped:t.grouped,ratio:a?1:t.categoryPercentage*t.barPercentage}}_calculateBarValuePixels(t){const{_cachedMeta:{vScale:e,_stacked:i},options:{base:n,minBarLength:o}}=this,r=n||0,a=this.getParsed(t),l=a._custom,c=Hc(l);let h=a[e.axis],d=0,u=i?this.applyStack(e,a,i):h,p,f;u!==h&&(d=u-h,u=h),c&&(h=l.barStart,u=l.barEnd-l.barStart,h!==0&&Ee(h)!==Ee(l.barEnd)&&(d=0),d+=h);const b=!H(n)&&!c?n:d;let v=e.getPixelForValue(b);if(this.chart.getDataVisibility(t)?p=e.getPixelForValue(d+u):p=v,f=p-v,Math.abs(f)<o){f=TD(f,e,r)*o,h===r&&(v-=f/2);const y=e.getPixelForDecimal(0),T=e.getPixelForDecimal(1),x=Math.min(y,T),E=Math.max(y,T);v=Math.max(Math.min(v,E),x),p=v+f}if(v===e.getPixelForValue(r)){const y=Ee(f)*e.getLineWidthForValue(r)/2;v+=y,f-=y}return{size:f,base:v,head:p,center:p+f/2}}_calculateBarIndexPixels(t,e){const i=e.scale,n=this.options,o=n.skipNull,r=B(n.maxBarThickness,1/0);let a,l;if(e.grouped){const c=o?this._getStackCount(t):e.stackCount,h=n.barThickness==="flex"?vD(t,e,n,c):bD(t,e,n,c),d=this._getStackIndex(this.index,this._cachedMeta.stack,o?t:void 0);a=h.start+h.chunk*d+h.chunk/2,l=Math.min(r,h.chunk*h.ratio)}else a=i.getPixelForValue(this.getParsed(t)[i.axis],t),l=Math.min(r,e.min*e.ratio);return{base:a-l/2,head:a+l/2,center:a,size:l}}draw(){const t=this._cachedMeta,e=t.vScale,i=t.data,n=i.length;let o=0;for(;o<n;++o)this.getParsed(o)[e.axis]!==null&&i[o].draw(this._ctx)}}Vn.id="bar",Vn.defaults={datasetElementType:!1,dataElementType:"bar",categoryPercentage:.8,barPercentage:.9,grouped:!0,animations:{numbers:{type:"number",properties:["x","y","base","width","height"]}}},Vn.overrides={scales:{_index_:{type:"category",offset:!0,grid:{offset:!0}},_value_:{type:"linear",beginAtZero:!0}}};class Fn extends Ut{initialize(){this.enableOptionSharing=!0,super.initialize()}parsePrimitiveData(t,e,i,n){const o=super.parsePrimitiveData(t,e,i,n);for(let r=0;r<o.length;r++)o[r]._custom=this.resolveDataElementOptions(r+i).radius;return o}parseArrayData(t,e,i,n){const o=super.parseArrayData(t,e,i,n);for(let r=0;r<o.length;r++){const a=e[i+r];o[r]._custom=B(a[2],this.resolveDataElementOptions(r+i).radius)}return o}parseObjectData(t,e,i,n){const o=super.parseObjectData(t,e,i,n);for(let r=0;r<o.length;r++){const a=e[i+r];o[r]._custom=B(a&&a.r&&+a.r,this.resolveDataElementOptions(r+i).radius)}return o}getMaxOverflow(){const t=this._cachedMeta.data;let e=0;for(let i=t.length-1;i>=0;--i)e=Math.max(e,t[i].size(this.resolveDataElementOptions(i))/2);return e>0&&e}getLabelAndValue(t){const e=this._cachedMeta,{xScale:i,yScale:n}=e,o=this.getParsed(t),r=i.getLabelForValue(o.x),a=n.getLabelForValue(o.y),l=o._custom;return{label:e.label,value:"("+r+", "+a+(l?", "+l:"")+")"}}update(t){const e=this._cachedMeta.data;this.updateElements(e,0,e.length,t)}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a}=this._cachedMeta,{sharedOptions:l,includeOptions:c}=this._getSharedOptions(e,n),h=r.axis,d=a.axis;for(let u=e;u<e+i;u++){const p=t[u],f=!o&&this.getParsed(u),b={},v=b[h]=o?r.getPixelForDecimal(.5):r.getPixelForValue(f[h]),y=b[d]=o?a.getBasePixel():a.getPixelForValue(f[d]);b.skip=isNaN(v)||isNaN(y),c&&(b.options=l||this.resolveDataElementOptions(u,p.active?"active":n),o&&(b.options.radius=0)),this.updateElement(p,u,b,n)}}resolveDataElementOptions(t,e){const i=this.getParsed(t);let n=super.resolveDataElementOptions(t,e);n.$shared&&(n=Object.assign({},n,{$shared:!1}));const o=n.radius;return e!=="active"&&(n.radius=0),n.radius+=B(i&&i._custom,o),n}}Fn.id="bubble",Fn.defaults={datasetElementType:!1,dataElementType:"point",animations:{numbers:{type:"number",properties:["x","y","borderWidth","radius"]}}},Fn.overrides={scales:{x:{type:"linear"},y:{type:"linear"}},plugins:{tooltip:{callbacks:{title(){return""}}}}};function wD(s,t,e){let i=1,n=1,o=0,r=0;if(t<q){const a=s,l=a+t,c=Math.cos(a),h=Math.sin(a),d=Math.cos(l),u=Math.sin(l),p=(x,E,C)=>Dn(x,a,l,!0)?1:Math.max(E,E*e,C,C*e),f=(x,E,C)=>Dn(x,a,l,!0)?-1:Math.min(E,E*e,C,C*e),b=p(0,c,d),v=p(nt,h,u),y=f(it,c,d),T=f(it+nt,h,u);i=(b-y)/2,n=(v-T)/2,o=-(b+y)/2,r=-(v+T)/2}return{ratioX:i,ratioY:n,offsetX:o,offsetY:r}}class Bi extends Ut{constructor(t,e){super(t,e),this.enableOptionSharing=!0,this.innerRadius=void 0,this.outerRadius=void 0,this.offsetX=void 0,this.offsetY=void 0}linkScales(){}parse(t,e){const i=this.getDataset().data,n=this._cachedMeta;if(this._parsing===!1)n._parsed=i;else{let o=l=>+i[l];if(V(i[t])){const{key:l="value"}=this._parsing;o=c=>+ti(i[c],l)}let r,a;for(r=t,a=t+e;r<a;++r)n._parsed[r]=o(r)}}_getRotation(){return se(this.options.rotation-90)}_getCircumference(){return se(this.options.circumference)}_getRotationExtents(){let t=q,e=-q;for(let i=0;i<this.chart.data.datasets.length;++i)if(this.chart.isDatasetVisible(i)){const n=this.chart.getDatasetMeta(i).controller,o=n._getRotation(),r=n._getCircumference();t=Math.min(t,o),e=Math.max(e,o+r)}return{rotation:t,circumference:e-t}}update(t){const e=this.chart,{chartArea:i}=e,n=this._cachedMeta,o=n.data,r=this.getMaxBorderWidth()+this.getMaxOffset(o)+this.options.spacing,a=Math.max((Math.min(i.width,i.height)-r)/2,0),l=Math.min(xO(this.options.cutout,a),1),c=this._getRingWeight(this.index),{circumference:h,rotation:d}=this._getRotationExtents(),{ratioX:u,ratioY:p,offsetX:f,offsetY:b}=wD(d,h,l),v=(i.width-r)/u,y=(i.height-r)/p,T=Math.max(Math.min(v,y)/2,0),x=gf(this.options.radius,T),E=Math.max(x*l,0),C=(x-E)/this._getVisibleDatasetWeightTotal();this.offsetX=f*x,this.offsetY=b*x,n.total=this.calculateTotal(),this.outerRadius=x-C*this._getRingWeightOffset(this.index),this.innerRadius=Math.max(this.outerRadius-C*c,0),this.updateElements(o,0,o.length,t)}_circumference(t,e){const i=this.options,n=this._cachedMeta,o=this._getCircumference();return e&&i.animation.animateRotate||!this.chart.getDataVisibility(t)||n._parsed[t]===null||n.data[t].hidden?0:this.calculateCircumference(n._parsed[t]*o/q)}updateElements(t,e,i,n){const o=n==="reset",r=this.chart,a=r.chartArea,c=r.options.animation,h=(a.left+a.right)/2,d=(a.top+a.bottom)/2,u=o&&c.animateScale,p=u?0:this.innerRadius,f=u?0:this.outerRadius,{sharedOptions:b,includeOptions:v}=this._getSharedOptions(e,n);let y=this._getRotation(),T;for(T=0;T<e;++T)y+=this._circumference(T,o);for(T=e;T<e+i;++T){const x=this._circumference(T,o),E=t[T],C={x:h+this.offsetX,y:d+this.offsetY,startAngle:y,endAngle:y+x,circumference:x,outerRadius:f,innerRadius:p};v&&(C.options=b||this.resolveDataElementOptions(T,E.active?"active":n)),y+=x,this.updateElement(E,T,C,n)}}calculateTotal(){const t=this._cachedMeta,e=t.data;let i=0,n;for(n=0;n<e.length;n++){const o=t._parsed[n];o!==null&&!isNaN(o)&&this.chart.getDataVisibility(n)&&!e[n].hidden&&(i+=Math.abs(o))}return i}calculateCircumference(t){const e=this._cachedMeta.total;return e>0&&!isNaN(t)?q*(Math.abs(t)/e):0}getLabelAndValue(t){const e=this._cachedMeta,i=this.chart,n=i.data.labels||[],o=Bn(e._parsed[t],i.options.locale);return{label:n[t]||"",value:o}}getMaxBorderWidth(t){let e=0;const i=this.chart;let n,o,r,a,l;if(!t){for(n=0,o=i.data.datasets.length;n<o;++n)if(i.isDatasetVisible(n)){r=i.getDatasetMeta(n),t=r.data,a=r.controller;break}}if(!t)return 0;for(n=0,o=t.length;n<o;++n)l=a.resolveDataElementOptions(n),l.borderAlign!=="inner"&&(e=Math.max(e,l.borderWidth||0,l.hoverBorderWidth||0));return e}getMaxOffset(t){let e=0;for(let i=0,n=t.length;i<n;++i){const o=this.resolveDataElementOptions(i);e=Math.max(e,o.offset||0,o.hoverOffset||0)}return e}_getRingWeightOffset(t){let e=0;for(let i=0;i<t;++i)this.chart.isDatasetVisible(i)&&(e+=this._getRingWeight(i));return e}_getRingWeight(t){return Math.max(B(this.chart.data.datasets[t].weight,1),0)}_getVisibleDatasetWeightTotal(){return this._getRingWeightOffset(this.chart.data.datasets.length)||1}}Bi.id="doughnut",Bi.defaults={datasetElementType:!1,dataElementType:"arc",animation:{animateRotate:!0,animateScale:!1},animations:{numbers:{type:"number",properties:["circumference","endAngle","innerRadius","outerRadius","startAngle","x","y","offset","borderWidth","spacing"]}},cutout:"50%",rotation:0,circumference:360,radius:"100%",spacing:0,indexAxis:"r"},Bi.descriptors={_scriptable:s=>s!=="spacing",_indexable:s=>s!=="spacing"},Bi.overrides={aspectRatio:1,plugins:{legend:{labels:{generateLabels(s){const t=s.data;if(t.labels.length&&t.datasets.length){const{labels:{pointStyle:e}}=s.legend.options;return t.labels.map((i,n)=>{const r=s.getDatasetMeta(0).controller.getStyle(n);return{text:i,fillStyle:r.backgroundColor,strokeStyle:r.borderColor,lineWidth:r.borderWidth,pointStyle:e,hidden:!s.getDataVisibility(n),index:n}})}return[]}},onClick(s,t,e){e.chart.toggleDataVisibility(t.index),e.chart.update()}},tooltip:{callbacks:{title(){return""},label(s){let t=s.label;const e=": "+s.formattedValue;return Q(t)?(t=t.slice(),t[0]+=e):t+=e,t}}}}};class Wn extends Ut{initialize(){this.enableOptionSharing=!0,this.supportsDecimation=!0,super.initialize()}update(t){const e=this._cachedMeta,{dataset:i,data:n=[],_dataset:o}=e,r=this.chart._animationsDisabled;let{start:a,count:l}=If(e,n,r);this._drawStart=a,this._drawCount=l,Df(e)&&(a=0,l=n.length),i._chart=this.chart,i._datasetIndex=this.index,i._decimated=!!o._decimated,i.points=n;const c=this.resolveDatasetElementOptions(t);this.options.showLine||(c.borderWidth=0),c.segment=this.options.segment,this.updateElement(i,void 0,{animated:!r,options:c},t),this.updateElements(n,a,l,t)}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a,_stacked:l,_dataset:c}=this._cachedMeta,{sharedOptions:h,includeOptions:d}=this._getSharedOptions(e,n),u=r.axis,p=a.axis,{spanGaps:f,segment:b}=this.options,v=As(f)?f:Number.POSITIVE_INFINITY,y=this.chart._animationsDisabled||o||n==="none";let T=e>0&&this.getParsed(e-1);for(let x=e;x<e+i;++x){const E=t[x],C=this.getParsed(x),A=y?E:{},w=H(C[p]),S=A[u]=r.getPixelForValue(C[u],x),k=A[p]=o||w?a.getBasePixel():a.getPixelForValue(l?this.applyStack(a,C,l):C[p],x);A.skip=isNaN(S)||isNaN(k)||w,A.stop=x>0&&Math.abs(C[u]-T[u])>v,b&&(A.parsed=C,A.raw=c.data[x]),d&&(A.options=h||this.resolveDataElementOptions(x,E.active?"active":n)),y||this.updateElement(E,x,A,n),T=C}}getMaxOverflow(){const t=this._cachedMeta,e=t.dataset,i=e.options&&e.options.borderWidth||0,n=t.data||[];if(!n.length)return i;const o=n[0].size(this.resolveDataElementOptions(0)),r=n[n.length-1].size(this.resolveDataElementOptions(n.length-1));return Math.max(i,o,r)/2}draw(){const t=this._cachedMeta;t.dataset.updateControlPoints(this.chart.chartArea,t.iScale.axis),super.draw()}}Wn.id="line",Wn.defaults={datasetElementType:"line",dataElementType:"point",showLine:!0,spanGaps:!1},Wn.overrides={scales:{_index_:{type:"category"},_value_:{type:"linear"}}};class zn extends Ut{constructor(t,e){super(t,e),this.innerRadius=void 0,this.outerRadius=void 0}getLabelAndValue(t){const e=this._cachedMeta,i=this.chart,n=i.data.labels||[],o=Bn(e._parsed[t].r,i.options.locale);return{label:n[t]||"",value:o}}parseObjectData(t,e,i,n){return Jf.bind(this)(t,e,i,n)}update(t){const e=this._cachedMeta.data;this._updateRadius(),this.updateElements(e,0,e.length,t)}getMinMax(){const t=this._cachedMeta,e={min:Number.POSITIVE_INFINITY,max:Number.NEGATIVE_INFINITY};return t.data.forEach((i,n)=>{const o=this.getParsed(n).r;!isNaN(o)&&this.chart.getDataVisibility(n)&&(o<e.min&&(e.min=o),o>e.max&&(e.max=o))}),e}_updateRadius(){const t=this.chart,e=t.chartArea,i=t.options,n=Math.min(e.right-e.left,e.bottom-e.top),o=Math.max(n/2,0),r=Math.max(i.cutoutPercentage?o/100*i.cutoutPercentage:1,0),a=(o-r)/t.getVisibleDatasetCount();this.outerRadius=o-a*this.index,this.innerRadius=this.outerRadius-a}updateElements(t,e,i,n){const o=n==="reset",r=this.chart,l=r.options.animation,c=this._cachedMeta.rScale,h=c.xCenter,d=c.yCenter,u=c.getIndexAngle(0)-.5*it;let p=u,f;const b=360/this.countVisibleElements();for(f=0;f<e;++f)p+=this._computeAngle(f,n,b);for(f=e;f<e+i;f++){const v=t[f];let y=p,T=p+this._computeAngle(f,n,b),x=r.getDataVisibility(f)?c.getDistanceFromCenterForValue(this.getParsed(f).r):0;p=T,o&&(l.animateScale&&(x=0),l.animateRotate&&(y=T=u));const E={x:h,y:d,innerRadius:0,outerRadius:x,startAngle:y,endAngle:T,options:this.resolveDataElementOptions(f,v.active?"active":n)};this.updateElement(v,f,E,n)}}countVisibleElements(){const t=this._cachedMeta;let e=0;return t.data.forEach((i,n)=>{!isNaN(this.getParsed(n).r)&&this.chart.getDataVisibility(n)&&e++}),e}_computeAngle(t,e,i){return this.chart.getDataVisibility(t)?se(this.resolveDataElementOptions(t,e).angle||i):0}}zn.id="polarArea",zn.defaults={dataElementType:"arc",animation:{animateRotate:!0,animateScale:!0},animations:{numbers:{type:"number",properties:["x","y","startAngle","endAngle","innerRadius","outerRadius"]}},indexAxis:"r",startAngle:0},zn.overrides={aspectRatio:1,plugins:{legend:{labels:{generateLabels(s){const t=s.data;if(t.labels.length&&t.datasets.length){const{labels:{pointStyle:e}}=s.legend.options;return t.labels.map((i,n)=>{const r=s.getDatasetMeta(0).controller.getStyle(n);return{text:i,fillStyle:r.backgroundColor,strokeStyle:r.borderColor,lineWidth:r.borderWidth,pointStyle:e,hidden:!s.getDataVisibility(n),index:n}})}return[]}},onClick(s,t,e){e.chart.toggleDataVisibility(t.index),e.chart.update()}},tooltip:{callbacks:{title(){return""},label(s){return s.chart.data.labels[s.dataIndex]+": "+s.formattedValue}}}},scales:{r:{type:"radialLinear",angleLines:{display:!1},beginAtZero:!0,grid:{circular:!0},pointLabels:{display:!1},startAngle:0}}};class ea extends Bi{}ea.id="pie",ea.defaults={cutout:0,rotation:0,circumference:360,radius:"100%"};class jn extends Ut{getLabelAndValue(t){const e=this._cachedMeta.vScale,i=this.getParsed(t);return{label:e.getLabels()[t],value:""+e.getLabelForValue(i[e.axis])}}parseObjectData(t,e,i,n){return Jf.bind(this)(t,e,i,n)}update(t){const e=this._cachedMeta,i=e.dataset,n=e.data||[],o=e.iScale.getLabels();if(i.points=n,t!=="resize"){const r=this.resolveDatasetElementOptions(t);this.options.showLine||(r.borderWidth=0);const a={_loop:!0,_fullLoop:o.length===n.length,options:r};this.updateElement(i,void 0,a,t)}this.updateElements(n,0,n.length,t)}updateElements(t,e,i,n){const o=this._cachedMeta.rScale,r=n==="reset";for(let a=e;a<e+i;a++){const l=t[a],c=this.resolveDataElementOptions(a,l.active?"active":n),h=o.getPointPositionForValue(a,this.getParsed(a).r),d=r?o.xCenter:h.x,u=r?o.yCenter:h.y,p={x:d,y:u,angle:h.angle,skip:isNaN(d)||isNaN(u),options:c};this.updateElement(l,a,p,n)}}}jn.id="radar",jn.defaults={datasetElementType:"line",dataElementType:"point",indexAxis:"r",showLine:!0,elements:{line:{fill:"start"}}},jn.overrides={aspectRatio:1,scales:{r:{type:"radialLinear"}}};let Xt=class{constructor(){this.x=void 0,this.y=void 0,this.active=!1,this.options=void 0,this.$animations=void 0}tooltipPosition(t){const{x:e,y:i}=this.getProps(["x","y"],t);return{x:e,y:i}}hasValue(){return As(this.x)&&As(this.y)}getProps(t,e){const i=this.$animations;if(!e||!i)return this;const n={};return t.forEach(o=>{n[o]=i[o]&&i[o].active()?i[o]._to:this[o]}),n}};Xt.defaults={},Xt.defaultRoutes=void 0;const w_={values(s){return Q(s)?s:""+s},numeric(s,t,e){if(s===0)return"0";const i=this.chart.options.locale;let n,o=s;if(e.length>1){const c=Math.max(Math.abs(e[0].value),Math.abs(e[e.length-1].value));(c<1e-4||c>1e15)&&(n="scientific"),o=kD(s,e)}const r=Yt(Math.abs(o)),a=Math.max(Math.min(-1*Math.floor(r),20),0),l={notation:n,minimumFractionDigits:a,maximumFractionDigits:a};return Object.assign(l,this.options.ticks.format),Bn(s,i,l)},logarithmic(s,t,e){if(s===0)return"0";const i=s/Math.pow(10,Math.floor(Yt(s)));return i===1||i===2||i===5?w_.numeric.call(this,s,t,e):""}};function kD(s,t){let e=t.length>3?t[2].value-t[1].value:t[1].value-t[0].value;return Math.abs(e)>=1&&s!==Math.floor(s)&&(e=s-Math.floor(s)),e}var Yn={formatters:w_};F.set("scale",{display:!0,offset:!1,reverse:!1,beginAtZero:!1,bounds:"ticks",grace:0,grid:{display:!0,lineWidth:1,drawBorder:!0,drawOnChartArea:!0,drawTicks:!0,tickLength:8,tickWidth:(s,t)=>t.lineWidth,tickColor:(s,t)=>t.color,offset:!1,borderDash:[],borderDashOffset:0,borderWidth:1},title:{display:!1,text:"",padding:{top:4,bottom:4}},ticks:{minRotation:0,maxRotation:50,mirror:!1,textStrokeWidth:0,textStrokeColor:"",padding:3,display:!0,autoSkip:!0,autoSkipPadding:3,labelOffset:0,callback:Yn.formatters.values,minor:{},major:{},align:"center",crossAlign:"near",showLabelBackdrop:!1,backdropColor:"rgba(255, 255, 255, 0.75)",backdropPadding:2}}),F.route("scale.ticks","color","","color"),F.route("scale.grid","color","","borderColor"),F.route("scale.grid","borderColor","","borderColor"),F.route("scale.title","color","","color"),F.describe("scale",{_fallback:!1,_scriptable:s=>!s.startsWith("before")&&!s.startsWith("after")&&s!=="callback"&&s!=="parser",_indexable:s=>s!=="borderDash"&&s!=="tickBorderDash"}),F.describe("scales",{_fallback:"scale"}),F.describe("scale.ticks",{_scriptable:s=>s!=="backdropPadding"&&s!=="callback",_indexable:s=>s!=="backdropPadding"});function SD(s,t){const e=s.options.ticks,i=e.maxTicksLimit||OD(s),n=e.major.enabled?DD(t):[],o=n.length,r=n[0],a=n[o-1],l=[];if(o>i)return MD(t,l,n,o/i),l;const c=ID(n,t,i);if(o>0){let h,d;const u=o>1?Math.round((a-r)/(o-1)):null;for(ia(t,l,c,H(u)?0:r-u,r),h=0,d=o-1;h<d;h++)ia(t,l,c,n[h],n[h+1]);return ia(t,l,c,a,H(u)?t.length:a+u),l}return ia(t,l,c),l}function OD(s){const t=s.options.offset,e=s._tickSize(),i=s._length/e+(t?0:1),n=s._maxLength/e;return Math.floor(Math.min(i,n))}function ID(s,t,e){const i=LD(s),n=t.length/e;if(!i)return Math.max(n,1);const o=DO(i);for(let r=0,a=o.length-1;r<a;r++){const l=o[r];if(l>n)return l}return Math.max(n,1)}function DD(s){const t=[];let e,i;for(e=0,i=s.length;e<i;e++)s[e].major&&t.push(e);return t}function MD(s,t,e,i){let n=0,o=e[0],r;for(i=Math.ceil(i),r=0;r<s.length;r++)r===o&&(t.push(s[r]),n++,o=e[n*i])}function ia(s,t,e,i,n){const o=B(i,0),r=Math.min(B(n,s.length),s.length);let a=0,l,c,h;for(e=Math.ceil(e),n&&(l=n-i,e=l/Math.floor(l/e)),h=o;h<0;)a++,h=Math.round(o+a*e);for(c=Math.max(o,0);c<r;c++)c===h&&(t.push(s[c]),a++,h=Math.round(o+a*e))}function LD(s){const t=s.length;let e,i;if(t<2)return!1;for(i=s[0],e=1;e<t;++e)if(s[e]-s[e-1]!==i)return!1;return i}const $D=s=>s==="left"?"right":s==="right"?"left":s,k_=(s,t,e)=>t==="top"||t==="left"?s[t]+e:s[t]-e;function S_(s,t){const e=[],i=s.length/t,n=s.length;let o=0;for(;o<n;o+=i)e.push(s[Math.floor(o)]);return e}function RD(s,t,e){const i=s.ticks.length,n=Math.min(t,i-1),o=s._startPixel,r=s._endPixel,a=1e-6;let l=s.getPixelForTick(n),c;if(!(e&&(i===1?c=Math.max(l-o,r-l):t===0?c=(s.getPixelForTick(1)-l)/2:c=(l-s.getPixelForTick(n-1))/2,l+=n<t?c:-c,l<o-a||l>r+a)))return l}function PD(s,t){U(s,e=>{const i=e.gc,n=i.length/2;let o;if(n>t){for(o=0;o<n;++o)delete e.data[i[o]];i.splice(0,n)}})}function Kn(s){return s.drawTicks?s.tickLength:0}function O_(s,t){if(!s.display)return 0;const e=lt(s.font,t),i=pt(s.padding);return(Q(s.text)?s.text.length:1)*e.lineHeight+i.height}function ND(s,t){return ni(s,{scale:t,type:"scale"})}function BD(s,t,e){return ni(s,{tick:e,index:t,type:"tick"})}function HD(s,t,e){let i=yc(s);return(e&&t!=="right"||!e&&t==="right")&&(i=$D(i)),i}function VD(s,t,e,i){const{top:n,left:o,bottom:r,right:a,chart:l}=s,{chartArea:c,scales:h}=l;let d=0,u,p,f;const b=r-n,v=a-o;if(s.isHorizontal()){if(p=gt(i,o,a),V(e)){const y=Object.keys(e)[0],T=e[y];f=h[y].getPixelForValue(T)+b-t}else e==="center"?f=(c.bottom+c.top)/2+b-t:f=k_(s,e,t);u=a-o}else{if(V(e)){const y=Object.keys(e)[0],T=e[y];p=h[y].getPixelForValue(T)-v+t}else e==="center"?p=(c.left+c.right)/2-v+t:p=k_(s,e,t);f=gt(i,r,n),d=e==="left"?-nt:nt}return{titleX:p,titleY:f,maxWidth:u,rotation:d}}class oi extends Xt{constructor(t){super(),this.id=t.id,this.type=t.type,this.options=void 0,this.ctx=t.ctx,this.chart=t.chart,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.width=void 0,this.height=void 0,this._margins={left:0,right:0,top:0,bottom:0},this.maxWidth=void 0,this.maxHeight=void 0,this.paddingTop=void 0,this.paddingBottom=void 0,this.paddingLeft=void 0,this.paddingRight=void 0,this.axis=void 0,this.labelRotation=void 0,this.min=void 0,this.max=void 0,this._range=void 0,this.ticks=[],this._gridLineItems=null,this._labelItems=null,this._labelSizes=null,this._length=0,this._maxLength=0,this._longestTextCache={},this._startPixel=void 0,this._endPixel=void 0,this._reversePixels=!1,this._userMax=void 0,this._userMin=void 0,this._suggestedMax=void 0,this._suggestedMin=void 0,this._ticksLength=0,this._borderValue=0,this._cache={},this._dataLimitsCached=!1,this.$context=void 0}init(t){this.options=t.setContext(this.getContext()),this.axis=t.axis,this._userMin=this.parse(t.min),this._userMax=this.parse(t.max),this._suggestedMin=this.parse(t.suggestedMin),this._suggestedMax=this.parse(t.suggestedMax)}parse(t,e){return t}getUserBounds(){let{_userMin:t,_userMax:e,_suggestedMin:i,_suggestedMax:n}=this;return t=zt(t,Number.POSITIVE_INFINITY),e=zt(e,Number.NEGATIVE_INFINITY),i=zt(i,Number.POSITIVE_INFINITY),n=zt(n,Number.NEGATIVE_INFINITY),{min:zt(t,i),max:zt(e,n),minDefined:rt(t),maxDefined:rt(e)}}getMinMax(t){let{min:e,max:i,minDefined:n,maxDefined:o}=this.getUserBounds(),r;if(n&&o)return{min:e,max:i};const a=this.getMatchingVisibleMetas();for(let l=0,c=a.length;l<c;++l)r=a[l].controller.getMinMax(this,t),n||(e=Math.min(e,r.min)),o||(i=Math.max(i,r.max));return e=o&&e>i?i:e,i=n&&e>i?e:i,{min:zt(e,zt(i,e)),max:zt(i,zt(e,i))}}getPadding(){return{left:this.paddingLeft||0,top:this.paddingTop||0,right:this.paddingRight||0,bottom:this.paddingBottom||0}}getTicks(){return this.ticks}getLabels(){const t=this.chart.data;return this.options.labels||(this.isHorizontal()?t.xLabels:t.yLabels)||t.labels||[]}beforeLayout(){this._cache={},this._dataLimitsCached=!1}beforeUpdate(){G(this.options.beforeUpdate,[this])}update(t,e,i){const{beginAtZero:n,grace:o,ticks:r}=this.options,a=r.sampleSize;this.beforeUpdate(),this.maxWidth=t,this.maxHeight=e,this._margins=i=Object.assign({left:0,right:0,top:0,bottom:0},i),this.ticks=null,this._labelSizes=null,this._gridLineItems=null,this._labelItems=null,this.beforeSetDimensions(),this.setDimensions(),this.afterSetDimensions(),this._maxLength=this.isHorizontal()?this.width+i.left+i.right:this.height+i.top+i.bottom,this._dataLimitsCached||(this.beforeDataLimits(),this.determineDataLimits(),this.afterDataLimits(),this._range=vI(this,o,n),this._dataLimitsCached=!0),this.beforeBuildTicks(),this.ticks=this.buildTicks()||[],this.afterBuildTicks();const l=a<this.ticks.length;this._convertTicksToLabels(l?S_(this.ticks,a):this.ticks),this.configure(),this.beforeCalculateLabelRotation(),this.calculateLabelRotation(),this.afterCalculateLabelRotation(),r.display&&(r.autoSkip||r.source==="auto")&&(this.ticks=SD(this,this.ticks),this._labelSizes=null,this.afterAutoSkip()),l&&this._convertTicksToLabels(this.ticks),this.beforeFit(),this.fit(),this.afterFit(),this.afterUpdate()}configure(){let t=this.options.reverse,e,i;this.isHorizontal()?(e=this.left,i=this.right):(e=this.top,i=this.bottom,t=!t),this._startPixel=e,this._endPixel=i,this._reversePixels=t,this._length=i-e,this._alignToPixels=this.options.alignToPixels}afterUpdate(){G(this.options.afterUpdate,[this])}beforeSetDimensions(){G(this.options.beforeSetDimensions,[this])}setDimensions(){this.isHorizontal()?(this.width=this.maxWidth,this.left=0,this.right=this.width):(this.height=this.maxHeight,this.top=0,this.bottom=this.height),this.paddingLeft=0,this.paddingTop=0,this.paddingRight=0,this.paddingBottom=0}afterSetDimensions(){G(this.options.afterSetDimensions,[this])}_callHooks(t){this.chart.notifyPlugins(t,this.getContext()),G(this.options[t],[this])}beforeDataLimits(){this._callHooks("beforeDataLimits")}determineDataLimits(){}afterDataLimits(){this._callHooks("afterDataLimits")}beforeBuildTicks(){this._callHooks("beforeBuildTicks")}buildTicks(){return[]}afterBuildTicks(){this._callHooks("afterBuildTicks")}beforeTickToLabelConversion(){G(this.options.beforeTickToLabelConversion,[this])}generateTickLabels(t){const e=this.options.ticks;let i,n,o;for(i=0,n=t.length;i<n;i++)o=t[i],o.label=G(e.callback,[o.value,i,t],this)}afterTickToLabelConversion(){G(this.options.afterTickToLabelConversion,[this])}beforeCalculateLabelRotation(){G(this.options.beforeCalculateLabelRotation,[this])}calculateLabelRotation(){const t=this.options,e=t.ticks,i=this.ticks.length,n=e.minRotation||0,o=e.maxRotation;let r=n,a,l,c;if(!this._isVisible()||!e.display||n>=o||i<=1||!this.isHorizontal()){this.labelRotation=n;return}const h=this._getLabelSizes(),d=h.widest.width,u=h.highest.height,p=dt(this.chart.width-d,0,this.maxWidth);a=t.offset?this.maxWidth/i:p/(i-1),d+6>a&&(a=p/(i-(t.offset?.5:1)),l=this.maxHeight-Kn(t.grid)-e.padding-O_(t.title,this.chart.options.font),c=Math.sqrt(d*d+u*u),r=mc(Math.min(Math.asin(dt((h.highest.height+6)/a,-1,1)),Math.asin(dt(l/c,-1,1))-Math.asin(dt(u/c,-1,1)))),r=Math.max(n,Math.min(o,r))),this.labelRotation=r}afterCalculateLabelRotation(){G(this.options.afterCalculateLabelRotation,[this])}afterAutoSkip(){}beforeFit(){G(this.options.beforeFit,[this])}fit(){const t={width:0,height:0},{chart:e,options:{ticks:i,title:n,grid:o}}=this,r=this._isVisible(),a=this.isHorizontal();if(r){const l=O_(n,e.options.font);if(a?(t.width=this.maxWidth,t.height=Kn(o)+l):(t.height=this.maxHeight,t.width=Kn(o)+l),i.display&&this.ticks.length){const{first:c,last:h,widest:d,highest:u}=this._getLabelSizes(),p=i.padding*2,f=se(this.labelRotation),b=Math.cos(f),v=Math.sin(f);if(a){const y=i.mirror?0:v*d.width+b*u.height;t.height=Math.min(this.maxHeight,t.height+y+p)}else{const y=i.mirror?0:b*d.width+v*u.height;t.width=Math.min(this.maxWidth,t.width+y+p)}this._calculatePadding(c,h,v,b)}}this._handleMargins(),a?(this.width=this._length=e.width-this._margins.left-this._margins.right,this.height=t.height):(this.width=t.width,this.height=this._length=e.height-this._margins.top-this._margins.bottom)}_calculatePadding(t,e,i,n){const{ticks:{align:o,padding:r},position:a}=this.options,l=this.labelRotation!==0,c=a!=="top"&&this.axis==="x";if(this.isHorizontal()){const h=this.getPixelForTick(0)-this.left,d=this.right-this.getPixelForTick(this.ticks.length-1);let u=0,p=0;l?c?(u=n*t.width,p=i*e.height):(u=i*t.height,p=n*e.width):o==="start"?p=e.width:o==="end"?u=t.width:o!=="inner"&&(u=t.width/2,p=e.width/2),this.paddingLeft=Math.max((u-h+r)*this.width/(this.width-h),0),this.paddingRight=Math.max((p-d+r)*this.width/(this.width-d),0)}else{let h=e.height/2,d=t.height/2;o==="start"?(h=0,d=t.height):o==="end"&&(h=e.height,d=0),this.paddingTop=h+r,this.paddingBottom=d+r}}_handleMargins(){this._margins&&(this._margins.left=Math.max(this.paddingLeft,this._margins.left),this._margins.top=Math.max(this.paddingTop,this._margins.top),this._margins.right=Math.max(this.paddingRight,this._margins.right),this._margins.bottom=Math.max(this.paddingBottom,this._margins.bottom))}afterFit(){G(this.options.afterFit,[this])}isHorizontal(){const{axis:t,position:e}=this.options;return e==="top"||e==="bottom"||t==="x"}isFullSize(){return this.options.fullSize}_convertTicksToLabels(t){this.beforeTickToLabelConversion(),this.generateTickLabels(t);let e,i;for(e=0,i=t.length;e<i;e++)H(t[e].label)&&(t.splice(e,1),i--,e--);this.afterTickToLabelConversion()}_getLabelSizes(){let t=this._labelSizes;if(!t){const e=this.options.ticks.sampleSize;let i=this.ticks;e<i.length&&(i=S_(i,e)),this._labelSizes=t=this._computeLabelSizes(i,i.length)}return t}_computeLabelSizes(t,e){const{ctx:i,_longestTextCache:n}=this,o=[],r=[];let a=0,l=0,c,h,d,u,p,f,b,v,y,T,x;for(c=0;c<e;++c){if(u=t[c].label,p=this._resolveTickFontOptions(c),i.font=f=p.string,b=n[f]=n[f]||{data:{},gc:[]},v=p.lineHeight,y=T=0,!H(u)&&!Q(u))y=Gr(i,b.data,b.gc,y,u),T=v;else if(Q(u))for(h=0,d=u.length;h<d;++h)x=u[h],!H(x)&&!Q(x)&&(y=Gr(i,b.data,b.gc,y,x),T+=v);o.push(y),r.push(T),a=Math.max(y,a),l=Math.max(T,l)}PD(n,e);const E=o.indexOf(a),C=r.indexOf(l),A=w=>({width:o[w]||0,height:r[w]||0});return{first:A(0),last:A(e-1),widest:A(E),highest:A(C),widths:o,heights:r}}getLabelForValue(t){return t}getPixelForValue(t,e){return NaN}getValueForPixel(t){}getPixelForTick(t){const e=this.ticks;return t<0||t>e.length-1?null:this.getPixelForValue(e[t].value)}getPixelForDecimal(t){this._reversePixels&&(t=1-t);const e=this._startPixel+t*this._length;return $O(this._alignToPixels?Mi(this.chart,e,0):e)}getDecimalForPixel(t){const e=(t-this._startPixel)/this._length;return this._reversePixels?1-e:e}getBasePixel(){return this.getPixelForValue(this.getBaseValue())}getBaseValue(){const{min:t,max:e}=this;return t<0&&e<0?e:t>0&&e>0?t:0}getContext(t){const e=this.ticks||[];if(t>=0&&t<e.length){const i=e[t];return i.$context||(i.$context=BD(this.getContext(),t,i))}return this.$context||(this.$context=ND(this.chart.getContext(),this))}_tickSize(){const t=this.options.ticks,e=se(this.labelRotation),i=Math.abs(Math.cos(e)),n=Math.abs(Math.sin(e)),o=this._getLabelSizes(),r=t.autoSkipPadding||0,a=o?o.widest.width+r:0,l=o?o.highest.height+r:0;return this.isHorizontal()?l*i>a*n?a/i:l/n:l*n<a*i?l/i:a/n}_isVisible(){const t=this.options.display;return t!=="auto"?!!t:this.getMatchingVisibleMetas().length>0}_computeGridLineItems(t){const e=this.axis,i=this.chart,n=this.options,{grid:o,position:r}=n,a=o.offset,l=this.isHorizontal(),h=this.ticks.length+(a?1:0),d=Kn(o),u=[],p=o.setContext(this.getContext()),f=p.drawBorder?p.borderWidth:0,b=f/2,v=function(R){return Mi(i,R,f)};let y,T,x,E,C,A,w,S,k,D,I,M;if(r==="top")y=v(this.bottom),A=this.bottom-d,S=y-b,D=v(t.top)+b,M=t.bottom;else if(r==="bottom")y=v(this.top),D=t.top,M=v(t.bottom)-b,A=y+b,S=this.top+d;else if(r==="left")y=v(this.right),C=this.right-d,w=y-b,k=v(t.left)+b,I=t.right;else if(r==="right")y=v(this.left),k=t.left,I=v(t.right)-b,C=y+b,w=this.left+d;else if(e==="x"){if(r==="center")y=v((t.top+t.bottom)/2+.5);else if(V(r)){const R=Object.keys(r)[0],z=r[R];y=v(this.chart.scales[R].getPixelForValue(z))}D=t.top,M=t.bottom,A=y+b,S=A+d}else if(e==="y"){if(r==="center")y=v((t.left+t.right)/2);else if(V(r)){const R=Object.keys(r)[0],z=r[R];y=v(this.chart.scales[R].getPixelForValue(z))}C=y-b,w=C-d,k=t.left,I=t.right}const P=B(n.ticks.maxTicksLimit,h),X=Math.max(1,Math.ceil(h/P));for(T=0;T<h;T+=X){const R=o.setContext(this.getContext(T)),z=R.lineWidth,Y=R.color,Gt=R.borderDash||[],oe=R.borderDashOffset,re=R.tickWidth,li=R.tickColor,qt=R.tickBorderDash||[],Ae=R.tickBorderDashOffset;x=RD(this,T,a),x!==void 0&&(E=Mi(i,x,z),l?C=w=k=I=E:A=S=D=M=E,u.push({tx1:C,ty1:A,tx2:w,ty2:S,x1:k,y1:D,x2:I,y2:M,width:z,color:Y,borderDash:Gt,borderDashOffset:oe,tickWidth:re,tickColor:li,tickBorderDash:qt,tickBorderDashOffset:Ae}))}return this._ticksLength=h,this._borderValue=y,u}_computeLabelItems(t){const e=this.axis,i=this.options,{position:n,ticks:o}=i,r=this.isHorizontal(),a=this.ticks,{align:l,crossAlign:c,padding:h,mirror:d}=o,u=Kn(i.grid),p=u+h,f=d?-h:p,b=-se(this.labelRotation),v=[];let y,T,x,E,C,A,w,S,k,D,I,M,P="middle";if(n==="top")A=this.bottom-f,w=this._getXAxisLabelAlignment();else if(n==="bottom")A=this.top+f,w=this._getXAxisLabelAlignment();else if(n==="left"){const R=this._getYAxisLabelAlignment(u);w=R.textAlign,C=R.x}else if(n==="right"){const R=this._getYAxisLabelAlignment(u);w=R.textAlign,C=R.x}else if(e==="x"){if(n==="center")A=(t.top+t.bottom)/2+p;else if(V(n)){const R=Object.keys(n)[0],z=n[R];A=this.chart.scales[R].getPixelForValue(z)+p}w=this._getXAxisLabelAlignment()}else if(e==="y"){if(n==="center")C=(t.left+t.right)/2-p;else if(V(n)){const R=Object.keys(n)[0],z=n[R];C=this.chart.scales[R].getPixelForValue(z)}w=this._getYAxisLabelAlignment(u).textAlign}e==="y"&&(l==="start"?P="top":l==="end"&&(P="bottom"));const X=this._getLabelSizes();for(y=0,T=a.length;y<T;++y){x=a[y],E=x.label;const R=o.setContext(this.getContext(y));S=this.getPixelForTick(y)+o.labelOffset,k=this._resolveTickFontOptions(y),D=k.lineHeight,I=Q(E)?E.length:1;const z=I/2,Y=R.color,Gt=R.textStrokeColor,oe=R.textStrokeWidth;let re=w;r?(C=S,w==="inner"&&(y===T-1?re=this.options.reverse?"left":"right":y===0?re=this.options.reverse?"right":"left":re="center"),n==="top"?c==="near"||b!==0?M=-I*D+D/2:c==="center"?M=-X.highest.height/2-z*D+D:M=-X.highest.height+D/2:c==="near"||b!==0?M=D/2:c==="center"?M=X.highest.height/2-z*D:M=X.highest.height-I*D,d&&(M*=-1)):(A=S,M=(1-I)*D/2);let li;if(R.showLabelBackdrop){const qt=pt(R.backdropPadding),Ae=X.heights[y],we=X.widths[y];let Zt=A+M-qt.top,Pe=C-qt.left;switch(P){case"middle":Zt-=Ae/2;break;case"bottom":Zt-=Ae;break}switch(w){case"center":Pe-=we/2;break;case"right":Pe-=we;break}li={left:Pe,top:Zt,width:we+qt.width,height:Ae+qt.height,color:R.backdropColor}}v.push({rotation:b,label:E,font:k,color:Y,strokeColor:Gt,strokeWidth:oe,textOffset:M,textAlign:re,textBaseline:P,translation:[C,A],backdrop:li})}return v}_getXAxisLabelAlignment(){const{position:t,ticks:e}=this.options;if(-se(this.labelRotation))return t==="top"?"left":"right";let n="center";return e.align==="start"?n="left":e.align==="end"?n="right":e.align==="inner"&&(n="inner"),n}_getYAxisLabelAlignment(t){const{position:e,ticks:{crossAlign:i,mirror:n,padding:o}}=this.options,r=this._getLabelSizes(),a=t+o,l=r.widest.width;let c,h;return e==="left"?n?(h=this.right+o,i==="near"?c="left":i==="center"?(c="center",h+=l/2):(c="right",h+=l)):(h=this.right-a,i==="near"?c="right":i==="center"?(c="center",h-=l/2):(c="left",h=this.left)):e==="right"?n?(h=this.left+o,i==="near"?c="right":i==="center"?(c="center",h-=l/2):(c="left",h-=l)):(h=this.left+a,i==="near"?c="left":i==="center"?(c="center",h+=l/2):(c="right",h=this.right)):c="right",{textAlign:c,x:h}}_computeLabelArea(){if(this.options.ticks.mirror)return;const t=this.chart,e=this.options.position;if(e==="left"||e==="right")return{top:0,left:this.left,bottom:t.height,right:this.right};if(e==="top"||e==="bottom")return{top:this.top,left:0,bottom:this.bottom,right:t.width}}drawBackground(){const{ctx:t,options:{backgroundColor:e},left:i,top:n,width:o,height:r}=this;e&&(t.save(),t.fillStyle=e,t.fillRect(i,n,o,r),t.restore())}getLineWidthForValue(t){const e=this.options.grid;if(!this._isVisible()||!e.display)return 0;const n=this.ticks.findIndex(o=>o.value===t);return n>=0?e.setContext(this.getContext(n)).lineWidth:0}drawGrid(t){const e=this.options.grid,i=this.ctx,n=this._gridLineItems||(this._gridLineItems=this._computeGridLineItems(t));let o,r;const a=(l,c,h)=>{!h.width||!h.color||(i.save(),i.lineWidth=h.width,i.strokeStyle=h.color,i.setLineDash(h.borderDash||[]),i.lineDashOffset=h.borderDashOffset,i.beginPath(),i.moveTo(l.x,l.y),i.lineTo(c.x,c.y),i.stroke(),i.restore())};if(e.display)for(o=0,r=n.length;o<r;++o){const l=n[o];e.drawOnChartArea&&a({x:l.x1,y:l.y1},{x:l.x2,y:l.y2},l),e.drawTicks&&a({x:l.tx1,y:l.ty1},{x:l.tx2,y:l.ty2},{color:l.tickColor,width:l.tickWidth,borderDash:l.tickBorderDash,borderDashOffset:l.tickBorderDashOffset})}}drawBorder(){const{chart:t,ctx:e,options:{grid:i}}=this,n=i.setContext(this.getContext()),o=i.drawBorder?n.borderWidth:0;if(!o)return;const r=i.setContext(this.getContext(0)).lineWidth,a=this._borderValue;let l,c,h,d;this.isHorizontal()?(l=Mi(t,this.left,o)-o/2,c=Mi(t,this.right,r)+r/2,h=d=a):(h=Mi(t,this.top,o)-o/2,d=Mi(t,this.bottom,r)+r/2,l=c=a),e.save(),e.lineWidth=n.borderWidth,e.strokeStyle=n.borderColor,e.beginPath(),e.moveTo(l,h),e.lineTo(c,d),e.stroke(),e.restore()}drawLabels(t){if(!this.options.ticks.display)return;const i=this.ctx,n=this._computeLabelArea();n&&qr(i,n);const o=this._labelItems||(this._labelItems=this._computeLabelItems(t));let r,a;for(r=0,a=o.length;r<a;++r){const l=o[r],c=l.font,h=l.label;l.backdrop&&(i.fillStyle=l.backdrop.color,i.fillRect(l.backdrop.left,l.backdrop.top,l.backdrop.width,l.backdrop.height));let d=l.textOffset;Li(i,h,0,d,c,l)}n&&Zr(i)}drawTitle(){const{ctx:t,options:{position:e,title:i,reverse:n}}=this;if(!i.display)return;const o=lt(i.font),r=pt(i.padding),a=i.align;let l=o.lineHeight/2;e==="bottom"||e==="center"||V(e)?(l+=r.bottom,Q(i.text)&&(l+=o.lineHeight*(i.text.length-1))):l+=r.top;const{titleX:c,titleY:h,maxWidth:d,rotation:u}=VD(this,l,e,a);Li(t,i.text,0,0,o,{color:i.color,maxWidth:d,rotation:u,textAlign:HD(a,e,n),textBaseline:"middle",translation:[c,h]})}draw(t){this._isVisible()&&(this.drawBackground(),this.drawGrid(t),this.drawBorder(),this.drawTitle(),this.drawLabels(t))}_layers(){const t=this.options,e=t.ticks&&t.ticks.z||0,i=B(t.grid&&t.grid.z,-1);return!this._isVisible()||this.draw!==oi.prototype.draw?[{z:e,draw:n=>{this.draw(n)}}]:[{z:i,draw:n=>{this.drawBackground(),this.drawGrid(n),this.drawTitle()}},{z:i+1,draw:()=>{this.drawBorder()}},{z:e,draw:n=>{this.drawLabels(n)}}]}getMatchingVisibleMetas(t){const e=this.chart.getSortedVisibleDatasetMetas(),i=this.axis+"AxisID",n=[];let o,r;for(o=0,r=e.length;o<r;++o){const a=e[o];a[i]===this.id&&(!t||a.type===t)&&n.push(a)}return n}_resolveTickFontOptions(t){const e=this.options.ticks.setContext(this.getContext(t));return lt(e.font)}_maxDigits(){const t=this._resolveTickFontOptions(0).lineHeight;return(this.isHorizontal()?this.width:this.height)/t}}class sa{constructor(t,e,i){this.type=t,this.scope=e,this.override=i,this.items=Object.create(null)}isForType(t){return Object.prototype.isPrototypeOf.call(this.type.prototype,t.prototype)}register(t){const e=Object.getPrototypeOf(t);let i;zD(e)&&(i=this.register(e));const n=this.items,o=t.id,r=this.scope+"."+o;if(!o)throw new Error("class does not have id: "+t);return o in n||(n[o]=t,FD(t,r,i),this.override&&F.override(t.id,t.overrides)),r}get(t){return this.items[t]}unregister(t){const e=this.items,i=t.id,n=this.scope;i in e&&delete e[i],n&&i in F[n]&&(delete F[n][i],this.override&&delete Di[i])}}function FD(s,t,e){const i=Te(Object.create(null),[e?F.get(e):{},F.get(t),s.defaults]);F.set(t,i),s.defaultRoutes&&WD(t,s.defaultRoutes),s.descriptors&&F.describe(t,s.descriptors)}function WD(s,t){Object.keys(t).forEach(e=>{const i=e.split("."),n=i.pop(),o=[s].concat(i).join("."),r=t[e].split("."),a=r.pop(),l=r.join(".");F.route(o,n,l,a)})}function zD(s){return"id"in s&&"defaults"in s}class jD{constructor(){this.controllers=new sa(Ut,"datasets",!0),this.elements=new sa(Xt,"elements"),this.plugins=new sa(Object,"plugins"),this.scales=new sa(oi,"scales"),this._typedRegistries=[this.controllers,this.scales,this.elements]}add(...t){this._each("register",t)}remove(...t){this._each("unregister",t)}addControllers(...t){this._each("register",t,this.controllers)}addElements(...t){this._each("register",t,this.elements)}addPlugins(...t){this._each("register",t,this.plugins)}addScales(...t){this._each("register",t,this.scales)}getController(t){return this._get(t,this.controllers,"controller")}getElement(t){return this._get(t,this.elements,"element")}getPlugin(t){return this._get(t,this.plugins,"plugin")}getScale(t){return this._get(t,this.scales,"scale")}removeControllers(...t){this._each("unregister",t,this.controllers)}removeElements(...t){this._each("unregister",t,this.elements)}removePlugins(...t){this._each("unregister",t,this.plugins)}removeScales(...t){this._each("unregister",t,this.scales)}_each(t,e,i){[...e].forEach(n=>{const o=i||this._getRegistryForType(n);i||o.isForType(n)||o===this.plugins&&n.id?this._exec(t,o,n):U(n,r=>{const a=i||this._getRegistryForType(r);this._exec(t,a,r)})})}_exec(t,e,i){const n=gc(t);G(i["before"+n],[],i),e[t](i),G(i["after"+n],[],i)}_getRegistryForType(t){for(let e=0;e<this._typedRegistries.length;e++){const i=this._typedRegistries[e];if(i.isForType(t))return i}return this.plugins}_get(t,e,i){const n=e.get(t);if(n===void 0)throw new Error('"'+t+'" is not a registered '+i+".");return n}}var ne=new jD;class Un extends Ut{update(t){const e=this._cachedMeta,{data:i=[]}=e,n=this.chart._animationsDisabled;let{start:o,count:r}=If(e,i,n);if(this._drawStart=o,this._drawCount=r,Df(e)&&(o=0,r=i.length),this.options.showLine){const{dataset:a,_dataset:l}=e;a._chart=this.chart,a._datasetIndex=this.index,a._decimated=!!l._decimated,a.points=i;const c=this.resolveDatasetElementOptions(t);c.segment=this.options.segment,this.updateElement(a,void 0,{animated:!n,options:c},t)}this.updateElements(i,o,r,t)}addElements(){const{showLine:t}=this.options;!this.datasetElementType&&t&&(this.datasetElementType=ne.getElement("line")),super.addElements()}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a,_stacked:l,_dataset:c}=this._cachedMeta,h=this.resolveDataElementOptions(e,n),d=this.getSharedOptions(h),u=this.includeOptions(n,d),p=r.axis,f=a.axis,{spanGaps:b,segment:v}=this.options,y=As(b)?b:Number.POSITIVE_INFINITY,T=this.chart._animationsDisabled||o||n==="none";let x=e>0&&this.getParsed(e-1);for(let E=e;E<e+i;++E){const C=t[E],A=this.getParsed(E),w=T?C:{},S=H(A[f]),k=w[p]=r.getPixelForValue(A[p],E),D=w[f]=o||S?a.getBasePixel():a.getPixelForValue(l?this.applyStack(a,A,l):A[f],E);w.skip=isNaN(k)||isNaN(D)||S,w.stop=E>0&&Math.abs(A[p]-x[p])>y,v&&(w.parsed=A,w.raw=c.data[E]),u&&(w.options=d||this.resolveDataElementOptions(E,C.active?"active":n)),T||this.updateElement(C,E,w,n),x=A}this.updateSharedOptions(d,n,h)}getMaxOverflow(){const t=this._cachedMeta,e=t.data||[];if(!this.options.showLine){let a=0;for(let l=e.length-1;l>=0;--l)a=Math.max(a,e[l].size(this.resolveDataElementOptions(l))/2);return a>0&&a}const i=t.dataset,n=i.options&&i.options.borderWidth||0;if(!e.length)return n;const o=e[0].size(this.resolveDataElementOptions(0)),r=e[e.length-1].size(this.resolveDataElementOptions(e.length-1));return Math.max(n,o,r)/2}}Un.id="scatter",Un.defaults={datasetElementType:!1,dataElementType:"point",showLine:!1,fill:!1},Un.overrides={interaction:{mode:"point"},plugins:{tooltip:{callbacks:{title(){return""},label(s){return"("+s.label+", "+s.formattedValue+")"}}}},scales:{x:{type:"linear"},y:{type:"linear"}}};var I_=Object.freeze({__proto__:null,BarController:Vn,BubbleController:Fn,DoughnutController:Bi,LineController:Wn,PolarAreaController:zn,PieController:ea,RadarController:jn,ScatterController:Un});function Hi(){throw new Error("This method is not implemented: Check that a complete date adapter is provided.")}class Vc{constructor(t){this.options=t||{}}init(t){}formats(){return Hi()}parse(t,e){return Hi()}format(t,e){return Hi()}add(t,e,i){return Hi()}diff(t,e,i){return Hi()}startOf(t,e,i){return Hi()}endOf(t,e){return Hi()}}Vc.override=function(s){Object.assign(Vc.prototype,s)};var D_={_date:Vc};function YD(s,t,e,i){const{controller:n,data:o,_sorted:r}=s,a=n._cachedMeta.iScale;if(a&&t===a.axis&&t!=="r"&&r&&o.length){const l=a._reversePixels?RO:De;if(i){if(n._sharedOptions){const c=o[0],h=typeof c.getRange=="function"&&c.getRange(t);if(h){const d=l(o,t,e-h),u=l(o,t,e+h);return{lo:d.lo,hi:u.hi}}}}else return l(o,t,e)}return{lo:0,hi:o.length-1}}function Xn(s,t,e,i,n){const o=s.getSortedVisibleDatasetMetas(),r=e[t];for(let a=0,l=o.length;a<l;++a){const{index:c,data:h}=o[a],{lo:d,hi:u}=YD(o[a],t,r,n);for(let p=d;p<=u;++p){const f=h[p];f.skip||i(f,c,p)}}}function KD(s){const t=s.indexOf("x")!==-1,e=s.indexOf("y")!==-1;return function(i,n){const o=t?Math.abs(i.x-n.x):0,r=e?Math.abs(i.y-n.y):0;return Math.sqrt(Math.pow(o,2)+Math.pow(r,2))}}function Fc(s,t,e,i,n){const o=[];return!n&&!s.isPointInArea(t)||Xn(s,e,t,function(a,l,c){!n&&!Pn(a,s.chartArea,0)||a.inRange(t.x,t.y,i)&&o.push({element:a,datasetIndex:l,index:c})},!0),o}function UD(s,t,e,i){let n=[];function o(r,a,l){const{startAngle:c,endAngle:h}=r.getProps(["startAngle","endAngle"],i),{angle:d}=Cf(r,{x:t.x,y:t.y});Dn(d,c,h)&&n.push({element:r,datasetIndex:a,index:l})}return Xn(s,e,t,o),n}function XD(s,t,e,i,n,o){let r=[];const a=KD(e);let l=Number.POSITIVE_INFINITY;function c(h,d,u){const p=h.inRange(t.x,t.y,n);if(i&&!p)return;const f=h.getCenterPoint(n);if(!(!!o||s.isPointInArea(f))&&!p)return;const v=a(t,f);v<l?(r=[{element:h,datasetIndex:d,index:u}],l=v):v===l&&r.push({element:h,datasetIndex:d,index:u})}return Xn(s,e,t,c),r}function Wc(s,t,e,i,n,o){return!o&&!s.isPointInArea(t)?[]:e==="r"&&!i?UD(s,t,e,n):XD(s,t,e,i,n,o)}function M_(s,t,e,i,n){const o=[],r=e==="x"?"inXRange":"inYRange";let a=!1;return Xn(s,e,t,(l,c,h)=>{l[r](t[e],n)&&(o.push({element:l,datasetIndex:c,index:h}),a=a||l.inRange(t.x,t.y,n))}),i&&!a?[]:o}var L_={evaluateInteractionItems:Xn,modes:{index(s,t,e,i){const n=Pi(t,s),o=e.axis||"x",r=e.includeInvisible||!1,a=e.intersect?Fc(s,n,o,i,r):Wc(s,n,o,!1,i,r),l=[];return a.length?(s.getSortedVisibleDatasetMetas().forEach(c=>{const h=a[0].index,d=c.data[h];d&&!d.skip&&l.push({element:d,datasetIndex:c.index,index:h})}),l):[]},dataset(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;let a=e.intersect?Fc(s,n,o,i,r):Wc(s,n,o,!1,i,r);if(a.length>0){const l=a[0].datasetIndex,c=s.getDatasetMeta(l).data;a=[];for(let h=0;h<c.length;++h)a.push({element:c[h],datasetIndex:l,index:h})}return a},point(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;return Fc(s,n,o,i,r)},nearest(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;return Wc(s,n,o,e.intersect,i,r)},x(s,t,e,i){const n=Pi(t,s);return M_(s,n,"x",e.intersect,i)},y(s,t,e,i){const n=Pi(t,s);return M_(s,n,"y",e.intersect,i)}}};const $_=["left","top","right","bottom"];function Gn(s,t){return s.filter(e=>e.pos===t)}function R_(s,t){return s.filter(e=>$_.indexOf(e.pos)===-1&&e.box.axis===t)}function qn(s,t){return s.sort((e,i)=>{const n=t?i:e,o=t?e:i;return n.weight===o.weight?n.index-o.index:n.weight-o.weight})}function GD(s){const t=[];let e,i,n,o,r,a;for(e=0,i=(s||[]).length;e<i;++e)n=s[e],{position:o,options:{stack:r,stackWeight:a=1}}=n,t.push({index:e,box:n,pos:o,horizontal:n.isHorizontal(),weight:n.weight,stack:r&&o+r,stackWeight:a});return t}function qD(s){const t={};for(const e of s){const{stack:i,pos:n,stackWeight:o}=e;if(!i||!$_.includes(n))continue;const r=t[i]||(t[i]={count:0,placed:0,weight:0,size:0});r.count++,r.weight+=o}return t}function ZD(s,t){const e=qD(s),{vBoxMaxWidth:i,hBoxMaxHeight:n}=t;let o,r,a;for(o=0,r=s.length;o<r;++o){a=s[o];const{fullSize:l}=a.box,c=e[a.stack],h=c&&a.stackWeight/c.weight;a.horizontal?(a.width=h?h*i:l&&t.availableWidth,a.height=n):(a.width=i,a.height=h?h*n:l&&t.availableHeight)}return e}function QD(s){const t=GD(s),e=qn(t.filter(c=>c.box.fullSize),!0),i=qn(Gn(t,"left"),!0),n=qn(Gn(t,"right")),o=qn(Gn(t,"top"),!0),r=qn(Gn(t,"bottom")),a=R_(t,"x"),l=R_(t,"y");return{fullSize:e,leftAndTop:i.concat(o),rightAndBottom:n.concat(l).concat(r).concat(a),chartArea:Gn(t,"chartArea"),vertical:i.concat(n).concat(l),horizontal:o.concat(r).concat(a)}}function P_(s,t,e,i){return Math.max(s[e],t[e])+Math.max(s[i],t[i])}function N_(s,t){s.top=Math.max(s.top,t.top),s.left=Math.max(s.left,t.left),s.bottom=Math.max(s.bottom,t.bottom),s.right=Math.max(s.right,t.right)}function JD(s,t,e,i){const{pos:n,box:o}=e,r=s.maxPadding;if(!V(n)){e.size&&(s[n]-=e.size);const d=i[e.stack]||{size:0,count:1};d.size=Math.max(d.size,e.horizontal?o.height:o.width),e.size=d.size/d.count,s[n]+=e.size}o.getPadding&&N_(r,o.getPadding());const a=Math.max(0,t.outerWidth-P_(r,s,"left","right")),l=Math.max(0,t.outerHeight-P_(r,s,"top","bottom")),c=a!==s.w,h=l!==s.h;return s.w=a,s.h=l,e.horizontal?{same:c,other:h}:{same:h,other:c}}function t1(s){const t=s.maxPadding;function e(i){const n=Math.max(t[i]-s[i],0);return s[i]+=n,n}s.y+=e("top"),s.x+=e("left"),e("right"),e("bottom")}function e1(s,t){const e=t.maxPadding;function i(n){const o={left:0,top:0,right:0,bottom:0};return n.forEach(r=>{o[r]=Math.max(t[r],e[r])}),o}return i(s?["left","right"]:["top","bottom"])}function Zn(s,t,e,i){const n=[];let o,r,a,l,c,h;for(o=0,r=s.length,c=0;o<r;++o){a=s[o],l=a.box,l.update(a.width||t.w,a.height||t.h,e1(a.horizontal,t));const{same:d,other:u}=JD(t,e,a,i);c|=d&&n.length,h=h||u,l.fullSize||n.push(a)}return c&&Zn(n,t,e,i)||h}function na(s,t,e,i,n){s.top=e,s.left=t,s.right=t+i,s.bottom=e+n,s.width=i,s.height=n}function B_(s,t,e,i){const n=e.padding;let{x:o,y:r}=t;for(const a of s){const l=a.box,c=i[a.stack]||{count:1,placed:0,weight:1},h=a.stackWeight/c.weight||1;if(a.horizontal){const d=t.w*h,u=c.size||l.height;jt(c.start)&&(r=c.start),l.fullSize?na(l,n.left,r,e.outerWidth-n.right-n.left,u):na(l,t.left+c.placed,r,d,u),c.start=r,c.placed+=d,r=l.bottom}else{const d=t.h*h,u=c.size||l.width;jt(c.start)&&(o=c.start),l.fullSize?na(l,o,n.top,u,e.outerHeight-n.bottom-n.top):na(l,o,t.top+c.placed,u,d),c.start=o,c.placed+=d,o=l.right}}t.x=o,t.y=r}F.set("layout",{autoPadding:!0,padding:{top:0,right:0,bottom:0,left:0}});var ft={addBox(s,t){s.boxes||(s.boxes=[]),t.fullSize=t.fullSize||!1,t.position=t.position||"top",t.weight=t.weight||0,t._layers=t._layers||function(){return[{z:0,draw(e){t.draw(e)}}]},s.boxes.push(t)},removeBox(s,t){const e=s.boxes?s.boxes.indexOf(t):-1;e!==-1&&s.boxes.splice(e,1)},configure(s,t,e){t.fullSize=e.fullSize,t.position=e.position,t.weight=e.weight},update(s,t,e,i){if(!s)return;const n=pt(s.options.layout.padding),o=Math.max(t-n.width,0),r=Math.max(e-n.height,0),a=QD(s.boxes),l=a.vertical,c=a.horizontal;U(s.boxes,b=>{typeof b.beforeLayout=="function"&&b.beforeLayout()});const h=l.reduce((b,v)=>v.box.options&&v.box.options.display===!1?b:b+1,0)||1,d=Object.freeze({outerWidth:t,outerHeight:e,padding:n,availableWidth:o,availableHeight:r,vBoxMaxWidth:o/2/h,hBoxMaxHeight:r/2}),u=Object.assign({},n);N_(u,pt(i));const p=Object.assign({maxPadding:u,w:o,h:r,x:n.left,y:n.top},n),f=ZD(l.concat(c),d);Zn(a.fullSize,p,d,f),Zn(l,p,d,f),Zn(c,p,d,f)&&Zn(l,p,d,f),t1(p),B_(a.leftAndTop,p,d,f),p.x+=p.w,p.y+=p.h,B_(a.rightAndBottom,p,d,f),s.chartArea={left:p.left,top:p.top,right:p.left+p.w,bottom:p.top+p.h,height:p.h,width:p.w},U(a.chartArea,b=>{const v=b.box;Object.assign(v,s.chartArea),v.update(p.w,p.h,{left:0,top:0,right:0,bottom:0})})}};class zc{acquireContext(t,e){}releaseContext(t){return!1}addEventListener(t,e,i){}removeEventListener(t,e,i){}getDevicePixelRatio(){return 1}getMaximumSize(t,e,i,n){return e=Math.max(0,e||t.width),i=i||t.height,{width:e,height:Math.max(0,n?Math.floor(e/n):i)}}isAttached(t){return!0}updateConfig(t){}}class H_ extends zc{acquireContext(t){return t&&t.getContext&&t.getContext("2d")||null}updateConfig(t){t.options.animation=!1}}const oa="$chartjs",i1={touchstart:"mousedown",touchmove:"mousemove",touchend:"mouseup",pointerenter:"mouseenter",pointerdown:"mousedown",pointermove:"mousemove",pointerup:"mouseup",pointerleave:"mouseout",pointerout:"mouseout"},V_=s=>s===null||s==="";function s1(s,t){const e=s.style,i=s.getAttribute("height"),n=s.getAttribute("width");if(s[oa]={initial:{height:i,width:n,style:{display:e.display,height:e.height,width:e.width}}},e.display=e.display||"block",e.boxSizing=e.boxSizing||"border-box",V_(n)){const o=s_(s,"width");o!==void 0&&(s.width=o)}if(V_(i))if(s.style.height==="")s.height=s.width/(t||2);else{const o=s_(s,"height");o!==void 0&&(s.height=o)}return s}const F_=WI?{passive:!0}:!1;function n1(s,t,e){s.addEventListener(t,e,F_)}function o1(s,t,e){s.canvas.removeEventListener(t,e,F_)}function r1(s,t){const e=i1[s.type]||s.type,{x:i,y:n}=Pi(s,t);return{type:e,chart:t,native:s,x:i!==void 0?i:null,y:n!==void 0?n:null}}function ra(s,t){for(const e of s)if(e===t||e.contains(t))return!0}function a1(s,t,e){const i=s.canvas,n=new MutationObserver(o=>{let r=!1;for(const a of o)r=r||ra(a.addedNodes,i),r=r&&!ra(a.removedNodes,i);r&&e()});return n.observe(document,{childList:!0,subtree:!0}),n}function l1(s,t,e){const i=s.canvas,n=new MutationObserver(o=>{let r=!1;for(const a of o)r=r||ra(a.removedNodes,i),r=r&&!ra(a.addedNodes,i);r&&e()});return n.observe(document,{childList:!0,subtree:!0}),n}const Qn=new Map;let W_=0;function z_(){const s=window.devicePixelRatio;s!==W_&&(W_=s,Qn.forEach((t,e)=>{e.currentDevicePixelRatio!==s&&t()}))}function c1(s,t){Qn.size||window.addEventListener("resize",z_),Qn.set(s,t)}function h1(s){Qn.delete(s),Qn.size||window.removeEventListener("resize",z_)}function d1(s,t,e){const i=s.canvas,n=i&&$c(i);if(!n)return;const o=Of((a,l)=>{const c=n.clientWidth;e(a,l),c<n.clientWidth&&e()},window),r=new ResizeObserver(a=>{const l=a[0],c=l.contentRect.width,h=l.contentRect.height;c===0&&h===0||o(c,h)});return r.observe(n),c1(s,o),r}function jc(s,t,e){e&&e.disconnect(),t==="resize"&&h1(s)}function u1(s,t,e){const i=s.canvas,n=Of(o=>{s.ctx!==null&&e(r1(o,s))},s,o=>{const r=o[0];return[r,r.offsetX,r.offsetY]});return n1(i,t,n),n}class j_ extends zc{acquireContext(t,e){const i=t&&t.getContext&&t.getContext("2d");return i&&i.canvas===t?(s1(t,e),i):null}releaseContext(t){const e=t.canvas;if(!e[oa])return!1;const i=e[oa].initial;["height","width"].forEach(o=>{const r=i[o];H(r)?e.removeAttribute(o):e.setAttribute(o,r)});const n=i.style||{};return Object.keys(n).forEach(o=>{e.style[o]=n[o]}),e.width=e.width,delete e[oa],!0}addEventListener(t,e,i){this.removeEventListener(t,e);const n=t.$proxies||(t.$proxies={}),r={attach:a1,detach:l1,resize:d1}[e]||u1;n[e]=r(t,e,i)}removeEventListener(t,e){const i=t.$proxies||(t.$proxies={}),n=i[e];if(!n)return;({attach:jc,detach:jc,resize:jc}[e]||o1)(t,e,n),i[e]=void 0}getDevicePixelRatio(){return window.devicePixelRatio}getMaximumSize(t,e,i,n){return FI(t,e,i,n)}isAttached(t){const e=$c(t);return!!(e&&e.isConnected)}}function Y_(s){return!e_()||typeof OffscreenCanvas<"u"&&s instanceof OffscreenCanvas?H_:j_}class p1{constructor(){this._init=[]}notify(t,e,i,n){e==="beforeInit"&&(this._init=this._createDescriptors(t,!0),this._notify(this._init,t,"install"));const o=n?this._descriptors(t).filter(n):this._descriptors(t),r=this._notify(o,t,e,i);return e==="afterDestroy"&&(this._notify(o,t,"stop"),this._notify(this._init,t,"uninstall")),r}_notify(t,e,i,n){n=n||{};for(const o of t){const r=o.plugin,a=r[i],l=[e,n,o.options];if(G(a,l,r)===!1&&n.cancelable)return!1}return!0}invalidate(){H(this._cache)||(this._oldCache=this._cache,this._cache=void 0)}_descriptors(t){if(this._cache)return this._cache;const e=this._cache=this._createDescriptors(t);return this._notifyStateChanges(t),e}_createDescriptors(t,e){const i=t&&t.config,n=B(i.options&&i.options.plugins,{}),o=f1(i);return n===!1&&!e?[]:g1(t,o,n,e)}_notifyStateChanges(t){const e=this._oldCache||[],i=this._cache,n=(o,r)=>o.filter(a=>!r.some(l=>a.plugin.id===l.plugin.id));this._notify(n(e,i),t,"stop"),this._notify(n(i,e),t,"start")}}function f1(s){const t={},e=[],i=Object.keys(ne.plugins.items);for(let o=0;o<i.length;o++)e.push(ne.getPlugin(i[o]));const n=s.plugins||[];for(let o=0;o<n.length;o++){const r=n[o];e.indexOf(r)===-1&&(e.push(r),t[r.id]=!0)}return{plugins:e,localIds:t}}function _1(s,t){return!t&&s===!1?null:s===!0?{}:s}function g1(s,{plugins:t,localIds:e},i,n){const o=[],r=s.getContext();for(const a of t){const l=a.id,c=_1(i[l],n);c!==null&&o.push({plugin:a,options:m1(s.config,{plugin:a,local:e[l]},c,r)})}return o}function m1(s,{plugin:t,local:e},i,n){const o=s.pluginScopeKeys(t),r=s.getOptionScopes(i,o);return e&&t.defaults&&r.push(t.defaults),s.createResolver(r,n,[""],{scriptable:!1,indexable:!1,allKeys:!0})}function Yc(s,t){const e=F.datasets[s]||{};return((t.datasets||{})[s]||{}).indexAxis||t.indexAxis||e.indexAxis||"x"}function b1(s,t){let e=s;return s==="_index_"?e=t:s==="_value_"&&(e=t==="x"?"y":"x"),e}function v1(s,t){return s===t?"_index_":"_value_"}function y1(s){if(s==="top"||s==="bottom")return"x";if(s==="left"||s==="right")return"y"}function Kc(s,t){return s==="x"||s==="y"?s:t.axis||y1(t.position)||s.charAt(0).toLowerCase()}function T1(s,t){const e=Di[s.type]||{scales:{}},i=t.scales||{},n=Yc(s.type,t),o=Object.create(null),r=Object.create(null);return Object.keys(i).forEach(a=>{const l=i[a];if(!V(l))return console.error(`Invalid scale configuration for scale: ${a}`);if(l._proxy)return console.warn(`Ignoring resolver passed as options for scale: ${a}`);const c=Kc(a,l),h=v1(c,n),d=e.scales||{};o[c]=o[c]||a,r[a]=Sn(Object.create(null),[{axis:c},l,d[c],d[h]])}),s.data.datasets.forEach(a=>{const l=a.type||s.type,c=a.indexAxis||Yc(l,t),d=(Di[l]||{}).scales||{};Object.keys(d).forEach(u=>{const p=b1(u,c),f=a[p+"AxisID"]||o[p]||p;r[f]=r[f]||Object.create(null),Sn(r[f],[{axis:p},i[f],d[u]])})}),Object.keys(r).forEach(a=>{const l=r[a];Sn(l,[F.scales[l.type],F.scale])}),r}function K_(s){const t=s.options||(s.options={});t.plugins=B(t.plugins,{}),t.scales=T1(s,t)}function U_(s){return s=s||{},s.datasets=s.datasets||[],s.labels=s.labels||[],s}function E1(s){return s=s||{},s.data=U_(s.data),K_(s),s}const X_=new Map,G_=new Set;function aa(s,t){let e=X_.get(s);return e||(e=t(),X_.set(s,e),G_.add(e)),e}const Jn=(s,t,e)=>{const i=ti(t,e);i!==void 0&&s.add(i)};class x1{constructor(t){this._config=E1(t),this._scopeCache=new Map,this._resolverCache=new Map}get platform(){return this._config.platform}get type(){return this._config.type}set type(t){this._config.type=t}get data(){return this._config.data}set data(t){this._config.data=U_(t)}get options(){return this._config.options}set options(t){this._config.options=t}get plugins(){return this._config.plugins}update(){const t=this._config;this.clearCache(),K_(t)}clearCache(){this._scopeCache.clear(),this._resolverCache.clear()}datasetScopeKeys(t){return aa(t,()=>[[`datasets.${t}`,""]])}datasetAnimationScopeKeys(t,e){return aa(`${t}.transition.${e}`,()=>[[`datasets.${t}.transitions.${e}`,`transitions.${e}`],[`datasets.${t}`,""]])}datasetElementScopeKeys(t,e){return aa(`${t}-${e}`,()=>[[`datasets.${t}.elements.${e}`,`datasets.${t}`,`elements.${e}`,""]])}pluginScopeKeys(t){const e=t.id,i=this.type;return aa(`${i}-plugin-${e}`,()=>[[`plugins.${e}`,...t.additionalOptionScopes||[]]])}_cachedScopes(t,e){const i=this._scopeCache;let n=i.get(t);return(!n||e)&&(n=new Map,i.set(t,n)),n}getOptionScopes(t,e,i){const{options:n,type:o}=this,r=this._cachedScopes(t,i),a=r.get(e);if(a)return a;const l=new Set;e.forEach(h=>{t&&(l.add(t),h.forEach(d=>Jn(l,t,d))),h.forEach(d=>Jn(l,n,d)),h.forEach(d=>Jn(l,Di[o]||{},d)),h.forEach(d=>Jn(l,F,d)),h.forEach(d=>Jn(l,kc,d))});const c=Array.from(l);return c.length===0&&c.push(Object.create(null)),G_.has(e)&&r.set(e,c),c}chartOptionScopes(){const{options:t,type:e}=this;return[t,Di[e]||{},F.datasets[e]||{},{type:e},F,kc]}resolveNamedOptions(t,e,i,n=[""]){const o={$shared:!0},{resolver:r,subPrefixes:a}=q_(this._resolverCache,t,n);let l=r;if(A1(r,e)){o.$shared=!1,i=ei(i)?i():i;const c=this.createResolver(t,i,a);l=ks(r,i,c)}for(const c of e)o[c]=l[c];return o}createResolver(t,e,i=[""],n){const{resolver:o}=q_(this._resolverCache,t,i);return V(e)?ks(o,e,void 0,n):o}}function q_(s,t,e){let i=s.get(t);i||(i=new Map,s.set(t,i));const n=e.join();let o=i.get(n);return o||(o={resolver:Dc(t,e),subPrefixes:e.filter(a=>!a.toLowerCase().includes("hover"))},i.set(n,o)),o}const C1=s=>V(s)&&Object.getOwnPropertyNames(s).reduce((t,e)=>t||ei(s[e]),!1);function A1(s,t){const{isScriptable:e,isIndexable:i}=Uf(s);for(const n of t){const o=e(n),r=i(n),a=(r||o)&&s[n];if(o&&(ei(a)||C1(a))||r&&Q(a))return!0}return!1}var w1="3.9.1";const k1=["top","bottom","left","right","chartArea"];function Z_(s,t){return s==="top"||s==="bottom"||k1.indexOf(s)===-1&&t==="x"}function Q_(s,t){return function(e,i){return e[s]===i[s]?e[t]-i[t]:e[s]-i[s]}}function J_(s){const t=s.chart,e=t.options.animation;t.notifyPlugins("afterRender"),G(e&&e.onComplete,[s],t)}function S1(s){const t=s.chart,e=t.options.animation;G(e&&e.onProgress,[s],t)}function tg(s){return e_()&&typeof s=="string"?s=document.getElementById(s):s&&s.length&&(s=s[0]),s&&s.canvas&&(s=s.canvas),s}const la={},eg=s=>{const t=tg(s);return Object.values(la).filter(e=>e.canvas===t).pop()};function O1(s,t,e){const i=Object.keys(s);for(const n of i){const o=+n;if(o>=t){const r=s[n];delete s[n],(e>0||o>t)&&(s[o+e]=r)}}}function I1(s,t,e,i){return!e||s.type==="mouseout"?null:i?t:s}class Uc{constructor(t,e){const i=this.config=new x1(e),n=tg(t),o=eg(n);if(o)throw new Error("Canvas is already in use. Chart with ID '"+o.id+"' must be destroyed before the canvas with ID '"+o.canvas.id+"' can be reused.");const r=i.createResolver(i.chartOptionScopes(),this.getContext());this.platform=new(i.platform||Y_(n)),this.platform.updateConfig(i);const a=this.platform.acquireContext(n,r.aspectRatio),l=a&&a.canvas,c=l&&l.height,h=l&&l.width;if(this.id=EO(),this.ctx=a,this.canvas=l,this.width=h,this.height=c,this._options=r,this._aspectRatio=this.aspectRatio,this._layers=[],this._metasets=[],this._stacks=void 0,this.boxes=[],this.currentDevicePixelRatio=void 0,this.chartArea=void 0,this._active=[],this._lastEvent=void 0,this._listeners={},this._responsiveListeners=void 0,this._sortedMetasets=[],this.scales={},this._plugins=new p1,this.$proxies={},this._hiddenIndices={},this.attached=!1,this._animationsDisabled=void 0,this.$context=void 0,this._doResize=BO(d=>this.update(d),r.resizeDelay||0),this._dataChanges=[],la[this.id]=this,!a||!l){console.error("Failed to create chart: can't acquire context from the given item");return}xe.listen(this,"complete",J_),xe.listen(this,"progress",S1),this._initialize(),this.attached&&this.update()}get aspectRatio(){const{options:{aspectRatio:t,maintainAspectRatio:e},width:i,height:n,_aspectRatio:o}=this;return H(t)?e&&o?o:n?i/n:null:t}get data(){return this.config.data}set data(t){this.config.data=t}get options(){return this._options}set options(t){this.config.options=t}_initialize(){return this.notifyPlugins("beforeInit"),this.options.responsive?this.resize():i_(this,this.options.devicePixelRatio),this.bindEvents(),this.notifyPlugins("afterInit"),this}clear(){return jf(this.canvas,this.ctx),this}stop(){return xe.stop(this),this}resize(t,e){xe.running(this)?this._resizeBeforeDraw={width:t,height:e}:this._resize(t,e)}_resize(t,e){const i=this.options,n=this.canvas,o=i.maintainAspectRatio&&this.aspectRatio,r=this.platform.getMaximumSize(n,t,e,o),a=i.devicePixelRatio||this.platform.getDevicePixelRatio(),l=this.width?"resize":"attach";this.width=r.width,this.height=r.height,this._aspectRatio=this.aspectRatio,i_(this,a,!0)&&(this.notifyPlugins("resize",{size:r}),G(i.onResize,[this,r],this),this.attached&&this._doResize(l)&&this.render())}ensureScalesHaveIDs(){const e=this.options.scales||{};U(e,(i,n)=>{i.id=n})}buildOrUpdateScales(){const t=this.options,e=t.scales,i=this.scales,n=Object.keys(i).reduce((r,a)=>(r[a]=!1,r),{});let o=[];e&&(o=o.concat(Object.keys(e).map(r=>{const a=e[r],l=Kc(r,a),c=l==="r",h=l==="x";return{options:a,dposition:c?"chartArea":h?"bottom":"left",dtype:c?"radialLinear":h?"category":"linear"}}))),U(o,r=>{const a=r.options,l=a.id,c=Kc(l,a),h=B(a.type,r.dtype);(a.position===void 0||Z_(a.position,c)!==Z_(r.dposition))&&(a.position=r.dposition),n[l]=!0;let d=null;if(l in i&&i[l].type===h)d=i[l];else{const u=ne.getScale(h);d=new u({id:l,type:h,ctx:this.ctx,chart:this}),i[d.id]=d}d.init(a,t)}),U(n,(r,a)=>{r||delete i[a]}),U(i,r=>{ft.configure(this,r,r.options),ft.addBox(this,r)})}_updateMetasets(){const t=this._metasets,e=this.data.datasets.length,i=t.length;if(t.sort((n,o)=>n.index-o.index),i>e){for(let n=e;n<i;++n)this._destroyDatasetMeta(n);t.splice(e,i-e)}this._sortedMetasets=t.slice(0).sort(Q_("order","index"))}_removeUnreferencedMetasets(){const{_metasets:t,data:{datasets:e}}=this;t.length>e.length&&delete this._stacks,t.forEach((i,n)=>{e.filter(o=>o===i._dataset).length===0&&this._destroyDatasetMeta(n)})}buildOrUpdateControllers(){const t=[],e=this.data.datasets;let i,n;for(this._removeUnreferencedMetasets(),i=0,n=e.length;i<n;i++){const o=e[i];let r=this.getDatasetMeta(i);const a=o.type||this.config.type;if(r.type&&r.type!==a&&(this._destroyDatasetMeta(i),r=this.getDatasetMeta(i)),r.type=a,r.indexAxis=o.indexAxis||Yc(a,this.options),r.order=o.order||0,r.index=i,r.label=""+o.label,r.visible=this.isDatasetVisible(i),r.controller)r.controller.updateIndex(i),r.controller.linkScales();else{const l=ne.getController(a),{datasetElementType:c,dataElementType:h}=F.datasets[a];Object.assign(l.prototype,{dataElementType:ne.getElement(h),datasetElementType:c&&ne.getElement(c)}),r.controller=new l(this,i),t.push(r.controller)}}return this._updateMetasets(),t}_resetElements(){U(this.data.datasets,(t,e)=>{this.getDatasetMeta(e).controller.reset()},this)}reset(){this._resetElements(),this.notifyPlugins("reset")}update(t){const e=this.config;e.update();const i=this._options=e.createResolver(e.chartOptionScopes(),this.getContext()),n=this._animationsDisabled=!i.animation;if(this._updateScales(),this._checkEventBindings(),this._updateHiddenIndices(),this._plugins.invalidate(),this.notifyPlugins("beforeUpdate",{mode:t,cancelable:!0})===!1)return;const o=this.buildOrUpdateControllers();this.notifyPlugins("beforeElementsUpdate");let r=0;for(let c=0,h=this.data.datasets.length;c<h;c++){const{controller:d}=this.getDatasetMeta(c),u=!n&&o.indexOf(d)===-1;d.buildOrUpdateElements(u),r=Math.max(+d.getMaxOverflow(),r)}r=this._minPadding=i.layout.autoPadding?r:0,this._updateLayout(r),n||U(o,c=>{c.reset()}),this._updateDatasets(t),this.notifyPlugins("afterUpdate",{mode:t}),this._layers.sort(Q_("z","_idx"));const{_active:a,_lastEvent:l}=this;l?this._eventHandler(l,!0):a.length&&this._updateHoverStyles(a,a,!0),this.render()}_updateScales(){U(this.scales,t=>{ft.removeBox(this,t)}),this.ensureScalesHaveIDs(),this.buildOrUpdateScales()}_checkEventBindings(){const t=this.options,e=new Set(Object.keys(this._listeners)),i=new Set(t.events);(!vf(e,i)||!!this._responsiveListeners!==t.responsive)&&(this.unbindEvents(),this.bindEvents())}_updateHiddenIndices(){const{_hiddenIndices:t}=this,e=this._getUniformDataChanges()||[];for(const{method:i,start:n,count:o}of e){const r=i==="_removeElements"?-o:o;O1(t,n,r)}}_getUniformDataChanges(){const t=this._dataChanges;if(!t||!t.length)return;this._dataChanges=[];const e=this.data.datasets.length,i=o=>new Set(t.filter(r=>r[0]===o).map((r,a)=>a+","+r.splice(1).join(","))),n=i(0);for(let o=1;o<e;o++)if(!vf(n,i(o)))return;return Array.from(n).map(o=>o.split(",")).map(o=>({method:o[1],start:+o[2],count:+o[3]}))}_updateLayout(t){if(this.notifyPlugins("beforeLayout",{cancelable:!0})===!1)return;ft.update(this,this.width,this.height,t);const e=this.chartArea,i=e.width<=0||e.height<=0;this._layers=[],U(this.boxes,n=>{i&&n.position==="chartArea"||(n.configure&&n.configure(),this._layers.push(...n._layers()))},this),this._layers.forEach((n,o)=>{n._idx=o}),this.notifyPlugins("afterLayout")}_updateDatasets(t){if(this.notifyPlugins("beforeDatasetsUpdate",{mode:t,cancelable:!0})!==!1){for(let e=0,i=this.data.datasets.length;e<i;++e)this.getDatasetMeta(e).controller.configure();for(let e=0,i=this.data.datasets.length;e<i;++e)this._updateDataset(e,ei(t)?t({datasetIndex:e}):t);this.notifyPlugins("afterDatasetsUpdate",{mode:t})}}_updateDataset(t,e){const i=this.getDatasetMeta(t),n={meta:i,index:t,mode:e,cancelable:!0};this.notifyPlugins("beforeDatasetUpdate",n)!==!1&&(i.controller._update(e),n.cancelable=!1,this.notifyPlugins("afterDatasetUpdate",n))}render(){this.notifyPlugins("beforeRender",{cancelable:!0})!==!1&&(xe.has(this)?this.attached&&!xe.running(this)&&xe.start(this):(this.draw(),J_({chart:this})))}draw(){let t;if(this._resizeBeforeDraw){const{width:i,height:n}=this._resizeBeforeDraw;this._resize(i,n),this._resizeBeforeDraw=null}if(this.clear(),this.width<=0||this.height<=0||this.notifyPlugins("beforeDraw",{cancelable:!0})===!1)return;const e=this._layers;for(t=0;t<e.length&&e[t].z<=0;++t)e[t].draw(this.chartArea);for(this._drawDatasets();t<e.length;++t)e[t].draw(this.chartArea);this.notifyPlugins("afterDraw")}_getSortedDatasetMetas(t){const e=this._sortedMetasets,i=[];let n,o;for(n=0,o=e.length;n<o;++n){const r=e[n];(!t||r.visible)&&i.push(r)}return i}getSortedVisibleDatasetMetas(){return this._getSortedDatasetMetas(!0)}_drawDatasets(){if(this.notifyPlugins("beforeDatasetsDraw",{cancelable:!0})===!1)return;const t=this.getSortedVisibleDatasetMetas();for(let e=t.length-1;e>=0;--e)this._drawDataset(t[e]);this.notifyPlugins("afterDatasetsDraw")}_drawDataset(t){const e=this.ctx,i=t._clip,n=!i.disabled,o=this.chartArea,r={meta:t,index:t.index,cancelable:!0};this.notifyPlugins("beforeDatasetDraw",r)!==!1&&(n&&qr(e,{left:i.left===!1?0:o.left-i.left,right:i.right===!1?this.width:o.right+i.right,top:i.top===!1?0:o.top-i.top,bottom:i.bottom===!1?this.height:o.bottom+i.bottom}),t.controller.draw(),n&&Zr(e),r.cancelable=!1,this.notifyPlugins("afterDatasetDraw",r))}isPointInArea(t){return Pn(t,this.chartArea,this._minPadding)}getElementsAtEventForMode(t,e,i,n){const o=L_.modes[e];return typeof o=="function"?o(this,t,i,n):[]}getDatasetMeta(t){const e=this.data.datasets[t],i=this._metasets;let n=i.filter(o=>o&&o._dataset===e).pop();return n||(n={type:null,data:[],dataset:null,controller:null,hidden:null,xAxisID:null,yAxisID:null,order:e&&e.order||0,index:t,_dataset:e,_parsed:[],_sorted:!1},i.push(n)),n}getContext(){return this.$context||(this.$context=ni(null,{chart:this,type:"chart"}))}getVisibleDatasetCount(){return this.getSortedVisibleDatasetMetas().length}isDatasetVisible(t){const e=this.data.datasets[t];if(!e)return!1;const i=this.getDatasetMeta(t);return typeof i.hidden=="boolean"?!i.hidden:!e.hidden}setDatasetVisibility(t,e){const i=this.getDatasetMeta(t);i.hidden=!e}toggleDataVisibility(t){this._hiddenIndices[t]=!this._hiddenIndices[t]}getDataVisibility(t){return!this._hiddenIndices[t]}_updateVisibility(t,e,i){const n=i?"show":"hide",o=this.getDatasetMeta(t),r=o.controller._resolveAnimations(void 0,n);jt(e)?(o.data[e].hidden=!i,this.update()):(this.setDatasetVisibility(t,i),r.update(o,{visible:i}),this.update(a=>a.datasetIndex===t?n:void 0))}hide(t,e){this._updateVisibility(t,e,!1)}show(t,e){this._updateVisibility(t,e,!0)}_destroyDatasetMeta(t){const e=this._metasets[t];e&&e.controller&&e.controller._destroy(),delete this._metasets[t]}_stop(){let t,e;for(this.stop(),xe.remove(this),t=0,e=this.data.datasets.length;t<e;++t)this._destroyDatasetMeta(t)}destroy(){this.notifyPlugins("beforeDestroy");const{canvas:t,ctx:e}=this;this._stop(),this.config.clearCache(),t&&(this.unbindEvents(),jf(t,e),this.platform.releaseContext(e),this.canvas=null,this.ctx=null),this.notifyPlugins("destroy"),delete la[this.id],this.notifyPlugins("afterDestroy")}toBase64Image(...t){return this.canvas.toDataURL(...t)}bindEvents(){this.bindUserEvents(),this.options.responsive?this.bindResponsiveEvents():this.attached=!0}bindUserEvents(){const t=this._listeners,e=this.platform,i=(o,r)=>{e.addEventListener(this,o,r),t[o]=r},n=(o,r,a)=>{o.offsetX=r,o.offsetY=a,this._eventHandler(o)};U(this.options.events,o=>i(o,n))}bindResponsiveEvents(){this._responsiveListeners||(this._responsiveListeners={});const t=this._responsiveListeners,e=this.platform,i=(l,c)=>{e.addEventListener(this,l,c),t[l]=c},n=(l,c)=>{t[l]&&(e.removeEventListener(this,l,c),delete t[l])},o=(l,c)=>{this.canvas&&this.resize(l,c)};let r;const a=()=>{n("attach",a),this.attached=!0,this.resize(),i("resize",o),i("detach",r)};r=()=>{this.attached=!1,n("resize",o),this._stop(),this._resize(0,0),i("attach",a)},e.isAttached(this.canvas)?a():r()}unbindEvents(){U(this._listeners,(t,e)=>{this.platform.removeEventListener(this,e,t)}),this._listeners={},U(this._responsiveListeners,(t,e)=>{this.platform.removeEventListener(this,e,t)}),this._responsiveListeners=void 0}updateHoverStyle(t,e,i){const n=i?"set":"remove";let o,r,a,l;for(e==="dataset"&&(o=this.getDatasetMeta(t[0].datasetIndex),o.controller["_"+n+"DatasetHoverStyle"]()),a=0,l=t.length;a<l;++a){r=t[a];const c=r&&this.getDatasetMeta(r.datasetIndex).controller;c&&c[n+"HoverStyle"](r.element,r.datasetIndex,r.index)}}getActiveElements(){return this._active||[]}setActiveElements(t){const e=this._active||[],i=t.map(({datasetIndex:o,index:r})=>{const a=this.getDatasetMeta(o);if(!a)throw new Error("No dataset found at index "+o);return{datasetIndex:o,element:a.data[r],index:r}});!Fr(i,e)&&(this._active=i,this._lastEvent=null,this._updateHoverStyles(i,e))}notifyPlugins(t,e,i){return this._plugins.notify(this,t,e,i)}_updateHoverStyles(t,e,i){const n=this.options.hover,o=(l,c)=>l.filter(h=>!c.some(d=>h.datasetIndex===d.datasetIndex&&h.index===d.index)),r=o(e,t),a=i?t:o(t,e);r.length&&this.updateHoverStyle(r,n.mode,!1),a.length&&n.mode&&this.updateHoverStyle(a,n.mode,!0)}_eventHandler(t,e){const i={event:t,replay:e,cancelable:!0,inChartArea:this.isPointInArea(t)},n=r=>(r.options.events||this.options.events).includes(t.native.type);if(this.notifyPlugins("beforeEvent",i,n)===!1)return;const o=this._handleEvent(t,e,i.inChartArea);return i.cancelable=!1,this.notifyPlugins("afterEvent",i,n),(o||i.changed)&&this.render(),this}_handleEvent(t,e,i){const{_active:n=[],options:o}=this,r=e,a=this._getActiveElements(t,n,i,r),l=SO(t),c=I1(t,this._lastEvent,i,l);i&&(this._lastEvent=null,G(o.onHover,[t,a,this],this),l&&G(o.onClick,[t,a,this],this));const h=!Fr(a,n);return(h||e)&&(this._active=a,this._updateHoverStyles(a,n,e)),this._lastEvent=c,h}_getActiveElements(t,e,i,n){if(t.type==="mouseout")return[];if(!i)return e;const o=this.options.hover;return this.getElementsAtEventForMode(t,o.mode,o,n)}}const ig=()=>U(Uc.instances,s=>s._plugins.invalidate()),ri=!0;Object.defineProperties(Uc,{defaults:{enumerable:ri,value:F},instances:{enumerable:ri,value:la},overrides:{enumerable:ri,value:Di},registry:{enumerable:ri,value:ne},version:{enumerable:ri,value:w1},getChart:{enumerable:ri,value:eg},register:{enumerable:ri,value:(...s)=>{ne.add(...s),ig()}},unregister:{enumerable:ri,value:(...s)=>{ne.remove(...s),ig()}}});function sg(s,t,e){const{startAngle:i,pixelMargin:n,x:o,y:r,outerRadius:a,innerRadius:l}=t;let c=n/a;s.beginPath(),s.arc(o,r,a,i-c,e+c),l>n?(c=n/l,s.arc(o,r,l,e+c,i-c,!0)):s.arc(o,r,n,e+nt,i-nt),s.closePath(),s.clip()}function D1(s){return Ic(s,["outerStart","outerEnd","innerStart","innerEnd"])}function M1(s,t,e,i){const n=D1(s.options.borderRadius),o=(e-t)/2,r=Math.min(o,i*t/2),a=l=>{const c=(e-Math.min(o,l))*i/2;return dt(l,0,Math.min(o,c))};return{outerStart:a(n.outerStart),outerEnd:a(n.outerEnd),innerStart:dt(n.innerStart,0,r),innerEnd:dt(n.innerEnd,0,r)}}function Is(s,t,e,i){return{x:e+s*Math.cos(t),y:i+s*Math.sin(t)}}function Xc(s,t,e,i,n,o){const{x:r,y:a,startAngle:l,pixelMargin:c,innerRadius:h}=t,d=Math.max(t.outerRadius+i+e-c,0),u=h>0?h+i+e+c:0;let p=0;const f=n-l;if(i){const R=h>0?h-i:0,z=d>0?d-i:0,Y=(R+z)/2,Gt=Y!==0?f*Y/(Y+i):f;p=(f-Gt)/2}const b=Math.max(.001,f*d-e/it)/d,v=(f-b)/2,y=l+v+p,T=n-v-p,{outerStart:x,outerEnd:E,innerStart:C,innerEnd:A}=M1(t,u,d,T-y),w=d-x,S=d-E,k=y+x/w,D=T-E/S,I=u+C,M=u+A,P=y+C/I,X=T-A/M;if(s.beginPath(),o){if(s.arc(r,a,d,k,D),E>0){const Y=Is(S,D,r,a);s.arc(Y.x,Y.y,E,D,T+nt)}const R=Is(M,T,r,a);if(s.lineTo(R.x,R.y),A>0){const Y=Is(M,X,r,a);s.arc(Y.x,Y.y,A,T+nt,X+Math.PI)}if(s.arc(r,a,u,T-A/u,y+C/u,!0),C>0){const Y=Is(I,P,r,a);s.arc(Y.x,Y.y,C,P+Math.PI,y-nt)}const z=Is(w,y,r,a);if(s.lineTo(z.x,z.y),x>0){const Y=Is(w,k,r,a);s.arc(Y.x,Y.y,x,y-nt,k)}}else{s.moveTo(r,a);const R=Math.cos(k)*d+r,z=Math.sin(k)*d+a;s.lineTo(R,z);const Y=Math.cos(D)*d+r,Gt=Math.sin(D)*d+a;s.lineTo(Y,Gt)}s.closePath()}function L1(s,t,e,i,n){const{fullCircles:o,startAngle:r,circumference:a}=t;let l=t.endAngle;if(o){Xc(s,t,e,i,r+q,n);for(let c=0;c<o;++c)s.fill();isNaN(a)||(l=r+a%q,a%q===0&&(l+=q))}return Xc(s,t,e,i,l,n),s.fill(),l}function $1(s,t,e){const{x:i,y:n,startAngle:o,pixelMargin:r,fullCircles:a}=t,l=Math.max(t.outerRadius-r,0),c=t.innerRadius+r;let h;for(e&&sg(s,t,o+q),s.beginPath(),s.arc(i,n,c,o+q,o,!0),h=0;h<a;++h)s.stroke();for(s.beginPath(),s.arc(i,n,l,o,o+q),h=0;h<a;++h)s.stroke()}function R1(s,t,e,i,n,o){const{options:r}=t,{borderWidth:a,borderJoinStyle:l}=r,c=r.borderAlign==="inner";a&&(c?(s.lineWidth=a*2,s.lineJoin=l||"round"):(s.lineWidth=a,s.lineJoin=l||"bevel"),t.fullCircles&&$1(s,t,c),c&&sg(s,t,n),Xc(s,t,e,i,n,o),s.stroke())}class Ds extends Xt{constructor(t){super(),this.options=void 0,this.circumference=void 0,this.startAngle=void 0,this.endAngle=void 0,this.innerRadius=void 0,this.outerRadius=void 0,this.pixelMargin=0,this.fullCircles=0,t&&Object.assign(this,t)}inRange(t,e,i){const n=this.getProps(["x","y"],i),{angle:o,distance:r}=Cf(n,{x:t,y:e}),{startAngle:a,endAngle:l,innerRadius:c,outerRadius:h,circumference:d}=this.getProps(["startAngle","endAngle","innerRadius","outerRadius","circumference"],i),u=this.options.spacing/2,f=B(d,l-a)>=q||Dn(o,a,l),b=Ie(r,c+u,h+u);return f&&b}getCenterPoint(t){const{x:e,y:i,startAngle:n,endAngle:o,innerRadius:r,outerRadius:a}=this.getProps(["x","y","startAngle","endAngle","innerRadius","outerRadius","circumference"],t),{offset:l,spacing:c}=this.options,h=(n+o)/2,d=(r+a+c+l)/2;return{x:e+Math.cos(h)*d,y:i+Math.sin(h)*d}}tooltipPosition(t){return this.getCenterPoint(t)}draw(t){const{options:e,circumference:i}=this,n=(e.offset||0)/2,o=(e.spacing||0)/2,r=e.circular;if(this.pixelMargin=e.borderAlign==="inner"?.33:0,this.fullCircles=i>q?Math.floor(i/q):0,i===0||this.innerRadius<0||this.outerRadius<0)return;t.save();let a=0;if(n){a=n/2;const c=(this.startAngle+this.endAngle)/2;t.translate(Math.cos(c)*a,Math.sin(c)*a),this.circumference>=it&&(a=n)}t.fillStyle=e.backgroundColor,t.strokeStyle=e.borderColor;const l=L1(t,this,a,o,r);R1(t,this,a,o,l,r),t.restore()}}Ds.id="arc",Ds.defaults={borderAlign:"center",borderColor:"#fff",borderJoinStyle:void 0,borderRadius:0,borderWidth:2,offset:0,spacing:0,angle:void 0,circular:!0},Ds.defaultRoutes={backgroundColor:"backgroundColor"};function ng(s,t,e=t){s.lineCap=B(e.borderCapStyle,t.borderCapStyle),s.setLineDash(B(e.borderDash,t.borderDash)),s.lineDashOffset=B(e.borderDashOffset,t.borderDashOffset),s.lineJoin=B(e.borderJoinStyle,t.borderJoinStyle),s.lineWidth=B(e.borderWidth,t.borderWidth),s.strokeStyle=B(e.borderColor,t.borderColor)}function P1(s,t,e){s.lineTo(e.x,e.y)}function N1(s){return s.stepped?dI:s.tension||s.cubicInterpolationMode==="monotone"?uI:P1}function og(s,t,e={}){const i=s.length,{start:n=0,end:o=i-1}=e,{start:r,end:a}=t,l=Math.max(n,r),c=Math.min(o,a),h=n<r&&o<r||n>a&&o>a;return{count:i,start:l,loop:t.loop,ilen:c<l&&!h?i+c-l:c-l}}function B1(s,t,e,i){const{points:n,options:o}=t,{count:r,start:a,loop:l,ilen:c}=og(n,e,i),h=N1(o);let{move:d=!0,reverse:u}=i||{},p,f,b;for(p=0;p<=c;++p)f=n[(a+(u?c-p:p))%r],!f.skip&&(d?(s.moveTo(f.x,f.y),d=!1):h(s,b,f,u,o.stepped),b=f);return l&&(f=n[(a+(u?c:0))%r],h(s,b,f,u,o.stepped)),!!l}function H1(s,t,e,i){const n=t.points,{count:o,start:r,ilen:a}=og(n,e,i),{move:l=!0,reverse:c}=i||{};let h=0,d=0,u,p,f,b,v,y;const T=E=>(r+(c?a-E:E))%o,x=()=>{b!==v&&(s.lineTo(h,v),s.lineTo(h,b),s.lineTo(h,y))};for(l&&(p=n[T(0)],s.moveTo(p.x,p.y)),u=0;u<=a;++u){if(p=n[T(u)],p.skip)continue;const E=p.x,C=p.y,A=E|0;A===f?(C<b?b=C:C>v&&(v=C),h=(d*h+E)/++d):(x(),s.lineTo(E,C),f=A,d=0,b=v=C),y=C}x()}function Gc(s){const t=s.options,e=t.borderDash&&t.borderDash.length;return!s._decimated&&!s._loop&&!t.tension&&t.cubicInterpolationMode!=="monotone"&&!t.stepped&&!e?H1:B1}function V1(s){return s.stepped?zI:s.tension||s.cubicInterpolationMode==="monotone"?jI:Ni}function F1(s,t,e,i){let n=t._path;n||(n=t._path=new Path2D,t.path(n,e,i)&&n.closePath()),ng(s,t.options),s.stroke(n)}function W1(s,t,e,i){const{segments:n,options:o}=t,r=Gc(t);for(const a of n)ng(s,o,a.style),s.beginPath(),r(s,t,a,{start:e,end:e+i-1})&&s.closePath(),s.stroke()}const z1=typeof Path2D=="function";function j1(s,t,e,i){z1&&!t.options.segment?F1(s,t,e,i):W1(s,t,e,i)}class Le extends Xt{constructor(t){super(),this.animated=!0,this.options=void 0,this._chart=void 0,this._loop=void 0,this._fullLoop=void 0,this._path=void 0,this._points=void 0,this._segments=void 0,this._decimated=!1,this._pointsUpdated=!1,this._datasetIndex=void 0,t&&Object.assign(this,t)}updateControlPoints(t,e){const i=this.options;if((i.tension||i.cubicInterpolationMode==="monotone")&&!i.stepped&&!this._pointsUpdated){const n=i.spanGaps?this._loop:this._fullLoop;RI(this._points,i,t,n,e),this._pointsUpdated=!0}}set points(t){this._points=t,delete this._segments,delete this._path,this._pointsUpdated=!1}get points(){return this._points}get segments(){return this._segments||(this._segments=ZI(this,this.options.segment))}first(){const t=this.segments,e=this.points;return t.length&&e[t[0].start]}last(){const t=this.segments,e=this.points,i=t.length;return i&&e[t[i-1].end]}interpolate(t,e){const i=this.options,n=t[e],o=this.points,r=h_(this,{property:e,start:n,end:n});if(!r.length)return;const a=[],l=V1(i);let c,h;for(c=0,h=r.length;c<h;++c){const{start:d,end:u}=r[c],p=o[d],f=o[u];if(p===f){a.push(p);continue}const b=Math.abs((n-p[e])/(f[e]-p[e])),v=l(p,f,b,i.stepped);v[e]=t[e],a.push(v)}return a.length===1?a[0]:a}pathSegment(t,e,i){return Gc(this)(t,this,e,i)}path(t,e,i){const n=this.segments,o=Gc(this);let r=this._loop;e=e||0,i=i||this.points.length-e;for(const a of n)r&=o(t,this,a,{start:e,end:e+i-1});return!!r}draw(t,e,i,n){const o=this.options||{};(this.points||[]).length&&o.borderWidth&&(t.save(),j1(t,this,i,n),t.restore()),this.animated&&(this._pointsUpdated=!1,this._path=void 0)}}Le.id="line",Le.defaults={borderCapStyle:"butt",borderDash:[],borderDashOffset:0,borderJoinStyle:"miter",borderWidth:3,capBezierPoints:!0,cubicInterpolationMode:"default",fill:!1,spanGaps:!1,stepped:!1,tension:0},Le.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"},Le.descriptors={_scriptable:!0,_indexable:s=>s!=="borderDash"&&s!=="fill"};function rg(s,t,e,i){const n=s.options,{[e]:o}=s.getProps([e],i);return Math.abs(t-o)<n.radius+n.hitRadius}class Ms extends Xt{constructor(t){super(),this.options=void 0,this.parsed=void 0,this.skip=void 0,this.stop=void 0,t&&Object.assign(this,t)}inRange(t,e,i){const n=this.options,{x:o,y:r}=this.getProps(["x","y"],i);return Math.pow(t-o,2)+Math.pow(e-r,2)<Math.pow(n.hitRadius+n.radius,2)}inXRange(t,e){return rg(this,t,"x",e)}inYRange(t,e){return rg(this,t,"y",e)}getCenterPoint(t){const{x:e,y:i}=this.getProps(["x","y"],t);return{x:e,y:i}}size(t){t=t||this.options||{};let e=t.radius||0;e=Math.max(e,e&&t.hoverRadius||0);const i=e&&t.borderWidth||0;return(e+i)*2}draw(t,e){const i=this.options;this.skip||i.radius<.1||!Pn(this,e,this.size(i)/2)||(t.strokeStyle=i.borderColor,t.lineWidth=i.borderWidth,t.fillStyle=i.backgroundColor,Oc(t,i,this.x,this.y))}getRange(){const t=this.options||{};return t.radius+t.hitRadius}}Ms.id="point",Ms.defaults={borderWidth:1,hitRadius:1,hoverBorderWidth:1,hoverRadius:4,pointStyle:"circle",radius:3,rotation:0},Ms.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"};function ag(s,t){const{x:e,y:i,base:n,width:o,height:r}=s.getProps(["x","y","base","width","height"],t);let a,l,c,h,d;return s.horizontal?(d=r/2,a=Math.min(e,n),l=Math.max(e,n),c=i-d,h=i+d):(d=o/2,a=e-d,l=e+d,c=Math.min(i,n),h=Math.max(i,n)),{left:a,top:c,right:l,bottom:h}}function ai(s,t,e,i){return s?0:dt(t,e,i)}function Y1(s,t,e){const i=s.options.borderWidth,n=s.borderSkipped,o=Kf(i);return{t:ai(n.top,o.top,0,e),r:ai(n.right,o.right,0,t),b:ai(n.bottom,o.bottom,0,e),l:ai(n.left,o.left,0,t)}}function K1(s,t,e){const{enableBorderRadius:i}=s.getProps(["enableBorderRadius"]),n=s.options.borderRadius,o=$i(n),r=Math.min(t,e),a=s.borderSkipped,l=i||V(n);return{topLeft:ai(!l||a.top||a.left,o.topLeft,0,r),topRight:ai(!l||a.top||a.right,o.topRight,0,r),bottomLeft:ai(!l||a.bottom||a.left,o.bottomLeft,0,r),bottomRight:ai(!l||a.bottom||a.right,o.bottomRight,0,r)}}function U1(s){const t=ag(s),e=t.right-t.left,i=t.bottom-t.top,n=Y1(s,e/2,i/2),o=K1(s,e/2,i/2);return{outer:{x:t.left,y:t.top,w:e,h:i,radius:o},inner:{x:t.left+n.l,y:t.top+n.t,w:e-n.l-n.r,h:i-n.t-n.b,radius:{topLeft:Math.max(0,o.topLeft-Math.max(n.t,n.l)),topRight:Math.max(0,o.topRight-Math.max(n.t,n.r)),bottomLeft:Math.max(0,o.bottomLeft-Math.max(n.b,n.l)),bottomRight:Math.max(0,o.bottomRight-Math.max(n.b,n.r))}}}}function qc(s,t,e,i){const n=t===null,o=e===null,a=s&&!(n&&o)&&ag(s,i);return a&&(n||Ie(t,a.left,a.right))&&(o||Ie(e,a.top,a.bottom))}function X1(s){return s.topLeft||s.topRight||s.bottomLeft||s.bottomRight}function G1(s,t){s.rect(t.x,t.y,t.w,t.h)}function Zc(s,t,e={}){const i=s.x!==e.x?-t:0,n=s.y!==e.y?-t:0,o=(s.x+s.w!==e.x+e.w?t:0)-i,r=(s.y+s.h!==e.y+e.h?t:0)-n;return{x:s.x+i,y:s.y+n,w:s.w+o,h:s.h+r,radius:s.radius}}class Ls extends Xt{constructor(t){super(),this.options=void 0,this.horizontal=void 0,this.base=void 0,this.width=void 0,this.height=void 0,this.inflateAmount=void 0,t&&Object.assign(this,t)}draw(t){const{inflateAmount:e,options:{borderColor:i,backgroundColor:n}}=this,{inner:o,outer:r}=U1(this),a=X1(r.radius)?Nn:G1;t.save(),(r.w!==o.w||r.h!==o.h)&&(t.beginPath(),a(t,Zc(r,e,o)),t.clip(),a(t,Zc(o,-e,r)),t.fillStyle=i,t.fill("evenodd")),t.beginPath(),a(t,Zc(o,e)),t.fillStyle=n,t.fill(),t.restore()}inRange(t,e,i){return qc(this,t,e,i)}inXRange(t,e){return qc(this,t,null,e)}inYRange(t,e){return qc(this,null,t,e)}getCenterPoint(t){const{x:e,y:i,base:n,horizontal:o}=this.getProps(["x","y","base","horizontal"],t);return{x:o?(e+n)/2:e,y:o?i:(i+n)/2}}getRange(t){return t==="x"?this.width/2:this.height/2}}Ls.id="bar",Ls.defaults={borderSkipped:"start",borderWidth:0,borderRadius:0,inflateAmount:"auto",pointStyle:void 0},Ls.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"};var lg=Object.freeze({__proto__:null,ArcElement:Ds,LineElement:Le,PointElement:Ms,BarElement:Ls});function q1(s,t,e,i,n){const o=n.samples||i;if(o>=e)return s.slice(t,t+e);const r=[],a=(e-2)/(o-2);let l=0;const c=t+e-1;let h=t,d,u,p,f,b;for(r[l++]=s[h],d=0;d<o-2;d++){let v=0,y=0,T;const x=Math.floor((d+1)*a)+1+t,E=Math.min(Math.floor((d+2)*a)+1,e)+t,C=E-x;for(T=x;T<E;T++)v+=s[T].x,y+=s[T].y;v/=C,y/=C;const A=Math.floor(d*a)+1+t,w=Math.min(Math.floor((d+1)*a)+1,e)+t,{x:S,y:k}=s[h];for(p=f=-1,T=A;T<w;T++)f=.5*Math.abs((S-v)*(s[T].y-k)-(S-s[T].x)*(y-k)),f>p&&(p=f,u=s[T],b=T);r[l++]=u,h=b}return r[l++]=s[c],r}function Z1(s,t,e,i){let n=0,o=0,r,a,l,c,h,d,u,p,f,b;const v=[],y=t+e-1,T=s[t].x,E=s[y].x-T;for(r=t;r<t+e;++r){a=s[r],l=(a.x-T)/E*i,c=a.y;const C=l|0;if(C===h)c<f?(f=c,d=r):c>b&&(b=c,u=r),n=(o*n+a.x)/++o;else{const A=r-1;if(!H(d)&&!H(u)){const w=Math.min(d,u),S=Math.max(d,u);w!==p&&w!==A&&v.push({...s[w],x:n}),S!==p&&S!==A&&v.push({...s[S],x:n})}r>0&&A!==p&&v.push(s[A]),v.push(a),h=C,o=0,f=b=c,d=u=p=r}}return v}function cg(s){if(s._decimated){const t=s._data;delete s._decimated,delete s._data,Object.defineProperty(s,"data",{value:t})}}function hg(s){s.data.datasets.forEach(t=>{cg(t)})}function Q1(s,t){const e=t.length;let i=0,n;const{iScale:o}=s,{min:r,max:a,minDefined:l,maxDefined:c}=o.getUserBounds();return l&&(i=dt(De(t,o.axis,r).lo,0,e-1)),c?n=dt(De(t,o.axis,a).hi+1,i,e)-i:n=e-i,{start:i,count:n}}var dg={id:"decimation",defaults:{algorithm:"min-max",enabled:!1},beforeElementsUpdate:(s,t,e)=>{if(!e.enabled){hg(s);return}const i=s.width;s.data.datasets.forEach((n,o)=>{const{_data:r,indexAxis:a}=n,l=s.getDatasetMeta(o),c=r||n.data;if(tt([a,s.options.indexAxis])==="y"||!l.controller.supportsDecimation)return;const h=s.scales[l.xAxisID];if(h.type!=="linear"&&h.type!=="time"||s.options.parsing)return;let{start:d,count:u}=Q1(l,c);const p=e.threshold||4*i;if(u<=p){cg(n);return}H(r)&&(n._data=c,delete n.data,Object.defineProperty(n,"data",{configurable:!0,enumerable:!0,get:function(){return this._decimated},set:function(b){this._data=b}}));let f;switch(e.algorithm){case"lttb":f=q1(c,d,u,i,e);break;case"min-max":f=Z1(c,d,u,i);break;default:throw new Error(`Unsupported decimation algorithm '${e.algorithm}'`)}n._decimated=f})},destroy(s){hg(s)}};function J1(s,t,e){const i=s.segments,n=s.points,o=t.points,r=[];for(const a of i){let{start:l,end:c}=a;c=Jc(l,c,n);const h=Qc(e,n[l],n[c],a.loop);if(!t.segments){r.push({source:a,target:h,start:n[l],end:n[c]});continue}const d=h_(t,h);for(const u of d){const p=Qc(e,o[u.start],o[u.end],u.loop),f=c_(a,n,p);for(const b of f)r.push({source:b,target:u,start:{[e]:ug(h,p,"start",Math.max)},end:{[e]:ug(h,p,"end",Math.min)}})}}return r}function Qc(s,t,e,i){if(i)return;let n=t[s],o=e[s];return s==="angle"&&(n=Vt(n),o=Vt(o)),{property:s,start:n,end:o}}function tM(s,t){const{x:e=null,y:i=null}=s||{},n=t.points,o=[];return t.segments.forEach(({start:r,end:a})=>{a=Jc(r,a,n);const l=n[r],c=n[a];i!==null?(o.push({x:l.x,y:i}),o.push({x:c.x,y:i})):e!==null&&(o.push({x:e,y:l.y}),o.push({x:e,y:c.y}))}),o}function Jc(s,t,e){for(;t>s;t--){const i=e[t];if(!isNaN(i.x)&&!isNaN(i.y))break}return t}function ug(s,t,e,i){return s&&t?i(s[e],t[e]):s?s[e]:t?t[e]:0}function pg(s,t){let e=[],i=!1;return Q(s)?(i=!0,e=s):e=tM(s,t),e.length?new Le({points:e,options:{tension:0},_loop:i,_fullLoop:i}):null}function fg(s){return s&&s.fill!==!1}function eM(s,t,e){let n=s[t].fill;const o=[t];let r;if(!e)return n;for(;n!==!1&&o.indexOf(n)===-1;){if(!rt(n))return n;if(r=s[n],!r)return!1;if(r.visible)return n;o.push(n),n=r.fill}return!1}function iM(s,t,e){const i=rM(s);if(V(i))return isNaN(i.value)?!1:i;let n=parseFloat(i);return rt(n)&&Math.floor(n)===n?sM(i[0],t,n,e):["origin","start","end","stack","shape"].indexOf(i)>=0&&i}function sM(s,t,e,i){return(s==="-"||s==="+")&&(e=t+e),e===t||e<0||e>=i?!1:e}function nM(s,t){let e=null;return s==="start"?e=t.bottom:s==="end"?e=t.top:V(s)?e=t.getPixelForValue(s.value):t.getBasePixel&&(e=t.getBasePixel()),e}function oM(s,t,e){let i;return s==="start"?i=e:s==="end"?i=t.options.reverse?t.min:t.max:V(s)?i=s.value:i=t.getBaseValue(),i}function rM(s){const t=s.options,e=t.fill;let i=B(e&&e.target,e);return i===void 0&&(i=!!t.backgroundColor),i===!1||i===null?!1:i===!0?"origin":i}function aM(s){const{scale:t,index:e,line:i}=s,n=[],o=i.segments,r=i.points,a=lM(t,e);a.push(pg({x:null,y:t.bottom},i));for(let l=0;l<o.length;l++){const c=o[l];for(let h=c.start;h<=c.end;h++)cM(n,r[h],a)}return new Le({points:n,options:{}})}function lM(s,t){const e=[],i=s.getMatchingVisibleMetas("line");for(let n=0;n<i.length;n++){const o=i[n];if(o.index===t)break;o.hidden||e.unshift(o.dataset)}return e}function cM(s,t,e){const i=[];for(let n=0;n<e.length;n++){const o=e[n],{first:r,last:a,point:l}=hM(o,t,"x");if(!(!l||r&&a)){if(r)i.unshift(l);else if(s.push(l),!a)break}}s.push(...i)}function hM(s,t,e){const i=s.interpolate(t,e);if(!i)return{};const n=i[e],o=s.segments,r=s.points;let a=!1,l=!1;for(let c=0;c<o.length;c++){const h=o[c],d=r[h.start][e],u=r[h.end][e];if(Ie(n,d,u)){a=n===d,l=n===u;break}}return{first:a,last:l,point:i}}class _g{constructor(t){this.x=t.x,this.y=t.y,this.radius=t.radius}pathSegment(t,e,i){const{x:n,y:o,radius:r}=this;return e=e||{start:0,end:q},t.arc(n,o,r,e.end,e.start,!0),!i.bounds}interpolate(t){const{x:e,y:i,radius:n}=this,o=t.angle;return{x:e+Math.cos(o)*n,y:i+Math.sin(o)*n,angle:o}}}function dM(s){const{chart:t,fill:e,line:i}=s;if(rt(e))return uM(t,e);if(e==="stack")return aM(s);if(e==="shape")return!0;const n=pM(s);return n instanceof _g?n:pg(n,i)}function uM(s,t){const e=s.getDatasetMeta(t);return e&&s.isDatasetVisible(t)?e.dataset:null}function pM(s){return(s.scale||{}).getPointPositionForValue?_M(s):fM(s)}function fM(s){const{scale:t={},fill:e}=s,i=nM(e,t);if(rt(i)){const n=t.isHorizontal();return{x:n?i:null,y:n?null:i}}return null}function _M(s){const{scale:t,fill:e}=s,i=t.options,n=t.getLabels().length,o=i.reverse?t.max:t.min,r=oM(e,t,o),a=[];if(i.grid.circular){const l=t.getPointPositionForValue(0,o);return new _g({x:l.x,y:l.y,radius:t.getDistanceFromCenterForValue(r)})}for(let l=0;l<n;++l)a.push(t.getPointPositionForValue(l,r));return a}function th(s,t,e){const i=dM(t),{line:n,scale:o,axis:r}=t,a=n.options,l=a.fill,c=a.backgroundColor,{above:h=c,below:d=c}=l||{};i&&n.points.length&&(qr(s,e),gM(s,{line:n,target:i,above:h,below:d,area:e,scale:o,axis:r}),Zr(s))}function gM(s,t){const{line:e,target:i,above:n,below:o,area:r,scale:a}=t,l=e._loop?"angle":t.axis;s.save(),l==="x"&&o!==n&&(gg(s,i,r.top),mg(s,{line:e,target:i,color:n,scale:a,property:l}),s.restore(),s.save(),gg(s,i,r.bottom)),mg(s,{line:e,target:i,color:o,scale:a,property:l}),s.restore()}function gg(s,t,e){const{segments:i,points:n}=t;let o=!0,r=!1;s.beginPath();for(const a of i){const{start:l,end:c}=a,h=n[l],d=n[Jc(l,c,n)];o?(s.moveTo(h.x,h.y),o=!1):(s.lineTo(h.x,e),s.lineTo(h.x,h.y)),r=!!t.pathSegment(s,a,{move:r}),r?s.closePath():s.lineTo(d.x,e)}s.lineTo(t.first().x,e),s.closePath(),s.clip()}function mg(s,t){const{line:e,target:i,property:n,color:o,scale:r}=t,a=J1(e,i,n);for(const{source:l,target:c,start:h,end:d}of a){const{style:{backgroundColor:u=o}={}}=l,p=i!==!0;s.save(),s.fillStyle=u,mM(s,r,p&&Qc(n,h,d)),s.beginPath();const f=!!e.pathSegment(s,l);let b;if(p){f?s.closePath():bg(s,i,d,n);const v=!!i.pathSegment(s,c,{move:f,reverse:!0});b=f&&v,b||bg(s,i,h,n)}s.closePath(),s.fill(b?"evenodd":"nonzero"),s.restore()}}function mM(s,t,e){const{top:i,bottom:n}=t.chart.chartArea,{property:o,start:r,end:a}=e||{};o==="x"&&(s.beginPath(),s.rect(r,i,a-r,n-i),s.clip())}function bg(s,t,e,i){const n=t.interpolate(e,i);n&&s.lineTo(n.x,n.y)}var vg={id:"filler",afterDatasetsUpdate(s,t,e){const i=(s.data.datasets||[]).length,n=[];let o,r,a,l;for(r=0;r<i;++r)o=s.getDatasetMeta(r),a=o.dataset,l=null,a&&a.options&&a instanceof Le&&(l={visible:s.isDatasetVisible(r),index:r,fill:iM(a,r,i),chart:s,axis:o.controller.options.indexAxis,scale:o.vScale,line:a}),o.$filler=l,n.push(l);for(r=0;r<i;++r)l=n[r],!(!l||l.fill===!1)&&(l.fill=eM(n,r,e.propagate))},beforeDraw(s,t,e){const i=e.drawTime==="beforeDraw",n=s.getSortedVisibleDatasetMetas(),o=s.chartArea;for(let r=n.length-1;r>=0;--r){const a=n[r].$filler;a&&(a.line.updateControlPoints(o,a.axis),i&&a.fill&&th(s.ctx,a,o))}},beforeDatasetsDraw(s,t,e){if(e.drawTime!=="beforeDatasetsDraw")return;const i=s.getSortedVisibleDatasetMetas();for(let n=i.length-1;n>=0;--n){const o=i[n].$filler;fg(o)&&th(s.ctx,o,s.chartArea)}},beforeDatasetDraw(s,t,e){const i=t.meta.$filler;!fg(i)||e.drawTime!=="beforeDatasetDraw"||th(s.ctx,i,s.chartArea)},defaults:{propagate:!0,drawTime:"beforeDatasetDraw"}};const yg=(s,t)=>{let{boxHeight:e=t,boxWidth:i=t}=s;return s.usePointStyle&&(e=Math.min(e,t),i=s.pointStyleWidth||Math.min(i,t)),{boxWidth:i,boxHeight:e,itemHeight:Math.max(t,e)}},bM=(s,t)=>s!==null&&t!==null&&s.datasetIndex===t.datasetIndex&&s.index===t.index;class Tg extends Xt{constructor(t){super(),this._added=!1,this.legendHitBoxes=[],this._hoveredItem=null,this.doughnutMode=!1,this.chart=t.chart,this.options=t.options,this.ctx=t.ctx,this.legendItems=void 0,this.columnSizes=void 0,this.lineWidths=void 0,this.maxHeight=void 0,this.maxWidth=void 0,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.height=void 0,this.width=void 0,this._margins=void 0,this.position=void 0,this.weight=void 0,this.fullSize=void 0}update(t,e,i){this.maxWidth=t,this.maxHeight=e,this._margins=i,this.setDimensions(),this.buildLabels(),this.fit()}setDimensions(){this.isHorizontal()?(this.width=this.maxWidth,this.left=this._margins.left,this.right=this.width):(this.height=this.maxHeight,this.top=this._margins.top,this.bottom=this.height)}buildLabels(){const t=this.options.labels||{};let e=G(t.generateLabels,[this.chart],this)||[];t.filter&&(e=e.filter(i=>t.filter(i,this.chart.data))),t.sort&&(e=e.sort((i,n)=>t.sort(i,n,this.chart.data))),this.options.reverse&&e.reverse(),this.legendItems=e}fit(){const{options:t,ctx:e}=this;if(!t.display){this.width=this.height=0;return}const i=t.labels,n=lt(i.font),o=n.size,r=this._computeTitleHeight(),{boxWidth:a,itemHeight:l}=yg(i,o);let c,h;e.font=n.string,this.isHorizontal()?(c=this.maxWidth,h=this._fitRows(r,o,a,l)+10):(h=this.maxHeight,c=this._fitCols(r,o,a,l)+10),this.width=Math.min(c,t.maxWidth||this.maxWidth),this.height=Math.min(h,t.maxHeight||this.maxHeight)}_fitRows(t,e,i,n){const{ctx:o,maxWidth:r,options:{labels:{padding:a}}}=this,l=this.legendHitBoxes=[],c=this.lineWidths=[0],h=n+a;let d=t;o.textAlign="left",o.textBaseline="middle";let u=-1,p=-h;return this.legendItems.forEach((f,b)=>{const v=i+e/2+o.measureText(f.text).width;(b===0||c[c.length-1]+v+2*a>r)&&(d+=h,c[c.length-(b>0?0:1)]=0,p+=h,u++),l[b]={left:0,top:p,row:u,width:v,height:n},c[c.length-1]+=v+a}),d}_fitCols(t,e,i,n){const{ctx:o,maxHeight:r,options:{labels:{padding:a}}}=this,l=this.legendHitBoxes=[],c=this.columnSizes=[],h=r-t;let d=a,u=0,p=0,f=0,b=0;return this.legendItems.forEach((v,y)=>{const T=i+e/2+o.measureText(v.text).width;y>0&&p+n+2*a>h&&(d+=u+a,c.push({width:u,height:p}),f+=u+a,b++,u=p=0),l[y]={left:f,top:p,col:b,width:T,height:n},u=Math.max(u,T),p+=n+a}),d+=u,c.push({width:u,height:p}),d}adjustHitBoxes(){if(!this.options.display)return;const t=this._computeTitleHeight(),{legendHitBoxes:e,options:{align:i,labels:{padding:n},rtl:o}}=this,r=Os(o,this.left,this.width);if(this.isHorizontal()){let a=0,l=gt(i,this.left+n,this.right-this.lineWidths[a]);for(const c of e)a!==c.row&&(a=c.row,l=gt(i,this.left+n,this.right-this.lineWidths[a])),c.top+=this.top+t+n,c.left=r.leftForLtr(r.x(l),c.width),l+=c.width+n}else{let a=0,l=gt(i,this.top+t+n,this.bottom-this.columnSizes[a].height);for(const c of e)c.col!==a&&(a=c.col,l=gt(i,this.top+t+n,this.bottom-this.columnSizes[a].height)),c.top=l,c.left+=this.left+n,c.left=r.leftForLtr(r.x(c.left),c.width),l+=c.height+n}}isHorizontal(){return this.options.position==="top"||this.options.position==="bottom"}draw(){if(this.options.display){const t=this.ctx;qr(t,this),this._draw(),Zr(t)}}_draw(){const{options:t,columnSizes:e,lineWidths:i,ctx:n}=this,{align:o,labels:r}=t,a=F.color,l=Os(t.rtl,this.left,this.width),c=lt(r.font),{color:h,padding:d}=r,u=c.size,p=u/2;let f;this.drawTitle(),n.textAlign=l.textAlign("left"),n.textBaseline="middle",n.lineWidth=.5,n.font=c.string;const{boxWidth:b,boxHeight:v,itemHeight:y}=yg(r,u),T=function(w,S,k){if(isNaN(b)||b<=0||isNaN(v)||v<0)return;n.save();const D=B(k.lineWidth,1);if(n.fillStyle=B(k.fillStyle,a),n.lineCap=B(k.lineCap,"butt"),n.lineDashOffset=B(k.lineDashOffset,0),n.lineJoin=B(k.lineJoin,"miter"),n.lineWidth=D,n.strokeStyle=B(k.strokeStyle,a),n.setLineDash(B(k.lineDash,[])),r.usePointStyle){const I={radius:v*Math.SQRT2/2,pointStyle:k.pointStyle,rotation:k.rotation,borderWidth:D},M=l.xPlus(w,b/2),P=S+p;Yf(n,I,M,P,r.pointStyleWidth&&b)}else{const I=S+Math.max((u-v)/2,0),M=l.leftForLtr(w,b),P=$i(k.borderRadius);n.beginPath(),Object.values(P).some(X=>X!==0)?Nn(n,{x:M,y:I,w:b,h:v,radius:P}):n.rect(M,I,b,v),n.fill(),D!==0&&n.stroke()}n.restore()},x=function(w,S,k){Li(n,k.text,w,S+y/2,c,{strikethrough:k.hidden,textAlign:l.textAlign(k.textAlign)})},E=this.isHorizontal(),C=this._computeTitleHeight();E?f={x:gt(o,this.left+d,this.right-i[0]),y:this.top+d+C,line:0}:f={x:this.left+d,y:gt(o,this.top+C+d,this.bottom-e[0].height),line:0},o_(this.ctx,t.textDirection);const A=y+d;this.legendItems.forEach((w,S)=>{n.strokeStyle=w.fontColor||h,n.fillStyle=w.fontColor||h;const k=n.measureText(w.text).width,D=l.textAlign(w.textAlign||(w.textAlign=r.textAlign)),I=b+p+k;let M=f.x,P=f.y;l.setWidth(this.width),E?S>0&&M+I+d>this.right&&(P=f.y+=A,f.line++,M=f.x=gt(o,this.left+d,this.right-i[f.line])):S>0&&P+A>this.bottom&&(M=f.x=M+e[f.line].width+d,f.line++,P=f.y=gt(o,this.top+C+d,this.bottom-e[f.line].height));const X=l.x(M);T(X,P,w),M=HO(D,M+b+p,E?M+I:this.right,t.rtl),x(l.x(M),P,w),E?f.x+=I+d:f.y+=A}),r_(this.ctx,t.textDirection)}drawTitle(){const t=this.options,e=t.title,i=lt(e.font),n=pt(e.padding);if(!e.display)return;const o=Os(t.rtl,this.left,this.width),r=this.ctx,a=e.position,l=i.size/2,c=n.top+l;let h,d=this.left,u=this.width;if(this.isHorizontal())u=Math.max(...this.lineWidths),h=this.top+c,d=gt(t.align,d,this.right-u);else{const f=this.columnSizes.reduce((b,v)=>Math.max(b,v.height),0);h=c+gt(t.align,this.top,this.bottom-f-t.labels.padding-this._computeTitleHeight())}const p=gt(a,d,d+u);r.textAlign=o.textAlign(yc(a)),r.textBaseline="middle",r.strokeStyle=e.color,r.fillStyle=e.color,r.font=i.string,Li(r,e.text,p,h,i)}_computeTitleHeight(){const t=this.options.title,e=lt(t.font),i=pt(t.padding);return t.display?e.lineHeight+i.height:0}_getLegendItemAt(t,e){let i,n,o;if(Ie(t,this.left,this.right)&&Ie(e,this.top,this.bottom)){for(o=this.legendHitBoxes,i=0;i<o.length;++i)if(n=o[i],Ie(t,n.left,n.left+n.width)&&Ie(e,n.top,n.top+n.height))return this.legendItems[i]}return null}handleEvent(t){const e=this.options;if(!vM(t.type,e))return;const i=this._getLegendItemAt(t.x,t.y);if(t.type==="mousemove"||t.type==="mouseout"){const n=this._hoveredItem,o=bM(n,i);n&&!o&&G(e.onLeave,[t,n,this],this),this._hoveredItem=i,i&&!o&&G(e.onHover,[t,i,this],this)}else i&&G(e.onClick,[t,i,this],this)}}function vM(s,t){return!!((s==="mousemove"||s==="mouseout")&&(t.onHover||t.onLeave)||t.onClick&&(s==="click"||s==="mouseup"))}var Eg={id:"legend",_element:Tg,start(s,t,e){const i=s.legend=new Tg({ctx:s.ctx,options:e,chart:s});ft.configure(s,i,e),ft.addBox(s,i)},stop(s){ft.removeBox(s,s.legend),delete s.legend},beforeUpdate(s,t,e){const i=s.legend;ft.configure(s,i,e),i.options=e},afterUpdate(s){const t=s.legend;t.buildLabels(),t.adjustHitBoxes()},afterEvent(s,t){t.replay||s.legend.handleEvent(t.event)},defaults:{display:!0,position:"top",align:"center",fullSize:!0,reverse:!1,weight:1e3,onClick(s,t,e){const i=t.datasetIndex,n=e.chart;n.isDatasetVisible(i)?(n.hide(i),t.hidden=!0):(n.show(i),t.hidden=!1)},onHover:null,onLeave:null,labels:{color:s=>s.chart.options.color,boxWidth:40,padding:10,generateLabels(s){const t=s.data.datasets,{labels:{usePointStyle:e,pointStyle:i,textAlign:n,color:o}}=s.legend.options;return s._getSortedDatasetMetas().map(r=>{const a=r.controller.getStyle(e?0:void 0),l=pt(a.borderWidth);return{text:t[r.index].label,fillStyle:a.backgroundColor,fontColor:o,hidden:!r.visible,lineCap:a.borderCapStyle,lineDash:a.borderDash,lineDashOffset:a.borderDashOffset,lineJoin:a.borderJoinStyle,lineWidth:(l.width+l.height)/4,strokeStyle:a.borderColor,pointStyle:i||a.pointStyle,rotation:a.rotation,textAlign:n||a.textAlign,borderRadius:0,datasetIndex:r.index}},this)}},title:{color:s=>s.chart.options.color,display:!1,position:"center",text:""}},descriptors:{_scriptable:s=>!s.startsWith("on"),labels:{_scriptable:s=>!["generateLabels","filter","sort"].includes(s)}}};class eh extends Xt{constructor(t){super(),this.chart=t.chart,this.options=t.options,this.ctx=t.ctx,this._padding=void 0,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.width=void 0,this.height=void 0,this.position=void 0,this.weight=void 0,this.fullSize=void 0}update(t,e){const i=this.options;if(this.left=0,this.top=0,!i.display){this.width=this.height=this.right=this.bottom=0;return}this.width=this.right=t,this.height=this.bottom=e;const n=Q(i.text)?i.text.length:1;this._padding=pt(i.padding);const o=n*lt(i.font).lineHeight+this._padding.height;this.isHorizontal()?this.height=o:this.width=o}isHorizontal(){const t=this.options.position;return t==="top"||t==="bottom"}_drawArgs(t){const{top:e,left:i,bottom:n,right:o,options:r}=this,a=r.align;let l=0,c,h,d;return this.isHorizontal()?(h=gt(a,i,o),d=e+t,c=o-i):(r.position==="left"?(h=i+t,d=gt(a,n,e),l=it*-.5):(h=o-t,d=gt(a,e,n),l=it*.5),c=n-e),{titleX:h,titleY:d,maxWidth:c,rotation:l}}draw(){const t=this.ctx,e=this.options;if(!e.display)return;const i=lt(e.font),o=i.lineHeight/2+this._padding.top,{titleX:r,titleY:a,maxWidth:l,rotation:c}=this._drawArgs(o);Li(t,e.text,0,0,i,{color:e.color,maxWidth:l,rotation:c,textAlign:yc(e.align),textBaseline:"middle",translation:[r,a]})}}function yM(s,t){const e=new eh({ctx:s.ctx,options:t,chart:s});ft.configure(s,e,t),ft.addBox(s,e),s.titleBlock=e}var xg={id:"title",_element:eh,start(s,t,e){yM(s,e)},stop(s){const t=s.titleBlock;ft.removeBox(s,t),delete s.titleBlock},beforeUpdate(s,t,e){const i=s.titleBlock;ft.configure(s,i,e),i.options=e},defaults:{align:"center",display:!1,font:{weight:"bold"},fullSize:!0,padding:10,position:"top",text:"",weight:2e3},defaultRoutes:{color:"color"},descriptors:{_scriptable:!0,_indexable:!1}};const ca=new WeakMap;var Cg={id:"subtitle",start(s,t,e){const i=new eh({ctx:s.ctx,options:e,chart:s});ft.configure(s,i,e),ft.addBox(s,i),ca.set(s,i)},stop(s){ft.removeBox(s,ca.get(s)),ca.delete(s)},beforeUpdate(s,t,e){const i=ca.get(s);ft.configure(s,i,e),i.options=e},defaults:{align:"center",display:!1,font:{weight:"normal"},fullSize:!0,padding:0,position:"top",text:"",weight:1500},defaultRoutes:{color:"color"},descriptors:{_scriptable:!0,_indexable:!1}};const to={average(s){if(!s.length)return!1;let t,e,i=0,n=0,o=0;for(t=0,e=s.length;t<e;++t){const r=s[t].element;if(r&&r.hasValue()){const a=r.tooltipPosition();i+=a.x,n+=a.y,++o}}return{x:i/o,y:n/o}},nearest(s,t){if(!s.length)return!1;let e=t.x,i=t.y,n=Number.POSITIVE_INFINITY,o,r,a;for(o=0,r=s.length;o<r;++o){const l=s[o].element;if(l&&l.hasValue()){const c=l.getCenterPoint(),h=bc(t,c);h<n&&(n=h,a=l)}}if(a){const l=a.tooltipPosition();e=l.x,i=l.y}return{x:e,y:i}}};function Ce(s,t){return t&&(Q(t)?Array.prototype.push.apply(s,t):s.push(t)),s}function $e(s){return(typeof s=="string"||s instanceof String)&&s.indexOf(`
+`)>-1?s.split(`
+`):s}function TM(s,t){const{element:e,datasetIndex:i,index:n}=t,o=s.getDatasetMeta(i).controller,{label:r,value:a}=o.getLabelAndValue(n);return{chart:s,label:r,parsed:o.getParsed(n),raw:s.data.datasets[i].data[n],formattedValue:a,dataset:o.getDataset(),dataIndex:n,datasetIndex:i,element:e}}function Ag(s,t){const e=s.chart.ctx,{body:i,footer:n,title:o}=s,{boxWidth:r,boxHeight:a}=t,l=lt(t.bodyFont),c=lt(t.titleFont),h=lt(t.footerFont),d=o.length,u=n.length,p=i.length,f=pt(t.padding);let b=f.height,v=0,y=i.reduce((E,C)=>E+C.before.length+C.lines.length+C.after.length,0);if(y+=s.beforeBody.length+s.afterBody.length,d&&(b+=d*c.lineHeight+(d-1)*t.titleSpacing+t.titleMarginBottom),y){const E=t.displayColors?Math.max(a,l.lineHeight):l.lineHeight;b+=p*E+(y-p)*l.lineHeight+(y-1)*t.bodySpacing}u&&(b+=t.footerMarginTop+u*h.lineHeight+(u-1)*t.footerSpacing);let T=0;const x=function(E){v=Math.max(v,e.measureText(E).width+T)};return e.save(),e.font=c.string,U(s.title,x),e.font=l.string,U(s.beforeBody.concat(s.afterBody),x),T=t.displayColors?r+2+t.boxPadding:0,U(i,E=>{U(E.before,x),U(E.lines,x),U(E.after,x)}),T=0,e.font=h.string,U(s.footer,x),e.restore(),v+=f.width,{width:v,height:b}}function EM(s,t){const{y:e,height:i}=t;return e<i/2?"top":e>s.height-i/2?"bottom":"center"}function xM(s,t,e,i){const{x:n,width:o}=i,r=e.caretSize+e.caretPadding;if(s==="left"&&n+o+r>t.width||s==="right"&&n-o-r<0)return!0}function CM(s,t,e,i){const{x:n,width:o}=e,{width:r,chartArea:{left:a,right:l}}=s;let c="center";return i==="center"?c=n<=(a+l)/2?"left":"right":n<=o/2?c="left":n>=r-o/2&&(c="right"),xM(c,s,t,e)&&(c="center"),c}function wg(s,t,e){const i=e.yAlign||t.yAlign||EM(s,e);return{xAlign:e.xAlign||t.xAlign||CM(s,t,e,i),yAlign:i}}function AM(s,t){let{x:e,width:i}=s;return t==="right"?e-=i:t==="center"&&(e-=i/2),e}function wM(s,t,e){let{y:i,height:n}=s;return t==="top"?i+=e:t==="bottom"?i-=n+e:i-=n/2,i}function kg(s,t,e,i){const{caretSize:n,caretPadding:o,cornerRadius:r}=s,{xAlign:a,yAlign:l}=e,c=n+o,{topLeft:h,topRight:d,bottomLeft:u,bottomRight:p}=$i(r);let f=AM(t,a);const b=wM(t,l,c);return l==="center"?a==="left"?f+=c:a==="right"&&(f-=c):a==="left"?f-=Math.max(h,u)+n:a==="right"&&(f+=Math.max(d,p)+n),{x:dt(f,0,i.width-t.width),y:dt(b,0,i.height-t.height)}}function ha(s,t,e){const i=pt(e.padding);return t==="center"?s.x+s.width/2:t==="right"?s.x+s.width-i.right:s.x+i.left}function Sg(s){return Ce([],$e(s))}function kM(s,t,e){return ni(s,{tooltip:t,tooltipItems:e,type:"tooltip"})}function Og(s,t){const e=t&&t.dataset&&t.dataset.tooltip&&t.dataset.tooltip.callbacks;return e?s.override(e):s}class ih extends Xt{constructor(t){super(),this.opacity=0,this._active=[],this._eventPosition=void 0,this._size=void 0,this._cachedAnimations=void 0,this._tooltipItems=[],this.$animations=void 0,this.$context=void 0,this.chart=t.chart||t._chart,this._chart=this.chart,this.options=t.options,this.dataPoints=void 0,this.title=void 0,this.beforeBody=void 0,this.body=void 0,this.afterBody=void 0,this.footer=void 0,this.xAlign=void 0,this.yAlign=void 0,this.x=void 0,this.y=void 0,this.height=void 0,this.width=void 0,this.caretX=void 0,this.caretY=void 0,this.labelColors=void 0,this.labelPointStyles=void 0,this.labelTextColors=void 0}initialize(t){this.options=t,this._cachedAnimations=void 0,this.$context=void 0}_resolveAnimations(){const t=this._cachedAnimations;if(t)return t;const e=this.chart,i=this.options.setContext(this.getContext()),n=i.enabled&&e.options.animation&&i.animations,o=new Pc(this.chart,n);return n._cacheable&&(this._cachedAnimations=Object.freeze(o)),o}getContext(){return this.$context||(this.$context=kM(this.chart.getContext(),this,this._tooltipItems))}getTitle(t,e){const{callbacks:i}=e,n=i.beforeTitle.apply(this,[t]),o=i.title.apply(this,[t]),r=i.afterTitle.apply(this,[t]);let a=[];return a=Ce(a,$e(n)),a=Ce(a,$e(o)),a=Ce(a,$e(r)),a}getBeforeBody(t,e){return Sg(e.callbacks.beforeBody.apply(this,[t]))}getBody(t,e){const{callbacks:i}=e,n=[];return U(t,o=>{const r={before:[],lines:[],after:[]},a=Og(i,o);Ce(r.before,$e(a.beforeLabel.call(this,o))),Ce(r.lines,a.label.call(this,o)),Ce(r.after,$e(a.afterLabel.call(this,o))),n.push(r)}),n}getAfterBody(t,e){return Sg(e.callbacks.afterBody.apply(this,[t]))}getFooter(t,e){const{callbacks:i}=e,n=i.beforeFooter.apply(this,[t]),o=i.footer.apply(this,[t]),r=i.afterFooter.apply(this,[t]);let a=[];return a=Ce(a,$e(n)),a=Ce(a,$e(o)),a=Ce(a,$e(r)),a}_createItems(t){const e=this._active,i=this.chart.data,n=[],o=[],r=[];let a=[],l,c;for(l=0,c=e.length;l<c;++l)a.push(TM(this.chart,e[l]));return t.filter&&(a=a.filter((h,d,u)=>t.filter(h,d,u,i))),t.itemSort&&(a=a.sort((h,d)=>t.itemSort(h,d,i))),U(a,h=>{const d=Og(t.callbacks,h);n.push(d.labelColor.call(this,h)),o.push(d.labelPointStyle.call(this,h)),r.push(d.labelTextColor.call(this,h))}),this.labelColors=n,this.labelPointStyles=o,this.labelTextColors=r,this.dataPoints=a,a}update(t,e){const i=this.options.setContext(this.getContext()),n=this._active;let o,r=[];if(!n.length)this.opacity!==0&&(o={opacity:0});else{const a=to[i.position].call(this,n,this._eventPosition);r=this._createItems(i),this.title=this.getTitle(r,i),this.beforeBody=this.getBeforeBody(r,i),this.body=this.getBody(r,i),this.afterBody=this.getAfterBody(r,i),this.footer=this.getFooter(r,i);const l=this._size=Ag(this,i),c=Object.assign({},a,l),h=wg(this.chart,i,c),d=kg(i,c,h,this.chart);this.xAlign=h.xAlign,this.yAlign=h.yAlign,o={opacity:1,x:d.x,y:d.y,width:l.width,height:l.height,caretX:a.x,caretY:a.y}}this._tooltipItems=r,this.$context=void 0,o&&this._resolveAnimations().update(this,o),t&&i.external&&i.external.call(this,{chart:this.chart,tooltip:this,replay:e})}drawCaret(t,e,i,n){const o=this.getCaretPosition(t,i,n);e.lineTo(o.x1,o.y1),e.lineTo(o.x2,o.y2),e.lineTo(o.x3,o.y3)}getCaretPosition(t,e,i){const{xAlign:n,yAlign:o}=this,{caretSize:r,cornerRadius:a}=i,{topLeft:l,topRight:c,bottomLeft:h,bottomRight:d}=$i(a),{x:u,y:p}=t,{width:f,height:b}=e;let v,y,T,x,E,C;return o==="center"?(E=p+b/2,n==="left"?(v=u,y=v-r,x=E+r,C=E-r):(v=u+f,y=v+r,x=E-r,C=E+r),T=v):(n==="left"?y=u+Math.max(l,h)+r:n==="right"?y=u+f-Math.max(c,d)-r:y=this.caretX,o==="top"?(x=p,E=x-r,v=y-r,T=y+r):(x=p+b,E=x+r,v=y+r,T=y-r),C=x),{x1:v,x2:y,x3:T,y1:x,y2:E,y3:C}}drawTitle(t,e,i){const n=this.title,o=n.length;let r,a,l;if(o){const c=Os(i.rtl,this.x,this.width);for(t.x=ha(this,i.titleAlign,i),e.textAlign=c.textAlign(i.titleAlign),e.textBaseline="middle",r=lt(i.titleFont),a=i.titleSpacing,e.fillStyle=i.titleColor,e.font=r.string,l=0;l<o;++l)e.fillText(n[l],c.x(t.x),t.y+r.lineHeight/2),t.y+=r.lineHeight+a,l+1===o&&(t.y+=i.titleMarginBottom-a)}}_drawColorBox(t,e,i,n,o){const r=this.labelColors[i],a=this.labelPointStyles[i],{boxHeight:l,boxWidth:c,boxPadding:h}=o,d=lt(o.bodyFont),u=ha(this,"left",o),p=n.x(u),f=l<d.lineHeight?(d.lineHeight-l)/2:0,b=e.y+f;if(o.usePointStyle){const v={radius:Math.min(c,l)/2,pointStyle:a.pointStyle,rotation:a.rotation,borderWidth:1},y=n.leftForLtr(p,c)+c/2,T=b+l/2;t.strokeStyle=o.multiKeyBackground,t.fillStyle=o.multiKeyBackground,Oc(t,v,y,T),t.strokeStyle=r.borderColor,t.fillStyle=r.backgroundColor,Oc(t,v,y,T)}else{t.lineWidth=V(r.borderWidth)?Math.max(...Object.values(r.borderWidth)):r.borderWidth||1,t.strokeStyle=r.borderColor,t.setLineDash(r.borderDash||[]),t.lineDashOffset=r.borderDashOffset||0;const v=n.leftForLtr(p,c-h),y=n.leftForLtr(n.xPlus(p,1),c-h-2),T=$i(r.borderRadius);Object.values(T).some(x=>x!==0)?(t.beginPath(),t.fillStyle=o.multiKeyBackground,Nn(t,{x:v,y:b,w:c,h:l,radius:T}),t.fill(),t.stroke(),t.fillStyle=r.backgroundColor,t.beginPath(),Nn(t,{x:y,y:b+1,w:c-2,h:l-2,radius:T}),t.fill()):(t.fillStyle=o.multiKeyBackground,t.fillRect(v,b,c,l),t.strokeRect(v,b,c,l),t.fillStyle=r.backgroundColor,t.fillRect(y,b+1,c-2,l-2))}t.fillStyle=this.labelTextColors[i]}drawBody(t,e,i){const{body:n}=this,{bodySpacing:o,bodyAlign:r,displayColors:a,boxHeight:l,boxWidth:c,boxPadding:h}=i,d=lt(i.bodyFont);let u=d.lineHeight,p=0;const f=Os(i.rtl,this.x,this.width),b=function(S){e.fillText(S,f.x(t.x+p),t.y+u/2),t.y+=u+o},v=f.textAlign(r);let y,T,x,E,C,A,w;for(e.textAlign=r,e.textBaseline="middle",e.font=d.string,t.x=ha(this,v,i),e.fillStyle=i.bodyColor,U(this.beforeBody,b),p=a&&v!=="right"?r==="center"?c/2+h:c+2+h:0,E=0,A=n.length;E<A;++E){for(y=n[E],T=this.labelTextColors[E],e.fillStyle=T,U(y.before,b),x=y.lines,a&&x.length&&(this._drawColorBox(e,t,E,f,i),u=Math.max(d.lineHeight,l)),C=0,w=x.length;C<w;++C)b(x[C]),u=d.lineHeight;U(y.after,b)}p=0,u=d.lineHeight,U(this.afterBody,b),t.y-=o}drawFooter(t,e,i){const n=this.footer,o=n.length;let r,a;if(o){const l=Os(i.rtl,this.x,this.width);for(t.x=ha(this,i.footerAlign,i),t.y+=i.footerMarginTop,e.textAlign=l.textAlign(i.footerAlign),e.textBaseline="middle",r=lt(i.footerFont),e.fillStyle=i.footerColor,e.font=r.string,a=0;a<o;++a)e.fillText(n[a],l.x(t.x),t.y+r.lineHeight/2),t.y+=r.lineHeight+i.footerSpacing}}drawBackground(t,e,i,n){const{xAlign:o,yAlign:r}=this,{x:a,y:l}=t,{width:c,height:h}=i,{topLeft:d,topRight:u,bottomLeft:p,bottomRight:f}=$i(n.cornerRadius);e.fillStyle=n.backgroundColor,e.strokeStyle=n.borderColor,e.lineWidth=n.borderWidth,e.beginPath(),e.moveTo(a+d,l),r==="top"&&this.drawCaret(t,e,i,n),e.lineTo(a+c-u,l),e.quadraticCurveTo(a+c,l,a+c,l+u),r==="center"&&o==="right"&&this.drawCaret(t,e,i,n),e.lineTo(a+c,l+h-f),e.quadraticCurveTo(a+c,l+h,a+c-f,l+h),r==="bottom"&&this.drawCaret(t,e,i,n),e.lineTo(a+p,l+h),e.quadraticCurveTo(a,l+h,a,l+h-p),r==="center"&&o==="left"&&this.drawCaret(t,e,i,n),e.lineTo(a,l+d),e.quadraticCurveTo(a,l,a+d,l),e.closePath(),e.fill(),n.borderWidth>0&&e.stroke()}_updateAnimationTarget(t){const e=this.chart,i=this.$animations,n=i&&i.x,o=i&&i.y;if(n||o){const r=to[t.position].call(this,this._active,this._eventPosition);if(!r)return;const a=this._size=Ag(this,t),l=Object.assign({},r,this._size),c=wg(e,t,l),h=kg(t,l,c,e);(n._to!==h.x||o._to!==h.y)&&(this.xAlign=c.xAlign,this.yAlign=c.yAlign,this.width=a.width,this.height=a.height,this.caretX=r.x,this.caretY=r.y,this._resolveAnimations().update(this,h))}}_willRender(){return!!this.opacity}draw(t){const e=this.options.setContext(this.getContext());let i=this.opacity;if(!i)return;this._updateAnimationTarget(e);const n={width:this.width,height:this.height},o={x:this.x,y:this.y};i=Math.abs(i)<.001?0:i;const r=pt(e.padding),a=this.title.length||this.beforeBody.length||this.body.length||this.afterBody.length||this.footer.length;e.enabled&&a&&(t.save(),t.globalAlpha=i,this.drawBackground(o,t,n,e),o_(t,e.textDirection),o.y+=r.top,this.drawTitle(o,t,e),this.drawBody(o,t,e),this.drawFooter(o,t,e),r_(t,e.textDirection),t.restore())}getActiveElements(){return this._active||[]}setActiveElements(t,e){const i=this._active,n=t.map(({datasetIndex:a,index:l})=>{const c=this.chart.getDatasetMeta(a);if(!c)throw new Error("Cannot find a dataset at index "+a);return{datasetIndex:a,element:c.data[l],index:l}}),o=!Fr(i,n),r=this._positionChanged(n,e);(o||r)&&(this._active=n,this._eventPosition=e,this._ignoreReplayEvents=!0,this.update(!0))}handleEvent(t,e,i=!0){if(e&&this._ignoreReplayEvents)return!1;this._ignoreReplayEvents=!1;const n=this.options,o=this._active||[],r=this._getActiveElements(t,o,e,i),a=this._positionChanged(r,t),l=e||!Fr(r,o)||a;return l&&(this._active=r,(n.enabled||n.external)&&(this._eventPosition={x:t.x,y:t.y},this.update(!0,e))),l}_getActiveElements(t,e,i,n){const o=this.options;if(t.type==="mouseout")return[];if(!n)return e;const r=this.chart.getElementsAtEventForMode(t,o.mode,o,i);return o.reverse&&r.reverse(),r}_positionChanged(t,e){const{caretX:i,caretY:n,options:o}=this,r=to[o.position].call(this,t,e);return r!==!1&&(i!==r.x||n!==r.y)}}ih.positioners=to;var Ig={id:"tooltip",_element:ih,positioners:to,afterInit(s,t,e){e&&(s.tooltip=new ih({chart:s,options:e}))},beforeUpdate(s,t,e){s.tooltip&&s.tooltip.initialize(e)},reset(s,t,e){s.tooltip&&s.tooltip.initialize(e)},afterDraw(s){const t=s.tooltip;if(t&&t._willRender()){const e={tooltip:t};if(s.notifyPlugins("beforeTooltipDraw",e)===!1)return;t.draw(s.ctx),s.notifyPlugins("afterTooltipDraw",e)}},afterEvent(s,t){if(s.tooltip){const e=t.replay;s.tooltip.handleEvent(t.event,e,t.inChartArea)&&(t.changed=!0)}},defaults:{enabled:!0,external:null,position:"average",backgroundColor:"rgba(0,0,0,0.8)",titleColor:"#fff",titleFont:{weight:"bold"},titleSpacing:2,titleMarginBottom:6,titleAlign:"left",bodyColor:"#fff",bodySpacing:2,bodyFont:{},bodyAlign:"left",footerColor:"#fff",footerSpacing:2,footerMarginTop:6,footerFont:{weight:"bold"},footerAlign:"left",padding:6,caretPadding:2,caretSize:5,cornerRadius:6,boxHeight:(s,t)=>t.bodyFont.size,boxWidth:(s,t)=>t.bodyFont.size,multiKeyBackground:"#fff",displayColors:!0,boxPadding:0,borderColor:"rgba(0,0,0,0)",borderWidth:0,animation:{duration:400,easing:"easeOutQuart"},animations:{numbers:{type:"number",properties:["x","y","width","height","caretX","caretY"]},opacity:{easing:"linear",duration:200}},callbacks:{beforeTitle:Oe,title(s){if(s.length>0){const t=s[0],e=t.chart.data.labels,i=e?e.length:0;if(this&&this.options&&this.options.mode==="dataset")return t.dataset.label||"";if(t.label)return t.label;if(i>0&&t.dataIndex<i)return e[t.dataIndex]}return""},afterTitle:Oe,beforeBody:Oe,beforeLabel:Oe,label(s){if(this&&this.options&&this.options.mode==="dataset")return s.label+": "+s.formattedValue||s.formattedValue;let t=s.dataset.label||"";t&&(t+=": ");const e=s.formattedValue;return H(e)||(t+=e),t},labelColor(s){const e=s.chart.getDatasetMeta(s.datasetIndex).controller.getStyle(s.dataIndex);return{borderColor:e.borderColor,backgroundColor:e.backgroundColor,borderWidth:e.borderWidth,borderDash:e.borderDash,borderDashOffset:e.borderDashOffset,borderRadius:0}},labelTextColor(){return this.options.bodyColor},labelPointStyle(s){const e=s.chart.getDatasetMeta(s.datasetIndex).controller.getStyle(s.dataIndex);return{pointStyle:e.pointStyle,rotation:e.rotation}},afterLabel:Oe,afterBody:Oe,beforeFooter:Oe,footer:Oe,afterFooter:Oe}},defaultRoutes:{bodyFont:"font",footerFont:"font",titleFont:"font"},descriptors:{_scriptable:s=>s!=="filter"&&s!=="itemSort"&&s!=="external",_indexable:!1,callbacks:{_scriptable:!1,_indexable:!1},animation:{_fallback:!1},animations:{_fallback:"animation"}},additionalOptionScopes:["interaction"]},Dg=Object.freeze({__proto__:null,Decimation:dg,Filler:vg,Legend:Eg,SubTitle:Cg,Title:xg,Tooltip:Ig});const SM=(s,t,e,i)=>(typeof t=="string"?(e=s.push(t)-1,i.unshift({index:e,label:t})):isNaN(t)&&(e=null),e);function OM(s,t,e,i){const n=s.indexOf(t);if(n===-1)return SM(s,t,e,i);const o=s.lastIndexOf(t);return n!==o?e:n}const IM=(s,t)=>s===null?null:dt(Math.round(s),0,t);class eo extends oi{constructor(t){super(t),this._startValue=void 0,this._valueRange=0,this._addedLabels=[]}init(t){const e=this._addedLabels;if(e.length){const i=this.getLabels();for(const{index:n,label:o}of e)i[n]===o&&i.splice(n,1);this._addedLabels=[]}super.init(t)}parse(t,e){if(H(t))return null;const i=this.getLabels();return e=isFinite(e)&&i[e]===t?e:OM(i,t,B(e,t),this._addedLabels),IM(e,i.length-1)}determineDataLimits(){const{minDefined:t,maxDefined:e}=this.getUserBounds();let{min:i,max:n}=this.getMinMax(!0);this.options.bounds==="ticks"&&(t||(i=0),e||(n=this.getLabels().length-1)),this.min=i,this.max=n}buildTicks(){const t=this.min,e=this.max,i=this.options.offset,n=[];let o=this.getLabels();o=t===0&&e===o.length-1?o:o.slice(t,e+1),this._valueRange=Math.max(o.length-(i?0:1),1),this._startValue=this.min-(i?.5:0);for(let r=t;r<=e;r++)n.push({value:r});return n}getLabelForValue(t){const e=this.getLabels();return t>=0&&t<e.length?e[t]:t}configure(){super.configure(),this.isHorizontal()||(this._reversePixels=!this._reversePixels)}getPixelForValue(t){return typeof t!="number"&&(t=this.parse(t)),t===null?NaN:this.getPixelForDecimal((t-this._startValue)/this._valueRange)}getPixelForTick(t){const e=this.ticks;return t<0||t>e.length-1?null:this.getPixelForValue(e[t].value)}getValueForPixel(t){return Math.round(this._startValue+this.getDecimalForPixel(t)*this._valueRange)}getBasePixel(){return this.bottom}}eo.id="category",eo.defaults={ticks:{callback:eo.prototype.getLabelForValue}};function DM(s,t){const e=[],{bounds:n,step:o,min:r,max:a,precision:l,count:c,maxTicks:h,maxDigits:d,includeBounds:u}=s,p=o||1,f=h-1,{min:b,max:v}=t,y=!H(r),T=!H(a),x=!H(c),E=(v-b)/(d+1);let C=Tf((v-b)/f/p)*p,A,w,S,k;if(C<1e-14&&!y&&!T)return[{value:b},{value:v}];k=Math.ceil(v/C)-Math.floor(b/C),k>f&&(C=Tf(k*C/f/p)*p),H(l)||(A=Math.pow(10,l),C=Math.ceil(C*A)/A),n==="ticks"?(w=Math.floor(b/C)*C,S=Math.ceil(v/C)*C):(w=b,S=v),y&&T&&o&&MO((a-r)/o,C/1e3)?(k=Math.round(Math.min((a-r)/C,h)),C=(a-r)/k,w=r,S=a):x?(w=y?r:w,S=T?a:S,k=c-1,C=(S-w)/k):(k=(S-w)/C,In(k,Math.round(k),C/1e3)?k=Math.round(k):k=Math.ceil(k));const D=Math.max(xf(C),xf(w));A=Math.pow(10,H(l)?D:l),w=Math.round(w*A)/A,S=Math.round(S*A)/A;let I=0;for(y&&(u&&w!==r?(e.push({value:r}),w<r&&I++,In(Math.round((w+I*C)*A)/A,r,Mg(r,E,s))&&I++):w<r&&I++);I<k;++I)e.push({value:Math.round((w+I*C)*A)/A});return T&&u&&S!==a?e.length&&In(e[e.length-1].value,a,Mg(a,E,s))?e[e.length-1].value=a:e.push({value:a}):(!T||S===a)&&e.push({value:S}),e}function Mg(s,t,{horizontal:e,minRotation:i}){const n=se(i),o=(e?Math.sin(n):Math.cos(n))||.001,r=.75*t*(""+s).length;return Math.min(t/o,r)}class da extends oi{constructor(t){super(t),this.start=void 0,this.end=void 0,this._startValue=void 0,this._endValue=void 0,this._valueRange=0}parse(t,e){return H(t)||(typeof t=="number"||t instanceof Number)&&!isFinite(+t)?null:+t}handleTickRangeOptions(){const{beginAtZero:t}=this.options,{minDefined:e,maxDefined:i}=this.getUserBounds();let{min:n,max:o}=this;const r=l=>n=e?n:l,a=l=>o=i?o:l;if(t){const l=Ee(n),c=Ee(o);l<0&&c<0?a(0):l>0&&c>0&&r(0)}if(n===o){let l=1;(o>=Number.MAX_SAFE_INTEGER||n<=Number.MIN_SAFE_INTEGER)&&(l=Math.abs(o*.05)),a(o+l),t||r(n-l)}this.min=n,this.max=o}getTickLimit(){const t=this.options.ticks;let{maxTicksLimit:e,stepSize:i}=t,n;return i?(n=Math.ceil(this.max/i)-Math.floor(this.min/i)+1,n>1e3&&(console.warn(`scales.${this.id}.ticks.stepSize: ${i} would result generating up to ${n} ticks. Limiting to 1000.`),n=1e3)):(n=this.computeTickLimit(),e=e||11),e&&(n=Math.min(e,n)),n}computeTickLimit(){return Number.POSITIVE_INFINITY}buildTicks(){const t=this.options,e=t.ticks;let i=this.getTickLimit();i=Math.max(2,i);const n={maxTicks:i,bounds:t.bounds,min:t.min,max:t.max,precision:e.precision,step:e.stepSize,count:e.count,maxDigits:this._maxDigits(),horizontal:this.isHorizontal(),minRotation:e.minRotation||0,includeBounds:e.includeBounds!==!1},o=this._range||this,r=DM(n,o);return t.bounds==="ticks"&&Ef(r,this,"value"),t.reverse?(r.reverse(),this.start=this.max,this.end=this.min):(this.start=this.min,this.end=this.max),r}configure(){const t=this.ticks;let e=this.min,i=this.max;if(super.configure(),this.options.offset&&t.length){const n=(i-e)/Math.max(t.length-1,1)/2;e-=n,i+=n}this._startValue=e,this._endValue=i,this._valueRange=i-e}getLabelForValue(t){return Bn(t,this.chart.options.locale,this.options.ticks.format)}}class ua extends da{determineDataLimits(){const{min:t,max:e}=this.getMinMax(!0);this.min=rt(t)?t:0,this.max=rt(e)?e:1,this.handleTickRangeOptions()}computeTickLimit(){const t=this.isHorizontal(),e=t?this.width:this.height,i=se(this.options.ticks.minRotation),n=(t?Math.sin(i):Math.cos(i))||.001,o=this._resolveTickFontOptions(0);return Math.ceil(e/Math.min(40,o.lineHeight/n))}getPixelForValue(t){return t===null?NaN:this.getPixelForDecimal((t-this._startValue)/this._valueRange)}getValueForPixel(t){return this._startValue+this.getDecimalForPixel(t)*this._valueRange}}ua.id="linear",ua.defaults={ticks:{callback:Yn.formatters.numeric}};function Lg(s){return s/Math.pow(10,Math.floor(Yt(s)))===1}function MM(s,t){const e=Math.floor(Yt(t.max)),i=Math.ceil(t.max/Math.pow(10,e)),n=[];let o=zt(s.min,Math.pow(10,Math.floor(Yt(t.min)))),r=Math.floor(Yt(o)),a=Math.floor(o/Math.pow(10,r)),l=r<0?Math.pow(10,Math.abs(r)):1;do n.push({value:o,major:Lg(o)}),++a,a===10&&(a=1,++r,l=r>=0?1:l),o=Math.round(a*Math.pow(10,r)*l)/l;while(r<e||r===e&&a<i);const c=zt(s.max,o);return n.push({value:c,major:Lg(o)}),n}class pa extends oi{constructor(t){super(t),this.start=void 0,this.end=void 0,this._startValue=void 0,this._valueRange=0}parse(t,e){const i=da.prototype.parse.apply(this,[t,e]);if(i===0){this._zero=!0;return}return rt(i)&&i>0?i:null}determineDataLimits(){const{min:t,max:e}=this.getMinMax(!0);this.min=rt(t)?Math.max(0,t):null,this.max=rt(e)?Math.max(0,e):null,this.options.beginAtZero&&(this._zero=!0),this.handleTickRangeOptions()}handleTickRangeOptions(){const{minDefined:t,maxDefined:e}=this.getUserBounds();let i=this.min,n=this.max;const o=l=>i=t?i:l,r=l=>n=e?n:l,a=(l,c)=>Math.pow(10,Math.floor(Yt(l))+c);i===n&&(i<=0?(o(1),r(10)):(o(a(i,-1)),r(a(n,1)))),i<=0&&o(a(n,-1)),n<=0&&r(a(i,1)),this._zero&&this.min!==this._suggestedMin&&i===a(this.min,0)&&o(a(i,-1)),this.min=i,this.max=n}buildTicks(){const t=this.options,e={min:this._userMin,max:this._userMax},i=MM(e,this);return t.bounds==="ticks"&&Ef(i,this,"value"),t.reverse?(i.reverse(),this.start=this.max,this.end=this.min):(this.start=this.min,this.end=this.max),i}getLabelForValue(t){return t===void 0?"0":Bn(t,this.chart.options.locale,this.options.ticks.format)}configure(){const t=this.min;super.configure(),this._startValue=Yt(t),this._valueRange=Yt(this.max)-Yt(t)}getPixelForValue(t){return(t===void 0||t===0)&&(t=this.min),t===null||isNaN(t)?NaN:this.getPixelForDecimal(t===this.min?0:(Yt(t)-this._startValue)/this._valueRange)}getValueForPixel(t){const e=this.getDecimalForPixel(t);return Math.pow(10,this._startValue+e*this._valueRange)}}pa.id="logarithmic",pa.defaults={ticks:{callback:Yn.formatters.logarithmic,major:{enabled:!0}}};function sh(s){const t=s.ticks;if(t.display&&s.display){const e=pt(t.backdropPadding);return B(t.font&&t.font.size,F.font.size)+e.height}return 0}function LM(s,t,e){return e=Q(e)?e:[e],{w:hI(s,t.string,e),h:e.length*t.lineHeight}}function $g(s,t,e,i,n){return s===i||s===n?{start:t-e/2,end:t+e/2}:s<i||s>n?{start:t-e,end:t}:{start:t,end:t+e}}function $M(s){const t={l:s.left+s._padding.left,r:s.right-s._padding.right,t:s.top+s._padding.top,b:s.bottom-s._padding.bottom},e=Object.assign({},t),i=[],n=[],o=s._pointLabels.length,r=s.options.pointLabels,a=r.centerPointLabels?it/o:0;for(let l=0;l<o;l++){const c=r.setContext(s.getPointLabelContext(l));n[l]=c.padding;const h=s.getPointPosition(l,s.drawingArea+n[l],a),d=lt(c.font),u=LM(s.ctx,d,s._pointLabels[l]);i[l]=u;const p=Vt(s.getIndexAngle(l)+a),f=Math.round(mc(p)),b=$g(f,h.x,u.w,0,180),v=$g(f,h.y,u.h,90,270);RM(e,t,p,b,v)}s.setCenterPoint(t.l-e.l,e.r-t.r,t.t-e.t,e.b-t.b),s._pointLabelItems=PM(s,i,n)}function RM(s,t,e,i,n){const o=Math.abs(Math.sin(e)),r=Math.abs(Math.cos(e));let a=0,l=0;i.start<t.l?(a=(t.l-i.start)/o,s.l=Math.min(s.l,t.l-a)):i.end>t.r&&(a=(i.end-t.r)/o,s.r=Math.max(s.r,t.r+a)),n.start<t.t?(l=(t.t-n.start)/r,s.t=Math.min(s.t,t.t-l)):n.end>t.b&&(l=(n.end-t.b)/r,s.b=Math.max(s.b,t.b+l))}function PM(s,t,e){const i=[],n=s._pointLabels.length,o=s.options,r=sh(o)/2,a=s.drawingArea,l=o.pointLabels.centerPointLabels?it/n:0;for(let c=0;c<n;c++){const h=s.getPointPosition(c,a+r+e[c],l),d=Math.round(mc(Vt(h.angle+nt))),u=t[c],p=HM(h.y,u.h,d),f=NM(d),b=BM(h.x,u.w,f);i.push({x:h.x,y:p,textAlign:f,left:b,top:p,right:b+u.w,bottom:p+u.h})}return i}function NM(s){return s===0||s===180?"center":s<180?"left":"right"}function BM(s,t,e){return e==="right"?s-=t:e==="center"&&(s-=t/2),s}function HM(s,t,e){return e===90||e===270?s-=t/2:(e>270||e<90)&&(s-=t),s}function VM(s,t){const{ctx:e,options:{pointLabels:i}}=s;for(let n=t-1;n>=0;n--){const o=i.setContext(s.getPointLabelContext(n)),r=lt(o.font),{x:a,y:l,textAlign:c,left:h,top:d,right:u,bottom:p}=s._pointLabelItems[n],{backdropColor:f}=o;if(!H(f)){const b=$i(o.borderRadius),v=pt(o.backdropPadding);e.fillStyle=f;const y=h-v.left,T=d-v.top,x=u-h+v.width,E=p-d+v.height;Object.values(b).some(C=>C!==0)?(e.beginPath(),Nn(e,{x:y,y:T,w:x,h:E,radius:b}),e.fill()):e.fillRect(y,T,x,E)}Li(e,s._pointLabels[n],a,l+r.lineHeight/2,r,{color:o.color,textAlign:c,textBaseline:"middle"})}}function Rg(s,t,e,i){const{ctx:n}=s;if(e)n.arc(s.xCenter,s.yCenter,t,0,q);else{let o=s.getPointPosition(0,t);n.moveTo(o.x,o.y);for(let r=1;r<i;r++)o=s.getPointPosition(r,t),n.lineTo(o.x,o.y)}}function FM(s,t,e,i){const n=s.ctx,o=t.circular,{color:r,lineWidth:a}=t;!o&&!i||!r||!a||e<0||(n.save(),n.strokeStyle=r,n.lineWidth=a,n.setLineDash(t.borderDash),n.lineDashOffset=t.borderDashOffset,n.beginPath(),Rg(s,e,o,i),n.closePath(),n.stroke(),n.restore())}function WM(s,t,e){return ni(s,{label:e,index:t,type:"pointLabel"})}class $s extends da{constructor(t){super(t),this.xCenter=void 0,this.yCenter=void 0,this.drawingArea=void 0,this._pointLabels=[],this._pointLabelItems=[]}setDimensions(){const t=this._padding=pt(sh(this.options)/2),e=this.width=this.maxWidth-t.width,i=this.height=this.maxHeight-t.height;this.xCenter=Math.floor(this.left+e/2+t.left),this.yCenter=Math.floor(this.top+i/2+t.top),this.drawingArea=Math.floor(Math.min(e,i)/2)}determineDataLimits(){const{min:t,max:e}=this.getMinMax(!1);this.min=rt(t)&&!isNaN(t)?t:0,this.max=rt(e)&&!isNaN(e)?e:0,this.handleTickRangeOptions()}computeTickLimit(){return Math.ceil(this.drawingArea/sh(this.options))}generateTickLabels(t){da.prototype.generateTickLabels.call(this,t),this._pointLabels=this.getLabels().map((e,i)=>{const n=G(this.options.pointLabels.callback,[e,i],this);return n||n===0?n:""}).filter((e,i)=>this.chart.getDataVisibility(i))}fit(){const t=this.options;t.display&&t.pointLabels.display?$M(this):this.setCenterPoint(0,0,0,0)}setCenterPoint(t,e,i,n){this.xCenter+=Math.floor((t-e)/2),this.yCenter+=Math.floor((i-n)/2),this.drawingArea-=Math.min(this.drawingArea/2,Math.max(t,e,i,n))}getIndexAngle(t){const e=q/(this._pointLabels.length||1),i=this.options.startAngle||0;return Vt(t*e+se(i))}getDistanceFromCenterForValue(t){if(H(t))return NaN;const e=this.drawingArea/(this.max-this.min);return this.options.reverse?(this.max-t)*e:(t-this.min)*e}getValueForDistanceFromCenter(t){if(H(t))return NaN;const e=t/(this.drawingArea/(this.max-this.min));return this.options.reverse?this.max-e:this.min+e}getPointLabelContext(t){const e=this._pointLabels||[];if(t>=0&&t<e.length){const i=e[t];return WM(this.getContext(),t,i)}}getPointPosition(t,e,i=0){const n=this.getIndexAngle(t)-nt+i;return{x:Math.cos(n)*e+this.xCenter,y:Math.sin(n)*e+this.yCenter,angle:n}}getPointPositionForValue(t,e){return this.getPointPosition(t,this.getDistanceFromCenterForValue(e))}getBasePosition(t){return this.getPointPositionForValue(t||0,this.getBaseValue())}getPointLabelPosition(t){const{left:e,top:i,right:n,bottom:o}=this._pointLabelItems[t];return{left:e,top:i,right:n,bottom:o}}drawBackground(){const{backgroundColor:t,grid:{circular:e}}=this.options;if(t){const i=this.ctx;i.save(),i.beginPath(),Rg(this,this.getDistanceFromCenterForValue(this._endValue),e,this._pointLabels.length),i.closePath(),i.fillStyle=t,i.fill(),i.restore()}}drawGrid(){const t=this.ctx,e=this.options,{angleLines:i,grid:n}=e,o=this._pointLabels.length;let r,a,l;if(e.pointLabels.display&&VM(this,o),n.display&&this.ticks.forEach((c,h)=>{if(h!==0){a=this.getDistanceFromCenterForValue(c.value);const d=n.setContext(this.getContext(h-1));FM(this,d,a,o)}}),i.display){for(t.save(),r=o-1;r>=0;r--){const c=i.setContext(this.getPointLabelContext(r)),{color:h,lineWidth:d}=c;!d||!h||(t.lineWidth=d,t.strokeStyle=h,t.setLineDash(c.borderDash),t.lineDashOffset=c.borderDashOffset,a=this.getDistanceFromCenterForValue(e.ticks.reverse?this.min:this.max),l=this.getPointPosition(r,a),t.beginPath(),t.moveTo(this.xCenter,this.yCenter),t.lineTo(l.x,l.y),t.stroke())}t.restore()}}drawBorder(){}drawLabels(){const t=this.ctx,e=this.options,i=e.ticks;if(!i.display)return;const n=this.getIndexAngle(0);let o,r;t.save(),t.translate(this.xCenter,this.yCenter),t.rotate(n),t.textAlign="center",t.textBaseline="middle",this.ticks.forEach((a,l)=>{if(l===0&&!e.reverse)return;const c=i.setContext(this.getContext(l)),h=lt(c.font);if(o=this.getDistanceFromCenterForValue(this.ticks[l].value),c.showLabelBackdrop){t.font=h.string,r=t.measureText(a.label).width,t.fillStyle=c.backdropColor;const d=pt(c.backdropPadding);t.fillRect(-r/2-d.left,-o-h.size/2-d.top,r+d.width,h.size+d.height)}Li(t,a.label,0,-o,h,{color:c.color})}),t.restore()}drawTitle(){}}$s.id="radialLinear",$s.defaults={display:!0,animate:!0,position:"chartArea",angleLines:{display:!0,lineWidth:1,borderDash:[],borderDashOffset:0},grid:{circular:!1},startAngle:0,ticks:{showLabelBackdrop:!0,callback:Yn.formatters.numeric},pointLabels:{backdropColor:void 0,backdropPadding:2,display:!0,font:{size:10},callback(s){return s},padding:5,centerPointLabels:!1}},$s.defaultRoutes={"angleLines.color":"borderColor","pointLabels.color":"color","ticks.color":"color"},$s.descriptors={angleLines:{_fallback:"grid"}};const fa={millisecond:{common:!0,size:1,steps:1e3},second:{common:!0,size:1e3,steps:60},minute:{common:!0,size:6e4,steps:60},hour:{common:!0,size:36e5,steps:24},day:{common:!0,size:864e5,steps:30},week:{common:!1,size:6048e5,steps:4},month:{common:!0,size:2628e6,steps:12},quarter:{common:!1,size:7884e6,steps:4},year:{common:!0,size:3154e7}},It=Object.keys(fa);function zM(s,t){return s-t}function Pg(s,t){if(H(t))return null;const e=s._adapter,{parser:i,round:n,isoWeekday:o}=s._parseOpts;let r=t;return typeof i=="function"&&(r=i(r)),rt(r)||(r=typeof i=="string"?e.parse(r,i):e.parse(r)),r===null?null:(n&&(r=n==="week"&&(As(o)||o===!0)?e.startOf(r,"isoWeek",o):e.startOf(r,n)),+r)}function Ng(s,t,e,i){const n=It.length;for(let o=It.indexOf(s);o<n-1;++o){const r=fa[It[o]],a=r.steps?r.steps:Number.MAX_SAFE_INTEGER;if(r.common&&Math.ceil((e-t)/(a*r.size))<=i)return It[o]}return It[n-1]}function jM(s,t,e,i,n){for(let o=It.length-1;o>=It.indexOf(e);o--){const r=It[o];if(fa[r].common&&s._adapter.diff(n,i,r)>=t-1)return r}return It[e?It.indexOf(e):0]}function YM(s){for(let t=It.indexOf(s)+1,e=It.length;t<e;++t)if(fa[It[t]].common)return It[t]}function Bg(s,t,e){if(!e)s[t]=!0;else if(e.length){const{lo:i,hi:n}=vc(e,t),o=e[i]>=t?e[i]:e[n];s[o]=!0}}function KM(s,t,e,i){const n=s._adapter,o=+n.startOf(t[0].value,i),r=t[t.length-1].value;let a,l;for(a=o;a<=r;a=+n.add(a,1,i))l=e[a],l>=0&&(t[l].major=!0);return t}function Hg(s,t,e){const i=[],n={},o=t.length;let r,a;for(r=0;r<o;++r)a=t[r],n[a]=r,i.push({value:a,major:!1});return o===0||!e?i:KM(s,i,n,e)}class Rs extends oi{constructor(t){super(t),this._cache={data:[],labels:[],all:[]},this._unit="day",this._majorUnit=void 0,this._offsets={},this._normalized=!1,this._parseOpts=void 0}init(t,e){const i=t.time||(t.time={}),n=this._adapter=new D_._date(t.adapters.date);n.init(e),Sn(i.displayFormats,n.formats()),this._parseOpts={parser:i.parser,round:i.round,isoWeekday:i.isoWeekday},super.init(t),this._normalized=e.normalized}parse(t,e){return t===void 0?null:Pg(this,t)}beforeLayout(){super.beforeLayout(),this._cache={data:[],labels:[],all:[]}}determineDataLimits(){const t=this.options,e=this._adapter,i=t.time.unit||"day";let{min:n,max:o,minDefined:r,maxDefined:a}=this.getUserBounds();function l(c){!r&&!isNaN(c.min)&&(n=Math.min(n,c.min)),!a&&!isNaN(c.max)&&(o=Math.max(o,c.max))}(!r||!a)&&(l(this._getLabelBounds()),(t.bounds!=="ticks"||t.ticks.source!=="labels")&&l(this.getMinMax(!1))),n=rt(n)&&!isNaN(n)?n:+e.startOf(Date.now(),i),o=rt(o)&&!isNaN(o)?o:+e.endOf(Date.now(),i)+1,this.min=Math.min(n,o-1),this.max=Math.max(n+1,o)}_getLabelBounds(){const t=this.getLabelTimestamps();let e=Number.POSITIVE_INFINITY,i=Number.NEGATIVE_INFINITY;return t.length&&(e=t[0],i=t[t.length-1]),{min:e,max:i}}buildTicks(){const t=this.options,e=t.time,i=t.ticks,n=i.source==="labels"?this.getLabelTimestamps():this._generate();t.bounds==="ticks"&&n.length&&(this.min=this._userMin||n[0],this.max=this._userMax||n[n.length-1]);const o=this.min,r=this.max,a=PO(n,o,r);return this._unit=e.unit||(i.autoSkip?Ng(e.minUnit,this.min,this.max,this._getLabelCapacity(o)):jM(this,a.length,e.minUnit,this.min,this.max)),this._majorUnit=!i.major.enabled||this._unit==="year"?void 0:YM(this._unit),this.initOffsets(n),t.reverse&&a.reverse(),Hg(this,a,this._majorUnit)}afterAutoSkip(){this.options.offsetAfterAutoskip&&this.initOffsets(this.ticks.map(t=>+t.value))}initOffsets(t){let e=0,i=0,n,o;this.options.offset&&t.length&&(n=this.getDecimalForValue(t[0]),t.length===1?e=1-n:e=(this.getDecimalForValue(t[1])-n)/2,o=this.getDecimalForValue(t[t.length-1]),t.length===1?i=o:i=(o-this.getDecimalForValue(t[t.length-2]))/2);const r=t.length<3?.5:.25;e=dt(e,0,r),i=dt(i,0,r),this._offsets={start:e,end:i,factor:1/(e+1+i)}}_generate(){const t=this._adapter,e=this.min,i=this.max,n=this.options,o=n.time,r=o.unit||Ng(o.minUnit,e,i,this._getLabelCapacity(e)),a=B(o.stepSize,1),l=r==="week"?o.isoWeekday:!1,c=As(l)||l===!0,h={};let d=e,u,p;if(c&&(d=+t.startOf(d,"isoWeek",l)),d=+t.startOf(d,c?"day":r),t.diff(i,e,r)>1e5*a)throw new Error(e+" and "+i+" are too far apart with stepSize of "+a+" "+r);const f=n.ticks.source==="data"&&this.getDataTimestamps();for(u=d,p=0;u<i;u=+t.add(u,a,r),p++)Bg(h,u,f);return(u===i||n.bounds==="ticks"||p===1)&&Bg(h,u,f),Object.keys(h).sort((b,v)=>b-v).map(b=>+b)}getLabelForValue(t){const e=this._adapter,i=this.options.time;return i.tooltipFormat?e.format(t,i.tooltipFormat):e.format(t,i.displayFormats.datetime)}_tickFormatFunction(t,e,i,n){const o=this.options,r=o.time.displayFormats,a=this._unit,l=this._majorUnit,c=a&&r[a],h=l&&r[l],d=i[e],u=l&&h&&d&&d.major,p=this._adapter.format(t,n||(u?h:c)),f=o.ticks.callback;return f?G(f,[p,e,i],this):p}generateTickLabels(t){let e,i,n;for(e=0,i=t.length;e<i;++e)n=t[e],n.label=this._tickFormatFunction(n.value,e,t)}getDecimalForValue(t){return t===null?NaN:(t-this.min)/(this.max-this.min)}getPixelForValue(t){const e=this._offsets,i=this.getDecimalForValue(t);return this.getPixelForDecimal((e.start+i)*e.factor)}getValueForPixel(t){const e=this._offsets,i=this.getDecimalForPixel(t)/e.factor-e.end;return this.min+i*(this.max-this.min)}_getLabelSize(t){const e=this.options.ticks,i=this.ctx.measureText(t).width,n=se(this.isHorizontal()?e.maxRotation:e.minRotation),o=Math.cos(n),r=Math.sin(n),a=this._resolveTickFontOptions(0).size;return{w:i*o+a*r,h:i*r+a*o}}_getLabelCapacity(t){const e=this.options.time,i=e.displayFormats,n=i[e.unit]||i.millisecond,o=this._tickFormatFunction(t,0,Hg(this,[t],this._majorUnit),n),r=this._getLabelSize(o),a=Math.floor(this.isHorizontal()?this.width/r.w:this.height/r.h)-1;return a>0?a:1}getDataTimestamps(){let t=this._cache.data||[],e,i;if(t.length)return t;const n=this.getMatchingVisibleMetas();if(this._normalized&&n.length)return this._cache.data=n[0].controller.getAllParsedValues(this);for(e=0,i=n.length;e<i;++e)t=t.concat(n[e].controller.getAllParsedValues(this));return this._cache.data=this.normalize(t)}getLabelTimestamps(){const t=this._cache.labels||[];let e,i;if(t.length)return t;const n=this.getLabels();for(e=0,i=n.length;e<i;++e)t.push(Pg(this,n[e]));return this._cache.labels=this._normalized?t:this.normalize(t)}normalize(t){return kf(t.sort(zM))}}Rs.id="time",Rs.defaults={bounds:"data",adapters:{},time:{parser:!1,unit:!1,round:!1,isoWeekday:!1,minUnit:"millisecond",displayFormats:{}},ticks:{source:"auto",major:{enabled:!1}}};function _a(s,t,e){let i=0,n=s.length-1,o,r,a,l;e?(t>=s[i].pos&&t<=s[n].pos&&({lo:i,hi:n}=De(s,"pos",t)),{pos:o,time:a}=s[i],{pos:r,time:l}=s[n]):(t>=s[i].time&&t<=s[n].time&&({lo:i,hi:n}=De(s,"time",t)),{time:o,pos:a}=s[i],{time:r,pos:l}=s[n]);const c=r-o;return c?a+(l-a)*(t-o)/c:a}class ga extends Rs{constructor(t){super(t),this._table=[],this._minPos=void 0,this._tableRange=void 0}initOffsets(){const t=this._getTimestampsForTable(),e=this._table=this.buildLookupTable(t);this._minPos=_a(e,this.min),this._tableRange=_a(e,this.max)-this._minPos,super.initOffsets(t)}buildLookupTable(t){const{min:e,max:i}=this,n=[],o=[];let r,a,l,c,h;for(r=0,a=t.length;r<a;++r)c=t[r],c>=e&&c<=i&&n.push(c);if(n.length<2)return[{time:e,pos:0},{time:i,pos:1}];for(r=0,a=n.length;r<a;++r)h=n[r+1],l=n[r-1],c=n[r],Math.round((h+l)/2)!==c&&o.push({time:c,pos:r/(a-1)});return o}_getTimestampsForTable(){let t=this._cache.all||[];if(t.length)return t;const e=this.getDataTimestamps(),i=this.getLabelTimestamps();return e.length&&i.length?t=this.normalize(e.concat(i)):t=e.length?e:i,t=this._cache.all=t,t}getDecimalForValue(t){return(_a(this._table,t)-this._minPos)/this._tableRange}getValueForPixel(t){const e=this._offsets,i=this.getDecimalForPixel(t)/e.factor-e.end;return _a(this._table,i*this._tableRange+this._minPos,!0)}}ga.id="timeseries",ga.defaults=Rs.defaults;var Vg=Object.freeze({__proto__:null,CategoryScale:eo,LinearScale:ua,LogarithmicScale:pa,RadialLinearScale:$s,TimeScale:Rs,TimeSeriesScale:ga});const UM=Object.freeze(Object.defineProperty({__proto__:null,Animation:f_,Animations:Pc,ArcElement:Ds,BarController:Vn,BarElement:Ls,BasePlatform:zc,BasicPlatform:H_,BubbleController:Fn,CategoryScale:eo,Chart:Uc,DatasetController:Ut,Decimation:dg,DomPlatform:j_,DoughnutController:Bi,Element:Xt,Filler:vg,Interaction:L_,Legend:Eg,LineController:Wn,LineElement:Le,LinearScale:ua,LogarithmicScale:pa,PieController:ea,PointElement:Ms,PolarAreaController:zn,RadarController:jn,RadialLinearScale:$s,Scale:oi,ScatterController:Un,SubTitle:Cg,Ticks:Yn,TimeScale:Rs,TimeSeriesScale:ga,Title:xg,Tooltip:Ig,_adapters:D_,_detectPlatform:Y_,animator:xe,controllers:I_,defaults:F,elements:lg,layouts:ft,plugins:Dg,registerables:[I_,lg,Dg,Vg],registry:ne,scales:Vg},Symbol.toStringTag,{value:"Module"}));/*!
+ * chartjs-plugin-datalabels v2.2.0
+ * https://chartjs-plugin-datalabels.netlify.app
+ * (c) 2017-2022 chartjs-plugin-datalabels contributors
+ * Released under the MIT license
+ */var Fg=function(){if(typeof window<"u"){if(window.devicePixelRatio)return window.devicePixelRatio;var s=window.screen;if(s)return(s.deviceXDPI||1)/(s.logicalXDPI||1)}return 1}(),io={toTextLines:function(s){var t=[],e;for(s=[].concat(s);s.length;)e=s.pop(),typeof e=="string"?t.unshift.apply(t,e.split(`
+`)):Array.isArray(e)?s.push.apply(s,e):H(s)||t.unshift(""+e);return t},textSize:function(s,t,e){var i=[].concat(t),n=i.length,o=s.font,r=0,a;for(s.font=e.string,a=0;a<n;++a)r=Math.max(s.measureText(i[a]).width,r);return s.font=o,{height:n*e.lineHeight,width:r}},bound:function(s,t,e){return Math.max(s,Math.min(t,e))},arrayDiff:function(s,t){var e=s.slice(),i=[],n,o,r,a;for(n=0,r=t.length;n<r;++n)a=t[n],o=e.indexOf(a),o===-1?i.push([a,1]):e.splice(o,1);for(n=0,r=e.length;n<r;++n)i.push([e[n],-1]);return i},rasterize:function(s){return Math.round(s*Fg)/Fg}};function nh(s,t){var e=t.x,i=t.y;if(e===null)return{x:0,y:-1};if(i===null)return{x:1,y:0};var n=s.x-e,o=s.y-i,r=Math.sqrt(n*n+o*o);return{x:r?n/r:0,y:r?o/r:-1}}function XM(s,t,e,i,n){switch(n){case"center":e=i=0;break;case"bottom":e=0,i=1;break;case"right":e=1,i=0;break;case"left":e=-1,i=0;break;case"top":e=0,i=-1;break;case"start":e=-e,i=-i;break;case"end":break;default:n*=Math.PI/180,e=Math.cos(n),i=Math.sin(n);break}return{x:s,y:t,vx:e,vy:i}}var GM=0,Wg=1,zg=2,jg=4,Yg=8;function ma(s,t,e){var i=GM;return s<e.left?i|=Wg:s>e.right&&(i|=zg),t<e.top?i|=Yg:t>e.bottom&&(i|=jg),i}function qM(s,t){for(var e=s.x0,i=s.y0,n=s.x1,o=s.y1,r=ma(e,i,t),a=ma(n,o,t),l,c,h;!(!(r|a)||r&a);)l=r||a,l&Yg?(c=e+(n-e)*(t.top-i)/(o-i),h=t.top):l&jg?(c=e+(n-e)*(t.bottom-i)/(o-i),h=t.bottom):l&zg?(h=i+(o-i)*(t.right-e)/(n-e),c=t.right):l&Wg&&(h=i+(o-i)*(t.left-e)/(n-e),c=t.left),l===r?(e=c,i=h,r=ma(e,i,t)):(n=c,o=h,a=ma(n,o,t));return{x0:e,x1:n,y0:i,y1:o}}function ba(s,t){var e=t.anchor,i=s,n,o;return t.clamp&&(i=qM(i,t.area)),e==="start"?(n=i.x0,o=i.y0):e==="end"?(n=i.x1,o=i.y1):(n=(i.x0+i.x1)/2,o=(i.y0+i.y1)/2),XM(n,o,s.vx,s.vy,t.align)}var va={arc:function(s,t){var e=(s.startAngle+s.endAngle)/2,i=Math.cos(e),n=Math.sin(e),o=s.innerRadius,r=s.outerRadius;return ba({x0:s.x+i*o,y0:s.y+n*o,x1:s.x+i*r,y1:s.y+n*r,vx:i,vy:n},t)},point:function(s,t){var e=nh(s,t.origin),i=e.x*s.options.radius,n=e.y*s.options.radius;return ba({x0:s.x-i,y0:s.y-n,x1:s.x+i,y1:s.y+n,vx:e.x,vy:e.y},t)},bar:function(s,t){var e=nh(s,t.origin),i=s.x,n=s.y,o=0,r=0;return s.horizontal?(i=Math.min(s.x,s.base),o=Math.abs(s.base-s.x)):(n=Math.min(s.y,s.base),r=Math.abs(s.base-s.y)),ba({x0:i,y0:n+r,x1:i+o,y1:n,vx:e.x,vy:e.y},t)},fallback:function(s,t){var e=nh(s,t.origin);return ba({x0:s.x,y0:s.y,x1:s.x+(s.width||0),y1:s.y+(s.height||0),vx:e.x,vy:e.y},t)}},Re=io.rasterize;function ZM(s){var t=s.borderWidth||0,e=s.padding,i=s.size.height,n=s.size.width,o=-n/2,r=-i/2;return{frame:{x:o-e.left-t,y:r-e.top-t,w:n+e.width+t*2,h:i+e.height+t*2},text:{x:o,y:r,w:n,h:i}}}function QM(s,t){var e=t.chart.getDatasetMeta(t.datasetIndex).vScale;if(!e)return null;if(e.xCenter!==void 0&&e.yCenter!==void 0)return{x:e.xCenter,y:e.yCenter};var i=e.getBasePixel();return s.horizontal?{x:i,y:null}:{x:null,y:i}}function JM(s){return s instanceof Ds?va.arc:s instanceof Ms?va.point:s instanceof Ls?va.bar:va.fallback}function tL(s,t,e,i,n,o){var r=Math.PI/2;if(o){var a=Math.min(o,n/2,i/2),l=t+a,c=e+a,h=t+i-a,d=e+n-a;s.moveTo(t,c),l<h&&c<d?(s.arc(l,c,a,-Math.PI,-r),s.arc(h,c,a,-r,0),s.arc(h,d,a,0,r),s.arc(l,d,a,r,Math.PI)):l<h?(s.moveTo(l,e),s.arc(h,c,a,-r,r),s.arc(l,c,a,r,Math.PI+r)):c<d?(s.arc(l,c,a,-Math.PI,0),s.arc(l,d,a,0,Math.PI)):s.arc(l,c,a,-Math.PI,Math.PI),s.closePath(),s.moveTo(t,e)}else s.rect(t,e,i,n)}function eL(s,t,e){var i=e.backgroundColor,n=e.borderColor,o=e.borderWidth;!i&&(!n||!o)||(s.beginPath(),tL(s,Re(t.x)+o/2,Re(t.y)+o/2,Re(t.w)-o,Re(t.h)-o,e.borderRadius),s.closePath(),i&&(s.fillStyle=i,s.fill()),n&&o&&(s.strokeStyle=n,s.lineWidth=o,s.lineJoin="miter",s.stroke()))}function iL(s,t,e){var i=e.lineHeight,n=s.w,o=s.x,r=s.y+i/2;return t==="center"?o+=n/2:(t==="end"||t==="right")&&(o+=n),{h:i,w:n,x:o,y:r}}function sL(s,t,e){var i=s.shadowBlur,n=e.stroked,o=Re(e.x),r=Re(e.y),a=Re(e.w);n&&s.strokeText(t,o,r,a),e.filled&&(i&&n&&(s.shadowBlur=0),s.fillText(t,o,r,a),i&&n&&(s.shadowBlur=i))}function nL(s,t,e,i){var n=i.textAlign,o=i.color,r=!!o,a=i.font,l=t.length,c=i.textStrokeColor,h=i.textStrokeWidth,d=c&&h,u;if(!(!l||!r&&!d))for(e=iL(e,n,a),s.font=a.string,s.textAlign=n,s.textBaseline="middle",s.shadowBlur=i.textShadowBlur,s.shadowColor=i.textShadowColor,r&&(s.fillStyle=o),d&&(s.lineJoin="round",s.lineWidth=h,s.strokeStyle=c),u=0,l=t.length;u<l;++u)sL(s,t[u],{stroked:d,filled:r,w:e.w,x:e.x,y:e.y+e.h*u})}var Kg=function(s,t,e,i){var n=this;n._config=s,n._index=i,n._model=null,n._rects=null,n._ctx=t,n._el=e};Te(Kg.prototype,{_modelize:function(s,t,e,i){var n=this,o=n._index,r=lt(tt([e.font,{}],i,o)),a=tt([e.color,F.color],i,o);return{align:tt([e.align,"center"],i,o),anchor:tt([e.anchor,"center"],i,o),area:i.chart.chartArea,backgroundColor:tt([e.backgroundColor,null],i,o),borderColor:tt([e.borderColor,null],i,o),borderRadius:tt([e.borderRadius,0],i,o),borderWidth:tt([e.borderWidth,0],i,o),clamp:tt([e.clamp,!1],i,o),clip:tt([e.clip,!1],i,o),color:a,display:s,font:r,lines:t,offset:tt([e.offset,4],i,o),opacity:tt([e.opacity,1],i,o),origin:QM(n._el,i),padding:pt(tt([e.padding,4],i,o)),positioner:JM(n._el),rotation:tt([e.rotation,0],i,o)*(Math.PI/180),size:io.textSize(n._ctx,t,r),textAlign:tt([e.textAlign,"start"],i,o),textShadowBlur:tt([e.textShadowBlur,0],i,o),textShadowColor:tt([e.textShadowColor,a],i,o),textStrokeColor:tt([e.textStrokeColor,a],i,o),textStrokeWidth:tt([e.textStrokeWidth,0],i,o)}},update:function(s){var t=this,e=null,i=null,n=t._index,o=t._config,r,a,l,c=tt([o.display,!0],s,n);c&&(r=s.dataset.data[n],a=B(G(o.formatter,[r,s]),r),l=H(a)?[]:io.toTextLines(a),l.length&&(e=t._modelize(c,l,o,s),i=ZM(e))),t._model=e,t._rects=i},geometry:function(){return this._rects?this._rects.frame:{}},rotation:function(){return this._model?this._model.rotation:0},visible:function(){return this._model&&this._model.opacity},model:function(){return this._model},draw:function(s,t){var e=this,i=s.ctx,n=e._model,o=e._rects,r;this.visible()&&(i.save(),n.clip&&(r=n.area,i.beginPath(),i.rect(r.left,r.top,r.right-r.left,r.bottom-r.top),i.clip()),i.globalAlpha=io.bound(0,n.opacity,1),i.translate(Re(t.x),Re(t.y)),i.rotate(n.rotation),eL(i,o.frame,n),nL(i,n.lines,o.text,n),i.restore())}});var oL=Number.MIN_SAFE_INTEGER||-9007199254740991,rL=Number.MAX_SAFE_INTEGER||9007199254740991;function so(s,t,e){var i=Math.cos(e),n=Math.sin(e),o=t.x,r=t.y;return{x:o+i*(s.x-o)-n*(s.y-r),y:r+n*(s.x-o)+i*(s.y-r)}}function Ug(s,t){var e=rL,i=oL,n=t.origin,o,r,a,l,c;for(o=0;o<s.length;++o)r=s[o],a=r.x-n.x,l=r.y-n.y,c=t.vx*a+t.vy*l,e=Math.min(e,c),i=Math.max(i,c);return{min:e,max:i}}function ya(s,t){var e=t.x-s.x,i=t.y-s.y,n=Math.sqrt(e*e+i*i);return{vx:(t.x-s.x)/n,vy:(t.y-s.y)/n,origin:s,ln:n}}var Xg=function(){this._rotation=0,this._rect={x:0,y:0,w:0,h:0}};Te(Xg.prototype,{center:function(){var s=this._rect;return{x:s.x+s.w/2,y:s.y+s.h/2}},update:function(s,t,e){this._rotation=e,this._rect={x:t.x+s.x,y:t.y+s.y,w:t.w,h:t.h}},contains:function(s){var t=this,e=1,i=t._rect;return s=so(s,t.center(),-t._rotation),!(s.x<i.x-e||s.y<i.y-e||s.x>i.x+i.w+e*2||s.y>i.y+i.h+e*2)},intersects:function(s){var t=this._points(),e=s._points(),i=[ya(t[0],t[1]),ya(t[0],t[3])],n,o,r;for(this._rotation!==s._rotation&&i.push(ya(e[0],e[1]),ya(e[0],e[3])),n=0;n<i.length;++n)if(o=Ug(t,i[n]),r=Ug(e,i[n]),o.max<r.min||r.max<o.min)return!1;return!0},_points:function(){var s=this,t=s._rect,e=s._rotation,i=s.center();return[so({x:t.x,y:t.y},i,e),so({x:t.x+t.w,y:t.y},i,e),so({x:t.x+t.w,y:t.y+t.h},i,e),so({x:t.x,y:t.y+t.h},i,e)]}});function Gg(s,t,e){var i=t.positioner(s,t),n=i.vx,o=i.vy;if(!n&&!o)return{x:i.x,y:i.y};var r=e.w,a=e.h,l=t.rotation,c=Math.abs(r/2*Math.cos(l))+Math.abs(a/2*Math.sin(l)),h=Math.abs(r/2*Math.sin(l))+Math.abs(a/2*Math.cos(l)),d=1/Math.max(Math.abs(n),Math.abs(o));return c*=n*d,h*=o*d,c+=t.offset*n,h+=t.offset*o,{x:i.x+c,y:i.y+h}}function aL(s,t){var e,i,n,o;for(e=s.length-1;e>=0;--e)for(n=s[e].$layout,i=e-1;i>=0&&n._visible;--i)o=s[i].$layout,o._visible&&n._box.intersects(o._box)&&t(n,o);return s}function lL(s){var t,e,i,n,o,r,a;for(t=0,e=s.length;t<e;++t)i=s[t],n=i.$layout,n._visible&&(a=new Proxy(i._el,{get:(l,c)=>l.getProps([c],!0)[c]}),o=i.geometry(),r=Gg(a,i.model(),o),n._box.update(r,o,i.rotation()));return aL(s,function(l,c){var h=l._hidable,d=c._hidable;h&&d||d?c._visible=!1:h&&(l._visible=!1)})}var no={prepare:function(s){var t=[],e,i,n,o,r;for(e=0,n=s.length;e<n;++e)for(i=0,o=s[e].length;i<o;++i)r=s[e][i],t.push(r),r.$layout={_box:new Xg,_hidable:!1,_visible:!0,_set:e,_idx:r._index};return t.sort(function(a,l){var c=a.$layout,h=l.$layout;return c._idx===h._idx?h._set-c._set:h._idx-c._idx}),this.update(t),t},update:function(s){var t=!1,e,i,n,o,r;for(e=0,i=s.length;e<i;++e)n=s[e],o=n.model(),r=n.$layout,r._hidable=o&&o.display==="auto",r._visible=n.visible(),t|=r._hidable;t&&lL(s)},lookup:function(s,t){var e,i;for(e=s.length-1;e>=0;--e)if(i=s[e].$layout,i&&i._visible&&i._box.contains(t))return s[e];return null},draw:function(s,t){var e,i,n,o,r,a;for(e=0,i=t.length;e<i;++e)n=t[e],o=n.$layout,o._visible&&(r=n.geometry(),a=Gg(n._el,n.model(),r),o._box.update(a,r,n.rotation()),n.draw(s,a))}},cL=function(s){if(H(s))return null;var t=s,e,i,n;if(V(s))if(!H(s.label))t=s.label;else if(!H(s.r))t=s.r;else for(t="",e=Object.keys(s),n=0,i=e.length;n<i;++n)t+=(n!==0?", ":"")+e[n]+": "+s[e[n]];return""+t},hL={align:"center",anchor:"center",backgroundColor:null,borderColor:null,borderRadius:0,borderWidth:0,clamp:!1,clip:!1,color:void 0,display:!0,font:{family:void 0,lineHeight:1.2,size:void 0,style:void 0,weight:null},formatter:cL,labels:void 0,listeners:{},offset:4,opacity:1,padding:{top:4,right:4,bottom:4,left:4},rotation:0,textAlign:"start",textStrokeColor:void 0,textStrokeWidth:0,textShadowBlur:0,textShadowColor:void 0},Dt="$datalabels",qg="$default";function dL(s,t){var e=s.datalabels,i={},n=[],o,r;return e===!1?null:(e===!0&&(e={}),t=Te({},[t,e]),o=t.labels||{},r=Object.keys(o),delete t.labels,r.length?r.forEach(function(a){o[a]&&n.push(Te({},[t,o[a],{_key:a}]))}):n.push(t),i=n.reduce(function(a,l){return U(l.listeners||{},function(c,h){a[h]=a[h]||{},a[h][l._key||qg]=c}),delete l.listeners,a},{}),{labels:n,listeners:i})}function oh(s,t,e,i){if(t){var n=e.$context,o=e.$groups,r;t[o._set]&&(r=t[o._set][o._key],r&&G(r,[n,i])===!0&&(s[Dt]._dirty=!0,e.update(n)))}}function uL(s,t,e,i,n){var o,r;!e&&!i||(e?i?e!==i&&(r=o=!0):r=!0:o=!0,r&&oh(s,t.leave,e,n),o&&oh(s,t.enter,i,n))}function pL(s,t){var e=s[Dt],i=e._listeners,n,o;if(!(!i.enter&&!i.leave)){if(t.type==="mousemove")o=no.lookup(e._labels,t);else if(t.type!=="mouseout")return;n=e._hovered,e._hovered=o,uL(s,i,n,o,t)}}function fL(s,t){var e=s[Dt],i=e._listeners.click,n=i&&no.lookup(e._labels,t);n&&oh(s,i,n,t)}var _L={id:"datalabels",defaults:hL,beforeInit:function(s){s[Dt]={_actives:[]}},beforeUpdate:function(s){var t=s[Dt];t._listened=!1,t._listeners={},t._datasets=[],t._labels=[]},afterDatasetUpdate:function(s,t,e){var i=t.index,n=s[Dt],o=n._datasets[i]=[],r=s.isDatasetVisible(i),a=s.data.datasets[i],l=dL(a,e),c=t.meta.data||[],h=s.ctx,d,u,p,f,b,v,y,T;for(h.save(),d=0,p=c.length;d<p;++d)if(y=c[d],y[Dt]=[],r&&y&&s.getDataVisibility(d)&&!y.skip)for(u=0,f=l.labels.length;u<f;++u)b=l.labels[u],v=b._key,T=new Kg(b,h,y,d),T.$groups={_set:i,_key:v||qg},T.$context={active:!1,chart:s,dataIndex:d,dataset:a,datasetIndex:i},T.update(T.$context),y[Dt].push(T),o.push(T);h.restore(),Te(n._listeners,l.listeners,{merger:function(x,E,C){E[x]=E[x]||{},E[x][t.index]=C[x],n._listened=!0}})},afterUpdate:function(s){s[Dt]._labels=no.prepare(s[Dt]._datasets)},afterDatasetsDraw:function(s){no.draw(s,s[Dt]._labels)},beforeEvent:function(s,t){if(s[Dt]._listened){var e=t.event;switch(e.type){case"mousemove":case"mouseout":pL(s,e);break;case"click":fL(s,e);break}}},afterEvent:function(s){var t=s[Dt],e=t._actives,i=t._actives=s.getActiveElements(),n=io.arrayDiff(e,i),o,r,a,l,c,h,d;for(o=0,r=n.length;o<r;++o)if(c=n[o],c[1])for(d=c[0].element[Dt]||[],a=0,l=d.length;a<l;++a)h=d[a],h.$context.active=c[1]===1,h.update(h.$context);(t._dirty||n.length)&&(no.update(t._labels),s.render()),delete t._dirty}};const gL=Object.freeze(Object.defineProperty({__proto__:null,default:_L},Symbol.toStringTag,{value:"Module"}));N.Alert=Ws,N.Animate=Gs,N.Autocomplete=Pr,N.Button=ao,N.Carousel=he,N.Chart=yp,N.Chip=ki,N.ChipsInput=gp,N.Clipboard=Ar,N.Collapse=ce,N.Datatable=pr,N.Datepicker=xl,N.Datetimepicker=Dr,N.Dropdown=Ft,N.InfiniteScroll=kr,N.Input=Z,N.LazyLoad=yn,N.Lightbox=ys,N.LoadingManagement=Or,N.Modal=Ys,N.MultiRangeSlider=Hr,N.Offcanvas=ts,N.PerfectScrollbar=ms,N.Popconfirm=_r,N.Popover=Eo,N.Rating=Bp,N.Ripple=Ye,N.ScrollSpy=xo,N.Select=on,N.Sidenav=Ii,N.SmoothScroll=xr,N.Stepper=Wu,N.Sticky=Lr,N.Tab=wo,N.Timepicker=Ll,N.Toast=Xs,N.Tooltip=is,N.Touch=Er,N.Validation=Tr,N.initTE=ff,Object.defineProperty(N,Symbol.toStringTag,{value:"Module"})});
+
+
+    </script>
+  </body>
+</html>
diff --git a/test/sample_data/html/red_hat_good.htm b/test/sample_data/html/red_hat_good.htm
new file mode 100644
index 0000000000..5b41a258fa
--- /dev/null
+++ b/test/sample_data/html/red_hat_good.htm
@@ -0,0 +1,602 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Executive Report</title>
+    <style>
+      /*! tailwindcss v3.4.4 | MIT License | https://tailwindcss.com*/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}:host,html{-webkit-text-size-adjust:100%;font-feature-settings:normal;-webkit-tap-highlight-color:transparent;font-family:Roboto,sans-serif;font-variation-settings:normal;line-height:1.5;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-feature-settings:normal;font-family:ui-monospace,monospace;font-size:1em;font-variation-settings:normal}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-collapse:collapse;border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-feature-settings:inherit;color:inherit;font-family:inherit;font-size:100%;font-variation-settings:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{color:#9ca3af;opacity:1}input::placeholder,textarea::placeholder{color:#9ca3af;opacity:1}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{height:auto;max-width:100%}[hidden]{display:none}input[type=range]::-webkit-slider-thumb{appearance:none;-moz-appearance:none;-webkit-appearance:none;background:#3b71ca;border:0;border-radius:9999px;cursor:pointer;height:1rem;width:1rem}input[type=range]:disabled::-webkit-slider-thumb,input[type=range]:disabled:focus::-webkit-slider-thumb{background:#a3a3a3}input[type=range]:disabled:active::-webkit-slider-thumb{background:#a3a3a3}input[type=range]::-moz-range-thumb{appearance:none;-moz-appearance:none;-webkit-appearance:none;background:#3b71ca;border:0;border-radius:9999px;cursor:pointer;height:1rem;width:1rem}input[type=range]:disabled::-moz-range-thumb{background:#a3a3a3}input[type=range]::-moz-range-progress{background:#3061af}input[type=range]::-ms-fill-lower{background:#3061af}input[type=range]:focus{outline:none}input[type=range]:focus::-webkit-slider-thumb{background:#3061af}input[type=range]:active::-webkit-slider-thumb{background:#285192}*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }.collapse{visibility:collapse}.relative{position:relative}.top-0{top:0}.z-10{z-index:10}.mx-2{margin-left:.5rem;margin-right:.5rem}.mx-4{margin-left:1rem;margin-right:1rem}.mx-6{margin-left:1.5rem;margin-right:1.5rem}.my-1{margin-bottom:.25rem;margin-top:.25rem}.my-2{margin-bottom:.5rem;margin-top:.5rem}.my-3{margin-bottom:.75rem;margin-top:.75rem}.my-4{margin-bottom:1rem;margin-top:1rem}.-mr-1{margin-right:-.25rem}.mb-0{margin-bottom:0}.mb-2{margin-bottom:.5rem}.ml-auto{margin-left:auto}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.block{display:block}.inline-block{display:inline-block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.h-1{height:.25rem}.h-5{height:1.25rem}.h-6{height:1.5rem}.w-1\/2{width:50%}.w-24{width:6rem}.w-28{width:7rem}.w-32{width:8rem}.w-36{width:9rem}.w-40{width:10rem}.w-5{width:1.25rem}.w-56{width:14rem}.w-6{width:1.5rem}.w-64{width:16rem}.w-full{width:100%}.min-w-full{min-width:100%}.shrink{flex-shrink:1}.shrink-0{flex-shrink:0}.border-separate{border-collapse:separate}.border-spacing-x-2{--tw-border-spacing-x:0.5rem;border-spacing:var(--tw-border-spacing-x) var(--tw-border-spacing-y)}.rotate-\[-180deg\]{--tw-rotate:-180deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.grid-flow-row{grid-auto-flow:row}.grid-flow-col{grid-auto-flow:column}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.flex-wrap{flex-wrap:wrap}.items-center{align-items:center}.justify-between{justify-content:space-between}.gap-x-2{-moz-column-gap:.5rem;column-gap:.5rem}.gap-x-6{-moz-column-gap:1.5rem;column-gap:1.5rem}.gap-y-1{row-gap:.25rem}.gap-y-2{row-gap:.5rem}.overflow-hidden{overflow:hidden}.whitespace-pre-line{white-space:pre-line}.whitespace-pre-wrap{white-space:pre-wrap}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-full{border-radius:9999px}.rounded-xl{border-radius:.75rem}.rounded-t-xl{border-top-left-radius:.75rem;border-top-right-radius:.75rem}.border{border-width:1px}.border-4{border-width:4px}.border-b{border-bottom-width:1px}.border-r{border-right-width:1px}.border-black{--tw-border-opacity:1;border-color:rgb(0 0 0/var(--tw-border-opacity))}.border-gray-300{--tw-border-opacity:1;border-color:rgb(209 213 219/var(--tw-border-opacity))}.bg-gray-100{--tw-bg-opacity:1;background-color:rgb(243 244 246/var(--tw-bg-opacity))}.bg-gray-300{--tw-bg-opacity:1;background-color:rgb(209 213 219/var(--tw-bg-opacity))}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.fill-\[\#336dec\]{fill:#336dec}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-1{padding-bottom:.25rem;padding-top:.25rem}.py-2{padding-bottom:.5rem;padding-top:.5rem}.py-3{padding-bottom:.75rem;padding-top:.75rem}.py-4{padding-bottom:1rem;padding-top:1rem}.py-6{padding-top:1.5rem}.pb-6,.py-6{padding-bottom:1.5rem}.pl-3{padding-left:.75rem}.pl-4{padding-left:1rem}.pl-8{padding-left:2rem}.pr-1{padding-right:.25rem}.pt-1{padding-top:.25rem}.text-left{text-align:left}.text-center{text-align:center}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.text-black{--tw-text-opacity:1;color:rgb(0 0 0/var(--tw-text-opacity))}.text-gray-400{--tw-text-opacity:1;color:rgb(156 163 175/var(--tw-text-opacity))}.text-red-700{--tw-text-opacity:1;color:rgb(185 28 28/var(--tw-text-opacity))}.underline{text-decoration-line:underline}.shadow-lg{--tw-shadow:0 10px 15px -3px rgba(0,0,0,.1),0 4px 6px -4px rgba(0,0,0,.1);--tw-shadow-colored:0 10px 15px -3px var(--tw-shadow-color),0 4px 6px -4px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.transition{transition-duration:.15s;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1)}.transition-transform{transition-duration:.15s;transition-property:transform;transition-timing-function:cubic-bezier(.4,0,.2,1)}.duration-200{transition-duration:.2s}.ease-in-out{transition-timing-function:cubic-bezier(.4,0,.2,1)}.\[overflow-anchor\:none\]{overflow-anchor:none}.odd\:bg-gray-100:nth-child(odd){--tw-bg-opacity:1;background-color:rgb(243 244 246/var(--tw-bg-opacity))}.even\:bg-white:nth-child(2n){--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.hover\:z-\[2\]:hover{z-index:2}.focus\:z-\[3\]:focus{z-index:3}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:mr-0{margin-right:0}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:rotate-0{--tw-rotate:0deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:fill-\[\#212529\]{fill:#212529}@media (prefers-reduced-motion:reduce){.motion-reduce\:transition-none{transition-property:none}}@media (min-width:640px){.sm\:block{display:block}.sm\:grid{display:grid}.sm\:hidden{display:none}.sm\:w-40{width:10rem}.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:grid-cols-\[10\%_90\%\]{grid-template-columns:10% 90%}.sm\:break-words{overflow-wrap:break-word}.sm\:font-normal{font-weight:400}.sm\:no-underline{text-decoration-line:none}}@media (min-width:768px){.md\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}@media (min-width:1024px){.lg\:sticky{position:sticky}.lg\:block{display:block}.lg\:grid{display:grid}.lg\:hidden{display:none}.lg\:w-32{width:8rem}.lg\:w-36{width:9rem}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.lg\:break-normal{overflow-wrap:normal;word-break:normal}.lg\:pl-9{padding-left:2.25rem}}@media (min-width:1280px){.xl\:w-52{width:13rem}.xl\:grid-flow-col{grid-auto-flow:column}.xl\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.xl\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}}@media print{.print\:block{display:block}.print\:hidden{display:none}.print\:border-none{border-style:none}.print\:border-black{--tw-border-opacity:1;border-color:rgb(0 0 0/var(--tw-border-opacity))}.print\:bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.print\:text-left{text-align:left}.print\:text-2xl{font-size:1.5rem;line-height:2rem}}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:bg-blue-200:not([data-te-collapse-collapsed]){--tw-bg-opacity:1;background-color:rgb(191 219 254/var(--tw-bg-opacity))}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:text-blue-900:not([data-te-collapse-collapsed]){--tw-text-opacity:1;color:rgb(30 58 138/var(--tw-text-opacity))}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:\[box-shadow\:inset_0_-1px_0_rgba\(229\2c 231\2c 235\)\]:not([data-te-collapse-collapsed]){box-shadow:inset 0 -1px 0 #e5e7eb}.\[\&\[data-te-dropdown-show\]\]\:grid[data-te-dropdown-show]{display:grid}
+    </style>
+    <style>
+      .border-low {
+        --tw-border-opacity: 1;
+        border-color: rgb(243 67 53 / var(--tw-border-opacity));
+      }
+      .border-medium {
+        --tw-border-opacity: 1;
+        border-color: rgb(255 235 59 / var(--tw-border-opacity));
+      }
+      .border-high {
+        --tw-border-opacity: 1;
+        border-color: rgb(76 176 79 / var(--tw-border-opacity));
+      }
+    </style>
+  </head>
+
+  <body>
+    <!-- Navbar -->
+    <!-- WARNING: Tailwind Elements interactive components get disabled on Android's HTML viewer; use a browser instead -->
+    <nav
+      class="relative top-0 z-10 min-w-full border-b border-gray-300 bg-gray-100 px-3 py-3 shadow-lg print:hidden lg:sticky"
+    >
+      <!-- Heimdall report -->
+      <a href="#" class="px-3 py-2 text-lg font-medium">Heimdall Report</a>
+      <!-- Profile info link -->
+      <button role="button" aria-label="Jump to profile info card">
+        <a href="#profileInfo" class="px-3 py-2 text-sm" aria-current="page">
+          Profile Info
+        </a>
+      </button>
+      <!-- Result sets dropdown menu -->
+    </nav>
+
+    <!-- Profile status card -->
+    <div class="px-4 py-6">
+      <div
+        class="min-w-full rounded-xl border border-gray-300 bg-gray-100 px-4 py-2 print:border-black print:bg-white"
+      >
+        <h5 class="mb-2 text-xl font-bold">Profile Status</h5>
+        <div class="grid grid-flow-row justify-between xl:grid-flow-col">
+          <!-- Status counts -->
+          <div class="px-2 py-2">
+            <div class="font-bold">Count</div>
+            <div class="pt-1">
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                Passed: 213 (605
+                individual checks passed)
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                Failed: 0
+                (0 individual checks
+                passed, 0 failed out of
+                0 total checks)
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Not Applicable: 24
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Not Reviewed: 9
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(121, 134, 203)" d="M13 14H11V9H13M13 18H11V16H13M1 21H23L12 2L1 21Z"/></svg></span>
+                Profile Error: 1
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="black" d="M17,16V14H7V16H17M19,3A2,2 0 0,1 21,5V19A2,2 0 0,1 19,21H5C3.89,21 3,20.1 3,19V5C3,3.89 3.89,3 5,3H19M17,10V8H7V10H17Z"/></svg></span>
+                Total: 247
+              </div>
+            </div>
+          </div>
+
+          <!-- Severity report -->
+          <div class="px-2 py-2">
+            <div class="font-bold">Severity</div>
+            <div class="pt-1">
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                None: 24
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Low: 14
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Medium: 185
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                High: 24
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden">
+                  <svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(244, 67, 54)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg>
+                </span>
+                Critical: 0
+              </div>
+            </div>
+          </div>
+
+          <!-- Compliance level -->
+          <div class="w-64 px-2 py-2">
+            <div class="font-bold">Compliance</div>
+            <div>
+              <div
+                class="my-1 rounded-full border-4 border-high text-center text-4xl print:border-none print:text-left print:text-2xl"
+              >
+                95.51%
+              </div>
+              [Passed/(Passed + Failed + Not Reviewed + Profile Error) * 100]
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- Profile info card -->
+    <div class="px-4 pb-6" id="profileInfo">
+      <div
+        class="min-w-full rounded-xl border border-gray-300 bg-gray-100 px-4 py-2 print:border-black print:bg-white"
+      >
+        <h5 class="mb-2 text-xl font-bold">Profile Info</h5>
+        <div class="grid grid-cols-2 md:grid-cols-3 xl:grid-cols-4">
+          <!-- Generate an info report for every profile -->
+          <div class="mx-2 my-2 break-words">
+            <div><strong>Filename:</strong> red_hat_good.json</div>
+            <div><strong>Tool Version:</strong> 4.18.104</div>
+            <div><strong>Platform:</strong> redhat</div>
+            <div><strong>Duration:</strong> 32.419937825</div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="overflow-hidden">
+      <!-- Result section -->
+      <!-- If empty, then this should be an executive report HTML export type -->
+      <!-- If not such export type, error has occurred -->
+    </div>
+    <script type="text/javascript">
+      /*!
+* TW Elements 1.1.0
+* 
+* TW Elements is an open-source UI kit of advanced components for TailwindCSS.
+* Copyright © 2023 MDBootstrap.com
+* 
+* Unless a custom, individually assigned license has been granted, this program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
+* In addition, a custom license may be available upon request, subject to the terms and conditions of that license. Please contact tailwind@mdbootstrap.com for more information on obtaining a custom license.
+* This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
+* 
+* If you would like to purchase a COMMERCIAL, non-AGPL license for TWE, please check out our pricing: https://tw-elements.com/pro/
+*/
+(function(N,mt){typeof exports=="object"&&typeof module<"u"?mt(exports):typeof define=="function"&&define.amd?define(["exports"],mt):(N=typeof globalThis<"u"?globalThis:N||self,mt(N.te={}))})(this,function(N){"use strict";var xL=Object.defineProperty;var CL=(N,mt,O)=>mt in N?xL(N,mt,{enumerable:!0,configurable:!0,writable:!0,value:O}):N[mt]=O;var ke=(N,mt,O)=>(CL(N,typeof mt!="symbol"?mt+"":mt,O),O);const mt=(()=>{const s={};let t=1;return{set(e,i,n){typeof e[i]>"u"&&(e[i]={key:i,id:t},t++),s[e[i].id]=n},get(e,i){if(!e||typeof e[i]>"u")return null;const n=e[i];return n.key===i?s[n.id]:null},delete(e,i){if(typeof e[i]>"u")return;const n=e[i];n.key===i&&(delete s[n.id],delete e[i])}}})(),O={setData(s,t,e){mt.set(s,t,e)},getData(s,t){return mt.get(s,t)},removeData(s,t){mt.delete(s,t)}},lm=1e6,cm=1e3,xa="transitionend",hm=s=>s==null?`${s}`:{}.toString.call(s).match(/\s([a-z]+)/i)[1].toLowerCase(),bt=s=>{do s+=Math.floor(Math.random()*lm);while(document.getElementById(s));return s},ch=s=>{let t=s.getAttribute("data-te-target");if(!t||t==="#"){let e=s.getAttribute("href");if(!e||!e.includes("#")&&!e.startsWith("."))return null;e.includes("#")&&!e.startsWith("#")&&(e=`#${e.split("#")[1]}`),t=e&&e!=="#"?e.trim():null}return t},Ca=s=>{const t=ch(s);return t&&document.querySelector(t)?t:null},Ne=s=>{const t=ch(s);return t?document.querySelector(t):null},oo=s=>{if(!s)return 0;let{transitionDuration:t,transitionDelay:e}=window.getComputedStyle(s);const i=Number.parseFloat(t),n=Number.parseFloat(e);return!i&&!n?0:(t=t.split(",")[0],e=e.split(",")[0],(Number.parseFloat(t)+Number.parseFloat(e))*cm)},hh=s=>{s.dispatchEvent(new Event(xa))},Wi=s=>!s||typeof s!="object"?!1:(typeof s.jquery<"u"&&(s=s[0]),typeof s.nodeType<"u"),Be=s=>Wi(s)?s.jquery?s[0]:s:typeof s=="string"&&s.length>0?document.querySelector(s):null,L=(s,t,e)=>{Object.keys(e).forEach(i=>{const n=e[i],o=t[i],r=o&&Wi(o)?"element":hm(o);if(!new RegExp(n).test(r))throw new Error(`${s.toUpperCase()}: Option "${i}" provided type "${r}" but expected type "${n}".`)})},ae=s=>{if(!s||s.getClientRects().length===0)return!1;if(s.style&&s.parentNode&&s.parentNode.style){const t=getComputedStyle(s),e=getComputedStyle(s.parentNode);return getComputedStyle(s).getPropertyValue("visibility")==="visible"||t.display!=="none"&&e.display!=="none"&&t.visibility!=="hidden"}return!1},ci=s=>!s||s.nodeType!==Node.ELEMENT_NODE||s.classList.contains("disabled")?!0:typeof s.disabled<"u"?s.disabled:s.hasAttribute("disabled")&&s.getAttribute("disabled")!=="false",dh=s=>{if(!document.documentElement.attachShadow)return null;if(typeof s.getRootNode=="function"){const t=s.getRootNode();return t instanceof ShadowRoot?t:null}return s instanceof ShadowRoot?s:s.parentNode?dh(s.parentNode):null},ro=()=>function(){},zi=s=>{s.offsetHeight},uh=()=>{const{jQuery:s}=window;return s&&!document.body.hasAttribute("data-te-no-jquery")?s:null},Aa=[],ph=s=>{document.readyState==="loading"?(Aa.length||document.addEventListener("DOMContentLoaded",()=>{Aa.forEach(t=>t())}),Aa.push(s)):s()},et=()=>document.documentElement.dir==="rtl",dm=s=>Array.from(s),$=s=>document.createElement(s),hi=s=>{typeof s=="function"&&s()},fh=(s,t,e=!0)=>{if(!e){hi(s);return}const i=5,n=oo(t)+i;let o=!1;const r=({target:a})=>{a===t&&(o=!0,t.removeEventListener(xa,r),hi(s))};t.addEventListener(xa,r),setTimeout(()=>{o||hh(t)},n)},_h=(s,t,e,i)=>{let n=s.indexOf(t);if(n===-1)return s[!e&&i?s.length-1:0];const o=s.length;return n+=e?1:-1,i&&(n=(n+o)%o),s[Math.max(0,Math.min(n,o-1))]},um=/[^.]*(?=\..*)\.|.*/,pm=/\..*/,fm=/::\d+$/,wa={};let gh=1;const _m={mouseenter:"mouseover",mouseleave:"mouseout"},gm=/^(mouseenter|mouseleave)/i,mh=new Set(["click","dblclick","mouseup","mousedown","contextmenu","mousewheel","DOMMouseScroll","mouseover","mouseout","mousemove","selectstart","selectend","keydown","keypress","keyup","orientationchange","touchstart","touchmove","touchend","touchcancel","pointerdown","pointermove","pointerup","pointerleave","pointercancel","gesturestart","gesturechange","gestureend","focus","blur","change","reset","select","submit","focusin","focusout","load","unload","beforeunload","resize","move","DOMContentLoaded","readystatechange","error","abort","scroll"]);function bh(s,t){return t&&`${t}::${gh++}`||s.uidEvent||gh++}function vh(s){const t=bh(s);return s.uidEvent=t,wa[t]=wa[t]||{},wa[t]}function mm(s,t){return function e(i){return i.delegateTarget=s,e.oneOff&&_.off(s,i.type,t),t.apply(s,[i])}}function bm(s,t,e){return function i(n){const o=s.querySelectorAll(t);for(let{target:r}=n;r&&r!==this;r=r.parentNode)for(let a=o.length;a--;"")if(o[a]===r)return n.delegateTarget=r,i.oneOff&&_.off(s,n.type,e),e.apply(r,[n]);return null}}function yh(s,t,e=null){const i=Object.keys(s);for(let n=0,o=i.length;n<o;n++){const r=s[i[n]];if(r.originalHandler===t&&r.delegationSelector===e)return r}return null}function Th(s,t,e){const i=typeof t=="string",n=i?e:t;let o=xh(s);return mh.has(o)||(o=s),[i,n,o]}function Eh(s,t,e,i,n){if(typeof t!="string"||!s)return;if(e||(e=i,i=null),gm.test(t)){const p=f=>function(b){if(!b.relatedTarget||b.relatedTarget!==b.delegateTarget&&!b.delegateTarget.contains(b.relatedTarget))return f.call(this,b)};i?i=p(i):e=p(e)}const[o,r,a]=Th(t,e,i),l=vh(s),c=l[a]||(l[a]={}),h=yh(c,r,o?e:null);if(h){h.oneOff=h.oneOff&&n;return}const d=bh(r,t.replace(um,"")),u=o?bm(s,e,i):mm(s,e);u.delegationSelector=o?e:null,u.originalHandler=r,u.oneOff=n,u.uidEvent=d,c[d]=u,s.addEventListener(a,u,o)}function ka(s,t,e,i,n){const o=yh(t[e],i,n);o&&(s.removeEventListener(e,o,!!n),delete t[e][o.uidEvent])}function vm(s,t,e,i){const n=t[e]||{};Object.keys(n).forEach(o=>{if(o.includes(i)){const r=n[o];ka(s,t,e,r.originalHandler,r.delegationSelector)}})}function xh(s){return s=s.replace(pm,""),_m[s]||s}const _={on(s,t,e,i){Eh(s,t,e,i,!1)},one(s,t,e,i){Eh(s,t,e,i,!0)},off(s,t,e,i){if(typeof t!="string"||!s)return;const[n,o,r]=Th(t,e,i),a=r!==t,l=vh(s),c=t.startsWith(".");if(typeof o<"u"){if(!l||!l[r])return;ka(s,l,r,o,n?e:null);return}c&&Object.keys(l).forEach(d=>{vm(s,l,d,t.slice(1))});const h=l[r]||{};Object.keys(h).forEach(d=>{const u=d.replace(fm,"");if(!a||t.includes(u)){const p=h[d];ka(s,l,r,p.originalHandler,p.delegationSelector)}})},trigger(s,t,e){if(typeof t!="string"||!s)return null;const i=uh(),n=xh(t),o=t!==n,r=mh.has(n);let a,l=!0,c=!0,h=!1,d=null;return o&&i&&(a=i.Event(t,e),i(s).trigger(a),l=!a.isPropagationStopped(),c=!a.isImmediatePropagationStopped(),h=a.isDefaultPrevented()),r?(d=document.createEvent("HTMLEvents"),d.initEvent(n,l,!0)):d=new CustomEvent(t,{bubbles:l,cancelable:!0}),typeof e<"u"&&Object.keys(e).forEach(u=>{Object.defineProperty(d,u,{get(){return e[u]}})}),h&&d.preventDefault(),c&&s.dispatchEvent(d),d.defaultPrevented&&typeof a<"u"&&a.preventDefault(),d}},ct={on(s,t,e,i){const n=t.split(" ");for(let o=0;o<n.length;o++)_.on(s,n[o],e,i)},off(s,t,e,i){const n=t.split(" ");for(let o=0;o<n.length;o++)_.off(s,n[o],e,i)}},ym="5.1.3";class Mt{constructor(t){t=Be(t),t&&(this._element=t,O.setData(this._element,this.constructor.DATA_KEY,this))}dispose(){O.removeData(this._element,this.constructor.DATA_KEY),_.off(this._element,this.constructor.EVENT_KEY),Object.getOwnPropertyNames(this).forEach(t=>{this[t]=null})}_queueCallback(t,e,i=!0){fh(t,e,i)}static getInstance(t){return O.getData(Be(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static get VERSION(){return ym}static get NAME(){throw new Error('You have to implement the static method "NAME", for each component!')}static get DATA_KEY(){return`te.${this.NAME}`}static get EVENT_KEY(){return`.${this.DATA_KEY}`}}const Tm="button",Em="active";class ao extends Mt{static get NAME(){return Tm}toggle(){this._element.setAttribute("aria-pressed",this._element.classList.toggle(Em))}static jQueryInterface(t){return this.each(function(){const e=ao.getOrCreateInstance(this);t==="toggle"&&e[t]()})}}var vt="top",Lt="bottom",$t="right",yt="left",Ps="auto",ji=[vt,Lt,$t,yt],di="start",Yi="end",Ch="clippingParents",Sa="viewport",Ki="popper",Ah="reference",Oa=ji.reduce(function(s,t){return s.concat([t+"-"+di,t+"-"+Yi])},[]),Ia=[].concat(ji,[Ps]).reduce(function(s,t){return s.concat([t,t+"-"+di,t+"-"+Yi])},[]),wh="beforeRead",kh="read",Sh="afterRead",Oh="beforeMain",Ih="main",Dh="afterMain",Mh="beforeWrite",Lh="write",$h="afterWrite",lo=[wh,kh,Sh,Oh,Ih,Dh,Mh,Lh,$h];function le(s){return s?(s.nodeName||"").toLowerCase():null}function Rt(s){if(s==null)return window;if(s.toString()!=="[object Window]"){var t=s.ownerDocument;return t&&t.defaultView||window}return s}function ui(s){var t=Rt(s).Element;return s instanceof t||s instanceof Element}function Pt(s){var t=Rt(s).HTMLElement;return s instanceof t||s instanceof HTMLElement}function Da(s){if(typeof ShadowRoot>"u")return!1;var t=Rt(s).ShadowRoot;return s instanceof t||s instanceof ShadowRoot}function xm(s){var t=s.state;Object.keys(t.elements).forEach(function(e){var i=t.styles[e]||{},n=t.attributes[e]||{},o=t.elements[e];!Pt(o)||!le(o)||(Object.assign(o.style,i),Object.keys(n).forEach(function(r){var a=n[r];a===!1?o.removeAttribute(r):o.setAttribute(r,a===!0?"":a)}))})}function Cm(s){var t=s.state,e={popper:{position:t.options.strategy,left:"0",top:"0",margin:"0"},arrow:{position:"absolute"},reference:{}};return Object.assign(t.elements.popper.style,e.popper),t.styles=e,t.elements.arrow&&Object.assign(t.elements.arrow.style,e.arrow),function(){Object.keys(t.elements).forEach(function(i){var n=t.elements[i],o=t.attributes[i]||{},r=Object.keys(t.styles.hasOwnProperty(i)?t.styles[i]:e[i]),a=r.reduce(function(l,c){return l[c]="",l},{});!Pt(n)||!le(n)||(Object.assign(n.style,a),Object.keys(o).forEach(function(l){n.removeAttribute(l)}))})}}const Ma={name:"applyStyles",enabled:!0,phase:"write",fn:xm,effect:Cm,requires:["computeStyles"]};function Qt(s){return s.split("-")[0]}var pi=Math.max,co=Math.min,Ui=Math.round;function La(){var s=navigator.userAgentData;return s!=null&&s.brands&&Array.isArray(s.brands)?s.brands.map(function(t){return t.brand+"/"+t.version}).join(" "):navigator.userAgent}function Rh(){return!/^((?!chrome|android).)*safari/i.test(La())}function Xi(s,t,e){t===void 0&&(t=!1),e===void 0&&(e=!1);var i=s.getBoundingClientRect(),n=1,o=1;t&&Pt(s)&&(n=s.offsetWidth>0&&Ui(i.width)/s.offsetWidth||1,o=s.offsetHeight>0&&Ui(i.height)/s.offsetHeight||1);var r=ui(s)?Rt(s):window,a=r.visualViewport,l=!Rh()&&e,c=(i.left+(l&&a?a.offsetLeft:0))/n,h=(i.top+(l&&a?a.offsetTop:0))/o,d=i.width/n,u=i.height/o;return{width:d,height:u,top:h,right:c+d,bottom:h+u,left:c,x:c,y:h}}function $a(s){var t=Xi(s),e=s.offsetWidth,i=s.offsetHeight;return Math.abs(t.width-e)<=1&&(e=t.width),Math.abs(t.height-i)<=1&&(i=t.height),{x:s.offsetLeft,y:s.offsetTop,width:e,height:i}}function Ph(s,t){var e=t.getRootNode&&t.getRootNode();if(s.contains(t))return!0;if(e&&Da(e)){var i=t;do{if(i&&s.isSameNode(i))return!0;i=i.parentNode||i.host}while(i)}return!1}function Jt(s){return Rt(s).getComputedStyle(s)}function Am(s){return["table","td","th"].indexOf(le(s))>=0}function He(s){return((ui(s)?s.ownerDocument:s.document)||window.document).documentElement}function ho(s){return le(s)==="html"?s:s.assignedSlot||s.parentNode||(Da(s)?s.host:null)||He(s)}function Nh(s){return!Pt(s)||Jt(s).position==="fixed"?null:s.offsetParent}function wm(s){var t=/firefox/i.test(La()),e=/Trident/i.test(La());if(e&&Pt(s)){var i=Jt(s);if(i.position==="fixed")return null}var n=ho(s);for(Da(n)&&(n=n.host);Pt(n)&&["html","body"].indexOf(le(n))<0;){var o=Jt(n);if(o.transform!=="none"||o.perspective!=="none"||o.contain==="paint"||["transform","perspective"].indexOf(o.willChange)!==-1||t&&o.willChange==="filter"||t&&o.filter&&o.filter!=="none")return n;n=n.parentNode}return null}function Ns(s){for(var t=Rt(s),e=Nh(s);e&&Am(e)&&Jt(e).position==="static";)e=Nh(e);return e&&(le(e)==="html"||le(e)==="body"&&Jt(e).position==="static")?t:e||wm(s)||t}function Ra(s){return["top","bottom"].indexOf(s)>=0?"x":"y"}function Bs(s,t,e){return pi(s,co(t,e))}function km(s,t,e){var i=Bs(s,t,e);return i>e?e:i}function Bh(){return{top:0,right:0,bottom:0,left:0}}function Hh(s){return Object.assign({},Bh(),s)}function Vh(s,t){return t.reduce(function(e,i){return e[i]=s,e},{})}var Sm=function(t,e){return t=typeof t=="function"?t(Object.assign({},e.rects,{placement:e.placement})):t,Hh(typeof t!="number"?t:Vh(t,ji))};function Om(s){var t,e=s.state,i=s.name,n=s.options,o=e.elements.arrow,r=e.modifiersData.popperOffsets,a=Qt(e.placement),l=Ra(a),c=[yt,$t].indexOf(a)>=0,h=c?"height":"width";if(!(!o||!r)){var d=Sm(n.padding,e),u=$a(o),p=l==="y"?vt:yt,f=l==="y"?Lt:$t,b=e.rects.reference[h]+e.rects.reference[l]-r[l]-e.rects.popper[h],v=r[l]-e.rects.reference[l],y=Ns(o),T=y?l==="y"?y.clientHeight||0:y.clientWidth||0:0,x=b/2-v/2,E=d[p],C=T-u[h]-d[f],A=T/2-u[h]/2+x,w=Bs(E,A,C),S=l;e.modifiersData[i]=(t={},t[S]=w,t.centerOffset=w-A,t)}}function Im(s){var t=s.state,e=s.options,i=e.element,n=i===void 0?"[data-popper-arrow]":i;if(n!=null&&!(typeof n=="string"&&(n=t.elements.popper.querySelector(n),!n))){if({}.NODE_ENV!=="production"&&(Pt(n)||console.error(['Popper: "arrow" element must be an HTMLElement (not an SVGElement).',"To use an SVG arrow, wrap it in an HTMLElement that will be used as","the arrow."].join(" "))),!Ph(t.elements.popper,n)){({}).NODE_ENV!=="production"&&console.error(['Popper: "arrow" modifier\'s `element` must be a child of the popper',"element."].join(" "));return}t.elements.arrow=n}}const Fh={name:"arrow",enabled:!0,phase:"main",fn:Om,effect:Im,requires:["popperOffsets"],requiresIfExists:["preventOverflow"]};function Gi(s){return s.split("-")[1]}var Dm={top:"auto",right:"auto",bottom:"auto",left:"auto"};function Mm(s,t){var e=s.x,i=s.y,n=t.devicePixelRatio||1;return{x:Ui(e*n)/n||0,y:Ui(i*n)/n||0}}function Wh(s){var t,e=s.popper,i=s.popperRect,n=s.placement,o=s.variation,r=s.offsets,a=s.position,l=s.gpuAcceleration,c=s.adaptive,h=s.roundOffsets,d=s.isFixed,u=r.x,p=u===void 0?0:u,f=r.y,b=f===void 0?0:f,v=typeof h=="function"?h({x:p,y:b}):{x:p,y:b};p=v.x,b=v.y;var y=r.hasOwnProperty("x"),T=r.hasOwnProperty("y"),x=yt,E=vt,C=window;if(c){var A=Ns(e),w="clientHeight",S="clientWidth";if(A===Rt(e)&&(A=He(e),Jt(A).position!=="static"&&a==="absolute"&&(w="scrollHeight",S="scrollWidth")),A=A,n===vt||(n===yt||n===$t)&&o===Yi){E=Lt;var k=d&&A===C&&C.visualViewport?C.visualViewport.height:A[w];b-=k-i.height,b*=l?1:-1}if(n===yt||(n===vt||n===Lt)&&o===Yi){x=$t;var D=d&&A===C&&C.visualViewport?C.visualViewport.width:A[S];p-=D-i.width,p*=l?1:-1}}var I=Object.assign({position:a},c&&Dm),M=h===!0?Mm({x:p,y:b},Rt(e)):{x:p,y:b};if(p=M.x,b=M.y,l){var P;return Object.assign({},I,(P={},P[E]=T?"0":"",P[x]=y?"0":"",P.transform=(C.devicePixelRatio||1)<=1?"translate("+p+"px, "+b+"px)":"translate3d("+p+"px, "+b+"px, 0)",P))}return Object.assign({},I,(t={},t[E]=T?b+"px":"",t[x]=y?p+"px":"",t.transform="",t))}function Lm(s){var t=s.state,e=s.options,i=e.gpuAcceleration,n=i===void 0?!0:i,o=e.adaptive,r=o===void 0?!0:o,a=e.roundOffsets,l=a===void 0?!0:a;if({}.NODE_ENV!=="production"){var c=Jt(t.elements.popper).transitionProperty||"";r&&["transform","top","right","bottom","left"].some(function(d){return c.indexOf(d)>=0})&&console.warn(["Popper: Detected CSS transitions on at least one of the following",'CSS properties: "transform", "top", "right", "bottom", "left".',`
+
+`,'Disable the "computeStyles" modifier\'s `adaptive` option to allow',"for smooth transitions, or remove these properties from the CSS","transition declaration on the popper element if only transitioning","opacity or background-color for example.",`
+
+`,"We recommend using the popper element as a wrapper around an inner","element that can have any CSS property transitioned for animations."].join(" "))}var h={placement:Qt(t.placement),variation:Gi(t.placement),popper:t.elements.popper,popperRect:t.rects.popper,gpuAcceleration:n,isFixed:t.options.strategy==="fixed"};t.modifiersData.popperOffsets!=null&&(t.styles.popper=Object.assign({},t.styles.popper,Wh(Object.assign({},h,{offsets:t.modifiersData.popperOffsets,position:t.options.strategy,adaptive:r,roundOffsets:l})))),t.modifiersData.arrow!=null&&(t.styles.arrow=Object.assign({},t.styles.arrow,Wh(Object.assign({},h,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:l})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})}const Pa={name:"computeStyles",enabled:!0,phase:"beforeWrite",fn:Lm,data:{}};var uo={passive:!0};function $m(s){var t=s.state,e=s.instance,i=s.options,n=i.scroll,o=n===void 0?!0:n,r=i.resize,a=r===void 0?!0:r,l=Rt(t.elements.popper),c=[].concat(t.scrollParents.reference,t.scrollParents.popper);return o&&c.forEach(function(h){h.addEventListener("scroll",e.update,uo)}),a&&l.addEventListener("resize",e.update,uo),function(){o&&c.forEach(function(h){h.removeEventListener("scroll",e.update,uo)}),a&&l.removeEventListener("resize",e.update,uo)}}const Na={name:"eventListeners",enabled:!0,phase:"write",fn:function(){},effect:$m,data:{}};var Rm={left:"right",right:"left",bottom:"top",top:"bottom"};function po(s){return s.replace(/left|right|bottom|top/g,function(t){return Rm[t]})}var Pm={start:"end",end:"start"};function zh(s){return s.replace(/start|end/g,function(t){return Pm[t]})}function Ba(s){var t=Rt(s),e=t.pageXOffset,i=t.pageYOffset;return{scrollLeft:e,scrollTop:i}}function Ha(s){return Xi(He(s)).left+Ba(s).scrollLeft}function Nm(s,t){var e=Rt(s),i=He(s),n=e.visualViewport,o=i.clientWidth,r=i.clientHeight,a=0,l=0;if(n){o=n.width,r=n.height;var c=Rh();(c||!c&&t==="fixed")&&(a=n.offsetLeft,l=n.offsetTop)}return{width:o,height:r,x:a+Ha(s),y:l}}function Bm(s){var t,e=He(s),i=Ba(s),n=(t=s.ownerDocument)==null?void 0:t.body,o=pi(e.scrollWidth,e.clientWidth,n?n.scrollWidth:0,n?n.clientWidth:0),r=pi(e.scrollHeight,e.clientHeight,n?n.scrollHeight:0,n?n.clientHeight:0),a=-i.scrollLeft+Ha(s),l=-i.scrollTop;return Jt(n||e).direction==="rtl"&&(a+=pi(e.clientWidth,n?n.clientWidth:0)-o),{width:o,height:r,x:a,y:l}}function Va(s){var t=Jt(s),e=t.overflow,i=t.overflowX,n=t.overflowY;return/auto|scroll|overlay|hidden/.test(e+n+i)}function jh(s){return["html","body","#document"].indexOf(le(s))>=0?s.ownerDocument.body:Pt(s)&&Va(s)?s:jh(ho(s))}function Hs(s,t){var e;t===void 0&&(t=[]);var i=jh(s),n=i===((e=s.ownerDocument)==null?void 0:e.body),o=Rt(i),r=n?[o].concat(o.visualViewport||[],Va(i)?i:[]):i,a=t.concat(r);return n?a:a.concat(Hs(ho(r)))}function Fa(s){return Object.assign({},s,{left:s.x,top:s.y,right:s.x+s.width,bottom:s.y+s.height})}function Hm(s,t){var e=Xi(s,!1,t==="fixed");return e.top=e.top+s.clientTop,e.left=e.left+s.clientLeft,e.bottom=e.top+s.clientHeight,e.right=e.left+s.clientWidth,e.width=s.clientWidth,e.height=s.clientHeight,e.x=e.left,e.y=e.top,e}function Yh(s,t,e){return t===Sa?Fa(Nm(s,e)):ui(t)?Hm(t,e):Fa(Bm(He(s)))}function Vm(s){var t=Hs(ho(s)),e=["absolute","fixed"].indexOf(Jt(s).position)>=0,i=e&&Pt(s)?Ns(s):s;return ui(i)?t.filter(function(n){return ui(n)&&Ph(n,i)&&le(n)!=="body"}):[]}function Fm(s,t,e,i){var n=t==="clippingParents"?Vm(s):[].concat(t),o=[].concat(n,[e]),r=o[0],a=o.reduce(function(l,c){var h=Yh(s,c,i);return l.top=pi(h.top,l.top),l.right=co(h.right,l.right),l.bottom=co(h.bottom,l.bottom),l.left=pi(h.left,l.left),l},Yh(s,r,i));return a.width=a.right-a.left,a.height=a.bottom-a.top,a.x=a.left,a.y=a.top,a}function Kh(s){var t=s.reference,e=s.element,i=s.placement,n=i?Qt(i):null,o=i?Gi(i):null,r=t.x+t.width/2-e.width/2,a=t.y+t.height/2-e.height/2,l;switch(n){case vt:l={x:r,y:t.y-e.height};break;case Lt:l={x:r,y:t.y+t.height};break;case $t:l={x:t.x+t.width,y:a};break;case yt:l={x:t.x-e.width,y:a};break;default:l={x:t.x,y:t.y}}var c=n?Ra(n):null;if(c!=null){var h=c==="y"?"height":"width";switch(o){case di:l[c]=l[c]-(t[h]/2-e[h]/2);break;case Yi:l[c]=l[c]+(t[h]/2-e[h]/2);break}}return l}function qi(s,t){t===void 0&&(t={});var e=t,i=e.placement,n=i===void 0?s.placement:i,o=e.strategy,r=o===void 0?s.strategy:o,a=e.boundary,l=a===void 0?Ch:a,c=e.rootBoundary,h=c===void 0?Sa:c,d=e.elementContext,u=d===void 0?Ki:d,p=e.altBoundary,f=p===void 0?!1:p,b=e.padding,v=b===void 0?0:b,y=Hh(typeof v!="number"?v:Vh(v,ji)),T=u===Ki?Ah:Ki,x=s.rects.popper,E=s.elements[f?T:u],C=Fm(ui(E)?E:E.contextElement||He(s.elements.popper),l,h,r),A=Xi(s.elements.reference),w=Kh({reference:A,element:x,strategy:"absolute",placement:n}),S=Fa(Object.assign({},x,w)),k=u===Ki?S:A,D={top:C.top-k.top+y.top,bottom:k.bottom-C.bottom+y.bottom,left:C.left-k.left+y.left,right:k.right-C.right+y.right},I=s.modifiersData.offset;if(u===Ki&&I){var M=I[n];Object.keys(D).forEach(function(P){var X=[$t,Lt].indexOf(P)>=0?1:-1,R=[vt,Lt].indexOf(P)>=0?"y":"x";D[P]+=M[R]*X})}return D}function Wm(s,t){t===void 0&&(t={});var e=t,i=e.placement,n=e.boundary,o=e.rootBoundary,r=e.padding,a=e.flipVariations,l=e.allowedAutoPlacements,c=l===void 0?Ia:l,h=Gi(i),d=h?a?Oa:Oa.filter(function(f){return Gi(f)===h}):ji,u=d.filter(function(f){return c.indexOf(f)>=0});u.length===0&&(u=d,{}.NODE_ENV!=="production"&&console.error(["Popper: The `allowedAutoPlacements` option did not allow any","placements. Ensure the `placement` option matches the variation","of the allowed placements.",'For example, "auto" cannot be used to allow "bottom-start".','Use "auto-start" instead.'].join(" ")));var p=u.reduce(function(f,b){return f[b]=qi(s,{placement:b,boundary:n,rootBoundary:o,padding:r})[Qt(b)],f},{});return Object.keys(p).sort(function(f,b){return p[f]-p[b]})}function zm(s){if(Qt(s)===Ps)return[];var t=po(s);return[zh(s),t,zh(t)]}function jm(s){var t=s.state,e=s.options,i=s.name;if(!t.modifiersData[i]._skip){for(var n=e.mainAxis,o=n===void 0?!0:n,r=e.altAxis,a=r===void 0?!0:r,l=e.fallbackPlacements,c=e.padding,h=e.boundary,d=e.rootBoundary,u=e.altBoundary,p=e.flipVariations,f=p===void 0?!0:p,b=e.allowedAutoPlacements,v=t.options.placement,y=Qt(v),T=y===v,x=l||(T||!f?[po(v)]:zm(v)),E=[v].concat(x).reduce(function(we,Zt){return we.concat(Qt(Zt)===Ps?Wm(t,{placement:Zt,boundary:h,rootBoundary:d,padding:c,flipVariations:f,allowedAutoPlacements:b}):Zt)},[]),C=t.rects.reference,A=t.rects.popper,w=new Map,S=!0,k=E[0],D=0;D<E.length;D++){var I=E[D],M=Qt(I),P=Gi(I)===di,X=[vt,Lt].indexOf(M)>=0,R=X?"width":"height",z=qi(t,{placement:I,boundary:h,rootBoundary:d,altBoundary:u,padding:c}),Y=X?P?$t:yt:P?Lt:vt;C[R]>A[R]&&(Y=po(Y));var Gt=po(Y),oe=[];if(o&&oe.push(z[M]<=0),a&&oe.push(z[Y]<=0,z[Gt]<=0),oe.every(function(we){return we})){k=I,S=!1;break}w.set(I,oe)}if(S)for(var re=f?3:1,li=function(Zt){var Pe=E.find(function(Ta){var Vi=w.get(Ta);if(Vi)return Vi.slice(0,Zt).every(function(rh){return rh})});if(Pe)return k=Pe,"break"},qt=re;qt>0;qt--){var Ae=li(qt);if(Ae==="break")break}t.placement!==k&&(t.modifiersData[i]._skip=!0,t.placement=k,t.reset=!0)}}const Uh={name:"flip",enabled:!0,phase:"main",fn:jm,requiresIfExists:["offset"],data:{_skip:!1}};function Xh(s,t,e){return e===void 0&&(e={x:0,y:0}),{top:s.top-t.height-e.y,right:s.right-t.width+e.x,bottom:s.bottom-t.height+e.y,left:s.left-t.width-e.x}}function Gh(s){return[vt,$t,Lt,yt].some(function(t){return s[t]>=0})}function Ym(s){var t=s.state,e=s.name,i=t.rects.reference,n=t.rects.popper,o=t.modifiersData.preventOverflow,r=qi(t,{elementContext:"reference"}),a=qi(t,{altBoundary:!0}),l=Xh(r,i),c=Xh(a,n,o),h=Gh(l),d=Gh(c);t.modifiersData[e]={referenceClippingOffsets:l,popperEscapeOffsets:c,isReferenceHidden:h,hasPopperEscaped:d},t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-reference-hidden":h,"data-popper-escaped":d})}const qh={name:"hide",enabled:!0,phase:"main",requiresIfExists:["preventOverflow"],fn:Ym};function Km(s,t,e){var i=Qt(s),n=[yt,vt].indexOf(i)>=0?-1:1,o=typeof e=="function"?e(Object.assign({},t,{placement:s})):e,r=o[0],a=o[1];return r=r||0,a=(a||0)*n,[yt,$t].indexOf(i)>=0?{x:a,y:r}:{x:r,y:a}}function Um(s){var t=s.state,e=s.options,i=s.name,n=e.offset,o=n===void 0?[0,0]:n,r=Ia.reduce(function(h,d){return h[d]=Km(d,t.rects,o),h},{}),a=r[t.placement],l=a.x,c=a.y;t.modifiersData.popperOffsets!=null&&(t.modifiersData.popperOffsets.x+=l,t.modifiersData.popperOffsets.y+=c),t.modifiersData[i]=r}const Zh={name:"offset",enabled:!0,phase:"main",requires:["popperOffsets"],fn:Um};function Xm(s){var t=s.state,e=s.name;t.modifiersData[e]=Kh({reference:t.rects.reference,element:t.rects.popper,strategy:"absolute",placement:t.placement})}const Wa={name:"popperOffsets",enabled:!0,phase:"read",fn:Xm,data:{}};function Gm(s){return s==="x"?"y":"x"}function qm(s){var t=s.state,e=s.options,i=s.name,n=e.mainAxis,o=n===void 0?!0:n,r=e.altAxis,a=r===void 0?!1:r,l=e.boundary,c=e.rootBoundary,h=e.altBoundary,d=e.padding,u=e.tether,p=u===void 0?!0:u,f=e.tetherOffset,b=f===void 0?0:f,v=qi(t,{boundary:l,rootBoundary:c,padding:d,altBoundary:h}),y=Qt(t.placement),T=Gi(t.placement),x=!T,E=Ra(y),C=Gm(E),A=t.modifiersData.popperOffsets,w=t.rects.reference,S=t.rects.popper,k=typeof b=="function"?b(Object.assign({},t.rects,{placement:t.placement})):b,D=typeof k=="number"?{mainAxis:k,altAxis:k}:Object.assign({mainAxis:0,altAxis:0},k),I=t.modifiersData.offset?t.modifiersData.offset[t.placement]:null,M={x:0,y:0};if(A){if(o){var P,X=E==="y"?vt:yt,R=E==="y"?Lt:$t,z=E==="y"?"height":"width",Y=A[E],Gt=Y+v[X],oe=Y-v[R],re=p?-S[z]/2:0,li=T===di?w[z]:S[z],qt=T===di?-S[z]:-w[z],Ae=t.elements.arrow,we=p&&Ae?$a(Ae):{width:0,height:0},Zt=t.modifiersData["arrow#persistent"]?t.modifiersData["arrow#persistent"].padding:Bh(),Pe=Zt[X],Ta=Zt[R],Vi=Bs(0,w[z],we[z]),rh=x?w[z]/2-re-Vi-Pe-D.mainAxis:li-Vi-Pe-D.mainAxis,mL=x?-w[z]/2+re+Vi+Ta+D.mainAxis:qt+Vi+Ta+D.mainAxis,ah=t.elements.arrow&&Ns(t.elements.arrow),bL=ah?E==="y"?ah.clientTop||0:ah.clientLeft||0:0,Zg=(P=I==null?void 0:I[E])!=null?P:0,vL=Y+rh-Zg-bL,yL=Y+mL-Zg,Qg=Bs(p?co(Gt,vL):Gt,Y,p?pi(oe,yL):oe);A[E]=Qg,M[E]=Qg-Y}if(a){var Jg,TL=E==="x"?vt:yt,EL=E==="x"?Lt:$t,Fi=A[C],Ea=C==="y"?"height":"width",tm=Fi+v[TL],em=Fi-v[EL],lh=[vt,yt].indexOf(y)!==-1,im=(Jg=I==null?void 0:I[C])!=null?Jg:0,sm=lh?tm:Fi-w[Ea]-S[Ea]-im+D.altAxis,nm=lh?Fi+w[Ea]+S[Ea]-im-D.altAxis:em,om=p&&lh?km(sm,Fi,nm):Bs(p?sm:tm,Fi,p?nm:em);A[C]=om,M[C]=om-Fi}t.modifiersData[i]=M}}const Qh={name:"preventOverflow",enabled:!0,phase:"main",fn:qm,requiresIfExists:["offset"]};function Zm(s){return{scrollLeft:s.scrollLeft,scrollTop:s.scrollTop}}function Qm(s){return s===Rt(s)||!Pt(s)?Ba(s):Zm(s)}function Jm(s){var t=s.getBoundingClientRect(),e=Ui(t.width)/s.offsetWidth||1,i=Ui(t.height)/s.offsetHeight||1;return e!==1||i!==1}function tb(s,t,e){e===void 0&&(e=!1);var i=Pt(t),n=Pt(t)&&Jm(t),o=He(t),r=Xi(s,n,e),a={scrollLeft:0,scrollTop:0},l={x:0,y:0};return(i||!i&&!e)&&((le(t)!=="body"||Va(o))&&(a=Qm(t)),Pt(t)?(l=Xi(t,!0),l.x+=t.clientLeft,l.y+=t.clientTop):o&&(l.x=Ha(o))),{x:r.left+a.scrollLeft-l.x,y:r.top+a.scrollTop-l.y,width:r.width,height:r.height}}function eb(s){var t=new Map,e=new Set,i=[];s.forEach(function(o){t.set(o.name,o)});function n(o){e.add(o.name);var r=[].concat(o.requires||[],o.requiresIfExists||[]);r.forEach(function(a){if(!e.has(a)){var l=t.get(a);l&&n(l)}}),i.push(o)}return s.forEach(function(o){e.has(o.name)||n(o)}),i}function ib(s){var t=eb(s);return lo.reduce(function(e,i){return e.concat(t.filter(function(n){return n.phase===i}))},[])}function sb(s){var t;return function(){return t||(t=new Promise(function(e){Promise.resolve().then(function(){t=void 0,e(s())})})),t}}function Ve(s){for(var t=arguments.length,e=new Array(t>1?t-1:0),i=1;i<t;i++)e[i-1]=arguments[i];return[].concat(e).reduce(function(n,o){return n.replace(/%s/,o)},s)}var fi='Popper: modifier "%s" provided an invalid %s property, expected %s but got %s',nb='Popper: modifier "%s" requires "%s", but "%s" modifier is not available',Jh=["name","enabled","phase","fn","effect","requires","options"];function ob(s){s.forEach(function(t){[].concat(Object.keys(t),Jh).filter(function(e,i,n){return n.indexOf(e)===i}).forEach(function(e){switch(e){case"name":typeof t.name!="string"&&console.error(Ve(fi,String(t.name),'"name"','"string"','"'+String(t.name)+'"'));break;case"enabled":typeof t.enabled!="boolean"&&console.error(Ve(fi,t.name,'"enabled"','"boolean"','"'+String(t.enabled)+'"'));break;case"phase":lo.indexOf(t.phase)<0&&console.error(Ve(fi,t.name,'"phase"',"either "+lo.join(", "),'"'+String(t.phase)+'"'));break;case"fn":typeof t.fn!="function"&&console.error(Ve(fi,t.name,'"fn"','"function"','"'+String(t.fn)+'"'));break;case"effect":t.effect!=null&&typeof t.effect!="function"&&console.error(Ve(fi,t.name,'"effect"','"function"','"'+String(t.fn)+'"'));break;case"requires":t.requires!=null&&!Array.isArray(t.requires)&&console.error(Ve(fi,t.name,'"requires"','"array"','"'+String(t.requires)+'"'));break;case"requiresIfExists":Array.isArray(t.requiresIfExists)||console.error(Ve(fi,t.name,'"requiresIfExists"','"array"','"'+String(t.requiresIfExists)+'"'));break;case"options":case"data":break;default:console.error('PopperJS: an invalid property has been provided to the "'+t.name+'" modifier, valid properties are '+Jh.map(function(i){return'"'+i+'"'}).join(", ")+'; but "'+e+'" was provided.')}t.requires&&t.requires.forEach(function(i){s.find(function(n){return n.name===i})==null&&console.error(Ve(nb,String(t.name),i,i))})})})}function rb(s,t){var e=new Set;return s.filter(function(i){var n=t(i);if(!e.has(n))return e.add(n),!0})}function ab(s){var t=s.reduce(function(e,i){var n=e[i.name];return e[i.name]=n?Object.assign({},n,i,{options:Object.assign({},n.options,i.options),data:Object.assign({},n.data,i.data)}):i,e},{});return Object.keys(t).map(function(e){return t[e]})}var td="Popper: Invalid reference or popper argument provided. They must be either a DOM element or virtual element.",lb="Popper: An infinite loop in the modifiers cycle has been detected! The cycle has been interrupted to prevent a browser crash.",ed={placement:"bottom",modifiers:[],strategy:"absolute"};function id(){for(var s=arguments.length,t=new Array(s),e=0;e<s;e++)t[e]=arguments[e];return!t.some(function(i){return!(i&&typeof i.getBoundingClientRect=="function")})}function fo(s){s===void 0&&(s={});var t=s,e=t.defaultModifiers,i=e===void 0?[]:e,n=t.defaultOptions,o=n===void 0?ed:n;return function(a,l,c){c===void 0&&(c=o);var h={placement:"bottom",orderedModifiers:[],options:Object.assign({},ed,o),modifiersData:{},elements:{reference:a,popper:l},attributes:{},styles:{}},d=[],u=!1,p={state:h,setOptions:function(y){var T=typeof y=="function"?y(h.options):y;b(),h.options=Object.assign({},o,h.options,T),h.scrollParents={reference:ui(a)?Hs(a):a.contextElement?Hs(a.contextElement):[],popper:Hs(l)};var x=ib(ab([].concat(i,h.options.modifiers)));if(h.orderedModifiers=x.filter(function(I){return I.enabled}),{}.NODE_ENV!=="production"){var E=rb([].concat(x,h.options.modifiers),function(I){var M=I.name;return M});if(ob(E),Qt(h.options.placement)===Ps){var C=h.orderedModifiers.find(function(I){var M=I.name;return M==="flip"});C||console.error(['Popper: "auto" placements require the "flip" modifier be',"present and enabled to work."].join(" "))}var A=Jt(l),w=A.marginTop,S=A.marginRight,k=A.marginBottom,D=A.marginLeft;[w,S,k,D].some(function(I){return parseFloat(I)})&&console.warn(['Popper: CSS "margin" styles cannot be used to apply padding',"between the popper and its reference element or boundary.","To replicate margin, use the `offset` modifier, as well as","the `padding` option in the `preventOverflow` and `flip`","modifiers."].join(" "))}return f(),p.update()},forceUpdate:function(){if(!u){var y=h.elements,T=y.reference,x=y.popper;if(!id(T,x)){({}).NODE_ENV!=="production"&&console.error(td);return}h.rects={reference:tb(T,Ns(x),h.options.strategy==="fixed"),popper:$a(x)},h.reset=!1,h.placement=h.options.placement,h.orderedModifiers.forEach(function(I){return h.modifiersData[I.name]=Object.assign({},I.data)});for(var E=0,C=0;C<h.orderedModifiers.length;C++){if({}.NODE_ENV!=="production"&&(E+=1,E>100)){console.error(lb);break}if(h.reset===!0){h.reset=!1,C=-1;continue}var A=h.orderedModifiers[C],w=A.fn,S=A.options,k=S===void 0?{}:S,D=A.name;typeof w=="function"&&(h=w({state:h,options:k,name:D,instance:p})||h)}}},update:sb(function(){return new Promise(function(v){p.forceUpdate(),v(h)})}),destroy:function(){b(),u=!0}};if(!id(a,l))return{}.NODE_ENV!=="production"&&console.error(td),p;p.setOptions(c).then(function(v){!u&&c.onFirstUpdate&&c.onFirstUpdate(v)});function f(){h.orderedModifiers.forEach(function(v){var y=v.name,T=v.options,x=T===void 0?{}:T,E=v.effect;if(typeof E=="function"){var C=E({state:h,name:y,instance:p,options:x}),A=function(){};d.push(C||A)}})}function b(){d.forEach(function(v){return v()}),d=[]}return p}}var cb=fo(),hb=[Na,Wa,Pa,Ma],db=fo({defaultModifiers:hb}),ub=[Na,Wa,Pa,Ma,Zh,Uh,Qh,Fh,qh],Fe=fo({defaultModifiers:ub});const sd=Object.freeze(Object.defineProperty({__proto__:null,afterMain:Dh,afterRead:Sh,afterWrite:$h,applyStyles:Ma,arrow:Fh,auto:Ps,basePlacements:ji,beforeMain:Oh,beforeRead:wh,beforeWrite:Mh,bottom:Lt,clippingParents:Ch,computeStyles:Pa,createPopper:Fe,createPopperBase:cb,createPopperLite:db,detectOverflow:qi,end:Yi,eventListeners:Na,flip:Uh,hide:qh,left:yt,main:Ih,modifierPhases:lo,offset:Zh,placements:Ia,popper:Ki,popperGenerator:fo,popperOffsets:Wa,preventOverflow:Qh,read:kh,reference:Ah,right:$t,start:di,top:vt,variationPlacements:Oa,viewport:Sa,write:Lh},Symbol.toStringTag,{value:"Module"}));function za(s){return s==="true"?!0:s==="false"?!1:s===Number(s).toString()?Number(s):s===""||s==="null"?null:s}function ja(s){return s.replace(/[A-Z]/g,t=>`-${t.toLowerCase()}`)}const g={setDataAttribute(s,t,e){s.setAttribute(`data-te-${ja(t)}`,e)},removeDataAttribute(s,t){s.removeAttribute(`data-te-${ja(t)}`)},getDataAttributes(s){if(!s)return{};const t={};return Object.keys(s.dataset).filter(e=>e.startsWith("te")).forEach(e=>{if(e.startsWith("teClass"))return;let i=e.replace(/^te/,"");i=i.charAt(0).toLowerCase()+i.slice(1,i.length),t[i]=za(s.dataset[e])}),t},getDataClassAttributes(s){if(!s)return{};const t={...s.dataset};return Object.keys(t).filter(e=>e.startsWith("teClass")).forEach(e=>{let i=e.replace(/^teClass/,"");i=i.charAt(0).toLowerCase()+i.slice(1,i.length),t[i]=za(t[e])}),t},getDataAttribute(s,t){return za(s.getAttribute(`data-te-${ja(t)}`))},offset(s){const t=s.getBoundingClientRect();return{top:t.top+document.body.scrollTop,left:t.left+document.body.scrollLeft}},position(s){return{top:s.offsetTop,left:s.offsetLeft}},style(s,t){Object.assign(s.style,t)},toggleClass(s,t){s&&Ya(t).forEach(e=>{s.classList.contains(e)?s.classList.remove(e):s.classList.add(e)})},addClass(s,t){Ya(t).forEach(e=>!s.classList.contains(e)&&s.classList.add(e))},addStyle(s,t){Object.keys(t).forEach(e=>{s.style[e]=t[e]})},removeClass(s,t){Ya(t).forEach(e=>s.classList.contains(e)&&s.classList.remove(e))},hasClass(s,t){return s.classList.contains(t)},maxOffset(s){const t=s.getBoundingClientRect();return{top:t.top+Math.max(document.body.scrollTop,document.documentElement.scrollTop,window.scrollY),left:t.left+Math.max(document.body.scrollLeft,document.documentElement.scrollLeft,window.scrollX)}}};function Ya(s){return typeof s=="string"?s.split(" "):Array.isArray(s)?s:!1}const pb=3,m={closest(s,t){return s.closest(t)},matches(s,t){return s.matches(t)},find(s,t=document.documentElement){return[].concat(...Element.prototype.querySelectorAll.call(t,s))},findOne(s,t=document.documentElement){return Element.prototype.querySelector.call(t,s)},children(s,t){return[].concat(...s.children).filter(i=>i.matches(t))},parents(s,t){const e=[];let i=s.parentNode;for(;i&&i.nodeType===Node.ELEMENT_NODE&&i.nodeType!==pb;)this.matches(i,t)&&e.push(i),i=i.parentNode;return e},prev(s,t){let e=s.previousElementSibling;for(;e;){if(e.matches(t))return[e];e=e.previousElementSibling}return[]},next(s,t){let e=s.nextElementSibling;for(;e;){if(this.matches(e,t))return[e];e=e.nextElementSibling}return[]},focusableChildren(s){const t=["a","button","input","textarea","select","details","[tabindex]",'[contenteditable="true"]'].map(e=>`${e}:not([tabindex^="-"])`).join(", ");return this.find(t,s).filter(e=>!ci(e)&&ae(e))}},Ka="dropdown",_i=".te.dropdown",Ua=".data-api",_o="Escape",nd="Space",od="Tab",Xa="ArrowUp",go="ArrowDown",fb=2,_b=new RegExp(`${Xa}|${go}|${_o}`),gb=`hide${_i}`,mb=`hidden${_i}`,bb=`show${_i}`,vb=`shown${_i}`,yb=`click${_i}${Ua}`,rd=`keydown${_i}${Ua}`,Tb=`keyup${_i}${Ua}`,We="show",Eb="dropup",xb="dropend",Cb="dropstart",Ab="[data-te-navbar-ref]",mo="[data-te-dropdown-toggle-ref]",Ga="[data-te-dropdown-menu-ref]",wb="[data-te-navbar-nav-ref]",kb="[data-te-dropdown-menu-ref] [data-te-dropdown-item-ref]:not(.disabled):not(:disabled)",Sb=et()?"top-end":"top-start",Ob=et()?"top-start":"top-end",Ib=et()?"bottom-end":"bottom-start",Db=et()?"bottom-start":"bottom-end",Mb=et()?"left-start":"right-start",Lb=et()?"right-start":"left-start",$b=[{opacity:"0"},{opacity:"1"}],Rb=[{opacity:"1"},{opacity:"0"}],ad={iterations:1,easing:"ease",fill:"both"},Pb={offset:[0,2],boundary:"clippingParents",reference:"toggle",display:"dynamic",popperConfig:null,autoClose:!0,dropdownAnimation:"on",animationDuration:550},Nb={offset:"(array|string|function)",boundary:"(string|element)",reference:"(string|element|object)",display:"string",popperConfig:"(null|object|function)",autoClose:"(boolean|string)",dropdownAnimation:"string",animationDuration:"number"};class Ft extends Mt{constructor(t,e){super(t),this._popper=null,this._config=this._getConfig(e),this._menu=this._getMenuElement(),this._inNavbar=this._detectNavbar(),this._fadeOutAnimate=null;const i=window.matchMedia("(prefers-reduced-motion: reduce)").matches;this._animationCanPlay=this._config.dropdownAnimation==="on"&&!i,this._didInit=!1,this._init()}static get Default(){return Pb}static get DefaultType(){return Nb}static get NAME(){return Ka}toggle(){return this._isShown()?this.hide():this.show()}show(){if(ci(this._element)||this._isShown(this._menu))return;const t={relatedTarget:this._element};if(_.trigger(this._element,bb,t).defaultPrevented)return;const i=Ft.getParentFromElement(this._element);this._inNavbar?g.setDataAttribute(this._menu,"popper","none"):this._createPopper(i),"ontouchstart"in document.documentElement&&!i.closest(wb)&&[].concat(...document.body.children).forEach(n=>_.on(n,"mouseover",ro)),this._element.focus(),this._element.setAttribute("aria-expanded",!0),this._menu.setAttribute(`data-te-dropdown-${We}`,""),this._animationCanPlay&&this._menu.animate($b,{...ad,duration:this._config.animationDuration}),this._element.setAttribute(`data-te-dropdown-${We}`,""),setTimeout(()=>{_.trigger(this._element,vb,t)},this._animationCanPlay?this._config.animationDuration:0)}hide(){if(ci(this._element)||!this._isShown(this._menu))return;const t={relatedTarget:this._element};this._completeHide(t)}dispose(){this._popper&&this._popper.destroy(),super.dispose()}update(){this._inNavbar=this._detectNavbar(),this._popper&&this._popper.update()}_init(){this._didInit||(_.on(document,rd,mo,Ft.dataApiKeydownHandler),_.on(document,rd,Ga,Ft.dataApiKeydownHandler),_.on(document,yb,Ft.clearMenus),_.on(document,Tb,Ft.clearMenus),this._didInit=!0)}_completeHide(t){this._fadeOutAnimate&&this._fadeOutAnimate.playState==="running"||_.trigger(this._element,gb,t).defaultPrevented||("ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(i=>_.off(i,"mouseover",ro)),this._animationCanPlay&&(this._fadeOutAnimate=this._menu.animate(Rb,{...ad,duration:this._config.animationDuration})),setTimeout(()=>{this._popper&&this._popper.destroy(),this._menu.removeAttribute(`data-te-dropdown-${We}`),this._element.removeAttribute(`data-te-dropdown-${We}`),this._element.setAttribute("aria-expanded","false"),g.removeDataAttribute(this._menu,"popper"),_.trigger(this._element,mb,t)},this._animationCanPlay?this._config.animationDuration:0))}_getConfig(t){if(t={...this.constructor.Default,...g.getDataAttributes(this._element),...t},L(Ka,t,this.constructor.DefaultType),typeof t.reference=="object"&&!Wi(t.reference)&&typeof t.reference.getBoundingClientRect!="function")throw new TypeError(`${Ka.toUpperCase()}: Option "reference" provided type "object" without a required "getBoundingClientRect" method.`);return t}_createPopper(t){if(typeof sd>"u")throw new TypeError("Bootstrap's dropdowns require Popper (https://popper.js.org)");let e=this._element;this._config.reference==="parent"?e=t:Wi(this._config.reference)?e=Be(this._config.reference):typeof this._config.reference=="object"&&(e=this._config.reference);const i=this._getPopperConfig(),n=i.modifiers.find(o=>o.name==="applyStyles"&&o.enabled===!1);this._popper=Fe(e,this._menu,i),n&&g.setDataAttribute(this._menu,"popper","static")}_isShown(t=this._element){return t.dataset[`teDropdown${We.charAt(0).toUpperCase()+We.slice(1)}`]===""}_getMenuElement(){return m.next(this._element,Ga)[0]}_getPlacement(){const t=this._element.parentNode;if(t.dataset.teDropdownPosition===xb)return Mb;if(t.dataset.teDropdownPosition===Cb)return Lb;const e=t.dataset.teDropdownAlignment==="end";return t.dataset.teDropdownPosition===Eb?e?Ob:Sb:e?Db:Ib}_detectNavbar(){return this._element.closest(Ab)!==null}_getOffset(){const{offset:t}=this._config;return typeof t=="string"?t.split(",").map(e=>Number.parseInt(e,10)):typeof t=="function"?e=>t(e,this._element):t}_getPopperConfig(){const t={placement:this._getPlacement(),modifiers:[{name:"preventOverflow",options:{boundary:this._config.boundary}},{name:"offset",options:{offset:this._getOffset()}}]};return this._config.display==="static"&&(t.modifiers=[{name:"applyStyles",enabled:!1}]),{...t,...typeof this._config.popperConfig=="function"?this._config.popperConfig(t):this._config.popperConfig}}_selectMenuItem({key:t,target:e}){const i=m.find(kb,this._menu).filter(ae);i.length&&_h(i,e,t===go,!i.includes(e)).focus()}static jQueryInterface(t){return this.each(function(){const e=Ft.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}static clearMenus(t){if(t&&(t.button===fb||t.type==="keyup"&&t.key!==od))return;const e=m.find(mo);for(let i=0,n=e.length;i<n;i++){const o=Ft.getInstance(e[i]);if(!o||o._config.autoClose===!1||!o._isShown())continue;const r={relatedTarget:o._element};if(t){const a=t.composedPath(),l=a.includes(o._menu);if(a.includes(o._element)||o._config.autoClose==="inside"&&!l||o._config.autoClose==="outside"&&l||o._menu.contains(t.target)&&(t.type==="keyup"&&t.key===od||/input|select|option|textarea|form/i.test(t.target.tagName)))continue;t.type==="click"&&(r.clickEvent=t)}o._completeHide(r)}}static getParentFromElement(t){return Ne(t)||t.parentNode}static dataApiKeydownHandler(t){if(/input|textarea/i.test(t.target.tagName)?t.key===nd||t.key!==_o&&(t.key!==go&&t.key!==Xa||t.target.closest(Ga)):!_b.test(t.key))return;const e=this.dataset[`teDropdown${We.charAt(0).toUpperCase()+We.slice(1)}`]==="";if(!e&&t.key===_o||(t.preventDefault(),t.stopPropagation(),ci(this)))return;const i=this.matches(mo)?this:m.prev(this,mo)[0],n=Ft.getOrCreateInstance(i);if(t.key===_o){n.hide();return}if(t.key===Xa||t.key===go){e||n.show(),n._selectMenuItem(t);return}(!e||t.key===nd)&&Ft.clearMenus()}}const qa="collapse",ld="te.collapse",bo=`.${ld}`,cd={toggle:!0,parent:null},Bb={toggle:"boolean",parent:"(null|element)"},Hb=`show${bo}`,Vb=`shown${bo}`,Fb=`hide${bo}`,Wb=`hidden${bo}`,Za="data-te-collapse-show",hd="data-te-collapse-collapsed",vo="data-te-collapse-collapsing",zb="data-te-collapse-horizontal",Zi="data-te-collapse-item",dd=`:scope [${Zi}] [${Zi}]`,jb="width",Yb="height",Kb="[data-te-collapse-item][data-te-collapse-show], [data-te-collapse-item][data-te-collapse-collapsing]",ud="[data-te-collapse-init]",Ub={visible:"!visible",hidden:"hidden",baseTransition:"overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none",collapsing:"h-0 transition-[height] overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none",collapsingHorizontal:"w-0 h-auto transition-[width] overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none"},Xb={visible:"string",hidden:"string",baseTransition:"string",collapsing:"string",collapsingHorizontal:"string"};class ce extends Mt{constructor(t,e,i){super(t),this._isTransitioning=!1,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._triggerArray=[];const n=m.find(ud);for(let o=0,r=n.length;o<r;o++){const a=n[o],l=Ca(a),c=m.find(l).filter(h=>h===this._element);l!==null&&c.length&&(this._selector=l,this._triggerArray.push(a))}this._initializeChildren(),this._config.parent||this._addAriaAndCollapsedClass(this._triggerArray,this._isShown()),this._config.toggle&&this.toggle()}static get Default(){return cd}static get NAME(){return qa}toggle(){this._isShown()?this.hide():this.show()}show(){if(this._isTransitioning||this._isShown())return;let t=[],e;if(this._config.parent){const h=m.find(dd,this._config.parent);t=m.find(Kb,this._config.parent).filter(d=>!h.includes(d))}const i=m.findOne(this._selector);if(t.length){const h=t.find(d=>i!==d);if(e=h?ce.getInstance(h):null,e&&e._isTransitioning)return}if(_.trigger(this._element,Hb).defaultPrevented)return;t.forEach(h=>{i!==h&&ce.getOrCreateInstance(h,{toggle:!1}).hide(),e||O.setData(h,ld,null)});const o=this._getDimension(),r=o==="height"?this._classes.collapsing:this._classes.collapsingHorizontal;g.removeClass(this._element,this._classes.visible),g.removeClass(this._element,this._classes.hidden),g.addClass(this._element,r),this._element.removeAttribute(Zi),this._element.setAttribute(vo,""),this._element.style[o]=0,this._addAriaAndCollapsedClass(this._triggerArray,!0),this._isTransitioning=!0;const a=()=>{this._isTransitioning=!1,g.removeClass(this._element,this._classes.hidden),g.removeClass(this._element,r),g.addClass(this._element,this._classes.visible),this._element.removeAttribute(vo),this._element.setAttribute(Zi,""),this._element.setAttribute(Za,""),this._element.style[o]="",_.trigger(this._element,Vb)},c=`scroll${o[0].toUpperCase()+o.slice(1)}`;this._queueCallback(a,this._element,!0),this._element.style[o]=`${this._element[c]}px`}hide(){if(this._isTransitioning||!this._isShown()||_.trigger(this._element,Fb).defaultPrevented)return;const e=this._getDimension(),i=e==="height"?this._classes.collapsing:this._classes.collapsingHorizontal;this._element.style[e]=`${this._element.getBoundingClientRect()[e]}px`,zi(this._element),g.addClass(this._element,i),g.removeClass(this._element,this._classes.visible),g.removeClass(this._element,this._classes.hidden),this._element.setAttribute(vo,""),this._element.removeAttribute(Zi),this._element.removeAttribute(Za);const n=this._triggerArray.length;for(let r=0;r<n;r++){const a=this._triggerArray[r],l=Ne(a);l&&!this._isShown(l)&&this._addAriaAndCollapsedClass([a],!1)}this._isTransitioning=!0;const o=()=>{this._isTransitioning=!1,g.removeClass(this._element,i),g.addClass(this._element,this._classes.visible),g.addClass(this._element,this._classes.hidden),this._element.removeAttribute(vo),this._element.setAttribute(Zi,""),_.trigger(this._element,Wb)};this._element.style[e]="",this._queueCallback(o,this._element,!0)}_isShown(t=this._element){return t.hasAttribute(Za)}_getConfig(t){return t={...cd,...g.getDataAttributes(this._element),...t},t.toggle=!!t.toggle,t.parent=Be(t.parent),L(qa,t,Bb),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Ub,...e,...t},L(qa,t,Xb),t}_getDimension(){return this._element.hasAttribute(zb)?jb:Yb}_initializeChildren(){if(!this._config.parent)return;const t=m.find(dd,this._config.parent);m.find(ud,this._config.parent).filter(e=>!t.includes(e)).forEach(e=>{const i=Ne(e);i&&this._addAriaAndCollapsedClass([e],this._isShown(i))})}_addAriaAndCollapsedClass(t,e){t.length&&t.forEach(i=>{e?i.removeAttribute(hd):i.setAttribute(`${hd}`,""),i.setAttribute("aria-expanded",e)})}static jQueryInterface(t){return this.each(function(){const e={};typeof t=="string"&&/show|hide/.test(t)&&(e.toggle=!1);const i=ce.getOrCreateInstance(this,e);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t]()}})}}const pd=".fixed-top, .fixed-bottom, .is-fixed, .sticky-top",fd=".sticky-top";class Qi{constructor(){this._element=document.body}getWidth(){const t=document.documentElement.clientWidth;return Math.abs(window.innerWidth-t)}hide(){const t=this.getWidth();this._disableOverFlow(),this._setElementAttributes(this._element,"paddingRight",e=>e+t),this._setElementAttributes(pd,"paddingRight",e=>e+t),this._setElementAttributes(fd,"marginRight",e=>e-t)}_disableOverFlow(){this._saveInitialAttribute(this._element,"overflow"),this._element.style.overflow="hidden"}_setElementAttributes(t,e,i){const n=this.getWidth(),o=r=>{if(r!==this._element&&window.innerWidth>r.clientWidth+n)return;this._saveInitialAttribute(r,e);const a=window.getComputedStyle(r)[e];r.style[e]=`${i(Number.parseFloat(a))}px`};this._applyManipulationCallback(t,o)}reset(){this._resetElementAttributes(this._element,"overflow"),this._resetElementAttributes(this._element,"paddingRight"),this._resetElementAttributes(pd,"paddingRight"),this._resetElementAttributes(fd,"marginRight")}_saveInitialAttribute(t,e){const i=t.style[e];i&&g.setDataAttribute(t,e,i)}_resetElementAttributes(t,e){const i=n=>{const o=g.getDataAttribute(n,e);typeof o>"u"?n.style.removeProperty(e):(g.removeDataAttribute(n,e),n.style[e]=o)};this._applyManipulationCallback(t,i)}_applyManipulationCallback(t,e){Wi(t)?e(t):m.find(t,this._element).forEach(e)}isOverflowing(){return this.getWidth()>0}}const Gb={isVisible:!0,isAnimated:!1,rootElement:"body",clickCallback:null,backdropClasses:null},qb={isVisible:"boolean",isAnimated:"boolean",rootElement:"(element|string)",clickCallback:"(function|null)",backdropClasses:"(array|string|null)"},_d="backdrop",gd=`mousedown.te.${_d}`;class Qa{constructor(t){this._config=this._getConfig(t),this._isAppended=!1,this._element=null}show(t){if(!this._config.isVisible){hi(t);return}this._append(),this._config.isAnimated&&zi(this._getElement());const e=this._config.backdropClasses||["opacity-50","transition-all","duration-300","ease-in-out","fixed","top-0","left-0","z-[1040]","bg-black","w-screen","h-screen"];g.removeClass(this._getElement(),"opacity-0"),g.addClass(this._getElement(),e),this._element.setAttribute("data-te-backdrop-show",""),this._emulateAnimation(()=>{hi(t)})}hide(t){if(!this._config.isVisible){hi(t);return}this._element.removeAttribute("data-te-backdrop-show"),this._getElement().classList.add("opacity-0"),this._getElement().classList.remove("opacity-50"),this._emulateAnimation(()=>{this.dispose(),hi(t)})}_getElement(){if(!this._element){const t=document.createElement("div");t.className=this._config.className,this._config.isAnimated&&t.classList.add("opacity-50"),this._element=t}return this._element}_getConfig(t){return t={...Gb,...typeof t=="object"?t:{}},t.rootElement=Be(t.rootElement),L(_d,t,qb),t}_append(){this._isAppended||(this._config.rootElement.append(this._getElement()),_.on(this._getElement(),gd,()=>{hi(this._config.clickCallback)}),this._isAppended=!0)}dispose(){this._isAppended&&(_.off(this._element,gd),this._element.remove(),this._isAppended=!1)}_emulateAnimation(t){fh(t,this._getElement(),this._config.isAnimated)}}class Vs{constructor(t,e={},i){this._element=t,this._toggler=i,this._event=e.event||"blur",this._condition=e.condition||(()=>!0),this._selector=e.selector||'button, a, input, select, textarea, [tabindex]:not([tabindex="-1"])',this._onlyVisible=e.onlyVisible||!1,this._focusableElements=[],this._firstElement=null,this._lastElement=null,this.handler=n=>{this._condition(n)&&!n.shiftKey&&n.target===this._lastElement?(n.preventDefault(),this._firstElement.focus()):this._condition(n)&&n.shiftKey&&n.target===this._firstElement&&(n.preventDefault(),this._lastElement.focus())}}trap(){this._setElements(),this._init(),this._setFocusTrap()}disable(){this._focusableElements.forEach(t=>{t.removeEventListener(this._event,this.handler)}),this._toggler&&this._toggler.focus()}update(){this._setElements(),this._setFocusTrap()}_init(){const t=e=>{!this._firstElement||e.key!=="Tab"||this._focusableElements.includes(e.target)||(e.preventDefault(),this._firstElement.focus(),window.removeEventListener("keydown",t))};window.addEventListener("keydown",t)}_filterVisible(t){return t.filter(e=>{if(!ae(e))return!1;const i=m.parents(e,"*");for(let n=0;n<i.length;n++){const o=window.getComputedStyle(i[n]);if(o&&(o.display==="none"||o.visibility==="hidden"))return!1}return!0})}_setElements(){this._focusableElements=m.focusableChildren(this._element),this._onlyVisible&&(this._focusableElements=this._filterVisible(this._focusableElements)),this._firstElement=this._focusableElements[0],this._lastElement=this._focusableElements[this._focusableElements.length-1]}_setFocusTrap(){this._focusableElements.forEach((t,e)=>{e===this._focusableElements.length-1||e===0?t.addEventListener(this._event,this.handler):t.removeEventListener(this._event,this.handler)})}}let md=[];const yo=(s,t="hide")=>{const e=`click.dismiss${s.EVENT_KEY}`,i=s.NAME;md.includes(i)||(md.push(i),_.on(document,e,`[data-te-${i}-dismiss]`,function(n){if(["A","AREA"].includes(this.tagName)&&n.preventDefault(),ci(this))return;const o=Ne(this)||this.closest(`.${i}`)||this.closest(`[data-te-${i}-init]`);if(!o)return;s.getOrCreateInstance(o)[t]()}))},bd="offcanvas",Ji=".te.offcanvas",Zb=`load${Ji}.data-api`,Qb="Escape",vd={backdrop:!0,keyboard:!0,scroll:!1},Jb={backdrop:"boolean",keyboard:"boolean",scroll:"boolean"},yd="show",tv="[data-te-offcanvas-init][data-te-offcanvas-show]",ev=`show${Ji}`,iv=`shown${Ji}`,sv=`hide${Ji}`,nv=`hidden${Ji}`,ov=`keydown.dismiss${Ji}`;class ts extends Mt{constructor(t,e){super(t),this._config=this._getConfig(e),this._isShown=!1,this._backdrop=this._initializeBackDrop(),this._focustrap=this._initializeFocusTrap(),this._addEventListeners(),this._didInit=!1,this._init()}static get NAME(){return bd}static get Default(){return vd}toggle(t){return this._isShown?this.hide():this.show(t)}show(t){if(this._isShown||_.trigger(this._element,ev,{relatedTarget:t}).defaultPrevented)return;this._isShown=!0,this._element.style.visibility="visible",this._backdrop.show(),this._config.scroll||new Qi().hide(),this._element.removeAttribute("aria-hidden"),this._element.setAttribute("aria-modal",!0),this._element.setAttribute("role","dialog"),this._element.setAttribute(`data-te-offcanvas-${yd}`,"");const i=()=>{this._config.scroll||this._focustrap.trap(),_.trigger(this._element,iv,{relatedTarget:t})};this._queueCallback(i,this._element,!0)}hide(){if(!this._isShown||_.trigger(this._element,sv).defaultPrevented)return;this._focustrap.disable(),this._element.blur(),this._isShown=!1,this._element.removeAttribute(`data-te-offcanvas-${yd}`),this._backdrop.hide();const e=()=>{this._element.setAttribute("aria-hidden",!0),this._element.removeAttribute("aria-modal"),this._element.removeAttribute("role"),this._element.style.visibility="hidden",this._config.scroll||new Qi().reset(),_.trigger(this._element,nv)};this._queueCallback(e,this._element,!0)}dispose(){this._backdrop.dispose(),this._focustrap.disable(),super.dispose()}_init(){this._didInit||(_.on(window,Zb,()=>m.find(tv).forEach(t=>ts.getOrCreateInstance(t).show())),this._didInit=!0,yo(ts))}_getConfig(t){return t={...vd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(bd,t,Jb),t}_initializeBackDrop(){return new Qa({isVisible:this._config.backdrop,isAnimated:!0,rootElement:this._element.parentNode,clickCallback:()=>this.hide()})}_initializeFocusTrap(){return new Vs(this._element,{event:"keydown",condition:t=>t.key==="Tab"})}_addEventListeners(){_.on(this._element,ov,t=>{this._config.keyboard&&t.key===Qb&&this.hide()})}static jQueryInterface(t){return this.each(function(){const e=ts.getOrCreateInstance(this,t);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Ja="alert",Td=".te.alert",rv=`close${Td}`,av=`closed${Td}`,Fs="data-te-alert-show",lv={animation:"boolean",autohide:"boolean",autoclose:"boolean",delay:"number"},Ed={animation:!0,autohide:!0,autoclose:!1,delay:1e3},cv={fadeIn:"animate-[fade-in_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none",fadeOut:"animate-[fade-out_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none"},hv={fadeIn:"string",fadeOut:"string"};class Ws extends Mt{constructor(t,e,i){super(t),this._element=t,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._didInit=!1,this._init()}static get DefaultType(){return lv}static get Default(){return Ed}static get NAME(){return Ja}close(){if(_.trigger(this._element,rv).defaultPrevented)return;let e=0;this._config.animation&&(e=300,g.addClass(this._element,this._classes.fadeOut)),this._element.removeAttribute(Fs),setTimeout(()=>{this._queueCallback(()=>this._destroyElement(),this._element,this._config.animation)},e)}show(){if(this._element){if(this._config.autohide&&this._setupAutohide(),(this._config.autoclose||this._config.autoclose&&this._config.autohide)&&this._setupAutoclose(),!this._element.hasAttribute(Fs)&&(g.removeClass(this._element,"hidden"),g.addClass(this._element,"block"),ae(this._element))){const t=e=>{g.removeClass(this._element,"hidden"),g.addClass(this._element,"block"),_.off(e.target,"animationend",t)};this._element.setAttribute(Fs,""),_.on(this._element,"animationend",t)}this._config.animation&&(g.removeClass(this._element,this._classes.fadeOut),g.addClass(this._element,this._classes.fadeIn))}}hide(){if(this._element&&this._element.hasAttribute(Fs)){this._element.removeAttribute(Fs);const t=e=>{g.addClass(this._element,"hidden"),g.removeClass(this._element,"block"),this._timeout!==null&&(clearTimeout(this._timeout),this._timeout=null),_.off(e.target,"animationend",t)};_.on(this._element,"animationend",t),g.removeClass(this._element,this._classes.fadeIn),g.addClass(this._element,this._classes.fadeOut)}}_init(){this._didInit||(yo(Ws,"close"),this._didInit=!0)}_getConfig(t){return t={...Ed,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(Ja,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cv,...e,...t},L(Ja,t,hv),t}_setupAutohide(){this._timeout=setTimeout(()=>{this.hide()},this._config.delay)}_setupAutoclose(){this._timeout=setTimeout(()=>{this.close()},this._config.delay)}_destroyElement(){this._element.remove(),_.trigger(this._element,av),this.dispose()}static jQueryInterface(t){return this.each(function(){const e=Ws.getOrCreateInstance(this);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const tl="carousel",Nt=".te.carousel",xd=".data-api",dv="ArrowLeft",uv="ArrowRight",pv=500,fv=40,Cd={interval:5e3,keyboard:!0,ride:!1,pause:"hover",wrap:!0,touch:!0},_v={interval:"(number|boolean)",keyboard:"boolean",ride:"(boolean|string)",pause:"(string|boolean)",wrap:"boolean",touch:"boolean"},gv={pointer:"touch-pan-y",block:"!block",visible:"data-[te-carousel-fade]:opacity-100 data-[te-carousel-fade]:z-[1]",invisible:"data-[te-carousel-fade]:z-0 data-[te-carousel-fade]:opacity-0 data-[te-carousel-fade]:duration-[600ms] data-[te-carousel-fade]:delay-600",slideRight:"translate-x-full",slideLeft:"-translate-x-full"},mv={pointer:"string",block:"string",visible:"string",invisible:"string",slideRight:"string",slideLeft:"string"},gi="next",mi="prev",bi="left",zs="right",bv={[dv]:zs,[uv]:bi},vv=`slide${Nt}`,el=`slid${Nt}`,yv=`keydown${Nt}`,Tv=`mouseenter${Nt}`,Ev=`mouseleave${Nt}`,xv=`touchstart${Nt}`,Cv=`touchmove${Nt}`,Av=`touchend${Nt}`,wv=`pointerdown${Nt}`,kv=`pointerup${Nt}`,Sv=`dragstart${Nt}`,Ov=`load${Nt}${xd}`,Iv=`click${Nt}${xd}`,Ad="data-te-carousel-init",vi="data-te-carousel-active",Dv="data-te-carousel-item-end",il="data-te-carousel-item-start",Mv="data-te-carousel-item-next",Lv="data-te-carousel-item-prev",$v="data-te-carousel-pointer-event",Rv="[data-te-carousel-init]",wd="[data-te-carousel-active]",sl="[data-te-carousel-item]",es=`${wd}${sl}`,Pv=`${sl} img`,Nv="[data-te-carousel-item-next], [data-te-carousel-item-prev]",Bv="[data-te-carousel-indicators]",Hv="[data-te-target]",Vv="[data-te-slide], [data-te-slide-to]",Fv="touch",Wv="pen";class he extends Mt{constructor(t,e,i){super(t),this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.touchStartX=0,this.touchDeltaX=0,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._indicatorsElement=m.findOne(Bv,this._element),this._touchSupported="ontouchstart"in document.documentElement||navigator.maxTouchPoints>0,this._pointerEvent=!!window.PointerEvent,this._setActiveElementClass(),this._addEventListeners(),this._didInit=!1,this._init(),this._config.ride==="carousel"&&this.cycle()}static get Default(){return Cd}static get NAME(){return tl}next(){this._slide(gi)}nextWhenVisible(){!document.hidden&&ae(this._element)&&this.next()}prev(){this._slide(mi)}pause(t){t||(this._isPaused=!0),m.findOne(Nv,this._element)&&(hh(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null}cycle(t){t||(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config&&this._config.interval&&!this._isPaused&&(this._updateInterval(),this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))}to(t){this._activeElement=m.findOne(es,this._element);const e=this._getItemIndex(this._activeElement);if(t>this._items.length-1||t<0)return;if(this._isSliding){_.one(this._element,el,()=>this.to(t));return}if(e===t){this.pause(),this.cycle();return}const i=t>e?gi:mi;this._slide(i,this._items[t])}_init(){this._didInit||(_.on(document,Iv,Vv,he.dataApiClickHandler),_.on(window,Ov,()=>{const t=m.find(Rv);for(let e=0,i=t.length;e<i;e++)he.carouselInterface(t[e],he.getInstance(t[e]))}),this._didInit=!0)}_getConfig(t){return t={...Cd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(tl,t,_v),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...gv,...e,...t},L(tl,t,mv),t}_enableCycle(){if(this._config.ride){if(this._isSliding){_.one(this._element,el,()=>this.cycle());return}this.cycle()}}_applyInitialClasses(){const t=m.findOne(es,this._element);t.classList.add(this._classes.block,...this._classes.visible.split(" ")),this._setActiveIndicatorElement(t)}_handleSwipe(){const t=Math.abs(this.touchDeltaX);if(t<=fv)return;const e=t/this.touchDeltaX;this.touchDeltaX=0,e&&this._slide(e>0?zs:bi)}_setActiveElementClass(){this._activeElement=m.findOne(es,this._element),g.addClass(this._activeElement,"hidden")}_addEventListeners(){this._config.keyboard&&_.on(this._element,yv,t=>this._keydown(t)),this._config.pause==="hover"&&(_.on(this._element,Tv,t=>this.pause(t)),_.on(this._element,Ev,t=>this._enableCycle(t))),this._config.touch&&this._touchSupported&&this._addTouchEventListeners(),this._applyInitialClasses()}_addTouchEventListeners(){const t=o=>this._pointerEvent&&(o.pointerType===Wv||o.pointerType===Fv),e=o=>{t(o)?this.touchStartX=o.clientX:this._pointerEvent||(this.touchStartX=o.touches[0].clientX)},i=o=>{this.touchDeltaX=o.touches&&o.touches.length>1?0:o.touches[0].clientX-this.touchStartX},n=o=>{t(o)&&(this.touchDeltaX=o.clientX-this.touchStartX),this._handleSwipe(),this._config.pause==="hover"&&(this.pause(),this.touchTimeout&&clearTimeout(this.touchTimeout),this.touchTimeout=setTimeout(r=>this._enableCycle(r),pv+this._config.interval))};m.find(Pv,this._element).forEach(o=>{_.on(o,Sv,r=>r.preventDefault())}),this._pointerEvent?(_.on(this._element,wv,o=>e(o)),_.on(this._element,kv,o=>n(o)),this._element.classList.add(this._classes.pointer),this._element.setAttribute(`${$v}`,"")):(_.on(this._element,xv,o=>e(o)),_.on(this._element,Cv,o=>i(o)),_.on(this._element,Av,o=>n(o)))}_keydown(t){if(/input|textarea/i.test(t.target.tagName))return;const e=bv[t.key];e&&(t.preventDefault(),this._slide(e))}_getItemIndex(t){return this._items=t&&t.parentNode?m.find(sl,t.parentNode):[],this._items.indexOf(t)}_getItemByOrder(t,e){const i=t===gi;return _h(this._items,e,i,this._config.wrap)}_triggerSlideEvent(t,e){const i=this._getItemIndex(t),n=this._getItemIndex(m.findOne(es,this._element));return _.trigger(this._element,vv,{relatedTarget:t,direction:e,from:n,to:i})}_setActiveIndicatorElement(t){if(this._indicatorsElement){const e=m.findOne(wd,this._indicatorsElement);e.removeAttribute(vi),e.removeAttribute("aria-current"),e.classList.remove("!opacity-100");const i=m.find(Hv,this._indicatorsElement);for(let n=0;n<i.length;n++)if(Number.parseInt(i[n].getAttribute("data-te-slide-to"),10)===this._getItemIndex(t)){i[n].setAttribute(`${vi}`,""),i[n].setAttribute("aria-current","true"),i[n].classList.add("!opacity-100");break}}}_updateInterval(){const t=this._activeElement||m.findOne(es,this._element);if(!t)return;const e=Number.parseInt(t.getAttribute("data-te-interval"),10);e?(this._config.defaultInterval=this._config.defaultInterval||this._config.interval,this._config.interval=e):this._config.interval=this._config.defaultInterval||this._config.interval}_slide(t,e){const i=this._directionToOrder(t),n=m.findOne(es,this._element),o=this._getItemIndex(n),r=e||this._getItemByOrder(i,n),a=this._getItemIndex(r),l=!!this._interval,c=i===gi,h=c?il:Dv,d=c?Mv:Lv,u=this._orderToDirection(i),p=h===il?this._classes.slideLeft:this._classes.slideRight,f=h!==il?this._classes.slideLeft:this._classes.slideRight;if(r&&r.hasAttribute(vi)){this._isSliding=!1;return}if(this._isSliding||this._triggerSlideEvent(r,u).defaultPrevented||!n||!r)return;this._isSliding=!0,l&&this.pause(),this._setActiveIndicatorElement(r),this._activeElement=r;const v=()=>{_.trigger(this._element,el,{relatedTarget:r,direction:u,from:o,to:a})};if(this._element.hasAttribute(Ad)){r.setAttribute(`${d}`,""),r.classList.add(this._classes.block,f),zi(r),n.setAttribute(`${h}`,""),n.classList.add(p,...this._classes.invisible.split(" ")),n.classList.remove(...this._classes.visible.split(" ")),r.setAttribute(`${h}`,""),r.classList.add(...this._classes.visible.split(" ")),r.classList.remove(this._classes.slideRight,this._classes.slideLeft);const y=()=>{r.removeAttribute(h),r.removeAttribute(d),r.setAttribute(`${vi}`,""),n.removeAttribute(vi),n.classList.remove(p,...this._classes.invisible.split(" "),this._classes.block),n.removeAttribute(d),n.removeAttribute(h),this._isSliding=!1,setTimeout(v,0)};this._queueCallback(y,n,!0)}else n.removeAttribute(vi),n.classList.remove(this._classes.block),r.setAttribute(`${vi}`,""),r.classList.add(this._classes.block),this._isSliding=!1,v();l&&this.cycle()}_directionToOrder(t){return[zs,bi].includes(t)?et()?t===bi?mi:gi:t===bi?gi:mi:t}_orderToDirection(t){return[gi,mi].includes(t)?et()?t===mi?bi:zs:t===mi?zs:bi:t}static carouselInterface(t,e){const i=he.getOrCreateInstance(t,e);let{_config:n}=i;typeof e=="object"&&(n={...n,...e});const o=typeof e=="string"?e:e.slide;if(typeof e=="number"){i.to(e);return}if(typeof o=="string"){if(typeof i[o]>"u")throw new TypeError(`No method named "${o}"`);i[o]()}else n.interval&&n.ride===!0&&i.pause()}static jQueryInterface(t){return this.each(function(){he.carouselInterface(this,t)})}static dataApiClickHandler(t){const e=Ne(this);if(!e||!e.hasAttribute(Ad))return;const i={...g.getDataAttributes(e),...g.getDataAttributes(this)},n=this.getAttribute("data-te-slide-to");n&&(i.interval=!1),he.carouselInterface(e,i),n&&he.getInstance(e).to(n),t.preventDefault()}}const nl="modal",te=".te.modal",kd="Escape",Sd={backdrop:!0,keyboard:!0,focus:!0,modalNonInvasive:!1},zv={backdrop:"(boolean|string)",keyboard:"boolean",focus:"boolean",modalNonInvasive:"boolean"},jv={show:"transform-none",static:"scale-[1.02]",staticProperties:"transition-scale duration-300 ease-in-out",backdrop:"opacity-50 transition-all duration-300 ease-in-out fixed top-0 left-0 z-[1040] bg-black w-screen h-screen"},Yv={show:"string",static:"string",staticProperties:"string",backdrop:"string"},Kv=`hide${te}`,Uv=`hidePrevented${te}`,Xv=`hidden${te}`,Gv=`show${te}`,qv=`shown${te}`,Od=`resize${te}`,Id=`click.dismiss${te}`,Dd=`keydown.dismiss${te}`,Zv=`mouseup.dismiss${te}`,Md=`mousedown.dismiss${te}`,Ld="data-te-modal-open",$d="data-te-open",js="[data-te-modal-dialog-ref]",Qv="[data-te-modal-body-ref]";class Ys extends Mt{constructor(t,e,i){super(t),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._dialog=m.findOne(js,this._element),this._backdrop=this._config.modalNonInvasive?null:this._initializeBackDrop(),this._focustrap=this._initializeFocusTrap(),this._isShown=!1,this._ignoreBackdropClick=!1,this._isTransitioning=!1,this._scrollBar=new Qi,this._didInit=!1,this._init()}static get Default(){return Sd}static get NAME(){return nl}toggle(t){return this._isShown?this.hide():this.show(t)}show(t){this._isShown||this._isTransitioning||_.trigger(this._element,Gv,{relatedTarget:t}).defaultPrevented||(this._isShown=!0,this._isAnimated()&&(this._isTransitioning=!0),!this._config.modalNonInvasive&&this._scrollBar.hide(),document.body.setAttribute(Ld,"true"),this._adjustDialog(),this._setEscapeEvent(),this._setResizeEvent(),_.on(this._dialog,Md,()=>{_.one(this._element,Zv,i=>{i.target===this._element&&(this._ignoreBackdropClick=!0)})}),this._showElement(t),!this._config.modalNonInvasive&&this._showBackdrop())}hide(){if(!this._isShown||this._isTransitioning||_.trigger(this._element,Kv).defaultPrevented)return;this._isShown=!1;const e=this._isAnimated();e&&(this._isTransitioning=!0),this._setEscapeEvent(),this._setResizeEvent(),this._focustrap.disable(),m.findOne(js,this._element).classList.remove(this._classes.show),_.off(this._element,Id),_.off(this._dialog,Md),this._queueCallback(()=>this._hideModal(),this._element,e),this._element.removeAttribute($d)}dispose(){[window,document,this._dialog].forEach(t=>_.off(t,te)),this._backdrop&&this._backdrop.dispose(),this._focustrap.disable(),super.dispose()}handleUpdate(){this._adjustDialog()}_init(){this._didInit||(yo(Ys),this._didInit=!0)}_initializeBackDrop(){return new Qa({isVisible:!!this._config.backdrop,isAnimated:this._isAnimated(),backdropClasses:this._classes.backdrop})}_initializeFocusTrap(){return new Vs(this._element,{event:"keydown",condition:t=>t.key==="Tab"})}_getConfig(t){return t={...Sd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(nl,t,zv),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...jv,...e,...t},L(nl,t,Yv),t}_showElement(t){const e=this._isAnimated(),i=m.findOne(Qv,this._dialog);(!this._element.parentNode||this._element.parentNode.nodeType!==Node.ELEMENT_NODE)&&document.body.append(this._element),this._element.style.display="block",this._element.classList.remove("hidden"),this._element.removeAttribute("aria-hidden"),this._element.setAttribute("aria-modal",!0),this._element.setAttribute("role","dialog"),this._element.setAttribute(`${$d}`,"true"),this._element.scrollTop=0;const n=m.findOne(js,this._element);n.classList.add(this._classes.show),n.classList.remove("opacity-0"),n.classList.add("opacity-100"),i&&(i.scrollTop=0),e&&zi(this._element);const o=()=>{this._config.focus&&this._focustrap.trap(),this._isTransitioning=!1,_.trigger(this._element,qv,{relatedTarget:t})};this._queueCallback(o,this._dialog,e)}_setEscapeEvent(){this._isShown?_.on(document,Dd,t=>{this._config.keyboard&&t.key===kd?(t.preventDefault(),this.hide()):!this._config.keyboard&&t.key===kd&&this._triggerBackdropTransition()}):_.off(this._element,Dd)}_setResizeEvent(){this._isShown?_.on(window,Od,()=>this._adjustDialog()):_.off(window,Od)}_hideModal(){const t=m.findOne(js,this._element);t.classList.remove(this._classes.show),t.classList.remove("opacity-100"),t.classList.add("opacity-0");const e=oo(t);setTimeout(()=>{this._element.style.display="none"},e),this._element.setAttribute("aria-hidden",!0),this._element.removeAttribute("aria-modal"),this._element.removeAttribute("role"),this._isTransitioning=!1,this._backdrop&&this._backdrop.hide(()=>{document.body.removeAttribute(Ld),this._resetAdjustments(),!this._config.modalNonInvasive&&this._scrollBar.reset(),_.trigger(this._element,Xv)})}_showBackdrop(t){_.on(this._element,Id,e=>{if(this._ignoreBackdropClick){this._ignoreBackdropClick=!1;return}e.target===e.currentTarget&&(this._config.backdrop===!0?this.hide():this._config.backdrop==="static"&&this._triggerBackdropTransition())}),this._backdrop&&this._backdrop.show(t)}_isAnimated(){return!!m.findOne(js,this._element)}_triggerBackdropTransition(){if(_.trigger(this._element,Uv).defaultPrevented)return;const{classList:e,scrollHeight:i,style:n}=this._element,o=i>document.documentElement.clientHeight;if(!o&&n.overflowY==="hidden"||e.contains(this._classes.static))return;o||(n.overflowY="hidden"),e.add(...this._classes.static.split(" ")),e.add(...this._classes.staticProperties.split(" "));const r=oo(this._element);this._queueCallback(()=>{e.remove(this._classes.static),setTimeout(()=>{e.remove(...this._classes.staticProperties.split(" "))},r),o||this._queueCallback(()=>{n.overflowY=""},this._dialog)},this._dialog),this._element.focus()}_adjustDialog(){const t=this._element.scrollHeight>document.documentElement.clientHeight,e=this._scrollBar.getWidth(),i=e>0;(!i&&t&&!et()||i&&!t&&et())&&(this._element.style.paddingLeft=`${e}px`),(i&&!t&&!et()||!i&&t&&et())&&(this._element.style.paddingRight=`${e}px`)}_resetAdjustments(){this._element.style.paddingLeft="",this._element.style.paddingRight=""}static jQueryInterface(t,e){return this.each(function(){const i=Ys.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}}const Jv=new Set(["background","cite","href","itemtype","longdesc","poster","src","xlink:href"]),Rd=/^aria-[\w-]*$/i,t0=/^data-te-[\w-]*$/i,e0=/^(?:(?:https?|mailto|ftp|tel|file|sms):|[^#&/:?]*(?:[#/?]|$))/i,i0=/^data:(?:image\/(?:bmp|gif|jpeg|jpg|png|tiff|webp)|video\/(?:mpeg|mp4|ogg|webm)|audio\/(?:mp3|oga|ogg|opus));base64,[\d+/a-z]+=*$/i,s0=(s,t)=>{const e=s.nodeName.toLowerCase();if(t.includes(e))return Jv.has(e)?!!(e0.test(s.nodeValue)||i0.test(s.nodeValue)):!0;const i=t.filter(n=>n instanceof RegExp);for(let n=0,o=i.length;n<o;n++)if(i[n].test(e))return!0;return!1},Pd={"*":["class","dir","id","lang","role",Rd,t0],a:["target","href","title","rel"],area:[],b:[],br:[],col:[],code:[],div:[],em:[],hr:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],i:[],img:["src","srcset","alt","title","width","height"],li:[],ol:[],p:[],pre:[],s:[],small:[],span:[],sub:[],sup:[],strong:[],u:[],ul:[]},n0={"*":["class","dir","id","lang","role",Rd],a:["target","href","title","rel"],area:[],b:[],br:[],col:[],code:[],div:[],em:[],hr:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],i:[],img:["src","srcset","alt","title","width","height"],li:[],ol:[],p:[],pre:[],s:[],small:[],span:[],sub:[],sup:[],strong:[],u:[],ul:[]};function To(s,t,e){if(!s.length)return s;if(e&&typeof e=="function")return e(s);const n=new window.DOMParser().parseFromString(s,"text/html"),o=[].concat(...n.body.querySelectorAll("*"));for(let r=0,a=o.length;r<a;r++){const l=o[r],c=l.nodeName.toLowerCase();if(!Object.keys(t).includes(c)){l.remove();continue}const h=[].concat(...l.attributes),d=[].concat(t["*"]||[],t[c]||[]);h.forEach(u=>{s0(u,d)||l.removeAttribute(u.nodeName)})}return n.body.innerHTML}const Nd="tooltip",de=".te.tooltip",o0="te-tooltip",r0=new Set(["sanitize","allowList","sanitizeFn"]),a0={animation:"boolean",template:"string",title:"(string|element|function)",trigger:"string",delay:"(number|object)",html:"boolean",selector:"(string|boolean)",placement:"(string|function)",offset:"(array|string|function)",container:"(string|element|boolean)",fallbackPlacements:"array",boundary:"(string|element)",customClass:"(string|function)",sanitize:"boolean",sanitizeFn:"(null|function)",allowList:"object",popperConfig:"(null|object|function)"},l0={AUTO:"auto",TOP:"top",RIGHT:et()?"left":"right",BOTTOM:"bottom",LEFT:et()?"right":"left"},c0={animation:!0,template:'<div class="opacity-0 transition-opacity duration-300 ease-in-out absolute z-[1080] block m-0 text-sm not-italic font-normal text-left no-underline underline-offset-auto normal-case leading-6 tracking-normal break-normal whitespace-normal" role="tooltip"><div data-te-tooltip-inner-ref class="tooltip-inner max-w-[200px] text-sm py-1.5 px-4 text-white text-center bg-[#6d6d6d] rounded"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,selector:!1,placement:"top",offset:[0,0],container:!1,fallbackPlacements:["top","right","bottom","left"],boundary:"clippingParents",customClass:"",sanitize:!0,sanitizeFn:null,allowList:n0,popperConfig:{hide:!0}},h0={HIDE:`hide${de}`,HIDDEN:`hidden${de}`,SHOW:`show${de}`,SHOWN:`shown${de}`,INSERTED:`inserted${de}`,CLICK:`click${de}`,FOCUSIN:`focusin${de}`,FOCUSOUT:`focusout${de}`,MOUSEENTER:`mouseenter${de}`,MOUSELEAVE:`mouseleave${de}`},d0="fade",u0="modal",ol="show",Ks="show",rl="out",Bd=".tooltip-inner",Hd=`.${u0}`,Vd="hide.te.modal",Us="hover",al="focus",p0="click",f0="manual";let is=class rm extends Mt{constructor(t,e){if(typeof sd>"u")throw new TypeError("Bootstrap's tooltips require Popper (https://popper.js.org)");super(t),this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._popper=null,this._config=this._getConfig(e),this.tip=null,this._setListeners()}static get Default(){return c0}static get NAME(){return Nd}static get Event(){return h0}static get DefaultType(){return a0}enable(){this._isEnabled=!0}disable(){this._isEnabled=!1}toggleEnabled(){this._isEnabled=!this._isEnabled}toggle(t){if(this._isEnabled)if(t){const e=this._initializeOnDelegatedTarget(t);e._activeTrigger.click=!e._activeTrigger.click,e._isWithActiveTrigger()?e._enter(null,e):e._leave(null,e)}else{if(this.getTipElement().classList.contains(ol)){this._leave(null,this);return}this._enter(null,this)}}dispose(){clearTimeout(this._timeout),_.off(this._element.closest(Hd),Vd,this._hideModalHandler),this.tip&&this.tip.remove(),this._disposePopper(),super.dispose()}show(){if(this._element.style.display==="none")throw new Error("Please use show on visible elements");if(!(this.isWithContent()&&this._isEnabled))return;const t=_.trigger(this._element,this.constructor.Event.SHOW),e=dh(this._element),i=e===null?this._element.ownerDocument.documentElement.contains(this._element):e.contains(this._element);if(t.defaultPrevented||!i)return;this.constructor.NAME==="tooltip"&&this.tip&&this.getTitle()!==this.tip.querySelector(Bd).innerHTML&&(this._disposePopper(),this.tip.remove(),this.tip=null);const n=this.getTipElement(),o=bt(this.constructor.NAME);n.setAttribute("id",o),this._element.setAttribute("aria-describedby",o),this._config.animation&&setTimeout(()=>{this.tip.classList.add("opacity-100"),this.tip.classList.remove("opacity-0")},100);const r=typeof this._config.placement=="function"?this._config.placement.call(this,n,this._element):this._config.placement,a=this._getAttachment(r);this._addAttachmentClass(a);const{container:l}=this._config;if(O.setData(n,this.constructor.DATA_KEY,this),this._element.ownerDocument.documentElement.contains(this.tip)||(l.append(n),_.trigger(this._element,this.constructor.Event.INSERTED)),this._popper?this._popper.update():this._popper=Fe(this._element,n,this._getPopperConfig(a)),n.getAttribute("id").includes("tooltip"))switch(r){case"bottom":n.classList.add("py-[0.4rem]");break;case"left":n.classList.add("px-[0.4rem]");break;case"right":n.classList.add("px-[0.4rem]");break;default:n.classList.add("py-[0.4rem]");break}const h=this._resolvePossibleFunction(this._config.customClass);h&&n.classList.add(...h.split(" ")),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(p=>{_.on(p,"mouseover",ro)});const d=()=>{const p=this._hoverState;this._hoverState=null,_.trigger(this._element,this.constructor.Event.SHOWN),p===rl&&this._leave(null,this)},u=this.tip.classList.contains("transition-opacity");this._queueCallback(d,this.tip,u)}hide(){if(!this._popper)return;const t=this.getTipElement(),e=()=>{this._isWithActiveTrigger()||(this._hoverState!==Ks&&t.remove(),this._cleanTipClass(),this._element.removeAttribute("aria-describedby"),_.trigger(this._element,this.constructor.Event.HIDDEN),this._disposePopper())};if(_.trigger(this._element,this.constructor.Event.HIDE).defaultPrevented)return;t.classList.add("opacity-0"),t.classList.remove("opacity-100"),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(o=>_.off(o,"mouseover",ro)),this._activeTrigger[p0]=!1,this._activeTrigger[al]=!1,this._activeTrigger[Us]=!1;const n=this.tip.classList.contains("opacity-0");this._queueCallback(e,this.tip,n),this._hoverState=""}update(){this._popper!==null&&this._popper.update()}isWithContent(){return!!this.getTitle()}getTipElement(){if(this.tip)return this.tip;const t=document.createElement("div");t.innerHTML=this._config.template;const e=t.children[0];return this.setContent(e),e.classList.remove(d0,ol),this.tip=e,this.tip}setContent(t){this._sanitizeAndSetContent(t,this.getTitle(),Bd)}_sanitizeAndSetContent(t,e,i){const n=m.findOne(i,t);if(!e&&n){n.remove();return}this.setElementContent(n,e)}setElementContent(t,e){if(t!==null){if(Wi(e)){e=Be(e),this._config.html?e.parentNode!==t&&(t.innerHTML="",t.append(e)):t.textContent=e.textContent;return}this._config.html?(this._config.sanitize&&(e=To(e,this._config.allowList,this._config.sanitizeFn)),t.innerHTML=e):t.textContent=e}}getTitle(){const t=this._element.getAttribute("data-te-original-title")||this._config.title;return this._resolvePossibleFunction(t)}updateAttachment(t){return t==="right"?"end":t==="left"?"start":t}_initializeOnDelegatedTarget(t,e){return e||this.constructor.getOrCreateInstance(t.delegateTarget,this._getDelegateConfig())}_getOffset(){const{offset:t}=this._config;return typeof t=="string"?t.split(",").map(e=>Number.parseInt(e,10)):typeof t=="function"?e=>t(e,this._element):t}_resolvePossibleFunction(t){return typeof t=="function"?t.call(this._element):t}_getPopperConfig(t){const e={placement:t,modifiers:[{name:"flip",options:{fallbackPlacements:this._config.fallbackPlacements}},{name:"offset",options:{offset:this._getOffset()}},{name:"preventOverflow",options:{boundary:this._config.boundary}},{name:"arrow",options:{element:`.${this.constructor.NAME}-arrow`}},{name:"onChange",enabled:!0,phase:"afterWrite",fn:i=>this._handlePopperPlacementChange(i)}],onFirstUpdate:i=>{i.options.placement!==i.placement&&this._handlePopperPlacementChange(i)}};return{...e,...typeof this._config.popperConfig=="function"?this._config.popperConfig(e):this._config.popperConfig}}_addAttachmentClass(t){this.getTipElement().classList.add(`${this._getBasicClassPrefix()}-${this.updateAttachment(t)}`)}_getAttachment(t){return l0[t.toUpperCase()]}_setListeners(){this._config.trigger.split(" ").forEach(e=>{if(e==="click")_.on(this._element,this.constructor.Event.CLICK,this._config.selector,i=>this.toggle(i));else if(e!==f0){const i=e===Us?this.constructor.Event.MOUSEENTER:this.constructor.Event.FOCUSIN,n=e===Us?this.constructor.Event.MOUSELEAVE:this.constructor.Event.FOCUSOUT;_.on(this._element,i,this._config.selector,o=>this._enter(o)),_.on(this._element,n,this._config.selector,o=>this._leave(o))}}),this._hideModalHandler=()=>{this._element&&this.hide()},_.on(this._element.closest(Hd),Vd,this._hideModalHandler),this._config.selector?this._config={...this._config,trigger:"manual",selector:""}:this._fixTitle()}_fixTitle(){const t=this._element.getAttribute("title"),e=typeof this._element.getAttribute("data-te-original-title");(t||e!=="string")&&(this._element.setAttribute("data-te-original-title",t||""),t&&!this._element.getAttribute("aria-label")&&!this._element.textContent&&this._element.setAttribute("aria-label",t),this._element.setAttribute("title",""))}_enter(t,e){if(e=this._initializeOnDelegatedTarget(t,e),t&&(e._activeTrigger[t.type==="focusin"?al:Us]=!0),e.getTipElement().classList.contains(ol)||e._hoverState===Ks){e._hoverState=Ks;return}if(clearTimeout(e._timeout),e._hoverState=Ks,!e._config.delay||!e._config.delay.show){e.show();return}e._timeout=setTimeout(()=>{e._hoverState===Ks&&e.show()},e._config.delay.show)}_leave(t,e){if(e=this._initializeOnDelegatedTarget(t,e),t&&(e._activeTrigger[t.type==="focusout"?al:Us]=e._element.contains(t.relatedTarget)),!e._isWithActiveTrigger()){if(clearTimeout(e._timeout),e._hoverState=rl,!e._config.delay||!e._config.delay.hide){e.hide();return}e._timeout=setTimeout(()=>{e._hoverState===rl&&e.hide()},e._config.delay.hide)}}_isWithActiveTrigger(){for(const t in this._activeTrigger)if(this._activeTrigger[t])return!0;return!1}_getConfig(t){const e=g.getDataAttributes(this._element);return Object.keys(e).forEach(i=>{r0.has(i)&&delete e[i]}),t={...this.constructor.Default,...e,...typeof t=="object"&&t?t:{}},t.container=t.container===!1?document.body:Be(t.container),typeof t.delay=="number"&&(t.delay={show:t.delay,hide:t.delay}),typeof t.title=="number"&&(t.title=t.title.toString()),typeof t.content=="number"&&(t.content=t.content.toString()),L(Nd,t,this.constructor.DefaultType),t.sanitize&&(t.template=To(t.template,t.allowList,t.sanitizeFn)),t}_getDelegateConfig(){const t={};for(const e in this._config)this.constructor.Default[e]!==this._config[e]&&(t[e]=this._config[e]);return t}_cleanTipClass(){const t=this.getTipElement(),e=new RegExp(`(^|\\s)${this._getBasicClassPrefix()}\\S+`,"g"),i=t.getAttribute("class").match(e);i!==null&&i.length>0&&i.map(n=>n.trim()).forEach(n=>t.classList.remove(n))}_getBasicClassPrefix(){return o0}_handlePopperPlacementChange(t){const{state:e}=t;e&&(this.tip=e.elements.popper,this._cleanTipClass(),this._addAttachmentClass(this._getAttachment(e.placement)))}_disposePopper(){this._popper&&(this._popper.destroy(),this._popper=null)}static jQueryInterface(t){return this.each(function(){const e=rm.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}};const _0="popover",ue=".te.popover",g0="te-popover",m0={...is.Default,placement:"right",offset:[0,8],trigger:"click",content:"",template:'<div class="opacity-0 transition-opacity duration-150 ease-in-out absolute top-0 left-0 z-[1070] block max-w-[267px] break-words bg-white bg-clip-padding border border-neutral-100 rounded-lg shadow-[0_0px_3px_0_rgba(0,0,0,0.07),0_2px_2px_0_rgba(0,0,0,0.04)] text-sm not-italic font-normal text-left no-underline underline-offset-auto normal-case leading-6 tracking-normal break-normal whitespace-normal dark:bg-neutral-700 dark:border-0 dark:text-white data-[popper-reference-hidden]:hidden" role="tooltip"><h3 class="popover-header py-2 px-4 mb-0 border-b-2 border-neutral-100 rounded-t-lg font-medium empty:hidden dark:border-neutral-500"></h3><div class="popover-body p-4 text-[#212529] dark:text-white"></div></div>'},b0={...is.DefaultType,content:"(string|element|function)"},v0={HIDE:`hide${ue}`,HIDDEN:`hidden${ue}`,SHOW:`show${ue}`,SHOWN:`shown${ue}`,INSERTED:`inserted${ue}`,CLICK:`click${ue}`,FOCUSIN:`focusin${ue}`,FOCUSOUT:`focusout${ue}`,MOUSEENTER:`mouseenter${ue}`,MOUSELEAVE:`mouseleave${ue}`},y0=".popover-header",T0=".popover-body";class Eo extends is{static get Default(){return m0}static get NAME(){return _0}static get Event(){return v0}static get DefaultType(){return b0}isWithContent(){return this.getTitle()||this._getContent()}setContent(t){this._sanitizeAndSetContent(t,this.getTitle(),y0),this._sanitizeAndSetContent(t,this._getContent(),T0)}_getContent(){return this._resolvePossibleFunction(this._config.content)}_getBasicClassPrefix(){return g0}static jQueryInterface(t){return this.each(function(){const e=Eo.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const ll="scrollspy",cl=".te.scrollspy",Fd={offset:10,method:"auto",target:""},E0={offset:"number",method:"string",target:"(string|element)"},x0={active:"!text-primary dark:!text-primary-400 font-semibold border-l-[0.125rem] border-solid border-primary dark:border-primary-400"},C0={active:"string"},A0=`activate${cl}`,w0=`scroll${cl}`,hl="data-te-nav-link-active",Wd="[data-te-dropdown-item-ref]",k0="[data-te-nav-list-ref]",dl="[data-te-nav-link-ref]",S0="[data-te-nav-item-ref]",zd="[data-te-list-group-item-ref]",ul=`${dl}, ${zd}, ${Wd}`,O0="[data-te-dropdown-ref]",I0="[data-te-dropdown-toggle-ref]",D0="maxOffset",jd="position";class xo extends Mt{constructor(t,e,i){super(t),this._scrollElement=this._element.tagName==="BODY"?window:this._element,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._offsets=[],this._targets=[],this._activeTarget=null,this._scrollHeight=0,_.on(this._scrollElement,w0,()=>this._process()),this.refresh(),this._process()}static get Default(){return Fd}static get NAME(){return ll}refresh(){const t=this._scrollElement===this._scrollElement.window?D0:jd,e=this._config.method==="auto"?t:this._config.method,i=e===jd?this._getScrollTop():0;this._offsets=[],this._targets=[],this._scrollHeight=this._getScrollHeight(),m.find(ul,this._config.target).map(o=>{const r=Ca(o),a=r?m.findOne(r):null;if(a){const l=a.getBoundingClientRect();if(l.width||l.height)return[g[e](a).top+i,r]}return null}).filter(o=>o).sort((o,r)=>o[0]-r[0]).forEach(o=>{this._offsets.push(o[0]),this._targets.push(o[1])})}dispose(){_.off(this._scrollElement,cl),super.dispose()}_getConfig(t){return t={...Fd,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},t.target=Be(t.target)||document.documentElement,L(ll,t,E0),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...x0,...e,...t},L(ll,t,C0),t}_getScrollTop(){return this._scrollElement===window?this._scrollElement.pageYOffset:this._scrollElement.scrollTop}_getScrollHeight(){return this._scrollElement.scrollHeight||Math.max(document.body.scrollHeight,document.documentElement.scrollHeight)}_getOffsetHeight(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height}_process(){const t=this._getScrollTop()+this._config.offset,e=this._getScrollHeight(),i=this._config.offset+e-this._getOffsetHeight();if(this._scrollHeight!==e&&this.refresh(),t>=i){const n=this._targets[this._targets.length-1];this._activeTarget!==n&&this._activate(n);return}if(this._activeTarget&&t<this._offsets[0]&&this._offsets[0]>0){this._activeTarget=null,this._clear();return}for(let n=this._offsets.length;n--;)this._activeTarget!==this._targets[n]&&t>=this._offsets[n]&&(typeof this._offsets[n+1]>"u"||t<this._offsets[n+1])&&this._activate(this._targets[n])}_activate(t){this._activeTarget=t,this._clear();const e=ul.split(",").map(n=>`${n}[data-te-target="${t}"],${n}[href="${t}"]`),i=m.findOne(e.join(","),this._config.target);i.classList.add(...this._classes.active.split(" ")),i.setAttribute(hl,""),i.getAttribute(Wd)?m.findOne(I0,i.closest(O0)).classList.add(...this._classes.active.split(" ")):m.parents(i,k0).forEach(n=>{m.prev(n,`${dl}, ${zd}`).forEach(o=>{o.classList.add(...this._classes.active.split(" ")),o.setAttribute(hl,"")}),m.prev(n,S0).forEach(o=>{m.children(o,dl).forEach(r=>r.classList.add(...this._classes.active.split(" ")))})}),_.trigger(this._scrollElement,A0,{relatedTarget:t})}_clear(){m.find(ul,this._config.target).filter(t=>t.classList.contains(...this._classes.active.split(" "))).forEach(t=>{t.classList.remove(...this._classes.active.split(" ")),t.removeAttribute(hl)})}static jQueryInterface(t){return this.each(function(){const e=xo.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const Yd="tab",Co=".te.tab",M0=`hide${Co}`,L0=`hidden${Co}`,$0=`show${Co}`,R0=`shown${Co}`,P0="data-te-dropdown-menu-ref",ss="data-te-tab-active",Ao="data-te-nav-active",N0="[data-te-dropdown-ref]",B0="[data-te-nav-ref]",Kd=`[${ss}]`,H0=`[${Ao}]`,Ud=":scope > li > .active",V0="[data-te-dropdown-toggle-ref]",F0=":scope > [data-te-dropdown-menu-ref] [data-te-dropdown-show]",W0={show:"opacity-100",hide:"opacity-0"},z0={show:"string",hide:"string"};class wo extends Mt{constructor(t,e){super(t),this._classes=this._getClasses(e)}static get NAME(){return Yd}show(){if(this._element.parentNode&&this._element.parentNode.nodeType===Node.ELEMENT_NODE&&this._element.getAttribute(Ao)==="")return;let t;const e=Ne(this._element),i=this._element.closest(B0),n=m.findOne(H0,i);if(i){const l=i.nodeName==="UL"||i.nodeName==="OL"?Ud:Kd;t=m.find(l,i),t=t[t.length-1]}const o=t?_.trigger(t,M0,{relatedTarget:this._element}):null;if(_.trigger(this._element,$0,{relatedTarget:t}).defaultPrevented||o!==null&&o.defaultPrevented)return;this._activate(this._element,i,null,n,this._element);const a=()=>{_.trigger(t,L0,{relatedTarget:this._element}),_.trigger(this._element,R0,{relatedTarget:t})};e?this._activate(e,e.parentNode,a,n,this._element):a()}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...W0,...e,...t},L(Yd,t,z0),t}_activate(t,e,i,n,o){const a=(e&&(e.nodeName==="UL"||e.nodeName==="OL")?m.find(Ud,e):m.children(e,Kd))[0],l=i&&a&&a.hasAttribute(ss),c=()=>this._transitionComplete(t,a,i,n,o);a&&l?(g.removeClass(a,this._classes.show),g.addClass(a,this._classes.hide),this._queueCallback(c,t,!0)):c()}_transitionComplete(t,e,i,n,o){if(e&&n){e.removeAttribute(ss),n.removeAttribute(Ao);const a=m.findOne(F0,e.parentNode);a&&a.removeAttribute(ss),e.getAttribute("role")==="tab"&&e.setAttribute("aria-selected",!1)}t.setAttribute(ss,""),o.setAttribute(Ao,""),t.getAttribute("role")==="tab"&&t.setAttribute("aria-selected",!0),zi(t),t.classList.contains(this._classes.hide)&&(g.removeClass(t,this._classes.hide),g.addClass(t,this._classes.show));let r=t.parentNode;if(r&&r.nodeName==="LI"&&(r=r.parentNode),r&&r.hasAttribute(P0)){const a=t.closest(N0);a&&m.find(V0,a).forEach(l=>l.setAttribute(ss,"")),t.setAttribute("aria-expanded",!0)}i&&i()}static jQueryInterface(t){return this.each(function(){const e=wo.getOrCreateInstance(this);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const pl="toast",ze=".te.toast",j0=`mouseover${ze}`,Y0=`mouseout${ze}`,K0=`focusin${ze}`,U0=`focusout${ze}`,X0=`hide${ze}`,G0=`hidden${ze}`,q0=`show${ze}`,Z0=`shown${ze}`,Xd="data-te-toast-hide",fl="data-te-toast-show",ko="data-te-toast-showing",Q0={animation:"boolean",autohide:"boolean",delay:"number"},Gd={animation:!0,autohide:!0,delay:5e3},J0={fadeIn:"animate-[fade-in_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none",fadeOut:"animate-[fade-out_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none"},ty={fadeIn:"string",fadeOut:"string"};class Xs extends Mt{constructor(t,e,i){super(t),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._timeout=null,this._hasMouseInteraction=!1,this._hasKeyboardInteraction=!1,this._setListeners(),this._didInit=!1,this._init()}static get DefaultType(){return Q0}static get Default(){return Gd}static get NAME(){return pl}show(){if(_.trigger(this._element,q0).defaultPrevented)return;this._clearTimeout(),this._config.animation&&(g.removeClass(this._element,this._classes.fadeOut),g.addClass(this._element,this._classes.fadeIn));const e=()=>{this._element.removeAttribute(ko),_.trigger(this._element,Z0),this._maybeScheduleHide()};this._element.removeAttribute(Xd),zi(this._element),this._element.setAttribute(fl,""),this._element.setAttribute(ko,""),this._queueCallback(e,this._element,this._config.animation)}hide(){if(!this._element||this._element.dataset.teToastShow===void 0||_.trigger(this._element,X0).defaultPrevented)return;const e=()=>{let i=0;this._config.animation&&(i=300,g.removeClass(this._element,this._classes.fadeIn),g.addClass(this._element,this._classes.fadeOut)),setTimeout(()=>{this._element.setAttribute(Xd,""),this._element.removeAttribute(ko),this._element.removeAttribute(fl),_.trigger(this._element,G0)},i)};this._element.setAttribute(ko,""),this._queueCallback(e,this._element,this._config.animation)}dispose(){this._clearTimeout(),this._element.dataset.teToastShow!==void 0&&this._element.removeAttribute(fl),super.dispose()}_init(){this._didInit||(yo(Xs),this._didInit=!0)}_getConfig(t){return t={...Gd,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(pl,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...J0,...e,...t},L(pl,t,ty),t}_maybeScheduleHide(){this._config.autohide&&(this._hasMouseInteraction||this._hasKeyboardInteraction||(this._timeout=setTimeout(()=>{this.hide()},this._config.delay)))}_onInteraction(t,e){switch(t.type){case"mouseover":case"mouseout":this._hasMouseInteraction=e;break;case"focusin":case"focusout":this._hasKeyboardInteraction=e;break}if(e){this._clearTimeout();return}const i=t.relatedTarget;this._element===i||this._element.contains(i)||this._maybeScheduleHide()}_setListeners(){_.on(this._element,j0,t=>this._onInteraction(t,!0)),_.on(this._element,Y0,t=>this._onInteraction(t,!1)),_.on(this._element,K0,t=>this._onInteraction(t,!0)),_.on(this._element,U0,t=>this._onInteraction(t,!1))}_clearTimeout(){clearTimeout(this._timeout),this._timeout=null}static jQueryInterface(t){return this.each(function(){const e=Xs.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}(()=>{var s={454:(i,n,o)=>{o.d(n,{Z:()=>l});var r=o(645),a=o.n(r)()(function(c){return c[1]});a.push([i.id,"INPUT:-webkit-autofill,SELECT:-webkit-autofill,TEXTAREA:-webkit-autofill{animation-name:onautofillstart}INPUT:not(:-webkit-autofill),SELECT:not(:-webkit-autofill),TEXTAREA:not(:-webkit-autofill){animation-name:onautofillcancel}@keyframes onautofillstart{}@keyframes onautofillcancel{}",""]);const l=a},645:i=>{i.exports=function(n){var o=[];return o.toString=function(){return this.map(function(r){var a=n(r);return r[2]?"@media ".concat(r[2]," {").concat(a,"}"):a}).join("")},o.i=function(r,a,l){typeof r=="string"&&(r=[[null,r,""]]);var c={};if(l)for(var h=0;h<this.length;h++){var d=this[h][0];d!=null&&(c[d]=!0)}for(var u=0;u<r.length;u++){var p=[].concat(r[u]);l&&c[p[0]]||(a&&(p[2]?p[2]="".concat(a," and ").concat(p[2]):p[2]=a),o.push(p))}},o}},810:()=>{(function(){if(typeof window<"u")try{var i=new window.CustomEvent("test",{cancelable:!0});if(i.preventDefault(),i.defaultPrevented!==!0)throw new Error("Could not prevent default")}catch{var n=function(r,a){var l,c;return(a=a||{}).bubbles=!!a.bubbles,a.cancelable=!!a.cancelable,(l=document.createEvent("CustomEvent")).initCustomEvent(r,a.bubbles,a.cancelable,a.detail),c=l.preventDefault,l.preventDefault=function(){c.call(this);try{Object.defineProperty(this,"defaultPrevented",{get:function(){return!0}})}catch{this.defaultPrevented=!0}},l};n.prototype=window.Event.prototype,window.CustomEvent=n}})()},379:(i,n,o)=>{var r,a=function(){var x={};return function(E){if(x[E]===void 0){var C=document.querySelector(E);if(window.HTMLIFrameElement&&C instanceof window.HTMLIFrameElement)try{C=C.contentDocument.head}catch{C=null}x[E]=C}return x[E]}}(),l=[];function c(x){for(var E=-1,C=0;C<l.length;C++)if(l[C].identifier===x){E=C;break}return E}function h(x,E){for(var C={},A=[],w=0;w<x.length;w++){var S=x[w],k=E.base?S[0]+E.base:S[0],D=C[k]||0,I="".concat(k," ").concat(D);C[k]=D+1;var M=c(I),P={css:S[1],media:S[2],sourceMap:S[3]};M!==-1?(l[M].references++,l[M].updater(P)):l.push({identifier:I,updater:T(P,E),references:1}),A.push(I)}return A}function d(x){var E=document.createElement("style"),C=x.attributes||{};if(C.nonce===void 0){var A=o.nc;A&&(C.nonce=A)}if(Object.keys(C).forEach(function(S){E.setAttribute(S,C[S])}),typeof x.insert=="function")x.insert(E);else{var w=a(x.insert||"head");if(!w)throw new Error("Couldn't find a style target. This probably means that the value for the 'insert' parameter is invalid.");w.appendChild(E)}return E}var u,p=(u=[],function(x,E){return u[x]=E,u.filter(Boolean).join(`
+`)});function f(x,E,C,A){var w=C?"":A.media?"@media ".concat(A.media," {").concat(A.css,"}"):A.css;if(x.styleSheet)x.styleSheet.cssText=p(E,w);else{var S=document.createTextNode(w),k=x.childNodes;k[E]&&x.removeChild(k[E]),k.length?x.insertBefore(S,k[E]):x.appendChild(S)}}function b(x,E,C){var A=C.css,w=C.media,S=C.sourceMap;if(w?x.setAttribute("media",w):x.removeAttribute("media"),S&&typeof btoa<"u"&&(A+=`
+/*# sourceMappingURL=data:application/json;base64,`.concat(btoa(unescape(encodeURIComponent(JSON.stringify(S))))," */")),x.styleSheet)x.styleSheet.cssText=A;else{for(;x.firstChild;)x.removeChild(x.firstChild);x.appendChild(document.createTextNode(A))}}var v=null,y=0;function T(x,E){var C,A,w;if(E.singleton){var S=y++;C=v||(v=d(E)),A=f.bind(null,C,S,!1),w=f.bind(null,C,S,!0)}else C=d(E),A=b.bind(null,C,E),w=function(){(function(k){if(k.parentNode===null)return!1;k.parentNode.removeChild(k)})(C)};return A(x),function(k){if(k){if(k.css===x.css&&k.media===x.media&&k.sourceMap===x.sourceMap)return;A(x=k)}else w()}}i.exports=function(x,E){(E=E||{}).singleton||typeof E.singleton=="boolean"||(E.singleton=(r===void 0&&(r=!!(window&&document&&document.all&&!window.atob)),r));var C=h(x=x||[],E);return function(A){if(A=A||[],Object.prototype.toString.call(A)==="[object Array]"){for(var w=0;w<C.length;w++){var S=c(C[w]);l[S].references--}for(var k=h(A,E),D=0;D<C.length;D++){var I=c(C[D]);l[I].references===0&&(l[I].updater(),l.splice(I,1))}C=k}}}}},t={};function e(i){var n=t[i];if(n!==void 0)return n.exports;var o=t[i]={id:i,exports:{}};return s[i](o,o.exports,e),o.exports}e.n=i=>{var n=i&&i.__esModule?()=>i.default:()=>i;return e.d(n,{a:n}),n},e.d=(i,n)=>{for(var o in n)e.o(n,o)&&!e.o(i,o)&&Object.defineProperty(i,o,{enumerable:!0,get:n[o]})},e.o=(i,n)=>Object.prototype.hasOwnProperty.call(i,n),(()=>{var i=e(379),n=e.n(i),o=e(454);function r(l){if(!l.hasAttribute("autocompleted")){l.setAttribute("autocompleted","");var c=new window.CustomEvent("onautocomplete",{bubbles:!0,cancelable:!0,detail:null});l.dispatchEvent(c)||(l.value="")}}function a(l){l.hasAttribute("autocompleted")&&(l.removeAttribute("autocompleted"),l.dispatchEvent(new window.CustomEvent("onautocomplete",{bubbles:!0,cancelable:!1,detail:null})))}n()(o.Z,{insert:"head",singleton:!1}),o.Z.locals,e(810),document.addEventListener("animationstart",function(l){l.animationName==="onautofillstart"?r(l.target):a(l.target)},!0),document.addEventListener("input",function(l){l.inputType!=="insertReplacementText"&&"data"in l?a(l.target):r(l.target)},!0)})()})();const _l="input",So="te.input",qd="data-te-input-wrapper-init",Zd="data-te-input-notch-ref",Qd="data-te-input-notch-leading-ref",Jd="data-te-input-notch-middle-ref",ey="data-te-input-notch-trailing-ref",iy="data-te-input-helper-ref",sy="data-te-input-placeholder-active",je="data-te-input-state-active",tu="data-te-input-focused",eu="data-te-input-form-counter",Oo=`[${qd}] input`,Io=`[${qd}] textarea`,ns=`[${Zd}]`,iu=`[${Qd}]`,su=`[${Jd}]`,ny=`[${iy}]`,oy={inputFormWhite:!1},ry={inputFormWhite:"(boolean)"},nu={notch:"group flex absolute left-0 top-0 w-full max-w-full h-full text-left pointer-events-none",notchLeading:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none left-0 top-0 h-full w-2 border-r-0 rounded-l-[0.25rem] group-data-[te-input-focused]:border-r-0 group-data-[te-input-state-active]:border-r-0",notchLeadingNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[-1px_0_0_#3b71ca,_0_1px_0_0_#3b71ca,_0_-1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchLeadingWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[-1px_0_0_#ffffff,_0_1px_0_0_#ffffff,_0_-1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",notchMiddle:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none grow-0 shrink-0 basis-auto w-auto max-w-[calc(100%-1rem)] h-full border-r-0 border-l-0 group-data-[te-input-focused]:border-x-0 group-data-[te-input-state-active]:border-x-0 group-data-[te-input-focused]:border-t group-data-[te-input-state-active]:border-t group-data-[te-input-focused]:border-solid group-data-[te-input-state-active]:border-solid group-data-[te-input-focused]:border-t-transparent group-data-[te-input-state-active]:border-t-transparent",notchMiddleNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[0_1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchMiddleWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[0_1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",notchTrailing:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none grow h-full border-l-0 rounded-r-[0.25rem] group-data-[te-input-focused]:border-l-0 group-data-[te-input-state-active]:border-l-0",notchTrailingNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[1px_0_0_#3b71ca,_0_-1px_0_0_#3b71ca,_0_1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchTrailingWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[1px_0_0_#ffffff,_0_-1px_0_0_#ffffff,_0_1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",counter:"text-right leading-[1.6]"},ay={notch:"string",notchLeading:"string",notchLeadingNormal:"string",notchLeadingWhite:"string",notchMiddle:"string",notchMiddleNormal:"string",notchMiddleWhite:"string",notchTrailing:"string",notchTrailingNormal:"string",notchTrailingWhite:"string",counter:"string"};class Z{constructor(t,e,i){this._config=this._getConfig(e,t),this._element=t,this._classes=this._getClasses(i),this._label=null,this._labelWidth=0,this._labelMarginLeft=0,this._notchLeading=null,this._notchMiddle=null,this._notchTrailing=null,this._initiated=!1,this._helper=null,this._counter=!1,this._counterElement=null,this._maxLength=0,this._leadingIcon=null,this._element&&(O.setData(t,So,this),this.init())}static get NAME(){return _l}get input(){return m.findOne("input",this._element)||m.findOne("textarea",this._element)}init(){this._initiated||(this._getLabelData(),this._applyDivs(),this._applyNotch(),this._activate(),this._getHelper(),this._getCounter(),this._getEvents(),this._initiated=!0)}update(){this._getLabelData(),this._getNotchData(),this._applyNotch(),this._activate(),this._getHelper(),this._getCounter()}forceActive(){this.input.setAttribute(je,""),m.findOne(ns,this.input.parentNode).setAttribute(je,"")}forceInactive(){this.input.removeAttribute(je),m.findOne(ns,this.input.parentNode).removeAttribute(je)}dispose(){this._removeBorder(),O.removeData(this._element,So),this._element=null}_getConfig(t,e){return t={...oy,...g.getDataAttributes(e),...typeof t=="object"?t:{}},L(_l,t,ry),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...nu,...e,...t},L(_l,t,ay),t}_getLabelData(){this._label=m.findOne("label",this._element),this._label===null?this._showPlaceholder():(this._getLabelWidth(),this._getLabelPositionInInputGroup(),this._toggleDefaultDatePlaceholder())}_getHelper(){this._helper=m.findOne(ny,this._element)}_getCounter(){this._counter=g.getDataAttribute(this.input,"inputShowcounter"),this._counter&&(this._maxLength=this.input.maxLength,this._showCounter())}_getEvents(){_.on(this._element,"focus","input",Z.activate(new Z)),_.on(this._element,"input","input",Z.activate(new Z)),_.on(this._element,"blur","input",Z.deactivate(new Z)),_.on(this._element,"focus","textarea",Z.activate(new Z)),_.on(this._element,"input","textarea",Z.activate(new Z)),_.on(this._element,"blur","textarea",Z.deactivate(new Z)),_.on(window,"shown.te.modal",t=>{m.find(Oo,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.update()}),m.find(Io,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.update()})}),_.on(window,"shown.te.dropdown",t=>{const e=t.target.parentNode.querySelector("[data-te-dropdown-menu-ref]");e&&(m.find(Oo,e).forEach(i=>{const n=Z.getInstance(i.parentNode);n&&n.update()}),m.find(Io,e).forEach(i=>{const n=Z.getInstance(i.parentNode);n&&n.update()}))}),_.on(window,"shown.te.tab",t=>{let e;t.target.href?e=t.target.href.split("#")[1]:e=g.getDataAttribute(t.target,"target").split("#")[1];const i=m.findOne(`#${e}`);m.find(Oo,i).forEach(n=>{const o=Z.getInstance(n.parentNode);o&&o.update()}),m.find(Io,i).forEach(n=>{const o=Z.getInstance(n.parentNode);o&&o.update()})}),_.on(window,"reset",t=>{m.find(Oo,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.forceInactive()}),m.find(Io,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.forceInactive()})}),_.on(window,"onautocomplete",t=>{const e=Z.getInstance(t.target.parentNode);!e||!t.cancelable||e.forceActive()})}_showCounter(){if(m.find(`[${eu}]`,this._element).length>0)return;this._counterElement=document.createElement("div"),g.addClass(this._counterElement,this._classes.counter),this._counterElement.setAttribute(eu,"");const e=this.input.value.length;this._counterElement.innerHTML=`${e} / ${this._maxLength}`,this._helper.appendChild(this._counterElement),this._bindCounter()}_bindCounter(){_.on(this.input,"input",()=>{const t=this.input.value.length;this._counterElement.innerHTML=`${t} / ${this._maxLength}`})}_toggleDefaultDatePlaceholder(t=this.input){if(!(t.getAttribute("type")==="date"))return;!(document.activeElement===t)&&!t.value?t.style.opacity=0:t.style.opacity=1}_showPlaceholder(){this.input.setAttribute(sy,"")}_getNotchData(){this._notchMiddle=m.findOne(su,this._element),this._notchLeading=m.findOne(iu,this._element)}_getLabelWidth(){this._labelWidth=this._label.clientWidth*.8+8}_getLabelPositionInInputGroup(){if(this._labelMarginLeft=0,!this._element.hasAttribute("data-te-input-group-ref"))return;const t=this.input,e=m.prev(t,"[data-te-input-group-text-ref]")[0];e===void 0?this._labelMarginLeft=0:this._labelMarginLeft=e.offsetWidth-1}_applyDivs(){const t=this._config.inputFormWhite?this._classes.notchLeadingWhite:this._classes.notchLeadingNormal,e=this._config.inputFormWhite?this._classes.notchMiddleWhite:this._classes.notchMiddleNormal,i=this._config.inputFormWhite?this._classes.notchTrailingWhite:this._classes.notchTrailingNormal,n=m.find(ns,this._element),o=$("div");g.addClass(o,this._classes.notch),o.setAttribute(Zd,""),this._notchLeading=$("div"),g.addClass(this._notchLeading,`${this._classes.notchLeading} ${t}`),this._notchLeading.setAttribute(Qd,""),this._notchMiddle=$("div"),g.addClass(this._notchMiddle,`${this._classes.notchMiddle} ${e}`),this._notchMiddle.setAttribute(Jd,""),this._notchTrailing=$("div"),g.addClass(this._notchTrailing,`${this._classes.notchTrailing} ${i}`),this._notchTrailing.setAttribute(ey,""),!(n.length>=1)&&(o.append(this._notchLeading),o.append(this._notchMiddle),o.append(this._notchTrailing),this._element.append(o))}_applyNotch(){this._notchMiddle.style.width=`${this._labelWidth}px`,this._notchLeading.style.width=`${this._labelMarginLeft+9}px`,this._label!==null&&(this._label.style.marginLeft=`${this._labelMarginLeft}px`)}_removeBorder(){const t=m.findOne(ns,this._element);t&&t.remove()}_activate(t){ph(()=>{this._getElements(t);const e=t?t.target:this.input,i=m.findOne(ns,this._element);t&&t.type==="focus"&&i&&i.setAttribute(tu,""),e.value!==""&&(e.setAttribute(je,""),i&&i.setAttribute(je,"")),this._toggleDefaultDatePlaceholder(e)})}_getElements(t){if(t&&(this._element=t.target.parentNode,this._label=m.findOne("label",this._element)),t&&this._label){const e=this._labelWidth;this._getLabelData(),e!==this._labelWidth&&(this._notchMiddle=m.findOne(su,t.target.parentNode),this._notchLeading=m.findOne(iu,t.target.parentNode),this._applyNotch())}}_deactivate(t){const e=t?t.target:this.input,i=m.findOne(ns,e.parentNode);i.removeAttribute(tu),e.value===""&&(e.removeAttribute(je),i.removeAttribute(je)),this._toggleDefaultDatePlaceholder(e)}static activate(t){return function(e){t._activate(e)}}static deactivate(t){return function(e){t._deactivate(e)}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,So);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Z(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,So)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const ou="animation",gl="te.animation",ly={animation:"string",animationStart:"string",animationShowOnLoad:"boolean",onStart:"(null|function)",onEnd:"(null|function)",onHide:"(null|function)",onShow:"(null|function)",animationOnScroll:"(string)",animationWindowHeight:"number",animationOffset:"(number|string)",animationDelay:"(number|string)",animationReverse:"boolean",animationInterval:"(number|string)",animationRepeat:"(number|boolean)",animationReset:"boolean"},cy={animation:"fade",animationStart:"onClick",animationShowOnLoad:!0,onStart:null,onEnd:null,onHide:null,onShow:null,animationOnScroll:"once",animationWindowHeight:0,animationOffset:0,animationDelay:0,animationReverse:!1,animationInterval:0,animationRepeat:!1,animationReset:!1};class Gs{constructor(t,e){this._element=t,this._animateElement=this._getAnimateElement(),this._isFirstScroll=!0,this._repeatAnimateOnScroll=!0,this._options=this._getConfig(e),this._element&&(O.setData(t,gl,this),this._init())}static get NAME(){return ou}init(){this._init()}startAnimation(){this._startAnimation()}stopAnimation(){this._clearAnimationClass()}changeAnimationType(t){this._options.animation=t}dispose(){_.off(this._element,"mousedown"),_.off(this._animateElement,"animationend"),_.off(window,"scroll"),_.off(this._element,"mouseover"),O.removeData(this._element,gl),this._element=null,this._animateElement=null,this._isFirstScroll=null,this._repeatAnimateOnScroll=null,this._options=null}_init(){switch(this._options.animationStart){case"onHover":this._bindHoverEvents();break;case"onLoad":this._startAnimation();break;case"onScroll":this._bindScrollEvents();break;case"onClick":this._bindClickEvents();break}this._bindTriggerOnEndCallback(),this._options.animationReset&&this._bindResetAnimationAfterFinish()}_getAnimateElement(){const t=g.getDataAttribute(this._element,"animation-target");return t?m.find(t)[0]:this._element}_getConfig(t){const e=g.getDataAttributes(this._animateElement);return t={...cy,...e,...t},L(ou,t,ly),t}_animateOnScroll(){const t=g.offset(this._animateElement).top,e=this._animateElement.offsetHeight,i=window.innerHeight,n=t+this._options.animationOffset<=i&&t+this._options.animationOffset+e>=0,o=this._animateElement.style.visibility==="visible";switch(!0){case(n&&this._isFirstScroll):this._isFirstScroll=!1,this._startAnimation();break;case(!n&&this._isFirstScroll):this._isFirstScroll=!1,this._hideAnimateElement();break;case(n&&!o&&this._repeatAnimateOnScroll):this._options.animationOnScroll!=="repeat"&&(this._repeatAnimateOnScroll=!1),this._callback(this._options.onShow),this._showAnimateElement(),this._startAnimation();break;case(!n&&o&&this._repeatAnimateOnScroll):this._hideAnimateElement(),this._clearAnimationClass(),this._callback(this._options.onHide);break}}_addAnimatedClass(){g.addClass(this._animateElement,`animate-${this._options.animation}`)}_clearAnimationClass(){this._animateElement.classList.remove(`animate-${this._options.animation}`)}_startAnimation(){this._callback(this._options.onStart),this._addAnimatedClass(),this._options.animationRepeat&&!this._options.animationInterval&&this._setAnimationRepeat(),this._options.animationReverse&&this._setAnimationReverse(),this._options.animationDelay&&this._setAnimationDelay(),this._options.animationDuration&&this._setAnimationDuration(),this._options.animationInterval&&this._setAnimationInterval()}_setAnimationReverse(){g.style(this._animateElement,{animationIterationCount:this._options.animationRepeat===!0?"infinite":"2",animationDirection:"alternate"})}_setAnimationDuration(){g.style(this._animateElement,{animationDuration:`${this._options.animationDuration}ms`})}_setAnimationDelay(){g.style(this._animateElement,{animationDelay:`${this._options.animationDelay}ms`})}_setAnimationRepeat(){g.style(this._animateElement,{animationIterationCount:this._options.animationRepeat===!0?"infinite":this._options.animationRepeat})}_setAnimationInterval(){_.on(this._animateElement,"animationend",()=>{this._clearAnimationClass(),setTimeout(()=>{this._addAnimatedClass()},this._options.animationInterval)})}_hideAnimateElement(){g.style(this._animateElement,{visibility:"hidden"})}_showAnimateElement(){g.style(this._animateElement,{visibility:"visible"})}_bindResetAnimationAfterFinish(){_.on(this._animateElement,"animationend",()=>{this._clearAnimationClass()})}_bindTriggerOnEndCallback(){_.on(this._animateElement,"animationend",()=>{this._callback(this._options.onEnd)})}_bindScrollEvents(){this._options.animationShowOnLoad||this._animateOnScroll(),_.on(window,"scroll",()=>{this._animateOnScroll()})}_bindClickEvents(){_.on(this._element,"mousedown",()=>{this._startAnimation()})}_bindHoverEvents(){_.one(this._element,"mouseover",()=>{this._startAnimation()}),_.one(this._animateElement,"animationend",()=>{setTimeout(()=>{this._bindHoverEvents()},100)})}_callback(t){t instanceof Function&&t()}static autoInit(t){t._init()}static jQueryInterface(t){new Gs(this[0],t).init()}static getInstance(t){return O.getData(t,gl)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const hy={property:"color",defaultValue:null,inherit:!0},os=(s,t)=>{const{property:e,defaultValue:i,inherit:n}={...hy,...t},o=document.createElement("div");o.classList.add(s),document.body.appendChild(o);const a=window.getComputedStyle(o)[e]||i,c=window.getComputedStyle(o.parentElement)[e];return document.body.removeChild(o),!n&&c&&a===c?i:a||i},ml="ripple",Do="te.ripple",dy="rgba({{color}}, 0.2) 0, rgba({{color}}, 0.3) 40%, rgba({{color}}, 0.4) 50%, rgba({{color}}, 0.5) 60%, rgba({{color}}, 0) 70%",uy=["[data-te-ripple-init]"],Mo=[0,0,0],py=[{name:"primary",gradientColor:os("text-primary",{defaultValue:"#3B71CA",inherit:!1})},{name:"secondary",gradientColor:os("text-secondary",{defaultValue:"#9FA6B2",inherit:!1})},{name:"success",gradientColor:os("text-success",{defaultValue:"#14A44D",inherit:!1})},{name:"danger",gradientColor:os("text-danger",{defaultValue:"#DC4C64",inherit:!1})},{name:"warning",gradientColor:os("text-warning",{defaultValue:"#E4A11B",inherit:!1})},{name:"info",gradientColor:os("text-info",{defaultValue:"#54B4D3",inherit:!1})},{name:"light",gradientColor:"#fbfbfb"},{name:"dark",gradientColor:"#262626"}],ru=.5,fy={rippleCentered:!1,rippleColor:"",rippleColorDark:"",rippleDuration:"500ms",rippleRadius:0,rippleUnbound:!1},_y={rippleCentered:"boolean",rippleColor:"string",rippleColorDark:"string",rippleDuration:"string",rippleRadius:"number",rippleUnbound:"boolean"},gy={ripple:"relative overflow-hidden inline-block align-bottom",rippleWave:"rounded-[50%] opacity-50 pointer-events-none absolute touch-none scale-0 transition-[transform,_opacity] ease-[cubic-bezier(0,0,0.15,1),_cubic-bezier(0,0,0.15,1)] z-[999]",unbound:"overflow-visible"},my={ripple:"string",rippleWave:"string",unbound:"string"};class Ye{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._element&&(O.setData(t,Do,this),g.addClass(this._element,this._classes.ripple)),this._clickHandler=this._createRipple.bind(this),this._rippleTimer=null,this._isMinWidthSet=!1,this._initialClasses=null,this.init()}static get NAME(){return ml}init(){this._addClickEvent(this._element)}dispose(){O.removeData(this._element,Do),_.off(this._element,"click",this._clickHandler),this._element=null,this._options=null}_autoInit(t){uy.forEach(e=>{m.closest(t.target,e)&&(this._element=m.closest(t.target,e))}),this._element.style.minWidth||(g.style(this._element,{"min-width":getComputedStyle(this._element).width}),this._isMinWidthSet=!0),this._options=this._getConfig(),this._classes=this._getClasses(),this._initialClasses=[...this._element.classList],g.addClass(this._element,this._classes.ripple),this._createRipple(t)}_addClickEvent(t){_.on(t,"mousedown",this._clickHandler)}_createRipple(t){this._element.className.indexOf(this._classes.ripple)<0&&g.addClass(this._element,this._classes.ripple);const{layerX:e,layerY:i}=t,n=t.offsetX||e,o=t.offsetY||i,r=this._element.offsetHeight,a=this._element.offsetWidth,l=this._durationToMsNumber(this._options.rippleDuration),c={offsetX:this._options.rippleCentered?r/2:n,offsetY:this._options.rippleCentered?a/2:o,height:r,width:a},h=this._getDiameter(c),d=this._options.rippleRadius||h/2,u={delay:l*ru,duration:l-l*ru},p={left:this._options.rippleCentered?`${a/2-d}px`:`${n-d}px`,top:this._options.rippleCentered?`${r/2-d}px`:`${o-d}px`,height:`${this._options.rippleRadius*2||h}px`,width:`${this._options.rippleRadius*2||h}px`,transitionDelay:`0s, ${u.delay}ms`,transitionDuration:`${l}ms, ${u.duration}ms`},f=$("div");this._createHTMLRipple({wrapper:this._element,ripple:f,styles:p}),this._removeHTMLRipple({ripple:f,duration:l})}_createHTMLRipple({wrapper:t,ripple:e,styles:i}){Object.keys(i).forEach(n=>e.style[n]=i[n]),g.addClass(e,this._classes.rippleWave),e.setAttribute("data-te-ripple-ref",""),this._addColor(e,t),this._toggleUnbound(t),this._appendRipple(e,t)}_removeHTMLRipple({ripple:t,duration:e}){this._rippleTimer&&(clearTimeout(this._rippleTimer),this._rippleTimer=null),t&&setTimeout(()=>{t.classList.add("!opacity-0")},10),this._rippleTimer=setTimeout(()=>{if(t&&(t.remove(),this._element)){m.find("[data-te-ripple-ref]",this._element).forEach(n=>{n.remove()}),this._isMinWidthSet&&(g.style(this._element,{"min-width":""}),this._isMinWidthSet=!1);const i=this._initialClasses?this._addedNewRippleClasses(this._classes.ripple,this._initialClasses):this._classes.ripple.split(" ");g.removeClass(this._element,i)}},e)}_addedNewRippleClasses(t,e){return t.split(" ").filter(i=>e.findIndex(n=>i===n)===-1)}_durationToMsNumber(t){return Number(t.replace("ms","").replace("s","000"))}_getConfig(t={}){const e=g.getDataAttributes(this._element);return t={...fy,...e,...t},L(ml,t,_y),t}_getClasses(t={}){const e=g.getDataClassAttributes(this._element);return t={...gy,...e,...t},L(ml,t,my),t}_getDiameter({offsetX:t,offsetY:e,height:i,width:n}){const o=e<=i/2,r=t<=n/2,a=(u,p)=>Math.sqrt(u**2+p**2),l=e===i/2&&t===n/2,c={first:o===!0&&r===!1,second:o===!0&&r===!0,third:o===!1&&r===!0,fourth:o===!1&&r===!1},h={topLeft:a(t,e),topRight:a(n-t,e),bottomLeft:a(t,i-e),bottomRight:a(n-t,i-e)};let d=0;return l||c.fourth?d=h.topLeft:c.third?d=h.topRight:c.second?d=h.bottomRight:c.first&&(d=h.bottomLeft),d*2}_appendRipple(t,e){e.appendChild(t),setTimeout(()=>{g.addClass(t,"opacity-0 scale-100")},50)}_toggleUnbound(t){this._options.rippleUnbound===!0?g.addClass(t,this._classes.unbound):g.removeClass(t,this._classes.unbound)}_addColor(t){let e=this._options.rippleColor||"rgb(0,0,0)";(localStorage.theme==="dark"||!("theme"in localStorage)&&window.matchMedia("(prefers-color-scheme: dark)").matches)&&(e=this._options.rippleColorDark||this._options.rippleColor);const i=py.find(r=>r.name===e.toLowerCase()),n=i?this._colorToRGB(i.gradientColor).join(","):this._colorToRGB(e).join(","),o=dy.split("{{color}}").join(`${n}`);t.style.backgroundImage=`radial-gradient(circle, ${o})`}_colorToRGB(t){function e(o){return o.length<7&&(o=`#${o[1]}${o[1]}${o[2]}${o[2]}${o[3]}${o[3]}`),[parseInt(o.substr(1,2),16),parseInt(o.substr(3,2),16),parseInt(o.substr(5,2),16)]}function i(o){const r=document.body.appendChild(document.createElement("fictum")),a="rgb(1, 2, 3)";return r.style.color=a,r.style.color!==a||(r.style.color=o,r.style.color===a||r.style.color==="")?Mo:(o=getComputedStyle(r).color,document.body.removeChild(r),o)}function n(o){return o=o.match(/[.\d]+/g).map(r=>+Number(r)),o.length=3,o}return t.toLowerCase()==="transparent"?Mo:t[0]==="#"?e(t):(t.indexOf("rgb")===-1&&(t=i(t)),t.indexOf("rgb")===0?n(t):Mo)}static autoInitial(t){return function(e){t._autoInit(e)}}static jQueryInterface(t){return this.each(function(){return O.getData(this,Do)?null:new Ye(this,t)})}static getInstance(t){return O.getData(t,Do)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}function Tt(s){return s.getDate()}function Lo(s){return s.getDay()}function ot(s){return s.getMonth()}function K(s){return s.getFullYear()}function by(s,t,e){const i=e.startDay,n=i>0?7-i:0,r=new Date(s,t).getDay()+n;return r>=7?r-7:r}function bl(s){return vy(s).getDate()}function vy(s){return ee(s.getFullYear(),s.getMonth()+1,0)}function rs(){return new Date}function kt(s,t){return St(s,t*12)}function St(s,t){const e=ee(s.getFullYear(),s.getMonth()+t,s.getDate()),i=Tt(s),n=Tt(e);return i!==n&&e.setDate(0),e}function as(s,t){return ee(s.getFullYear(),s.getMonth(),s.getDate()+t)}function ee(s,t,e){const i=new Date(s,t,e);return s>=0&&s<100&&i.setFullYear(i.getFullYear()-1900),i}function au(s){const t=s.split("-"),e=t[0],i=t[1],n=t[2];return ee(e,i,n)}function yy(s){return!Number.isNaN(s.getTime())}function ls(s,t){return K(s)-K(t)||ot(s)-ot(t)||Tt(s)-Tt(t)}function yi(s,t){return s.setHours(0,0,0,0),t.setHours(0,0,0,0),s.getTime()===t.getTime()}function $o(s,t){const i=K(s)-Ey();return Ty(i,t)}function Ty(s,t){return(s%t+t)%t}function Ey(s,t,e){let i=0;return e?i=K(e)-s+1:t&&(i=K(t)),i}function Ro(s,t,e,i,n,o){const r=new Date;r.setHours(0,0,0,0);const a=t&&ls(s,t)<=-1,l=e&&ls(s,e)>=1,c=n&&ls(s,r)<=-1,h=o&&ls(s,r)>=1,d=i&&i(s)===!1;return a||l||d||c||h}function lu(s,t,e,i,n,o){const r=new Date,a=i&&K(i),l=i&&ot(i),c=e&&K(e),h=e&&ot(e),d=K(r),u=ot(r),p=l&&a&&(t>a||t===a&&s>l),f=h&&c&&(t<c||t===c&&s<h),b=n&&(t<d||t===d&&s<u),v=o&&(t>d||t===d&&s>u);return p||f||b||v}function vl(s,t,e,i,n){const o=t&&K(t),r=e&&K(e),a=K(new Date),l=r&&s>r,c=o&&s<o,h=i&&s<a,d=n&&s>a;return l||c||h||d}function xy(s,t,e,i,n,o,r,a){const l=new Date;return l.setHours(0,0,0,0),(s&&o&&ls(o,l)<0||s)&&(o=l),o&&qs(t,o,e,i,n,o,r,a)}function Cy(s,t,e,i,n,o,r,a){const l=new Date;return l.setHours(0,0,0,0),(s&&n&&ls(n,l)<0||s)&&(n=l),n&&qs(t,n,e,i,n,o,r,a)}function qs(s,t,e,i,n,o,r,a){return e==="days"?K(s)===K(t)&&ot(s)===ot(t):e==="months"?K(s)===K(t):e==="years"?K(t)>=a&&K(t)<=r:!1}const Ay="data-te-datepicker-modal-container-ref",wy="data-te-datepicker-dropdown-container-ref",ky="data-te-dropdown-backdrop-ref",Sy="data-te-datepicker-date-text-ref",cu="data-te-datepicker-view-ref",Oy="data-te-datepicker-previous-button-ref",Iy="data-te-datepicker-next-button-ref",Dy="data-te-datepicker-ok-button-ref",My="data-te-datepicker-cancel-button-ref",Ly="data-te-datepicker-clear-button-ref",$y="data-te-datepicker-view-change-button-ref";function Ry(s,t,e,i,n,o,r,a,l,c){const h=ot(s),d=K(s),u=Tt(s),p=Lo(s),f=$("div"),b=`
+        ${hu(s,h,d,t,e,i,n,o,r,a,c)}
+    `,v=`
+      ${Ny(u,p,h,n,c)}
+      ${hu(s,h,d,t,e,i,n,o,r,a,c)}
+    `;return n.inline?(g.addClass(f,c.datepickerDropdownContainer),f.setAttribute(wy,l),f.innerHTML=b):(g.addClass(f,c.modalContainer),f.setAttribute(Ay,l),f.innerHTML=v),f}function Py(s){const t=$("div");return g.addClass(t,s),t.setAttribute(ky,""),t}function Ny(s,t,e,i,n){return`
+      <div class="${n.datepickerHeader}" data-te-datepicker-header>
+        <div class="${n.datepickerTitle}">
+          <span class="${n.datepickerTitleText}">${i.title}</span>
+        </div>
+        <div class="${n.datepickerDate}">
+          <span class="${n.datepickerDateText}" ${Sy} >${i.weekdaysShort[t]}, ${i.monthsShort[e]} ${s}</span>
+        </div>
+      </div>
+    `}function hu(s,t,e,i,n,o,r,a,l,c,h){let d;return r.inline?d=`
+    <div class="${h.datepickerMain}">
+      ${uu(t,e,r,h)}
+      <div class="${h.datepickerView}" ${cu} tabindex="0">
+        ${du(s,e,i,n,o,r,a,l,c,h)}
+      </div>
+    </div>
+  `:d=`
+    <div class="${h.datepickerMain}">
+      ${uu(t,e,r,h)}
+      <div class="${h.datepickerView}" ${cu} tabindex="0">
+        ${du(s,e,i,n,o,r,a,l,c,h)}
+      </div>
+      ${By(r,h)}
+    </div>
+  `,d}function du(s,t,e,i,n,o,r,a,l,c){let h;return o.view==="days"?h=Po(s,e,o,c):o.view==="months"?h=No(t,i,n,o,r,c):h=Bo(s,i,o,a,l,c),h}function uu(s,t,e,i){return`
+    <div class="${i.datepickerDateControls}">
+      <button class="${i.datepickerViewChangeButton}" aria-label="${e.switchToMultiYearViewLabel}" ${$y}>
+        ${e.monthsFull[s]} ${t} ${pe(e,i)}
+      </button>
+      <div class="${i.datepickerArrowControls}">
+        <button class="${i.datepickerPreviousButton}" aria-label="${e.prevMonthLabel}" ${Oy}>${e.changeMonthIconTemplate}</button>
+        <button class="${i.datepickerNextButton}" aria-label="${e.nextMonthLabel}" ${Iy}>${e.changeMonthIconTemplate}</button>
+      </div>
+    </div>
+    `}function pe(s,t){return`
+  <span class="${t.datepickerViewChangeIcon}">
+  ${s.viewChangeIconTemplate}
+  </span>
+  `}function By(s,t){const e=`<button class="${t.datepickerFooterBtn}" aria-label="${s.okBtnLabel}" ${Dy}>${s.okBtnText}</button>`,i=`<button class="${t.datepickerFooterBtn}" aria-label="${s.cancelBtnLabel}" ${My}>${s.cancelBtnText}</button>`,n=`<button class="${t.datepickerFooterBtn} ${t.datepickerClearBtn}" aria-label="${s.clearBtnLabel}" ${Ly}>${s.clearBtnText}</button>`;return`
+        <div class="${t.datepickerFooter}">
+          
+        ${s.removeClearBtn?"":n}
+        ${s.removeCancelBtn?"":i}
+        ${s.removeOkBtn?"":e}
+        </div>
+      `}function Po(s,t,e,i){const n=Hy(s,t,e),r=`
+      <tr>
+        ${e.weekdaysNarrow.map((l,c)=>`<th class="${i.datepickerDayHeading}" scope="col" aria-label="${e.weekdaysFull[c]}">${l}</th>`).join("")}
+      </tr>
+    `,a=n.map(l=>`
+        <tr>
+          ${l.map(c=>`
+              <td
+              class="${i.datepickerCell} ${i.datepickerCellSmall}"
+              data-te-date="${K(c.date)}-${ot(c.date)}-${Tt(c.date)}"
+              aria-label="${c.date}"
+              aria-selected="${c.isSelected}"
+              ${c.isSelected?"data-te-datepicker-cell-selected":""}
+              ${!c.currentMonth||c.disabled?"data-te-datepicker-cell-disabled":""}
+              ${c.isToday?"data-te-datepicker-cell-current":""}
+              >
+                <div
+                  class="${i.datepickerCellContent} ${i.datepickerCellContentSmall}"
+                  style="${c.currentMonth?"display: block":"display: none"}"
+                  >
+                  ${c.dayNumber}
+                  </div>
+              </td>
+            `).join("")}
+        </tr>
+      `).join("");return`
+      <table class="${i.datepickerTable}">
+        <thead>
+          ${r}
+        </thead>
+        <tbody>
+         ${a}
+        </tbody>
+      </table>
+    `}function Hy(s,t,e){const i=[],n=ot(s),o=ot(St(s,-1)),r=ot(St(s,1)),a=K(s),l=by(a,n,e),c=bl(s),h=bl(St(s,-1)),d=7;let u=1,p=!1;for(let f=1;f<d;f++){const b=[];if(f===1){const v=h-l+1;for(let T=v;T<=h;T++){const x=ee(a,o,T);b.push({date:x,currentMonth:p,isSelected:t&&yi(x,t),isToday:yi(x,rs()),dayNumber:Tt(x)})}p=!0;const y=d-b.length;for(let T=0;T<y;T++){const x=ee(a,n,u);b.push({date:x,currentMonth:p,isSelected:t&&yi(x,t),isToday:yi(x,rs()),dayNumber:Tt(x),disabled:Ro(x,e.min,e.max,e.filter,e.disablePast,e.disableFuture)}),u++}}else for(let v=1;v<8;v++){u>c&&(u=1,p=!1);const y=ee(a,p?n:r,u);b.push({date:y,currentMonth:p,isSelected:t&&yi(y,t),isToday:yi(y,rs()),dayNumber:Tt(y),disabled:Ro(y,e.min,e.max,e.filter,e.disablePast,e.disableFuture)}),u++}i.push(b)}return i}function No(s,t,e,i,n,o){const r=Vy(i,n),a=ot(rs()),l=K(rs()),c=`
+      ${r.map(h=>`
+          <tr>
+            ${h.map(d=>{const u=i.monthsShort.indexOf(d);return`
+                <td class="${o.datepickerCell} ${o.datepickerCellLarge}"
+                ${lu(u,s,i.min,i.max,i.disablePast,i.disableFuture)?"data-te-datepicker-cell-disabled":""}
+                
+                data-te-month="${u}" data-te-year="${s}" aria-label="${d}, ${s}"
+                ${u===e&&s===t?"data-te-datepicker-cell-selected":""}
+                ${u===a&&s===l?"data-te-datepicker-cell-current":""}" data-te-month="${u}" data-te-year="${s}" aria-label="${d}, ${s}">
+                  <div class="${o.datepickerCellContent} ${o.datepickerCellContentLarge}">${d}</div>
+                </td>
+              `}).join("")}
+          </tr>
+        `).join("")}
+    `;return`
+      <table class="${o.datepickerTable}">
+        <tbody>
+         ${c}
+        </tbody>
+      </table>
+    `}function Vy(s,t){const e=[];let i=[];for(let n=0;n<s.monthsShort.length;n++)if(i.push(s.monthsShort[n]),i.length===t){const o=i;e.push(o),i=[]}return e}function Bo(s,t,e,i,n,o){const r=Fy(s,i,n),a=K(rs()),l=`
+    ${r.map(c=>`
+        <tr>
+          ${c.map(h=>`
+              <td class="${o.datepickerCell} ${o.datepickerCellLarge}"  aria-label="${h}" data-te-year="${h}"
+              ${vl(h,e.min,e.max,e.disablePast,e.disableFuture)?"data-te-datepicker-cell-disabled":""}
+              ${h===t?"data-te-datepicker-cell-selected":""}
+              ${h===a?"data-te-datepicker-cell-current":""}
+              >
+                <div class="${o.datepickerCellContent} ${o.datepickerCellContentLarge}">${h}</div>
+              </td>
+            `).join("")}
+        </tr>
+      `).join("")}
+  `;return`
+      <table class="${o.datepickerTable}">
+        <tbody>
+        ${l}
+        </tbody>
+      </table>
+    `}function Fy(s,t,e){const i=[],n=K(s),o=$o(s,t),r=n-o;let a=[];for(let l=0;l<t;l++)if(a.push(r+l),a.length===e){const c=a;i.push(c),a=[]}return i}function Wy(s,t){return`
+    <button id="${s}" type="button" class="${t}" data-te-datepicker-toggle-button-ref data-te-datepicker-toggle-ref>
+      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+      <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+      </svg>  
+    </button>
+  `}const cs=37,ut=38,hs=39,ht=40,Ti=36,Ei=35,yl=33,Tl=34,Et=13,Ho=32,xi=27,Ci=9,zy=8,jy=46,ie=24,Vo=4,Fo=4,El="datepicker",Wo="te.datepicker",zo=`.${Wo}`,Yy=".data-api",Ky=`close${zo}`,Uy=`open${zo}`,Xy=`dateChange${zo}`,jo=`click${zo}${Yy}`,pu="data-te-datepicker-modal-container-ref",fu="data-te-datepicker-dropdown-container-ref",Yo="[data-te-datepicker-toggle-ref]",Gy=`[${pu}]`,qy=`[${fu}]`,Zy="[data-te-datepicker-view-change-button-ref]",Qy="[data-te-datepicker-previous-button-ref]",Jy="[data-te-datepicker-next-button-ref]",tT="[data-te-datepicker-ok-button-ref]",eT="[data-te-datepicker-cancel-button-ref]",iT="[data-te-datepicker-clear-button-ref]",sT="[data-te-datepicker-view-ref]",nT="[data-te-datepicker-toggle-button-ref]",oT="[data-te-datepicker-date-text-ref]",rT="[data-te-dropdown-backdrop-ref]",aT="animate-[fade-in_0.3s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",lT="animate-[fade-out_0.3s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",cT="animate-[fade-in_0.15s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",hT="animate-[fade-out_0.15s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",dT="flex flex-col fixed top-1/2 left-1/2 -translate-x-1/2 -translate-y-1/2 w-[328px] h-[512px] bg-white rounded-[0.6rem] shadow-lg z-[1066] xs:max-md:landscape:w-[475px] xs:max-md:landscape:h-[360px] xs:max-md:landscape:flex-row dark:bg-zinc-700",uT="w-full h-full fixed top-0 right-0 left-0 bottom-0 bg-black/40 z-[1065]",pT="relative h-full",fT="xs:max-md:landscape:h-full h-[120px] px-6 bg-primary flex flex-col rounded-t-lg dark:bg-zinc-800",_T="h-8 flex flex-col justify-end",gT="text-[10px] font-normal uppercase tracking-[1.7px] text-white",mT="xs:max-md:landscape:mt-24 h-[72px] flex flex-col justify-end",bT="text-[34px] font-normal text-white",vT="outline-none px-3",yT="px-3 pt-2.5 pb-0 flex justify-between text-black/[64]",TT="flex items-center outline-none p-2.5 text-neutral-500 font-medium text-[0.9rem] rounded-xl shadow-none bg-transparent m-0 border-none hover:bg-neutral-200 focus:bg-neutral-200  dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10",ET="mt-2.5",xT="p-0 w-10 h-10 leading-10 border-none outline-none m-0 text-gray-600 bg-transparent mr-6 hover:bg-neutral-200 hover:rounded-[50%] focus:bg-neutral-200 focus:rounded-[50%] dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10 [&>svg]:w-4 [&>svg]:h-4 [&>svg]:mx-auto",CT="p-0 w-10 h-10 leading-10 border-none outline-none m-0 text-gray-600 bg-transparent hover:bg-neutral-200 hover:rounded-[50%] focus:bg-neutral-200 focus:rounded-[50%] dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10 [&>svg]:w-4 [&>svg]:h-4 [&>svg]:rotate-180 [&>svg]:mx-auto",AT="h-14 flex absolute w-full bottom-0 justify-end items-center px-3",wT="outline-none bg-white text-primary border-none cursor-pointer py-0 px-2.5 uppercase text-[0.8rem] leading-10 font-medium h-10 tracking-[.1rem] rounded-[10px] mb-2.5 hover:bg-neutral-200 focus:bg-neutral-200 dark:bg-transparent dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10",kT="mr-auto",ST="w-10 h-10 text-center text-[12px] font-normal dark:text-white",OT="text-center data-[te-datepicker-cell-disabled]:text-neutral-300 data-[te-datepicker-cell-disabled]:cursor-default data-[te-datepicker-cell-disabled]:pointer-events-none data-[te-datepicker-cell-disabled]:hover:cursor-default hover:cursor-pointer group",IT="w-10 h-10 xs:max-md:landscape:w-8 xs:max-md:landscape:h-8",DT="w-[76px] h-[42px]",MT="mx-auto group-[:not([data-te-datepicker-cell-disabled]):not([data-te-datepicker-cell-selected]):hover]:bg-neutral-300 group-[[data-te-datepicker-cell-selected]]:bg-primary group-[[data-te-datepicker-cell-selected]]:text-white group-[:not([data-te-datepicker-cell-selected])[data-te-datepicker-cell-focused]]:bg-neutral-100 group-[[data-te-datepicker-cell-focused]]:data-[te-datepicker-cell-selected]:bg-primary group-[[data-te-datepicker-cell-current]]:border-solid group-[[data-te-datepicker-cell-current]]:border-black group-[[data-te-datepicker-cell-current]]:border dark:group-[:not([data-te-datepicker-cell-disabled]):not([data-te-datepicker-cell-selected]):hover]:bg-white/10 dark:group-[[data-te-datepicker-cell-current]]:border-white dark:text-white dark:group-[:not([data-te-datepicker-cell-selected])[data-te-datepicker-cell-focused]]:bg-white/10 dark:group-[[data-te-datepicker-cell-disabled]]:text-neutral-500",LT="w-9 h-9 leading-9 rounded-[50%] text-[13px]",$T="w-[72px] h-10 leading-10 py-[1px] px-0.5 rounded-[999px]",RT="mx-auto w-[304px]",PT="flex items-center justify-content-center [&>svg]:w-5 [&>svg]:h-5 absolute outline-none border-none bg-transparent right-0.5 top-1/2 -translate-x-1/2 -translate-y-1/2 hover:text-primary focus:text-primary dark:hover:text-primary-400 dark:focus:text-primary-400 dark:text-neutral-200",NT="inline-block pointer-events-none ml-[3px] [&>svg]:w-4 [&>svg]:h-4 [&>svg]:fill-neutral-500 dark:[&>svg]:fill-white",BT="w-[328px] h-[380px] bg-white rounded-lg shadow-[0px_2px_15px_-3px_rgba(0,0,0,.07),_0px_10px_20px_-2px_rgba(0,0,0,.04)] z-[1066] dark:bg-zinc-700",HT={title:"Select date",container:"body",disablePast:!1,disableFuture:!1,monthsFull:["January","February","March","April","May","June","July","August","September","October","November","December"],monthsShort:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],weekdaysFull:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],weekdaysShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],weekdaysNarrow:["S","M","T","W","T","F","S"],okBtnText:"Ok",clearBtnText:"Clear",cancelBtnText:"Cancel",okBtnLabel:"Confirm selection",clearBtnLabel:"Clear selection",cancelBtnLabel:"Cancel selection",nextMonthLabel:"Next month",prevMonthLabel:"Previous month",nextYearLabel:"Next year",prevYearLabel:"Previous year",changeMonthIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-6 h-6">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M15.75 19.5L8.25 12l7.5-7.5" />
+  </svg>
+  `,nextMultiYearLabel:"Next 24 years",prevMultiYearLabel:"Previous 24 years",switchToMultiYearViewLabel:"Choose year and month",switchToMonthViewLabel:"Choose date",switchToDayViewLabel:"Choose date",startDate:null,startDay:0,format:"dd/mm/yyyy",view:"days",viewChangeIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="0" stroke="currentColor" class="w-6 h-6">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+  </svg>
+  `,min:null,max:null,filter:null,inline:!1,toggleButton:!0,disableToggleButton:!1,disableInput:!1,animations:!0,confirmDateOnSelect:!1,removeOkBtn:!1,removeCancelBtn:!1,removeClearBtn:!1},VT={title:"string",container:"string",disablePast:"boolean",disableFuture:"boolean",monthsFull:"array",monthsShort:"array",weekdaysFull:"array",weekdaysShort:"array",weekdaysNarrow:"array",okBtnText:"string",clearBtnText:"string",cancelBtnText:"string",okBtnLabel:"string",clearBtnLabel:"string",cancelBtnLabel:"string",nextMonthLabel:"string",prevMonthLabel:"string",nextYearLabel:"string",prevYearLabel:"string",nextMultiYearLabel:"string",prevMultiYearLabel:"string",changeMonthIconTemplate:"string",switchToMultiYearViewLabel:"string",switchToMonthViewLabel:"string",switchToDayViewLabel:"string",startDate:"(null|string|date)",startDay:"number",format:"string",view:"string",viewChangeIconTemplate:"string",min:"(null|string|date)",max:"(null|string|date)",filter:"(null|function)",inline:"boolean",toggleButton:"boolean",disableToggleButton:"boolean",disableInput:"boolean",animations:"boolean",confirmDateOnSelect:"boolean",removeOkBtn:"boolean",removeCancelBtn:"boolean",removeClearBtn:"boolean"},FT={fadeIn:aT,fadeOut:lT,fadeInShort:cT,fadeOutShort:hT,modalContainer:dT,datepickerBackdrop:uT,datepickerMain:pT,datepickerHeader:fT,datepickerTitle:_T,datepickerTitleText:gT,datepickerDate:mT,datepickerDateText:bT,datepickerView:vT,datepickerDateControls:yT,datepickerViewChangeButton:TT,datepickerViewChangeIcon:NT,datepickerArrowControls:ET,datepickerPreviousButton:xT,datepickerNextButton:CT,datepickerFooter:AT,datepickerFooterBtn:wT,datepickerClearBtn:kT,datepickerDayHeading:ST,datepickerCell:OT,datepickerCellSmall:IT,datepickerCellLarge:DT,datepickerCellContent:MT,datepickerCellContentSmall:LT,datepickerCellContentLarge:$T,datepickerTable:RT,datepickerToggleButton:PT,datepickerDropdownContainer:BT},WT={fadeIn:"string",fadeOut:"string",fadeInShort:"string",fadeOutShort:"string",modalContainer:"string",datepickerBackdrop:"string",datepickerMain:"string",datepickerHeader:"string",datepickerTitle:"string",datepickerTitleText:"string",datepickerDate:"string",datepickerDateText:"string",datepickerView:"string",datepickerDateControls:"string",datepickerViewChangeButton:"string",datepickerArrowControls:"string",datepickerPreviousButton:"string",datepickerNextButton:"string",datepickerFooter:"string",datepickerFooterBtn:"string",datepickerClearBtn:"string",datepickerDayHeading:"string",datepickerCell:"string",datepickerCellSmall:"string",datepickerCellLarge:"string",datepickerCellContent:"string",datepickerCellContentSmall:"string",datepickerCellContentLarge:"string",datepickerTable:"string",datepickerToggleButton:"string",datepickerDropdownContainer:"string"};class xl{constructor(t,e,i){this._element=t,this._input=m.findOne("input",this._element),this._options=this._getConfig(e),this._classes=this._getClasses(i),this._activeDate=new Date,this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this._headerDate=null,this._headerYear=null,this._headerMonth=null,this._view=this._options.view,this._popper=null,this._focusTrap=null,this._isOpen=!1,this._toggleButtonId=bt("datepicker-toggle-"),this._animations=!window.matchMedia("(prefers-reduced-motion: reduce)").matches&&this._options.animations,this._scrollBar=new Qi,this._element&&O.setData(t,Wo,this),this._init(),this.toggleButton&&this._options.disableToggle&&(this.toggleButton.disabled="true"),this._options.disableInput&&(this._input.disabled="true")}static get NAME(){return El}get container(){return m.findOne(`[${pu}='${this._toggleButtonId}']`)||m.findOne(`[${fu}='${this._toggleButtonId}']`)}get options(){return this._options}get activeCell(){let t;return this._view==="days"&&(t=this._getActiveDayCell()),this._view==="months"&&(t=this._getActiveMonthCell()),this._view==="years"&&(t=this._getActiveYearCell()),t}get activeDay(){return Tt(this._activeDate)}get activeMonth(){return ot(this._activeDate)}get activeYear(){return K(this._activeDate)}get firstYearInView(){return this.activeYear-$o(this._activeDate,ie)}get lastYearInView(){return this.firstYearInView+ie-1}get viewChangeButton(){return m.findOne(Zy,this.container)}get previousButton(){return m.findOne(Qy,this.container)}get nextButton(){return m.findOne(Jy,this.container)}get okButton(){return m.findOne(tT,this.container)}get cancelButton(){return m.findOne(eT,this.container)}get clearButton(){return m.findOne(iT,this.container)}get datesContainer(){return m.findOne(sT,this.container)}get toggleButton(){return m.findOne(nT,this._element)}update(t={}){this._options=this._getConfig({...this._options,...t})}_getConfig(t){const e=g.getDataAttributes(this._element);if(t={...HT,...e,...t},L(El,t,VT),t.max&&typeof t.max=="string"&&(t.max=new Date(t.max)),t.min&&typeof t.min=="string"&&(t.min=new Date(t.min)),t.startDay&&t.startDay!==0){const i=this._getNewDaysOrderArray(t);t.weekdaysNarrow=i}return t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...FT,...e,...t},L(El,t,WT),t}_getContainer(){return m.findOne(this._options.container)}_getNewDaysOrderArray(t){const e=t.startDay,i=t.weekdaysNarrow;return i.slice(e).concat(i.slice(0,e))}_init(){!this.toggleButton&&this._options.toggleButton&&(this._appendToggleButton(),(this._input.readOnly||this._input.disabled)&&(this.toggleButton.style.pointerEvents="none")),this._listenToUserInput(),this._listenToToggleClick(),this._listenToToggleKeydown()}_appendToggleButton(){const t=Wy(this._toggleButtonId,this._classes.datepickerToggleButton);this._element.insertAdjacentHTML("beforeend",t)}open(){if(this._input.readOnly||this._input.disabled)return;const t=_.trigger(this._element,Uy);if(this._isOpen||t.defaultPrevented)return;this._setInitialDate();const e=Py(this._classes.datepickerBackdrop),i=Ry(this._activeDate,this._selectedDate,this._selectedYear,this._selectedMonth,this._options,Fo,ie,Vo,this._toggleButtonId,this._classes);this._options.inline?this._openDropdown(i):(this._openModal(e,i),this._scrollBar.hide()),this._animations&&(g.addClass(this.container,this._classes.fadeIn),g.addClass(e,this._classes.fadeInShort)),this._setFocusTrap(this.container),this._listenToDateSelection(),this._addControlsListeners(),this._updateControlsDisabledState(),this._listenToEscapeClick(),this._listenToKeyboardNavigation(),this._listenToDatesContainerFocus(),this._listenToDatesContainerBlur(),this._asyncFocusDatesContainer(),this._updateViewControlsAndAttributes(this._view),this._isOpen=!0,setTimeout(()=>{this._listenToOutsideClick()},0)}_openDropdown(t){this._popper=Fe(this._input,t,{placement:"bottom-start"}),this._getContainer().appendChild(t)}_openModal(t,e){const i=this._getContainer();i.appendChild(t),i.appendChild(e)}_setFocusTrap(t){this._focusTrap=new Vs(t,{event:"keydown",condition:e=>e.key==="Tab"}),this._focusTrap.trap()}_listenToUserInput(){_.on(this._input,"input",t=>{this._handleUserInput(t.target.value)})}_listenToToggleClick(){_.on(this._element,jo,Yo,t=>{t.preventDefault(),this.open()})}_listenToToggleKeydown(){_.on(this._element,"keydown",Yo,t=>{t.keyCode===Et&&!this._isOpen&&this.open()})}_listenToDateSelection(){_.on(this.datesContainer,"click",t=>{this._handleDateSelection(t)})}_handleDateSelection(t){const e=t.target.nodeName==="DIV"?t.target.parentNode.dataset:t.target.dataset,i=t.target.nodeName==="DIV"?t.target.parentNode:t.target;if(e.teDate&&this._pickDay(e.teDate,i),e.teMonth&&e.teYear){const n=parseInt(e.teMonth,10),o=parseInt(e.teYear,10);this._pickMonth(n,o)}if(e.teYear&&!e.teMonth){const n=parseInt(e.teYear,10);this._pickYear(n)}this._options.inline||this._updateHeaderDate(this._activeDate,this._options.monthsShort,this._options.weekdaysShort)}_updateHeaderDate(t,e,i){const n=m.findOne(oT,this.container),o=ot(t),r=Tt(t),a=Lo(t);n.innerHTML=`${i[a]}, ${e[o]} ${r}`}_addControlsListeners(){_.on(this.nextButton,"click",()=>{this._view==="days"?this.nextMonth():this._view==="years"?this.nextYears():this.nextYear(),this._updateControlsDisabledState()}),_.on(this.previousButton,"click",()=>{this._view==="days"?this.previousMonth():this._view==="years"?this.previousYears():this.previousYear(),this._updateControlsDisabledState()}),_.on(this.viewChangeButton,"click",()=>{this._view==="days"?this._changeView("years"):(this._view==="years"||this._view==="months")&&this._changeView("days")}),this._options.inline||this._listenToFooterButtonsClick()}_listenToFooterButtonsClick(){_.on(this.okButton,"click",()=>this.handleOk()),_.on(this.cancelButton,"click",()=>this.handleCancel()),_.on(this.clearButton,"click",()=>this.handleClear())}_listenToOutsideClick(){_.on(document,jo,t=>{const e=t.target===this.container,i=this.container&&this.container.contains(t.target);!e&&!i&&this.close()})}_listenToEscapeClick(){_.on(document,"keydown",t=>{t.keyCode===xi&&this._isOpen&&this.close()})}_listenToKeyboardNavigation(){_.on(this.datesContainer,"keydown",t=>{this._handleKeydown(t)})}_listenToDatesContainerFocus(){_.on(this.datesContainer,"focus",()=>{this._focusActiveCell(this.activeCell)})}_listenToDatesContainerBlur(){_.on(this.datesContainer,"blur",()=>{this._removeCurrentFocusStyles()})}_handleKeydown(t){this._view==="days"&&this._handleDaysViewKeydown(t),this._view==="months"&&this._handleMonthsViewKeydown(t),this._view==="years"&&this._handleYearsViewKeydown(t)}_handleDaysViewKeydown(t){const e=this._activeDate,i=this.activeCell;switch(t.keyCode){case cs:this._activeDate=as(this._activeDate,et()?1:-1);break;case hs:this._activeDate=as(this._activeDate,et()?-1:1);break;case ut:this._activeDate=as(this._activeDate,-7);break;case ht:this._activeDate=as(this._activeDate,7);break;case Ti:this._activeDate=as(this._activeDate,1-Tt(this._activeDate));break;case Ei:this._activeDate=as(this._activeDate,bl(this._activeDate)-Tt(this._activeDate));break;case yl:this._activeDate=St(this._activeDate,-1);break;case Tl:this._activeDate=St(this._activeDate,1);break;case Et:case Ho:this._selectDate(this._activeDate),this._handleDateSelection(t),t.preventDefault();return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("days"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_asyncFocusDatesContainer(){setTimeout(()=>{this.datesContainer.focus()},0)}_focusActiveCell(t){t&&t.setAttribute("data-te-datepicker-cell-focused","")}_removeHighlightFromCell(t){t&&t.removeAttribute("data-te-datepicker-cell-focused")}_getActiveDayCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>{const n=au(i.dataset.teDate);return yi(n,this._activeDate)})}_handleMonthsViewKeydown(t){const e=this._activeDate,i=this.activeCell;switch(t.keyCode){case cs:this._activeDate=St(this._activeDate,et()?1:-1);break;case hs:this._activeDate=St(this._activeDate,et()?-1:1);break;case ut:this._activeDate=St(this._activeDate,-4);break;case ht:this._activeDate=St(this._activeDate,4);break;case Ti:this._activeDate=St(this._activeDate,-this.activeMonth);break;case Ei:this._activeDate=St(this._activeDate,11-this.activeMonth);break;case yl:this._activeDate=kt(this._activeDate,-1);break;case Tl:this._activeDate=kt(this._activeDate,1);break;case Et:case Ho:this._selectMonth(this.activeMonth);return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("months"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_getActiveMonthCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>{const n=parseInt(i.dataset.teYear,10),o=parseInt(i.dataset.teMonth,10);return n===this.activeYear&&o===this.activeMonth})}_handleYearsViewKeydown(t){const e=this._activeDate,i=this.activeCell,n=4,o=24;switch(t.keyCode){case cs:this._activeDate=kt(this._activeDate,et()?1:-1);break;case hs:this._activeDate=kt(this._activeDate,et()?-1:1);break;case ut:this._activeDate=kt(this._activeDate,-n);break;case ht:this._activeDate=kt(this._activeDate,n);break;case Ti:this._activeDate=kt(this._activeDate,-$o(this._activeDate,o));break;case Ei:this._activeDate=kt(this._activeDate,o-$o(this._activeDate,o)-1);break;case yl:this._activeDate=kt(this._activeDate,-o);break;case Tl:this._activeDate=kt(this._activeDate,o);break;case Et:case Ho:this._selectYear(this.activeYear);return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("years"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_getActiveYearCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>parseInt(i.dataset.teYear,10)===this.activeYear)}_setInitialDate(){this._input.value?this._handleUserInput(this._input.value):this._options.startDate?this._activeDate=new Date(this._options.startDate):this._activeDate=new Date}close(){const t=_.trigger(this._element,Ky);!this._isOpen||t.defaultPrevented||(this._removeDatepickerListeners(),this._animations&&g.addClass(this.container,this._classes.fadeOut),this._options.inline?this._closeDropdown():this._closeModal(),this._isOpen=!1,this._view=this._options.view,this.toggleButton?this.toggleButton.focus():this._input.focus())}_closeDropdown(){const t=m.findOne(qy),e=this._getContainer();window.matchMedia("(prefers-reduced-motion: reduce)").matches&&(t&&e.removeChild(t),this._popper&&this._popper.destroy()),t.addEventListener("animationend",()=>{t&&e.removeChild(t),this._popper&&this._popper.destroy()}),this._removeFocusTrap()}_closeModal(){const t=m.findOne(rT),e=m.findOne(Gy);!e||!t||(this._animations?(g.addClass(t,this._classes.fadeOutShort),t.addEventListener("animationend",()=>{this._removePicker(t,e),this._scrollBar.reset()})):(this._removePicker(t,e),this._scrollBar.reset()))}_removePicker(t,e){const i=this._getContainer();i.removeChild(t),i.removeChild(e)}_removeFocusTrap(){this._focusTrap&&(this._focusTrap.disable(),this._focusTrap=null)}_removeDatepickerListeners(){_.off(this.nextButton,"click"),_.off(this.previousButton,"click"),_.off(this.viewChangeButton,"click"),_.off(this.okButton,"click"),_.off(this.cancelButton,"click"),_.off(this.clearButton,"click"),_.off(this.datesContainer,"click"),_.off(this.datesContainer,"keydown"),_.off(this.datesContainer,"focus"),_.off(this.datesContainer,"blur"),_.off(document,jo)}dispose(){this._isOpen&&this.close(),this._removeInputAndToggleListeners();const t=m.findOne(`#${this._toggleButtonId}`);t&&this._element.removeChild(t),O.removeData(this._element,Wo),this._element=null,this._input=null,this._options=null,this._activeDate=null,this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this._headerDate=null,this._headerYear=null,this._headerMonth=null,this._view=null,this._popper=null,this._focusTrap=null}_removeInputAndToggleListeners(){_.off(this._input,"input"),_.off(this._element,jo,Yo),_.off(this._element,"keydown",Yo)}handleOk(){this._confirmSelection(this._headerDate),this.close()}_selectDate(t,e=this.activeCell){const{min:i,max:n,filter:o,disablePast:r,disableFuture:a}=this._options;Ro(t,i,n,o,r,a)||(this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._selectedDate=t,this._selectedYear=K(t),this._selectedMonth=ot(t),this._headerDate=t,(this._options.inline||this.options.confirmDateOnSelect)&&(this._confirmSelection(t),this.close()))}_selectYear(t,e=this.activeCell){this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._headerYear=t,this._asyncChangeView("months")}_selectMonth(t,e=this.activeCell){this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._headerMonth=t,this._asyncChangeView("days")}_removeSelectedStyles(t){t&&t.removeAttribute("data-te-datepicker-cell-selected")}_addSelectedStyles(t){t&&t.setAttribute("data-te-datepicker-cell-selected","")}_confirmSelection(t){if(t){const e=this.formatDate(t);this._input.value=e,_.trigger(this._element,Xy,{date:t}),_.trigger(this._input,"input")}}handleCancel(){this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this.close()}handleClear(){this._selectedDate=null,this._selectedMonth=null,this._selectedYear=null,this._headerDate=null,this._headerMonth=null,this._headerYear=null,this._removeCurrentSelectionStyles(),this._input.value="",this._setInitialDate(),this._changeView("days"),this._updateHeaderDate(this._activeDate,this._options.monthsShort,this._options.weekdaysShort)}_removeCurrentSelectionStyles(){const t=m.findOne("[data-te-datepicker-cell-selected]",this.container);t&&t.removeAttribute("data-te-datepicker-cell-selected")}_removeCurrentFocusStyles(){const t=m.findOne("[data-te-datepicker-cell-focused]",this.container);t&&t.removeAttribute("data-te-datepicker-cell-focused")}formatDate(t){const e=Tt(t),i=this._addLeadingZero(Tt(t)),n=this._options.weekdaysShort[Lo(t)],o=this._options.weekdaysFull[Lo(t)],r=ot(t)+1,a=this._addLeadingZero(ot(t)+1),l=this._options.monthsShort[ot(t)],c=this._options.monthsFull[ot(t)],h=K(t).toString().length===2?K(t):K(t).toString().slice(2,4),d=K(t),u=this._options.format.split(/(d{1,4}|m{1,4}|y{4}|yy|!.)/g);let p="";return u.forEach(f=>{switch(f){case"dddd":f=f.replace(f,o);break;case"ddd":f=f.replace(f,n);break;case"dd":f=f.replace(f,i);break;case"d":f=f.replace(f,e);break;case"mmmm":f=f.replace(f,c);break;case"mmm":f=f.replace(f,l);break;case"mm":f=f.replace(f,a);break;case"m":f=f.replace(f,r);break;case"yyyy":f=f.replace(f,d);break;case"yy":f=f.replace(f,h);break}p+=f}),p}_addLeadingZero(t){return parseInt(t,10)<10?`0${t}`:t}_pickDay(t,e){const i=au(t),{min:n,max:o,filter:r,disablePast:a,disableFuture:l}=this._options;Ro(i,n,o,r,a,l)||(this._activeDate=i,this._selectDate(i,e))}_pickYear(t){const{min:e,max:i,disablePast:n,disableFuture:o}=this._options;if(vl(t,e,i,n,o))return;const r=ee(t,this.activeMonth,this.activeDay);this._activeDate=r,this._selectedDate=r,this._selectYear(t)}_pickMonth(t,e){const{min:i,max:n,disablePast:o,disableFuture:r}=this._options;if(lu(t,e,i,n,o,r)||vl(e,i,n,o,r))return;const a=ee(e,t,this.activeDay);this._activeDate=a,this._selectMonth(t)}nextMonth(){const t=St(this._activeDate,1),e=Po(t,this._headerDate,this._options,this._classes);this._activeDate=t,this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}previousMonth(){const t=St(this._activeDate,-1);this._activeDate=t;const e=Po(t,this._headerDate,this._options,this._classes);this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}nextYear(){const t=kt(this._activeDate,1);this._activeDate=t,this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes);const e=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes);this.datesContainer.innerHTML=e}previousYear(){const t=kt(this._activeDate,-1);this._activeDate=t,this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes);const e=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes);this.datesContainer.innerHTML=e}nextYears(){const t=kt(this._activeDate,24);this._activeDate=t;const e=Bo(t,this._selectedYear,this._options,ie,Vo,this._classes);this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}previousYears(){const t=kt(this._activeDate,-24);this._activeDate=t;const e=Bo(t,this._selectedYear,this._options,ie,Vo,this._classes);this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}_asyncChangeView(t){setTimeout(()=>{this._changeView(t)},0)}_changeView(t){this._view=t,this.datesContainer.blur(),t==="days"&&(this.datesContainer.innerHTML=Po(this._activeDate,this._headerDate,this._options,this._classes)),t==="months"&&(this.datesContainer.innerHTML=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes)),t==="years"&&(this.datesContainer.innerHTML=Bo(this._activeDate,this._selectedYear,this._options,ie,Vo,this._classes)),this.datesContainer.focus(),this._updateViewControlsAndAttributes(t),this._updateControlsDisabledState()}_updateViewControlsAndAttributes(t){t==="days"&&(this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToMultiYearViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevMonthLabel),this.nextButton.setAttribute("aria-label",this._options.nextMonthLabel)),t==="months"&&(this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToDayViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevYearLabel),this.nextButton.setAttribute("aria-label",this._options.nextYearLabel)),t==="years"&&(this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToMonthViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevMultiYearLabel),this.nextButton.setAttribute("aria-label",this._options.nextMultiYearLabel))}_updateControlsDisabledState(){xy(this._options.disableFuture,this._activeDate,this._view,ie,this._options.min,this._options.max,this.lastYearInView,this.firstYearInView)?this.nextButton.disabled=!0:this.nextButton.disabled=!1,Cy(this._options.disablePast,this._activeDate,this._view,ie,this._options.min,this._options.max,this.lastYearInView,this.firstYearInView)?this.previousButton.disabled=!0:this.previousButton.disabled=!1}_handleUserInput(t){const e=this._getDelimeters(this._options.format),i=this._parseDate(t,this._options.format,e);yy(i)?(this._activeDate=i,this._selectedDate=i,this._selectedYear=K(i),this._selectedMonth=ot(i),this._headerDate=i):(this._activeDate=new Date,this._selectedDate=null,this._selectedMonth=null,this._selectedYear=null,this._headerDate=null,this._headerMonth=null,this._headerYear=null)}_getDelimeters(t){return t.match(/[^(dmy)]{1,}/g)}_parseDate(t,e,i){let n;i[0]!==i[1]?n=i[0]+i[1]:n=i[0];const o=new RegExp(`[${n}]`),r=t.split(o),a=e.split(o),l=e.indexOf("mmm")!==-1,c=[];for(let b=0;b<a.length;b++)a[b].indexOf("yy")!==-1&&(c[0]={value:r[b],format:a[b]}),a[b].indexOf("m")!==-1&&(c[1]={value:r[b],format:a[b]}),a[b].indexOf("d")!==-1&&a[b].length<=2&&(c[2]={value:r[b],format:a[b]});let h;e.indexOf("mmmm")!==-1?h=this._options.monthsFull:h=this._options.monthsShort;const d=Number(c[0].value),u=l?this.getMonthNumberByMonthName(c[1].value,h):Number(c[1].value)-1,p=Number(c[2].value);return ee(d,u,p)}getMonthNumberByMonthName(t,e){return e.findIndex(i=>i===t)}static getInstance(t){return O.getData(t,Wo)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zT=({format24:s,okLabel:t,cancelLabel:e,headID:i,footerID:n,bodyID:o,pickerID:r,clearLabel:a,inline:l,showClearBtn:c,amLabel:h,pmLabel:d},u)=>{const p=`<div id='${r}' class='${u.timepickerWrapper}' data-te-timepicker-wrapper>
+      <div class="${u.timepickerContainer}">
+        <div class="${u.timepickerElements}" data-te-timepicker-elements-wrapper>
+        <div id='${i}' class='${u.timepickerHead}' style='padding-right:${s?50:10}px'>
+        <div class='${u.timepickerHeadContent}'>
+            <div class="${u.timepickerCurrentWrapper}">
+              <span class="${u.timepickerCurrentButtonWrapper}">
+                <button type='button' class='${u.timepickerCurrentButton}' tabindex="0" data-te-timepicker-active data-te-timepicker-current data-te-timepicker-hour data-te-ripple-init>21</button>
+              </span>
+              <button type='button' class='${u.timepickerDot}' disabled>:</button>
+            <span class="${u.timepickerCurrentButtonWrapper}">
+              <button type='button' class='${u.timepickerCurrentButton}' tabindex="0" data-te-timepicker-current data-te-timepicker-minute data-te-ripple-init>21</button>
+            </span>
+            </div>
+            ${s?"":`<div class="${u.timepickerModeWrapper}">
+                  <button type='button' class="${u.timepickerModeAm}" tabindex="0" data-te-timepicker-am data-te-timepicker-hour-mode data-te-ripple-init>${h}</button>
+                  <button class="${u.timepickerModePm}" tabindex="0" data-te-timepicker-pm data-te-timepicker-hour-mode data-te-ripple-init>${d}</button>
+                </div>`}
+        </div>
+      </div>
+      ${l?"":`<div id='${o}' class='${u.timepickerClockWrapper}' data-te-timepicker-clock-wrapper>
+            <div class='${u.timepickerClock}' data-te-timepicker-clock>
+              <span class='${u.timepickerMiddleDot}' data-te-timepicker-middle-dot></span>
+              <div class='${u.timepickerHandPointer}' data-te-timepicker-hand-pointer>
+                <div class='${u.timepickerPointerCircle}' data-te-timepicker-circle></div>
+              </div>
+              ${s?'<div class="'+u.timepickerClockInner+'" data-te-timepicker-clock-inner></div>':""}
+            </div>
+          </div>`}
+    </div>
+    <div id='${n}' class='${u.timepickerFooterWrapper}'>
+      <div class="${u.timepickerFooter}">
+        ${c?`<button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-clear tabindex="0" data-te-ripple-init>${a}</button>`:""}
+        <button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-cancel tabindex="0" data-te-ripple-init>${e}</button>
+        <button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>
+      </div>
+    </div>
+  </div>
+</div>`,f=`<div id='${r}' class='${u.timepickerInlineWrapper}' data-te-timepicker-wrapper>
+        <div class="${u.timepickerInlineContainer}">
+          <div class="${u.timepickerInlineElements}" data-te-timepicker-elements-wrapper>
+          <div id='${i}' class='${u.timepickerInlineHead}'
+          style='padding-right:10px'>
+          <div class='${u.timepickerInlineHeadContent}'>
+              <div class="${u.timepickerCurrentWrapper}">
+                <span class="${u.timepickerInlineHourWrapper}" data-te-timepicker-inline-hour-icons>
+                  <span class="${u.timepickerInlineIconUp}" data-te-timepicker-icon-up data-te-timepicker-icon-inline-hour>
+                    <span class="${u.timepickerInlineIconSvg}">
+                      <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                      <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 15.75l7.5-7.5 7.5 7.5" />
+                      </svg>   
+                    </span>
+                  </span>
+                  <button type='button' class='${u.timepickerInlineCurrentButton}' data-te-timepicker-hour data-te-timepicker-current data-te-timepicker-current-inline tabindex="0" data-te-ripple-init>21</button>
+                  <span class="${u.timepickerInlineIconDown}" data-te-timepicker-icon-inline-hour data-te-timepicker-icon-down>
+                    <span class="${u.timepickerInlineIconSvg}">
+                      <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                      <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+                      </svg>  
+                    </span>
+                  </span>
+                </span>
+                <button type='button' class='${u.timepickerInlineDot}' data-te-timepicker-current-inline disabled>:</button>
+              <span class="${u.timepickerCurrentMinuteWrapper}">
+                <span class="${u.timepickerInlineIconUp}" data-te-timepicker-icon-up data-te-timepicker-icon-inline-minute>
+                  <span class="${u.timepickerInlineIconSvg}">
+                    <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                    <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 15.75l7.5-7.5 7.5 7.5" />
+                    </svg>
+                  </span>
+                </span>
+                <button type='button' class='${u.timepickerInlineCurrentButton}' data-te-timepicker-minute data-te-timepicker-current data-te-timepicker-current-inline tabindex="0" data-te-ripple-init>21</button>
+                <span class="${u.timepickerInlineIconDown}" data-te-timepicker-icon-inline-minute data-te-timepicker-icon-down>
+                  <span class="${u.timepickerInlineIconSvg}">
+                    <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                    <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+                    </svg> 
+                  </span>
+                </span>
+              </span>
+              </div>
+              ${s?"":`<div class="${u.timepickerInlineModeWrapper}">
+                      <button type='button' class="${u.timepickerInlineModeAm}" data-te-timepicker-am data-te-timepicker-hour-mode tabindex="0" data-te-ripple-init>${h}</button>
+                      <button class="${u.timepickerInlineModePm}" data-te-timepicker-hour-mode data-te-timepicker-pm tabindex="0" data-te-ripple-init>${d}</button>
+                      <button type='button' class='${u.timepickerInlineSubmitButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>
+                    </div>`}
+              ${s?`<button class='${u.timepickerInlineSubmitButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>`:""}
+          </div>
+        </div>
+      </div>
+    </div>
+</div>`;return l?f:p},jT=(s,t,e)=>{const{iconSVG:i}=s;return`
+  <button id="${t}" tabindex="0" type="button" class="${e.timepickerToggleButton}" data-te-toggle="timepicker" data-te-timepicker-toggle-button data-te-timepicker-icon>
+    ${i}
+  </button>
+`},Ko="data-te-timepicker-disabled",Uo="data-te-timepicker-active",Ai=s=>{if(s==="")return;let t,e,i,n;return _u(s)?(t=s.getHours(),n=t,e=s.getMinutes(),t%=12,n===0&&t===0&&(i="AM"),t=t||12,i===void 0&&(i=Number(n)>=12?"PM":"AM"),e=e<10?`0${e}`:e):([t,e,i]=j(s,!1),n=t,t%=12,n===0&&t===0&&(i="AM"),t=t||12,i===void 0&&(i=Number(n)>=12?"PM":"AM")),{hours:t,minutes:e,amOrPm:i}},_u=s=>s&&Object.prototype.toString.call(s)==="[object Date]"&&!Number.isNaN(s),gu=s=>{if(s==="")return;let t,e;return _u(s)?(t=s.getHours(),e=s.getMinutes()):[t,e]=j(s,!1),e=Number(e)<10?`0${Number(e)}`:e,{hours:t,minutes:e}},YT=(s,t,e)=>_.on(document,s,t,({target:i})=>{if(i.hasAttribute(Uo))return;document.querySelectorAll(t).forEach(o=>{o.hasAttribute(Uo)&&(g.removeClass(o,e.opacity),o.removeAttribute(Uo))}),g.addClass(i,e.opacity),i.setAttribute(Uo,"")}),mu=({clientX:s,clientY:t,touches:e},i,n=!1)=>{const{left:o,top:r}=i.getBoundingClientRect();let a={};return!n||!e?a={x:s-o,y:t-r}:n&&Object.keys(e).length>0&&(a={x:e[0].clientX-o,y:e[0].clientY-r}),a},Xo=()=>navigator.maxTouchPoints&&navigator.maxTouchPoints>2&&/MacIntel/.test(navigator.platform)||/Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent),j=(s,t=!0)=>t?s.value.replace(/:/gi," ").split(" "):s.replace(/:/gi," ").split(" "),bu=(s,t)=>{const[e,i,n]=j(s,!1),[o,r,a]=j(t,!1);return n==="PM"&&a==="AM"||n===a&&e>o||i>r},vu=()=>{const s=new Date,t=s.getHours(),e=s.getMinutes();return`${t}:${e<10?`0${e}`:e}`},Ke=(s,t,e)=>{if(!t)return s;let i=vu();return e&&(i=`${Ai(i).hours}:${Ai(i).minutes} ${Ai(i).amOrPm}`),(s!==""&&bu(i,s)||s==="")&&(s=i),s},Ue=(s,t,e)=>{if(!t)return s;let i=vu();return e&&(i=`${Ai(i).hours}:${Ai(i).minutes} ${Ai(i).amOrPm}`),(s!==""&&!bu(i,s)||s==="")&&(s=i),s},KT=({format12:s,maxTime:t,minTime:e,disablePast:i,disableFuture:n},o,r)=>{const a=j(o)[1];e=Ke(e,i,s),t=Ue(t,n,s);const[l,c,h]=j(t,!1),[d,u,p]=j(e,!1);if(h!==void 0||p!==void 0)return[r,a];if(!(l!==""&&d===""&&Number(r)>Number(l))&&!(l===""&&d!==""&&c===void 0&&u!==""&&Number(r)<Number(d)))return[r,a]},yu=(s,t,e,i)=>{s.forEach(n=>{t=t==="12"&&i?"0":t,(n.textContent==="00"||Number(n.textContent==="12"&&i?"0":n.textContent)>t)&&(g.addClass(n,e.tipsDisabled),n.setAttribute(Ko,""))})},Tu=(s,t,e,i)=>{s.forEach(n=>{t=t==="12"&&i?"0":t,n.textContent!=="00"&&Number(n.textContent==="12"&&i?"0":n.textContent)<Number(t)&&(g.addClass(n,e.tipsDisabled),n.setAttribute(Ko,""))})},Eu=(s,t,e,i)=>{if(t==="12"||t==="24")return;const n=e?12:24;return i==="max"?(Number(s)===n?0:Number(s))>Number(t):(Number(s)===n?0:Number(s))<Number(t)},UT=(s,t,e,i,n,o)=>{s.forEach(r=>{(Eu(i,e,o,"max")||Number(r.textContent)>t&&Number(i)===Number(e))&&(g.addClass(r,n.tipsDisabled),r.setAttribute(Ko,""))})},XT=(s,t,e,i,n,o)=>{s.forEach(r=>{(Eu(i,e,o,"min")||Number(r.textContent)<t&&Number(i)===Number(e))&&(g.addClass(r,n.tipsDisabled),r.setAttribute(Ko,""))})},GT=s=>s.startsWith("0")?Number(s.slice(1)):Number(s),Zs="timepicker",W=`data-te-${Zs}`,xu="[data-te-toggle]",Go=`te.${Zs}`,fe=`.${Go}`,_e=".data-api",Cu=`click${fe}${_e}`,qo=`keydown${fe}${_e}`,Au=`mousedown${fe}${_e}`,wu=`mouseup${fe}${_e}`,ku=`mousemove${fe}${_e}`,Su=`mouseleave${fe}${_e}`,Ou=`mouseover${fe}${_e}`,Iu=`touchmove${fe}${_e}`,Du=`touchend${fe}${_e}`,Mu=`touchstart${fe}${_e}`,qT=`[${W}-am]`,ZT=`[${W}-pm]`,QT=`[${W}-format24]`,Zo=`[${W}-current]`,Qo=`[${W}-hour-mode]`,JT=`[${W}-toggle-button]`,Cl=`${W}-cancel`,Lu=`${W}-clear`,Al=`${W}-submit`,tE=`${W}-icon`,wl=`${W}-icon-up`,kl=`${W}-icon-down`,eE=`${W}-icon-inline-hour`,iE=`${W}-icon-inline-minute`,$u=`${W}-inline-hour-icons`,sE=`${W}-current-inline`,nE="readonly",oE=`${W}-invalid-feedback`,Sl=`${W}-is-invalid`,Xe=`${W}-disabled`,J=`${W}-active`,rE=`${W}-input`,wi=`${W}-clock`,Qs=`${W}-clock-inner`,Ol=`${W}-wrapper`,Ru=`${W}-clock-wrapper`,Jo=`${W}-hour`,Il=`${W}-minute`,tr=`${W}-tips-element`,_t=`${W}-tips-hours`,xt=`${W}-tips-minutes`,Bt=`${W}-tips-inner`,er=`${W}-tips-inner-element`,Pu=`${W}-middle-dot`,Dl=`${W}-hand-pointer`,Ml=`${W}-circle`,Nu=`${W}-modal`,aE={appendValidationInfo:!0,bodyID:"",cancelLabel:"Cancel",clearLabel:"Clear",closeModalOnBackdropClick:!0,closeModalOnMinutesClick:!1,container:"body",defaultTime:"",disabled:!1,disablePast:!1,disableFuture:!1,enableValidation:!0,focusInputAfterApprove:!1,footerID:"",format12:!0,format24:!1,headID:"",increment:!1,inline:!1,invalidLabel:"Invalid Time Format",maxTime:"",minTime:"",modalID:"",okLabel:"Ok",overflowHidden:!0,pickerID:"",readOnly:!1,showClearBtn:!0,switchHoursToMinutesOnClick:!0,iconSVG:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z" />
+</svg>`,withIcon:!0,pmLabel:"PM",amLabel:"AM",animations:!0},lE={appendValidationInfo:"boolean",bodyID:"string",cancelLabel:"string",clearLabel:"string",closeModalOnBackdropClick:"boolean",closeModalOnMinutesClick:"boolean",container:"string",disabled:"boolean",disablePast:"boolean",disableFuture:"boolean",enableValidation:"boolean",footerID:"string",format12:"boolean",format24:"boolean",headID:"string",increment:"boolean",inline:"boolean",invalidLabel:"string",modalID:"string",okLabel:"string",overflowHidden:"boolean",pickerID:"string",readOnly:"boolean",showClearBtn:"boolean",switchHoursToMinutesOnClick:"boolean",defaultTime:"(string|date|number)",iconSVG:"string",withIcon:"boolean",pmLabel:"string",amLabel:"string",animations:"boolean"},cE={tips:"absolute rounded-[100%] w-[32px] h-[32px] text-center cursor-pointer text-[1.1rem] rounded-[100%] bg-transparent flex justify-center items-center font-light focus:outline-none selection:bg-transparent",tipsActive:"text-white bg-[#3b71ca] font-normal",tipsDisabled:"text-[#b3afaf] pointer-events-none bg-transparent",transform:"transition-[transform,height] ease-in-out duration-[400ms]",modal:"z-[1065]",clockAnimation:"animate-[show-up-clock_350ms_linear]",opacity:"!opacity-100",timepickerWrapper:"touch-none opacity-100 z-[1065] inset-0 bg-[#00000066] h-full flex items-center justify-center flex-col fixed",timepickerContainer:"flex items-center justify-center flex-col max-h-[calc(100%-64px)] overflow-y-auto shadow-[0_10px_15px_-3px_rgba(0,0,0,0.07),0_4px_6px_-2px_rgba(0,0,0,0.05)] min-[320px]:max-[825px]:landscape:rounded-lg",timepickerElements:"flex flex-col min-w-[310px] min-h-[325px] bg-white rounded-t-[0.6rem] min-[320px]:max-[825px]:landscape:!flex-row min-[320px]:max-[825px]:landscape:min-w-[auto] min-[320px]:max-[825px]:landscape:min-h-[auto] min-[320px]:max-[825px]:landscape:overflow-y-auto justify-around",timepickerHead:"bg-[#3b71ca] dark:bg-zinc-700 h-[100px] rounded-t-lg pr-[24px] pl-[50px] py-[10px] min-[320px]:max-[825px]:landscape:rounded-tr-none min-[320px]:max-[825px]:landscape:rounded-bl-none min-[320px]:max-[825px]:landscape:p-[10px] min-[320px]:max-[825px]:landscape:pr-[10px] min-[320px]:max-[825px]:landscape:h-auto min-[320px]:max-[825px]:landscape:min-h-[305px] flex flex-row items-center justify-center",timepickerHeadContent:"min-[320px]:max-[825px]:landscape:flex-col flex w-full justify-evenly",timepickerCurrentWrapper:"[direction:ltr] rtl:[direction:rtl]",timepickerCurrentButtonWrapper:"relative h-full",timepickerCurrentButton:"text-[3.75rem] font-light leading-[1.2] tracking-[-0.00833em] text-white opacity-[.54] border-none bg-transparent p-0 min-[320px]:max-[825px]:landscape:text-5xl min-[320px]:max-[825px]:landscape:font-normal cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none ",timepickerDot:"font-light leading-[1.2] tracking-[-0.00833em] text-[3.75rem] opacity-[.54] border-none bg-transparent p-0 text-white min-[320px]:max-[825px]:landscape:text-[3rem] min-[320px]:max-[825px]:landscape:font-normal",timepickerModeWrapper:"flex flex-col justify-center text-[18px] text-[#ffffff8a] min-[320px]:max-[825px]:landscape:!justify-around min-[320px]:max-[825px]:landscape:!flex-row",timepickerModeAm:"p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none",timepickerModePm:"p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none",timepickerClockWrapper:"min-w-[310px] max-w-[325px] min-h-[305px] overflow-x-hidden h-full flex justify-center flex-col items-center dark:bg-zinc-500",timepickerClock:"relative rounded-[100%] w-[260px] h-[260px] cursor-default my-0 mx-auto bg-[#00000012] dark:bg-zinc-600/50",timepickerMiddleDot:"top-1/2 left-1/2 w-[6px] h-[6px] -translate-y-1/2 -translate-x-1/2 rounded-[50%] bg-[#3b71ca] absolute",timepickerHandPointer:"bg-[#3b71ca] bottom-1/2 h-2/5 left-[calc(50%-1px)] rtl:!left-auto origin-[center_bottom_0] rtl:!origin-[50%_50%_0] w-[2px] absolute",timepickerPointerCircle:"-top-[21px] -left-[15px] w-[4px] border-[14px] border-solid border-[#3b71ca] h-[4px] box-content rounded-[100%] absolute",timepickerClockInner:"absolute top-1/2 left-1/2 -translate-y-1/2 -translate-x-1/2 w-[160px] h-[160px] rounded-[100%]",timepickerFooterWrapper:"rounded-b-lg flex justify-between items-center w-full h-[56px] px-[12px] bg-white dark:bg-zinc-500",timepickerFooter:"w-full flex justify-between",timepickerFooterButton:"text-[0.8rem] min-w-[64px] box-border font-medium leading-[40px] rounded-[10px] tracking-[0.1rem] uppercase text-[#3b71ca] dark:text-white border-none bg-transparent transition-[background-color,box-shadow,border] duration-[250ms] ease-[cubic-bezier(0.4,0,0.2,1)] delay-[0ms] outline-none py-0 px-[10px] h-[40px] mb-[10px] hover:bg-[#00000014] focus:bg-[#00000014] focus:outline-none",timepickerInlineWrapper:"touch-none opacity-100 z-[1065] inset-0 bg-[#00000066] h-full flex items-center justify-center flex-col rounded-lg",timepickerInlineContainer:"flex items-center justify-center flex-col max-h-[calc(100%-64px)] overflow-y-auto shadow-[0_10px_15px_-3px_rgba(0,0,0,0.07),0_4px_6px_-2px_rgba(0,0,0,0.05)]",timepickerInlineElements:"flex flex-col min-h-[auto] min-w-[310px] bg-white rounded-[0.6rem] min-[320px]:max-[825px]:landscape:!flex-row min-[320px]:max-[825px]:landscape:rounded-bl-lg min-[320px]:max-[825px]:landscape:min-w-[auto] min-[320px]:max-[825px]:landscape::min-h-[auto] min-[320px]:max-[825px]:landscape:overflow-y-auto justify-around",timepickerInlineHead:"bg-[#3b71ca] dark:bg-zinc-700 h-[100px] rounded-t-lg min-[320px]:max-[825px]:landscape:rounded-tr-none min-[320px]:max-[825px]:landscape:rounded-bl-none min-[320px]:max-[825px]:landscape:p-[10px] min-[320px]:max-[825px]:landscape:pr-[10px] min-[320px]:max-[825px]:landscape:h-auto min-[320px]:max-[825px]:landscape:min-h-[305px] flex flex-row items-center justify-center p-0 rounded-b-lg",timepickerInlineHeadContent:"min-[320px]:max-[825px]:landscape:flex-col flex w-full justify-evenly items-center",timepickerInlineHourWrapper:"relative h-full !opacity-100",timepickerCurrentMinuteWrapper:"relative h-full",timepickerInlineIconUp:"absolute text-white -top-[35px] opacity-0 hover:opacity-100 transition-all duration-200 ease-[ease] cursor-pointer -translate-x-1/2 -translate-y-1/2 left-1/2 w-[30px] h-[30px] flex justify-center items-center",timepickerInlineIconSvg:"h-4 w-4",timepickerInlineCurrentButton:"font-light leading-[1.2] tracking-[-0.00833em] text-white border-none bg-transparent p-0 min-[320px]:max-[825px]:landscape:text-5xl min-[320px]:max-[825px]:landscape:font-normal !opacity-100 cursor-pointer focus:bg-[#00000026] hover:outline-none focus:outline-none text-[2.5rem] hover:bg-[unset]",timepickerInlineIconDown:"absolute text-white -bottom-[47px] opacity-0 hover:opacity-100 transition-all duration-200 ease-[ease] cursor-pointer -translate-x-1/2 -translate-y-1/2 left-1/2 w-[30px] h-[30px] flex justify-center items-center",timepickerInlineDot:"font-light leading-[1.2] tracking-[-0.00833em] opacity-[.54] border-none bg-transparent p-0 text-white min-[320px]:max-[825px]:landscape:text-[3rem] min-[320px]:max-[825px]:landscape:font-normal text-[2.5rem]",timepickerInlineModeWrapper:"flex justify-center text-[18px] text-[#ffffff8a] min-[320px]:max-[825px]:landscape:!justify-around min-[320px]:max-[825px]:landscape:!flex-row",timepickerInlineModeAm:"hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer mr-2 ml-6",timepickerInlineModePm:"hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer",timepickerInlineSubmitButton:"hover:bg-[#00000014] focus:bg-[#00000014] focus:outline-none text-[0.8rem] box-border font-medium leading-[40px] tracking-[.1rem] uppercase border-none bg-transparent [transition:background-color_250ms_cubic-bezier(0.4,0,0.2,1)_0ms,box-shadow_250ms_cubic-bezier(0.4,0,0.2,1)_0ms,border_250ms_cubic-bezier(0.4,0,0.2,1)_0ms] outline-none rounded-[100%] h-[48px] min-w-[48px] inline-block ml-[30px] text-white py-1 px-2 mb-0",timepickerToggleButton:"h-4 w-4 ml-auto absolute outline-none border-none bg-transparent right-1.5 top-1/2 -translate-x-1/2 -translate-y-1/2 transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)] cursor-pointer hover:text-[#3b71ca] focus:text-[#3b71ca] dark:hover:text-[#3b71ca] dark:focus:text-[#3b71ca] dark:text-white"},hE={tips:"string",tipsActive:"string",tipsDisabled:"string",transform:"string",modal:"string",clockAnimation:"string",opacity:"string",timepickerWrapper:"string",timepickerContainer:"string",timepickerElements:"string",timepickerHead:"string",timepickerHeadContent:"string",timepickerCurrentWrapper:"string",timepickerCurrentButtonWrapper:"string",timepickerCurrentButton:"string",timepickerDot:"string",timepickerModeWrapper:"string",timepickerModeAm:"string",timepickerModePm:"string",timepickerClockWrapper:"string",timepickerClock:"string",timepickerMiddleDot:"string",timepickerHandPointer:"string",timepickerPointerCircle:"string",timepickerClockInner:"string",timepickerFooterWrapper:"string",timepickerFooterButton:"string",timepickerInlineWrapper:"string",timepickerInlineContainer:"string",timepickerInlineElements:"string",timepickerInlineHead:"string",timepickerInlineHeadContent:"string",timepickerInlineHourWrapper:"string",timepickerCurrentMinuteWrapper:"string",timepickerInlineIconUp:"string",timepickerInlineIconSvg:"string",timepickerInlineCurrentButton:"string",timepickerInlineIconDown:"string",timepickerInlineDot:"string",timepickerInlineModeWrapper:"string",timepickerInlineModeAm:"string",timepickerInlineModePm:"string",timepickerInlineSubmitButton:"string",timepickerToggleButton:"string"};class Ll{constructor(t,e={},i){ke(this,"_toggleAmPm",t=>{t==="PM"?(this._isPmEnabled=!0,this._isAmEnabled=!1):t==="AM"&&(this._isPmEnabled=!1,this._isAmEnabled=!0)});ke(this,"_toggleBackgroundColorCircle",t=>{if(this._modal.querySelector(`${t}[${J}]`)!==null){g.addStyle(this._circle,{backgroundColor:"#1976d2"});return}g.addStyle(this._circle,{backgroundColor:"transparent"})});ke(this,"_toggleClassActive",(t,{textContent:e},i)=>{const n=[...t].find(o=>Number(o)===Number(e));return i.forEach(o=>{if(!o.hasAttribute(Xe)){if(o.textContent===n){g.addClass(o,this._classes.tipsActive),o.setAttribute(J,"");return}g.removeClass(o,this._classes.tipsActive),o.removeAttribute(J)}})});ke(this,"_makeMinutesDegrees",(t,e)=>{const{increment:i}=this._options;return t<0?(e=Math.round(360+t/6)%60,t=360+Math.round(t/6)*6):(e=Math.round(t/6)%60,t=Math.round(t/6)*6),i&&(t=Math.round(t/30)*30,e=Math.round(t/6)*6/6,e===60&&(e="00")),t>=360&&(t=0),{degrees:t,minute:e,addDegrees:i?30:6}});ke(this,"_makeHourDegrees",(t,e,i)=>{if(t)return this._hasTargetInnerClass(t)?e<0?(i=Math.round(360+e/30)%24,e=360+e):(i=Math.round(e/30)+12,i===12&&(i="00")):e<0?(i=Math.round(360+e/30)%12,e=360+e):(i=Math.round(e/30)%12,(i===0||i>12)&&(i=12)),e>=360&&(e=0),{degrees:e,hour:i,addDegrees:30}});ke(this,"_makeInnerHoursDegrees",(t,e)=>(t<0?(e=Math.round(360+t/30)%24,t=360+t):(e=Math.round(t/30)+12,e===12&&(e="00")),{degrees:t,hour:e,addDegrees:30}));ke(this,"_getAppendClock",(t=[],e=`[${wi}]`,i)=>{let{minTime:n,maxTime:o}=this._options;const{inline:r,format12:a,disablePast:l,disableFuture:c}=this._options;n=Ke(n,l,a),o=Ue(o,c,a);const[h,d,u]=j(o,!1),[p,f,b]=j(n,!1);!r&&a&&this._isInvalidTimeFormat&&!this._AM.hasAttribute(J)&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,""));const v=m.findOne(e),y=360/t.length;function T(A){return A*(Math.PI/180)}if(v===null)return;const x=(v.offsetWidth-32)/2,E=(v.offsetHeight-32)/2,C=x-4;setTimeout(()=>{let A;a&&(A=m.findOne(`${Qo}[${J}]`).textContent),this._handleDisablingTipsMinTime(A,b,f,p),this._handleDisablingTipsMaxTime(A,u,d,h)},0),[...t].forEach((A,w)=>{const S=T(w*y),k=$("span"),D=$("span");D.innerHTML=A,g.addClass(k,this._classes.tips),k.setAttribute(i,"");const I=k.offsetWidth,M=k.offsetHeight;return g.addStyle(k,{left:`${x+Math.sin(S)*C-I}px`,bottom:`${E+Math.cos(S)*C-M}px`}),t.includes("05")&&k.setAttribute(xt,""),t.includes("13")?D.setAttribute(er,""):D.setAttribute(tr,""),k.appendChild(D),v.appendChild(k)})});this._element=t,this._element&&O.setData(t,Go,this),this._document=document,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._currentTime=null,this._toggleButtonId=bt("timepicker-toggle-"),this.hoursArray=["12","1","2","3","4","5","6","7","8","9","10","11"],this.innerHours=["00","13","14","15","16","17","18","19","20","21","22","23"],this.minutesArray=["00","05","10","15","20","25","30","35","40","45","50","55"],this.input=m.findOne("input",this._element),this.dataWithIcon=t.dataset.withIcon,this.dataToggle=t.dataset.toggle,this.customIcon=m.findOne(JT,this._element),this._checkToggleButton(),this.inputFormatShow=m.findOne(QT,this._element),this.inputFormat=this.inputFormatShow===null?"":Object.values(this.inputFormatShow.dataset)[0],this.elementToggle=m.findOne(xu,this._element),this.toggleElement=Object.values(t.querySelector(xu).dataset)[0],this._hour=null,this._minutes=null,this._AM=null,this._PM=null,this._wrapper=null,this._modal=null,this._hand=null,this._circle=null,this._focusTrap=null,this._popper=null,this._interval=null,this._timeoutInterval=null,this._inputValue=this._options.defaultTime!==""?this._options.defaultTime:this.input.value,this._options.format24&&(this._options.format12=!1,this._currentTime=gu(this._inputValue)),this._options.format12&&(this._options.format24=!1,this._currentTime=Ai(this._inputValue)),this._options.readOnly&&this.input.setAttribute(nE,!0),this.inputFormat==="true"&&this.inputFormat!==""&&(this._options.format12=!1,this._options.format24=!0,this._currentTime=gu(this._inputValue)),this._animations=!window.matchMedia("(prefers-reduced-motion: reduce)").matches&&this._options.animations,this.init(),this._isHours=!0,this._isMinutes=!1,this._isInvalidTimeFormat=!1,this._isMouseMove=!1,this._isInner=!1,this._isAmEnabled=!1,this._isPmEnabled=!1,this._options.format12&&!this._options.defaultTime&&(this._isPmEnabled=!0),this._objWithDataOnChange={degrees:null},this._scrollBar=new Qi}static get NAME(){return Zs}init(){const{format12:t,format24:e,enableValidation:i}=this._options;let n,o,r;if(this.input.setAttribute(rE,""),this._currentTime!==void 0){const{hours:a,minutes:l,amOrPm:c}=this._currentTime;n=Number(a)<10?0:"",o=`${n}${Number(a)}:${l}`,r=c,t?this.input.value=`${o} ${r}`:e&&(this.input.value=`${o}`)}else n="",o="",r="",this.input.value="";this.input.value.length>0&&this.input.value!==""&&(this.input.setAttribute(J,""),_.trigger(this.input,"input")),!(this._options===null&&this._element===null)&&(i&&this._getValidate("keydown change blur focus"),this._handleOpen(),this._listenToToggleKeydown())}dispose(){this._removeModal(),this._element!==null&&O.removeData(this._element,Go),setTimeout(()=>{this._element=null,this._options=null,this.input=null,this._focusTrap=null},350),_.off(this._element,"click",`[data-te-toggle='${this.toggleElement}']`),_.off(this._element,"keydown",`[data-te-toggle='${this.toggleElement}']`)}update(t={}){this._options=this._getConfig({...this._options,...t})}_checkToggleButton(){this.customIcon===null&&(this.dataWithIcon!==void 0&&(this._options.withIcon=null,this.dataWithIcon==="true"&&this._appendToggleButton(this._options)),this._options.withIcon&&this._appendToggleButton(this._options))}_appendToggleButton(){const t=jT(this._options,this._toggleButtonId,this._classes);this.input.insertAdjacentHTML("afterend",t)}_getDomElements(){this._hour=m.findOne(`[${Jo}]`),this._minutes=m.findOne(`[${Il}]`),this._AM=m.findOne(qT),this._PM=m.findOne(ZT),this._wrapper=m.findOne(`[${Ol}]`),this._modal=m.findOne(`[${Nu}]`),this._hand=m.findOne(`[${Dl}]`),this._circle=m.findOne(`[${Ml}]`),this._clock=m.findOne(`[${wi}]`),this._clockInner=m.findOne(`[${Qs}]`)}_handlerMaxMinHoursOptions(t,e,i,n,o,r){if(!e&&!i)return!0;const{format24:a,format12:l,disablePast:c,disableFuture:h}=this._options,{_isAmEnabled:d,_isPmEnabled:u}=this,p=r.keyCode,f=r.target.hasAttribute(Qs)||r.target.hasAttribute(Bt)||r.target.hasAttribute(er);i=Ke(i,c,l),e=Ue(e,h,l),typeof e!="number"&&(e=j(e,!1)[0]);const b=e!==""?e*30:"",v=i!==""?i*30:"";t<0&&(t=360+t),t=t===360?0:t;const y=()=>{const w=document.querySelectorAll(`[${tr}]`),S=document.querySelectorAll(`[${er}]`),k=GT(this._hour.innerText);let D,I,M;return p===ut?I=1:p===ht&&(I=-1),k===12&&p===ut?M=1:k===0&&p===ut?M=13:k===0&&p===ht?M=23:k===13&&p===ht?M=0:k===1&&p===ht?M=12:M=k+I,w.forEach(P=>{Number(P.textContent)===M&&(D=P)}),S.forEach(P=>{Number(P.textContent)===M&&(D=P)}),!D.parentElement.hasAttribute(Xe)},T=()=>{const w=i!==""&&i>12?(i-12)*30:"",S=e!==""&&e>12?(e-12)*30:"";if(!(w&&t<w||S&&t>S||e&&e<12))return!0};if(a&&r.type!=="keydown"&&f)return T();if(r.type==="keydown")return y();const x=!o||o==="PM"&&u||i!==""&&o==="AM"&&d,E=!n||n==="PM"&&u||e!==""&&n==="AM"&&d,C=()=>{const w=v===360&&l?0:v;if(i){if(o==="PM"&&d||x&&t<w)return}else return!0;return!0},A=()=>{const w=b===360&&l?0:b;if(e){if(n==="AM"&&u||E&&t>w)return}else return!0;return!0};return C()&&A()}_handleKeyboard(){_.on(this._document,qo,"",t=>{let e,i,n;const{increment:o,maxTime:r,minTime:a,format12:l,disablePast:c,disableFuture:h}=this._options;let d=j(a,!1)[0],u=j(r,!1)[0];const p=j(a,!1)[2],f=j(r,!1)[2];d=Ke(d,c,l),u=Ue(u,h,l),typeof u!="number"&&(u=j(u,!1)[0]);const b=m.findOne(`[${xt}]`)===null,v=m.findOne(`[${Bt}]`)!==null,y=Number(this._hand.style.transform.replace(/[^\d-]/g,"")),T=m.find(`[${xt}]`,this._modal),x=m.find(`[${_t}]`,this._modal),E=m.find(`[${Bt}]`,this._modal);let C=this._makeHourDegrees(t.target,y,e).hour;const{degrees:A,addDegrees:w}=this._makeHourDegrees(t.target,y,e);let{minute:S,degrees:k}=this._makeMinutesDegrees(y,i);const D=this._makeMinutesDegrees(y,i).addDegrees;let{hour:I}=this._makeInnerHoursDegrees(y,n);if(t.keyCode===xi){const M=m.findOne(`[${Cl}]`,this._modal);_.trigger(M,"click")}else if(b){if(v&&(t.keyCode===hs&&(this._isInner=!1,g.addStyle(this._hand,{height:"calc(40% + 1px)"}),this._hour.textContent=this._setHourOrMinute(C>12?1:C),this._toggleClassActive(this.hoursArray,this._hour,x),this._toggleClassActive(this.innerHours,this._hour,E)),t.keyCode===cs&&(this._isInner=!0,g.addStyle(this._hand,{height:"21.5%"}),this._hour.textContent=this._setHourOrMinute(I>=24||I==="00"?0:I),this._toggleClassActive(this.innerHours,this._hour,E),this._toggleClassActive(this.hoursArray,this._hour-1,x))),t.keyCode===ut){if(!this._handlerMaxMinHoursOptions(A+30,u,d,f,p,t))return;g.addStyle(this._hand,{transform:`rotateZ(${A+w}deg)`}),this._isInner?(I+=1,I===24?I=0:(I===25||I==="001")&&(I=13),this._hour.textContent=this._setHourOrMinute(I),this._toggleClassActive(this.innerHours,this._hour,E)):(C+=1,this._hour.textContent=this._setHourOrMinute(C>12?1:C),this._toggleClassActive(this.hoursArray,this._hour,x))}if(t.keyCode===ht){if(!this._handlerMaxMinHoursOptions(A-30,u,d,f,p,t))return;g.addStyle(this._hand,{transform:`rotateZ(${A-w}deg)`}),this._isInner?(I-=1,I===12?I=0:I===-1&&(I=23),this._hour.textContent=this._setHourOrMinute(I),this._toggleClassActive(this.innerHours,this._hour,E)):(C-=1,this._hour.textContent=this._setHourOrMinute(C===0?12:C),this._toggleClassActive(this.hoursArray,this._hour,x))}}else t.keyCode===ut&&(k+=D,g.addStyle(this._hand,{transform:`rotateZ(${k}deg)`}),S+=1,o&&(S+=4,S==="0014"&&(S=5)),this._minutes.textContent=this._setHourOrMinute(S>59?0:S),this._toggleClassActive(this.minutesArray,this._minutes,T),this._toggleBackgroundColorCircle(`[${xt}]`)),t.keyCode===ht&&(k-=D,g.addStyle(this._hand,{transform:`rotateZ(${k}deg)`}),o?S-=5:S-=1,S===-1?S=59:S===-5&&(S=55),this._minutes.textContent=this._setHourOrMinute(S),this._toggleClassActive(this.minutesArray,this._minutes,T),this._toggleBackgroundColorCircle(`[${xt}]`))})}_setActiveClassToTipsOnOpen(t,...e){if(!this._isInvalidTimeFormat)if(this._options.format24){const i=m.find(`[${_t}]`,this._modal),n=m.find(`[${Bt}]`,this._modal);this._addActiveClassToTip(i,t),this._addActiveClassToTip(n,t)}else{[...e].filter(n=>(n.toLowerCase()==="pm"?(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,"")):n.toLowerCase()==="am"?(g.addClass(this._AM,this._classes.opacity),this._AM.setAttribute(J,"")):(g.removeClass(this._AM,this._classes.opacity),g.removeClass(this._PM,this._classes.opacity),this._AM.removeAttribute(J),this._PM.removeAttribute(J)),n));const i=m.find(`[${_t}]`,this._modal);this._addActiveClassToTip(i,t)}}_setTipsAndTimesDependOnInputValue(t,e){const{inline:i,format12:n}=this._options;if(this._isInvalidTimeFormat)this._hour.textContent="12",this._minutes.textContent="00",i||g.addStyle(this._hand,{transform:"rotateZ(0deg)"}),n&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,""));else{const o=t>12?t*30-360:t*30;this._hour.textContent=t,this._minutes.textContent=e,i||(g.addStyle(this._hand,{transform:`rotateZ(${o}deg)`}),g.addStyle(this._circle,{backgroundColor:"#1976d2"}),(Number(t)>12||t==="00")&&g.addStyle(this._hand,{height:"21.5%"}))}}_listenToToggleKeydown(){_.on(this._element,"keydown",`[data-te-toggle='${this.toggleElement}']`,t=>{t.keyCode===Et&&(t.preventDefault(),_.trigger(this.elementToggle,"click"))})}_handleOpen(){const t=this._getContainer();ct.on(this._element,"click",`[data-te-toggle='${this.toggleElement}']`,e=>{if(this._options===null)return;const i=g.getDataAttribute(this.input,"toggle")!==null?200:0;setTimeout(()=>{g.addStyle(this.elementToggle,{pointerEvents:"none"}),this.elementToggle.blur();let n;j(this.input)[0]===""?n=["12","00","PM"]:n=j(this.input);const{modalID:o,inline:r,format12:a}=this._options,[l,c,h]=n,d=$("div");if((Number(l)>12||l==="00")&&(this._isInner=!0),this.input.blur(),e.target.blur(),d.innerHTML=zT(this._options,this._classes),g.addClass(d,this._classes.modal),d.setAttribute(Nu,""),d.setAttribute("role","dialog"),d.setAttribute("tabIndex","-1"),d.setAttribute("id",o),r?(this._popper=Fe(this.input,d,{placement:"bottom-start"}),t.appendChild(d)):(t.appendChild(d),this._scrollBar.hide()),this._getDomElements(),this._animations?this._toggleBackdropAnimation():g.addClass(this._wrapper,this._classes.opacity),this._setActiveClassToTipsOnOpen(l,c,h),this._appendTimes(),this._setActiveClassToTipsOnOpen(l,c,h),this._setTipsAndTimesDependOnInputValue(l,c),this.input.value===""){const u=m.find(`[${_t}]`,this._modal);a&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,"")),this._hour.textContent="12",this._minutes.textContent="00",this._addActiveClassToTip(u,Number(this._hour.textContent))}if(this._handleSwitchTimeMode(),this._handleOkButton(),this._handleClose(),r)this._handleHoverInlineBtn(),this._handleDocumentClickInline(),this._handleInlineClicks();else{this._handleSwitchHourMinute(),this._handleClockClick(),this._handleKeyboard();const u=document.querySelector(`${Zo}[${J}]`);g.addClass(u,this._classes.opacity),g.addStyle(this._hour,{pointerEvents:"none"}),g.addStyle(this._minutes,{pointerEvents:""})}this._focusTrap=new Vs(this._wrapper,{event:"keydown",condition:({key:u})=>u==="Tab"}),this._focusTrap.trap()},i)})}_handleInlineClicks(){let t,e;const i=p=>{let f=p;return f>59?f=0:f<0&&(f=59),f},n=p=>{let f=p;return this._options.format24?(f>24?f=1:f<0&&(f=23),f>23&&(f=0)):(f>12?f=1:f<1&&(f=12),f>12&&(f=1)),f},o=p=>{const f=n(p);this._hour.textContent=this._setHourOrMinute(f)},r=p=>{const f=i(p);this._minutes.textContent=this._setHourOrMinute(f)},a=()=>{t=n(t)+1,o(t)},l=()=>{e=i(e)+1,r(e)},c=()=>{t=n(t)-1,o(t)},h=()=>{e=i(e)-1,r(e)},d=()=>{clearInterval(this._interval),clearTimeout(this._timeoutInterval)},u=p=>{d(),this._timeoutInterval=setTimeout(()=>{this._interval=setInterval(p,100)},500)};ct.on(this._modal,"click mousedown mouseup touchstart touchend contextmenu",`[${wl}], [${kl}]`,p=>{t=Number(this._hour.textContent),e=Number(this._minutes.textContent);const{target:f,type:b}=p,v=b==="mousedown"||b==="touchstart";f.closest(`[${wl}]`)?f.closest(`[${wl}]`).parentNode.hasAttribute($u)?v?u(a):b==="mouseup"||b==="touchend"||b==="contextmenu"?d():a():v?u(l):b==="mouseup"||b==="touchend"||b==="contextmenu"?d():l():f.closest(`[${kl}]`)&&(f.closest(`[${kl}]`).parentNode.hasAttribute($u)?v?u(c):b==="mouseup"||b==="touchend"?d():c():v?u(h):b==="mouseup"||b==="touchend"?d():h())}),_.on(window,qo,p=>{const f=p.code,b=document.activeElement.hasAttribute(Jo),v=document.activeElement.hasAttribute(Il),y=document.activeElement===document.body;switch(t=Number(this._hour.textContent),e=Number(this._minutes.textContent),f){case"ArrowUp":p.preventDefault(),y||b?(this._hour.focus(),a()):v&&l();break;case"ArrowDown":p.preventDefault(),y||b?(this._hour.focus(),c()):v&&h();break}})}_handleClose(){_.on(this._modal,"click",`[${Ol}], [${Cl}], [${Lu}]`,({target:t})=>{const{closeModalOnBackdropClick:e}=this._options,i=()=>{var n;g.addStyle(this.elementToggle,{pointerEvents:"auto"}),this._animations&&this._toggleBackdropAnimation(!0),this._removeModal(),(n=this._focusTrap)==null||n.disable(),this._focusTrap=null,this.elementToggle?this.elementToggle.focus():this.input&&this.input.focus()};if(t.hasAttribute(Lu)){this._toggleAmPm("PM"),this.input.value="",this.input.removeAttribute(J);let n;j(this.input)[0]===""?n=["12","00","PM"]:n=j(this.input);const[o,r,a]=n;this._setTipsAndTimesDependOnInputValue("12","00"),this._setActiveClassToTipsOnOpen(o,r,a),this._hour.click()}else(t.hasAttribute(Cl)||t.hasAttribute(Al)||t.hasAttribute(Ol)&&e)&&i()})}showValueInput(){return this.input.value}_handleOkButton(){ct.on(this._modal,"click",`[${Al}]`,()=>{let{maxTime:t,minTime:e}=this._options;const{format12:i,format24:n,readOnly:o,focusInputAfterApprove:r,disablePast:a,disableFuture:l}=this._options,c=this._document.querySelector(`${Qo}[${J}]`),h=`${this._hour.textContent}:${this._minutes.textContent}`,d=Number(this._hour.textContent),u=d===12&&i?0:d,p=Number(this._minutes.textContent);e=Ke(e,a,i),t=Ue(t,l,i);let[f,b,v]=j(t,!1),[y,T,x]=j(e,!1);y=y==="12"&&i?"00":y,f=f==="12"&&i?"00":f;const E=u<Number(y),C=u>Number(f);let A=!0;c&&(A=v===c.textContent);let w=!0;c&&(w=x===c.textContent);const S=p>b&&u===Number(f),k=p<T&&u===Number(y);if(this.input.setAttribute(J,""),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),t!==""){if(A&&(C||S))return;if(v==="AM"&&c.textContent==="PM")return}e!==""&&(w&&(E||k)||x==="PM"&&c.textContent==="AM")||KT(this._options,this.input,this._hour.textContent)!==void 0&&(this._isInvalidTimeFormat&&this.input.removeAttribute(Sl),!o&&r&&this.input.focus(),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),n?this.input.value=h:c===null?this.input.value=`${h} PM`:this.input.value=`${h} ${c.textContent}`,this._animations&&this._toggleBackdropAnimation(!0),this._removeModal(),_.trigger(this.input,"input.te.timepicker"),_.trigger(this.input,"input"))})}_handleHoverInlineBtn(){ct.on(this._modal,"mouseover mouseleave",`[${sE}]`,({type:t,target:e})=>{const i=m.find(`[${eE}]`,this._modal),n=m.find(`[${iE}]`,this._modal),o=(l,c)=>l.forEach(h=>{if(c){g.addClass(h,this._classes.opacity),h.setAttribute(J,"");return}g.removeClass(h,this._classes.opacity),h.removeAttribute(J)}),a=e.hasAttribute(Jo)?i:n;o(a,t==="mouseover")})}_handleDocumentClickInline(){_.on(document,Cu,({target:t})=>{if(this._modal&&!this._modal.contains(t)&&!t.hasAttribute(tE)){if(clearInterval(this._interval),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),this._removeModal(),!this._animations)return;this._toggleBackdropAnimation(!0)}})}_handleSwitchHourMinute(){YT("click",Zo,this._classes),_.on(this._modal,"click",Zo,()=>{const{format24:t}=this._options,e=m.find(Zo,this._modal),i=m.find(`[${xt}]`,this._modal),n=m.find(`[${_t}]`,this._modal),o=m.find(`[${Bt}]`,this._modal),r=Number(this._hour.textContent),a=Number(this._minutes.textContent),l=(c,h)=>{n.forEach(u=>u.remove()),i.forEach(u=>u.remove()),g.addClass(this._hand,this._classes.transform),setTimeout(()=>{g.removeClass(this._hand,this._classes.transform)},401),this._getAppendClock(c,`[${wi}]`,h);const d=()=>{const u=m.find(`[${_t}]`,this._modal),p=m.find(`[${xt}]`,this._modal);this._addActiveClassToTip(u,r),this._addActiveClassToTip(p,a)};if(!t)setTimeout(()=>{d()},401);else{const u=m.find(`[${Bt}]`,this._modal);setTimeout(()=>{this._addActiveClassToTip(u,r),d()},401)}};e.forEach(c=>{c.hasAttribute(J)&&(c.hasAttribute(Il)?(g.addClass(this._hand,this._classes.transform),g.addStyle(this._hand,{transform:`rotateZ(${this._minutes.textContent*6}deg)`,height:"calc(40% + 1px)"}),t&&o.length>0&&o.forEach(h=>h.remove()),l(this.minutesArray,xt),this._hour.style.pointerEvents="",this._minutes.style.pointerEvents="none"):c.hasAttribute(Jo)&&(g.addStyle(this._hand,{transform:`rotateZ(${this._hour.textContent*30}deg)`}),Number(this._hour.textContent)>12?(g.addStyle(this._hand,{transform:`rotateZ(${this._hour.textContent*30-360}deg)`,height:"21.5%"}),Number(this._hour.textContent)>12&&g.addStyle(this._hand,{height:"21.5%"})):g.addStyle(this._hand,{height:"calc(40% + 1px)"}),t&&this._getAppendClock(this.innerHours,`[${Qs}]`,Bt),o.length>0&&o.forEach(h=>h.remove()),l(this.hoursArray,_t),g.addStyle(this._hour,{pointerEvents:"none"}),g.addStyle(this._minutes,{pointerEvents:""})))})})}_handleDisablingTipsMaxTime(t,e,i,n){if(!this._options.maxTime&&!this._options.disableFuture)return;const o=m.find(`[${_t}]`),r=m.find(`[${Bt}]`),a=m.find(`[${xt}]`);if(!e||e===t){yu(r,n,this._classes,this._options.format12),yu(o,n,this._classes,this._options.format12),UT(a,i,n,this._hour.textContent,this._classes,this._options.format12);return}e==="AM"&&t==="PM"&&(o.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}),a.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}))}_handleDisablingTipsMinTime(t,e,i,n){if(!this._options.minTime&&!this._options.disablePast)return;const o=m.find(`[${_t}]`),r=m.find(`[${Bt}]`),a=m.find(`[${xt}]`);!e||e===t?(Tu(o,n,this._classes,this._options.format12),Tu(r,n,this._classes,this._options.format12),XT(a,i,n,this._hour.textContent,this._classes,this._options.format12)):e==="PM"&&t==="AM"&&(o.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}),a.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}))}_handleSwitchTimeMode(){_.on(document,"click",Qo,({target:t})=>{let{maxTime:e,minTime:i}=this._options;const{disablePast:n,disableFuture:o,format12:r}=this._options;i=Ke(i,n,r),e=Ue(e,o,r);const[a,l,c]=j(e,!1),[h,d,u]=j(i,!1),p=m.find(`[${_t}]`),f=m.find(`[${xt}]`);(()=>{p.forEach(v=>{g.removeClass(v,this._classes.tipsDisabled),v.removeAttribute(Xe)}),f.forEach(v=>{g.removeClass(v,this._classes.tipsDisabled),v.removeAttribute(Xe)})})(),this._handleDisablingTipsMinTime(t.textContent,u,d,h),this._handleDisablingTipsMaxTime(t.textContent,c,l,a),this._toggleAmPm(t.textContent),t.hasAttribute(J)||(m.find(Qo).forEach(y=>{y.hasAttribute(J)&&(g.removeClass(y,this._classes.opacity),y.removeAttribute(J))}),g.addClass(t,this._classes.opacity),t.setAttribute(J,""))})}_handleClockClick(){let{maxTime:t,minTime:e}=this._options;const{disablePast:i,disableFuture:n,format12:o}=this._options;e=Ke(e,i,o),t=Ue(t,n,o);const r=j(t,!1)[2],a=j(e,!1)[2],l=j(t,!1)[0],c=j(e,!1)[0],h=m.findOne(`[${Ru}]`);ct.on(document,`${Au} ${wu} ${ku} ${Su} ${Ou} ${Mu} ${Iu} ${Du}`,"",d=>{Xo()||d.preventDefault();const{type:u,target:p}=d,{closeModalOnMinutesClick:f,switchHoursToMinutesOnClick:b}=this._options,v=m.findOne(`[${xt}]`,this._modal)!==null,y=m.findOne(`[${_t}]`,this._modal)!==null,T=m.findOne(`[${Bt}]`,this._modal)!==null,x=m.find(`[${xt}]`,this._modal),E=mu(d,h),C=h.offsetWidth/2;let A=Math.atan2(E.y-C,E.x-C);if(Xo()){const D=mu(d,h,!0);A=Math.atan2(D.y-C,D.x-C)}let w=null,S=null,k=null;if(u==="mousedown"||u==="mousemove"||u==="touchmove"||u==="touchstart")(u==="mousedown"||u==="touchstart"||u==="touchmove")&&(this._hasTargetInnerClass(p)||p.hasAttribute(Ru)||p.hasAttribute(wi)||p.hasAttribute(xt)||p.hasAttribute(_t)||p.hasAttribute(Ml)||p.hasAttribute(Dl)||p.hasAttribute(Pu)||p.hasAttribute(tr))&&(this._isMouseMove=!0,Xo()&&d.touches&&(w=d.touches[0].clientX,S=d.touches[0].clientY,k=document.elementFromPoint(w,S)));else if(u==="mouseup"||u==="touchend"){if(this._isMouseMove=!1,this._hasTargetInnerClass(p)||p.hasAttribute(wi)||p.hasAttribute(_t)||p.hasAttribute(Ml)||p.hasAttribute(Dl)||p.hasAttribute(Pu)||p.hasAttribute(tr)){if((y||T)&&b){const D=Number(this._hour.textContent)>l||Number(this._hour.textContent)<c;if(this._options.format24&&l!==""&&c!==""&&D)return;if(this._options.format24&&c!==""&&Number(this._hour.textContent)<c)return}_.trigger(this._minutes,"click")}if(v&&f){const D=m.findOne(`[${Al}]`,this._modal);_.trigger(D,"click")}}if(v){let D;const I=Math.trunc(A*180/Math.PI)+90,{degrees:M,minute:P}=this._makeMinutesDegrees(I,D);if(this._handlerMaxMinMinutesOptions(M,P)===void 0)return;const{degrees:X,minute:R}=this._handlerMaxMinMinutesOptions(M,P);if(this._isMouseMove){if(g.addStyle(this._hand,{transform:`rotateZ(${X}deg)`}),R===void 0)return;const z=()=>R>=10||R==="00"?R:`0${R}`;this._minutes.textContent=z(),this._toggleClassActive(this.minutesArray,this._minutes,x),this._toggleBackgroundColorCircle(`[${xt}]`),this._objWithDataOnChange.degreesMinutes=X,this._objWithDataOnChange.minutes=R}}if(y||T){let D,I=Math.trunc(A*180/Math.PI)+90;if(I=Math.round(I/30)*30,g.addStyle(this._circle,{backgroundColor:"#1976d2"}),this._makeHourDegrees(p,I,D)===void 0)return;const M=()=>{if(Xo()&&I&&k){const{degrees:P,hour:X}=this._makeHourDegrees(k,I,D);return this._handleMoveHand(k,X,P)}else{const{degrees:P,hour:X}=this._makeHourDegrees(p,I,D);return this._handleMoveHand(p,X,P)}};this._objWithDataOnChange.degreesHours=I,this._handlerMaxMinHoursOptions(I,l,c,r,a,d)&&M()}d.stopPropagation()})}_hasTargetInnerClass(t){return t.hasAttribute(Qs)||t.hasAttribute(Bt)||t.hasAttribute(er)}_handleMoveHand(t,e,i){const n=m.find(`[${_t}]`,this._modal),o=m.find(`[${Bt}]`,this._modal);this._isMouseMove&&(this._hasTargetInnerClass(t)?g.addStyle(this._hand,{height:"21.5%"}):g.addStyle(this._hand,{height:"calc(40% + 1px)"}),g.addStyle(this._hand,{transform:`rotateZ(${i}deg)`}),this._hour.textContent=e>=10||e==="00"?e:`0${e}`,this._toggleClassActive(this.hoursArray,this._hour,n),this._toggleClassActive(this.innerHours,this._hour,o),this._objWithDataOnChange.hour=e>=10||e==="00"?e:`0${e}`)}_handlerMaxMinMinutesOptions(t,e){let{maxTime:i,minTime:n}=this._options;const{format12:o,increment:r,disablePast:a,disableFuture:l}=this._options;n=Ke(n,a,o),i=Ue(i,l,o);const c=j(i,!1)[1],h=j(n,!1)[1],d=j(i,!1)[0],u=j(n,!1)[0],p=u==="12"&&o?"0":u,f=d==="12"&&o?"0":d,b=j(i,!1)[2],v=j(n,!1)[2],y=c!==""?c*6:"",T=h!==""?h*6:"",x=Number(this._hour.textContent),E=x===12&&o?0:x;if(!b&&!v){if(i!==""&&n!==""){if(Number(f)===E&&t>y||Number(p)===E&&t<T)return t}else if(n!==""&&E<=Number(p)){if(t<=T-6)return t}else if(i!==""&&E>=Number(f)&&t>=y+6)return t}else{if(n!==""){if(v==="PM"&&this._isAmEnabled)return;if(v==="PM"&&this._isPmEnabled){if(E<Number(p))return;if(E<=Number(p)&&t<=T-6)return t}else if(v==="AM"&&this._isAmEnabled){if(E<Number(p))return;if(E<=Number(p)&&t<=T-6)return t}}if(i!==""){if(b==="AM"&&this._isPmEnabled)return;if(b==="PM"&&this._isPmEnabled){if(E>=Number(f)&&t>=y+6)return t}else if(b==="AM"&&this._isAmEnabled&&E>=Number(f)&&t>=y+6)return t}}return r&&(t=Math.round(t/30)*30),t<0?t=360+t:t>=360&&(t=0),{degrees:t,minute:e}}_removeModal(){this._animations?setTimeout(()=>{this._removeModalElements(),this._scrollBar.reset()},300):(this._removeModalElements(),this._scrollBar.reset()),ct.off(this._document,`${Cu} ${qo} ${Au} ${wu} ${ku} ${Su} ${Ou} ${Mu} ${Iu} ${Du}`),_.off(window,qo)}_removeModalElements(){this._modal&&this._modal.remove()}_toggleBackdropAnimation(t=!1){t?this._wrapper.classList.add("animate-[fade-out_350ms_ease-in-out]"):(this._wrapper.classList.add("animate-[fade-in_350ms_ease-in-out]"),this._options.inline||g.addClass(this._clock,this._classes.clockAnimation)),setTimeout(()=>{this._wrapper.classList.remove("animate-[fade-out_350ms_ease-in-out]","animate-[fade-in_350ms_ease-in-out]")},351)}_addActiveClassToTip(t,e){t.forEach(i=>{Number(i.textContent)===Number(e)&&(g.addClass(i,this._classes.tipsActive),i.setAttribute(J,""))})}_setHourOrMinute(t){return t<10?`0${t}`:t}_appendTimes(){const{format24:t}=this._options;if(t){this._getAppendClock(this.hoursArray,`[${wi}]`,_t),this._getAppendClock(this.innerHours,`[${Qs}]`,Bt);return}this._getAppendClock(this.hoursArray,`[${wi}]`,_t)}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...aE,...e,...t},L(Zs,t,lE),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cE,...e,...t},L(Zs,t,hE),t}_getContainer(){return m.findOne(this._options.container)}_getValidate(t){const{format24:e,format12:i,appendValidationInfo:n}=this._options;ct.on(this.input,t,({target:o})=>{if(this._options===null||this.input.value==="")return;const r=/^(0?[1-9]|1[012])(:[0-5]\d) [APap][mM]$/,a=/^([01]\d|2[0-3])(:[0-5]\d)$/,l=r.test(o.value);if(a.test(o.value)!==!0&&e||l!==!0&&i){n&&this.input.setAttribute(Sl,""),g.addStyle(o,{marginBottom:0}),this._isInvalidTimeFormat=!0;return}this.input.removeAttribute(Sl),this._isInvalidTimeFormat=!1;const h=m.findOne(`[${oE}]`);h!==null&&h.remove()})}static getInstance(t){return O.getData(t,Go)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const dE={threshold:10,direction:"all"};let uE=class{constructor(t,e){this._element=t,this._startPosition=null,this._options={...dE,...e}}handleTouchStart(t){this._startPosition=this._getCoordinates(t)}handleTouchMove(t){if(!this._startPosition)return;const e=this._getCoordinates(t),i={x:e.x-this._startPosition.x,y:e.y-this._startPosition.y},n=this._getDirection(i);if(this._options.direction==="all"){if(n.y.value<this._options.threshold&&n.x.value<this._options.threshold)return;const r=n.y.value>n.x.value?n.y.direction:n.x.direction;_.trigger(this._element,`swipe${r}`),_.trigger(this._element,"swipe",{direction:r}),this._startPosition=null;return}const o=this._options.direction==="left"||this._options==="right"?"x":"y";n[o].direction===this._options.direction&&n[o].value>this._options.threshold&&(_.trigger(this._element,`swipe${n[o].direction}`),this._startPosition=null)}handleTouchEnd(){this._startPosition=null}_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection(t){return{x:{direction:t.x<0?"left":"right",value:Math.abs(t.x)},y:{direction:t.y<0?"up":"down",value:Math.abs(t.y)}}}},pE=class{constructor(t,e="swipe",i={}){this._element=t,this._event=e,this.swipe=new uE(t,i),this._touchStartHandler=this._handleTouchStart.bind(this),this._touchMoveHandler=this._handleTouchMove.bind(this),this._touchEndHandler=this._handleTouchEnd.bind(this)}dispose(){this._element.removeEventListener("touchstart",this._touchStartHandler),this._element.removeEventListener("touchmove",this._touchMoveHandler),window.removeEventListener("touchend",this._touchEndHandler)}init(){this._element.addEventListener("touchstart",t=>this._handleTouchStart(t)),this._element.addEventListener("touchmove",t=>this._handleTouchMove(t)),window.addEventListener("touchend",t=>this._handleTouchEnd(t))}_handleTouchStart(t){this[this._event].handleTouchStart(t)}_handleTouchMove(t){this[this._event].handleTouchMove(t)}_handleTouchEnd(t){this[this._event].handleTouchEnd(t)}};const $l="stepper",ir="te.stepper",ds=`.${ir}`,Js=`data-te-${$l}`,tn="horizontal",ge="vertical",fE=`onChangeStep${ds}`,_E=`onChangedStep${ds}`,gE={stepperType:"string",stepperLinear:"boolean",stepperNoEditable:"boolean",stepperActive:"string",stepperCompleted:"string",stepperInvalid:"string",stepperDisabled:"string",stepperVerticalBreakpoint:"number",stepperMobileBreakpoint:"number",stepperMobileBarBreakpoint:"number",stepperAnimationDuration:"number",slideInLeftAnimation:"string",slideOutLeftAnimation:"string",slideInRightAnimation:"string",slideOutRightAnimation:"string"},mE={stepperType:tn,stepperLinear:!1,stepperNoEditable:!1,stepperActive:"",stepperCompleted:"",stepperInvalid:"",stepperDisabled:"",stepperVerticalBreakpoint:0,stepperMobileBreakpoint:0,stepperMobileBarBreakpoint:4,stepperAnimationDuration:800,slideInLeftAnimation:"animate-[slide-in-left_0.8s_both]",slideOutLeftAnimation:"animate-[slide-out-left_0.8s_both]",slideInRightAnimation:"animate-[slide-in-right_0.8s_both]",slideOutRightAnimation:"animate-[slide-out-right_0.8s_both]"},Bu=`mousedown${ds}`,Hu=`keydown${ds}`,bE=`keyup${ds}`,Vu=`resize${ds}`,Ge=`[${Js}-step-ref]`,Ct=`[${Js}-head-ref]`,Fu=`[${Js}-head-text-ref]`,sr=`[${Js}-head-icon-ref]`,At=`[${Js}-content-ref]`;class Wu{constructor(t,e){this._element=t,this._options=this._getConfig(e),this._elementHeight=0,this._steps=m.find(`${Ge}`,this._element),this._currentView="",this._activeStepIndex=0,this._verticalStepperStyles=[],this._timeout=0,this._element&&(O.setData(t,ir,this),this._init())}static get NAME(){return $l}get activeStep(){return this._steps[this._activeStepIndex]}get activeStepIndex(){return this._activeStepIndex}dispose(){this._steps.forEach(t=>{_.off(t,Bu),_.off(t,Hu)}),_.off(window,Vu),O.removeData(this._element,ir),this._element=null}changeStep(t){this._toggleStep(t)}nextStep(){this._toggleStep(this._activeStepIndex+1)}previousStep(){this._toggleStep(this._activeStepIndex-1)}_init(){const t=m.find(`${Ge}`,this._element)[this._activeStepIndex].setAttribute("data-te","active-step"),e=m.find(`${Fu}`,this._element),i=m.find(`${sr}`,this._element);switch(t?(this._activeStepIndex=this._steps.indexOf(t),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperActive),e[this._activeStepIndex].classList.add("font-medium"),i[this._activeStepIndex].classList.add("!bg-primary-100"),i[this._activeStepIndex].classList.add("!text-primary-700")):(e[this._activeStepIndex].classList.add("font-medium"),i[this._activeStepIndex].classList.add("!bg-primary-100"),i[this._activeStepIndex].classList.add("!text-primary-700"),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperActive)),this._bindMouseDown(),this._bindKeysNavigation(),this._options.stepperType){case ge:this._toggleVertical();break;default:this._toggleHorizontal();break}(this._options.stepperVerticalBreakpoint||this._options.stepperMobileBreakpoint)&&this._toggleStepperView(),this._bindResize()}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...mE,...e,...t},L($l,t,gE),t}_bindMouseDown(){this._steps.forEach(t=>{const e=m.findOne(`${Ct}`,t);_.on(e,Bu,i=>{const n=m.parents(i.target,`${Ge}`)[0],o=this._steps.indexOf(n);i.preventDefault(),this._toggleStep(o)})})}_bindResize(){_.on(window,Vu,()=>{this._currentView===ge&&this._setSingleStepHeight(this.activeStep),this._currentView===tn&&this._setHeight(this.activeStep),(this._options.stepperVerticalBreakpoint||this._options.stepperMobileBreakpoint)&&this._toggleStepperView()})}_toggleStepperView(){const t=this._options.stepperVerticalBreakpoint<window.innerWidth,e=this._options.stepperVerticalBreakpoint>window.innerWidth,i=this._options.stepperMobileBreakpoint>window.innerWidth;t&&this._currentView!==tn&&this._toggleHorizontal(),e&&!i&&this._currentView!==ge&&(this._steps.forEach(n=>{const o=m.findOne(`${At}`,n);this._resetStepperHeight(),this._showElement(o)}),this._toggleVertical())}_toggleStep(t){if(this._activeStepIndex===t)return;this._options.stepperNoEditable&&this._toggleDisabled();const e=this._activeStepIndex,i=_.trigger(this.activeStep,fE,{currentStep:this._activeStepIndex,nextStep:t});t>this._activeStepIndex&&i.defaultPrevented||(this._showElement(m.findOne(`${At}`,this._steps[t])),this._toggleActive(t),t>this._activeStepIndex&&this._toggleCompleted(this._activeStepIndex),this._currentView===tn?this._animateHorizontalStep(t):(this._animateVerticalStep(t),this._setSingleStepHeight(this._steps[t])),this._toggleStepTabIndex(m.findOne(`${Ct}`,this.activeStep),m.findOne(`${Ct}`,this._steps[t])),this._activeStepIndex=t,this._steps[this._activeStepIndex].setAttribute("data-te","active-step"),this._steps.forEach((n,o)=>{n[this._activeStepIndex]!==o&&n.removeAttribute("data-te")}),_.trigger(this.activeStep,_E,{currentStep:this._activeStepIndex,prevStep:e}))}_resetStepperHeight(){this._element.style.height=""}_setStepsHeight(){this._steps.forEach(t=>{const e=m.findOne(`${At}`,t),i=window.getComputedStyle(e);this._verticalStepperStyles.push({paddingTop:parseFloat(i.paddingTop),paddingBottom:parseFloat(i.paddingBottom)});const n=e.scrollHeight;e.style.height=`${n}px`})}_setSingleStepHeight(t){const e=m.findOne(`${At}`,t),i=this.activeStep===t,n=this._steps.indexOf(t);let o;i?(e.style.height="",o=e.scrollHeight):o=e.scrollHeight+this._verticalStepperStyles[n].paddingTop+this._verticalStepperStyles[n].paddingBottom,e.style.height=`${o}px`}_toggleVertical(){this._currentView=ge,this._setStepsHeight(),this._hideInactiveSteps()}_toggleHorizontal(){this._currentView=tn,this._setHeight(this.activeStep),this._hideInactiveSteps()}_toggleStepperClass(){m.findOne("[data-te-stepper-type]",this._element)!==null&&this._steps.forEach(e=>{m.findOne(`${At}`,e).classList.remove("!my-0"),m.findOne(`${At}`,e).classList.remove("!py-0"),m.findOne(`${At}`,e).classList.remove("!h-0")})}_toggleStepClass(t,e,i){i&&this._steps[t].classList[e](i)}_bindKeysNavigation(){this._toggleStepTabIndex(!1,m.findOne(`${Ct}`,this.activeStep)),this._steps.forEach(t=>{const e=m.findOne(`${Ct}`,t);_.on(e,Hu,i=>{const n=m.parents(i.currentTarget,`${Ge}`)[0],o=m.next(n,`${Ge}`)[0],r=m.prev(n,`${Ge}`)[0],a=m.findOne(`${Ct}`,n),l=m.findOne(`${Ct}`,this.activeStep);let c=null,h=null;if(o&&(c=m.findOne(`${Ct}`,o)),r&&(h=m.findOne(`${Ct}`,r)),i.keyCode===cs&&this._currentView!==ge&&(h?(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus()):c&&(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus())),i.keyCode===hs&&this._currentView!==ge&&(c?(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus()):h&&(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus())),i.keyCode===ht&&this._currentView===ge&&(i.preventDefault(),c&&(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus())),i.keyCode===ut&&this._currentView===ge&&(i.preventDefault(),h&&(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus())),i.keyCode===Ti){const d=m.findOne(`${Ct}`,this._steps[0]);this._toggleStepTabIndex(a,d),this._toggleOutlineStyles(a,d),d.focus()}if(i.keyCode===Ei){const d=this._steps[this._steps.length-1],u=m.findOne(`${Ct}`,d);this._toggleStepTabIndex(a,u),this._toggleOutlineStyles(a,u),u.focus()}(i.keyCode===Et||i.keyCode===Ho)&&(i.preventDefault(),this.changeStep(this._steps.indexOf(n))),i.keyCode===Ci&&(this._toggleStepTabIndex(a,l),this._toggleOutlineStyles(a,!1),l.focus())}),_.on(e,bE,i=>{const n=m.parents(i.currentTarget,`${Ge}`)[0],o=m.findOne(`${Ct}`,n),r=m.findOne(`${Ct}`,this.activeStep);i.keyCode===Ci&&(this._toggleStepTabIndex(o,r),this._toggleOutlineStyles(!1,r),r.focus())})})}_toggleStepTabIndex(t,e){t&&t.setAttribute("tabIndex",-1),e&&e.setAttribute("tabIndex",0)}_toggleOutlineStyles(t,e){t&&(t.style.outline=""),e&&(e.style.outline="revert")}_toggleDisabled(){const t=m.find(`${Ct}`,this._element),e=m.find(`${sr}`,this._element);t[this._activeStepIndex].classList.add("color-[#858585]"),t[this._activeStepIndex].classList.add("cursor-default"),e[this._activeStepIndex].classList.add("!bg-[#858585]"),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperDisabled)}_toggleActive(t){const e=m.find(`${Fu}`,this._element),i=m.find(`${sr}`,this._element);e[t].classList.add("font-medium"),i[t].classList.add("!bg-primary-100"),i[t].classList.add("!text-primary-700"),i[t].classList.remove("!bg-success-100"),i[t].classList.remove("!text-success-700"),e[this._activeStepIndex].classList.remove("font-medium"),i[this._activeStepIndex].classList.remove("!bg-primary-100"),i[this._activeStepIndex].classList.remove("!text-primary-700"),this._toggleStepClass(t,"add",this._options.stepperActive),this._toggleStepClass(this._activeStepIndex,"remove",this._options.stepperActive)}_toggleCompleted(t){const e=m.find(`${sr}`,this._element);this._options.stepperNoEditable?this._steps[t].classList.add("pointer-events-none"):(e[t].classList.add("!bg-success-100"),e[t].classList.add("!text-success-700")),e[t].classList.remove("!bg-danger-100"),e[t].classList.remove("!text-danger-700"),this._toggleStepClass(t,"add",this._options.stepperCompleted),this._toggleStepClass(t,"remove",this._options.stepperInvalid)}_hideInactiveSteps(){this._steps.forEach(t=>{if(!t.getAttribute("data-te")){const e=m.findOne(`${At}`,t);e.classList.remove("translate-x-[150%]"),this._hideElement(e)}})}_setHeight(t){const e=m.findOne(`${At}`,t),i=getComputedStyle(e),n=m.findOne(`${Ct}`,t),o=getComputedStyle(n),r=e.offsetHeight+parseFloat(i.marginTop)+parseFloat(i.marginBottom),a=n.offsetHeight+parseFloat(o.marginTop)+parseFloat(o.marginBottom);this._element.style.height=`${a+r}px`}_hideElement(t){!m.parents(t,`${Ge}`)[0].getAttribute("data-te")&&this._currentView!==ge?t.style.display="none":(t.classList.add("!my-0"),t.classList.add("!py-0"),t.classList.add("!h-0"))}_showElement(t){this._currentView===ge?(t.classList.remove("!my-0"),t.classList.remove("!py-0"),t.classList.remove("!h-0")):t.style.display="block"}_animateHorizontalStep(t){clearTimeout(this._timeout),this._clearStepsAnimation();const e=t>this._activeStepIndex,i=m.findOne(`${At}`,this._steps[t]),n=m.findOne(`${At}`,this.activeStep);let o,r;this._steps.forEach((a,l)=>{const c=m.findOne(`${At}`,a);l!==t&&l!==this._activeStepIndex&&this._hideElement(c)}),e?(r=this._options.slideOutLeftAnimation,o=this._options.slideInRightAnimation):(r=this._options.slideOutRightAnimation,o=this._options.slideInLeftAnimation),n.classList.add(r),i.classList.add(o),this._setHeight(this._steps[t]),this._timeout=setTimeout(()=>{this._hideElement(n),this._clearStepsAnimation()},this._options.stepperAnimationDuration)}_clearStepsAnimation(){this._steps.forEach(t=>{m.findOne(`${At}`,t).classList.remove(this._options.slideInLeftAnimation,this._options.slideOutLeftAnimation,this._options.slideInRightAnimation,this._options.slideOutRightAnimation)})}_animateVerticalStep(t){const e=m.findOne(`${At}`,this._steps[t]),i=m.findOne(`${At}`,this.activeStep);this._hideElement(i),this._showElement(e)}static getInstance(t){return O.getData(t,ir)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zu="data-te-input-state-active",nr="data-te-input-selected",ju="data-te-input-multiple-active",Yu="[data-te-form-check-input]";class Ku{constructor(t,e,i,n,o,r,a,l,c,h,d){this.id=t,this.nativeOption=e,this.multiple=i,this.value=n,this.label=o,this.selected=r,this.disabled=a,this.hidden=l,this.secondaryText=c,this.groupId=h,this.icon=d,this.node=null,this.active=!1}select(){this.multiple?this._selectMultiple():this._selectSingle()}_selectSingle(){this.selected||(this.node.setAttribute(nr,""),this.node.setAttribute("aria-selected",!0),this.selected=!0,this.nativeOption&&(this.nativeOption.selected=!0))}_selectMultiple(){if(!this.selected){const t=m.findOne(Yu,this.node);t.checked=!0,this.node.setAttribute(nr,""),this.node.setAttribute("aria-selected",!0),this.selected=!0,this.nativeOption&&(this.nativeOption.selected=!0)}}deselect(){this.multiple?this._deselectMultiple():this._deselectSingle()}_deselectSingle(){this.selected&&(this.node.removeAttribute(nr),this.node.setAttribute("aria-selected",!1),this.selected=!1,this.nativeOption&&(this.nativeOption.selected=!1))}_deselectMultiple(){if(this.selected){const t=m.findOne(Yu,this.node);t.checked=!1,this.node.removeAttribute(nr),this.node.setAttribute("aria-selected",!1),this.selected=!1,this.nativeOption&&(this.nativeOption.selected=!1)}}setNode(t){this.node=t}setActiveStyles(){if(!this.active){if(this.multiple){this.node.setAttribute(ju,"");return}this.active=!0,this.node.setAttribute(zu,"")}}removeActiveStyles(){this.active&&(this.active=!1,this.node.removeAttribute(zu)),this.multiple&&this.node.removeAttribute(ju)}}class vE{constructor(t=!1){this._multiple=t,this._selections=[]}select(t){this._multiple?this._selections.push(t):this._selections=[t]}deselect(t){if(this._multiple){const e=this._selections.findIndex(i=>t===i);this._selections.splice(e,1)}else this._selections=[]}clear(){this._selections=[]}get selection(){return this._selections[0]}get selections(){return this._selections}get label(){return this._selections[0]&&this.selection.label}get labels(){return this._selections.map(t=>t.label).join(", ")}get value(){return this.selections[0]&&this.selection.value}get values(){return this._selections.map(t=>t.value)}}function Rl(s){return s.filter(t=>!t.disabled).every(t=>t.selected)}const yE="data-te-select-form-outline-ref",TE="data-te-select-wrapper-ref",EE="data-te-select-input-ref",xE="data-te-select-clear-btn-ref",CE="data-te-select-dropdown-container-ref",AE="data-te-select-dropdown-ref",wE="data-te-select-options-wrapper-ref",kE="data-te-select-options-list-ref",SE="data-te-select-input-filter-ref",Uu="data-te-select-option-ref",OE="data-te-select-option-all-ref",IE="data-te-select-option-text-ref",DE="data-te-form-check-input",ME="data-te-select-option-group-ref",LE="data-te-select-option-group-label-ref",Xu="data-te-select-selected",$E=`
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+</svg>
+`,RE=s=>{s.code==="Tab"||s.code==="Esc"||s.preventDefault()};function or(s,t,e,i,n){t.selectSize==="default"&&g.addClass(s,e),t.selectSize==="sm"&&g.addClass(s,i),t.selectSize==="lg"&&g.addClass(s,n)}function PE(s,t,e,i,n){const o=document.createElement("div");o.setAttribute("id",s),o.setAttribute(TE,"");const r=$("div");r.setAttribute(yE,""),g.addClass(r,i.formOutline);const a=$("input"),l=t.selectFilter?"combobox":"listbox",c=t.multiple?"true":"false",h=t.disabled?"true":"false";a.setAttribute(EE,""),g.addClass(a,i.selectInput),or(a,t,i.selectInputSizeDefault,i.selectInputSizeSm,i.selectInputSizeLg),t.selectFormWhite&&g.addClass(a,i.selectInputWhite),a.setAttribute("type","text"),a.setAttribute("role",l),a.setAttribute("aria-multiselectable",c),a.setAttribute("aria-disabled",h),a.setAttribute("aria-haspopup","true"),a.setAttribute("aria-expanded",!1),t.tabIndex&&a.setAttribute("tabIndex",t.tabIndex),t.disabled&&a.setAttribute("disabled",""),t.selectPlaceholder!==""&&a.setAttribute("placeholder",t.selectPlaceholder),t.selectValidation?(g.addStyle(a,{"pointer-events":"none","caret-color":"transparent"}),g.addStyle(r,{cursor:"pointer"})):a.setAttribute("readonly","true"),t.selectValidation&&(a.setAttribute("required","true"),a.setAttribute("aria-required","true"),a.addEventListener("keydown",RE));const d=$("div");g.addClass(d,i.selectValidationValid);const u=document.createTextNode(`${t.selectValidFeedback}`);d.appendChild(u);const p=$("div");g.addClass(p,i.selectValidationInvalid);const f=document.createTextNode(`${t.selectInvalidFeedback}`);p.appendChild(f);const b=$("span");b.setAttribute(xE,""),g.addClass(b,i.selectClearBtn),or(b,t,i.selectClearBtnDefault,i.selectClearBtnSm,i.selectClearBtnLg),t.selectFormWhite&&g.addClass(b,i.selectClearBtnWhite);const v=document.createTextNode("✕");b.appendChild(v),b.setAttribute("tabindex","0");const y=$("span");return g.addClass(y,i.selectArrow),or(y,t,i.selectArrowDefault,i.selectArrowSm,i.selectArrowLg),t.selectFormWhite&&g.addClass(y,i.selectArrowWhite),y.innerHTML=n||$E,r.appendChild(a),e&&(g.addClass(e,i.selectLabel),or(e,t,i.selectLabelSizeDefault,i.selectLabelSizeSm,i.selectLabelSizeLg),t.selectFormWhite&&g.addClass(e,i.selectLabelWhite),r.appendChild(e)),t.selectValidation&&(r.appendChild(d),r.appendChild(p)),t.selectClearButton&&r.appendChild(b),r.appendChild(y),o.appendChild(r),o}function Gu(s,t,e,i,n,o,r,a){const l=document.createElement("div");l.setAttribute(CE,""),g.addClass(l,a.selectDropdownContainer),l.setAttribute("id",`${s}`),l.style.width=`${e}px`;const c=document.createElement("div");c.setAttribute("tabindex",0),c.setAttribute(AE,""),g.addClass(c,a.dropdown);const h=$("div");h.setAttribute(wE,""),g.addClass(h,a.optionsWrapper),g.addClass(h,a.optionsWrapperScrollbar),h.style.maxHeight=`${i}px`;const d=qu(o,n,t,a);return h.appendChild(d),t.selectFilter&&c.appendChild(NE(t.selectSearchPlaceholder,a)),c.appendChild(h),r&&c.appendChild(r),l.appendChild(c),l}function qu(s,t,e,i){const n=$("div");n.setAttribute(kE,""),g.addClass(n,i.optionsList);let o;return e.multiple?o=HE(s,t,e,i):o=BE(s,e,i),o.forEach(r=>{n.appendChild(r)}),n}function NE(s,t){const e=$("div");g.addClass(e,t.inputGroup);const i=$("input");return i.setAttribute(SE,""),g.addClass(i,t.selectFilterInput),i.placeholder=s,i.setAttribute("role","searchbox"),i.setAttribute("type","text"),e.appendChild(i),e}function BE(s,t,e){return Zu(s,t,e)}function HE(s,t,e,i){let n=null;e.selectAll&&(n=VE(t,s,e,i));const o=Zu(s,e,i);return n?[n,...o]:o}function Zu(s,t,e){const i=[];return s.forEach(n=>{if(Object.prototype.hasOwnProperty.call(n,"options")){const r=jE(n,t,e);i.push(r)}else i.push(Qu(n,t,e))}),i}function VE(s,t,e,i){const n=Rl(t),o=$("div");o.setAttribute(Uu,"");const r=i.selectAllOption||i.selectOption;return g.addClass(o,r),o.setAttribute(OE,""),g.addStyle(o,{height:`${e.selectOptionHeight}px`}),o.setAttribute("role","option"),o.setAttribute("aria-selected",n),n&&o.setAttribute(Xu,""),o.appendChild(Ju(s,e,i)),s.setNode(o),o}function Qu(s,t,e){if(s.node)return s.node;const i=$("div");return i.setAttribute(Uu,""),g.addClass(i,e.selectOption),g.addStyle(i,{height:`${t.selectOptionHeight}px`}),g.setDataAttribute(i,"id",s.id),i.setAttribute("role","option"),i.setAttribute("aria-selected",s.selected),i.setAttribute("aria-disabled",s.disabled),s.selected&&i.setAttribute(Xu,""),s.disabled&&i.setAttribute("data-te-select-option-disabled",!0),s.hidden&&g.addClass(i,"hidden"),i.appendChild(Ju(s,t,e)),s.icon&&i.appendChild(zE(s,e)),s.setNode(i),i}function Ju(s,t,e){const i=$("span");i.setAttribute(IE,""),g.addClass(i,e.selectOptionText);const n=document.createTextNode(s.label);return t.multiple&&i.appendChild(WE(s,e)),i.appendChild(n),(s.secondaryText||typeof s.secondaryText=="number")&&i.appendChild(FE(s.secondaryText,e)),i}function FE(s,t){const e=$("span");g.addClass(e,t.selectOptionSecondaryText);const i=document.createTextNode(s);return e.appendChild(i),e}function WE(s,t){const e=$("input");e.setAttribute("type","checkbox"),g.addClass(e,t.formCheckInput),e.setAttribute(DE,"");const i=$("label");return s.selected&&e.setAttribute("checked",!0),s.disabled&&e.setAttribute("disabled",!0),e.appendChild(i),e}function zE(s,t){const e=$("span"),i=$("img");return g.addClass(i,t.selectOptionIcon),i.src=s.icon,e.appendChild(i),e}function jE(s,t,e){const i=$("div");i.setAttribute(ME,""),g.addClass(i,e.selectOptionGroup),i.setAttribute("role","group"),i.setAttribute("id",s.id),s.hidden&&g.addClass(i,"hidden");const n=$("label");return n.setAttribute(LE,""),g.addClass(n,e.selectOptionGroupLabel),g.addStyle(n,{height:`${t.selectOptionHeight}px`}),n.setAttribute("for",s.id),n.textContent=s.label,i.appendChild(n),s.options.forEach(o=>{i.appendChild(Qu(o,t,e))}),i}function YE(s,t){const e=$("div");return e.textContent=s,g.addClass(e,t.selectLabel),g.addClass(e,t.selectFakeValue),e}const Pl="select",en="te.select",sn=`.${en}`,KE=`close${sn}`,UE=`open${sn}`,tp=`optionSelect${sn}`,ep=`optionDeselect${sn}`,XE=`valueChange${sn}`,GE="change",ip="data-te-select-init",sp="data-te-select-no-results-ref",np="data-te-select-open",wt="data-te-input-state-active",qe="data-te-input-focused",Nl="data-te-input-disabled",qE="data-te-select-option-group-label-ref",ZE="data-te-select-option-all-ref",nn="data-te-select-selected",QE="[data-te-select-label-ref]",op="[data-te-select-input-ref]",JE="[data-te-select-input-filter-ref]",tx="[data-te-select-dropdown-ref]",ex="[data-te-select-options-wrapper-ref]",rp="[data-te-select-options-list-ref]",ix="[data-te-select-option-ref]",sx="[data-te-select-clear-btn-ref]",nx="[data-te-select-custom-content-ref]",ox=`[${sp}]`,ap="[data-te-select-form-outline-ref]",rx="[data-te-select-toggle]",Bl="[data-te-input-notch-ref]",ax={selectAutoSelect:!1,selectContainer:"body",selectClearButton:!1,disabled:!1,selectDisplayedLabels:5,selectFormWhite:!1,multiple:!1,selectOptionsSelectedLabel:"options selected",selectOptionHeight:38,selectAll:!0,selectAllLabel:"Select all",selectSearchPlaceholder:"Search...",selectSize:"default",selectVisibleOptions:5,selectFilter:!1,selectFilterDebounce:300,selectNoResultText:"No results",selectValidation:!1,selectValidFeedback:"Valid",selectInvalidFeedback:"Invalid",selectPlaceholder:""},lx={selectAutoSelect:"boolean",selectContainer:"string",selectClearButton:"boolean",disabled:"boolean",selectDisplayedLabels:"number",selectFormWhite:"boolean",multiple:"boolean",selectOptionsSelectedLabel:"string",selectOptionHeight:"number",selectAll:"boolean",selectAllLabel:"string",selectSearchPlaceholder:"string",selectSize:"string",selectVisibleOptions:"number",selectFilter:"boolean",selectFilterDebounce:"number",selectNoResultText:"string",selectValidation:"boolean",selectValidFeedback:"string",selectInvalidFeedback:"string",selectPlaceholder:"string"},cx={dropdown:"relative outline-none min-w-[100px] m-0 scale-y-[0.8] opacity-0 bg-white shadow-[0_2px_5px_0_rgba(0,0,0,0.16),_0_2px_10px_0_rgba(0,0,0,0.12)] transition duration-200 motion-reduce:transition-none data-[te-select-open]:scale-100 data-[te-select-open]:opacity-100 dark:bg-zinc-700",formCheckInput:"relative float-left mt-[0.15rem] mr-[8px] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 dark:border-neutral-600 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary dark:checked:border-primary checked:bg-primary dark:checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:ml-[0.25rem] checked:after:-mt-px checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-t-0 checked:after:border-l-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:ml-[0.25rem] checked:focus:after:-mt-px checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-t-0 checked:focus:after:border-l-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent",formOutline:"relative",initialized:"hidden",inputGroup:"flex items-center whitespace-nowrap p-2.5 text-center text-base font-normal leading-[1.6] text-gray-700 dark:bg-zinc-800 dark:text-gray-200 dark:placeholder:text-gray-200",noResult:"flex items-center px-4",optionsList:"list-none m-0 p-0",optionsWrapper:"overflow-y-auto",optionsWrapperScrollbar:"[&::-webkit-scrollbar]:w-1 [&::-webkit-scrollbar]:h-1 [&::-webkit-scrollbar-button]:block [&::-webkit-scrollbar-button]:h-0 [&::-webkit-scrollbar-button]:bg-transparent [&::-webkit-scrollbar-track-piece]:bg-transparent [&::-webkit-scrollbar-track-piece]:rounded-none [&::-webkit-scrollbar-track-piece]: [&::-webkit-scrollbar-track-piece]:rounded-l [&::-webkit-scrollbar-thumb]:h-[50px] [&::-webkit-scrollbar-thumb]:bg-[#999] [&::-webkit-scrollbar-thumb]:rounded",selectArrow:"absolute right-3 text-[0.8rem] cursor-pointer peer-focus:text-primary peer-data-[te-input-focused]:text-primary group-data-[te-was-validated]/validation:peer-valid:text-green-600 group-data-[te-was-validated]/validation:peer-invalid:text-[rgb(220,76,100)] w-5 h-5",selectArrowWhite:"text-gray-50 peer-focus:!text-white peer-data-[te-input-focused]:!text-white",selectArrowDefault:"top-2",selectArrowLg:"top-[13px]",selectArrowSm:"top-1",selectClearBtn:"absolute top-2 right-9 text-black cursor-pointer focus:text-primary outline-none dark:text-gray-200",selectClearBtnWhite:"!text-gray-50",selectClearBtnDefault:"top-2 text-base",selectClearBtnLg:"top-[11px] text-base",selectClearBtnSm:"top-1 text-[0.8rem]",selectDropdownContainer:"z-[1070]",selectFakeValue:"transform-none hidden data-[te-input-state-active]:block",selectFilterInput:"relative m-0 block w-full min-w-0 flex-auto rounded border border-solid border-gray-300 bg-transparent bg-clip-padding px-3 py-1.5 text-base font-normal text-gray-700 transition duration-300 ease-in-out motion-reduce:transition-none focus:border-primary focus:text-gray-700 focus:shadow-te-primary focus:outline-none dark:text-gray-200 dark:placeholder:text-gray-200",selectInput:"peer block min-h-[auto] w-full rounded border-0 bg-transparent outline-none transition-all duration-200 ease-linear focus:placeholder:opacity-100 data-[te-input-state-active]:placeholder:opacity-100 motion-reduce:transition-none dark:text-gray-200 dark:placeholder:text-gray-200 [&:not([data-te-input-placeholder-active])]:placeholder:opacity-0 cursor-pointer data-[te-input-disabled]:bg-[#e9ecef] data-[te-input-disabled]:cursor-default group-data-[te-was-validated]/validation:mb-4 dark:data-[te-input-disabled]:bg-zinc-600",selectInputWhite:"!text-gray-50",selectInputSizeDefault:"py-[0.32rem] px-3 leading-[1.6]",selectInputSizeLg:"py-[0.32rem] px-3 leading-[2.15]",selectInputSizeSm:"py-[0.33rem] px-3 text-xs leading-[1.5]",selectLabel:"pointer-events-none absolute top-0 left-3 mb-0 max-w-[90%] origin-[0_0] truncate text-gray-500 transition-all duration-200 ease-out peer-focus:scale-[0.8] peer-focus:text-primary peer-data-[te-input-state-active]:scale-[0.8] motion-reduce:transition-none dark:text-gray-200 dark:peer-focus:text-gray-200 data-[te-input-state-active]:scale-[0.8] dark:peer-focus:text-primary",selectLabelWhite:"!text-gray-50",selectLabelSizeDefault:"pt-[0.37rem] leading-[1.6] peer-focus:-translate-y-[0.9rem] peer-data-[te-input-state-active]:-translate-y-[0.9rem] data-[te-input-state-active]:-translate-y-[0.9rem]",selectLabelSizeLg:"pt-[0.37rem] leading-[2.15] peer-focus:-translate-y-[1.15rem] peer-data-[te-input-state-active]:-translate-y-[1.15rem] data-[te-input-state-active]:-translate-y-[1.15rem]",selectLabelSizeSm:"pt-[0.37rem] text-xs leading-[1.5] peer-focus:-translate-y-[0.75rem] peer-data-[te-input-state-active]:-translate-y-[0.75rem] data-[te-input-state-active]:-translate-y-[0.75rem]",selectOption:"flex flex-row items-center justify-between w-full px-4 truncate text-gray-700 bg-transparent select-none cursor-pointer data-[te-input-multiple-active]:bg-black/5 hover:[&:not([data-te-select-option-disabled])]:bg-black/5 data-[te-input-state-active]:bg-black/5 data-[te-select-option-selected]:data-[te-input-state-active]:bg-black/5 data-[te-select-selected]:data-[te-select-option-disabled]:cursor-default data-[te-select-selected]:data-[te-select-option-disabled]:text-gray-400 data-[te-select-selected]:data-[te-select-option-disabled]:bg-transparent data-[te-select-option-selected]:bg-black/[0.02] data-[te-select-option-disabled]:text-gray-400 data-[te-select-option-disabled]:cursor-default group-data-[te-select-option-group-ref]/opt:pl-7 dark:text-gray-200 dark:hover:[&:not([data-te-select-option-disabled])]:bg-white/30 dark:data-[te-input-state-active]:bg-white/30 dark:data-[te-select-option-selected]:data-[te-input-state-active]:bg-white/30 dark:data-[te-select-option-disabled]:text-gray-400 dark:data-[te-input-multiple-active]:bg-white/30",selectAllOption:"",selectOptionGroup:"group/opt",selectOptionGroupLabel:"flex flex-row items-center w-full px-4 truncate bg-transparent text-black/50 select-none dark:text-gray-300",selectOptionIcon:"w-7 h-7 rounded-full",selectOptionSecondaryText:"block text-[0.8rem] text-gray-500 dark:text-gray-300",selectOptionText:"group",selectValidationValid:"hidden absolute -mt-3 w-auto text-sm text-green-600 cursor-pointer group-data-[te-was-validated]/validation:peer-valid:block",selectValidationInvalid:"hidden absolute -mt-3 w-auto text-sm text-[rgb(220,76,100)] cursor-pointer group-data-[te-was-validated]/validation:peer-invalid:block"},hx={dropdown:"string",formCheckInput:"string",formOutline:"string",initialized:"string",inputGroup:"string",noResult:"string",optionsList:"string",optionsWrapper:"string",optionsWrapperScrollbar:"string",selectArrow:"string",selectArrowDefault:"string",selectArrowLg:"string",selectArrowSm:"string",selectClearBtn:"string",selectClearBtnDefault:"string",selectClearBtnLg:"string",selectClearBtnSm:"string",selectDropdownContainer:"string",selectFakeValue:"string",selectFilterInput:"string",selectInput:"string",selectInputSizeDefault:"string",selectInputSizeLg:"string",selectInputSizeSm:"string",selectLabel:"string",selectLabelSizeDefault:"string",selectLabelSizeLg:"string",selectLabelSizeSm:"string",selectOption:"string",selectAllOption:"string",selectOptionGroup:"string",selectOptionGroupLabel:"string",selectOptionIcon:"string",selectOptionSecondaryText:"string",selectOptionText:"string"};class on{constructor(t,e,i){this._element=t,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._config.selectPlaceholder&&!this._config.multiple&&this._addPlaceholderOption(),this._optionsToRender=this._getOptionsToRender(t),this._plainOptions=this._getPlainOptions(this._optionsToRender),this._filteredOptionsList=null,this._selectionModel=new vE(this.multiple),this._activeOptionIndex=-1,this._activeOption=null,this._wrapperId=bt("select-wrapper-"),this._dropdownContainerId=bt("select-dropdown-container-"),this._selectAllId=bt("select-all-"),this._debounceTimeoutId=null,this._dropdownHeight=this._config.selectOptionHeight*this._config.selectVisibleOptions,this._popper=null,this._input=null,this._label=m.next(this._element,QE)[0],this._notch=null,this._fakeValue=null,this._isFakeValueActive=!1,this._customContent=m.next(t,nx)[0],this._toggleButton=null,this._elementToggle=null,this._wrapper=null,this._inputEl=null,this._dropdownContainer=null,this._container=null,this._selectAllOption=null,this._init(),this._mutationObserver=null,this._isOpen=!1,this._addMutationObserver(),this._element&&O.setData(t,en,this)}static get NAME(){return Pl}get filterInput(){return m.findOne(JE,this._dropdownContainer)}get dropdown(){return m.findOne(tx,this._dropdownContainer)}get optionsList(){return m.findOne(rp,this._dropdownContainer)}get optionsWrapper(){return m.findOne(ex,this._dropdownContainer)}get clearButton(){return m.findOne(sx,this._wrapper)}get options(){return this._filteredOptionsList?this._filteredOptionsList:this._plainOptions}get value(){return this.multiple?this._selectionModel.values:this._selectionModel.value}get multiple(){return this._config.multiple}get hasSelectAll(){return this.multiple&&this._config.selectAll}get hasSelection(){return this._selectionModel.selection||this._selectionModel.selections.length>0}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...ax,...e,...t},this._element.hasAttribute("multiple")&&(t.multiple=!0),this._element.hasAttribute("disabled")&&(t.disabled=!0),this._element.tabIndex&&(t.tabIndex=this._element.getAttribute("tabIndex")),L(Pl,t,lx),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cx,...e,...t},L(Pl,t,hx),t}_addPlaceholderOption(){const t=new Option("","",!0,!0);t.hidden=!0,t.selected=!0,this._element.prepend(t)}_getOptionsToRender(t){const e=[];return t.childNodes.forEach(n=>{if(n.nodeName==="OPTGROUP"){const o={id:bt("group-"),label:n.label,disabled:n.hasAttribute("disabled"),hidden:n.hasAttribute("hidden"),options:[]};n.childNodes.forEach(a=>{a.nodeName==="OPTION"&&o.options.push(this._createOptionObject(a,o))}),e.push(o)}else n.nodeName==="OPTION"&&e.push(this._createOptionObject(n))}),e}_getPlainOptions(t){if(!m.findOne("optgroup",this._element))return t;const i=[];return t.forEach(n=>{Object.prototype.hasOwnProperty.call(n,"options")?n.options.forEach(r=>{i.push(r)}):i.push(n)}),i}_createOptionObject(t,e={}){const i=bt("option-"),n=e.id?e.id:null,o=e.disabled?e.disabled:!1,r=t.selected||t.hasAttribute(nn),a=t.hasAttribute("disabled")||o,l=t.hasAttribute("hidden")||e&&e.hidden,c=this.multiple,h=t.value,d=t.label,u=g.getDataAttribute(t,"selectSecondaryText"),p=g.getDataAttribute(t,"select-icon");return new Ku(i,t,c,h,d,r,a,l,u,n,p)}_getNavigationOptions(){const t=this.options.filter(e=>!e.hidden);return this.hasSelectAll?[this._selectAllOption,...t]:t}_init(){this._renderMaterialWrapper(),this._wrapper=m.findOne(`#${this._wrapperId}`),this._input=m.findOne(op,this._wrapper),this._config.disabled&&this._input.setAttribute(Nl,"");const t=this._config.selectContainer;t==="body"?this._container=document.body:this._container=m.findOne(t),this._initOutlineInput(),this._setDefaultSelections(),this._updateInputValue(),this._appendFakeValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._bindComponentEvents(),this.hasSelectAll&&(this._selectAllOption=this._createSelectAllOption()),this._dropdownContainer=Gu(this._dropdownContainerId,this._config,this._input.offsetWidth,this._dropdownHeight,this._selectAllOption,this._optionsToRender,this._customContent,this._classes),this._setFirstActiveOption(),this._listenToFocusChange()}_renderMaterialWrapper(){const t=PE(this._wrapperId,this._config,this._label,this._classes,this._config.customArrow);this._element.parentNode.insertBefore(t,this._element),g.addClass(this._element,this._classes.initialized),t.appendChild(this._element)}_initOutlineInput(){const t=m.findOne(ap,this._wrapper);new Z(t,{inputFormWhite:this._config.selectFormWhite},this._classes).init(),this._notch=m.findOne(Bl,this._wrapper)}_bindComponentEvents(){this._listenToComponentKeydown(),this._listenToWrapperClick(),this._listenToClearBtnClick(),this._listenToClearBtnKeydown()}_setDefaultSelections(){this.options.forEach(t=>{t.selected&&this._selectionModel.select(t)})}_listenToComponentKeydown(){_.on(this._wrapper,"keydown",this._handleKeydown.bind(this))}_handleKeydown(t){this._isOpen&&!this._config.selectFilter?this._handleOpenKeydown(t):this._handleClosedKeydown(t)}_handleOpenKeydown(t){const e=t.keyCode,i=e===xi||e===ut&&t.altKey||e===Ci;if(e===Ci&&this._config.selectAutoSelect&&!this.multiple&&this._handleAutoSelection(this._activeOption),i){this.close(),this._input.focus();return}switch(e){case ht:this._setNextOptionActive(),this._scrollToOption(this._activeOption);break;case ut:this._setPreviousOptionActive(),this._scrollToOption(this._activeOption);break;case Ti:this._setFirstOptionActive(),this._scrollToOption(this._activeOption);break;case Ei:this._setLastOptionActive(),this._scrollToOption(this._activeOption);break;case Et:t.preventDefault(),this._activeOption&&(this.hasSelectAll&&this._activeOptionIndex===0?this._handleSelectAll():this._handleSelection(this._activeOption));return;default:return}t.preventDefault()}_handleClosedKeydown(t){const e=t.keyCode;if(e===Et&&t.preventDefault(),(e===Et||e===ht&&t.altKey||e===ht&&this.multiple)&&this.open(),this.multiple)switch(e){case ht:this.open();break;case ut:this.open();break;default:return}else switch(e){case ht:this._setNextOptionActive(),this._handleSelection(this._activeOption);break;case ut:this._setPreviousOptionActive(),this._handleSelection(this._activeOption);break;case Ti:this._setFirstOptionActive(),this._handleSelection(this._activeOption);break;case Ei:this._setLastOptionActive(),this._handleSelection(this._activeOption);break;default:return}t.preventDefault()}_scrollToOption(t){if(!t)return;let e;const i=this.options.filter(h=>!h.hidden);this.hasSelectAll?e=i.indexOf(t)+1:e=i.indexOf(t);const n=this._getNumberOfGroupsBeforeOption(e),o=e+n,r=this.optionsWrapper,a=r.offsetHeight,l=this._config.selectOptionHeight,c=r.scrollTop;if(e>-1){const h=o*l,d=h+l>c+a;h<c?r.scrollTop=h:d?r.scrollTop=h-a+l:r.scrollTop=c}}_getNumberOfGroupsBeforeOption(t){const e=this.options.filter(r=>!r.hidden),i=this._optionsToRender.filter(r=>!r.hidden),n=this.hasSelectAll?t-1:t;let o=0;for(let r=0;r<=n;r++)e[r].groupId&&i[o]&&i[o].id&&e[r].groupId===i[o].id&&o++;return o}_setNextOptionActive(){let t=this._activeOptionIndex+1;const e=this._getNavigationOptions();if(e[t]){for(;e[t].disabled;)if(t+=1,!e[t])return;this._updateActiveOption(e[t],t)}}_setPreviousOptionActive(){let t=this._activeOptionIndex-1;const e=this._getNavigationOptions();if(e[t]){for(;e[t].disabled;)if(t-=1,!e[t])return;this._updateActiveOption(e[t],t)}}_setFirstOptionActive(){const e=this._getNavigationOptions();this._updateActiveOption(e[0],0)}_setLastOptionActive(){const t=this._getNavigationOptions(),e=t.length-1;this._updateActiveOption(t[e],e)}_updateActiveOption(t,e){const i=this._activeOption;i&&i.removeActiveStyles(),t.setActiveStyles(),this._activeOptionIndex=e,this._activeOption=t}_listenToWrapperClick(){_.on(this._wrapper,"click",()=>{this.toggle()})}_listenToClearBtnClick(){_.on(this.clearButton,"click",t=>{t.preventDefault(),t.stopPropagation(),this._handleClear()})}_listenToClearBtnKeydown(){_.on(this.clearButton,"keydown",t=>{t.keyCode===Et&&(this._handleClear(),t.preventDefault(),t.stopPropagation())})}_handleClear(){if(this.multiple)this._selectionModel.clear(),this._deselectAllOptions(this.options),this.hasSelectAll&&this._updateSelectAllState();else{const t=this._selectionModel.selection;this._selectionModel.clear(),t.deselect()}this._fakeValue.textContent="",this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._emitValueChangeEvent(null),this._emitNativeChangeEvent()}_listenToOptionsClick(){_.on(this.optionsWrapper,"click",t=>{if(t.target.hasAttribute(qE))return;const i=t.target.nodeName==="DIV"?t.target:m.closest(t.target,ix);if(i.hasAttribute(ZE)){this._handleSelectAll();return}const o=i.dataset.teId,r=this.options.find(a=>a.id===o);r&&!r.disabled&&this._handleSelection(r)})}_handleSelectAll(){this._selectAllOption.selected?(this._deselectAllOptions(this.options),this._selectAllOption.deselect()):(this._selectAllOptions(this.options),this._selectAllOption.select()),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent()}_selectAllOptions(t){t.forEach(e=>{!e.selected&&!e.disabled&&(this._selectionModel.select(e),e.select())})}_deselectAllOptions(t){t.forEach(e=>{e.selected&&!e.disabled&&(this._selectionModel.deselect(e),e.deselect())})}_handleSelection(t){this.multiple?(this._handleMultiSelection(t),this.hasSelectAll&&this._updateSelectAllState()):this._handleSingleSelection(t),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility()}_handleAutoSelection(t){this._singleOptionSelect(t),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility()}_handleSingleSelection(t){this._singleOptionSelect(t),this.close(),this._input.focus()}_singleOptionSelect(t){const e=this._selectionModel.selections[0];e&&e!==t&&(this._selectionModel.deselect(e),e.deselect(),e.node.setAttribute(nn,!1),_.trigger(this._element,ep,{value:e.value})),(!e||e&&t!==e)&&(this._selectionModel.select(t),t.select(),t.node.setAttribute(nn,!0),_.trigger(this._element,tp,{value:t.value}),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent())}_handleMultiSelection(t){t.selected?(this._selectionModel.deselect(t),t.deselect(),t.node.setAttribute(nn,!1),_.trigger(this._element,ep,{value:t.value})):(this._selectionModel.select(t),t.select(),t.node.setAttribute(nn,!0),_.trigger(this._element,tp,{value:t.value})),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent()}_emitValueChangeEvent(t){_.trigger(this._element,XE,{value:t})}_emitNativeChangeEvent(){_.trigger(this._element,GE)}_updateInputValue(){const t=this.multiple?this._selectionModel.labels:this._selectionModel.label;let e;this.multiple&&this._config.selectDisplayedLabels!==-1&&this._selectionModel.selections.length>this._config.selectDisplayedLabels?e=`${this._selectionModel.selections.length} ${this._config.selectOptionsSelectedLabel}`:e=t,!this.multiple&&!this._isSelectionValid(this._selectionModel.selection)?this._input.value="":this._isLabelEmpty(this._selectionModel.selection)?this._input.value=" ":e?this._input.value=e:this.multiple||!this._optionsToRender[0]?this._input.value="":this._input.value=this._optionsToRender[0].label}_isSelectionValid(t){return!(t&&(t.disabled||t.value===""))}_isLabelEmpty(t){return!!(t&&t.label==="")}_appendFakeValue(){if(!this._selectionModel.selection||this._selectionModel._multiple)return;const t=this._selectionModel.selection.label;this._fakeValue=YE(t,this._classes),m.findOne(ap,this._wrapper).appendChild(this._fakeValue)}_updateLabelPosition(){const t=this._element.hasAttribute(ip),e=this._input.value!=="";this._label&&(t&&(e||this._isOpen||this._isFakeValueActive)?(this._label.setAttribute(wt,""),this._notch.setAttribute(wt,"")):(this._label.removeAttribute(wt),this._notch.removeAttribute(wt,"")))}_updateLabelPositionWhileClosing(){this._label&&(this._input.value!==""||this._isFakeValueActive?(this._label.setAttribute(wt,""),this._notch.setAttribute(wt,"")):(this._label.removeAttribute(wt),this._notch.removeAttribute(wt)))}_updateFakeLabelPosition(){this._fakeValue&&(this._input.value===""&&this._fakeValue.innerHTML!==""&&!this._config.selectPlaceholder?(this._isFakeValueActive=!0,this._fakeValue.setAttribute(wt,"")):(this._isFakeValueActive=!1,this._fakeValue.removeAttribute(wt)))}_updateClearButtonVisibility(){if(!this.clearButton)return;this._selectionModel.selection||this._selectionModel.selections.length>0?g.addStyle(this.clearButton,{display:"block"}):g.addStyle(this.clearButton,{display:"none"})}_updateSelectAllState(){const t=this._selectAllOption.selected,e=Rl(this.options);!e&&t?this._selectAllOption.deselect():e&&!t&&this._selectAllOption.select()}toggle(){this._isOpen?this.close():this.open()}open(){const t=this._config.disabled,e=_.trigger(this._element,UE);this._isOpen||t||e.defaultPrevented||(this._openDropdown(),this._updateDropdownWidth(),this._setFirstActiveOption(),this._scrollToOption(this._activeOption),this._config.selectFilter&&(setTimeout(()=>{this.filterInput.focus()},0),this._listenToSelectSearch(),this._listenToDropdownKeydown()),this._listenToOptionsClick(),this._listenToOutsideClick(),this._listenToWindowResize(),this._isOpen=!0,this._updateLabelPosition(),this._setInputActiveStyles())}_openDropdown(){this._popper=Fe(this._input,this._dropdownContainer,{placement:"bottom-start",modifiers:[{name:"offset",options:{offset:[0,1]}}]}),this._container.appendChild(this._dropdownContainer),setTimeout(()=>{this.dropdown.setAttribute(np,"")},0)}_updateDropdownWidth(){const t=this._input.offsetWidth;g.addStyle(this._dropdownContainer,{width:`${t}px`})}_setFirstActiveOption(){const t=this._getNavigationOptions(),e=this._activeOption;e&&e.removeActiveStyles();const i=this.multiple?this._selectionModel.selections[0]:this._selectionModel.selection;i?(this._activeOption=i,i.setActiveStyles(),this._activeOptionIndex=t.findIndex(n=>n===i)):(this._activeOption=null,this._activeOptionIndex=-1)}_setInputActiveStyles(){this._input.setAttribute(qe,""),m.findOne(Bl,this._wrapper).setAttribute(qe,"")}_listenToWindowResize(){_.on(window,"resize",this._handleWindowResize.bind(this))}_handleWindowResize(){this._dropdownContainer&&this._updateDropdownWidth()}_listenToSelectSearch(){this.filterInput.addEventListener("input",t=>{const e=t.target.value,i=this._config.selectFilterDebounce;this._debounceFilter(e,i)})}_debounceFilter(t,e){this._debounceTimeoutId&&clearTimeout(this._debounceTimeoutId),this._debounceTimeoutId=setTimeout(()=>{this._filterOptions(t)},e)}_filterOptions(t){const e=[];this._optionsToRender.forEach(o=>{const r=Object.prototype.hasOwnProperty.call(o,"options"),a=!r&&o.label.toLowerCase().includes(t.toLowerCase()),l={};r&&(l.label=o.label,l.options=this._filter(t,o.options),l.options.length>0&&e.push(l)),a&&e.push(o)});const i=this._config.selectNoResultText!=="",n=e.length!==0;if(n)this._updateOptionsListTemplate(e),this._popper.forceUpdate(),this._filteredOptionsList=this._getPlainOptions(e),this.hasSelectAll&&this._updateSelectAllState(),this._setFirstActiveOption();else if(!n&&i){const o=this._getNoResultTemplate();this.optionsWrapper.innerHTML=o}}_updateOptionsListTemplate(t){const e=m.findOne(rp,this._dropdownContainer)||m.findOne(ox,this._dropdownContainer),i=qu(t,this._selectAllOption,this._config,this._classes);this.optionsWrapper.removeChild(e),this.optionsWrapper.appendChild(i)}_getNoResultTemplate(){return`<div class="${this._classes.noResult}" ${sp} style="height: ${this._config.selectOptionHeight}px">${this._config.selectNoResultText}</div>`}_filter(t,e){const i=t.toLowerCase();return e.filter(n=>n.label.toLowerCase().includes(i))}_listenToDropdownKeydown(){_.on(this.dropdown,"keydown",this._handleOpenKeydown.bind(this))}_listenToOutsideClick(){this._outsideClick=this._handleOutSideClick.bind(this),_.on(document,"click",this._outsideClick)}_listenToFocusChange(t=!0){if(t===!1){_.off(this._input,"focus",()=>this._notch.setAttribute(qe,"")),_.off(this._input,"blur",()=>this._notch.removeAttribute(qe));return}_.on(this._input,"focus",()=>this._notch.setAttribute(qe,"")),_.on(this._input,"blur",()=>this._notch.removeAttribute(qe))}_handleOutSideClick(t){const e=this._wrapper&&this._wrapper.contains(t.target),i=t.target===this._dropdownContainer,n=this._dropdownContainer&&this._dropdownContainer.contains(t.target);let o;this._toggleButton||(this._elementToggle=m.find(rx)),this._elementToggle&&this._elementToggle.forEach(r=>{const a=g.getDataAttribute(r,"select-toggle");(a===this._element.id||this._element.classList.contains(a))&&(this._toggleButton=r,o=this._toggleButton.contains(t.target))}),!e&&!i&&!n&&!o&&this.close()}close(){const t=_.trigger(this._element,KE),e=oo(this._dropdownContainer.children[0]);!this._isOpen||t.defaultPrevented||(this._config.selectFilter&&this.hasSelectAll&&(this._resetFilterState(),this._updateOptionsListTemplate(this._optionsToRender),this._config.multiple&&this._updateSelectAllState()),this._removeDropdownEvents(),this.dropdown.removeAttribute(np),setTimeout(()=>{this._input.removeAttribute(qe),this._input.blur(),m.findOne(Bl,this._wrapper).removeAttribute(qe),this._label&&!this.hasSelection&&(this._label.removeAttribute(wt),this._notch.setAttribute(wt,""),this._input.removeAttribute(wt),this._notch.removeAttribute(wt)),this._updateLabelPositionWhileClosing()},0),setTimeout(()=>{this._container&&this._dropdownContainer.parentNode===this._container&&this._container.removeChild(this._dropdownContainer),this._popper.destroy(),this._isOpen=!1,_.off(this.dropdown,"transitionend")},e))}_resetFilterState(){this.filterInput.value="",this._filteredOptionsList=null}_removeDropdownEvents(){_.off(document,"click",this._outsideClick),this._config.selectFilter&&_.off(this.dropdown,"keydown"),_.off(this.optionsWrapper,"click")}_addMutationObserver(){this._mutationObserver=new MutationObserver(()=>{this._wrapper&&(this._updateSelections(),this._updateDisabledState())}),this._observeMutationObserver()}_updateSelections(){this._optionsToRender=this._getOptionsToRender(this._element),this._plainOptions=this._getPlainOptions(this._optionsToRender),this._selectionModel.clear(),this._setDefaultSelections(),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this.hasSelectAll&&this._updateSelectAllState();const t=this._config.filter&&this.filterInput&&this.filterInput.value;this._isOpen&&!t?(this._updateOptionsListTemplate(this._optionsToRender),this._setFirstActiveOption()):this._isOpen&&t?(this._filterOptions(this.filterInput.value),this._setFirstActiveOption()):this._dropdownContainer=Gu(this._dropdownContainerId,this._config,this._input.offsetWidth,this._dropdownHeight,this._selectAllOption,this._optionsToRender,this._customContent,this._classes)}_updateDisabledState(){const t=m.findOne(op,this._wrapper);this._element.hasAttribute("disabled")?(this._config.disabled=!0,t.setAttribute("disabled",""),t.setAttribute(Nl,"")):(this._config.disabled=!1,t.removeAttribute("disabled"),t.removeAttribute(Nl))}_observeMutationObserver(){this._mutationObserver&&this._mutationObserver.observe(this._element,{attributes:!0,childList:!0,characterData:!0,subtree:!0})}_disconnectMutationObserver(){this.mutationObserver&&(this._mutationObserver.disconnect(),this._mutationObserver=null)}_createSelectAllOption(){const t=this._selectAllId,e=null,i=!0,n="select-all",o=this._config.selectAllLabel,r=Rl(this.options),a=!1,l=!1,c=null,h=null,d=null;return new Ku(t,e,i,n,o,r,a,l,c,h,d)}dispose(){this._removeComponentEvents(),this._destroyMaterialSelect(),this._listenToFocusChange(!1),O.removeData(this._element,en)}_removeComponentEvents(){_.off(this.input,"click"),_.off(this.wrapper,this._handleKeydown.bind(this)),_.off(this.clearButton,"click"),_.off(this.clearButton,"keydown"),_.off(window,"resize",this._handleWindowResize.bind(this))}_destroyMaterialSelect(){this._isOpen&&this.close(),this._destroyMaterialTemplate()}_destroyMaterialTemplate(){const t=this._wrapper.parentNode,e=m.find("label",this._wrapper);t.appendChild(this._element),e.forEach(i=>{t.appendChild(i)}),e.forEach(i=>{i.removeAttribute(wt)}),g.removeClass(this._element,this._classes.initialized),this._element.removeAttribute(ip),t.removeChild(this._wrapper)}setValue(t){this.options.filter(i=>i.selected).forEach(i=>i.nativeOption.selected=!1),Array.isArray(t)?t.forEach(i=>{this._selectByValue(i)}):this._selectByValue(t),this._updateSelections(),this._emitValueChangeEvent(this.value)}_selectByValue(t){const e=this.options.find(i=>i.value===t);return e?(e.nativeOption.selected=!0,!0):!1}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,en);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new on(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,en)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const dx=({inputID:s,labelText:t},e)=>`<div data-te-chips-input-wrapper data-te-input-wrapper-init class="${e.chipsInputWrapper}">
+      <input
+          type="text"
+          class="${e.chipsInput}"
+          id="${s}"
+          placeholder="Example label" />
+        <label
+          for="${s}"
+          class="${e.chipsLabel}"
+          >${t}
+        </label>
+      </div>
+    </div>`,ux=({text:s,iconSVG:t},e)=>`<div data-te-chip-init data-te-ripple-init class="${e.chipElement}">
+    <span data-te-chip-text>${s}</span> 
+      <span data-te-chip-close class="${e.chipCloseIcon}">
+        ${t}
+      </span>
+  </div>`,rr="chip",px=`te.${rr}`,lp="data-te-chip-close",Hl=`[${lp}]`,fx="delete.te.chips",_x="select.te.chip",gx='<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-3 h-3"> <path stroke-linecap="round" stroke-linejoin="round" d="M6 18L18 6M6 6l12 12" /></svg>',mx={text:"string",closeIcon:"boolean",img:"object",iconSVG:"string"},bx={text:"",closeIcon:!1,img:{path:"",alt:""},iconSVG:gx},vx={icon:"float-right pl-[8px] text-[16px] opacity-[.53] cursor-pointer fill-[#afafaf] hover:text-[#8b8b8b] transition-all duration-200 ease-in-out",chipElement:"flex justify-between items-center h-[32px] leading-loose py-[5px] px-[12px] mr-4 my-[5px] text-[13px] font-normal text-[#4f4f4f] cursor-pointer bg-[#eceff1] dark:text-white dark:bg-neutral-600 rounded-[16px] transition-[opacity] duration-300 ease-linear [word-wrap: break-word] shadow-none normal-case hover:!shadow-none active:bg-[#cacfd1] inline-block font-medium leading-normal text-[#4f4f4f] text-center no-underline align-middle cursor-pointer select-none border-[.125rem] border-solid border-transparent py-1.5 px-3 text-xs rounded",chipCloseIcon:"w-4 float-right pl-[8px] text-[16px] opacity-[.53] cursor-pointer fill-[#afafaf] hover:fill-[#8b8b8b] dark:fill-gray-400 dark:hover:fill-gray-100 transition-all duration-200 ease-in-out"},yx={icon:"string",chipElement:"string",chipCloseIcon:"string"};class ki{constructor(t,e={},i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i)}static get NAME(){return rr}init(){this._appendCloseIcon(),this._handleDelete(),this._handleTextChip(),this._handleClickOnChip()}dispose(){this._element=null,this._options=null,_.off(this._element,"click")}appendChip(){const{text:t,closeIcon:e,iconSVG:i}=this._options;return ux({text:t,closeIcon:e,iconSVG:i},this._classes)}_appendCloseIcon(t=this._element){if(!(m.find(Hl,this._element).length>0)&&this._options.closeIcon){const e=$("span");e.classList=this._classes.icon,e.setAttribute(lp),e.innerHTML=this._options.iconSVG,t.insertAdjacentElement("beforeend",e)}}_handleClickOnChip(){_.on(this._element,"click",t=>{const{textContent:e}=t.target,i={};i.tag=e.trim(),_.trigger(_x,{event:t,obj:i})})}_handleDelete(){m.find(Hl,this._element).length!==0&&_.on(this._element,"click",Hl,()=>{_.trigger(this._element,fx),this._element.remove()})}_handleTextChip(){this._element.innerText===""&&(this._element.innerText=this._options.text)}_getConfig(t){const e={...bx,...g.getDataAttributes(this._element),...t};return L(rr,e,mx),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...vx,...e,...t},L(rr,t,yx),t}static getInstance(t){return O.getData(t,px)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const rn="chips",an=`data-te-${rn}`,cp=`te.${rn}`,Tx=`${an}-input-init`,Wt=`${an}-active`,hp=`${an}-initial`,dp=`${an}-placeholder`,Ex=`${an}-input-wrapper`,Vl="data-te-chip-init",up="data-te-chip-close",pp="data-te-chip-text",xx=`[${Wt}]`,Fl=`[${Vl}]`,Cx=`${Fl}${xx}`,Wl=`[${up}]`,Ax=`[${Ex}]`,wx=`[${pp}]`,kx=`[${dp}]`,Sx="data-te-input-notch-leading-ref",Ox="data-te-input-notch-middle-ref",Ix=`[${Sx}]`,Dx=`[${Ox}]`,us="data-te-input-state-active",zl="[data-te-input-notch-ref]",Mx="add.te.chips",Lx="arrowDown.te.chips",$x="arrowLeft.te.chips",Rx="arrowRight.te.chips",Px="arrowUp.te.chips",fp="delete.te.chips",_p="select.te.chips",Nx={inputID:"string",parentSelector:"string",initialValues:"array",editable:"boolean",labelText:"string",inputClasses:"object",inputOptions:"object"},Bx={inputID:bt("chips-input-"),parentSelector:"",initialValues:[{tag:"init1"},{tag:"init2"}],editable:!1,labelText:"Example label",inputClasses:{},inputOptions:{}},Hx={opacity:"opacity-0",inputWrapperPadding:"p-[5px]",transition:"transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)]",contentEditable:"outline-none !border-[3px] !border-solid !border-[#b2b3b4]",chipsInputWrapper:"relative flex items-center flex-wrap transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)]",chipsInput:"peer block min-h-[auto] w-[150px] rounded border-0 bg-transparent py-[0.32rem] px-3 leading-[1.6] outline-none transition-all duration-200 ease-linear focus:placeholder:opacity-100 data-[te-input-state-active]:placeholder:opacity-100 motion-reduce:transition-none dark:text-gray-200 dark:placeholder:text-gray-200 [&:not([data-te-input-placeholder-active])]:placeholder:opacity-0",chipsLabel:"pointer-events-none absolute top-0 left-3 mb-0 max-w-[90%] origin-[0_0] truncate pt-[0.37rem] leading-[1.6] text-gray-500 transition-all duration-200 ease-out peer-focus:-translate-y-[0.9rem] peer-focus:scale-[0.8] peer-focus:text-primary peer-data-[te-input-state-active]:-translate-y-[0.9rem] peer-data-[te-input-state-active]:scale-[0.8] motion-reduce:transition-none dark:text-gray-200 dark:peer-focus:text-gray-200"},Vx={opacity:"string",inputWrapperPadding:"string",transition:"string",contentEditable:"string",chipsInputWrapper:"string",chipsInput:"string",chipsLabel:"string"};class gp extends ki{constructor(e,i={},n){super(e,i);ke(this,"_handleBlurInput",({target:e})=>{e.value.length>0&&this._handleCreateChip(e,e.value),this.allChips.length>0?(e.setAttribute(Wt,""),this.input.setAttribute(us,""),m.findOne(zl,this.input.parentNode).setAttribute(us,""),this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" "))):(e.removeAttribute(Wt),this.input.removeAttribute(us),m.findOne(zl,this.input.parentNode).removeAttribute(us),this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" "))),this.allChips.forEach(i=>i.removeAttribute(Wt))});this._element=e,this._inputInstance=null,this._element&&O.setData(e,cp,this),this._options=this._getConfig(i),this._classes=this._getClasses(n),this.numberClicks=0,this.init()}static get NAME(){return rn}get activeChip(){return m.findOne(Cx,this._element)}get input(){return m.findOne("input",this._element)}get allChips(){return m.find(Fl,this._element)}get chipsInputWrapper(){return m.findOne(Ax,this._element)}init(){this._setChipsClass(),this._appendInputToElement(dp),this._handleInitialValue(),this._handleInputText(),this._handleKeyboard(),this._handleChipsOnSelect(),this._handleEditable(),this._handleChipsFocus(),this._handleClicksOnChips(),this._inputInstance._getLabelWidth(),this._inputInstance._applyNotch()}dispose(){this._element=null,this._options=null}_getNotchData(){this._notchMiddle=m.findOne(Dx,this._element),this._notchLeading=m.findOne(Ix,this._element)}_setChipsClass(){this._element.setAttribute(Tx,"")}_handleDeleteEvents(e){const[i]=this.allChips.slice(-1);if(this.activeChip===null)i.remove(),this._handleEvents(e,fp);else{const n=this.allChips.findIndex(a=>a===this.activeChip),o=this._handleActiveChipAfterRemove(n),r=[];if(this.activeChip===null)return;this.activeChip.remove(),this._handleEvents(e,fp),this.numberClicks=n,o.setAttribute(Wt,""),this.allChips.forEach(a=>{a.hasAttribute(Wt)&&(r.push(a),r.length>1&&this.allChips.forEach(l=>l.remove()))})}}_handleUpEvents(e){this.numberClicks+=1,this.numberClicks===this.allChips.length+1&&(this.numberClicks=0),this._handleRightKeyboardArrow(this.numberClicks),this._handleEvents(e,Rx),this._handleEvents(e,Px)}_handleDownEvents(e){this.numberClicks-=1,this.numberClicks<=0&&(this.numberClicks=this.allChips.length),this._handleLeftKeyboardArrow(this.numberClicks),this._handleEvents(e,$x),this._handleEvents(e,Lx)}_keyboardEvents(e){const{target:i,keyCode:n,ctrlKey:o}=e;i.value.length>0||this.allChips.length===0||(n===zy||n===jy?this._handleDeleteEvents(e):n===hs||n===ut?this._handleUpEvents(e):n===cs||n===ht?this._handleDownEvents(e):n===65&&o&&this._handleAddActiveClass())}_handleKeyboard(){_.on(this.input,"keydown",e=>this._keyboardEvents(e))}_handleEditable(){const{editable:e}=this._options;e&&this.allChips.forEach(i=>{_.on(i,"dblclick",n=>{const o=m.findOne(Wl,i);i.classList.add(...this._classes.contentEditable.split(" ")),i.contentEditable=!0,i.focus(),setTimeout(()=>{g.addStyle(o,{display:"none"})},200),o.classList.add(...this._classes.opacity.split(" ")),n.target.textContent,_.trigger(i,_p,{event:n,allChips:this.allChips})}),_.on(document,"click",({target:n})=>{const o=m.findOne(Wl,i),r=m.findOne(wx,i),a=n===i,l=i&&i.contains(n);!a&&!l&&(i.contentEditable=!1,i.classList.remove(...this._classes.contentEditable.split(" ")),r.textContent!==""&&setTimeout(()=>{g.addStyle(o,{display:"block"}),o.classList.remove(...this._classes.opacity.split(" "))},160)),r.textContent===""&&(setTimeout(()=>{i.classList.add(...this._classes.opacity.split(" "))},200),setTimeout(()=>{i.remove()},300))})})}_handleRemoveActiveClass(){this.allChips.forEach(e=>e.removeAttribute(Wt))}_handleAddActiveClass(){this.allChips.forEach(e=>e.setAttribute(Wt,""))}_handleRightKeyboardArrow(e){this._handleRemoveActiveClass(),e===0&&(e=1),this._handleAddActiveClassWithKebyboard(e)}_handleLeftKeyboardArrow(e){this._handleRemoveActiveClass(),this._handleAddActiveClassWithKebyboard(e)}_handleActiveChipAfterRemove(e){const i=e===0?1:e-1;return this.allChips[i]}_handleClicksOnChips(){_.on(this._element,"click",()=>{this.allChips.length===0&&(this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" ")),this.input.removeAttribute(Wt))})}_handleTextContent(){const e=[];return this.allChips.forEach(i=>e.push({tag:i.textContent.trim()})),e}_handleEvents(e,i){const n=this._handleTextContent(),o=this.allChips.filter(r=>r.hasAttribute(Wt)&&r);_.trigger(this._element,i,{event:e,allChips:this.allChips,arrOfObjects:n,active:o,activeObj:{tag:o.length<=0?"":o[0].textContent.trim()}})}_handleChipsFocus(){_.on(this._element,"click",({target:{attributes:e}})=>{const i=[...e].map(n=>n.name);i.includes(Vl)||i.includes(up)||i.includes(pp)||this.input.focus()})}_handleInitialValue(){if(this._appendInputToElement(hp),this._element.hasAttribute(hp)){const{initialValues:e}=this._options;e.forEach(({tag:i})=>this._handleCreateChip(this.input,i)),m.findOne(zl,this.input.parentNode).setAttribute(us,""),this.input.setAttribute(Wt,""),this.input.setAttribute(us,"")}this.allChips.length>0&&(this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" ")),this.chipsInputWrapper.classList.add(...this._classes.transition.split(" ")))}_handleKeysInputToElement(e){const{keyCode:i,target:n}=e;if(n.hasAttribute(Vl)){const o=m.findOne(Wl,n);i===Et&&(n.contentEditable=!1,n.classList.remove(...this._classes.contentEditable.split(" ")),n.textContent!==""?setTimeout(()=>{g.addStyle(o,{display:"block"}),o.classList.remove(...this._classes.opacity.split(" "))},160):n.textContent===""&&(setTimeout(()=>{n.classList.add(...this._classes.opacity.split(" "))},200),setTimeout(()=>{n.remove()},300)));return}if(i===Et){if(n.value==="")return;this._handleCreateChip(n,n.value),this._handleRemoveActiveClass(),this.numberClicks=this.allChips.length+1,this._handleEvents(e,Mx)}this.allChips.length>0?(this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" ")),this.chipsInputWrapper.classList.add(...this._classes.transition.split(" "))):this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" "))}_handleInputText(){const e=m.findOne(kx,this._element);_.on(this._element,"keyup",e,i=>this._handleKeysInputToElement(i)),_.on(this.input,"blur",i=>this._handleBlurInput(i))}_appendInputToElement(e){if(!this._element.hasAttribute(e))return;const i=dx(this._options,this._classes);this._element.insertAdjacentHTML("beforeend",i);const n=m.findOne("[data-te-chips-input-wrapper]",this._element);this._inputInstance=new Z(n,this._options.inputOptions,this._options.inputClasses)}_handleCreateChip(e,i){const n=$("div"),o=ki.getInstance(n),r=new ki(o,{text:i},this._classes);this._options.parentSelector!==""?document.querySelector(this._options.parentSelector).insertAdjacentHTML("beforeend",r.appendChip()):e.insertAdjacentHTML("beforebegin",r.appendChip()),e.value="",m.find(Fl).forEach(a=>{let l=ki.getInstance(a);return l||(l=new ki(a,{},this._classes)),l.init()}),this._handleEditable()}_handleChipsOnSelect(){this.allChips.forEach(e=>{_.on(this._element,"click",i=>{_.trigger(e,_p,{event:i,allChips:this.allChips})})})}_handleAddActiveClassWithKebyboard(e){let i;this.allChips[e-1]===void 0?i=this.allChips[e-2]:i=this.allChips[e-1],i.setAttribute(Wt)}_getConfig(e){const i={...Bx,...g.getDataAttributes(this._element),...e};return L(rn,i,Nx),i}_getClasses(e){const i=g.getDataClassAttributes(this._element);return e={...Hx,...i,...e},L(rn,e,Vx),e}static getInstance(e){return O.getData(e,cp)}static getOrCreateInstance(e,i={}){return this.getInstance(e)||new this(e,typeof i=="object"?i:null)}}const Ze={plugins:{legend:{labels:{color:"rgb(102,102,102)"}}}},ln={line:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.0)",borderColor:"rgb(59, 112, 202)",borderWidth:2,tension:0},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},datasets:{borderColor:"red"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!1,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},bar:{options:{...Ze,backgroundColor:"rgb(59, 112, 202)",borderWidth:0,responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!0,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},pie:{options:{...Ze,elements:{arc:{backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},doughnut:{options:{...Ze,elements:{arc:{backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},polarArea:{options:{...Ze,elements:{arc:{backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0}}},radar:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.5)",borderColor:"rgb(59, 112, 202)",borderWidth:2},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},scatter:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.5)",borderColor:"rgb(59, 112, 202)",borderWidth:2,tension:0},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},datasets:{borderColor:"red"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!1,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},bubble:{options:{...Ze,elements:{point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0},scales:{x:{grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}}};var Fx=function(t){return Wx(t)&&!zx(t)};function Wx(s){return!!s&&typeof s=="object"}function zx(s){var t=Object.prototype.toString.call(s);return t==="[object RegExp]"||t==="[object Date]"||Kx(s)}var jx=typeof Symbol=="function"&&Symbol.for,Yx=jx?Symbol.for("react.element"):60103;function Kx(s){return s.$$typeof===Yx}function Ux(s){return Array.isArray(s)?[]:{}}function cn(s,t){return t.clone!==!1&&t.isMergeableObject(s)?ps(Ux(s),s,t):s}function Xx(s,t,e){return s.concat(t).map(function(i){return cn(i,e)})}function Gx(s,t){if(!t.customMerge)return ps;var e=t.customMerge(s);return typeof e=="function"?e:ps}function qx(s){return Object.getOwnPropertySymbols?Object.getOwnPropertySymbols(s).filter(function(t){return Object.propertyIsEnumerable.call(s,t)}):[]}function mp(s){return Object.keys(s).concat(qx(s))}function bp(s,t){try{return t in s}catch{return!1}}function Zx(s,t){return bp(s,t)&&!(Object.hasOwnProperty.call(s,t)&&Object.propertyIsEnumerable.call(s,t))}function Qx(s,t,e){var i={};return e.isMergeableObject(s)&&mp(s).forEach(function(n){i[n]=cn(s[n],e)}),mp(t).forEach(function(n){Zx(s,n)||(bp(s,n)&&e.isMergeableObject(t[n])?i[n]=Gx(n,e)(s[n],t[n],e):i[n]=cn(t[n],e))}),i}function ps(s,t,e){e=e||{},e.arrayMerge=e.arrayMerge||Xx,e.isMergeableObject=e.isMergeableObject||Fx,e.cloneUnlessOtherwiseSpecified=cn;var i=Array.isArray(t),n=Array.isArray(s),o=i===n;return o?i?e.arrayMerge(s,t,e):Qx(s,t,e):cn(t,e)}ps.all=function(t,e){if(!Array.isArray(t))throw new Error("first argument should be an array");return t.reduce(function(i,n){return ps(i,n,e)},{})};var Jx=ps,jl=Jx;const vp="chart",ar="te.chart",tC="chart",Yl=(s,t,e)=>{const i=(n,o,r)=>{const a=n.slice();return o.forEach((l,c)=>{typeof a[c]>"u"?a[c]=r.cloneUnlessOtherwiseSpecified(l,r):r.isMergeableObject(l)?a[c]=jl(n[c],l,r):n.indexOf(l)===-1&&a.push(l)}),a};return jl(e[t],s,{arrayMerge:i})},eC={darkTicksColor:"#fff",darkLabelColor:"#fff",darkGridLinesColor:"#555",darkmodeOff:"undefined",darkMode:null,darkBgColor:"#262626",darkBgColorLight:"#fff",options:null},iC={darkTicksColor:"string",darkLabelColor:"string",darkGridLinesColor:"string",darkmodeOff:"(string|null)",darkMode:"(string|null)",darkBgColor:"string",darkBgColorLight:"string",options:"(object|null)"};let yp=class am{constructor(t,e,i={},n={}){this._waitForCharts(t,e,i,n)}async _getChartjs(){const{Chart:t,ArcElement:e,LineElement:i,BarElement:n,PointElement:o,BarController:r,BubbleController:a,DoughnutController:l,LineController:c,PieController:h,PolarAreaController:d,RadarController:u,ScatterController:p,CategoryScale:f,LinearScale:b,LogarithmicScale:v,RadialLinearScale:y,TimeScale:T,TimeSeriesScale:x,Decimation:E,Filler:C,Legend:A,Title:w,Tooltip:S,SubTitle:k}=await Promise.resolve().then(()=>UM);return t.register(e,i,n,o,r,a,l,c,h,d,u,p,f,b,v,y,T,x,E,C,A,w,S,k),t}async _getChartDataLabels(){return await Promise.resolve().then(()=>gL)}async _waitForCharts(t,e,i={},n={}){if(this._Chartjs=await this._getChartjs(),this._ChartDataLabels=await this._getChartDataLabels(),this._element=t,this._data=e,this._options=i,this._type=e.type,this._canvas=null,this._chart=null,this._darkOptions=this._getDarkConfig(n),this._darkModeClassContainer=document.querySelector("html"),this._prevConfig=null,this._observer=null,this._element&&(O.setData(t,ar,this),g.addClass(this._element,tC),this._chartConstructor()),this._darkOptions.darkmodeOff!==null){const o=this._darkOptions.darkMode==="dark"?"dark":this._darkOptions.darkMode==="light"?"light":this.systemColorMode;this._handleMode(o),this._observer=new MutationObserver(this._observerCallback.bind(this)),this._observer.observe(this._darkModeClassContainer,{attributes:!0})}}static get NAME(){return vp}get systemColorMode(){return localStorage.theme||(this._darkModeClassContainer.classList.contains("dark")?"dark":"light")}dispose(){this._observer.disconnect(),O.removeData(this._element,ar),this._element=null}update(t,e){t&&(this._data={...this._data,...t},this._chart.data=this._data);const i=Object.prototype.hasOwnProperty.call(e,"options")?e:{options:{...e}};this._options=jl(this._options,i),this._chart.options=Yl(this._options,this._type,ln).options,this._chart.update()}setTheme(t){t!=="dark"&&t!=="light"||!this._data||this._handleMode(t)}_getDarkConfig(t){let e={};const i=g.getDataAttributes(this._element);Object.keys(i).forEach(c=>c.startsWith("dark")&&(e[c]=i[c])),e={...eC,...e};const n={y:{ticks:{color:e.darkTicksColor},grid:{color:e.darkGridLinesColor}},x:{ticks:{color:e.darkTicksColor},grid:{color:e.darkGridLinesColor}}},o={r:{ticks:{color:e.darkTicksColor,backdropColor:e.darkBgColor},grid:{color:e.darkGridLinesColor},pointLabels:{color:e.darkTicksColor}}},l={scales:["pie","doughnut","polarArea","radar"].includes(this._type)?["polarArea","radar"].includes(this._type)?o:{}:n,plugins:{legend:{labels:{color:e.darkLabelColor}}}};return t={...e,options:{...l},...t},L(vp,t,iC),t}_chartConstructor(){if(this._data){this._createCanvas();const t=Yl(this._options,this._type,ln),e=[];t.dataLabelsPlugin&&e.push(this._ChartDataLabels.default),this._prevConfig=t,this._chart=new this._Chartjs(this._canvas,{...this._data,...t,plugins:e})}}_createCanvas(){this._canvas||(this._element.nodeName==="CANVAS"?this._canvas=this._element:(this._canvas=$("canvas"),this._element.appendChild(this._canvas)))}_handleMode(t){t==="dark"?(this._changeDatasetBorderColor(),this.update(null,this._darkOptions.options)):(this._changeDatasetBorderColor(!1),this._prevConfig&&this.update(null,this._prevConfig))}_observerCallback(t){for(const e of t)e.type==="attributes"&&this._handleMode(this.systemColorMode)}_changeDatasetBorderColor(t=!0){[...this._data.data.datasets].forEach(e=>["pie","doughnut","polarArea"].includes(this._type)&&(e.borderColor=t?this._darkOptions.darkBgColor:this._darkOptions.darkBgColorLight))}static jQueryInterface(t,e,i){return this.each(function(){let n=O.getData(this,ar);if(!(!n&&/dispose/.test(t))){if(!n){const o=e?Yl(e,i,ln):ln[i];n=new am(this,{...t,...o})}if(typeof t=="string"){if(typeof n[t]>"u")throw new TypeError(`No method named "${t}"`);n[t](e,i)}}})}static getInstance(t){return O.getData(t,ar)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}};/*!
+ * perfect-scrollbar v1.5.3
+ * Copyright 2021 Hyunje Jun, MDBootstrap and Contributors
+ * Licensed under MIT
+ */function me(s){return getComputedStyle(s)}function Ot(s,t){for(var e in t){var i=t[e];typeof i=="number"&&(i=i+"px"),s.style[e]=i}return s}function lr(s){var t=document.createElement("div");return t.className=s,t}var Tp=typeof Element<"u"&&(Element.prototype.matches||Element.prototype.webkitMatchesSelector||Element.prototype.mozMatchesSelector||Element.prototype.msMatchesSelector);function Qe(s,t){if(!Tp)throw new Error("No element matching method supported");return Tp.call(s,t)}function fs(s){s.remove?s.remove():s.parentNode&&s.parentNode.removeChild(s)}function Ep(s,t){return Array.prototype.filter.call(s.children,function(e){return Qe(e,t)})}var at={main:"ps",rtl:"ps__rtl",element:{thumb:function(s){return"ps__thumb-"+s},rail:function(s){return"ps__rail-"+s},consuming:"ps__child--consume"},state:{focus:"ps--focus",clicking:"ps--clicking",active:function(s){return"ps--active-"+s},scrolling:function(s){return"ps--scrolling-"+s}}},xp={x:null,y:null};function Cp(s,t){var e=s.element.classList,i=at.state.scrolling(t);e.contains(i)?clearTimeout(xp[t]):e.add(i)}function Ap(s,t){xp[t]=setTimeout(function(){return s.isAlive&&s.element.classList.remove(at.state.scrolling(t))},s.settings.scrollingThreshold)}function sC(s,t){Cp(s,t),Ap(s,t)}var hn=function(t){this.element=t,this.handlers={}},wp={isEmpty:{configurable:!0}};hn.prototype.bind=function(t,e){typeof this.handlers[t]>"u"&&(this.handlers[t]=[]),this.handlers[t].push(e),this.element.addEventListener(t,e,!1)},hn.prototype.unbind=function(t,e){var i=this;this.handlers[t]=this.handlers[t].filter(function(n){return e&&n!==e?!0:(i.element.removeEventListener(t,n,!1),!1)})},hn.prototype.unbindAll=function(){for(var t in this.handlers)this.unbind(t)},wp.isEmpty.get=function(){var s=this;return Object.keys(this.handlers).every(function(t){return s.handlers[t].length===0})},Object.defineProperties(hn.prototype,wp);var _s=function(){this.eventElements=[]};_s.prototype.eventElement=function(t){var e=this.eventElements.filter(function(i){return i.element===t})[0];return e||(e=new hn(t),this.eventElements.push(e)),e},_s.prototype.bind=function(t,e,i){this.eventElement(t).bind(e,i)},_s.prototype.unbind=function(t,e,i){var n=this.eventElement(t);n.unbind(e,i),n.isEmpty&&this.eventElements.splice(this.eventElements.indexOf(n),1)},_s.prototype.unbindAll=function(){this.eventElements.forEach(function(t){return t.unbindAll()}),this.eventElements=[]},_s.prototype.once=function(t,e,i){var n=this.eventElement(t),o=function(r){n.unbind(e,o),i(r)};n.bind(e,o)};function cr(s){if(typeof window.CustomEvent=="function")return new CustomEvent(s);var t=document.createEvent("CustomEvent");return t.initCustomEvent(s,!1,!1,void 0),t}function hr(s,t,e,i,n){i===void 0&&(i=!0),n===void 0&&(n=!1);var o;if(t==="top")o=["contentHeight","containerHeight","scrollTop","y","up","down"];else if(t==="left")o=["contentWidth","containerWidth","scrollLeft","x","left","right"];else throw new Error("A proper axis should be provided");nC(s,e,o,i,n)}function nC(s,t,e,i,n){var o=e[0],r=e[1],a=e[2],l=e[3],c=e[4],h=e[5];i===void 0&&(i=!0),n===void 0&&(n=!1);var d=s.element;s.reach[l]=null,d[a]<1&&(s.reach[l]="start"),d[a]>s[o]-s[r]-1&&(s.reach[l]="end"),t&&(d.dispatchEvent(cr("ps-scroll-"+l)),t<0?d.dispatchEvent(cr("ps-scroll-"+c)):t>0&&d.dispatchEvent(cr("ps-scroll-"+h)),i&&sC(s,l)),s.reach[l]&&(t||n)&&d.dispatchEvent(cr("ps-"+l+"-reach-"+s.reach[l]))}function st(s){return parseInt(s,10)||0}function oC(s){return Qe(s,"input,[contenteditable]")||Qe(s,"select,[contenteditable]")||Qe(s,"textarea,[contenteditable]")||Qe(s,"button,[contenteditable]")}function rC(s){var t=me(s);return st(t.width)+st(t.paddingLeft)+st(t.paddingRight)+st(t.borderLeftWidth)+st(t.borderRightWidth)}var gs={isWebKit:typeof document<"u"&&"WebkitAppearance"in document.documentElement.style,supportsTouch:typeof window<"u"&&("ontouchstart"in window||"maxTouchPoints"in window.navigator&&window.navigator.maxTouchPoints>0||window.DocumentTouch&&document instanceof window.DocumentTouch),supportsIePointer:typeof navigator<"u"&&navigator.msMaxTouchPoints,isChrome:typeof navigator<"u"&&/Chrome/i.test(navigator&&navigator.userAgent)};function Se(s){var t=s.element,e=Math.floor(t.scrollTop),i=t.getBoundingClientRect();s.containerWidth=Math.round(i.width),s.containerHeight=Math.round(i.height),s.contentWidth=t.scrollWidth,s.contentHeight=t.scrollHeight,t.contains(s.scrollbarXRail)||(Ep(t,at.element.rail("x")).forEach(function(n){return fs(n)}),t.appendChild(s.scrollbarXRail)),t.contains(s.scrollbarYRail)||(Ep(t,at.element.rail("y")).forEach(function(n){return fs(n)}),t.appendChild(s.scrollbarYRail)),!s.settings.suppressScrollX&&s.containerWidth+s.settings.scrollXMarginOffset<s.contentWidth?(s.scrollbarXActive=!0,s.railXWidth=s.containerWidth-s.railXMarginWidth,s.railXRatio=s.containerWidth/s.railXWidth,s.scrollbarXWidth=kp(s,st(s.railXWidth*s.containerWidth/s.contentWidth)),s.scrollbarXLeft=st((s.negativeScrollAdjustment+t.scrollLeft)*(s.railXWidth-s.scrollbarXWidth)/(s.contentWidth-s.containerWidth))):s.scrollbarXActive=!1,!s.settings.suppressScrollY&&s.containerHeight+s.settings.scrollYMarginOffset<s.contentHeight?(s.scrollbarYActive=!0,s.railYHeight=s.containerHeight-s.railYMarginHeight,s.railYRatio=s.containerHeight/s.railYHeight,s.scrollbarYHeight=kp(s,st(s.railYHeight*s.containerHeight/s.contentHeight)),s.scrollbarYTop=st(e*(s.railYHeight-s.scrollbarYHeight)/(s.contentHeight-s.containerHeight))):s.scrollbarYActive=!1,s.scrollbarXLeft>=s.railXWidth-s.scrollbarXWidth&&(s.scrollbarXLeft=s.railXWidth-s.scrollbarXWidth),s.scrollbarYTop>=s.railYHeight-s.scrollbarYHeight&&(s.scrollbarYTop=s.railYHeight-s.scrollbarYHeight),aC(t,s),s.scrollbarXActive?t.classList.add(at.state.active("x")):(t.classList.remove(at.state.active("x")),s.scrollbarXWidth=0,s.scrollbarXLeft=0,t.scrollLeft=s.isRtl===!0?s.contentWidth:0),s.scrollbarYActive?t.classList.add(at.state.active("y")):(t.classList.remove(at.state.active("y")),s.scrollbarYHeight=0,s.scrollbarYTop=0,t.scrollTop=0)}function kp(s,t){return s.settings.minScrollbarLength&&(t=Math.max(t,s.settings.minScrollbarLength)),s.settings.maxScrollbarLength&&(t=Math.min(t,s.settings.maxScrollbarLength)),t}function aC(s,t){var e={width:t.railXWidth},i=Math.floor(s.scrollTop);t.isRtl?e.left=t.negativeScrollAdjustment+s.scrollLeft+t.containerWidth-t.contentWidth:e.left=s.scrollLeft,t.isScrollbarXUsingBottom?e.bottom=t.scrollbarXBottom-i:e.top=t.scrollbarXTop+i,Ot(t.scrollbarXRail,e);var n={top:i,height:t.railYHeight};t.isScrollbarYUsingRight?t.isRtl?n.right=t.contentWidth-(t.negativeScrollAdjustment+s.scrollLeft)-t.scrollbarYRight-t.scrollbarYOuterWidth-9:n.right=t.scrollbarYRight-s.scrollLeft:t.isRtl?n.left=t.negativeScrollAdjustment+s.scrollLeft+t.containerWidth*2-t.contentWidth-t.scrollbarYLeft-t.scrollbarYOuterWidth:n.left=t.scrollbarYLeft+s.scrollLeft,Ot(t.scrollbarYRail,n),Ot(t.scrollbarX,{left:t.scrollbarXLeft,width:t.scrollbarXWidth-t.railBorderXWidth}),Ot(t.scrollbarY,{top:t.scrollbarYTop,height:t.scrollbarYHeight-t.railBorderYWidth})}function lC(s){s.element,s.event.bind(s.scrollbarY,"mousedown",function(t){return t.stopPropagation()}),s.event.bind(s.scrollbarYRail,"mousedown",function(t){var e=t.pageY-window.pageYOffset-s.scrollbarYRail.getBoundingClientRect().top,i=e>s.scrollbarYTop?1:-1;s.element.scrollTop+=i*s.containerHeight,Se(s),t.stopPropagation()}),s.event.bind(s.scrollbarX,"mousedown",function(t){return t.stopPropagation()}),s.event.bind(s.scrollbarXRail,"mousedown",function(t){var e=t.pageX-window.pageXOffset-s.scrollbarXRail.getBoundingClientRect().left,i=e>s.scrollbarXLeft?1:-1;s.element.scrollLeft+=i*s.containerWidth,Se(s),t.stopPropagation()})}function cC(s){Sp(s,["containerWidth","contentWidth","pageX","railXWidth","scrollbarX","scrollbarXWidth","scrollLeft","x","scrollbarXRail"]),Sp(s,["containerHeight","contentHeight","pageY","railYHeight","scrollbarY","scrollbarYHeight","scrollTop","y","scrollbarYRail"])}function Sp(s,t){var e=t[0],i=t[1],n=t[2],o=t[3],r=t[4],a=t[5],l=t[6],c=t[7],h=t[8],d=s.element,u=null,p=null,f=null;function b(T){T.touches&&T.touches[0]&&(T[n]=T.touches[0].pageY),d[l]=u+f*(T[n]-p),Cp(s,c),Se(s),T.stopPropagation(),T.type.startsWith("touch")&&T.changedTouches.length>1&&T.preventDefault()}function v(){Ap(s,c),s[h].classList.remove(at.state.clicking),s.event.unbind(s.ownerDocument,"mousemove",b)}function y(T,x){u=d[l],x&&T.touches&&(T[n]=T.touches[0].pageY),p=T[n],f=(s[i]-s[e])/(s[o]-s[a]),x?s.event.bind(s.ownerDocument,"touchmove",b):(s.event.bind(s.ownerDocument,"mousemove",b),s.event.once(s.ownerDocument,"mouseup",v),T.preventDefault()),s[h].classList.add(at.state.clicking),T.stopPropagation()}s.event.bind(s[r],"mousedown",function(T){y(T)}),s.event.bind(s[r],"touchstart",function(T){y(T,!0)})}function hC(s){var t=s.element,e=function(){return Qe(t,":hover")},i=function(){return Qe(s.scrollbarX,":focus")||Qe(s.scrollbarY,":focus")};function n(o,r){var a=Math.floor(t.scrollTop);if(o===0){if(!s.scrollbarYActive)return!1;if(a===0&&r>0||a>=s.contentHeight-s.containerHeight&&r<0)return!s.settings.wheelPropagation}var l=t.scrollLeft;if(r===0){if(!s.scrollbarXActive)return!1;if(l===0&&o<0||l>=s.contentWidth-s.containerWidth&&o>0)return!s.settings.wheelPropagation}return!0}s.event.bind(s.ownerDocument,"keydown",function(o){if(!(o.isDefaultPrevented&&o.isDefaultPrevented()||o.defaultPrevented)&&!(!e()&&!i())){var r=document.activeElement?document.activeElement:s.ownerDocument.activeElement;if(r){if(r.tagName==="IFRAME")r=r.contentDocument.activeElement;else for(;r.shadowRoot;)r=r.shadowRoot.activeElement;if(oC(r))return}var a=0,l=0;switch(o.which){case 37:o.metaKey?a=-s.contentWidth:o.altKey?a=-s.containerWidth:a=-30;break;case 38:o.metaKey?l=s.contentHeight:o.altKey?l=s.containerHeight:l=30;break;case 39:o.metaKey?a=s.contentWidth:o.altKey?a=s.containerWidth:a=30;break;case 40:o.metaKey?l=-s.contentHeight:o.altKey?l=-s.containerHeight:l=-30;break;case 32:o.shiftKey?l=s.containerHeight:l=-s.containerHeight;break;case 33:l=s.containerHeight;break;case 34:l=-s.containerHeight;break;case 36:l=s.contentHeight;break;case 35:l=-s.contentHeight;break;default:return}s.settings.suppressScrollX&&a!==0||s.settings.suppressScrollY&&l!==0||(t.scrollTop-=l,t.scrollLeft+=a,Se(s),n(a,l)&&o.preventDefault())}})}function dC(s){var t=s.element;function e(r,a){var l=Math.floor(t.scrollTop),c=t.scrollTop===0,h=l+t.offsetHeight===t.scrollHeight,d=t.scrollLeft===0,u=t.scrollLeft+t.offsetWidth===t.scrollWidth,p;return Math.abs(a)>Math.abs(r)?p=c||h:p=d||u,p?!s.settings.wheelPropagation:!0}function i(r){var a=r.deltaX,l=-1*r.deltaY;return(typeof a>"u"||typeof l>"u")&&(a=-1*r.wheelDeltaX/6,l=r.wheelDeltaY/6),r.deltaMode&&r.deltaMode===1&&(a*=10,l*=10),a!==a&&l!==l&&(a=0,l=r.wheelDelta),r.shiftKey?[-l,-a]:[a,l]}function n(r,a,l){if(!gs.isWebKit&&t.querySelector("select:focus"))return!0;if(!t.contains(r))return!1;for(var c=r;c&&c!==t;){if(c.classList.contains(at.element.consuming))return!0;var h=me(c);if(l&&h.overflowY.match(/(scroll|auto)/)){var d=c.scrollHeight-c.clientHeight;if(d>0&&(c.scrollTop>0&&l<0||c.scrollTop<d&&l>0))return!0}if(a&&h.overflowX.match(/(scroll|auto)/)){var u=c.scrollWidth-c.clientWidth;if(u>0&&(c.scrollLeft>0&&a<0||c.scrollLeft<u&&a>0))return!0}c=c.parentNode}return!1}function o(r){var a=i(r),l=a[0],c=a[1];if(!n(r.target,l,c)){var h=!1;s.settings.useBothWheelAxes?s.scrollbarYActive&&!s.scrollbarXActive?(c?t.scrollTop-=c*s.settings.wheelSpeed:t.scrollTop+=l*s.settings.wheelSpeed,h=!0):s.scrollbarXActive&&!s.scrollbarYActive&&(l?t.scrollLeft+=l*s.settings.wheelSpeed:t.scrollLeft-=c*s.settings.wheelSpeed,h=!0):(t.scrollTop-=c*s.settings.wheelSpeed,t.scrollLeft+=l*s.settings.wheelSpeed),Se(s),h=h||e(l,c),h&&!r.ctrlKey&&(r.stopPropagation(),r.preventDefault())}}typeof window.onwheel<"u"?s.event.bind(t,"wheel",o):typeof window.onmousewheel<"u"&&s.event.bind(t,"mousewheel",o)}function uC(s){if(!gs.supportsTouch&&!gs.supportsIePointer)return;var t=s.element;function e(f,b){var v=Math.floor(t.scrollTop),y=t.scrollLeft,T=Math.abs(f),x=Math.abs(b);if(x>T){if(b<0&&v===s.contentHeight-s.containerHeight||b>0&&v===0)return window.scrollY===0&&b>0&&gs.isChrome}else if(T>x&&(f<0&&y===s.contentWidth-s.containerWidth||f>0&&y===0))return!0;return!0}function i(f,b){t.scrollTop-=b,t.scrollLeft-=f,Se(s)}var n={},o=0,r={},a=null;function l(f){return f.targetTouches?f.targetTouches[0]:f}function c(f){return f.pointerType&&f.pointerType==="pen"&&f.buttons===0?!1:!!(f.targetTouches&&f.targetTouches.length===1||f.pointerType&&f.pointerType!=="mouse"&&f.pointerType!==f.MSPOINTER_TYPE_MOUSE)}function h(f){if(c(f)){var b=l(f);n.pageX=b.pageX,n.pageY=b.pageY,o=new Date().getTime(),a!==null&&clearInterval(a)}}function d(f,b,v){if(!t.contains(f))return!1;for(var y=f;y&&y!==t;){if(y.classList.contains(at.element.consuming))return!0;var T=me(y);if(v&&T.overflowY.match(/(scroll|auto)/)){var x=y.scrollHeight-y.clientHeight;if(x>0&&(y.scrollTop>0&&v<0||y.scrollTop<x&&v>0))return!0}if(b&&T.overflowX.match(/(scroll|auto)/)){var E=y.scrollWidth-y.clientWidth;if(E>0&&(y.scrollLeft>0&&b<0||y.scrollLeft<E&&b>0))return!0}y=y.parentNode}return!1}function u(f){if(c(f)){var b=l(f),v={pageX:b.pageX,pageY:b.pageY},y=v.pageX-n.pageX,T=v.pageY-n.pageY;if(d(f.target,y,T))return;i(y,T),n=v;var x=new Date().getTime(),E=x-o;E>0&&(r.x=y/E,r.y=T/E,o=x),e(y,T)&&f.preventDefault()}}function p(){s.settings.swipeEasing&&(clearInterval(a),a=setInterval(function(){if(s.isInitialized){clearInterval(a);return}if(!r.x&&!r.y){clearInterval(a);return}if(Math.abs(r.x)<.01&&Math.abs(r.y)<.01){clearInterval(a);return}if(!s.element){clearInterval(a);return}i(r.x*30,r.y*30),r.x*=.8,r.y*=.8},10))}gs.supportsTouch?(s.event.bind(t,"touchstart",h),s.event.bind(t,"touchmove",u),s.event.bind(t,"touchend",p)):gs.supportsIePointer&&(window.PointerEvent?(s.event.bind(t,"pointerdown",h),s.event.bind(t,"pointermove",u),s.event.bind(t,"pointerup",p)):window.MSPointerEvent&&(s.event.bind(t,"MSPointerDown",h),s.event.bind(t,"MSPointerMove",u),s.event.bind(t,"MSPointerUp",p)))}var pC=function(){return{handlers:["click-rail","drag-thumb","keyboard","wheel","touch"],maxScrollbarLength:null,minScrollbarLength:null,scrollingThreshold:1e3,scrollXMarginOffset:0,scrollYMarginOffset:0,suppressScrollX:!1,suppressScrollY:!1,swipeEasing:!0,useBothWheelAxes:!1,wheelPropagation:!0,wheelSpeed:1}},fC={"click-rail":lC,"drag-thumb":cC,keyboard:hC,wheel:dC,touch:uC},dn=function(t,e){var i=this;if(e===void 0&&(e={}),typeof t=="string"&&(t=document.querySelector(t)),!t||!t.nodeName)throw new Error("no element is specified to initialize PerfectScrollbar");this.element=t,t.classList.add(at.main),this.settings=pC();for(var n in e)this.settings[n]=e[n];this.containerWidth=null,this.containerHeight=null,this.contentWidth=null,this.contentHeight=null;var o=function(){return t.classList.add(at.state.focus)},r=function(){return t.classList.remove(at.state.focus)};this.isRtl=me(t).direction==="rtl",this.isRtl===!0&&t.classList.add(at.rtl),this.isNegativeScroll=function(){var c=t.scrollLeft,h=null;return t.scrollLeft=-1,h=t.scrollLeft<0,t.scrollLeft=c,h}(),this.negativeScrollAdjustment=this.isNegativeScroll?t.scrollWidth-t.clientWidth:0,this.event=new _s,this.ownerDocument=t.ownerDocument||document,this.scrollbarXRail=lr(at.element.rail("x")),t.appendChild(this.scrollbarXRail),this.scrollbarX=lr(at.element.thumb("x")),this.scrollbarXRail.appendChild(this.scrollbarX),this.scrollbarX.setAttribute("tabindex",0),this.event.bind(this.scrollbarX,"focus",o),this.event.bind(this.scrollbarX,"blur",r),this.scrollbarXActive=null,this.scrollbarXWidth=null,this.scrollbarXLeft=null;var a=me(this.scrollbarXRail);this.scrollbarXBottom=parseInt(a.bottom,10),isNaN(this.scrollbarXBottom)?(this.isScrollbarXUsingBottom=!1,this.scrollbarXTop=st(a.top)):this.isScrollbarXUsingBottom=!0,this.railBorderXWidth=st(a.borderLeftWidth)+st(a.borderRightWidth),Ot(this.scrollbarXRail,{display:"block"}),this.railXMarginWidth=st(a.marginLeft)+st(a.marginRight),Ot(this.scrollbarXRail,{display:""}),this.railXWidth=null,this.railXRatio=null,this.scrollbarYRail=lr(at.element.rail("y")),t.appendChild(this.scrollbarYRail),this.scrollbarY=lr(at.element.thumb("y")),this.scrollbarYRail.appendChild(this.scrollbarY),this.scrollbarY.setAttribute("tabindex",0),this.event.bind(this.scrollbarY,"focus",o),this.event.bind(this.scrollbarY,"blur",r),this.scrollbarYActive=null,this.scrollbarYHeight=null,this.scrollbarYTop=null;var l=me(this.scrollbarYRail);this.scrollbarYRight=parseInt(l.right,10),isNaN(this.scrollbarYRight)?(this.isScrollbarYUsingRight=!1,this.scrollbarYLeft=st(l.left)):this.isScrollbarYUsingRight=!0,this.scrollbarYOuterWidth=this.isRtl?rC(this.scrollbarY):null,this.railBorderYWidth=st(l.borderTopWidth)+st(l.borderBottomWidth),Ot(this.scrollbarYRail,{display:"block"}),this.railYMarginHeight=st(l.marginTop)+st(l.marginBottom),Ot(this.scrollbarYRail,{display:""}),this.railYHeight=null,this.railYRatio=null,this.reach={x:t.scrollLeft<=0?"start":t.scrollLeft>=this.contentWidth-this.containerWidth?"end":null,y:t.scrollTop<=0?"start":t.scrollTop>=this.contentHeight-this.containerHeight?"end":null},this.isAlive=!0,this.settings.handlers.forEach(function(c){return fC[c](i)}),this.lastScrollTop=Math.floor(t.scrollTop),this.lastScrollLeft=t.scrollLeft,this.event.bind(this.element,"scroll",function(c){return i.onScroll(c)}),Se(this)};dn.prototype.update=function(){this.isAlive&&(this.negativeScrollAdjustment=this.isNegativeScroll?this.element.scrollWidth-this.element.clientWidth:0,Ot(this.scrollbarXRail,{display:"block"}),Ot(this.scrollbarYRail,{display:"block"}),this.railXMarginWidth=st(me(this.scrollbarXRail).marginLeft)+st(me(this.scrollbarXRail).marginRight),this.railYMarginHeight=st(me(this.scrollbarYRail).marginTop)+st(me(this.scrollbarYRail).marginBottom),Ot(this.scrollbarXRail,{display:"none"}),Ot(this.scrollbarYRail,{display:"none"}),Se(this),hr(this,"top",0,!1,!0),hr(this,"left",0,!1,!0),Ot(this.scrollbarXRail,{display:""}),Ot(this.scrollbarYRail,{display:""}))},dn.prototype.onScroll=function(t){this.isAlive&&(Se(this),hr(this,"top",this.element.scrollTop-this.lastScrollTop),hr(this,"left",this.element.scrollLeft-this.lastScrollLeft),this.lastScrollTop=Math.floor(this.element.scrollTop),this.lastScrollLeft=this.element.scrollLeft)},dn.prototype.destroy=function(){this.isAlive&&(this.event.unbindAll(),fs(this.scrollbarX),fs(this.scrollbarY),fs(this.scrollbarXRail),fs(this.scrollbarYRail),this.removePsClasses(),this.element=null,this.scrollbarX=null,this.scrollbarY=null,this.scrollbarXRail=null,this.scrollbarYRail=null,this.isAlive=!1)},dn.prototype.removePsClasses=function(){this.element.className=this.element.className.split(" ").filter(function(t){return!t.match(/^ps([-_].+|)$/)}).join(" ")};const Kl="perfectScrollbar",_C="perfect-scrollbar",dr="te.perfectScrollbar",be="te",ve="ps",Ul=[{te:`scrollX.${be}.${ve}`,ps:"ps-scroll-x"},{te:`scrollY.${be}.${ve}`,ps:"ps-scroll-y"},{te:`scrollUp.${be}.${ve}`,ps:"ps-scroll-up"},{te:`scrollDown.${be}.${ve}`,ps:"ps-scroll-down"},{te:`scrollLeft.${be}.${ve}`,ps:"ps-scroll-left"},{te:`scrollRight.${be}.${ve}`,ps:"ps-scroll-right"},{te:`scrollXEnd.${be}.${ve}`,ps:"ps-x-reach-end"},{te:`scrollYEnd.${be}.${ve}`,ps:"ps-y-reach-end"},{te:`scrollXStart.${be}.${ve}`,ps:"ps-x-reach-start"},{te:`scrollYStart.${be}.${ve}`,ps:"ps-y-reach-start"}],gC={handlers:["click-rail","drag-thumb","keyboard","wheel","touch"],wheelSpeed:1,wheelPropagation:!0,swipeEasing:!0,minScrollbarLength:null,maxScrollbarLength:null,scrollingThreshold:1e3,useBothWheelAxes:!1,suppressScrollX:!1,suppressScrollY:!1,scrollXMarginOffset:0,scrollYMarginOffset:0,positionRight:!0},mC={handlers:"(string|array)",wheelSpeed:"number",wheelPropagation:"boolean",swipeEasing:"boolean",minScrollbarLength:"(number|null)",maxScrollbarLength:"(number|null)",scrollingThreshold:"number",useBothWheelAxes:"boolean",suppressScrollX:"boolean",suppressScrollY:"boolean",scrollXMarginOffset:"number",scrollYMarginOffset:"number",positionRight:"boolean"},bC={ps:"group/ps overflow-hidden [overflow-anchor:none] touch-none",railX:"group/x absolute bottom-0 h-[0.9375rem] hidden opacity-0 transition-[background-color,_opacity] duration-200 ease-linear motion-reduce:transition-none z-[1035] group-[&.ps--active-x]/ps:block group-hover/ps:opacity-60 group-focus/ps:opacity-60 group-[&.ps--scrolling-x]/ps:opacity-60 hover:!opacity-90 focus:!opacity-90 [&.ps--clicking]:!opacity-90 outline-none",railXColors:"group-[&.ps--active-x]/ps:bg-transparent hover:!bg-[#eee] focus:!bg-[#eee] [&.ps--clicking]:!bg-[#eee] dark:hover:!bg-[#555] dark:focus:!bg-[#555] dark:[&.ps--clicking]:!bg-[#555]",railXThumb:"absolute bottom-0.5 rounded-md h-1.5 group-focus/ps:opacity-100 group-active/ps:opacity-100 [transition:background-color_.2s_linear,_height_.2s_ease-in-out] group-hover/x:h-[11px] group-focus/x:h-[0.6875rem] group-[&.ps--clicking]/x:bg-[#999] group-[&.ps--clicking]/x:h-[11px] outline-none",railXThumbColors:"bg-[#aaa] group-hover/x:bg-[#999] group-focus/x:bg-[#999]",railY:"group/y absolute right-0 w-[0.9375rem] hidden opacity-0 transition-[background-color,_opacity] duration-200 ease-linear motion-reduce:transition-none z-[1035] group-[&.ps--active-y]/ps:block group-hover/ps:opacity-60 group-focus/ps:opacity-60 group-[&.ps--scrolling-y]/ps:opacity-60 hover:!opacity-90 focus:!opacity-90 [&.ps--clicking]:!opacity-90 outline-none",railYColors:"group-[&.ps--active-y]/ps:bg-transparent hover:!bg-[#eee] focus:!bg-[#eee] [&.ps--clicking]:!bg-[#eee] dark:hover:!bg-[#555] dark:focus:!bg-[#555] dark:[&.ps--clicking]:!bg-[#555]",railYThumb:"absolute right-0.5 rounded-md w-1.5 group-focus/ps:opacity-100 group-active/ps:opacity-100 [transition:background-color_.2s_linear,_width_.2s_ease-in-out,_opacity] group-hover/y:w-[11px] group-focus/y:w-[0.6875rem] group-[&.ps--clicking]/y:w-[11px] outline-none",railYThumbColors:"bg-[#aaa] group-hover/y:bg-[#999] group-focus/y:bg-[#999] group-[&.ps--clicking]/y:bg-[#999]"},vC={ps:"string",railX:"string",railXColors:"string",railXThumb:"string",railXThumbColors:"string",railY:"string",railYColors:"string",railYThumb:"string",railYThumbColors:"string"};class ms{constructor(t,e={},i={}){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this.perfectScrollbar=null,this._observer=null,this._psClasses=[{ps:"ps__rail-x",te:this._classes.railX,teColor:this._classes.railXColors},{ps:"ps__rail-y",te:this._classes.railY,teColor:this._classes.railYColors},{ps:"ps__thumb-x",te:this._classes.railXThumb,teColor:this._classes.railXThumbColors},{ps:"ps__thumb-y",te:this._classes.railYThumb,teColor:this._classes.railYThumbColors}],this._element&&(O.setData(t,dr,this),g.addClass(this._element,_C)),this.init()}static get NAME(){return Kl}get railX(){return m.findOne(".ps__rail-x",this._element)}get railY(){return m.findOne(".ps__rail-y",this._element)}_getConfig(t){const e=g.getDataAttributes(this._element);return e.handlers!==void 0&&(e.handlers=e.handlers.split(" ")),t={...gC,...e,...t},L(Kl,t,mC),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...bC,...e,...t},L(Kl,t,vC),t}dispose(){this._options.positionRight&&this._observer.disconnect(),O.removeData(this._element,dr),this._element=null,this._dataAttrOptions=null,this._options=null,this.perfectScrollbar.destroy(),this.removeEvent(Ul),this.perfectScrollbar=null}init(){if(this.perfectScrollbar=new dn(this._element,this._options),this._addPerfectScrollbarStyles(),this._updateScrollPosition(),this.perfectScrollbar.update(),this._initEvents(Ul),this._options.positionRight){this._observer=new ResizeObserver(()=>{setTimeout(()=>{this._updateScrollPosition()},100)});const t={attributes:!0,attributeFilter:["class","className"]};this._observer.observe(this._element,t)}}_updateScrollPosition(){const t=getComputedStyle(this._element).getPropertyValue("height"),e=getComputedStyle(this._element).getPropertyValue("width");this.railX&&(this.railX.style.transform=`translateY(calc(-100% + ${this._canTransform(t)?t:"0px"}))`),this.railY&&(this.railY.style.transform=`translateX(calc(-100% + ${this._canTransform(e)?e:"0px"}))`)}_canTransform(t){return t&&t.includes("px")}update(){return this.perfectScrollbar.update()}_initEvents(t=[]){t.forEach(({ps:e,te:i})=>_.on(this._element,e,n=>_.trigger(this._element,i,{e:n})))}_addPerfectScrollbarStyles(){this._psClasses.forEach(t=>{const e=m.findOne(`.${t.ps}`,this._element);g.addClass(e,t.te),g.addClass(e,t.teColor)}),g.addClass(this._element,this._classes.ps),g.removeClass(this._element,"ps")}removeEvent(t){let e=[];typeof t=="string"&&(e=Ul.filter(({te:i})=>i===t)),e.forEach(({ps:i,te:n})=>{_.off(this._element,i),_.off(this._element,n)})}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,dr);const i=typeof t=="object"&&t;if(!(!e&&/dispose|hide/.test(t))&&(e||(e=new ms(this,i)),typeof t=="string")){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}static getInstance(t){return O.getData(t,dr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const yC="data-te-datatable-select-ref",TC="data-te-datatable-pagination-nav-ref",EC="data-te-datatable-pagination-right-ref",xC="data-te-datatable-pagination-left-ref",CC="data-te-datatable-pagination-start-ref",AC="data-te-datatable-pagination-end-ref",wC=({text:s,entries:t,entriesOptions:e,fullPagination:i,rowsText:n,allText:o,paginationStartIconTemplate:r,paginationLeftIconTemplate:a,paginationRightIconTemplate:l,paginationEndIconTemplate:c,classes:h},d,u)=>{const p=e.map(f=>f==="All"?`<option value="${f}" ${f===t?"selected":""}>${o}</option>`:`<option value="${f}" ${f===t?"selected":""}>${f}</option>`).join(`
+`);return`
+<div class="${h.pagination} ${u?`${h.paginationBordered}`:""} ${h.borderColor} ${h.color}">
+  <div class="${h.selectItemsWrapper}">  
+    <p class="${h.paginationRowsText} ${d?`${h.loadingPaginationRowsText}`:""}">${n}</p>
+    <div class="${h.selectWrapper} ${d?`${h.loadingPaginationSelectWrapper}`:""}">
+      <select name="entries"
+        ${d?"disabled":""} class="select" ${yC}>
+        ${p}
+      </select>
+    </div>
+  </div>
+  <div class="${h.paginationNav} ${d?`${h.loadingPaginationNav}`:""}" ${TC}>
+  ${s}
+  </div>
+  <div class="${h.paginationButtonsWrapper}">
+    ${i?`<button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationStartButton}" ${CC}>
+           ${r}
+          </button>`:""}
+    <button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationLeftButton}" ${xC}>
+      ${a}
+  </button>
+    <button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationRightButton}" ${EC}>
+      ${l}
+  </button>
+    ${i?`<button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationEndButton}" ${AC}>
+           ${c}
+          </button>`:""}
+  </div>
+</div>
+`},kC="data-te-datatable-sort-icon-ref",SC="data-te-datatable-header-checkbox-ref",OC=(s,t,e,i,n,o,r,a)=>{const l=e?`
+  <th scope="col">
+    <div class="${a.checkboxHeaderWrapper}">
+      <input
+        class="${a.checkboxHeader}"
+        type="checkbox"
+        value=""
+        ${SC}
+        />
+    </div>
+  </th>
+  `:'<th scope="col"></th>',c=s.map((h,d)=>{const u=h.fixed?s.filter((p,f)=>p.fixed===h.fixed&&f<d).reduce((p,f)=>p+f.width,0):null;return`<th class="${a.column} ${i?`${a.tableBordered}`:""} ${a.borderColor} ${n?`${a.sm}`:""} ${h.fixed?`${a.fixedHeader} ${a.color}`:""} ${o?`${a.loadingColumn}`:""}" style="${h.fixed?`${h.fixed==="right"?"right":"left"}: ${u}px;`:""}" scope="col">${h.sort?`<div class="${a.sortIconWrapper}"><span class="${a.sortIcon} ${o?"invisible":""}" data-te-sort="${h.field}" ${kC}>${r}</span>`:""} <span class="${h.sort?"":"pl-[18px]"}">${h.label}</span></div></th>`});return[t?l:"",...c].join(`
+`)},IC="data-te-datatable-row-ref",DC="data-te-datatable-row-checkbox-ref",MC="data-te-datatable-cell-ref",LC=({rows:s,columns:t,noFoundMessage:e,edit:i,selectable:n,loading:o,bordered:r,borderless:a,striped:l,hover:c,sm:h,classes:d})=>{const u=s.map(p=>{const f=`
+      <td data-te-field="checkbox" class="${r?`${d.tableBordered} ${d.borderColor}`:""}">
+        <div class="${d.checkboxRowWrapper}">
+          <input
+            class="${d.checkboxRow}"
+            type="checkbox"
+            value=""
+            data-te-row-index="${p.rowIndex}"  ${DC}/>
+        </div>
+      </td>`,b=t.map((v,y)=>{const T={};if(v.width&&(T["min-width"]=`${v.width-1}px`,T["max-width"]=`${v.width}px`,T.width=`${v.width}px`),v.fixed){const E=t.filter((C,A)=>C.fixed===v.fixed&&A<y).reduce((C,A)=>C+A.width,0);T[v.fixed==="right"?"right":"left"]=`${E}px`}return`<td style="${Object.keys(T).map(E=>`${E}: ${T[E]}`).join("; ")}" class="${d.rowItem} ${d.borderColor} ${i?`${d.edit}`:""} ${r?`${d.tableBordered}`:""} ${h?`${d.sm}`:""} ${v.fixed?`${d.fixedHeader} ${d.color}`:""}" ${MC} data-te-field="${v.field}" ${i&&'contenteditable="true"'}>${p[v.field]}</td>`}).join("");return`<tr scope="row" class="${d.row} ${d.borderColor} ${d.rowAnimation} ${l?`${d.striped}`:""} ${a?`${d.borderless}`:""} ${c?`${d.hoverRow}`:""}" data-te-index="${p.rowIndex}" ${IC}>${n?f:""}${b}</tr>`});return s.length>0||o?u.join(`
+`):`<tr class="${d.noFoundMessageWrapper} ${d.borderColor}"><td class="${d.noFoundMessage}">${e}</td></tr>`},$C="data-te-datatable-inner-ref",RC="data-te-datatable-header-ref",Op=({columns:s,rows:t,noFoundMessage:e,edit:i,multi:n,selectable:o,loading:r,loadingMessage:a,pagination:l,bordered:c,borderless:h,striped:d,hover:u,fixedHeader:p,sm:f,sortIconTemplate:b,classes:v})=>{const y=LC({rows:t,columns:s,noFoundMessage:e,edit:i,loading:r,selectable:o,bordered:c,borderless:h,striped:d,hover:u,sm:f,classes:v}),T=OC(s,o,n,c,f,r,b,v);return{table:`
+<div class="${v.color}" ${$C}>
+  <table class="${v.table}">
+    <thead class="${v.tableHeader} ${c?`${v.tableBordered}`:""} ${h?`${v.borderless}`:""} ${v.borderColor}" ${RC}>
+      <tr>
+        ${T}
+      </tr>
+    </thead>
+    <tbody class="${p?`${v.fixedHeaderBody}`:""}">
+      ${r?"":y}
+    </tbody>
+  </table>
+</div>
+${r?`
+  <div class="${v.loadingItemsWrapper}">
+    <div class="${v.loadingProgressBarWrapper}">
+      <div class="${v.loadingProgressBar}"></div>
+    </div>
+  </div>
+<p class="${v.loadingMessage}">${a}</p>
+`:""}
+${l.enable?wC(l,r,c):""}
+  `,rows:y,column:T}},PC=({rows:s,field:t,order:e})=>s.sort((n,o)=>{let r=n[t],a=o[t];return typeof r=="string"&&(r=r.toLowerCase()),typeof a=="string"&&(a=a.toLowerCase()),r<a?e==="desc"?1:-1:r>a?e==="desc"?-1:1:0}),NC=(s,t,e)=>{if(!t)return s;const i=n=>{const o=document.createElement("div");return o.innerHTML=n,n=o.textContent||o.innerText||"",n.toString().toLowerCase().match(t.toLowerCase())};return s.filter(n=>{if(e&&typeof e=="string")return i(n[e]);let o=Object.values(n);return e&&Array.isArray(e)&&(o=Object.keys(n).filter(r=>e.includes(r)).map(r=>n[r])),o.filter(r=>i(r)).length>0})},Ip=({rows:s,entries:t,activePage:e})=>{const i=e*t;return s.slice(i,i+Number(t))},un="datatable",Ht=`data-te-${un}`,pn=`te.${un}`,ur=`.${pn}`,BC=`[${Ht}-inner-ref]`,Xl=`[${Ht}-cell-ref]`,HC=`[${Ht}-header-ref]`,VC=`[${Ht}-header-checkbox-ref]`,FC=`[${Ht}-pagination-right-ref]`,WC=`[${Ht}-pagination-left-ref]`,zC=`[${Ht}-pagination-start-ref]`,jC=`[${Ht}-pagination-end-ref]`,YC=`[${Ht}-pagination-nav-ref]`,KC=`[${Ht}-select-ref]`,Gl=`[${Ht}-sort-icon-ref]`,fn=`[${Ht}-row-ref]`,ql=`[${Ht}-row-checkbox-ref]`,UC=`selectRows${ur}`,Dp=`render${ur}`,XC=`rowClick${ur}`,GC=`update${ur}`,qC=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 10.5L12 3m0 0l7.5 7.5M12 3v18" />
+</svg>`,ZC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M18.75 19.5l-7.5-7.5 7.5-7.5m-6 15L5.25 12l7.5-7.5" />
+</svg>`,QC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M15.75 19.5L8.25 12l7.5-7.5" />
+</svg>`,JC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M8.25 4.5l7.5 7.5-7.5 7.5" />
+</svg>`,tA=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M11.25 4.5l7.5 7.5-7.5 7.5m-6-15l7.5 7.5-7.5 7.5"/>
+</svg>`,eA="border-neutral-200 dark:border-neutral-500",iA="border-none",sA="relative float-left -ml-[1.5rem] mr-[6px] mt-[0.15rem] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:-mt-px checked:after:ml-[0.25rem] checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-l-0 checked:after:border-t-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:-mt-px checked:focus:after:ml-[0.25rem] checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-l-0 checked:focus:after:border-t-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent dark:border-neutral-600 dark:checked:border-primary dark:checked:bg-primary dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:border-neutral-400",nA="mb-[0.125rem] min-h-[1.5rem] pl-[1.5rem] ml-3 flex items-center",oA="relative float-left -ml-[1.5rem] mr-[6px] mt-[0.15rem] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:-mt-px checked:after:ml-[0.25rem] checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-l-0 checked:after:border-t-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:-mt-px checked:focus:after:ml-[0.25rem] checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-l-0 checked:focus:after:border-t-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent dark:border-neutral-600 dark:checked:border-primary dark:checked:bg-primary dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:border-neutral-400",rA="mb-[0.125rem] min-h-[1.5rem] pl-[1.5rem] ml-3 flex items-center",aA="bg-white dark:bg-neutral-800",lA="py-4 pl-1 text-clip overflow-hidden text-[#212529] dark:text-white",cA="focus:outline-none",hA="sticky top-0 z-30",dA="sticky z-10 bg-inherit",uA="hover:bg-neutral-100 dark:hover:bg-neutral-700",pA="pointer-events-none cursor-none text-neutral-400 dark:text-neutral-300",fA="h-[2px] relative w-full overflow-hidden",_A="text-center text-neutral-500 font-ligh text-sm my-4 dark:text-neutral-400",gA="text-neutral-500 dark:text-neutral-300",mA="text-neutral-500 dark:text-neutral-300",bA="pointer-events-none cursor-none",vA="h-full w-[45%] bg-primary-400 dark:bg-primary-600",yA="h-full animate-[progress_3s_ease-in-out_infinite]",TA="pl-2 py-3 font-light text-sm dark:text-neutral-300",EA="border-b",xA="flex md:flex-row justify-end items-center py-2 space-x-4 text-sm flex-col leading-[1.6]",CA="border border-t-0",AA="order-1 my-3 md:order-none md:my-0 md:pr-1",wA="inline-block rounded p-2.5 text-xs font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",kA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",SA="font-normal order-2 mb-3 md:order-none md:mb-0",OA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",IA="font-light",DA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",MA="border-b",LA="transition ease-in-out duration-300 motion-reduce:transition-none",$A="whitespace-nowrap text-clip overflow-auto px-[1.4rem] py-4",RA="relative",PA="!bg-neutral-100 dark:!bg-neutral-600",NA="flex items-center space-x-4 order-3 md:order-none",BA="w-[70px]",HA="!py-2",VA="w-[15px] h-[10px] origin-bottom font-black mr-1 opacity-0 text-neutral-500 group-hover:opacity-100 transition hover:ease-in-out transform ease-linear duration-300 motion-reduce:transition-none dark:text-neutral-400",FA="flex flex-row group",WA="[&:nth-child(odd)]:bg-neutral-50 [&:nth-child(odd)]:dark:bg-neutral-700",zA="border",jA="border-b font-normal px-[1.4rem]",YA="text-left text-sm font-light w-full leading-[1.6]",KA={bordered:"boolean",borderless:"boolean",clickableRows:"boolean",defaultValue:"string",edit:"boolean",entries:"(number|string)",entriesOptions:"array",fullPagination:"boolean",hover:"boolean",loading:"boolean",loadingMessage:"string",maxWidth:"(null|number|string)",maxHeight:"(null|number|string)",multi:"boolean",noFoundMessage:"string",pagination:"boolean",selectable:"boolean",sm:"boolean",sortField:"(null|string)",sortOrder:"string",fixedHeader:"boolean",striped:"boolean",rowsText:"string",ofText:"string",allText:"string",forceSort:"boolean",sortIconTemplate:"string",paginationStartIconTemplate:"string",paginationEndIconTemplate:"string",paginationLeftIconTemplate:"string",paginationRightIconTemplate:"string"},UA={bordered:!1,borderless:!1,clickableRows:!1,defaultValue:"-",edit:!1,entries:10,entriesOptions:[10,25,50,200],fixedHeader:!1,fullPagination:!1,hover:!1,loading:!1,loadingMessage:"Loading results...",maxWidth:null,maxHeight:null,multi:!1,noFoundMessage:"No matching results found",pagination:!0,selectable:!1,sm:!1,sortField:null,sortOrder:"asc",striped:!1,rowsText:"Rows per page:",ofText:"of",allText:"All",forceSort:!1,sortIconTemplate:qC,paginationStartIconTemplate:ZC,paginationEndIconTemplate:tA,paginationLeftIconTemplate:QC,paginationRightIconTemplate:JC},XA={label:"string",field:"string",fixed:"(boolean|string)",format:"(function|null)",width:"(number|null)",sort:"boolean",columnIndex:"number"},GA={label:"",field:"",fixed:!1,format:null,width:null,sort:!0,columnIndex:0},qA={table:YA,tableHeader:jA,column:lA,pagination:xA,selectWrapper:BA,scroll:RA,tableBordered:zA,paginationBordered:CA,borderless:iA,checkboxRowWrapper:rA,checkboxRow:oA,checkboxHeaderWrapper:nA,checkboxHeader:sA,row:MA,rowItem:$A,striped:WA,sortIconWrapper:FA,sortIcon:VA,paginationRowsText:IA,paginationNav:SA,paginationButtonsWrapper:AA,hoverRow:uA,borderColor:eA,color:aA,fixedHeader:hA,fixedHeaderBody:dA,selectableRow:PA,rowAnimation:LA,sm:HA,edit:cA,selectItemsWrapper:NA,paginationStartButton:DA,paginationLeftButton:kA,paginationRightButton:OA,paginationEndButton:wA,loadingItemsWrapper:fA,loadingProgressBarWrapper:yA,loadingProgressBar:vA,loadingMessage:_A,loadingPaginationRowsText:mA,loadingPaginationSelectWrapper:bA,loadingPaginationNav:gA,loadingColumn:pA,noFoundMessageWrapper:EA,noFoundMessage:TA},ZA={table:"string",tableHeader:"string",column:"string",pagination:"string",selectWrapper:"string",scroll:"string",tableBordered:"string",paginationBordered:"string",borderless:"string",checkboxRowWrapper:"string",checkboxRow:"string",checkboxHeaderWrapper:"string",checkboxHeader:"string",row:"string",rowItem:"string",striped:"string",sortIconWrapper:"string",sortIcon:"string",paginationRowsText:"string",paginationNav:"string",paginationButtonsWrapper:"string",hoverRow:"string",borderColor:"string",color:"string",fixedHeader:"string",fixedHeaderBody:"string",selectableRow:"string",rowAnimation:"string",sm:"string",edit:"string",selectItemsWrapper:"string",paginationStartButton:"string",paginationLeftButton:"string",paginationRightButton:"string",paginationEndButton:"string",loadingItemsWrapper:"string",loadingProgressBarWrapper:"string",loadingProgressBar:"string",loadingMessage:"string",loadingPaginationRowsText:"string",loadingPaginationSelectWrapper:"string",loadingPaginationNav:"string",loadingColumn:"string",noFoundMessageWrapper:"string",noFoundMessage:"string"};class pr{constructor(t,e={},i={},n={}){this._element=t,this._options=this._getOptions(i),this._classes=this._getClasses(n),this._sortReverse=!1,this._activePage=0,this._search="",this._searchColumn=null,this._paginationLeft=null,this._paginationRight=null,this._paginationStart=null,this._paginationEnd=null,this._select=null,this._selectInstance=null,this._selected=[],this._checkboxes=null,this._headerCheckbox=null,this._rows=this._getRows(e.rows),this._columns=this._getColumns(e.columns),this._element&&(O.setData(t,pn,this),this._perfectScrollbar=null,this._setup())}static get NAME(){return un}get columns(){return this._columns.map((t,e)=>{let i={...GA,field:`field_${e}`,columnIndex:e};return typeof t=="string"?i.label=t:typeof t=="object"&&(i={...i,...t}),L("column",i,XA),i})}get rows(){return this._rows.map((t,e)=>{const i={rowIndex:e};return Array.isArray(t)?this.columns.forEach((n,o)=>{t[o]===0?i[n.field]=t[o]:i[n.field]=t[o]||this._options.defaultValue}):typeof t=="object"&&this.columns.forEach(n=>{t[n.field]===0?i[n.field]=t[n.field]:i[n.field]=t[n.field]||this._options.defaultValue}),i})}get searchResult(){return NC(this.rows,this._search,this._searchColumn)}get computedRows(){let t=[...this.searchResult];return this._options.sortOrder&&(t=PC({rows:t,field:this._options.sortField,order:this._options.sortOrder})),this._options.pagination&&(this._options.entries==="All"?t=Ip({rows:t,entries:t.length,activePage:this._activePage}):t=Ip({rows:t,entries:this._options.entries,activePage:this._activePage})),t}get pages(){return this._options.entries==="All"?1:Math.ceil(this.searchResult.length/this._options.entries)}get navigationText(){const t=this._activePage*this._options.entries;return this.searchResult.length===0?`0 ${this._options.ofText} 0`:this._options.entries==="All"?`1 - ${this.searchResult.length} ${this._options.ofText} ${this.searchResult.length}`:`${t+1} - ${this.computedRows.length+t} ${this._options.ofText} ${this.searchResult.length}`}get tableOptions(){return{classes:this._classes,columns:this.columns,rows:this.computedRows,noFoundMessage:this._options.noFoundMessage,edit:this._options.edit,loading:this._options.loading,loaderClass:this._options.loaderClass,loadingMessage:this._options.loadingMessage,selectable:this._options.selectable,multi:this._options.multi,bordered:this._options.bordered,borderless:this._options.borderless,striped:this._options.striped,hover:this._options.hover,fixedHeader:this._options.fixedHeader,sm:this._options.sm,sortIconTemplate:this._options.sortIconTemplate,pagination:{enable:this._options.pagination,text:this.navigationText,entries:this._options.entries,entriesOptions:this._options.entriesOptions,fullPagination:this._options.fullPagination,rowsText:this._options.rowsText,ofText:this._options.ofText,allText:this._options.allText,paginationStartIconTemplate:this._options.paginationStartIconTemplate,paginationLeftIconTemplate:this._options.paginationLeftIconTemplate,paginationRightIconTemplate:this._options.paginationRightIconTemplate,paginationEndIconTemplate:this._options.paginationEndIconTemplate,classes:this._classes},forceSort:this._options.forceSort}}update(t,e={}){t&&t.rows&&(this._rows=t.rows),t&&t.columns&&(this._columns=t.columns),this._clearClassList(e),this._options=this._getOptions({...this._options,...e}),this._setup(),this._performSort()}dispose(){this._selectInstance&&this._selectInstance.dispose(),O.removeData(this._element,pn),this._removeEventListeners(),this._perfectScrollbar.destroy(),this._element=null}search(t,e){this._search=t,this._searchColumn=e,this._activePage=0,this._options.pagination&&this._toggleDisableState(),this._renderRows(),this._options.maxHeight&&(this._perfectScrollbar.element.scrollTop=0,this._perfectScrollbar.update())}sort(t,e="asc"){this._options.sortOrder=e,typeof t=="string"?this._options.sortField=this.columns.find(n=>n.label===t).field:this._options.sortField=t.field;const i=m.findOne(`[data-te-sort="${this._options.sortField}"]`,this._element);this._activePage=0,this._toggleDisableState(),this._renderRows(),this._setActiveSortIcon(i)}setActivePage(t){t<this.pages&&this._changeActivePage(t)}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...qA,...e,...t},L(un,t,ZA),t}_changeActivePage(t){this._activePage=t,this._toggleDisableState(),this._renderRows()}_clearClassList(t){["hover","bordered","borderless","sm","striped"].forEach(e=>{this._options[e]&&!t[e]&&g.removeDataAttribute(`data-te-${e}`)})}_emitSelectEvent(){_.trigger(this._element,UC,{selectedRows:this.rows.filter(t=>this._selected.indexOf(t.rowIndex)!==-1),selectedIndexes:this._selected,allSelected:this._selected.length===this.rows.length})}_getRows(t=[]){const e=m.findOne("tbody",this._element);return e?[...m.find("tr",e).map(n=>m.find("td",n).map(o=>o.innerHTML)),...t]:t}_getColumns(t=[]){const e=m.findOne("thead",this._element);if(!e)return t;const i=m.findOne("tr",e);return[...m.find("th",i).map(o=>({label:o.innerHTML,...g.getDataAttributes(o)})),...t]}_getCSSValue(t){return typeof t=="string"?t:`${t}px`}_getOptions(t){const e={...UA,...g.getDataAttributes(this._element),...t};return L(un,e,KA),e}_setActiveRows(){m.find(fn,this._element).forEach(t=>{this._selected.includes(g.getDataAttribute(t,"index"))?g.addClass(t,`active ${this._classes.selectableRow}`):g.removeClass(t,`active ${this._classes.selectableRow}`)})}_setEntries(t){this._options=this._getOptions({...this._options,entries:t.target.value}),this._activePage>this.pages-1&&(this._activePage=this.pages-1),this._toggleDisableState(),this._renderRows()}_setSelected(){m.find(ql,this._element).forEach(t=>{const e=g.getDataAttribute(t,"rowIndex");t.checked=this._selected.includes(e)}),this._setActiveRows()}_setActiveSortIcon(t){m.find(Gl,this._element).forEach(e=>{const i=this._options.sortOrder==="desc"&&e===t?180:0;g.style(e,{transform:`rotate(${i}deg)`}),e===t&&this._options.sortOrder?g.addClass(e,"opacity-100"):g.removeClass(e,"opacity-100")})}_setup(){this._renderTable(),this._options.pagination&&this._setupPagination(),this._options.edit&&this._setupEditable(),this._options.clickableRows&&this._setupClickableRows(),this._options.selectable&&this._setupSelectable(),this._setupScroll(),this._setupSort()}_setupClickableRows(){m.find(fn,this._element).forEach(t=>{const e=g.getDataAttribute(t,"index");g.addClass(t,"cursor-pointer"),_.on(t,"click",i=>{m.matches(i.target,ql)||_.trigger(this._element,XC,{index:e,row:this.rows[e]})})})}_setupEditable(){m.find(fn,this._element).forEach(t=>{const e=g.getDataAttribute(t,"index");m.find(Xl,t).forEach(i=>{_.on(i,"input",n=>this._updateRow(n,e))})})}_setupScroll(){const t=m.findOne(BC,this._element),e={};if(this._options.maxHeight&&(e.maxHeight=this._getCSSValue(this._options.maxHeight)),this._options.maxWidth){const i=this._getCSSValue(this._options.maxWidth);e.maxWidth=i,g.style(this._element,{maxWidth:i})}if(g.style(t,e),g.addClass(t,`${this._classes.scroll}`),this._options.fixedHeader){let i=m.find(HC,this._element);this._options.selectable&&(i=i.filter((n,o)=>(g.addClass(n,`${this._classes.fixedHeader} ${this._classes.color}`),o!==0))),i.forEach((n,o)=>{g.addClass(n,`${this._classes.fixedHeader} ${this._classes.color}`),this.columns[o].fixed&&g.addClass(n,"!z-40")})}this._perfectScrollbar=new ms(t)}_setupSort(){m.find(Gl,this._element).forEach(t=>{const e=g.getDataAttribute(t,"sort"),[i]=m.parents(t,"th");if(this.columns.sort)g.addClass(i,"cursor-pointer");else return;e===this._options.sortField&&this._setActiveSortIcon(t),_.on(i,"click",()=>{this._options.sortField===e&&this._options.sortOrder==="asc"?this._options.sortOrder="desc":this._options.sortField===e&&this._options.sortOrder==="desc"?this._options.sortOrder=this._options.forceSort?"asc":null:this._options.sortOrder="asc",this._options.sortField=e,this._activePage=0,this._performSort(),this._setActiveSortIcon(t)})})}_performSort(){this._toggleDisableState(),this._renderRows()}_setupSelectable(){this._checkboxes=m.find(ql,this._element),this._headerCheckbox=m.findOne(VC,this._element),_.on(this._headerCheckbox,"input",t=>this._toggleSelectAll(t)),this._checkboxes.forEach(t=>{const e=g.getDataAttribute(t,"rowIndex");_.on(t,"input",i=>this._toggleSelectRow(i,e))})}_setupPagination(){this._paginationRight=m.findOne(FC,this._element),this._paginationLeft=m.findOne(WC,this._element),_.on(this._paginationRight,"click",()=>this._changeActivePage(this._activePage+1)),_.on(this._paginationLeft,"click",()=>this._changeActivePage(this._activePage-1)),this._options.fullPagination&&(this._paginationStart=m.findOne(zC,this._element),this._paginationEnd=m.findOne(jC,this._element),_.on(this._paginationStart,"click",()=>this._changeActivePage(0)),_.on(this._paginationEnd,"click",()=>this._changeActivePage(this.pages-1))),this._toggleDisableState(),this._setupPaginationSelect()}_setupPaginationSelect(){this._select=m.findOne(KC,this._element),this._selectInstance=new on(this._select),_.on(this._select,"valueChange.te.select",t=>this._setEntries(t))}_removeEventListeners(){this._options.pagination&&(_.off(this._paginationRight,"click"),_.off(this._paginationLeft,"click"),_.off(this._select,"valueChange.te.select"),this._options.fullPagination&&(_.off(this._paginationStart,"click"),_.off(this._paginationEnd,"click"))),this._options.edit&&m.find(Xl,this._element).forEach(t=>{_.off(t,"input")}),this._options.clickableRows&&m.find(fn,this._element).forEach(t=>{_.off(t,"click")}),m.find(Gl,this._element).forEach(t=>{const[e]=m.parents(t,"th");_.off(e,"click")}),this._options.selectable&&(_.off(this._headerCheckbox,"input"),this._checkboxes.forEach(t=>{_.off(t,"input")}))}_renderTable(){this._element.innerHTML=Op(this.tableOptions).table,this._formatCells(),_.trigger(this._element,Dp)}_renderRows(){const t=m.findOne("tbody",this._element);if(this._options.pagination){const e=m.findOne(YC,this._element);e.innerText=this.navigationText}t.innerHTML=Op(this.tableOptions).rows,this._formatCells(),this._options.edit&&this._setupEditable(),this._options.selectable&&(this._setupSelectable(),this._setSelected()),this._options.clickableRows&&this._setupClickableRows(),_.trigger(this._element,Dp)}_formatCells(){m.find(fn,this._element).forEach(e=>{const i=g.getDataAttribute(e,"index");m.find(Xl,e).forEach(o=>{const r=g.getDataAttribute(o,"field"),a=this.columns.find(l=>l.field===r);a&&a.format!==null&&a.format(o,this.rows[i][r])})})}_toggleDisableState(){this._options.pagination!==!1&&(this._activePage===0||this._options.loading?(this._paginationLeft.setAttribute("disabled",""),this._options.fullPagination&&this._paginationStart.setAttribute("disabled","")):(this._paginationLeft.removeAttribute("disabled"),this._options.fullPagination&&this._paginationStart.removeAttribute("disabled")),this._activePage===this.pages-1||this._options.loading||this.pages===0?(this._paginationRight.setAttribute("disabled",""),this._options.fullPagination&&this._paginationEnd.setAttribute("disabled","")):(this._paginationRight.removeAttribute("disabled"),this._options.fullPagination&&this._paginationEnd.removeAttribute("disabled")))}_toggleSelectAll(t){t.target.checked?this._selected=this.rows.map(e=>e.rowIndex):this._selected=[],this._setSelected(),this._emitSelectEvent()}_toggleSelectRow(t,e){t.target.checked?this._options.multi&&!this._selected.includes(e)?this._selected=[...this._selected,e]:(this._selected=[e],this._checkboxes.forEach(i=>{i!==t.target&&(i.checked=!1)})):this._selected=this._selected.filter(i=>i!==e),this._options.multi&&!t.target.checked&&(this._headerCheckbox.checked=!1),this._setActiveRows(),this._emitSelectEvent()}_updateRow(t,e){const i=g.getDataAttribute(t.target,"field"),n=t.target.textContent,o=this._rows[e];if(Array.isArray(o)){const a=this.columns.find(l=>l.field===i).columnIndex;o[a]=n}else o[i]=n;_.trigger(this._element,GC,{rows:this._rows,columns:this._columns})}static jQueryInterface(t,e,i){return this.each(function(){let n=O.getData(this,pn);const o=typeof t=="object"&&t;if(!(!n&&/dispose/.test(t))&&(n||(n=new pr(this,o,e)),typeof t=="string")){if(typeof n[t]>"u")throw new TypeError(`No method named "${t}"`);n[t](e,i)}})}static getInstance(t){return O.getData(t,pn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Mp="rating",fr="te.rating",QA="data-te-rating-init",JA="[data-te-rating-icon-ref]",bs=`.${fr}`,tw="ArrowLeft",ew="ArrowRight",iw={tooltip:"string",value:"(string|number)",readonly:"boolean",after:"string",before:"string",dynamic:"boolean",active:"string"},sw={tooltip:"top",value:"",readonly:!1,after:"",before:"",dynamic:!1,active:"fill-current"},Lp=`onSelect${bs}`,nw=`onHover${bs}`,$p=`keyup${bs}`,Rp=`focusout${bs}`,Pp=`keydown${bs}`,Np=`mousedown${bs}`;class Bp{constructor(t,e){this._element=t,this._icons=m.find(JA,this._element),this._options=this._getConfig(e),this._index=-1,this._savedIndex=null,this._originalClassList=[],this._originalIcons=[],this._fn={},this._tooltips=[],this._element&&(O.setData(t,fr,this),this._init())}static get NAME(){return Mp}dispose(){O.removeData(this._element,fr),this._options.readonly||(_.off(this._element,$p),_.off(this._element,Rp),_.off(this._element,Pp),this._element.removeEventListener("mouseleave",this._fn.mouseleave),this._icons.forEach((t,e)=>{_.off(t,Np),t.removeEventListener("mouseenter",this._fn.mouseenter[e]),g.removeClass(t,"cursor-pointer")}),this._tooltips.forEach(t=>{t._element.removeAttribute(QA),t.dispose()}),this._icons.forEach(t=>t.removeAttribute("tabIndex"))),this._element=null}_init(){this._options.readonly||(this._bindMouseEnter(),this._bindMouseLeave(),this._bindMouseDown(),this._bindKeyDown(),this._bindKeyUp(),this._bindFocusLost(),this._icons.forEach(t=>{g.addClass(t,"cursor-pointer")})),this._options.dynamic&&(this._saveOriginalClassList(),this._saveOriginalIcons()),this._setCustomText(),this._setToolTips(),this._options.value&&(this._index=this._options.value-1,this._updateRating(this._index))}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...sw,...e,...t},L(Mp,t,iw),t}_bindMouseEnter(){this._fn.mouseenter=[],this._icons.forEach((t,e)=>{t.addEventListener("mouseenter",this._fn.mouseenter[e]=i=>{this._index=this._icons.indexOf(i.target),this._updateRating(this._index),this._triggerEvents(t,nw)})})}_bindMouseLeave(){this._element.addEventListener("mouseleave",this._fn.mouseleave=()=>{this._savedIndex!==null?(this._updateRating(this._savedIndex),this._index=this._savedIndex):this._options.value?(this._updateRating(this._options.value-1),this._index=this._options.value-1):(this._index=-1,this._clearRating())})}_bindMouseDown(){this._icons.forEach(t=>{_.on(t,Np,()=>{this._setElementOutline("none"),this._savedIndex=this._index,this._triggerEvents(t,Lp)})})}_bindKeyDown(){this._element.tabIndex=0,_.on(this._element,Pp,t=>this._updateAfterKeyDown(t))}_bindKeyUp(){_.on(this._element,$p,()=>this._setElementOutline("auto"))}_bindFocusLost(){_.on(this._element,Rp,()=>this._setElementOutline("none"))}_setElementOutline(t){this._element.style.outline=t}_triggerEvents(t,e){_.trigger(t,e,{value:this._index+1})}_updateAfterKeyDown(t){const e=this._icons.length-1,i=this._index;t.key===ew&&this._index<e&&(this._index+=1),t.key===tw&&this._index>-1&&(this._index-=1),i!==this._index&&(this._savedIndex=this._index,this._updateRating(this._savedIndex),this._triggerEvents(this._icons[this._savedIndex],Lp))}_updateRating(t){this._clearRating(),this._options.dynamic&&this._restoreOriginalIcon(t),this._icons.forEach((e,i)=>{i<=t&&g.addClass(e.querySelector("svg"),this._options.active)})}_clearRating(){this._icons.forEach((t,e)=>{const i=t.querySelector("svg");this._options.dynamic&&(t.classList=this._originalClassList[e],i.innerHTML=this._originalIcons[e]),g.removeClass(i,this._options.active)})}_setToolTips(){this._icons.forEach((t,e)=>{const i=g.getDataAttribute(t,"toggle");t.title&&!i&&(g.setDataAttribute(t,"toggle","tooltip"),this._tooltips[e]=new is(t,{placement:this._options.tooltip}))})}_setCustomText(){this._icons.forEach(t=>{const e=g.getDataAttribute(t,"after"),i=g.getDataAttribute(t,"before");e&&t.insertAdjacentHTML("afterEnd",e),i&&t.insertAdjacentHTML("beforeBegin",i)})}_saveOriginalClassList(){this._icons.forEach(t=>{const e=t.classList.value;this._originalClassList.push(e)})}_saveOriginalIcons(){this._icons.forEach(t=>{const e=t.querySelector("svg").innerHTML;this._originalIcons.push(e)})}_restoreOriginalIcon(t){const e=this._originalClassList[t],i=this._originalIcons[t];this._icons.forEach((n,o)=>{if(o<=t){const r=n.querySelector("svg");r.innerHTML=i,n.classList=e}})}static getInstance(t){return O.getData(t,fr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Zl="popconfirm",_n="te.popconfirm",Hp=`.${_n}`,ow=`cancel${Hp}`,rw=`confirm${Hp}`,aw="[data-te-popconfirm-body]",Ql="data-te-popconfirm-popover",lw="data-te-popconfirm-modal",Vp="data-te-popconfirm-backdrop",cw={popconfirmMode:"string",message:"string",cancelText:"(null|string)",okText:"(null|string)",popconfirmIconTemplate:"string",cancelLabel:"(null|string)",confirmLabel:"(null|string)",position:"(null|string)"},hw={popconfirmMode:"inline",message:"Are you sure?",cancelText:"Cancel",okText:"OK",popconfirmIconTemplate:"",cancelLabel:"Cancel",confirmLabel:"Confirm",position:"bottom"},dw={backdrop:"string",body:"string",btnCancel:"string",btnConfirm:"string",btnsContainer:"string",fade:"string",icon:"string",message:"string",messageText:"string",modal:"string",popover:"string"},uw={backdrop:"h-full w-full z-[1070] fixed top-0 left-0 bg-[#00000066] flex justify-center items-center",body:"p-[1rem] bg-white rounded-[0.5rem] opacity-0 dark:bg-neutral-700",btnCancel:"inline-block rounded bg-primary-100 px-4 pb-[5px] pt-[6px] text-xs font-medium uppercase leading-normal text-primary-700 transition duration-150 ease-in-out hover:bg-primary-accent-100 focus:bg-primary-accent-100 focus:outline-none focus:ring-0 active:bg-primary-accent-200",btnConfirm:"inline-block rounded bg-primary px-4 pb-[5px] pt-[6px] text-xs font-medium uppercase leading-normal text-white shadow-[0_4px_9px_-4px_#3b71ca] transition duration-150 ease-in-out hover:bg-primary-600 hover:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] focus:bg-primary-600 focus:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] focus:outline-none focus:ring-0 active:bg-primary-700 active:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] dark:shadow-[0_4px_9px_-4px_rgba(59,113,202,0.5)] dark:hover:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)] dark:focus:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)] dark:active:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)]",btnsContainer:"flex justify-end space-x-2",fade:"transition-opacity duration-[150ms] ease-linear",icon:"pr-2",message:"flex mb-3",messageText:"text-neutral-600 dark:text-white",modal:"absolute w-[300px] z-[1080] shadow-sm rounded-[0.5rem]",popover:"w-[300px] border-0 rounded-[0.5rem] z-[1080] shadow-sm"};class _r{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._popper=null,this._cancelButton="",this._confirmButton="",this._isOpen=!1,this._uid=this._element.id?`popconfirm-${this._element.id}`:bt("popconfirm-"),t&&O.setData(t,_n,this),this._clickHandler=this.open.bind(this),_.on(this._element,"click",this._clickHandler)}static get NAME(){return Zl}get container(){return m.findOne(`#${this._uid}`)}get popconfirmBody(){return m.findOne(aw,this.container)}dispose(){(this._isOpen||this.container!==null)&&this.close(),O.removeData(this._element,_n),_.off(this._element,"click",this._clickHandler),this._element=null}open(){this._isOpen||(this._options.popconfirmMode==="inline"?this._openPopover(this._getPopoverTemplate()):this._openModal(this._getModalTemplate()),this._handleCancelButtonClick(),this._handleConfirmButtonClick(),this._listenToEscapeKey(),this._listenToOutsideClick())}close(){if(this._isOpen){if(this._popper!==null||m.findOne(`[${Ql}]`)!==null)_.on(this.popconfirmBody,"transitionend",this._handlePopconfirmTransitionEnd.bind(this)),g.removeClass(this.popconfirmBody,"opacity-100");else{const t=m.findOne(`[${Vp}]`);g.removeClass(this.popconfirmBody,"opacity-100"),document.body.removeChild(t),this._isOpen=!1}_.off(document,"click",this._handleOutsideClick.bind(this)),_.off(document,"keydown",this._handleEscapeKey.bind(this))}}_handlePopconfirmTransitionEnd(t){if(t.target!==this.popconfirmBody)return;const e=m.findOne(`[${Ql}]`);_.off(this.popconfirmBody,"transitionend"),this._isOpen&&t&&t.propertyName==="opacity"&&(this._popper.destroy(),e&&document.body.removeChild(e),this._isOpen=!1)}_getPopoverTemplate(){const t=$("div"),e=this._getPopconfirmTemplate();return t.setAttribute(Ql,""),g.addClass(t,this._classes.popover),t.id=this._uid,t.innerHTML=e,t}_getModalTemplate(){const t=$("div"),e=this._getPopconfirmTemplate();return t.setAttribute(lw,""),g.addClass(t,`${this._classes.modal}`),t.id=this._uid,t.innerHTML=e,t}_getPopconfirmTemplate(){return`<div data-te-popconfirm-body class="${this._classes.body}">
+      <p class="${this._classes.message}">
+      ${this._options.popconfirmIconTemplate?`<span class="${this._classes.icon}">${this._options.popconfirmIconTemplate}</span>`:""}
+      <span class="${this._classes.messageText}">${this._options.message}</span>
+      </p>
+      <div class="${this._classes.btnsContainer}">
+      ${this._options.cancelText?`<button type="button" data-te-ripple-init data-te-ripple-color="light" id="popconfirm-button-cancel" aria-label="${this._options.cancelLabel}"
+        class="${this._classes.btnCancel}">${this._options.cancelText}</button>`:""}
+      <button type="button" data-te-ripple-init data-te-ripple-color="light" id="popconfirm-button-confirm"
+      aria-label="${this._options.confirmLabel}"
+      class="${this._classes.btnConfirm}">${this._options.okText?this._options.okText:"Ok"}</button>
+      </div>
+    </div>`}_getConfig(t){return t={...hw,...g.getDataAttributes(this._element),...t},L(Zl,t,cw),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...uw,...e,...t},L(Zl,t,dw),t}_openPopover(t){this._popper=Fe(this._element,t,{placement:this._translatePositionValue(),modifiers:[{name:"offset",options:{offset:[0,5]}}]}),document.body.appendChild(t),setTimeout(()=>{g.addClass(this.popconfirmBody,`${this._classes.fade} opacity-100`),this._isOpen=!0},0)}_openModal(t){const e=$("div");e.setAttribute(Vp,""),g.addClass(e,this._classes.backdrop),document.body.appendChild(e),e.appendChild(t),g.addClass(this.popconfirmBody,"opacity-100"),this._isOpen=!0}_handleCancelButtonClick(){const t=this.container;this._cancelButton=m.findOne("#popconfirm-button-cancel",t),Ye.getOrCreateInstance(this._cancelButton,{rippleColor:"light"}),this._cancelButton!==null&&_.on(this._cancelButton,"click",()=>{this.close(),_.trigger(this._element,ow)})}_handleConfirmButtonClick(){const t=this.container;this._confirmButton=m.findOne("#popconfirm-button-confirm",t),Ye.getOrCreateInstance(this._confirmButton,{rippleColor:"light"}),_.on(this._confirmButton,"click",()=>{this.close(),_.trigger(this._element,rw)})}_listenToEscapeKey(){_.on(document,"keydown",this._handleEscapeKey.bind(this))}_handleEscapeKey(t){t.keyCode===xi&&this.close()}_listenToOutsideClick(){_.on(document,"click",this._handleOutsideClick.bind(this))}_handleOutsideClick(t){const e=this.container,i=t.target===e,n=e&&e.contains(t.target),o=t.target===this._element,r=this._element&&this._element.contains(t.target);!i&&!n&&!o&&!r&&this.close()}_translatePositionValue(){switch(this._options.position){case"top left":return"top-end";case"top":return"top";case"top right":return"top-start";case"bottom left":return"bottom-end";case"bottom":return"bottom";case"bottom right":return"bottom-start";case"left":return"left";case"left top":return"left-end";case"left bottom":return"left-start";case"right":return"right";case"right top":return"right-end";case"right bottom":return"right-start";case void 0:return"bottom";default:return"bottom"}}static jQueryInterface(t,e){return this.each(function(){const i=O.getData(this,_n),n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))){if(!i)return new _r(this,n);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}}})}static getInstance(t){return O.getData(t,_n)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Jl="lightbox",gn="te.lightbox",vs=`click${`.${gn}`}.data-api`,Fp="[data-te-lightbox-init]",pw=`${Fp} img:not([data-te-lightbox-disabled])`,Wp="data-te-lightbox-caption",fw="data-te-lightbox-disabled",ye="data-te-lightbox-active",_w=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 12h-15m0 0l6.75 6.75M4.5 12l6.75-6.75" />
+</svg>
+`,gw=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 12h15m0 0l-6.75-6.75M19.5 12l-6.75 6.75" />
+</svg>
+`,mw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M3.75 3.75v4.5m0-4.5h4.5m-4.5 0L9 9M3.75 20.25v-4.5m0 4.5h4.5m-4.5 0L9 15M20.25 3.75h-4.5m4.5 0v4.5m0-4.5L15 9m5.25 11.25h-4.5m4.5 0v-4.5m0 4.5L15 15" />
+</svg>
+`,bw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M9 9V4.5M9 9H4.5M9 9L3.75 3.75M9 15v4.5M9 15H4.5M9 15l-5.25 5.25M15 9h4.5M15 9V4.5M15 9l5.25-5.25M15 15h4.5M15 15v4.5m0-4.5l5.25 5.25" />
+</svg>
+`,vw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-5.197-5.197m0 0A7.5 7.5 0 105.196 5.196a7.5 7.5 0 0010.607 10.607zM10.5 7.5v6m3-3h-6" />
+</svg>
+`,yw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+<path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-5.197-5.197m0 0A7.5 7.5 0 105.196 5.196a7.5 7.5 0 0010.607 10.607zM13.5 10.5h-6" />
+</svg>
+`,Tw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M6 18L18 6M6 6l12 12" />
+</svg>
+`,Ew={container:"string",zoomLevel:"(number|string)",prevIconTemplate:"string",nextIconTemplate:"string",showFullscreenIconTemplate:"string",hideFullscreenIconTemplate:"string",zoomInIconTemplate:"string",closeIconTemplate:"string",zoomOutIconTemplate:"string",spinnerContent:"string"},xw={container:"body",zoomLevel:1,prevIconTemplate:_w,nextIconTemplate:gw,showFullscreenIconTemplate:mw,hideFullscreenIconTemplate:bw,zoomInIconTemplate:vw,zoomOutIconTemplate:yw,closeIconTemplate:Tw,spinnerContent:"Loading..."},Cw={caption:"text-white text-ellipsis overflow-hidden whitespace-nowrap mx-[10px] text-center",captionWrapper:"fixed left-0 bottom-0 w-full h-[50px] flex justify-center items-center",closeBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",fullscreenBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",gallery:"invisible fixed left-0 top-0 w-full h-full z-[1100] pointer-events-none opacity-0 bg-[#000000e6] transition-all duration-[400ms] motion-reduce:transition-none",galleryContent:"fixed top-[50px] left-[50px] w-[calc(100%-100px)] h-[calc(100%-100px)]",galleryCounter:"flex justify-center items-center px-[10px] mb-0 h-full text-[#b3b3b3]",img:"absolute left-0 top-0 w-full max-h-full h-auto cursor-pointer pointer-events-auto",imgWrapper:"absolute top-0 left-0 w-full h-full opacity-0 transform scale-[0.25] transition-all duration-[400ms] ease-out pointer-events-none motion-reduce:transition-none motion-reduce:transform-none",leftTools:"float-left h-full",loader:"fixed left-0 top-0 z-[2] w-full h-full text-neutral-50 opacity-1 flex justify-center items-center pointer-events-none transition-opacity duration-[1000ms] motion-reduce:transition-none",nextBtn:"border-none bg-transparent w-full h-[50px] flex justify-center items-center text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",nextBtnWrapper:"fixed right-0 top-0 w-[50px] h-full flex justify-center items-center transition-opacity duration-[400ms] motion-reduce:transition-none",prevBtn:"border-none bg-transparent w-full h-[50px] flex justify-center items-center text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",prevBtnWrapper:"fixed left-0 top-0 w-[50px] h-full flex justify-center items-center transition-opacity duration-[400ms] motion-reduce:transition-none",rightTools:"float-right",spinner:"inline-block h-8 w-8 animate-[spinner-grow_0.75s_linear_infinite] rounded-full bg-current align-[-0.125em] motion-reduce:animate-[spinner-grow_1.5s_linear_infinite]",spinnerContent:"!absolute !-m-px !h-px !w-px !overflow-hidden !whitespace-nowrap !border-0 !p-0 ![clip:rect(0,0,0,0)]",toolbar:"absolute top-0 left-0 w-full h-[50px] z-20 transition-opacity duration-[400ms] motion-reduce:transition-none",vertical:"h-full max-h-full w-auto",zoomBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none"},Aw={caption:"string",captionWrapper:"string",closeBtn:"string",fullscreenBtn:"string",gallery:"string",galleryContent:"string",galleryCounter:"string",img:"string",imgWrapper:"string",leftTools:"string",loader:"string",nextBtn:"string",nextBtnWrapper:"string",prevBtn:"string",prevBtnWrapper:"string",rightTools:"string",spinner:"string",spinnerContent:"string",toolbar:"string",vertical:"string",zoomBtn:"string"};class ys{constructor(t,e={},i){this._element=t,this._options=e,this._classes=this._getClasses(i),this._getContainer(),this._id=`lightbox-${Math.random().toString(36).substr(2,9)}`,this._activeImg=0,this._images=[],this._zoom=1,this._gallery=null,this._galleryToolbar=null,this._galleryContent=null,this._loader=null,this._imgCounter=null,this._animating=!1,this._fullscreen=!1,this._zoomBtn=null,this._fullscreenBtn=null,this._toolsToggleTimer=0,this._mousedown=!1,this._mousedownPositionX=0,this._mousedownPositionY=0,this._originalPositionX=0,this._originalPositionY=0,this._positionX=0,this._positionY=0,this._zoomTimer=0,this._tapCounter=0,this._tapTime=0,this._rightArrow=null,this._leftArrowWrapper=null,this._rightArrowWrapper=null,this._initiated=!1,this._multitouch=!1,this._touchZoomPosition=[],this._element&&(O.setData(t,gn,this),this.init())}static get NAME(){return Jl}get activeImg(){return this._activeImg}get currentImg(){return m.findOne(`[${ye}]`,this._galleryContent)}get options(){const t={...xw,...g.getDataAttributes(this._element),...this._options};return L(Jl,t,Ew),t}init(){this._initiated||(this._appendTemplate(),this._initiated=!0)}open(t=0){this._getImages(),this._setActiveImg(t),this._sortImages(),this._triggerEvents("open","opened"),this._loadImages().then(e=>{this._resizeImages(e),this._toggleTemplate(),this._addEvents(),this._focusFullscreenBtn()})}close(){this.reset(),this._removeEvents(),this._toggleTemplate(),this._triggerEvents("close","closed")}slide(t="right"){this._animating===!0||this._images.length<=1||(this._triggerEvents("slide","slided"),this._beforeSlideEvents(),t==="right"&&this._slideHorizontally(t),t==="left"&&this._slideHorizontally(t),t==="first"&&this._slideToTarget(t),t==="last"&&this._slideToTarget(t),this._afterSlideEvents())}zoomIn(){this._zoom>=3||(this._triggerEvents("zoomIn","zoomedIn"),this._zoom+=parseFloat(this.options.zoomLevel),g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn())}zoomOut(){this._zoom<=1||(this._triggerEvents("zoomOut","zoomedOut"),this._zoom-=parseFloat(this.options.zoomLevel),g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn(),this._updateImgPosition())}toggleFullscreen(){this._fullscreen===!1?(this._fullscreenBtn.setAttribute(ye,""),this._fullscreenBtn.innerHTML=this.options.hideFullscreenIconTemplate,this._gallery.requestFullscreen&&this._gallery.requestFullscreen(),this._fullscreen=!0):(this._fullscreenBtn.removeAttribute(ye),document.exitFullscreen&&document.exitFullscreen(),this._fullscreen=!1)}reset(){this._restoreDefaultFullscreen(),this._restoreDefaultPosition(),this._restoreDefaultZoom(),clearTimeout(this._toolsToggleTimer),clearTimeout(this._doubleTapTimer)}dispose(){_.off(document,vs,pw,this.toggle),this._galleryContent&&this._removeEvents(),this._gallery&&this._gallery.remove(),O.removeData(this._element,gn),this._element=null}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Cw,...e,...t},L(Jl,t,Aw),t}_getImages(){const e=m.find("img",this._element).filter(i=>!i.hasAttribute(fw));this._images=e}_getContainer(){this._container=m.findOne(this.options.container)}_setActiveImg(t){this._activeImg=typeof t=="number"?t:this._images.indexOf(t.target)}_appendTemplate(){this._gallery=$("div"),g.addClass(this._gallery,`${this._classes.gallery}`),this._element.dataset.id=this._id,this._gallery.id=this._id,this._appendLoader(),this._appendToolbar(),this._appendContent(),this._appendArrows(),this._appendCaption(),this._container.append(this._gallery)}_appendToolbar(){this._galleryToolbar=$("div"),this._imgCounter=$("p"),this._fullscreenBtn=$("button"),this._zoomBtn=$("button");const t=$("button"),e=$("div"),i=$("div");g.addClass(this._galleryToolbar,`${this._classes.toolbar}`),g.addClass(this._imgCounter,`${this._classes.galleryCounter}`),g.addClass(this._fullscreenBtn,`${this._classes.fullscreenBtn}`),g.addClass(this._zoomBtn,`${this._classes.zoomInBtn}`),g.addClass(this._zoomBtn,this._classes.zoomBtn),g.addClass(e,`${this._classes.leftTools}`),g.addClass(i,`${this._classes.rightTools}`),g.addClass(t,`${this._classes.closeBtn}`),this._fullscreenBtn.innerHTML=this.options.showFullscreenIconTemplate,t.innerHTML=this.options.closeIconTemplate,this._zoomBtn.innerHTML=this.options.zoomInIconTemplate,this._fullscreenBtn.setAttribute("aria-label","Toggle fullscreen"),this._zoomBtn.setAttribute("aria-label","Zoom in"),t.setAttribute("aria-label","Close"),_.on(this._fullscreenBtn,vs,()=>this.toggleFullscreen()),_.on(this._zoomBtn,vs,()=>this._toggleZoom()),_.on(t,vs,()=>this.close()),e.append(this._imgCounter),i.append(this._fullscreenBtn),i.append(this._zoomBtn),i.append(t),this._galleryToolbar.append(e),this._galleryToolbar.append(i),this._gallery.append(this._galleryToolbar)}_appendContent(){this._galleryContent=$("div"),g.addClass(this._galleryContent,`${this._classes.galleryContent}`),this._gallery.append(this._galleryContent)}_appendLoader(){this._loader=$("div");const t=$("div"),e=$("span");g.addClass(this._loader,`${this._classes.loader}`),g.addClass(t,`${this._classes.spinner}`),g.addClass(e,`${this._classes.spinnerContent}`),t.setAttribute("role","status"),e.innerHTML=this.options.spinnerContent,t.append(e),this._loader.append(t),this._gallery.append(this._loader)}_appendArrows(){this._leftArrowWrapper=$("div"),g.addClass(this._leftArrowWrapper,`${this._classes.prevBtnWrapper}`);const t=$("button");t.setAttribute("aria-label","Previous"),g.addClass(t,`${this._classes.prevBtn}`),_.on(t,vs,()=>this.slide("left")),this._leftArrowWrapper.append(t),this._rightArrowWrapper=$("div"),g.addClass(this._rightArrowWrapper,`${this._classes.nextBtnWrapper}`),this._rightArrow=$("button"),this._rightArrow.setAttribute("aria-label","Next"),g.addClass(this._rightArrow,`${this._classes.nextBtn}`),_.on(this._rightArrow,vs,()=>this.slide()),this._rightArrowWrapper.append(this._rightArrow),this._rightArrow.innerHTML=this.options.nextIconTemplate,t.innerHTML=this.options.prevIconTemplate,this._getImages(),!(this._images.length<=1)&&(this._gallery.append(this._leftArrowWrapper),this._gallery.append(this._rightArrowWrapper))}_appendCaption(){const t=$("div"),e=$("p");e.setAttribute(Wp,""),g.addClass(t,`${this._classes.captionWrapper}`),g.addClass(e,`${this._classes.caption}`),t.append(e),this._gallery.append(t)}_sortImages(){for(let t=0;t<this._activeImg;t++)this._images.push(this._images.shift())}async _loadImages(){const t=[],e=[];this._galleryContent.innerHTML="";let i=0;return this._images.forEach((n,o)=>{t.push(new Promise(r=>{const a=new Image,l=$("div");g.addClass(l,`${this._classes.imgWrapper}`),g.addClass(a,`${this._classes.img}`),this._addImgStyles(a,l,i,o,n),l.append(a),this._galleryContent.append(l),a.onload=r,a.src=n.dataset.teImg||n.src,e.push(a),i+=100}))}),await Promise.all(t),e}_addImgStyles(t,e,i,n,o){t.alt=o.alt,t.draggable=!1,g.style(e,{position:"absolute",left:`${i}%`,top:0}),(o.dataset.teCaption||o.dataset.teCaption==="")&&(t.dataset.caption=o.dataset.teCaption),i===0?(o.width<o.height&&g.addClass(t,`${this._classes.vertical}`),g.style(e,{opacity:1}),t.setAttribute(ye,"")):t.removeAttribute(ye),n===this._images.length-1&&this._images.length>1&&g.style(e,{left:"-100%"})}_resizeImages(t){t.forEach(e=>{this._calculateImgSize(e)})}_calculateImgSize(t){t.width>=t.height?(t.style.width="100%",t.style.maxWidth="100%",t.style.height="auto",t.style.top=`${(t.parentNode.offsetHeight-t.height)/2}px`,t.style.left=0):(t.style.height="100%",t.style.maxHeight="100%",t.style.width="auto",t.style.left=`${(t.parentNode.offsetWidth-t.width)/2}px`,t.style.top=0),t.width>=t.parentNode.offsetWidth&&(t.style.width=`${t.parentNode.offsetWidth}px`,t.style.height="auto",t.style.left=0,t.style.top=`${(t.parentNode.offsetHeight-t.height)/2}px`),t.height>=t.parentNode.offsetHeight&&(t.style.height=`${t.parentNode.offsetHeight}px`,t.style.width="auto",t.style.top=0,t.style.left=`${(t.parentNode.offsetWidth-t.width)/2}px`),this._positionX=parseFloat(t.style.left)||0,this._positionY=parseFloat(t.style.top)||0}_onResize(){this._images=m.find("img",this._galleryContent),this._images.forEach(t=>{this._calculateImgSize(t)})}_onFullscreenChange(){(document.webkitIsFullScreen||document.mozFullScreen||document.msFullscreenElement)===void 0&&(this._fullscreen=!1,this._fullscreenBtn.innerHTML=this.options.showFullscreenIconTemplate,this._fullscreenBtn.removeAttribute(ye))}_beforeSlideEvents(){this._animationStart(),this._restoreDefaultZoom(),this._restoreDefaultPosition(),this._resetDoubleTap()}_slideHorizontally(t){this._images=m.find("img",this._galleryContent),this._images.forEach(e=>{let i;t==="right"?(i=parseInt(e.parentNode.style.left,10)-100,i<-100&&(i=(this._images.length-2)*100)):(i=parseInt(e.parentNode.style.left,10)+100,i===(this._images.length-1)*100&&(i=-100)),this._slideImg(e,i)}),this._updateActiveImg(t)}_slideImg(t,e){e===0?(t.setAttribute(ye,""),g.style(t.parentNode,{opacity:1,transform:"scale(1)"})):(t.removeAttribute(ye),g.style(t.parentNode,{opacity:0,transform:"scale(0.25)"})),t.parentNode.style.left=`${e}%`}_slideToTarget(t){t==="first"&&this._activeImg===0||t==="last"&&this._activeImg===this._images.length-1||(this.reset(),this._removeEvents(),this._showLoader(),this._getImages(),this._activeImg=t==="first"?0:this._images.length-1,this._sortImages(),g.style(this.currentImg.parentNode,{transform:"scale(0.25)",opacity:0}),setTimeout(()=>{this._loadImages().then(e=>{this._resizeImages(e),this._addEvents(),this._updateCaption(),this._hideLoader(),setTimeout(()=>{g.style(this.currentImg.parentNode,{transform:"scale(1)",opacity:1})},10)})},400))}_updateActiveImg(t){t==="right"&&(this._activeImg===this._images.length-1?this._activeImg=0:this._activeImg++),t==="left"&&(this._activeImg===0?this._activeImg=this._images.length-1:this._activeImg--)}_afterSlideEvents(){this._updateCounter(),this._updateCaption()}_updateCounter(){this._images.length<=1||setTimeout(()=>{this._imgCounter.innerHTML=`${this._activeImg+1} / ${this._images.length}`},200)}_updateCaption(){setTimeout(()=>{let t=this.currentImg.alt;(this.currentImg.dataset.caption||this.currentImg.dataset.caption==="")&&(t=this.currentImg.dataset.caption),m.findOne(`[${Wp}]`,this._gallery).innerHTML=t},200)}_toggleTemplate(){this._gallery.style.visibility==="visible"?(g.style(this.currentImg.parentNode,{transform:"scale(0.25)"}),setTimeout(()=>{this._hideGallery(),this._enableScroll(),this._showLoader()},100)):(this._showGallery(),this._disableScroll(),this._updateCounter(),this._updateCaption(),this._setToolsToggleTimout(),this._hideLoader())}_showLoader(){g.style(this._loader,{opacity:1})}_hideLoader(){g.style(this._loader,{opacity:0})}_hideGallery(){g.style(this._gallery,{opacity:0,pointerEvents:"none",visibility:"hidden"})}_showGallery(){g.style(this._gallery,{opacity:1,pointerEvents:"initial",visibility:"visible"}),setTimeout(()=>{g.style(this.currentImg.parentNode,{transform:"scale(1)"})},50)}_toggleZoom(){this._zoom!==1?this.zoomOut():this.zoomIn()}_updateZoomBtn(){this._zoom>1?(this._zoomBtn.setAttribute(ye,""),this._zoomBtn.setAttribute("aria-label","Zoom out"),this._zoomBtn.innerHTML=this.options.zoomOutIconTemplate):(this._zoomBtn.removeAttribute(ye),this._zoomBtn.setAttribute("aria-label","Zoom in"),this._zoomBtn.innerHTML=this.options.zoomInIconTemplate)}_updateImgPosition(){this._zoom===1&&this._restoreDefaultPosition()}_addEvents(){const t=m.find("img",this._galleryContent);this._onWindowTouchmove=this._onWindowTouchmove.bind(this),this._onWindowTouchstart=this._onWindowTouchstart.bind(this),this._onImgMousedown=this._onMousedown.bind(this),this._onImgMousemove=this._onMousemove.bind(this),this._onImgWheel=this._onZoom.bind(this),this._onImgMouseup=this._onMouseup.bind(this),this._onImgTouchend=this._onTouchend.bind(this),this._onImgDoubleClick=this._onDoubleClick.bind(this),this._onWindowResize=this._onResize.bind(this),this._onWindowFullscreenChange=this._onFullscreenChange.bind(this),this._onAnyImgAction=this._resetToolsToggler.bind(this),this._onGalleryClick=this._onBackdropClick.bind(this),this._onKeyupEvent=this._onKeyup.bind(this),this._onRightArrowKeydownEvent=this._onRightArrowKeydown.bind(this),this._onFullscreenBtnKeydownEvent=this._onFullscreenBtnKeydown.bind(this),t.forEach(e=>{_.on(e,"mousedown",this._onImgMousedown,{passive:!0}),_.on(e,"touchstart",this._onImgMousedown,{passive:!0}),_.on(e,"mousemove",this._onImgMousemove,{passive:!0}),_.on(e,"touchmove",this._onImgMousemove,{passive:!0}),_.on(e,"wheel",this._onImgWheel,{passive:!0}),_.on(e,"dblclick",this._onImgDoubleClick,{passive:!0})}),document.addEventListener("touchmove",this._onWindowTouchmove,{passive:!1}),_.on(window,"touchstart",this._onWindowTouchstart),_.on(window,"mouseup",this._onImgMouseup),_.on(window,"touchend",this._onImgTouchend),_.on(window,"resize",this._onWindowResize),_.on(window,"orientationchange",this._onWindowResize),_.on(window,"keyup",this._onKeyupEvent),_.on(window,"fullscreenchange",this._onWindowFullscreenChange),_.on(this._gallery,"mousemove",this._onAnyImgAction),_.on(this._gallery,"click",this._onGalleryClick),_.on(this._rightArrow,"keydown",this._onRightArrowKeydownEvent),_.on(this._fullscreenBtn,"keydown",this._onFullscreenBtnKeydownEvent)}_removeEvents(){m.find("img",this._galleryContent).forEach(e=>{_.off(e,"mousedown",this._onImgMousedown),_.off(e,"touchstart",this._onImgMousedown),_.off(e,"mousemove",this._onImgMousemove),_.off(e,"touchmove",this._onImgMousemove),_.off(e,"wheel",this._onImgWheel),_.off(e,"dblclick",this._onImgDoubleClick)}),document.removeEventListener("touchmove",this._onWindowTouchmove,{passive:!1}),_.off(window,"touchstart",this._onWindowTouchstart),_.off(window,"mouseup",this._onImgMouseup),_.off(window,"touchend",this._onImgTouchend),_.off(window,"resize",this._onWindowResize),_.off(window,"orientationchange",this._onWindowResize),_.off(window,"keyup",this._onKeyupEvent),_.off(window,"fullscreenchange",this._onWindowFullscreenChange),_.off(this._gallery,"mousemove",this._onAnyImgAction),_.off(this._gallery,"click",this._onGalleryClick),_.off(this._rightArrow,"keydown",this._onRightArrowKeydownEvent),_.off(this._fullscreenBtn,"keydown",this._onFullscreenBtnKeydownEvent)}_onMousedown(t){const e=t.touches,i=e?e[0].clientX:t.clientX,n=e?e[0].clientY:t.clientY;this._originalPositionX=parseFloat(this.currentImg.style.left)||0,this._originalPositionY=parseFloat(this.currentImg.style.top)||0,this._positionX=this._originalPositionX,this._positionY=this._originalPositionY,this._mousedownPositionX=i*(1/this._zoom)-this._positionX,this._mousedownPositionY=n*(1/this._zoom)-this._positionY,this._mousedown=!0,t.type==="touchstart"&&t.touches.length>1&&(this._multitouch=!0,this._touchZoomPosition=t.touches)}_onMousemove(t){if(!this._mousedown)return;const e=t.touches,i=e?e[0].clientX:t.clientX,n=e?e[0].clientY:t.clientY;if(e&&this._resetToolsToggler(),!this._multitouch)if(this._zoom!==1)this._positionX=i*(1/this._zoom)-this._mousedownPositionX,this._positionY=n*(1/this._zoom)-this._mousedownPositionY,g.style(this.currentImg,{left:`${this._positionX}px`,top:`${this._positionY}px`});else{if(this._images.length<=1)return;this._positionX=i*(1/this._zoom)-this._mousedownPositionX,g.style(this.currentImg,{left:`${this._positionX}px`})}}_onMouseup(t){this._mousedown=!1,this._moveImg(t.target)}_onTouchend(t){this._mousedown=!1,this._multitouch?t.targetTouches.length===0&&(this._multitouch=!1,this._touchZoomPosition=[]):this._multitouch||(this._checkDoubleTap(t),this._moveImg(t.target))}_calculateTouchZoom(t){const e=Math.hypot(this._touchZoomPosition[1].pageX-this._touchZoomPosition[0].pageX,this._touchZoomPosition[1].pageY-this._touchZoomPosition[0].pageY),i=Math.hypot(t.touches[1].pageX-t.touches[0].pageX,t.touches[1].pageY-t.touches[0].pageY),n=Math.abs(e-i),o=t.view.screen.width;n>o*.03&&(e<=i?this.zoomIn():this.zoomOut(),this._touchZoomPosition=t.touches)}_onWindowTouchstart(t){t.touches.length>1&&(this._multitouch=!0,this._touchZoomPosition=t.touches)}_onWindowTouchmove(t){t.preventDefault(),t.type==="touchmove"&&t.targetTouches.length>1&&this._calculateTouchZoom(t)}_onRightArrowKeydown(t){switch(t.keyCode){case 9:if(t.shiftKey)break;t.preventDefault(),this._focusFullscreenBtn();break}}_onFullscreenBtnKeydown(t){switch(t.keyCode){case 9:if(!t.shiftKey)break;t.preventDefault(),this._focusRightArrow();break}}_onKeyup(t){switch(this._resetToolsToggler(),t.keyCode){case 39:this.slide();break;case 37:this.slide("left");break;case 27:this.close();break;case 36:this.slide("first");break;case 35:this.slide("last");break;case 38:this.zoomIn();break;case 40:this.zoomOut();break}}_focusFullscreenBtn(){setTimeout(()=>{this._fullscreenBtn.focus()},100)}_focusRightArrow(){this._rightArrow.focus()}_moveImg(t){if(this._multitouch||this._zoom!==1||t!==this.currentImg||this._images.length<=1)return;const e=this._positionX-this._originalPositionX;e>0?this.slide("left"):e<0&&this.slide()}_checkDoubleTap(t){clearTimeout(this._doubleTapTimer);const i=new Date().getTime()-this._tapTime;this._tapCounter>0&&i<500?(this._onDoubleClick(t),this._doubleTapTimer=setTimeout(()=>{this._tapTime=new Date().getTime(),this._tapCounter=0},300)):(this._tapCounter++,this._tapTime=new Date().getTime())}_resetDoubleTap(){this._tapTime=0,this._tapCounter=0,clearTimeout(this._doubleTapTimer)}_onDoubleClick(t){this._multitouch||(t.touches||this._setNewPositionOnZoomIn(t),this._zoom!==1?this._restoreDefaultZoom():this.zoomIn())}_onZoom(t){if(t.deltaY>0)this.zoomOut();else{if(this._zoom>=3)return;this._setNewPositionOnZoomIn(t),this.zoomIn()}}_onBackdropClick(t){this._resetToolsToggler(),t.target.tagName==="DIV"&&this.close()}_setNewPositionOnZoomIn(t){clearTimeout(this._zoomTimer),this._positionX=window.innerWidth/2-t.offsetX-50,this._positionY=window.innerHeight/2-t.offsetY-50,this.currentImg.style.transition="all 0.5s ease-out",this.currentImg.style.left=`${this._positionX}px`,this.currentImg.style.top=`${this._positionY}px`,this._zoomTimer=setTimeout(()=>{this.currentImg.style.transition="none"},500)}_resetToolsToggler(){this._showTools(),clearTimeout(this._toolsToggleTimer),this._setToolsToggleTimout()}_setToolsToggleTimout(){this._toolsToggleTimer=setTimeout(()=>{this._hideTools(),clearTimeout(this._toolsToggleTimer)},4e3)}_hideTools(){g.style(this._galleryToolbar,{opacity:0}),g.style(this._leftArrowWrapper,{opacity:0}),g.style(this._rightArrowWrapper,{opacity:0})}_showTools(){g.style(this._galleryToolbar,{opacity:1}),g.style(this._leftArrowWrapper,{opacity:1}),g.style(this._rightArrowWrapper,{opacity:1})}_disableScroll(){g.addClass(document.body,"overflow-y-hidden relative"),document.documentElement.scrollHeight>document.documentElement.clientHeight&&g.addClass(document.body,"md:pr-[17px]")}_enableScroll(){setTimeout(()=>{g.removeClass(document.body,"overflow-y-hidden relative"),g.removeClass(document.body,"md:pr-[17px]")},300)}_animationStart(){this._animating=!0,setTimeout(()=>{this._animating=!1},400)}_restoreDefaultZoom(){this._zoom!==1&&(this._zoom=1,g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn(),this._updateImgPosition())}_restoreDefaultFullscreen(){this._fullscreen&&this.toggleFullscreen()}_restoreDefaultPosition(){clearTimeout(this._zoomTimer);const t=this.currentImg;g.style(this.currentImg.parentNode,{left:0,top:0}),g.style(this.currentImg,{transition:"all 0.5s ease-out",left:0,top:0}),this._calculateImgSize(t),setTimeout(()=>{g.style(this.currentImg,{transition:"none"})},500)}async _triggerEvents(t,e){_.trigger(this._element,`${t}.te.lightbox`),e&&await setTimeout(()=>{_.trigger(this._element,`${e}.te.lightbox`)},505)}static getInstance(t){return O.getData(t,gn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static toggle(){return function(t){const e=m.closest(t.target,`${Fp}`);(ys.getInstance(e)||new ys(e)).open(t)}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,gn);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new ys(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}}const ww={isRequired:"This is required",isEmail:"Please enter a valid email address",isLongerThan:"This field must be longer than {length} characters",isShorterThan:"This field must be shorter than {length} characters",isChecked:"This is required",isPhone:"Please enter a valid phone number",isNumber:"Expected value with type Number",isString:"Expected value with type String",isBoolean:"Expected value with type Boolean",isDate:"Please enter a valid date",is12hFormat:"Please enter a valid time in 12h format",is24hFormat:"Please enter a valid time in 24h format"},kw={isRequired:(s,t)=>(s==null?void 0:s.trim())?!0:t,isEmail:(s,t)=>/^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/.test(s)?!0:t,isLongerThan:(s,t,e)=>s.length>e?!0:t.replace("{length}",e),isShorterThan:(s,t,e)=>s.length<e?!0:t.replace("{length}",e),isChecked:s=>s?!0:"This is required",isPhone:(s,t)=>s.length===9?!0:t,isNumber:(s,t)=>s&&!isNaN(Number(s))?!0:t,isString:(s,t)=>typeof s=="string"?!0:t,isBoolean:(s,t)=>typeof s=="boolean"?!0:t,isDate:(s,t)=>{const e=/^([0-9]{1,2})\/([0-9]{1,2})\/([0-9]{4})$/;return s.match(e)?!0:t},is12hFormat:(s,t)=>{const e=/^(0?[1-9]|1[0-2]):[0-5][0-9] [APap][mM]$/;return s.match(e)?!0:t},is24hFormat:(s,t)=>{const e=/^(?:[01]\d|2[0-3]):[0-5][0-9]$/;return s.match(e)?!0:t}},tc="validation",ec="te.validation",gr=`.${ec}`,zp="data-te-validate",mr="data-te-validated",br="data-te-validation-state",vr="data-te-validation-feedback",ic="data-te-valid-feedback",yr="data-te-invalid-feedback",jp="data-te-validation-ruleset",Sw="data-te-submit-btn-ref",Ow=`[${zp}]`,Iw="[data-te-input-notch-ref] div",Dw=`[${Sw}]`,Mw=`validated${gr}`,Lw=`valid${gr}`,$w=`invalid${gr}`,Rw=`changed${gr}`,Pw={validFeedback:"string",invalidFeedback:"string",disableFeedback:"boolean",customRules:"object",customErrorMessages:"object",activeValidation:"boolean",submitCallback:"(function|null)"},Yp={validFeedback:"Looks good!",invalidFeedback:"Something is wrong!",disableFeedback:!1,customRules:{},customErrorMessages:{},activeValidation:!1,submitCallback:null},Nw={notchLeadingValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[-1px_0_0_#14a44d,_0_1px_0_0_#14a44d,_0_-1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchMiddleValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[0_1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchTrailingValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[1px_0_0_#14a44d,_0_-1px_0_0_#14a44d,_0_1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchLeadingInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[-1px_0_0_#dc4c64,_0_1px_0_0_#dc4c64,_0_-1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",notchMiddleInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[0_1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",notchTrailingInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[1px_0_0_#dc4c64,_0_-1px_0_0_#dc4c64,_0_1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",basicInputValid:"!border-[#14a44d] focus:!border-[#14a44d] focus:!shadow-[inset_0_0_0_1px_#14a44d]",basicInputInvalid:"!border-[#dc4c64] focus:!border-[#dc4c64] focus:!shadow-[inset_0_0_0_1px_#dc4c64]",checkboxValid:"checked:!border-[#14a44d] checked:!bg-[#14a44d] checked:after:!bg-[#14a44d]",checkboxInvalid:"checked:!border-[#dc4c64] checked:!bg-[#dc4c64] checked:after:!bg-[#dc4c64]",radioValid:"checked:!border-[#14a44d] checked:after:!bg-[#14a44d]",radioInvalid:"checked:!border-[#dc4c64] checked:after:!bg-[#dc4c64]",labelValid:"!text-[#14a44d]",labelInvalid:"!text-[#dc4c64]",validFeedback:"absolute top-full left-0 m-1 w-auto text-sm text-[#14a44d] animate-[fade-in_0.3s_both]",invalidFeedback:"absolute top-full left-0 m-1 w-auto text-sm text-[#dc4c64] animate-[fade-in_0.3s_both]",elementValidated:"mb-8"},Bw={notchLeadingValid:"string",notchMiddleValid:"string",notchTrailingValid:"string",notchLeadingInvalid:"string",notchMiddleInvalid:"string",notchTrailingInvalid:"string",basicInputValid:"string",basicInputInvalid:"string",checkboxValid:"string",checkboxInvalid:"string",radioValid:"string",radioInvalid:"string",labelValid:"string",labelInvalid:"string",validFeedback:"string",invalidFeedback:"string",elementValidated:"string"};class Tr extends Mt{constructor(t,e,i){super(t),this._element=t,this._element&&O.setData(t,ec,this),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._isValid=!0,this._shouldApplyInputEvents=!0,this._submitCallback=null,this._errorMessages={...ww,...this._config.customErrorMessages},this._validationElements=this._getValidationElements(),this._validationElements.forEach(({element:n,input:o})=>{this._createFeedbackWrapper(n,o)}),this._validationObserver=this._watchForValidationChanges(),this._validationObserver.observe(this._element,{attributes:!0}),this._submitButton=null,this._handleSubmitButton(),this._validationResult=[]}static get DefaultType(){return Pw}static get Default(){return Yp}static get NAME(){return tc}dispose(){var t;(t=this._validationObserver)==null||t.disconnect(),this._validationObserver=null,this._submitCallback=null,this._element.removeAttribute(mr),this._removeInputEvents(),this._removeValidationTraces(),this._validationResult=[],this._submitButton&&_.off(this._submitButton,"click"),this._config.activeValidation&&(this._validationElements.forEach(e=>{const{input:i}=e;_.off(i,"input")}),this._shouldApplyInputEvents=!0)}_removeValidationTraces(){this._removeFeedbackWrapper(),this._validationElements.forEach(({element:t,classes:e,initialHTML:i})=>{t.className=e,t.innerHTML=i,t.removeAttribute(br),t.removeAttribute(yr),t.removeAttribute(ic)}),this._validationElements=[]}_getValidationElements(){return m.find(Ow,this._element).map(e=>{const i=m.findOne("input",e)||m.findOne("textarea",e),n=m.findOne("select",e);return{id:i.name||i.id||(n==null?void 0:n.name)||bt("validation-"),element:e,type:e.getAttribute(zp),input:i,validFeedback:e.getAttribute(ic),invalidFeedback:e.getAttribute(yr),classes:e.className,initialHTML:e.innerHTML,ruleset:e.getAttribute(jp)}})}_createFeedbackWrapper(t,e){if(t.querySelectorAll(`[${vr}]`).length>0)return;const i=document.createElement("span");i.setAttribute(vr,""),e.parentNode.appendChild(i)}_removeFeedbackWrapper(){m.find(`[${vr}]`,this._element).forEach(e=>{e.remove()})}_watchForValidationChanges(){return new MutationObserver(e=>{e.forEach(i=>{const{attributeName:n}=i;n===mr&&(this._handleValidation(),this._config.activeValidation&&this._shouldApplyInputEvents&&this._applyInputEvents())})})}_handleValidation(){this._element.getAttribute(mr)&&(this._validationResult=[],this._isValid=!0,this._validationElements.forEach(t=>this._validateSingleElement(t)),this._emitEvents(this._isValid),this._submitCallback&&this._submitCallback(this._isValid))}_validateSingleElement(t){var c;const{element:e,type:i,input:n,ruleset:o,id:r}=t;o&&this._validateByRuleset(t);const a=e.getAttribute(br);if(a!=="valid"&&a!=="invalid")return;const l=a.replace(a.charAt(0),a.charAt(0).toUpperCase());i==="input"&&this._restyleNotches(e,l),i==="basic"&&this._restyleBasicInputs(n,l),(i==="checkbox"||i==="radio")&&this._restyleCheckboxes(n,l,i),this._restyleLabels(e,l),a==="invalid"&&(this._isValid=!1),this._config.disableFeedback||this._applyFeedback(e,a),_.trigger(this._element,Rw,{value:{name:r,result:a,validation:(c=this._validationResult[r])==null?void 0:c.validation}})}_validateByRuleset({element:t,type:e,invalidFeedback:i,input:n,id:o}){const r=this._getRuleset(t);if(!r.length)return;const a=e==="checkbox"||e==="radio"?n.checked:n.value;let l="",c=[];for(const h of r){const d=h.callback(a,this._errorMessages[h.name]||this._config.invalidFeedback,h.parameter);c.push({result:d===!0,name:h.name,fullName:h.fullName}),typeof d=="string"&&!l&&(l=d)}if(this._validationResult[o]={element:t,validation:c},!l){t.setAttribute(br,"valid");return}t.setAttribute(br,"invalid"),i||t.setAttribute(yr,l)}_handleInputChange(t){this._validateSingleElement(t)}_getRuleset(t){const i=t.getAttribute(jp).split("|");let n=[];const o={...kw,...this._config.customRules};return i.forEach(r=>{const a=this._getRuleData(r,o);a.callback?n.push(a):console.warn(`Rule ${r} does not exist`)}),n}_getRuleData(t,e){const i=t.split("(");return{callback:e[i[0]],parameter:i[1]?i[1].split(")")[0]:null,name:i[0],fullName:t}}_applyFeedback(t,e){const i=m.findOne(`[${vr}]`,t),n=t.getAttribute(ic)||this._config.validFeedback,o=t.getAttribute(yr)||this._config.invalidFeedback;g.addClass(t,this._classes.elementValidated),i.textContent=e==="valid"?n:o,i.className=this._classes[e==="valid"?"validFeedback":"invalidFeedback"]}_restyleCheckboxes(t,e,i){g.removeClass(t,this._classes.checkboxValid),g.removeClass(t,this._classes.checkboxInvalid),g.addClass(t,this._classes[`${i}${e}`])}_restyleBasicInputs(t,e){g.removeClass(t,this._classes.basicInputValid),g.removeClass(t,this._classes.basicInputInvalid),g.addClass(t,this._classes[`basicInput${e}`])}_restyleNotches(t,e){m.find(Iw,t).forEach((n,o)=>{let r=o===0?"notchLeading":o===1?"notchMiddle":"notchTrailing";n.className="",g.addClass(n,nu[r]),r+=e,g.addClass(n,this._classes[r])})}_restyleLabels(t,e){const i=m.find("label",t);i.length&&i.forEach(n=>{g.removeClass(n,this._classes.labelValid),g.removeClass(n,this._classes.labelInvalid),g.addClass(n,this._classes[`label${e}`])})}_emitEvents(t){if(_.trigger(this._element,Mw),t){_.trigger(this._element,Lw,{value:this._validationResult});return}_.trigger(this._element,$w,{value:this._validationResult})}_applyInputEvents(){this._validationElements.forEach(t=>{const{input:e,element:i}=t;_.on(e,"input",()=>this._handleInputChange(t)),_.on(i,"valueChange.te.select",()=>this._delayedInputChange(t)),_.on(i,"itemSelect.te.autocomplete",()=>this._delayedInputChange(t))}),this._shouldApplyInputEvents=!1}_removeInputEvents(){this._validationElements.forEach(t=>{const{input:e,element:i}=t;_.off(e,"input",()=>this._handleInputChange(t)),_.off(i,"valueChange.te.select",()=>this._delayedInputChange(t)),_.off(i,"itemSelect.te.autocomplete",()=>this._delayedInputChange(t))})}_delayedInputChange(t){setTimeout(()=>{this._handleInputChange(t)},10)}_handleSubmitButton(){this._submitButton=m.findOne(Dw,this._element),this._submitButton&&_.on(this._submitButton,"click",t=>this._handleSubmitButtonClick(t))}_handleSubmitButtonClick(t){if(this._element.setAttribute(mr,!0),this._config.submitCallback){this._submitCallback=e=>this._config.submitCallback(t,e);return}}_getConfig(t){return t={...Yp,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(tc,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Nw,...e,...t},L(tc,t,Bw),t}static getInstance(t){return O.getData(t,ec)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){const e=Tr.getOrCreateInstance(this);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}class mn{_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection({x:t,y:e}){return{x:{direction:t<0?"left":"right",value:Math.abs(t)},y:{direction:e<0?"up":"down",value:Math.abs(e)}}}_getOrigin({x:t,y:e},{x:i,y:n}){return{x:t-i,y:e-n}}_getDistanceBetweenTwoPoints(t,e,i,n){return Math.hypot(e-t,n-i)}_getMidPoint({x1:t,x2:e,y1:i,y2:n}){return{x:(t+e)/2,y:(i+n)/2}}_getVectorLength({x1:t,x2:e,y1:i,y2:n}){return Math.sqrt((e-t)**2+(n-i)**2)}_getRightMostTouch(t){let e=null;const i=Number.MIN_VALUE;return t.forEach(n=>{n.clientX>i&&(e=n)}),e}_getAngle(t,e,i,n){return Math.atan2(n-e,i-t)}_getAngularDistance(t,e){return e-t}_getCenterXY({x1:t,x2:e,y1:i,y2:n}){return{x:t+(e-t)/2,y:i+(n-i)/2}}_getPinchTouchOrigin(t){const[e,i]=t,n={x1:e.clientX,x2:i.clientX,y1:e.clientY,y2:i.clientY};return[this._getVectorLength(n),this._getCenterXY(n)]}_getPosition({x1:t,x2:e,y1:i,y2:n}){return{x1:t,x2:e,y1:i,y2:n}}}const sc="press",Hw="pressup",Vw={time:"number",pointers:"number"},Fw={time:250,pointers:1};class Ww extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._timer=null}static get NAME(){return sc}handleTouchStart(t){const{time:e,pointers:i}=this._options;t.touches.length===i&&(this._timer=setTimeout(()=>{_.trigger(this._element,sc,{touch:t,time:e}),_.trigger(this._element,Hw,{touch:t})},e))}handleTouchEnd(){clearTimeout(this._timer)}_getConfig(t){const e={...Fw,...g.getDataAttributes(this._element),...t};return L(sc,e,Vw),e}}const zw="swipe",jw={threshold:"number",direction:"string"},Yw={threshold:10,direction:"all"};class Kw{constructor(t,e){this._element=t,this._startPosition=null,this._options=this._getConfig(e)}handleTouchStart(t){this._startPosition=this._getCoordinates(t)}handleTouchMove(t){if(!this._startPosition)return;const e=this._getCoordinates(t),i={x:e.x-this._startPosition.x,y:e.y-this._startPosition.y},n=this._getDirection(i);if(this._options.direction==="all"){if(n.y.value<this._options.threshold&&n.x.value<this._options.threshold)return;const r=n.y.value>n.x.value?n.y.direction:n.x.direction;_.trigger(this._element,`swipe${r}`,{touch:t}),_.trigger(this._element,"swipe",{touch:t,direction:r}),this._startPosition=null;return}const o=this._options.direction==="left"||this._options==="right"?"x":"y";n[o].direction===this._options.direction&&n[o].value>this._options.threshold&&(_.trigger(this._element,`swipe${n[o].direction}`,{touch:t}),this._startPosition=null)}handleTouchEnd(){this._startPosition=null}_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection(t){return{x:{direction:t.x<0?"left":"right",value:Math.abs(t.x)},y:{direction:t.y<0?"up":"down",value:Math.abs(t.y)}}}_getConfig(t){const e={...Yw,...g.getDataAttributes(this._element),...t};return L(zw,e,jw),e}}const Je="pan",Uw=`${Je}start`,Xw=`${Je}end`,Gw=`${Je}move`,qw="left",Zw="right",Qw={threshold:"number",direction:"string",pointers:"number"},Jw={threshold:20,direction:"all",pointers:1};class tk extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._startTouch=null}static get NAME(){return Je}handleTouchStart(t){this._startTouch=this._getCoordinates(t),this._movedTouch=t,_.trigger(this._element,Uw,{touch:t})}handleTouchMove(t){t.type==="touchmove"&&t.preventDefault();const{threshold:e,direction:i}=this._options,n=this._getCoordinates(t),o=this._getCoordinates(this._movedTouch),r=this._getOrigin(n,this._startTouch),a=this._getOrigin(n,o),l=this._getDirection(r),c=this._getDirection(a),{x:h,y:d}=l;if(i==="all"&&(d.value>e||h.value>e)){const p=d.value>h.value?d.direction:h.direction;_.trigger(this._element,`${Je}${p}`,{touch:t}),_.trigger(this._element,Je,{...a,touch:t})}const u=i===qw||i===Zw?"x":"y";c[u].direction===i&&l[u].value>e&&_.trigger(this._element,`${Je}${i}`,{touch:t,[u]:n[u]-o[u]}),this._movedTouch=t,_.trigger(this._element,Gw,{touch:t})}handleTouchEnd(t){t.type==="touchend"&&t.preventDefault(),this._movedTouch=null,this._startTouch=null,_.trigger(this._element,Xw,{touch:t})}_getConfig(t){const e={...Jw,...g.getDataAttributes(this._element),...t};return L(Je,e,Qw),e}}const Ts="pinch",ek=`${Ts}end`,ik=`${Ts}start`,sk=`${Ts}move`,nk={threshold:"number",pointers:"number"},ok={threshold:10,pointers:2};class rk extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._startTouch=null,this._origin=null,this._touch=null,this._math=null,this._ratio=null}static get NAME(){return Ts}get isNumber(){return typeof this._startTouch=="number"&&typeof this._touch=="number"&&!isNaN(this._startTouch)&&!isNaN(this._touch)}handleTouchStart(t){if(t.touches.length!==this._options.pointers)return;t.type==="touchstart"&&t.preventDefault();const[e,i]=this._getPinchTouchOrigin(t.touches);this._touch=e,this._origin=i,this._startTouch=this._touch,_.trigger(this._element,ik,{touch:t,ratio:this._ratio,origin:this._origin})}handleTouchMove(t){const{threshold:e,pointers:i}=this._options;t.touches.length===i&&(t.type==="touchmove"&&t.preventDefault(),this._touch=this._getPinchTouchOrigin(t.touches)[0],this._ratio=this._touch/this._startTouch,this.isNumber&&(this._origin.x>e||this._origin.y>e)&&(this._startTouch=this._touch,_.trigger(this._element,Ts,{touch:t,ratio:this._ratio,origin:this._origin}),_.trigger(this._element,sk,{touch:t,ratio:this._ratio,origin:this._origin})))}handleTouchEnd(t){this.isNumber&&(this._startTouch=null,_.trigger(this._element,ek,{touch:t,ratio:this._ratio,origin:this._origin}))}_getConfig(t){const e={...ok,...g.getDataAttributes(this._element),...t};return L(Ts,e,nk),e}}const nc="tap",ak={interval:"number",time:"number",taps:"number",pointers:"number"},lk={interval:500,time:250,taps:1,pointers:1};class ck extends mn{constructor(t,e){super(),this._element=t,this._options=this._getConfig(e),this._timer=null,this._tapCount=0}static get NAME(){return nc}handleTouchStart(t){const{x:e,y:i}=this._getCoordinates(t),{interval:n,taps:o,pointers:r}=this._options;return t.touches.length===r&&(this._tapCount+=1,this._tapCount===1&&(this._timer=setTimeout(()=>{this._tapCount=0},n)),this._tapCount===o&&(clearTimeout(this._timer),this._tapCount=0,_.trigger(this._element,nc,{touch:t,origin:{x:e,y:i}}))),t}handleTouchEnd(){}handleTouchMove(){}_getConfig(t){const e={...lk,...g.getDataAttributes(this._element),...t};return L(nc,e,ak),e}}const bn="rotate",hk=`${bn}end`,dk=`${bn}start`,uk={angle:"number",pointers:"number"},pk={angle:0,pointers:2};class fk extends mn{constructor(t,e){super(),this._element=t,this._options=this._getConfig(e),this._origin={}}static get NAME(){return bn}handleTouchStart(t){t.type==="touchstart"&&t.preventDefault(),!(t.touches.length<2)&&(this._startTouch=t,this._origin={},_.trigger(this._element,dk,{touch:t}))}handleTouchMove(t){t.type==="touchmove"&&t.preventDefault();let e,i;const n=t.touches;if(n.length===1&&this._options.pointers===1){const{left:o,top:r,width:a,height:l}=this._element.getBoundingClientRect();e={x:o+a/2,y:r+l/2},i=n[0]}else if(t.touches.length===2&&this._options.pointers===2){const[o,r]=t.touches,a={x1:r.clientX,x2:o.clientX,y1:r.clientY,y2:o.clientY};e=this._getMidPoint(a),i=this._getRightMostTouch(t.touches)}else return;this.currentAngle=this._getAngle(e.x,e.y,i.clientX,i.clientY),this._origin.initialAngle?(this._origin.change=this._getAngularDistance(this._origin.previousAngle,this.currentAngle),this._origin.distance+=this._origin.change):(this._origin.initialAngle=this._origin.previousAngle=this.currentAngle,this._origin.distance=this._origin.change=0),this._origin.previousAngle=this.currentAngle,this.rotate={currentAngle:this.currentAngle,distance:this._origin.distance,change:this._origin.change},_.trigger(this._element,bn,{...this.rotate,touch:t})}handleTouchEnd(t){t.type==="touchend"&&t.preventDefault(),this._origin={},_.trigger(this._element,hk,{touch:t})}_getConfig(t){const e={...pk,...g.getDataAttributes(this._element),...t};return L(bn,e,uk),e}}const oc="touch",rc=`te.${oc}`,_k={event:"string"},gk={event:"swipe"};class Er{constructor(t,e={}){this._element=t,this._options=this._getConfig(e),this._event=this._options.event,this.swipe=this._event==="swipe"?new Kw(t,e):null,this.press=this._event==="press"?new Ww(t,e):null,this.pan=this._event==="pan"?new tk(t,e):null,this.pinch=this._event==="pinch"?new rk(t,e):null,this.tap=this._event==="tap"?new ck(t,e):null,this.rotate=this._event==="rotate"?new fk(t,e):null,this._touchStartHandler=i=>this._handleTouchStart(i),this._touchMoveHandler=i=>this._handleTouchMove(i),this._touchEndHandler=i=>this._handleTouchEnd(i),_.on(this._element,"touchstart",this._touchStartHandler),_.on(this._element,"touchmove",this._touchMoveHandler),_.on(this._element,"touchend",this._touchEndHandler),this._element&&O.setData(t,rc,this)}static get NAME(){return oc}dispose(){_.off(this._element,"touchstart",this._touchStartHandler),_.off(this._element,"touchmove",this._touchMoveHandler),_.off(this._element,"touchend",this._touchEndHandler),this.swipe=null,this.press=null,this.pan=null,this.pinch=null,this.tap=null,this.rotate=null}_getConfig(t){const e={...gk,...g.getDataAttributes(this._element),...t};return L(oc,e,_k),e}_handleTouchStart(t){this[this._event].handleTouchStart(t)}_handleTouchMove(t){this[this._event].handleTouchMove&&this[this._event].handleTouchMove(t)}_handleTouchEnd(t){this[this._event].handleTouchEnd(t)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,rc);const i=typeof t=="object"&&t;if(!(!e&&/dispose/.test(t))&&(e||(e=new Er(this,i)),typeof t=="string")){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);return e[t]}})}static getInstance(t){return O.getData(t,rc)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const ac="smoothScroll",vn=`te.${ac}`,lc=`.${vn}`,mk={container:"string",offset:"number",easing:"string",duration:"number"},bk={container:"body",offset:0,easing:"linear",duration:500},vk=`scrollStart${lc}`,yk=`scrollEnd${lc}`,Tk=`scrollCancel${lc}`;class xr{constructor(t,e={}){this._element=t,this._options=this._getConfig(e),this._href=this._element.getAttribute("href"),this.isCancel=!1,this._element&&(O.setData(t,vn,this),this._setup())}static get NAME(){return ac}get isWindow(){return this._options.container==="body"}get containerToScroll(){return this.isWindow?document.documentElement:m.findOne(this._options.container,document.documentElement)}get elFromHrefExist(){return!!m.findOne(this._href,this.containerToScroll)}get offsetFromEl(){const t=this.containerToScroll.scrollTop,e=m.findOne(this._href,this.containerToScroll);if(this.isWindow)return g.offset(e).top-this._options.offset+t;const i=e.getBoundingClientRect().y,n=this.containerToScroll.getBoundingClientRect().y;return i-n-this._options.offset+t}get easingFunction(){const t=this._options.easing,e=`_motion${t[0].toUpperCase()}${t.slice(1)}`;return this[e]?this[e]:this._motionLinear}dispose(){_.off(this._element,"click",this._handleClick),O.removeData(this._element,vn),this._element=null}cancelScroll(){this.isCancel=!0}_getConfig(t){const e={...bk,...g.getDataAttributes(this._element),...t};return L(ac,e,mk),e}_inViewport(){if(this.isWindow)return!0;const t=this.containerToScroll.getBoundingClientRect();return t.top>=0&&t.bottom<=(window.innerHeight||document.documentElement.clientHeight)}_setup(){const t=typeof this._href<"u",e=this._href.includes("#");t&&e&&this.elFromHrefExist&&(this._scrollOnClickEvent(),this._preventNativeScroll())}_scrollOnClickEvent(){_.on(this._element,"click",t=>{this._handleClick(t)})}_handleClick(t){t.preventDefault(),this.isCancel=!1,_.trigger(this._element,vk);const e=this.containerToScroll,i=this.containerToScroll.scrollTop,n=this.offsetFromEl,o=0,r=1/this._options.duration,a=4.25,l=this.easingFunction;this._inViewport()?this._scrollOnNextTick(e,i,n,o,r,a,l):(this._scrollOnNextTick(document.documentElement,document.documentElement.scrollTop,this.containerToScroll.offsetTop,o,r,a,l),setTimeout(()=>{this._scrollOnNextTick(e,i,n,o,r,a,l),this.isCancel=!1},this._options.duration))}_scrollOnNextTick(t,e,i,n,o,r,a){const l=n<0,c=n>1,h=o<=0;if(l||c||h||this.isCancel){if(this.isCancel){this.isInViewport&&(this.isCancel=!1),_.trigger(this._element,Tk);return}_.trigger(this._element,yk),t.scrollTop=i;return}t.scrollTo({top:e-(e-i)*a(n)}),n+=o*r,setTimeout(()=>{this._scrollOnNextTick(t,e,i,n,o,r,a)})}_preventDefault(t){t.preventDefault()}_preventNativeScroll(){let t=!1;try{window.addEventListener("test",null,Object.defineProperty({},"passive",{get:()=>t=!0}))}catch(n){this._scrollError=n}const e=t?{passive:!1}:!1,i="onwheel"in $("div")?"wheel":"mousewheel";this.isWindow&&(this._deleteScrollOnStart(e,i),this._addScrollOnEnd(e,i),this._addScrollOnCancel(e,i))}_deleteScrollOnStart(t,e){_.on(this._element,"scrollStart.te.smoothScroll",()=>{window.addEventListener(e,this._preventDefault,t),window.addEventListener("touchmove",this._preventDefault,t)})}_addScrollOnEnd(t,e){_.on(this._element,"scrollEnd.te.smoothScroll",()=>{window.removeEventListener(e,this._preventDefault,t),window.removeEventListener("touchmove",this._preventDefault,t)})}_addScrollOnCancel(t,e){_.on(this._element,"scrollCancel.te.smoothScroll",()=>{window.removeEventListener(e,this._preventDefault,t),window.removeEventListener("touchmove",this._preventDefault,t)})}_motionLinear(t){return t}_motionEaseInQuad(t){return t*t}_motionEaseInCubic(t){return t*t*t}_motionEaseInQuart(t){return t*t*t*t}_motionEaseInQuint(t){return t*t*t*t*t}_motionEaseInOutQuad(t){return t<.5?2*t*t:-1+(4-2*t)*t}_motionEaseInOutCubic(t){return t/=.5,t<1?t*t*t/2:(t-=2,(t*t*t+2)/2)}_motionEaseInOutQuart(t){return t/=.5,t<1?.5*t*t*t*t:(t-=2,-(t*t*t*t-2)/2)}_motionEaseInOutQuint(t){return t/=.5,t<1?t*t*t*t*t/2:(t-=2,(t*t*t*t*t+2)/2)}_motionEaseOutQuad(t){return-t*(t-2)}_motionEaseOutCubic(t){return t--,t*t*t+1}_motionEaseOutQuart(t){return t--,-(t*t*t*t-1)}_motionEaseOutQuint(t){return t--,t*t*t*t*t+1}static getInstance(t){return O.getData(t,vn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,vn);const i=typeof t=="object"&&t;if(e||(e=new xr(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Kp="lazyLoad",Cr="te.lazyLoad",Ek="[data-te-lazy-load-init]",Up="data-te-lazy-load",xk="onLoad.te.lazy",Ck="onError.te.lazy",Xp=["img","video"],Ak={lazySrc:"(string|null)",lazyDelay:"number",lazyAnimation:"string",lazyOffset:"number",lazyPlaceholder:"(string|undefined)",lazyError:"(string|undefined)"},wk={lazySrc:null,lazyDelay:500,lazyAnimation:"[fade-in_1s_ease-in-out]",lazyOffset:0};class yn{constructor(t,e){this._element=t,this._element&&O.setData(t,Cr,this),this._options=this._getConfig(e),this.scrollHandler=this._scrollHandler.bind(this),this.errorHandler=this._setElementError.bind(this),this._childrenInstances=null,this._init()}static get NAME(){return Kp}get offsetValues(){return this._element.getBoundingClientRect()}get inViewport(){if(this.parent){const t=this.parent.getBoundingClientRect();return t.y>0&&t.y<window.innerHeight&&this.offsetValues.y>=t.y&&this.offsetValues.y<=t.y+t.height&&this.offsetValues.y<=window.innerHeight}return this.offsetValues.top+this._options.lazyOffset<=window.innerHeight&&this.offsetValues.bottom>=0}get parent(){const[t]=m.parents(this._element,Ek);return t}get node(){return this._element.nodeName}get isContainer(){return!m.matches(this._element,Xp)}dispose(){O.removeData(this._element,Cr),this._animation&&(this._animation.dispose(),this._animation=null),this._element=null,this._childrenInstances&&this._childrenInstances.forEach(t=>t.dispose())}_init(){if(this._element.setAttribute(Up,""),this.isContainer){this._setupContainer();return}this._setupElement()}_setupElement(){_.one(this._element,"error",this.errorHandler),this._options.lazyPlaceholder&&this._setPlaceholder(),this._animation=new Gs(this._element,{animation:`${this._options.lazyAnimation}`,animationStart:"onLoad"}),_.one(this._element,"load",()=>this._scrollHandler()),this.parent&&_.on(this.parent,"scroll",this.scrollHandler),_.on(window,"scroll",this.scrollHandler)}_scrollHandler(){this.inViewport&&(this._timeout=setTimeout(()=>{this._setSrc(),this._element.removeAttribute(Up),this._removeAttrs(),this._animation.init()},this._options.lazyDelay),this.parent&&_.off(this.parent,"scroll",this.scrollHandler),_.off(window,"scroll",this.scrollHandler))}_setElementError(){!this._options.lazyError||this._element.src===this._options.lazyError?this._element.alt="404 not found":this._element.setAttribute("src",this._options.lazyError),_.trigger(this._element,Ck)}_setSrc(){this._element.setAttribute("src",this._options.lazySrc),_.trigger(this._element,xk)}_setPlaceholder(){this.node==="IMG"?this._element.setAttribute("src",this._options.lazyPlaceholder):this.node==="VIDEO"&&this._element.setAttribute("poster",this._options.lazyPlaceholder)}_removeAttrs(){["src","delay","animation","placeholder","offset","error"].forEach(t=>{g.removeDataAttribute(this._element,`lazy-${t}`)})}_setupContainer(){this._childrenInstances=m.children(this._element,Xp).map(t=>new yn(t,this._options))}_getConfig(t){const e={...wk,...t,...g.getDataAttributes(this._element)};return L(Kp,e,Ak),e}static getInstance(t){return O.getData(t,Cr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Cr);const i=typeof t=="object"&&t;if(e||(e=new yn(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Gp="clipboard",Tn="te.clipboard",kk=`.${Tn}`,Sk={clipboardTarget:null},Ok={clipboardTarget:"null|string"},Ik=`copy${kk}`;class Ar{constructor(t,e={}){this._element=t,this._options=e,this._element&&(O.setData(t,Tn,this),this._initCopy=this._initCopy.bind(this),this._setup())}static get NAME(){return Gp}get options(){const t={...Sk,...g.getDataAttributes(this._element),...this._options};return L(Gp,t,Ok),t}get clipboardTarget(){return m.findOne(this.options.clipboardTarget)}get copyText(){const t=this.clipboardTarget.hasAttribute("data-te-clipboard-text"),e=this.clipboardTarget.value,i=this.clipboardTarget.textContent;return t?this.clipboardTarget.getAttribute("data-te-clipboard-text"):e||i}dispose(){_.off(this._element,"click",this._initCopy),O.removeData(this._element,Tn),this._element=null}_setup(){_.on(this._element,"click",this._initCopy)}_initCopy(){const t=this._createNewInput();document.body.appendChild(t),this._selectInput(t),_.trigger(this._element,Ik,{copyText:this.copyText}),t.remove()}_createNewInput(){const t=this.clipboardTarget.tagName==="TEXTAREA"?"textarea":"input",e=$(t);return e.value=this.copyText,g.addClass(e,"-left-[9999px] absolute"),e}_selectInput(t){t.select(),t.focus(),t.setSelectionRange(0,99999),document.execCommand("copy")}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Tn);const i=typeof t=="object"&&t;if(e||(e=new Ar(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}static getInstance(t){return O.getData(t,Tn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const cc="infiniteScroll",wr=`te.${cc}`,Dk={infiniteDirection:"y"},Mk={infiniteDirection:"string"};class kr{constructor(t,e){this._element=t,this._element&&O.setData(t,wr,this),this._options=this._getConfig(e),this.scrollHandler=this._scrollHandler.bind(this),this._init()}static get NAME(){return cc}get rect(){return this._element.getBoundingClientRect()}get condition(){return this._element===window?Math.abs(window.scrollY+window.innerHeight-document.documentElement.scrollHeight)<1:this._options.infiniteDirection==="x"?this.rect.width+this._element.scrollLeft+10>=this._element.scrollWidth:Math.ceil(this.rect.height+this._element.scrollTop)>=this._element.scrollHeight}dispose(){_.off(this._element,"scroll",this.scrollHandler),O.removeData(this._element,wr),this._element=null}_init(){_.on(this._element,"scroll",()=>this._scrollHandler())}_scrollHandler(){this.condition&&_.trigger(this._element,"complete.te.infiniteScroll"),_.off(this._element,"scroll",this.scrollHandler)}_getConfig(t){const e={...Dk,...this._element!==window?g.getDataAttributes(this._element):{},...t};return L(cc,e,Mk),e}static getInstance(t){return O.getData(t,wr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,wr);const i=typeof t=="object"&&t;if(e||(e=new kr(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}function Lk({backdropID:s},t){const e=$("div");return g.addClass(e,`${t.backdrop} ${t.backdropColor}`),e.id=s,e}const En="loadingManagement",Sr=`te.${En}`,$k="[data-te-loading-icon-ref]",Rk="[data-te-loading-text-ref]",Pk=`show.te.${En}`,Nk={backdrop:"(null|boolean)",backdropID:"(null|string|number)",delay:"(null|number)",loader:"(null|string|number)",parentSelector:"(null|string)",loadingIcon:"boolean",loadingText:"boolean",scroll:"boolean"},Bk={backdrop:!0,backdropID:null,delay:0,loader:"",parentSelector:null,scroll:!0,loadingText:!0,loadingIcon:!0},Hk={loadingSpinner:"absolute top-[50%] left-[50%] -translate-x-[50%] -translate-y-[50%] flex flex-col justify-center items-center z-40",spinnerColor:"text-primary dark:text-primary-400",backdrop:"w-full h-full fixed top-0 left-0 bottom-0 right-0 z-30",backdropColor:"bg-[rgba(0,0,0,0.4)]"},Vk={loadingSpinner:"string",spinnerColor:"string",backdrop:"string",backdropColor:"string"};class Or{constructor(t,e={},i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._element&&O.setData(t,Sr,this),this._backdropElement=null,this._parentElement=m.findOne(this._options.parentSelector),this._loadingIcon=m.findOne($k,this._element),this._loadingText=m.findOne(Rk,this._element),this.init()}static get NAME(){return En}init(){const t=this._loadingIcon.cloneNode(!0),e=this._loadingText.cloneNode(!0);this._removeElementsOnStart(),setTimeout(()=>{g.addClass(this._element,`${this._classes.loadingSpinner} ${this._classes.spinnerColor}`),this._setBackdrop(),this._setLoadingIcon(t),this._setLoadingText(e),this._setScrollOption(),_.trigger(this._element,Pk)},this._options.delay)}dispose(){O.removeData(this._element,Sr),g.removeClass(this._element,`${this._classes.loadingSpinner} ${this._classes.spinnerColor}`);const t=this._options.delay;setTimeout(()=>{this._removeBackdrop(),this._backdropElement=null,this._element=null,this._options=null},t)}_setBackdrop(){const{backdrop:t}=this._options;t&&(this._backdropElement=Lk(this._options,this._classes),this._parentElement!==null?(g.addClass(this._element,"absolute"),g.addClass(this._parentElement,"relative"),g.addClass(this._backdropElement,"absolute"),this._parentElement.appendChild(this._backdropElement)):(g.addClass(this._element,"!fixed"),document.body.appendChild(this._backdropElement),document.body.appendChild(this._element)))}_removeBackdrop(){const{backdrop:t}=this._options;t&&(this._parentElement!==null?(g.removeClass(this._element,"absolute"),g.removeClass(this._parentElement,"relative"),this._backdropElement.remove()):(this._backdropElement.remove(),this._element.remove()))}_setLoadingIcon(t){if(!this._options.loadingIcon){t.remove();return}this._element.appendChild(t),t.id=this._options.loader}_setLoadingText(t){if(!this._options.loadingText){t.remove();return}this._element.appendChild(t)}_removeElementsOnStart(){this._element!==null&&(this._loadingIcon.remove(),this._loadingText.remove())}_setScrollOption(){if(this._options.scroll){if(this._parentElement===null){g.addClass(document.body,"overflow-auto");return}g.addClass(this._parentElement,"overflow-auto")}else{if(this._parentElement===null){g.addClass(document.body,"overflow-hidden");return}g.addClass(this._parentElement,"overflow-hidden")}}_getConfig(t){const e={...Bk,...g.getDataAttributes(this._element),...t};return L(En,e,Nk),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Hk,...e,...t},L(En,t,Vk),t}static getInstance(t){return O.getData(t,Sr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Sr);const i=typeof t=="object"&&t;if(e||(e=new Or(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Fk=s=>{const t=/^(0?[1-9]|1[012])(:[0-5]\d) [APap][mM]$/,e=/^([0-9]|0[0-9]|1[0-9]|2[0-3]):[0-5][0-9](:[0-5][0-9])?$/;return s.match(t)||s.match(e)},Wk=s=>s&&Object.prototype.toString.call(s)==="[object Date]"&&!isNaN(s),zk=s=>s.getMonth(),jk=s=>s.getFullYear(),Yk=s=>s.match(/[^(dmy)]{1,}/g),Kk=(s,t,e,i)=>{let n;e[0]!==e[1]?n=e[0]+e[1]:n=e[0];const o=new RegExp(`[${n}]`),r=s.split(o),a=t.split(o),l=t.indexOf("mmm")!==-1,c=[];for(let b=0;b<a.length;b++)a[b].indexOf("yy")!==-1&&(c[0]={value:r[b],format:a[b]}),a[b].indexOf("m")!==-1&&(c[1]={value:r[b],format:a[b]}),a[b].indexOf("d")!==-1&&a[b].length<=2&&(c[2]={value:r[b],format:a[b]});let h;t.indexOf("mmmm")!==-1?h=i.monthsFull:h=i.monthsShort;const d=Number(c[0].value),u=l?Uk(c[1].value,h):Number(c[1].value)-1,p=Number(c[2].value);return ee(d,u,p)},Uk=(s,t)=>t.findIndex(e=>e===s),Xk=(s,t,e)=>`
+  <button type="button" class="${e.pickerIcon}" data-te-datepicker-toggle-button-ref>
+    ${s}
+  </button>
+  <button type="button" class="${e.pickerIcon}" data-te-timepicker-toggle-button-ref>
+    ${t}
+  </button>
+`,Gk=(s,t)=>`
+  <button type="button" class="${t.toggleButton}" data-te-date-timepicker-toggle-ref>
+    ${s} 
+  </button>
+`,Ir="datetimepicker",xn=`te.${Ir}`,hc=`.${xn}`,qp="data-te-datepicker-init",Zp="data-te-timepicker-init",qk="data-te-datepicker-header",Zk="data-te-datepicker-cancel-button-ref",Qk="data-te-datepicker-ok-button-ref",dc="data-te-timepicker-wrapper",Qp="data-te-timepicker-cancel",Jk="data-te-timepicker-submit",tS="data-te-timepicker-clear",Jp="data-te-buttons-timepicker",eS="data-te-date-timepicker-toggle-ref",iS="data-te-datepicker-toggle-button-ref",sS="data-te-timepicker-toggle-button-ref",nS=`[${Zp}]`,oS=`[${qp}]`,rS=`[${eS}]`,aS=`[${sS}]`,lS="[data-te-input-notch-ref]",cS="[data-te-date-timepicker-toggle-ref]",hS="[data-te-timepicker-elements-wrapper]",dS="[data-te-timepicker-clock-wrapper]",uS=`open${hc}`,pS=`close${hc}`,fS=`datetimeChange${hc}`,tf="close.te.datepicker",ef="input.te.timepicker",Es=$("div"),sf={inline:!1,toggleButton:!0,container:"body",disabled:!1,disablePast:!1,disableFuture:!1,defaultTime:"",defaultDate:"",timepicker:{},datepicker:{},showFormat:!1,dateTimepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+  <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+  </svg>`,datepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+  <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+  </svg>`,timepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z" />
+  </svg>`},_S={inline:"boolean",toggleButton:"boolean",container:"string",disabled:"boolean",disablePast:"boolean",disableFuture:"boolean",defaultTime:"(string|date|number)",defaultDate:"(string|date|number)",timepicker:"object",datepicker:"object",showFormat:"boolean",dateTimepickerToggleIconTemplate:"string",datepickerToggleIconTemplate:"string",timepickerToggleIconTemplate:"string"},gS={toggleButton:"flex items-center justify-content-center [&>svg]:w-5 [&>svg]:h-5 absolute outline-none border-none bg-transparent right-0.5 top-1/2 -translate-x-1/2 -translate-y-1/2 hover:text-primary focus:text-primary dark:hover:text-primary-400 dark:focus:text-primary-400 dark:text-neutral-200",pickerIcon:"[&>svg]:w-6 [&>svg]:h-6 [&>svg]:mx-auto [&>svg]:pointer-events-none w-1/2 px-1.5 py-[1px] rounded-[10px] min-h-[40px] cursor-pointer outline-none border-none text-white hover:bg-primary-600 dark:hover:bg-neutral-600",buttonsContainer:"flex justify-evenly items-end bg-primary dark:bg-zinc-800 dark:data-[te-buttons-timepicker]:bg-zinc-700",timepicker:{},datepicker:{}},mS={toggleButton:"string",pickerIcon:"string",buttonsContainer:"string",timepicker:"object",datepicker:"object"};class Dr{constructor(t,e,i){this._element=t,this._input=m.findOne("input",this._element),this._options=this._getConfig(e),this._classes=this._getClasses(i),this._timepicker=null,this._datepicker=null,this._dateValue=this._options.defaultDate?this._options.defaultDate:"",this._timeValue=this._options.defaultTime?this._options.defaultTime:"",this._isInvalidTimeFormat=!1,this._format=this._options.datepicker.format?this._options.datepicker.format:"dd/mm/yyyy",this._cancel=!1,this._scrollBar=new Qi,this._element&&O.setData(t,xn,this),this._init()}static get NAME(){return Ir}get toggleButton(){return m.findOne(rS,this._element)}get notch(){return m.findOne(lS,this._element)}dispose(){_.off(this._element,"click",this._openDatePicker),_.off(this._input,"input",this._handleInput),_.off(this._element,"click"),O.removeData(this._element,xn),this._removeTimePicker(),this._removeDatepicker(),this.toggleButton.remove(),this._options=sf,this._timepicker=null,this._datepicker=null,this._dateValue=null,this._timeValue=null,this._isInvalidTimeFormat=null}update(t={}){const e=this._getConfig({...this._options,...t});this.dispose(),this._options=e,this._init()}_init(){this._addDatepicker(),this._addTimePicker(),this._appendToggleButton(),this._listenToToggleClick(),this._listenToUserInput(),this._disableInput(),this._setInitialDefaultInput(),this._applyFormatPlaceholder(),this._options.disablePast&&this._handleTimepickerDisablePast(),this._options.disableFuture&&this._handleTimepickerDisableFuture()}_removeDatepicker(){const t=this._element.querySelector(oS);t&&t.remove()}_addDatepicker(){const t=$("div");t.id=this._element.id?`datepicker-${this._element.id}`:bt("datepicker-");const e='<input type="text">';t.innerHTML=e,t.setAttribute(qp,""),this._element.appendChild(t),g.addClass(t,"hidden");let i={...this._options.datepicker,container:this._options.container,disablePast:this._options.disablePast,disableFuture:this._options.disableFuture};(this._options.inline||this._options.datepicker.inline)&&(i={...i,inline:!0}),this._datepicker=new xl(t,i,{...this._classes.datepicker}),this._datepicker._input.value=this._dateValue}_removeTimePicker(){const t=this._element.querySelector(nS);t&&(t.remove(),this._scrollBar.reset())}_addTimePicker(){const t=$("div");t.id=this._element.id?`timepicker-${this._element.id}`:bt("timepicker-");const e='<input type="text">';t.innerHTML=e,t.setAttribute(Zp,""),this._element.appendChild(t),g.addClass(t,"hidden");let i={...this._options.timepicker,container:this._options.container};(this._options.inline||this._options.timepicker.inline)&&(i={...i,inline:!0}),this._timepicker=new Ll(t,i,{...this._classes.timepicker}),this._timepicker.input.value=this._timeValue}_addIconButtons(){if(g.addClass(Es,this._classes.buttonsContainer),Es.innerHTML=Xk(this._options.datepickerToggleIconTemplate,this._options.timepickerToggleIconTemplate,this._classes),Es.removeAttribute(Jp),!(this._options.inline||this._options.datepicker.inline)){if(this._scrollBar.hide(),this._datepicker._isOpen)m.findOne(`[${qk}]`,document.body).appendChild(Es);else if(this._timepicker._modal&&!this._options.timepicker.inline){const t=m.findOne(hS,document.body),e=m.findOne(dS,document.body);Es.setAttribute(Jp,""),t.insertBefore(Es,e)}}}_enableOrDisableToggleButton(){this._options.disabled?(this.toggleButton.disabled=!0,g.addClass(this.toggleButton,"pointer-events-none")):(this.toggleButton.disabled=!1,g.removeClass(this.toggleButton,"pointer-events-none"))}_appendToggleButton(){this._options.toggleButton&&(this._element.insertAdjacentHTML("beforeend",Gk(this._options.dateTimepickerToggleIconTemplate,this._classes)),this._enableOrDisableToggleButton())}_applyFormatPlaceholder(){this._options.showFormat&&(this._input.placeholder=this._format)}_listenToCancelClick(){const t=m.findOne(`[${Zk}]`,document.body);_.one(t,"mousedown",()=>{this._cancel=!0,this._scrollBar.reset(),_.off(t,"mousedown")})}_listenToToggleClick(){_.on(this._element,"click",cS,t=>{t.preventDefault(),this._openDatePicker()})}_listenToUserInput(){_.on(this._input,"input",t=>{this._handleInput(t.target.value)})}_disableInput(){this._options.disabled&&(this._input.disabled="true")}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...sf,...e,...t},L(Ir,t,_S),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...gS,...e,...t},L(Ir,t,mS),t}_handleInput(t){const e=t.split(", "),i=Yk(this._format),n=e[0],o=e[1]||"",r=Kk(n,this._format,i,this._datepicker._options);e.length===2&&(Wk(r)&&Fk(o)?(this._dateValue=n,this._timeValue=o,this._datepicker._input.value=this._dateValue,this._datepicker._activeDate=this._dateValue,this._datepicker._selectedYear=jk(r),this._datepicker._selectedMonth=zk(r),this._datepicker._headerDate=r,this._timepicker.input.value=this._timeValue,this._timepicker._isInvalidTimeFormat=!1):(this._datepicker._activeDate=new Date,this._datepicker._selectedDate=null,this._datepicker._selectedMonth=null,this._datepicker._selectedYear=null,this._datepicker._headerDate=null,this._datepicker._headerMonth=null,this._datepicker._headerYear=null,this._timepicker._isInvalidTimeFormat=!0))}_openDatePicker(){if(_.trigger(this._element,uS).defaultPrevented)return;this._datepicker.open(),this._options.inline||this._scrollBar.hide(),(this._options.inline||this._options.datepicker.inline)&&this._openDropdownDate(),this._addIconButtons(),this._listenToCancelClick(),this._options.inline&&this._datepicker._isOpen&&g.addClass(this.toggleButton,"pointer-events-none"),_.one(this._datepicker._element,tf,()=>{if(this._dateValue=this._datepicker._input.value,this._updateInputValue(),this._cancel){this._cancel=!1;return}let i=!1;_.on(this._datepicker.container,"click",n=>{!this._datepicker._selectedDate&&n.target.hasAttribute(Qk)||i||(this._openTimePicker(),i=!0,setTimeout(()=>{i=!1},500))}),setTimeout(()=>{m.findOne(`[${dc}]`,document.body)||this._scrollBar.reset()},10),this._options.inline&&g.removeClass(this.toggleButton,"pointer-events-none")});const e=m.findOne(aS,document.body);_.on(e,"click",()=>{this._datepicker.close(),this._scrollBar.hide(),_.trigger(this._datepicker._element,tf)})}_handleTimepickerDisablePast(){const t=new Date;t.setHours(0,0,0,0),_.on(this._datepicker._element,"dateChange.te.datepicker",()=>{this._datepicker._selectedDate.getTime()===t.getTime()?this._timepicker.update({disablePast:!0}):this._timepicker.update({disablePast:!1})})}_handleTimepickerDisableFuture(){const t=new Date;t.setHours(0,0,0,0),_.on(this._datepicker._element,"dateChange.te.datepicker",()=>{this._datepicker._selectedDate.getTime()===t.getTime()?this._timepicker.update({disableFuture:!0}):this._timepicker.update({disableFuture:!1})})}_handleEscapeKey(){_.one(document.body,"keyup",()=>{setTimeout(()=>{m.findOne(`[${dc}]`,document.body)||this._scrollBar.reset()},250)})}_handleCancelButton(){const t=m.findOne(`[${Qp}]`,document.body);_.one(t,"mousedown",()=>{this._scrollBar.reset()})}_openDropdownDate(){const t=this._datepicker._popper;t.state.elements.reference=this._input,this._scrollBar.reset()}_openTimePicker(){_.trigger(this._timepicker.elementToggle,"click"),setTimeout(()=>{if(this._addIconButtons(),(this._options.inline||this._options.timepicker.inline)&&this._openDropdownTime(),this._timepicker._modal){const t=m.findOne(`[${Qp}]`,document.body);this._handleEscapeKey(),this._handleCancelButton(),_.on(this._timepicker._modal,"click",e=>{(e.target.hasAttribute(dc)||e.target.hasAttribute(Jk))&&setTimeout(()=>{this._scrollBar.reset()},200),e.target.hasAttribute(tS)&&_.trigger(this._timepicker._element,ef),e.target.hasAttribute(iS)&&(_.trigger(t,"click"),setTimeout(()=>{this._openDatePicker(),this._scrollBar.hide()},200))})}}),_.one(this._timepicker._element,ef,()=>{this._timeValue=this._timepicker.input.value,this._updateInputValue(),_.trigger(this._element,pS)})}_openDropdownTime(){const t=this._timepicker._popper;t.state.elements.reference=this._input,t.update(),this._scrollBar.reset()}_setInitialDefaultInput(){(this._options.defaultDate||this._options.defaultTime)&&this._updateInputValue()}_updateInputValue(){this._timeValue&&this._dateValue&&(this._input.value=`${this._dateValue}, ${this._timeValue}`,_.trigger(this._element,fS,{value:this._input.value}).defaultPrevented)||(_.trigger(this._input,"focus"),this.notch&&this.notch.removeAttribute("data-te-input-focused"))}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,xn);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Dr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,xn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Mr="sticky",Cn=`te.${Mr}`,nf=`.${Cn}`,bS=`active${nf}`,vS=`inactive${nf}`,yS={stickyAnimationSticky:"",stickyAnimationUnsticky:"",stickyBoundary:!1,stickyDelay:0,stickyDirection:"down",stickyMedia:0,stickyOffset:0,stickyPosition:"top",stickyZIndex:100},TS={stickyAnimationSticky:"string",stickyAnimationUnsticky:"string",stickyBoundary:"(boolean|string)",stickyDelay:"number",stickyDirection:"string",stickyMedia:"number",stickyOffset:"number",stickyPosition:"string",stickyZIndex:"(string|number)"},ES={stickyActive:""},xS={stickyActive:"string"};class Lr{constructor(t,e,i){this._element=t,this._hiddenElement=null,this._elementPositionStyles={},this._scrollDirection="",this._isSticked=!1,this._elementOffsetTop=null,this._scrollTop=0,this._pushPoint="",this._manuallyDeactivated=!1,this._element&&(this._options=this._getConfig(e),this._classes=this._getClasses(i),O.setData(t,Cn,this),this._init())}static get NAME(){return Mr}dispose(){const{stickyAnimationUnsticky:t}=this._options;let{animationDuration:e}=getComputedStyle(this._element);e=t!==""?parseFloat(e)*1e3:0,this._disableSticky(),setTimeout(()=>{O.removeData(this._element,Cn),this._element=null,this._options=null,this._hiddenElement=null,this._elementPositionStyles=null,this._scrollDirection=null,this._isSticked=null,this._elementOffsetTop=null,this._scrollTop=null,this._pushPoint=null,this._manuallyDeactivated=null},e)}active(){this._isSticked||(this._createHiddenElement(),this._enableSticky(),this._changeBoundaryPosition(),this._isSticked=!0,this._manuallyDeactivated=!1)}inactive(){this._isSticked&&(this._disableSticky(),this._isSticked=!1,this._manuallyDeactivated=!0)}_init(){this._userActivityListener()}_userActivityListener(){_.on(window,"resize",()=>{this._updateElementPosition(),this._updateElementOffset()}),_.on(window,"scroll",()=>{if(!this._element||window.innerWidth<=this._options.stickyMedia||this._manuallyDeactivated)return;const t=document.documentElement,{stickyDirection:e}=this._options,i=window.pageYOffset||t.scrollTop;this._updateElementOffset(),this._updatePushPoint(),this._updateScrollDirection(i),this._clearInProgressAnimations();const n=[this._scrollDirection,"both"].includes(e),o=this._pushPoint<=i,r=o&&!this._isSticked&&n,a=(!o||!n)&&this._isSticked;r&&(this._createHiddenElement(),this._enableSticky(),this._changeBoundaryPosition(),this._isSticked=!0),a&&(this._disableSticky(),this._isSticked=!1),this._isSticked&&(this._updatePosition({styles:this._elementPositionStyles}),this._changeBoundaryPosition()),this._scrollTop=i<=0?0:i})}_updatePushPoint(){this._options.stickyPosition==="top"?this._pushPoint=this._elementOffsetTop-this._options.stickyDelay:this._pushPoint=this._elementOffsetTop+this._element.height-document.body.scrollHeight+this._options.stickyDelay}_updateElementOffset(){this._hiddenElement?this._elementOffsetTop=this._hiddenElement.offsetTop:this._elementOffsetTop=this._element.offsetTop,this._options.stickyAnimationUnsticky&&(this._elementOffsetTop+=this._element.height||0)}_updateElementPosition(){if(this._hiddenElement){const{left:t}=this._hiddenElement.getBoundingClientRect();this._elementPositionStyles={left:`${t}px`}}else this._elementPositionStyles={};this._setStyle(this._element,this._elementPositionStyles)}_updateScrollDirection(t){t>this._scrollTop?this._scrollDirection="down":this._scrollDirection="up"}_clearInProgressAnimations(){const t=this._scrollDirection==="up",e=this._element.classList.contains(this._options.stickyAnimationUnsticky),i=window.scrollY<=this._elementOffsetTop-this._element.height;t&&e&&i&&(this._removeUnstickyAnimation(),this._resetStyles(),this._removeHiddenElement())}_enableSticky(){const{stickyAnimationSticky:t,stickyAnimationUnsticky:e,stickyOffset:i,stickyPosition:n,stickyZIndex:o}=this._options,{height:r,left:a,width:l}=this._element.getBoundingClientRect();t!==""&&this._toggleClass(t,e,this._element),this._toggleClass(this._classes.stickyActive,"",this._element),this._setStyle(this._element,{top:n==="top"&&`${0+i}px`,bottom:n==="bottom"&&`${0+i}px`,height:`${r}px`,width:`${l}px`,left:`${a}px`,zIndex:`${o}`,position:"fixed"}),this._hiddenElement.hidden=!1,_.trigger(this._element,bS)}_changeBoundaryPosition(){const{stickyPosition:t,stickyBoundary:e,stickyOffset:i}=this._options,{height:n}=this._element.getBoundingClientRect(),o={height:this._element.parentElement.getBoundingClientRect().height,...this._getOffset(this._element.parentElement)};let r;const a=m.findOne(e);a?r=this._getOffset(a).top-n-i:r=o.height+o[t]-n-i;const l=t==="top",c=t==="bottom",h=e,d=r<0,u=r>o.height-n;let p;l&&(d&&h?p={top:`${i+r}px`}:p={top:`${i+0}px`}),c&&(d&&h?p={bottom:`${i+r}px`}:u&&h?p={bottom:`${i+o.bottom}px`}:p={bottom:`${i+0}px`}),this._setStyle(this._element,p)}_disableSticky(){const{stickyAnimationUnsticky:t,stickyAnimationSticky:e}=this._options;let{animationDuration:i}=getComputedStyle(this._element);i=t!==""?parseFloat(i)*1e3:0,this._options.stickyAnimationUnsticky!==""&&this._toggleClass(t,e,this._element),setTimeout(()=>{this._element.classList.contains(e)||(this._removeUnstickyAnimation(),this._resetStyles(),this._removeHiddenElement(),this._toggleClass("",this._classes.stickyActive,this._element),_.trigger(this._element,vS))},i)}_createHiddenElement(){this._hiddenElement||(this._hiddenElement=this._copyElement(this._element))}_removeHiddenElement(){this._hiddenElement&&(this._hiddenElement.remove(),this._hiddenElement=null)}_removeUnstickyAnimation(){this._toggleClass("",this._options.stickyAnimationUnsticky,this._element)}_resetStyles(){this._setStyle(this._element,{top:null,bottom:null,position:null,left:null,zIndex:null,width:null,height:null})}_updatePosition({styles:t}){this._setStyle(this._element,t)}_toggleClass(t,e,i){t&&g.addClass(i,t),e&&g.removeClass(i,e)}_getOffset(t){const e=g.offset(t),i=t.getBoundingClientRect(),n=e.left===0&&e.top===0?0:window.innerHeight-i.bottom;return{...e,bottom:n}}_copyElement(t){const{height:e,width:i}=t.getBoundingClientRect(),n=t.cloneNode(!1);return n.hidden=!0,this._setStyle(n,{height:`${e}px`,width:`${i}px`,opacity:"0"}),t.parentElement.insertBefore(n,t),n}_getConfig(t={}){const e=g.getDataAttributes(this._element);return t={...yS,...e,...t},L(Mr,t,TS),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...ES,...e,...t},L(Mr,t,xS),t}_setStyle(t,e){Object.keys(e).forEach(i=>{t.style[i]=e[i]})}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Cn);const n=typeof t=="object"&&t;if(!(!i&&/dispose|hide/.test(t))&&(i||(i=new Lr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Cn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const CS="data-te-autocomplete-dropdown-ref",AS="data-te-autocomplete-items-list-ref",wS="data-te-autocomplete-item-ref",kS="data-te-autocomplete-loader-ref";function SS(s,t){const{id:e,items:i,width:n,options:o}=s,r=$("div");g.addClass(r,t.dropdownContainer),g.addStyle(r,{width:`${n}px`}),r.setAttribute("id",e);const a=$("div");a.setAttribute(CS,""),g.addClass(a,t.dropdown);const l=$("ul"),c=o.listHeight;l.setAttribute(AS,""),g.addClass(l,t.autocompleteList),g.addClass(l,t.scrollbar),g.addStyle(l,{maxHeight:`${c}px`}),l.setAttribute("role","listbox");const h=of(i,o);return l.innerHTML=h,a.appendChild(l),r.appendChild(a),r}function of(s=[],t,e){const i=t.displayValue,n=t.itemContent;return`
+    ${s.map((o,r)=>{const a=typeof n=="function"?To(n(o),Pd,null):i(o);return`<li data-te-index="${r}" role="option" class="${e}" ${wS} >${a}</li>`}).join("")}
+  `}function OS(s){const t=$("div");t.setAttribute(kS,""),g.addClass(t,s.autocompleteLoader),g.addClass(t,s.spinnerIcon),t.setAttribute("role","status");const e='<span class="absolute -m-px h-px w-px overflow-hidden whitespace-nowrap border-0 p-0 [clip:rect(0,0,0,0)]">Loading...</span>';return t.innerHTML=e,t}function IS(s,t){return`<li class="${t.autocompleteItem}">${s}</li>`}const uc="autocomplete",An="te.autocomplete",xs="data-te-input-state-active",pc="data-te-autocomplete-item-active",rf="data-te-input-focused",af="data-te-autocomplete-state-open",DS="data-te-autocomplete-custom-content-ref",MS="[data-te-autocomplete-dropdown-ref]",$r="[data-te-autocomplete-items-list-ref]",lf="[data-te-autocomplete-item-ref]",LS="[data-te-autocomplete-loader-ref]",$S=`[${DS}]`,RS="[data-te-input-notch-ref]",Rr=`.${An}`,PS=`close${Rr}`,NS=`open${Rr}`,cf=`itemSelect${Rr}`,BS=`update${Rr}`,HS={autoSelect:!1,container:"body",customContent:"",debounce:300,displayValue:s=>s,filter:null,itemContent:null,listHeight:190,loaderCloseDelay:300,noResults:"No results found",threshold:0},VS={autoSelect:"boolean",container:"string",customContent:"string",debounce:"number",displayValue:"function",filter:"(null|function)",itemContent:"(null|function)",listHeight:"number",loaderCloseDelay:"number",noResults:"string",threshold:"number"},FS={autocompleteItem:"flex flex-row items-center justify-between w-full px-4 py-[0.4375rem] truncate text-gray-700 bg-transparent select-none cursor-pointer hover:[&:not([data-te-autocomplete-option-disabled])]:bg-black/5 data-[te-autocomplete-item-active]:bg-black/5 data-[data-te-autocomplete-option-disabled]:text-gray-400 data-[data-te-autocomplete-option-disabled]:cursor-default dark:text-gray-200 dark:hover:[&:not([data-te-autocomplete-option-disabled])]:bg-white/30 dark:data-[te-autocomplete-item-active]:bg-white/30",autocompleteList:"list-none m-0 p-0 overflow-y-auto",autocompleteLoader:"absolute right-1 top-2 w-[1.4rem] h-[1.4rem] border-[0.15em]",dropdown:"relative outline-none min-w-[100px] m-0 scale-y-[0.8] opacity-0 bg-white shadow-[0_2px_5px_0_rgba(0,0,0,0.16),_0_2px_10px_0_rgba(0,0,0,0.12)] transition duration-200 motion-reduce:transition-none data-[te-autocomplete-state-open]:scale-y-100 data-[te-autocomplete-state-open]:opacity-100 dark:bg-zinc-700",dropdownContainer:"z-[1070]",scrollbar:"[&::-webkit-scrollbar]:w-1 [&::-webkit-scrollbar]:h-1 [&::-webkit-scrollbar-button]:block [&::-webkit-scrollbar-button]:h-0 [&::-webkit-scrollbar-button]:bg-transparent [&::-webkit-scrollbar-track-piece]:bg-transparent [&::-webkit-scrollbar-track-piece]:rounded-none [&::-webkit-scrollbar-track-piece]: [&::-webkit-scrollbar-track-piece]:rounded-l [&::-webkit-scrollbar-thumb]:h-[50px] [&::-webkit-scrollbar-thumb]:bg-[#999] [&::-webkit-scrollbar-thumb]:rounded",spinnerIcon:"inline-block h-8 w-8 animate-spin rounded-full border-4 border-solid border-current border-r-transparent align-[-0.125em] motion-reduce:animate-[spin_1.5s_linear_infinite]"},WS={autocompleteItem:"string",autocompleteList:"string",autocompleteLoader:"string",dropdown:"string",dropdownContainer:"string",scrollbar:"string",spinnerIcon:"string"};class Pr{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._getContainer(),this._input=m.findOne("input",t),this._notch=m.findOne(RS,t),this._customContent=m.findOne($S,t),this._loader=OS(this._classes),this._popper=null,this._debounceTimeoutId=null,this._loaderTimeout=null,this._activeItemIndex=-1,this._activeItem=null,this._filteredResults=null,this._lastQueryValue=null,this._canOpenOnFocus=!0,this._isOpen=!1,this._outsideClickHandler=this._handleOutsideClick.bind(this),this._inputFocusHandler=this._handleInputFocus.bind(this),this._userInputHandler=this._handleUserInput.bind(this),this._keydownHandler=this._handleKeydown.bind(this),t&&O.setData(t,An,this),this._init()}static get NAME(){return uc}get filter(){return this._options.filter}get dropdown(){return m.findOne(MS,this._dropdownContainer)}get items(){return m.find(lf,this._dropdownContainer)}get itemsList(){return m.findOne($r,this._dropdownContainer)}initSearch(t){this._filterResults(t)}_getContainer(){this._container=m.findOne(this._options.container)}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...HS,...e,...t},L(uc,t,VS),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...FS,...e,...t},L(uc,t,WS),t}_init(){this._initDropdown(),this._updateInputState(),this._setInputAriaAttributes(),this._listenToInputFocus(),this._listenToUserInput(),this._listenToKeydown()}_initDropdown(){this._dropdownContainerId=this._element.id?`autocomplete-dropdown-${this._element.id}`:bt("autocomplete-dropdown-");const t={id:this._dropdownContainerId,items:[],width:this._input.offsetWidth,options:this._options};if(this._dropdownContainer=SS(t,this._classes),this._options.customContent!==""){const e=this._options.customContent,i=To(e,Pd,null);this.dropdown.insertAdjacentHTML("beforeend",i)}}_setInputAriaAttributes(){this._input.setAttribute("role","combobox"),this._input.setAttribute("aria-expanded",!1),this._input.setAttribute("aria-owns",this._dropdownContainerId),this._input.setAttribute("aria-haspopup",!0),this._input.setAttribute("autocomplete","off")}_updateInputState(){var t,e;this._input.value!==""||this._isOpen?(this._input.setAttribute(xs,""),(t=this._notch)==null||t.setAttribute(xs,"")):(this._input.removeAttribute(xs),(e=this._notch)==null||e.removeAttribute(xs))}_listenToInputFocus(){_.on(this._input,"focus",this._inputFocusHandler)}_handleInputFocus(t){const{value:e}=t.target,i=this._options.threshold;if(!this._canOpenOnFocus){this._canOpenOnFocus=!0;return}e.length<i||(this._lastQueryValue!==e?this._filterResults(e):this.open())}_listenToWindowResize(){_.on(window,"resize",this._handleWindowResize.bind(this))}_handleWindowResize(){this._dropdownContainer&&this._updateDropdownWidth()}_updateDropdownWidth(){const t=this._input.offsetWidth;g.addStyle(this._dropdownContainer,{width:`${t}px`})}_listenToUserInput(){_.on(this._input,"input",this._userInputHandler)}_handleUserInput(t){const{value:e}=t.target,i=this._options.threshold,n=this._options.debounce;if(this.filter){if(e.length<i){this._isOpen&&this.close();return}this._debounceFilter(e,n)}}_debounceFilter(t,e){this._debounceTimeoutId&&clearTimeout(this._debounceTimeoutId),this._debounceTimeoutId=setTimeout(()=>{this._filterResults(t)},e)}_filterResults(t){this._lastQueryValue=t;const e=this.filter(t);this._isPromise(e)?this._asyncUpdateResults(e):this._updateResults(e)}_isPromise(t){return!!t&&typeof t.then=="function"}_asyncUpdateResults(t){this._resetActiveItem(),this._showLoader(),t.then(e=>{this._updateResults(e),this._loaderTimeout=setTimeout(()=>{this._hideLoader(),this._loaderTimeout=null},this._options.loaderCloseDelay)})}_resetActiveItem(){const t=this._activeItem;t&&(t.removeAttribute(pc),this._activeItem=null,this._activeItemIndex=-1)}_showLoader(){this._element.appendChild(this._loader)}_hideLoader(){m.findOne(LS,this._element)&&this._element.removeChild(this._loader)}_updateResults(t){this._resetActiveItem(),this._filteredResults=t,_.trigger(this._element,BS,{results:t});const e=m.findOne($r,this._dropdownContainer),i=of(t,this._options,this._classes.autocompleteItem),n=IS(this._options.noResults,this._classes);t.length===0&&this._options.noResults!==""?e.innerHTML=n:e.innerHTML=i,this._isOpen||this.open(),this._popper&&this._popper.forceUpdate()}_listenToKeydown(){_.on(this._element,"keydown",this._keydownHandler)}_handleKeydown(t){this._isOpen?this._handleOpenKeydown(t):this._handleClosedKeydown(t)}_handleOpenKeydown(t){const e=t.keyCode;if(e===Ci&&this._options.autoSelect&&this._selectActiveItem(),e===xi||e===ut&&t.altKey){this.close(),this._input.focus();return}if(e===xi||e===ut&&t.altKey||e===Ci){this.close(),this._input.focus();return}switch(e){case ht:this._setActiveItem(this._activeItemIndex+1),this._scrollToItem(this._activeItem);break;case ut:this._setActiveItem(this._activeItemIndex-1),this._scrollToItem(this._activeItem);break;case Ti:this._activeItemIndex>-1?(this._setActiveItem(0),this._scrollToItem(this._activeItem)):this._input.setSelectionRange(0,0);break;case Ei:if(this._activeItemIndex>-1)this._setActiveItem(this.items.length-1),this._scrollToItem(this._activeItem);else{const n=this._input.value.length;this._input.setSelectionRange(n,n)}break;case Et:if(t.preventDefault(),this._activeItemIndex>-1){const n=this._filteredResults[this._activeItemIndex];this._handleSelection(n)}return;default:return}t.preventDefault()}_setActiveItem(t){const e=this.items;e[t]&&this._updateActiveItem(e[t],t)}_updateActiveItem(t,e){const i=this._activeItem;i&&i.removeAttribute(pc),t.setAttribute(pc,""),this._activeItemIndex=e,this._activeItem=t}_scrollToItem(t){if(!t)return;const e=this.itemsList,i=e.offsetHeight,n=this.items.indexOf(t),o=t.offsetHeight,r=e.scrollTop;if(n>-1){const a=n*o,l=a+o>r+i;a<r?e.scrollTop=a:l?e.scrollTop=a-i+o:e.scrollTop=r}}_handleClosedKeydown(t){t.key==="Enter"&&t.preventDefault();const e=t.keyCode;(e===Et||e===ht||e===ht)&&this.open()}open(){this._lastQueryValue===null&&this._filterResults("");const t=_.trigger(this._element,NS);this._isOpen||t.defaultPrevented||(this._updateDropdownWidth(),this._listenToWindowResize(),this._popper=Fe(this._element,this._dropdownContainer,{modifiers:[{name:"offset",options:{offset:[0,1]}}]}),this._container.appendChild(this._dropdownContainer),this._listenToOutsideClick(),this._listenToItemsClick(),setTimeout(()=>{this.dropdown.setAttribute(af,""),this._isOpen=!0,this._setInputActiveStyles(),this._updateInputState()},0))}_listenToOutsideClick(){_.on(document,"click",this._outsideClickHandler)}_handleOutsideClick(t){const e=this._input===t.target,i=t.target===this._dropdownContainer,n=this._dropdownContainer&&this._dropdownContainer.contains(t.target);!e&&!i&&!n&&this.close()}_listenToItemsClick(){const t=m.findOne($r,this._dropdownContainer);_.on(t,"click",this._handleItemsClick.bind(this))}_handleItemsClick(t){const e=m.closest(t.target,lf),i=g.getDataAttribute(e,"index"),n=this._filteredResults[i];this._handleSelection(n)}_selectActiveItem(){const t=this._filteredResults[this._activeItemIndex];if(!t)return;const e=this._options.displayValue(t);_.trigger(this._element,cf,{value:t}).defaultPrevented||setTimeout(()=>{this._canOpenOnFocus=!1,this._updateInputValue(e),this._updateInputState()},0)}_handleSelection(t){const e=this._options.displayValue(t),i=_.trigger(this._element,cf,{value:t});t!==void 0&&(i.defaultPrevented||setTimeout(()=>{this._canOpenOnFocus=!1,this._updateInputValue(e),this._updateInputState(),this._input.focus(),this.close()},0))}_updateInputValue(t){this._input.value=t}_setInputActiveStyles(){this._input.setAttribute(rf,"")}close(){var e;const t=_.trigger(this._element,PS);!this._isOpen||t.defaultPrevented||(this._resetActiveItem(),this._removeDropdownEvents(),this.dropdown.removeAttribute(af),_.on(this.dropdown,"transitionend",this._handleDropdownTransitionEnd.bind(this)),this._input.removeAttribute(rf),this._input.value||(this._input.removeAttribute(xs),(e=this._notch)==null||e.removeAttribute(xs)))}_removeDropdownEvents(){const t=m.findOne($r,this._dropdownContainer);_.off(t,"click"),_.off(document,"click",this._outsideClickHandler),_.off(window,"resize",this._handleWindowResize.bind(this))}_handleDropdownTransitionEnd(t){this._isOpen&&t&&t.propertyName==="opacity"&&(this._popper.destroy(),this._dropdownContainer&&this._container.removeChild(this._dropdownContainer),this._isOpen=!1,_.off(this.dropdown,"transitionend"),this._canOpenOnFocus=!0)}dispose(){this._isOpen&&this.close(),this._removeInputAndElementEvents(),this._dropdownContainer.remove(),O.removeData(this._element,An)}_removeInputAndElementEvents(){_.off(this._input,"focus",this._inputFocusHandler),_.off(this._input,"input",this._userInputHandler),_.off(this._element,"keydown",this._keydownHandler)}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,An);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Pr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,An)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zS=(s,t)=>`<div class="${s.connectContainer}" ${t}>
+  <div class="${s.connect}"></div>
+  </div>`,jS=(s,t)=>`<div class="${s.hand}" ${t}>
+    <span></span>
+  </div>`,YS=(s,t)=>`
+    <span class="${s.tooltip}" ${t}>
+      <span class="${s.tooltipValue}"></span>
+    </span>
+    `,Si=s=>s.type==="touchmove"?s.touches[0].clientX:s.clientX,Nr="multiRangeSlider",Br=`te.${Nr}`,hf=`valueChanged${`.${Br}`}`,Oi="data-te-active",df="data-te-multi-range-slider-hand-ref",uf="data-te-multi-range-slider-connect-ref",pf="data-te-multi-range-slider-tooltip-ref",KS={max:"number",min:"number",numberOfRanges:"number",startValues:"(array|string)",step:"(string|null|number)",tooltip:"boolean"},US={max:100,min:0,numberOfRanges:2,startValues:[0,100],step:null,tooltip:!1},XS={connect:"z-10 h-full w-full bg-[#eee] will-change-transform dark:bg-[#4f4f4f]",connectContainer:"relative border-[1px] border-[#eee] z-0 h-full w-full overflow-hidden dark:border-[#4f4f4f]",container:"apperance-none relative m-auto w-full cursor-pointer h-1 border-0 bg-transparent p-0 focus:outline-none dark:border-[#4f4f4f]",hand:"apperance-none absolute top-[50%] border-0 -mt-1 h-4 w-4 cursor-pointer rounded-[50%] border-0 bg-primary transition-colors ease-in-out will-change-transform active:bg-[#c4d4ef] active:z-60",tooltip:"absolute -top-[18px] origin-[50%_50%] -translate-x-[6px] -rotate-45 scale-0 rounded-bl-none rounded-br-2xl rounded-tl-2xl rounded-tr-2xl bg-primary text-white transition-all duration-[200ms] data-[te-active]:-top-[38px] data-[te-active]:scale-100",tooltipValue:"block h-[30px] w-[30px] -translate-x-[6px] translate-y-[6px] rotate-45 text-center text-[10px]"},GS={container:"string",connectContainer:"string",connect:"string",hand:"string",tooltip:"string",tooltipValue:"string"};class Hr extends Mt{constructor(t,e,i){super(t),this._options=this._getConfig(e),this._mousemove=!1,this._classes=this._getClasses(i),this._maxTranslation=null,this._minTranslation=null,this._currentStepValue=null,this._canChangeStep=!1,this.init()}static get NAME(){return Nr}get hands(){return m.find(`[${df}]`,this._element)}get connect(){return m.findOne(`[${uf}]`,this._element)}get leftConnectRect(){return this.connect.getBoundingClientRect().left}get handActive(){return m.findOne(`[${Oi}]`)}get activeTooltipValue(){return m.find(`[${pf}]`).filter(n=>n.hasAttribute(Oi))[0].children[0]}init(){this._setContainerClasses(),this._setRangeConnectsElement(),this._setRangeHandleElements(),this._setMaxAndMinTranslation(),this._setTransofrmationOnStart(),this._handleClickEventOnHand(),this._handleEndMoveEventDocument(),this._handleClickOnRange(),this._setTooltipToHand()}dispose(){O.removeData(this._element,Br),this._options=null,this._mousemove=null,this._maxTranslation=null,this._minTranslation=null,this._currentStepValue=null,this._canChangeStep=null,this.hands.forEach(t=>{ct.off(t,"mousedown touchstart"),ct.off(t,"mouseup touchend")}),ct.off(document,"mousemove touchmove"),ct.off(document,"mouseup touchend"),ct.off(this.connect,"mousedown touchstart")}_setMaxAndMinTranslation(){this._maxTranslation=this.connect.offsetWidth-this.hands[0].offsetWidth/2,this._minTranslation=this.connect.offsetLeft-this.hands[0].offsetWidth/2}_setTransofrmationOnStart(){const{max:t,min:e}=this._options;let{startValues:i}=this._options;typeof i=="string"&&(i=JSON.parse(i.replace(/'/g,'"'))),i.length===0?this.hands.forEach(n=>{g.setDataAttribute(n,"translation",Math.round(this._minTranslation)),g.addStyle(n,{transform:`translate(${this._minTranslation}px,-25%)`})}):this.hands.forEach((n,o)=>{if(i[o]>t||i[o]<e)return;if(i[o]===void 0){g.setDataAttribute(n,"translation",Math.round(this._maxTranslation)),g.addStyle(n,{transform:`translate(${this._maxTranslation}px,-25%)`,zIndex:this.hands.length-o});return}const a=(i[o]-e)/(t-e)*this.connect.offsetWidth-n.offsetWidth/2;g.setDataAttribute(n,"translation",Math.round(a)),g.addStyle(n,{transform:`translate(${a}px,-25%)`,zIndex:this.hands.length-o})})}_handleOutOfMaxRangeValue(t,e){this._updateHand(t,this._maxTranslation),this._options.tooltip&&(this.activeTooltipValue.innerText=e)}_handleOutOfMinRangeValue(t,e){this._updateHand(t,this._minTranslation),this._options.tooltip&&(this.activeTooltipValue.innerText=e)}_handleNormalMove(t,e,i){this._updateHand(t,e),this._options.tooltip&&(this.activeTooltipValue.innerText=Math.round(i))}_handleClickEventOnHand(){const{max:t,min:e,step:i}=this._options;this.hands.forEach(n=>{ct.on(n,"mousedown touchstart",o=>{if(this._mousemove=!0,n.setAttribute(Oi,""),this._options.tooltip&&n.children[1].setAttribute(Oi,""),this._handleMoveEvent(n),this._handleEndMoveEvent(n,o),!this._canChangeStep&&i!==null)return;const r=Si(o)-this.leftConnectRect-n.offsetWidth/2,a=(Si(o)-this.leftConnectRect)/(this.connect.offsetWidth/(t-e))%(t-e);r>=this._maxTranslation?this._handleOutOfMaxRangeValue(n,t):r<=this._minTranslation?this._handleOutOfMinRangeValue(n,e):this._handleNormalMove(n,r,a)})})}_setContainerClasses(){g.addClass(this._element,this._classes.container)}_setRangeConnectsElement(){this._element.insertAdjacentHTML("afterbegin",zS({connectContainer:this._classes.connectContainer,connect:this._classes.connect},uf))}_setRangeHandleElements(){for(let t=0;t<this._options.numberOfRanges;t++)this._element.insertAdjacentHTML("beforeend",jS({hand:this._classes.hand},df));this.hands.forEach((t,e)=>{t.setAttribute("aria-orientation","horizontal"),t.setAttribute("role","slider"),g.setDataAttribute(t,"handle",e)})}_setTooltipToHand(){this._options.tooltip&&this.hands.forEach(t=>t.insertAdjacentHTML("beforeend",YS({tooltip:this._classes.tooltip,tooltipValue:this._classes.tooltipValue},pf)))}_handleMoveEvent(t){const{tooltip:e,step:i}=this._options;ct.on(document,"mousemove touchmove",n=>{n.type==="mousemove"&&n.preventDefault();const{max:o,min:r,numberOfRanges:a}=this._options;if(t.hasAttribute(Oi)){const l=(Si(n)-this.leftConnectRect)/this.connect.offsetWidth*o;let c=(Si(n)-this.leftConnectRect)/(this.connect.offsetWidth/(o-r))%(o-r)+r;if((this._currentStepValue===Math.round(c)||Math.round(c)%i!==0)&&i!==null){this._canChangeStep=!1;return}this._canChangeStep=!0;let h=Si(n)-this.leftConnectRect-t.offsetWidth/2;const d=g.getDataAttribute(this.handActive,"handle"),u=g.getDataAttribute(this.handActive,"translation");if(c<r)h=r-t.offsetWidth/2,c=r;else if(l>=o)return;const p=this.hands.map(f=>g.getDataAttribute(f,"translation"));if(a<2)Math.round(c)%i===0&&i!==null?(this._currentStepValue=Math.round(c),g.addStyle(t,{transform:`translate(${h}px,-25%)`}),e&&(this.activeTooltipValue.innerText=Math.round(c))):i===null&&(g.addStyle(t,{transform:`translate(${h}px,-25%)`}),e&&(this.activeTooltipValue.innerText=Math.round(c))),g.setDataAttribute(t,"translation",h);else{const f=d>0&&d<a-1;let b=h,v=!1;const y=p[d+1],T=p[d-1];d===0&&u>=y?(b=y,v=h<=b):d===a-1&&u<=T?(b=T,v=h>=b):f&&(u>=y||u<=T)&&(b=u>=y?y:T,v=b===y?h<=b:h>=b),Math.round(c)%i===0&&i!==null?(this._currentStepValue=Math.round(c),g.addStyle(t,{transform:`translate(${b}px,-25%)`}),e&&b===h&&this.activeTooltipValue!==null&&(this.activeTooltipValue.innerText=Math.round(c))):i===null&&(g.addStyle(t,{transform:`translate(${b}px,-25%)`}),e&&b===h&&this.activeTooltipValue!==null&&(this.activeTooltipValue.innerText=Math.round(c))),g.setDataAttribute(t,"translation",v?h:b)}this._canChangeStep&&this._handleEventChangeValuesOnRange()}})}_handleEventChangeValuesOnRange(){const{max:t,min:e,numberOfRanges:i}=this._options,n=r=>{const a=r.getBoundingClientRect().left-this.leftConnectRect+r.offsetWidth/2;let l=a/(this.connect.offsetWidth/(t-e))%(t-e);return a===this.connect.offsetWidth?l=t:l+=e,g.setDataAttribute(r,"value",Math.round(l*10)/10),{value:l}};if(i<2){const{value:r}=n(this.hands[0]);_.trigger(this._element,hf,{values:{value:r+e,rounded:Math.round(r+e)}});return}const o=this.hands.map(r=>n(r));_.trigger(this._element,hf,{values:{value:o.map(({value:r})=>r+e),rounded:o.map(({value:r})=>Math.round(r+e))}})}_resetHandState(t,e){_.off(t,e),t.removeAttribute(Oi),this._options.tooltip&&t.children[1].removeAttribute(Oi)}_handleEndMoveEventDocument(){ct.on(document,"mouseup touchend",()=>{this._mousemove&&(this.hands.forEach(t=>{this._resetHandState(t,"mousemove")}),ct.off(document,"mousemove touchmove"),this._mousemove=!1)})}_handleEndMoveEvent(t){ct.on(t,"mouseup touchend",()=>{this._resetHandState(t,"mousemove"),ct.off(document,"mousemove touchmove"),this._mousemove=!1})}_handleClickOnRange(){this._options.step===null&&ct.on(this.connect,"mousedown touchstart",t=>{const e=[];let i=0;if(this.hands.forEach(n=>{this._mousemove=!0;const o=Si(t),r=n.offsetWidth,a=g.getDataAttribute(n,"translation"),l=o-this.leftConnectRect-r/2;this._options.numberOfRanges<2?this._updateHand(n,l):(e.push(Math.abs(l-a)),e.forEach((c,h)=>{c<e[i]&&(i=h)}))}),this._options.numberOfRanges>=2){const n=Si(t)-this.leftConnectRect-this.hands[i].offsetWidth/2;this._updateAdjacentHands(i,n)}this._handleEventChangeValuesOnRange()})}_updateHand(t,e){g.addStyle(t,{transform:`translate(${e}px,-25%)`}),g.setDataAttribute(t,"translation",e)}_updateAdjacentHands(t,e){const i=this.hands[t+1],n=this.hands[t-1],o=i?g.getDataAttribute(i,"translation"):void 0,r=n?g.getDataAttribute(n,"translation"):void 0;i&&e>o?this._updateHand(i,e):n&&e<r?this._updateHand(n,e):this._updateHand(this.hands[t],e)}_getConfig(t){const e={...US,...g.getDataAttributes(this._element),...t};return L(Nr,e,KS),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...XS,...e,...t},L(Nr,t,GS),t}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Br);const n=typeof t=="object"&&t;if(!(!i&&/dispose|hide/.test(t))&&(i||(i=new Hr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Br)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const qS=s=>{ph(()=>{const t=uh();if(t){const e=s.NAME,i=t.fn[e];t.fn[e]=s.jQueryInterface,t.fn[e].Constructor=s,t.fn[e].noConflict=()=>(t.fn[e]=i,s.jQueryInterface)}})},ZS=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,function(e){e.preventDefault(),s.getOrCreateInstance(this).toggle()})},QS=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){if(["A","AREA"].includes(this.tagName)&&e.preventDefault(),ci(this))return;s.getOrCreateInstance(this).show()})},JS=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){const i=Ne(this);if(["A","AREA"].includes(this.tagName)&&e.preventDefault(),ci(this))return;_.one(i,s.EVENT_HIDDEN,()=>{ae(this)&&this.focus()});const n=m.findOne(s.OPEN_SELECTOR);n&&n!==i&&s.getInstance(n).hide(),s.getOrCreateInstance(i).toggle(this)})},tO=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,e=>{e.preventDefault();const i=e.target.closest(t);s.getOrCreateInstance(i).toggle()})},eO=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,function(e){const i=Ne(this);["A","AREA"].includes(this.tagName)&&e.preventDefault(),_.one(i,s.EVENT_SHOW,r=>{r.defaultPrevented||_.one(i,s.EVENT_HIDDEN,()=>{ae(this)&&this.focus()})});const n=m.findOne(`[${s.OPEN_SELECTOR}="true"]`);n&&s.getInstance(n).hide(),s.getOrCreateInstance(i).toggle(this)})},iO=(s,t)=>{_.one(document,"mousedown",t,s.autoInitial(new s))},sO=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){(e.target.tagName==="A"||e.delegateTarget&&e.delegateTarget.tagName==="A")&&e.preventDefault();const i=Ca(this);m.find(i).forEach(o=>{s.getOrCreateInstance(o,{toggle:!1}).toggle()})})},nO=(s,t)=>{[].slice.call(document.querySelectorAll(t)).map(function(i){return new s(i)})},oO=(s,t)=>{[].slice.call(document.querySelectorAll(t)).map(function(i){return new s(i)})},rO=(s,t)=>{m.find(t).forEach(e=>{new s(e)}),_.on(document,`click.te.${s.NAME}.data-api`,`${t} img:not([data-te-lightbox-disabled])`,s.toggle())},aO=(s,t)=>{const e=o=>o[0]==="{"&&o[o.length-1]==="}"||o[0]==="["&&o[o.length-1]==="]",i=o=>typeof o!="string"?o:e(o)?JSON.parse(o.replace(/'/g,'"')):o,n=o=>{const r={};return Object.keys(o).forEach(a=>{if(a.match(/dataset.*/)){const l=a.slice(7,8).toLowerCase().concat(a.slice(8));r[l]=i(o[a])}}),r};m.find(t).forEach(o=>{if(g.getDataAttribute(o,"chart")!=="bubble"&&g.getDataAttribute(o,"chart")!=="scatter"){const r=g.getDataAttributes(o),a={data:{datasets:[n(r)]}};return r.chart&&(a.type=r.chart),r.labels&&(a.data.labels=JSON.parse(r.labels.replace(/'/g,'"'))),new s(o,{...a,...ln[a.type]})}return null})};class lO{constructor(){this.inits=[]}get initialized(){return this.inits}isInited(t){return this.inits.includes(t)}add(t){this.isInited(t)||this.inits.push(t)}}const fc=new lO,wn={alert:{name:"Alert",selector:"[data-te-alert-init]",isToggler:!1},animation:{name:"Animate",selector:"[data-te-animation-init]",isToggler:!1},carousel:{name:"Carousel",selector:"[data-te-carousel-init]",isToggler:!1},chips:{name:"ChipsInput",selector:"[data-te-chips-input-init]",isToggler:!1},chip:{name:"Chip",selector:"[data-te-chip-init]",isToggler:!1,onInit:"init"},datepicker:{name:"Datepicker",selector:"[data-te-datepicker-init]",isToggler:!1},datetimepicker:{name:"Datetimepicker",selector:"[data-te-date-timepicker-init]",isToggler:!1},input:{name:"Input",selector:"[data-te-input-wrapper-init]",isToggler:!1},perfectScrollbar:{name:"PerfectScrollbar",selector:"[data-te-perfect-scrollbar-init]",isToggler:!1},rating:{name:"Rating",selector:"[data-te-rating-init]",isToggler:!1},scrollspy:{name:"ScrollSpy",selector:"[data-te-spy='scroll']",isToggler:!1},select:{name:"Select",selector:"[data-te-select-init]",isToggler:!1},sidenav:{name:"Sidenav",selector:"[data-te-sidenav-init]",isToggler:!1},stepper:{name:"Stepper",selector:"[data-te-stepper-init]",isToggler:!1},timepicker:{name:"Timepicker",selector:"[data-te-timepicker-init]",isToggler:!1},toast:{name:"Toast",selector:"[data-te-toast-init]",isToggler:!1},datatable:{name:"Datatable",selector:"[data-te-datatable-init]"},popconfirm:{name:"Popconfirm",selector:"[data-te-toggle='popconfirm']"},validation:{name:"Validation",selector:"[data-te-validation-init]"},smoothScroll:{name:"SmoothScroll",selector:"a[data-te-smooth-scroll-init]"},lazyLoad:{name:"LazyLoad",selector:"[data-te-lazy-load-init]"},clipboard:{name:"Clipboard",selector:"[data-te-clipboard-init]"},infiniteScroll:{name:"InfiniteScroll",selector:"[data-te-infinite-scroll-init]"},loadingManagement:{name:"LoadingManagement",selector:"[data-te-loading-management-init]"},sticky:{name:"Sticky",selector:"[data-te-sticky-init]"},multiRangeSlider:{name:"MultiRangeSlider",selector:"[data-te-multi-range-slider-init]"},chart:{name:"Chart",selector:"[data-te-chart]",isToggler:!1,advanced:aO},button:{name:"Button",selector:"[data-te-toggle='button']",isToggler:!0,callback:tO},collapse:{name:"Collapse",selector:"[data-te-collapse-init]",isToggler:!0,callback:sO},dropdown:{name:"Dropdown",selector:"[data-te-dropdown-toggle-ref]",isToggler:!0,callback:ZS},modal:{name:"Modal",selector:"[data-te-toggle='modal']",isToggler:!0,callback:eO},ripple:{name:"Ripple",selector:"[data-te-ripple-init]",isToggler:!0,callback:iO},offcanvas:{name:"Offcanvas",selector:"[data-te-offcanvas-toggle]",isToggler:!0,callback:JS},tab:{name:"Tab",selector:"[data-te-toggle='tab'], [data-te-toggle='pill'], [data-te-toggle='list']",isToggler:!0,callback:QS},tooltip:{name:"Tooltip",selector:"[data-te-toggle='tooltip']",isToggler:!1,callback:nO},popover:{name:"Popover",selector:"[data-te-toggle='popover']",isToggler:!0,callback:oO},lightbox:{name:"Lightbox",selector:"[data-te-lightbox-init]",isToggler:!0,callback:rO},touch:{name:"Touch",selector:"[data-te-touch-init]"}},cO=s=>wn[s.NAME]||null,hO=(s,t)=>{if(!s||!t.allowReinits&&fc.isInited(s.NAME))return;fc.add(s.NAME);const e=cO(s),i=(e==null?void 0:e.isToggler)||!1;if(qS(s),e!=null&&e.advanced){e==null||e.advanced(s,e==null?void 0:e.selector);return}if(i){e==null||e.callback(s,e==null?void 0:e.selector);return}m.find(e==null?void 0:e.selector).forEach(n=>{let o=s.getInstance(n);o||(o=new s(n),e!=null&&e.onInit&&o[e.onInit]())})},dO=(s,t)=>{s.forEach(e=>hO(e,t))},uO={allowReinits:!1,checkOtherImports:!1},ff=(s,t={})=>{t={...uO,...t};const e=Object.keys(wn).map(i=>{if(!!document.querySelector(wn[i].selector)){const o=s[wn[i].name];return!o&&!fc.isInited(i)&&t.checkOtherImports&&console.warn(`Please import ${wn[i].name} from "tw-elements" package and add it to a object parameter inside "initTE" function`),o}});dO(e,t)},_f="sidenav",Vr="te.sidenav",pO="data-te-sidenav-rotate-icon-ref",_c="[data-te-sidenav-toggle-ref]",fO="[data-te-collapse-init]",_O='[data-te-sidenav-slim="true"]',gO='[data-te-sidenav-slim="false"]',mO="[data-te-sidenav-menu-ref]",Cs="[data-te-sidenav-collapse-ref]",kn="[data-te-sidenav-link-ref]",bO=et()?100:-100,vO=et()?-100:100,yO={sidenavAccordion:"(boolean)",sidenavBackdrop:"(boolean)",sidenavBackdropClass:"(null|string)",sidenavCloseOnEsc:"(boolean)",sidenavColor:"(string)",sidenavContent:"(null|string)",sidenavExpandable:"(boolean)",sidenavExpandOnHover:"(boolean)",sidenavFocusTrap:"(boolean)",sidenavHidden:"(boolean)",sidenavMode:"(string)",sidenavModeBreakpointOver:"(null|string|number)",sidenavModeBreakpointSide:"(null|string|number)",sidenavModeBreakpointPush:"(null|string|number)",sidenavBreakpointSm:"(number)",sidenavBreakpointMd:"(number)",sidenavBreakpointLg:"(number)",sidenavBreakpointXl:"(number)",sidenavBreakpoint2xl:"(number)",sidenavScrollContainer:"(null|string)",sidenavSlim:"(boolean)",sidenavSlimCollapsed:"(boolean)",sidenavSlimWidth:"(number)",sidenavPosition:"(string)",sidenavRight:"(boolean)",sidenavTransitionDuration:"(number)",sidenavWidth:"(number)"},TO={sidenavAccordion:!1,sidenavBackdrop:!0,sidenavBackdropClass:null,sidenavCloseOnEsc:!0,sidenavColor:"primary",sidenavContent:null,sidenavExpandable:!0,sidenavExpandOnHover:!1,sidenavFocusTrap:!0,sidenavHidden:!0,sidenavMode:"over",sidenavModeBreakpointOver:null,sidenavModeBreakpointSide:null,sidenavModeBreakpointPush:null,sidenavBreakpointSm:640,sidenavBreakpointMd:768,sidenavBreakpointLg:1024,sidenavBreakpointXl:1280,sidenavBreakpoint2xl:1536,sidenavScrollContainer:null,sidenavSlim:!1,sidenavSlimCollapsed:!1,sidenavSlimWidth:77,sidenavPosition:"fixed",sidenavRight:!1,sidenavTransitionDuration:300,sidenavWidth:240};class Ii{constructor(t,e={}){ke(this,"_addBackdropOnInit",()=>{this._options.sidenavHidden||(this._backdrop.show(),_.off(this._element,"transitionend",this._addBackdropOnInit))});this._element=t,this._options=e,this._ID=bt(""),this._content=null,this._initialContentStyle=null,this._slimCollapsed=!1,this._activeNode=null,this._tempSlim=!1,this._backdrop=this._initializeBackDrop(),this._focusTrap=null,this._perfectScrollbar=null,this._touch=null,this._setModeFromBreakpoints(),this.escHandler=i=>{i.keyCode===xi&&this.toggler&&ae(this.toggler)&&(this._update(!1),_.off(window,"keydown",this.escHandler))},this.hashHandler=()=>{this._setActiveElements()},t&&(O.setData(t,Vr,this),this._setup()),this.options.sidenavBackdrop&&!this.options.sidenavHidden&&this.options.sidenavMode==="over"&&_.on(this._element,"transitionend",this._addBackdropOnInit),this._didInit=!1,this._init()}static get NAME(){return _f}get container(){if(this.options.sidenavPosition==="fixed")return m.findOne("body");const t=e=>!e.parentNode||e.parentNode===document?e:e.parentNode.style.position==="relative"||e.parentNode.classList.contains("relative")?e.parentNode:t(e.parentNode);return t(this._element)}get isVisible(){let t=0,e=window.innerWidth;if(this.options.sidenavPosition!=="fixed"){const n=this.container.getBoundingClientRect();t=n.x,e=n.x+n.width}const{x:i}=this._element.getBoundingClientRect();if(this.options.sidenavRight&&!et()||!this.options.sidenavRight&&et()){let n=0;if(this.container.scrollHeight>this.container.clientHeight&&(n=this.container.offsetWidth-this.container.clientWidth),this.container.tagName==="BODY"){const o=document.documentElement.clientWidth;n=Math.abs(window.innerWidth-o)}return Math.abs(i+n-e)>10}return Math.abs(i-t)<10}get links(){return m.find(kn,this._element)}get navigation(){return m.find(mO,this._element)}get options(){const t={...TO,...g.getDataAttributes(this._element),...this._options};return L(_f,t,yO),t}get sidenavStyle(){return{width:`${this.width}px`,height:this.options.sidenavPosition==="fixed"?"100vh":"100%",position:this.options.sidenavPosition,transition:`all ${this.transitionDuration} linear`}}get toggler(){return m.find(_c).find(e=>{const i=g.getDataAttribute(e,"target");return m.findOne(i)===this._element})}get transitionDuration(){return`${this.options.sidenavTransitionDuration/1e3}s`}get translation(){return this.options.sidenavRight?vO:bO}get width(){return this._slimCollapsed?this.options.sidenavSlimWidth:this.options.sidenavWidth}get isBackdropVisible(){return!!this._backdrop._element}changeMode(t){this._setMode(t)}dispose(){_.off(window,"keydown",this.escHandler),this.options.sidenavBackdrop&&this._backdrop.dispose(),_.off(window,"hashchange",this.hashHandler),this._touch.dispose(),O.removeData(this._element,Vr),this._element=null}hide(){this._emitEvents(!1),this._update(!1),this._options.sidenavBackdrop&&this.isBackdropVisible&&this._backdrop.hide()}show(){this._emitEvents(!0),this._update(!0),this._options.sidenavBackdrop&&this._options.sidenavMode==="over"&&this._backdrop.show()}toggle(){this._emitEvents(!this.isVisible),this._update(!this.isVisible)}toggleSlim(){this._setSlim(!this._slimCollapsed)}update(t){this._options=t,this._setup()}getBreakpoint(t){return this._transformBreakpointValuesToObject()[t]}_init(){this._didInit||(_.on(document,"click",_c,Ii.toggleSidenav()),this._didInit=!0)}_transformBreakpointValuesToObject(){return{sm:this.options.sidenavBreakpointSm,md:this.options.sidenavBreakpointMd,lg:this.options.sidenavBreakpointLg,xl:this.options.sidenavBreakpointXl,"2xl":this.options.sidenavBreakpoint2xl}}_setModeFromBreakpoints(){const t=window.innerWidth,e=this._transformBreakpointValuesToObject();if(t===void 0||!e)return;const i=typeof this.options.sidenavModeBreakpointOver=="number"?t-this.options.sidenavModeBreakpointOver:t-e[this.options.sidenavModeBreakpointOver],n=typeof this.options.sidenavModeBreakpointSide=="number"?t-this.options.sidenavModeBreakpointSide:t-e[this.options.sidenavModeBreakpointSide],o=typeof this.options.sidenavModeBreakpointPush=="number"?t-this.options.sidenavModeBreakpointPush:t-e[this.options.sidenavModeBreakpointPush],r=(l,c)=>l-c<0?-1:c-l<0?1:0,a=[i,n,o].filter(l=>l!=null&&l>=0).sort(r)[0];i>0&&i===a?(this._options.sidenavMode="over",this._options.sidenavHidden=!0):n>0&&n===a?this._options.sidenavMode="side":o>0&&o===a&&(this._options.sidenavMode="push")}_collapseItems(){this.navigation.forEach(t=>{m.find(Cs,t).forEach(i=>{ce.getInstance(i).hide()})})}_getOffsetValue(t,{index:e,property:i,offsets:n}){const o=this._getPxValue(this._initialContentStyle[e][n[i].property]),r=t?n[i].value:0;return o+r}_getProperty(...t){return t.map((e,i)=>i===0?e:e[0].toUpperCase().concat(e.slice(1))).join("")}_getPxValue(t){return t?parseFloat(t):0}_handleSwipe(t,e){e&&this._slimCollapsed&&this.options.sidenavSlim&&this.options.sidenavExpandable?this.toggleSlim():e||(this._slimCollapsed||!this.options.sidenavSlim||!this.options.sidenavExpandable?this.toggler&&ae(this.toggler)&&this.toggle():this.toggleSlim())}_isActive(t,e){return e?e===t:t.attributes.href?new URL(t,window.location.href).href===window.location.href:!1}_isAllToBeCollapsed(){return m.find(fO,this._element).filter(i=>i.getAttribute("aria-expanded")==="true").length===0}_isAllCollapsed(){return m.find(Cs,this._element).filter(t=>ae(t)).length===0}_initializeBackDrop(){if(!this.options.sidenavBackdrop)return;const t=this.options.sidenavBackdropClass?this.options.sidenavBackdropClass.split(" "):this.options.sidenavPosition?["opacity-50","transition-all","duration-300","ease-in-out",this.options.sidenavPosition,"top-0","left-0","z-50","bg-black/10","dark:bg-black-60","w-full","h-full",this._element.id]:null;return new Qa({isVisible:this.options.sidenavBackdrop,isAnimated:!0,rootElement:this._element.parentNode,backdropClasses:t,clickCallback:()=>this.hide()})}_updateBackdrop(t){if(this.options.sidenavMode==="over"){t?this._backdrop.show():this.isBackdropVisible&&this._backdrop.hide();return}this.isBackdropVisible&&this._backdrop.hide()}_setup(){this._setupTouch(),this.options.sidenavFocusTrap&&this._setupFocusTrap(),this._setupCollapse(),this.options.sidenavSlim&&this._setupSlim(),this._setupInitialStyling(),this._setupScrolling(),this.options.sidenavContent&&this._setupContent(),this._setupActiveState(),this._setupRippleEffect(),this.options.sidenavHidden||this._updateOffsets(!0,!0),this.options.sidenavMode==="over"&&this._setTabindex(!0)}_setupActiveState(){this._setActiveElements(),this.links.forEach(t=>{_.on(t,"click",()=>this._setActiveElements(t)),_.on(t,"keydown",e=>{e.keyCode===Et&&this._setActiveElements(t)})}),_.on(window,"hashchange",this.hashHandler)}_setupCollapse(){this.navigation.forEach((t,e)=>{m.find(Cs,t).forEach((n,o)=>this._setupCollapseList({list:n,index:o,menu:t,menuIndex:e}))})}_generateCollpaseID(t,e){return`sidenav-collapse-${this._ID}-${e}-${t}`}_setupCollapseList({list:t,index:e,menu:i,menuIndex:n}){const o=this._generateCollpaseID(e,n);t.setAttribute("id",o),t.setAttribute("data-te-collapse-item","");const[r]=m.prev(t,kn);g.setDataAttribute(r,"collapse-init",""),r.setAttribute("href",`#${o}`),r.setAttribute("role","button");const a=ce.getInstance(t)||new ce(t,{toggle:!1,parent:this.options.sidenavAccordion?i:t});(t.dataset.teSidenavStateShow===""||t.dataset.teCollapseShow==="")&&this._rotateArrow(r,!1),_.on(r,"click",l=>{this._toggleCategory(l,a,t),this._tempSlim&&this._isAllToBeCollapsed()&&(this._setSlim(!0),this._tempSlim=!1),this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()}),_.on(t,"show.te.collapse",()=>this._rotateArrow(r,!1)),_.on(t,"hide.te.collapse",()=>this._rotateArrow(r,!0)),_.on(t,"shown.te.collapse",()=>{this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()}),_.on(t,"hidden.te.collapse",()=>{this._tempSlim&&this._isAllCollapsed()&&(this._setSlim(!0),this._tempSlim=!1),this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()})}_setupContent(){this._content=m.find(this.options.sidenavContent),this._content.forEach(t=>{const e=["!p","!m","!px","!pl","!pr","!mx","!ml","!mr","!-p","!-m","!-px","!-pl","!-pr","!-mx","!-ml","!-mr"];[...t.classList].filter(n=>e.findIndex(o=>n.includes(o))>=0).forEach(n=>t.classList.remove(n))}),this._initialContentStyle=this._content.map(t=>{const{paddingLeft:e,paddingRight:i,marginLeft:n,marginRight:o,transition:r}=window.getComputedStyle(t);return{paddingLeft:e,paddingRight:i,marginLeft:n,marginRight:o,transition:r}})}_setupFocusTrap(){this._focusTrap=new Vs(this._element,{event:"keydown",condition:t=>t.keyCode===Ci,onlyVisible:!0},this.toggler)}_setupInitialStyling(){this._setColor(),g.style(this._element,this.sidenavStyle)}_setupScrolling(){let t=this._element;if(this.options.sidenavScrollContainer){t=m.findOne(this.options.sidenavScrollContainer,this._element);const i=dm(t.parentNode.children).filter(n=>n!==t).reduce((n,o)=>n+o.clientHeight,0);g.style(t,{maxHeight:`calc(100% - ${i}px)`,position:"relative"})}this._perfectScrollbar=new ms(t,{suppressScrollX:!0,handlers:["click-rail","drag-thumb","wheel","touch"]})}_setupSlim(){this._slimCollapsed=this.options.sidenavSlimCollapsed,this._toggleSlimDisplay(this._slimCollapsed),this.options.sidenavExpandOnHover&&(this._element.addEventListener("mouseenter",()=>{this._slimCollapsed&&this._setSlim(!1)}),this._element.addEventListener("mouseleave",()=>{this._slimCollapsed||this._setSlim(!0)}))}_setupRippleEffect(){this.links.forEach(t=>{let e=Ye.getInstance(t),i=this.options.sidenavColor;if(e&&e._options.sidenavColor!==this.options.sidenavColor)e.dispose();else if(e)return;(localStorage.theme==="dark"||!("theme"in localStorage)&&window.matchMedia("(prefers-color-scheme: dark)").matches)&&(i="white"),e=new Ye(t,{rippleColor:i})})}_setupTouch(){this._touch=new pE(this._element,"swipe",{threshold:20}),this._touch.init(),_.on(this._element,"swipeleft",t=>this._handleSwipe(t,this.options.sidenavRight)),_.on(this._element,"swiperight",t=>this._handleSwipe(t,!this.options.sidenavRight))}_setActive(t,e){t.setAttribute("data-te-sidebar-state-active",""),this._activeNode&&t.removeAttribute("data-te-sidebar-state-active"),this._activeNode=t;const[i]=m.parents(this._activeNode,Cs);if(!i){this._setActiveCategory();return}const[n]=m.prev(i,kn);this._setActiveCategory(n),!e&&!this._slimCollapsed&&ce.getInstance(i).show()}_setActiveCategory(t){this.navigation.forEach(e=>{m.find(Cs,e).forEach(n=>{const[o]=m.prev(n,kn);o!==t?o.removeAttribute("data-te-sidenav-state-active"):o.setAttribute("data-te-sidenav-state-active","")})})}_setActiveElements(t){this.navigation.forEach(e=>{m.find(kn,e).filter(n=>m.next(n,Cs).length===0).forEach(n=>{this._isActive(n,t)&&n!==this._activeNode&&this._setActive(n,t)})}),t&&this._updateFocus(this.isVisible)}_setColor(){const t=["primary","secondary","success","info","warning","danger","light","dark"],{sidenavColor:e}=this.options,i=t.includes(e)?e:"primary";t.forEach(n=>{this._element.classList.remove(`sidenav-${n}`)}),g.addClass(this._element,`sidenav-${i}`)}_setContentOffsets(t,e,i){this._content.forEach((n,o)=>{const r=this._getOffsetValue(t,{index:o,property:"padding",offsets:e}),a=this._getOffsetValue(t,{index:o,property:"margin",offsets:e}),l={};if(i||(l.transition=`all ${this.transitionDuration} linear`),l[e.padding.property]=`${r}px`,l[e.margin.property]=`${a}px`,g.style(n,l),!!t){if(i){g.style(n,{transition:this._initialContentStyle[o].transition});return}_.on(n,"transitionend",()=>{g.style(n,{transition:this._initialContentStyle[o].transition})})}})}_setMode(t){this.options.sidenavMode!==t&&(this._options.sidenavMode=t,this._update(this.isVisible))}_setSlim(t){const e=t?["collapse","collapsed"]:["expand","expanded"];this._triggerEvents(...e),t&&this._collapseItems(),this._slimCollapsed=t,this._toggleSlimDisplay(t),g.style(this._element,{width:`${this.width}px`}),this._updateOffsets(this.isVisible)}_setTabindex(t){this.links.forEach(e=>{e.tabIndex=t?0:-1})}_emitEvents(t){const e=t?["show","shown"]:["hide","hidden"];this._triggerEvents(...e)}_rotateArrow(t,e){const[i]=m.children(t,`[${pO}]`);i&&(e?g.removeClass(i,"rotate-180"):g.addClass(i,"rotate-180"))}_toggleCategory(t,e){t.preventDefault(),e.toggle(),this._slimCollapsed&&this.options.sidenavExpandable&&(this._tempSlim=!0,this._setSlim(!1))}_toggleSlimDisplay(t){const e=m.find(_O,this._element),i=m.find(gO,this._element),n=()=>{e.forEach(o=>{g.style(o,{display:this._slimCollapsed?"unset":"none"})}),i.forEach(o=>{g.style(o,{display:this._slimCollapsed?"none":"unset"})})};t?setTimeout(()=>n(),this.options.sidenavTransitionDuration):n()}async _triggerEvents(t,e){_.trigger(this._element,`${t}.te.sidenav`),e&&await setTimeout(()=>{_.trigger(this._element,`${e}.te.sidenav`)},this.options.sidenavTransitionDuration+5)}_isiPhone(){return/iPhone|iPod/i.test(navigator.userAgent)}_update(t){t&&this._isiPhone()&&g.addClass(this._element,"ps--scrolling-y"),this.toggler&&this._updateTogglerAria(t),this._updateDisplay(t),this.options.sidenavBackdrop&&this._updateBackdrop(t),this._updateOffsets(t),t&&this.options.sidenavCloseOnEsc&&this.options.sidenavMode!=="side"&&_.on(window,"keydown",this.escHandler),this.options.sidenavFocusTrap&&this._updateFocus(t)}_updateDisplay(t){const e=t?0:this.translation;g.style(this._element,{transform:`translateX(${e}%)`})}_updateFocus(t){if(this._setTabindex(t),this.options.sidenavMode==="over"&&this.options.sidenavFocusTrap){if(t){this._focusTrap.trap();return}this._focusTrap.disable()}this._focusTrap.disable()}_updateOffsets(t,e=!1){const[i,n]=this.options.sidenavRight?["right","left"]:["left","right"],o={property:this._getProperty("padding",i),value:this.options.sidenavMode==="over"?0:this.width},r={property:this._getProperty("margin",n),value:this.options.sidenavMode==="push"?-1*this.width:0};_.trigger(this._element,"update.te.sidenav",{margin:r,padding:o}),this._content&&(this._content.className="",this._setContentOffsets(t,{padding:o,margin:r},e))}_updateTogglerAria(t){this.toggler.setAttribute("aria-expanded",t)}static toggleSidenav(){return function(t){const e=m.closest(t.target,_c),i=g.getDataAttributes(e).target;m.find(i).forEach(n=>{(Ii.getInstance(n)||new Ii(n)).toggle()})}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Vr);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Ii(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Vr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}ff({Animate:Gs,Alert:Ws,Button:ao,ChipsInput:gp,Chip:ki,Dropdown:Ft,Carousel:he,Collapse:ce,Offcanvas:ts,Modal:Ys,Popover:Eo,ScrollSpy:xo,Select:on,Tab:wo,Toast:Xs,Tooltip:is,Ripple:Ye,Datepicker:xl,Timepicker:Ll,Sidenav:Ii,Stepper:Wu,Input:Z,PerfectScrollbar:ms,Rating:Bp,Chart:yp,Datatable:pr,Popconfirm:_r,SmoothScroll:xr,Lightbox:ys,Validation:Tr,Touch:Er,LazyLoad:yn,Datetimepicker:Dr,Clipboard:Ar,InfiniteScroll:kr,LoadingManagement:Or,Autocomplete:Pr,Sticky:Lr,MultiRangeSlider:Hr});/*!
+ * Chart.js v3.9.1
+ * https://www.chartjs.org
+ * (c) 2022 Chart.js Contributors
+ * Released under the MIT License
+ */function Oe(){}const EO=function(){let s=0;return function(){return s++}}();function H(s){return s===null||typeof s>"u"}function Q(s){if(Array.isArray&&Array.isArray(s))return!0;const t=Object.prototype.toString.call(s);return t.slice(0,7)==="[object"&&t.slice(-6)==="Array]"}function V(s){return s!==null&&Object.prototype.toString.call(s)==="[object Object]"}const rt=s=>(typeof s=="number"||s instanceof Number)&&isFinite(+s);function zt(s,t){return rt(s)?s:t}function B(s,t){return typeof s>"u"?t:s}const xO=(s,t)=>typeof s=="string"&&s.endsWith("%")?parseFloat(s)/100:s/t,gf=(s,t)=>typeof s=="string"&&s.endsWith("%")?parseFloat(s)/100*t:+s;function G(s,t,e){if(s&&typeof s.call=="function")return s.apply(e,t)}function U(s,t,e,i){let n,o,r;if(Q(s))if(o=s.length,i)for(n=o-1;n>=0;n--)t.call(e,s[n],n);else for(n=0;n<o;n++)t.call(e,s[n],n);else if(V(s))for(r=Object.keys(s),o=r.length,n=0;n<o;n++)t.call(e,s[r[n]],r[n])}function Fr(s,t){let e,i,n,o;if(!s||!t||s.length!==t.length)return!1;for(e=0,i=s.length;e<i;++e)if(n=s[e],o=t[e],n.datasetIndex!==o.datasetIndex||n.index!==o.index)return!1;return!0}function Wr(s){if(Q(s))return s.map(Wr);if(V(s)){const t=Object.create(null),e=Object.keys(s),i=e.length;let n=0;for(;n<i;++n)t[e[n]]=Wr(s[e[n]]);return t}return s}function mf(s){return["__proto__","prototype","constructor"].indexOf(s)===-1}function CO(s,t,e,i){if(!mf(s))return;const n=t[s],o=e[s];V(n)&&V(o)?Te(n,o,i):t[s]=Wr(o)}function Te(s,t,e){const i=Q(t)?t:[t],n=i.length;if(!V(s))return s;e=e||{};const o=e.merger||CO;for(let r=0;r<n;++r){if(t=i[r],!V(t))continue;const a=Object.keys(t);for(let l=0,c=a.length;l<c;++l)o(a[l],s,t,e)}return s}function Sn(s,t){return Te(s,t,{merger:AO})}function AO(s,t,e){if(!mf(s))return;const i=t[s],n=e[s];V(i)&&V(n)?Sn(i,n):Object.prototype.hasOwnProperty.call(t,s)||(t[s]=Wr(n))}const bf={"":s=>s,x:s=>s.x,y:s=>s.y};function ti(s,t){return(bf[t]||(bf[t]=wO(t)))(s)}function wO(s){const t=kO(s);return e=>{for(const i of t){if(i==="")break;e=e&&e[i]}return e}}function kO(s){const t=s.split("."),e=[];let i="";for(const n of t)i+=n,i.endsWith("\\")?i=i.slice(0,-1)+".":(e.push(i),i="");return e}function gc(s){return s.charAt(0).toUpperCase()+s.slice(1)}const jt=s=>typeof s<"u",ei=s=>typeof s=="function",vf=(s,t)=>{if(s.size!==t.size)return!1;for(const e of s)if(!t.has(e))return!1;return!0};function SO(s){return s.type==="mouseup"||s.type==="click"||s.type==="contextmenu"}const it=Math.PI,q=2*it,OO=q+it,zr=Number.POSITIVE_INFINITY,IO=it/180,nt=it/2,On=it/4,yf=it*2/3,Yt=Math.log10,Ee=Math.sign;function Tf(s){const t=Math.round(s);s=In(s,t,s/1e3)?t:s;const e=Math.pow(10,Math.floor(Yt(s))),i=s/e;return(i<=1?1:i<=2?2:i<=5?5:10)*e}function DO(s){const t=[],e=Math.sqrt(s);let i;for(i=1;i<e;i++)s%i===0&&(t.push(i),t.push(s/i));return e===(e|0)&&t.push(e),t.sort((n,o)=>n-o).pop(),t}function As(s){return!isNaN(parseFloat(s))&&isFinite(s)}function In(s,t,e){return Math.abs(s-t)<e}function MO(s,t){const e=Math.round(s);return e-t<=s&&e+t>=s}function Ef(s,t,e){let i,n,o;for(i=0,n=s.length;i<n;i++)o=s[i][e],isNaN(o)||(t.min=Math.min(t.min,o),t.max=Math.max(t.max,o))}function se(s){return s*(it/180)}function mc(s){return s*(180/it)}function xf(s){if(!rt(s))return;let t=1,e=0;for(;Math.round(s*t)/t!==s;)t*=10,e++;return e}function Cf(s,t){const e=t.x-s.x,i=t.y-s.y,n=Math.sqrt(e*e+i*i);let o=Math.atan2(i,e);return o<-.5*it&&(o+=q),{angle:o,distance:n}}function bc(s,t){return Math.sqrt(Math.pow(t.x-s.x,2)+Math.pow(t.y-s.y,2))}function LO(s,t){return(s-t+OO)%q-it}function Vt(s){return(s%q+q)%q}function Dn(s,t,e,i){const n=Vt(s),o=Vt(t),r=Vt(e),a=Vt(o-n),l=Vt(r-n),c=Vt(n-o),h=Vt(n-r);return n===o||n===r||i&&o===r||a>l&&c<h}function dt(s,t,e){return Math.max(t,Math.min(e,s))}function $O(s){return dt(s,-32768,32767)}function Ie(s,t,e,i=1e-6){return s>=Math.min(t,e)-i&&s<=Math.max(t,e)+i}function vc(s,t,e){e=e||(r=>s[r]<t);let i=s.length-1,n=0,o;for(;i-n>1;)o=n+i>>1,e(o)?n=o:i=o;return{lo:n,hi:i}}const De=(s,t,e,i)=>vc(s,e,i?n=>s[n][t]<=e:n=>s[n][t]<e),RO=(s,t,e)=>vc(s,e,i=>s[i][t]>=e);function PO(s,t,e){let i=0,n=s.length;for(;i<n&&s[i]<t;)i++;for(;n>i&&s[n-1]>e;)n--;return i>0||n<s.length?s.slice(i,n):s}const Af=["push","pop","shift","splice","unshift"];function NO(s,t){if(s._chartjs){s._chartjs.listeners.push(t);return}Object.defineProperty(s,"_chartjs",{configurable:!0,enumerable:!1,value:{listeners:[t]}}),Af.forEach(e=>{const i="_onData"+gc(e),n=s[e];Object.defineProperty(s,e,{configurable:!0,enumerable:!1,value(...o){const r=n.apply(this,o);return s._chartjs.listeners.forEach(a=>{typeof a[i]=="function"&&a[i](...o)}),r}})})}function wf(s,t){const e=s._chartjs;if(!e)return;const i=e.listeners,n=i.indexOf(t);n!==-1&&i.splice(n,1),!(i.length>0)&&(Af.forEach(o=>{delete s[o]}),delete s._chartjs)}function kf(s){const t=new Set;let e,i;for(e=0,i=s.length;e<i;++e)t.add(s[e]);return t.size===i?s:Array.from(t)}const Sf=function(){return typeof window>"u"?function(s){return s()}:window.requestAnimationFrame}();function Of(s,t,e){const i=e||(r=>Array.prototype.slice.call(r));let n=!1,o=[];return function(...r){o=i(r),n||(n=!0,Sf.call(window,()=>{n=!1,s.apply(t,o)}))}}function BO(s,t){let e;return function(...i){return t?(clearTimeout(e),e=setTimeout(s,t,i)):s.apply(this,i),t}}const yc=s=>s==="start"?"left":s==="end"?"right":"center",gt=(s,t,e)=>s==="start"?t:s==="end"?e:(t+e)/2,HO=(s,t,e,i)=>s===(i?"left":"right")?e:s==="center"?(t+e)/2:t;function If(s,t,e){const i=t.length;let n=0,o=i;if(s._sorted){const{iScale:r,_parsed:a}=s,l=r.axis,{min:c,max:h,minDefined:d,maxDefined:u}=r.getUserBounds();d&&(n=dt(Math.min(De(a,r.axis,c).lo,e?i:De(t,l,r.getPixelForValue(c)).lo),0,i-1)),u?o=dt(Math.max(De(a,r.axis,h,!0).hi+1,e?0:De(t,l,r.getPixelForValue(h),!0).hi+1),n,i)-n:o=i-n}return{start:n,count:o}}function Df(s){const{xScale:t,yScale:e,_scaleRanges:i}=s,n={xmin:t.min,xmax:t.max,ymin:e.min,ymax:e.max};if(!i)return s._scaleRanges=n,!0;const o=i.xmin!==t.min||i.xmax!==t.max||i.ymin!==e.min||i.ymax!==e.max;return Object.assign(i,n),o}const jr=s=>s===0||s===1,Mf=(s,t,e)=>-(Math.pow(2,10*(s-=1))*Math.sin((s-t)*q/e)),Lf=(s,t,e)=>Math.pow(2,-10*s)*Math.sin((s-t)*q/e)+1,Mn={linear:s=>s,easeInQuad:s=>s*s,easeOutQuad:s=>-s*(s-2),easeInOutQuad:s=>(s/=.5)<1?.5*s*s:-.5*(--s*(s-2)-1),easeInCubic:s=>s*s*s,easeOutCubic:s=>(s-=1)*s*s+1,easeInOutCubic:s=>(s/=.5)<1?.5*s*s*s:.5*((s-=2)*s*s+2),easeInQuart:s=>s*s*s*s,easeOutQuart:s=>-((s-=1)*s*s*s-1),easeInOutQuart:s=>(s/=.5)<1?.5*s*s*s*s:-.5*((s-=2)*s*s*s-2),easeInQuint:s=>s*s*s*s*s,easeOutQuint:s=>(s-=1)*s*s*s*s+1,easeInOutQuint:s=>(s/=.5)<1?.5*s*s*s*s*s:.5*((s-=2)*s*s*s*s+2),easeInSine:s=>-Math.cos(s*nt)+1,easeOutSine:s=>Math.sin(s*nt),easeInOutSine:s=>-.5*(Math.cos(it*s)-1),easeInExpo:s=>s===0?0:Math.pow(2,10*(s-1)),easeOutExpo:s=>s===1?1:-Math.pow(2,-10*s)+1,easeInOutExpo:s=>jr(s)?s:s<.5?.5*Math.pow(2,10*(s*2-1)):.5*(-Math.pow(2,-10*(s*2-1))+2),easeInCirc:s=>s>=1?s:-(Math.sqrt(1-s*s)-1),easeOutCirc:s=>Math.sqrt(1-(s-=1)*s),easeInOutCirc:s=>(s/=.5)<1?-.5*(Math.sqrt(1-s*s)-1):.5*(Math.sqrt(1-(s-=2)*s)+1),easeInElastic:s=>jr(s)?s:Mf(s,.075,.3),easeOutElastic:s=>jr(s)?s:Lf(s,.075,.3),easeInOutElastic(s){return jr(s)?s:s<.5?.5*Mf(s*2,.1125,.45):.5+.5*Lf(s*2-1,.1125,.45)},easeInBack(s){return s*s*((1.70158+1)*s-1.70158)},easeOutBack(s){return(s-=1)*s*((1.70158+1)*s+1.70158)+1},easeInOutBack(s){let t=1.70158;return(s/=.5)<1?.5*(s*s*(((t*=1.525)+1)*s-t)):.5*((s-=2)*s*(((t*=1.525)+1)*s+t)+2)},easeInBounce:s=>1-Mn.easeOutBounce(1-s),easeOutBounce(s){return s<1/2.75?7.5625*s*s:s<2/2.75?7.5625*(s-=1.5/2.75)*s+.75:s<2.5/2.75?7.5625*(s-=2.25/2.75)*s+.9375:7.5625*(s-=2.625/2.75)*s+.984375},easeInOutBounce:s=>s<.5?Mn.easeInBounce(s*2)*.5:Mn.easeOutBounce(s*2-1)*.5+.5};/*!
+ * @kurkle/color v0.2.1
+ * https://github.com/kurkle/color#readme
+ * (c) 2022 Jukka Kurkela
+ * Released under the MIT License
+ */function Ln(s){return s+.5|0}const ii=(s,t,e)=>Math.max(Math.min(s,e),t);function $n(s){return ii(Ln(s*2.55),0,255)}function si(s){return ii(Ln(s*255),0,255)}function Me(s){return ii(Ln(s/2.55)/100,0,1)}function $f(s){return ii(Ln(s*100),0,100)}const Kt={0:0,1:1,2:2,3:3,4:4,5:5,6:6,7:7,8:8,9:9,A:10,B:11,C:12,D:13,E:14,F:15,a:10,b:11,c:12,d:13,e:14,f:15},Tc=[..."0123456789ABCDEF"],VO=s=>Tc[s&15],FO=s=>Tc[(s&240)>>4]+Tc[s&15],Yr=s=>(s&240)>>4===(s&15),WO=s=>Yr(s.r)&&Yr(s.g)&&Yr(s.b)&&Yr(s.a);function zO(s){var t=s.length,e;return s[0]==="#"&&(t===4||t===5?e={r:255&Kt[s[1]]*17,g:255&Kt[s[2]]*17,b:255&Kt[s[3]]*17,a:t===5?Kt[s[4]]*17:255}:(t===7||t===9)&&(e={r:Kt[s[1]]<<4|Kt[s[2]],g:Kt[s[3]]<<4|Kt[s[4]],b:Kt[s[5]]<<4|Kt[s[6]],a:t===9?Kt[s[7]]<<4|Kt[s[8]]:255})),e}const jO=(s,t)=>s<255?t(s):"";function YO(s){var t=WO(s)?VO:FO;return s?"#"+t(s.r)+t(s.g)+t(s.b)+jO(s.a,t):void 0}const KO=/^(hsla?|hwb|hsv)\(\s*([-+.e\d]+)(?:deg)?[\s,]+([-+.e\d]+)%[\s,]+([-+.e\d]+)%(?:[\s,]+([-+.e\d]+)(%)?)?\s*\)$/;function Rf(s,t,e){const i=t*Math.min(e,1-e),n=(o,r=(o+s/30)%12)=>e-i*Math.max(Math.min(r-3,9-r,1),-1);return[n(0),n(8),n(4)]}function UO(s,t,e){const i=(n,o=(n+s/60)%6)=>e-e*t*Math.max(Math.min(o,4-o,1),0);return[i(5),i(3),i(1)]}function XO(s,t,e){const i=Rf(s,1,.5);let n;for(t+e>1&&(n=1/(t+e),t*=n,e*=n),n=0;n<3;n++)i[n]*=1-t-e,i[n]+=t;return i}function GO(s,t,e,i,n){return s===n?(t-e)/i+(t<e?6:0):t===n?(e-s)/i+2:(s-t)/i+4}function Ec(s){const e=s.r/255,i=s.g/255,n=s.b/255,o=Math.max(e,i,n),r=Math.min(e,i,n),a=(o+r)/2;let l,c,h;return o!==r&&(h=o-r,c=a>.5?h/(2-o-r):h/(o+r),l=GO(e,i,n,h,o),l=l*60+.5),[l|0,c||0,a]}function xc(s,t,e,i){return(Array.isArray(t)?s(t[0],t[1],t[2]):s(t,e,i)).map(si)}function Cc(s,t,e){return xc(Rf,s,t,e)}function qO(s,t,e){return xc(XO,s,t,e)}function ZO(s,t,e){return xc(UO,s,t,e)}function Pf(s){return(s%360+360)%360}function QO(s){const t=KO.exec(s);let e=255,i;if(!t)return;t[5]!==i&&(e=t[6]?$n(+t[5]):si(+t[5]));const n=Pf(+t[2]),o=+t[3]/100,r=+t[4]/100;return t[1]==="hwb"?i=qO(n,o,r):t[1]==="hsv"?i=ZO(n,o,r):i=Cc(n,o,r),{r:i[0],g:i[1],b:i[2],a:e}}function JO(s,t){var e=Ec(s);e[0]=Pf(e[0]+t),e=Cc(e),s.r=e[0],s.g=e[1],s.b=e[2]}function tI(s){if(!s)return;const t=Ec(s),e=t[0],i=$f(t[1]),n=$f(t[2]);return s.a<255?`hsla(${e}, ${i}%, ${n}%, ${Me(s.a)})`:`hsl(${e}, ${i}%, ${n}%)`}const Nf={x:"dark",Z:"light",Y:"re",X:"blu",W:"gr",V:"medium",U:"slate",A:"ee",T:"ol",S:"or",B:"ra",C:"lateg",D:"ights",R:"in",Q:"turquois",E:"hi",P:"ro",O:"al",N:"le",M:"de",L:"yello",F:"en",K:"ch",G:"arks",H:"ea",I:"ightg",J:"wh"},Bf={OiceXe:"f0f8ff",antiquewEte:"faebd7",aqua:"ffff",aquamarRe:"7fffd4",azuY:"f0ffff",beige:"f5f5dc",bisque:"ffe4c4",black:"0",blanKedOmond:"ffebcd",Xe:"ff",XeviTet:"8a2be2",bPwn:"a52a2a",burlywood:"deb887",caMtXe:"5f9ea0",KartYuse:"7fff00",KocTate:"d2691e",cSO:"ff7f50",cSnflowerXe:"6495ed",cSnsilk:"fff8dc",crimson:"dc143c",cyan:"ffff",xXe:"8b",xcyan:"8b8b",xgTMnPd:"b8860b",xWay:"a9a9a9",xgYF:"6400",xgYy:"a9a9a9",xkhaki:"bdb76b",xmagFta:"8b008b",xTivegYF:"556b2f",xSange:"ff8c00",xScEd:"9932cc",xYd:"8b0000",xsOmon:"e9967a",xsHgYF:"8fbc8f",xUXe:"483d8b",xUWay:"2f4f4f",xUgYy:"2f4f4f",xQe:"ced1",xviTet:"9400d3",dAppRk:"ff1493",dApskyXe:"bfff",dimWay:"696969",dimgYy:"696969",dodgerXe:"1e90ff",fiYbrick:"b22222",flSOwEte:"fffaf0",foYstWAn:"228b22",fuKsia:"ff00ff",gaRsbSo:"dcdcdc",ghostwEte:"f8f8ff",gTd:"ffd700",gTMnPd:"daa520",Way:"808080",gYF:"8000",gYFLw:"adff2f",gYy:"808080",honeyMw:"f0fff0",hotpRk:"ff69b4",RdianYd:"cd5c5c",Rdigo:"4b0082",ivSy:"fffff0",khaki:"f0e68c",lavFMr:"e6e6fa",lavFMrXsh:"fff0f5",lawngYF:"7cfc00",NmoncEffon:"fffacd",ZXe:"add8e6",ZcSO:"f08080",Zcyan:"e0ffff",ZgTMnPdLw:"fafad2",ZWay:"d3d3d3",ZgYF:"90ee90",ZgYy:"d3d3d3",ZpRk:"ffb6c1",ZsOmon:"ffa07a",ZsHgYF:"20b2aa",ZskyXe:"87cefa",ZUWay:"778899",ZUgYy:"778899",ZstAlXe:"b0c4de",ZLw:"ffffe0",lime:"ff00",limegYF:"32cd32",lRF:"faf0e6",magFta:"ff00ff",maPon:"800000",VaquamarRe:"66cdaa",VXe:"cd",VScEd:"ba55d3",VpurpN:"9370db",VsHgYF:"3cb371",VUXe:"7b68ee",VsprRggYF:"fa9a",VQe:"48d1cc",VviTetYd:"c71585",midnightXe:"191970",mRtcYam:"f5fffa",mistyPse:"ffe4e1",moccasR:"ffe4b5",navajowEte:"ffdead",navy:"80",Tdlace:"fdf5e6",Tive:"808000",TivedBb:"6b8e23",Sange:"ffa500",SangeYd:"ff4500",ScEd:"da70d6",pOegTMnPd:"eee8aa",pOegYF:"98fb98",pOeQe:"afeeee",pOeviTetYd:"db7093",papayawEp:"ffefd5",pHKpuff:"ffdab9",peru:"cd853f",pRk:"ffc0cb",plum:"dda0dd",powMrXe:"b0e0e6",purpN:"800080",YbeccapurpN:"663399",Yd:"ff0000",Psybrown:"bc8f8f",PyOXe:"4169e1",saddNbPwn:"8b4513",sOmon:"fa8072",sandybPwn:"f4a460",sHgYF:"2e8b57",sHshell:"fff5ee",siFna:"a0522d",silver:"c0c0c0",skyXe:"87ceeb",UXe:"6a5acd",UWay:"708090",UgYy:"708090",snow:"fffafa",sprRggYF:"ff7f",stAlXe:"4682b4",tan:"d2b48c",teO:"8080",tEstN:"d8bfd8",tomato:"ff6347",Qe:"40e0d0",viTet:"ee82ee",JHt:"f5deb3",wEte:"ffffff",wEtesmoke:"f5f5f5",Lw:"ffff00",LwgYF:"9acd32"};function eI(){const s={},t=Object.keys(Bf),e=Object.keys(Nf);let i,n,o,r,a;for(i=0;i<t.length;i++){for(r=a=t[i],n=0;n<e.length;n++)o=e[n],a=a.replace(o,Nf[o]);o=parseInt(Bf[r],16),s[a]=[o>>16&255,o>>8&255,o&255]}return s}let Kr;function iI(s){Kr||(Kr=eI(),Kr.transparent=[0,0,0,0]);const t=Kr[s.toLowerCase()];return t&&{r:t[0],g:t[1],b:t[2],a:t.length===4?t[3]:255}}const sI=/^rgba?\(\s*([-+.\d]+)(%)?[\s,]+([-+.e\d]+)(%)?[\s,]+([-+.e\d]+)(%)?(?:[\s,/]+([-+.e\d]+)(%)?)?\s*\)$/;function nI(s){const t=sI.exec(s);let e=255,i,n,o;if(t){if(t[7]!==i){const r=+t[7];e=t[8]?$n(r):ii(r*255,0,255)}return i=+t[1],n=+t[3],o=+t[5],i=255&(t[2]?$n(i):ii(i,0,255)),n=255&(t[4]?$n(n):ii(n,0,255)),o=255&(t[6]?$n(o):ii(o,0,255)),{r:i,g:n,b:o,a:e}}}function oI(s){return s&&(s.a<255?`rgba(${s.r}, ${s.g}, ${s.b}, ${Me(s.a)})`:`rgb(${s.r}, ${s.g}, ${s.b})`)}const Ac=s=>s<=.0031308?s*12.92:Math.pow(s,1/2.4)*1.055-.055,ws=s=>s<=.04045?s/12.92:Math.pow((s+.055)/1.055,2.4);function rI(s,t,e){const i=ws(Me(s.r)),n=ws(Me(s.g)),o=ws(Me(s.b));return{r:si(Ac(i+e*(ws(Me(t.r))-i))),g:si(Ac(n+e*(ws(Me(t.g))-n))),b:si(Ac(o+e*(ws(Me(t.b))-o))),a:s.a+e*(t.a-s.a)}}function Ur(s,t,e){if(s){let i=Ec(s);i[t]=Math.max(0,Math.min(i[t]+i[t]*e,t===0?360:1)),i=Cc(i),s.r=i[0],s.g=i[1],s.b=i[2]}}function Hf(s,t){return s&&Object.assign(t||{},s)}function Vf(s){var t={r:0,g:0,b:0,a:255};return Array.isArray(s)?s.length>=3&&(t={r:s[0],g:s[1],b:s[2],a:255},s.length>3&&(t.a=si(s[3]))):(t=Hf(s,{r:0,g:0,b:0,a:1}),t.a=si(t.a)),t}function aI(s){return s.charAt(0)==="r"?nI(s):QO(s)}class Xr{constructor(t){if(t instanceof Xr)return t;const e=typeof t;let i;e==="object"?i=Vf(t):e==="string"&&(i=zO(t)||iI(t)||aI(t)),this._rgb=i,this._valid=!!i}get valid(){return this._valid}get rgb(){var t=Hf(this._rgb);return t&&(t.a=Me(t.a)),t}set rgb(t){this._rgb=Vf(t)}rgbString(){return this._valid?oI(this._rgb):void 0}hexString(){return this._valid?YO(this._rgb):void 0}hslString(){return this._valid?tI(this._rgb):void 0}mix(t,e){if(t){const i=this.rgb,n=t.rgb;let o;const r=e===o?.5:e,a=2*r-1,l=i.a-n.a,c=((a*l===-1?a:(a+l)/(1+a*l))+1)/2;o=1-c,i.r=255&c*i.r+o*n.r+.5,i.g=255&c*i.g+o*n.g+.5,i.b=255&c*i.b+o*n.b+.5,i.a=r*i.a+(1-r)*n.a,this.rgb=i}return this}interpolate(t,e){return t&&(this._rgb=rI(this._rgb,t._rgb,e)),this}clone(){return new Xr(this.rgb)}alpha(t){return this._rgb.a=si(t),this}clearer(t){const e=this._rgb;return e.a*=1-t,this}greyscale(){const t=this._rgb,e=Ln(t.r*.3+t.g*.59+t.b*.11);return t.r=t.g=t.b=e,this}opaquer(t){const e=this._rgb;return e.a*=1+t,this}negate(){const t=this._rgb;return t.r=255-t.r,t.g=255-t.g,t.b=255-t.b,this}lighten(t){return Ur(this._rgb,2,t),this}darken(t){return Ur(this._rgb,2,-t),this}saturate(t){return Ur(this._rgb,1,t),this}desaturate(t){return Ur(this._rgb,1,-t),this}rotate(t){return JO(this._rgb,t),this}}function Ff(s){return new Xr(s)}function Wf(s){if(s&&typeof s=="object"){const t=s.toString();return t==="[object CanvasPattern]"||t==="[object CanvasGradient]"}return!1}function zf(s){return Wf(s)?s:Ff(s)}function wc(s){return Wf(s)?s:Ff(s).saturate(.5).darken(.1).hexString()}const Di=Object.create(null),kc=Object.create(null);function Rn(s,t){if(!t)return s;const e=t.split(".");for(let i=0,n=e.length;i<n;++i){const o=e[i];s=s[o]||(s[o]=Object.create(null))}return s}function Sc(s,t,e){return typeof t=="string"?Te(Rn(s,t),e):Te(Rn(s,""),t)}class lI{constructor(t){this.animation=void 0,this.backgroundColor="rgba(0,0,0,0.1)",this.borderColor="rgba(0,0,0,0.1)",this.color="#666",this.datasets={},this.devicePixelRatio=e=>e.chart.platform.getDevicePixelRatio(),this.elements={},this.events=["mousemove","mouseout","click","touchstart","touchmove"],this.font={family:"'Helvetica Neue', 'Helvetica', 'Arial', sans-serif",size:12,style:"normal",lineHeight:1.2,weight:null},this.hover={},this.hoverBackgroundColor=(e,i)=>wc(i.backgroundColor),this.hoverBorderColor=(e,i)=>wc(i.borderColor),this.hoverColor=(e,i)=>wc(i.color),this.indexAxis="x",this.interaction={mode:"nearest",intersect:!0,includeInvisible:!1},this.maintainAspectRatio=!0,this.onHover=null,this.onClick=null,this.parsing=!0,this.plugins={},this.responsive=!0,this.scale=void 0,this.scales={},this.showLine=!0,this.drawActiveElementsOnTop=!0,this.describe(t)}set(t,e){return Sc(this,t,e)}get(t){return Rn(this,t)}describe(t,e){return Sc(kc,t,e)}override(t,e){return Sc(Di,t,e)}route(t,e,i,n){const o=Rn(this,t),r=Rn(this,i),a="_"+e;Object.defineProperties(o,{[a]:{value:o[e],writable:!0},[e]:{enumerable:!0,get(){const l=this[a],c=r[n];return V(l)?Object.assign({},c,l):B(l,c)},set(l){this[a]=l}}})}}var F=new lI({_scriptable:s=>!s.startsWith("on"),_indexable:s=>s!=="events",hover:{_fallback:"interaction"},interaction:{_scriptable:!1,_indexable:!1}});function cI(s){return!s||H(s.size)||H(s.family)?null:(s.style?s.style+" ":"")+(s.weight?s.weight+" ":"")+s.size+"px "+s.family}function Gr(s,t,e,i,n){let o=t[n];return o||(o=t[n]=s.measureText(n).width,e.push(n)),o>i&&(i=o),i}function hI(s,t,e,i){i=i||{};let n=i.data=i.data||{},o=i.garbageCollect=i.garbageCollect||[];i.font!==t&&(n=i.data={},o=i.garbageCollect=[],i.font=t),s.save(),s.font=t;let r=0;const a=e.length;let l,c,h,d,u;for(l=0;l<a;l++)if(d=e[l],d!=null&&Q(d)!==!0)r=Gr(s,n,o,r,d);else if(Q(d))for(c=0,h=d.length;c<h;c++)u=d[c],u!=null&&!Q(u)&&(r=Gr(s,n,o,r,u));s.restore();const p=o.length/2;if(p>e.length){for(l=0;l<p;l++)delete n[o[l]];o.splice(0,p)}return r}function Mi(s,t,e){const i=s.currentDevicePixelRatio,n=e!==0?Math.max(e/2,.5):0;return Math.round((t-n)*i)/i+n}function jf(s,t){t=t||s.getContext("2d"),t.save(),t.resetTransform(),t.clearRect(0,0,s.width,s.height),t.restore()}function Oc(s,t,e,i){Yf(s,t,e,i,null)}function Yf(s,t,e,i,n){let o,r,a,l,c,h;const d=t.pointStyle,u=t.rotation,p=t.radius;let f=(u||0)*IO;if(d&&typeof d=="object"&&(o=d.toString(),o==="[object HTMLImageElement]"||o==="[object HTMLCanvasElement]")){s.save(),s.translate(e,i),s.rotate(f),s.drawImage(d,-d.width/2,-d.height/2,d.width,d.height),s.restore();return}if(!(isNaN(p)||p<=0)){switch(s.beginPath(),d){default:n?s.ellipse(e,i,n/2,p,0,0,q):s.arc(e,i,p,0,q),s.closePath();break;case"triangle":s.moveTo(e+Math.sin(f)*p,i-Math.cos(f)*p),f+=yf,s.lineTo(e+Math.sin(f)*p,i-Math.cos(f)*p),f+=yf,s.lineTo(e+Math.sin(f)*p,i-Math.cos(f)*p),s.closePath();break;case"rectRounded":c=p*.516,l=p-c,r=Math.cos(f+On)*l,a=Math.sin(f+On)*l,s.arc(e-r,i-a,c,f-it,f-nt),s.arc(e+a,i-r,c,f-nt,f),s.arc(e+r,i+a,c,f,f+nt),s.arc(e-a,i+r,c,f+nt,f+it),s.closePath();break;case"rect":if(!u){l=Math.SQRT1_2*p,h=n?n/2:l,s.rect(e-h,i-l,2*h,2*l);break}f+=On;case"rectRot":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+a,i-r),s.lineTo(e+r,i+a),s.lineTo(e-a,i+r),s.closePath();break;case"crossRot":f+=On;case"cross":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r);break;case"star":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r),f+=On,r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r);break;case"line":r=n?n/2:Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a);break;case"dash":s.moveTo(e,i),s.lineTo(e+Math.cos(f)*p,i+Math.sin(f)*p);break}s.fill(),t.borderWidth>0&&s.stroke()}}function Pn(s,t,e){return e=e||.5,!t||s&&s.x>t.left-e&&s.x<t.right+e&&s.y>t.top-e&&s.y<t.bottom+e}function qr(s,t){s.save(),s.beginPath(),s.rect(t.left,t.top,t.right-t.left,t.bottom-t.top),s.clip()}function Zr(s){s.restore()}function dI(s,t,e,i,n){if(!t)return s.lineTo(e.x,e.y);if(n==="middle"){const o=(t.x+e.x)/2;s.lineTo(o,t.y),s.lineTo(o,e.y)}else n==="after"!=!!i?s.lineTo(t.x,e.y):s.lineTo(e.x,t.y);s.lineTo(e.x,e.y)}function uI(s,t,e,i){if(!t)return s.lineTo(e.x,e.y);s.bezierCurveTo(i?t.cp1x:t.cp2x,i?t.cp1y:t.cp2y,i?e.cp2x:e.cp1x,i?e.cp2y:e.cp1y,e.x,e.y)}function Li(s,t,e,i,n,o={}){const r=Q(t)?t:[t],a=o.strokeWidth>0&&o.strokeColor!=="";let l,c;for(s.save(),s.font=n.string,pI(s,o),l=0;l<r.length;++l)c=r[l],a&&(o.strokeColor&&(s.strokeStyle=o.strokeColor),H(o.strokeWidth)||(s.lineWidth=o.strokeWidth),s.strokeText(c,e,i,o.maxWidth)),s.fillText(c,e,i,o.maxWidth),fI(s,e,i,c,o),i+=n.lineHeight;s.restore()}function pI(s,t){t.translation&&s.translate(t.translation[0],t.translation[1]),H(t.rotation)||s.rotate(t.rotation),t.color&&(s.fillStyle=t.color),t.textAlign&&(s.textAlign=t.textAlign),t.textBaseline&&(s.textBaseline=t.textBaseline)}function fI(s,t,e,i,n){if(n.strikethrough||n.underline){const o=s.measureText(i),r=t-o.actualBoundingBoxLeft,a=t+o.actualBoundingBoxRight,l=e-o.actualBoundingBoxAscent,c=e+o.actualBoundingBoxDescent,h=n.strikethrough?(l+c)/2:c;s.strokeStyle=s.fillStyle,s.beginPath(),s.lineWidth=n.decorationWidth||2,s.moveTo(r,h),s.lineTo(a,h),s.stroke()}}function Nn(s,t){const{x:e,y:i,w:n,h:o,radius:r}=t;s.arc(e+r.topLeft,i+r.topLeft,r.topLeft,-nt,it,!0),s.lineTo(e,i+o-r.bottomLeft),s.arc(e+r.bottomLeft,i+o-r.bottomLeft,r.bottomLeft,it,nt,!0),s.lineTo(e+n-r.bottomRight,i+o),s.arc(e+n-r.bottomRight,i+o-r.bottomRight,r.bottomRight,nt,0,!0),s.lineTo(e+n,i+r.topRight),s.arc(e+n-r.topRight,i+r.topRight,r.topRight,0,-nt,!0),s.lineTo(e+r.topLeft,i)}const _I=new RegExp(/^(normal|(\d+(?:\.\d+)?)(px|em|%)?)$/),gI=new RegExp(/^(normal|italic|initial|inherit|unset|(oblique( -?[0-9]?[0-9]deg)?))$/);function mI(s,t){const e=(""+s).match(_I);if(!e||e[1]==="normal")return t*1.2;switch(s=+e[2],e[3]){case"px":return s;case"%":s/=100;break}return t*s}const bI=s=>+s||0;function Ic(s,t){const e={},i=V(t),n=i?Object.keys(t):t,o=V(s)?i?r=>B(s[r],s[t[r]]):r=>s[r]:()=>s;for(const r of n)e[r]=bI(o(r));return e}function Kf(s){return Ic(s,{top:"y",right:"x",bottom:"y",left:"x"})}function $i(s){return Ic(s,["topLeft","topRight","bottomLeft","bottomRight"])}function pt(s){const t=Kf(s);return t.width=t.left+t.right,t.height=t.top+t.bottom,t}function lt(s,t){s=s||{},t=t||F.font;let e=B(s.size,t.size);typeof e=="string"&&(e=parseInt(e,10));let i=B(s.style,t.style);i&&!(""+i).match(gI)&&(console.warn('Invalid font style specified: "'+i+'"'),i="");const n={family:B(s.family,t.family),lineHeight:mI(B(s.lineHeight,t.lineHeight),e),size:e,style:i,weight:B(s.weight,t.weight),string:""};return n.string=cI(n),n}function tt(s,t,e,i){let n=!0,o,r,a;for(o=0,r=s.length;o<r;++o)if(a=s[o],a!==void 0&&(t!==void 0&&typeof a=="function"&&(a=a(t),n=!1),e!==void 0&&Q(a)&&(a=a[e%a.length],n=!1),a!==void 0))return i&&!n&&(i.cacheable=!1),a}function vI(s,t,e){const{min:i,max:n}=s,o=gf(t,(n-i)/2),r=(a,l)=>e&&a===0?0:a+l;return{min:r(i,-Math.abs(o)),max:r(n,o)}}function ni(s,t){return Object.assign(Object.create(s),t)}function Dc(s,t=[""],e=s,i,n=()=>s[0]){jt(i)||(i=Zf("_fallback",s));const o={[Symbol.toStringTag]:"Object",_cacheable:!0,_scopes:s,_rootScopes:e,_fallback:i,_getTarget:n,override:r=>Dc([r,...s],t,e,i)};return new Proxy(o,{deleteProperty(r,a){return delete r[a],delete r._keys,delete s[0][a],!0},get(r,a){return Xf(r,a,()=>kI(a,t,s,r))},getOwnPropertyDescriptor(r,a){return Reflect.getOwnPropertyDescriptor(r._scopes[0],a)},getPrototypeOf(){return Reflect.getPrototypeOf(s[0])},has(r,a){return Qf(r).includes(a)},ownKeys(r){return Qf(r)},set(r,a,l){const c=r._storage||(r._storage=n());return r[a]=c[a]=l,delete r._keys,!0}})}function ks(s,t,e,i){const n={_cacheable:!1,_proxy:s,_context:t,_subProxy:e,_stack:new Set,_descriptors:Uf(s,i),setContext:o=>ks(s,o,e,i),override:o=>ks(s.override(o),t,e,i)};return new Proxy(n,{deleteProperty(o,r){return delete o[r],delete s[r],!0},get(o,r,a){return Xf(o,r,()=>TI(o,r,a))},getOwnPropertyDescriptor(o,r){return o._descriptors.allKeys?Reflect.has(s,r)?{enumerable:!0,configurable:!0}:void 0:Reflect.getOwnPropertyDescriptor(s,r)},getPrototypeOf(){return Reflect.getPrototypeOf(s)},has(o,r){return Reflect.has(s,r)},ownKeys(){return Reflect.ownKeys(s)},set(o,r,a){return s[r]=a,delete o[r],!0}})}function Uf(s,t={scriptable:!0,indexable:!0}){const{_scriptable:e=t.scriptable,_indexable:i=t.indexable,_allKeys:n=t.allKeys}=s;return{allKeys:n,scriptable:e,indexable:i,isScriptable:ei(e)?e:()=>e,isIndexable:ei(i)?i:()=>i}}const yI=(s,t)=>s?s+gc(t):t,Mc=(s,t)=>V(t)&&s!=="adapters"&&(Object.getPrototypeOf(t)===null||t.constructor===Object);function Xf(s,t,e){if(Object.prototype.hasOwnProperty.call(s,t))return s[t];const i=e();return s[t]=i,i}function TI(s,t,e){const{_proxy:i,_context:n,_subProxy:o,_descriptors:r}=s;let a=i[t];return ei(a)&&r.isScriptable(t)&&(a=EI(t,a,s,e)),Q(a)&&a.length&&(a=xI(t,a,s,r.isIndexable)),Mc(t,a)&&(a=ks(a,n,o&&o[t],r)),a}function EI(s,t,e,i){const{_proxy:n,_context:o,_subProxy:r,_stack:a}=e;if(a.has(s))throw new Error("Recursion detected: "+Array.from(a).join("->")+"->"+s);return a.add(s),t=t(o,r||i),a.delete(s),Mc(s,t)&&(t=Lc(n._scopes,n,s,t)),t}function xI(s,t,e,i){const{_proxy:n,_context:o,_subProxy:r,_descriptors:a}=e;if(jt(o.index)&&i(s))t=t[o.index%t.length];else if(V(t[0])){const l=t,c=n._scopes.filter(h=>h!==l);t=[];for(const h of l){const d=Lc(c,n,s,h);t.push(ks(d,o,r&&r[s],a))}}return t}function Gf(s,t,e){return ei(s)?s(t,e):s}const CI=(s,t)=>s===!0?t:typeof s=="string"?ti(t,s):void 0;function AI(s,t,e,i,n){for(const o of t){const r=CI(e,o);if(r){s.add(r);const a=Gf(r._fallback,e,n);if(jt(a)&&a!==e&&a!==i)return a}else if(r===!1&&jt(i)&&e!==i)return null}return!1}function Lc(s,t,e,i){const n=t._rootScopes,o=Gf(t._fallback,e,i),r=[...s,...n],a=new Set;a.add(i);let l=qf(a,r,e,o||e,i);return l===null||jt(o)&&o!==e&&(l=qf(a,r,o,l,i),l===null)?!1:Dc(Array.from(a),[""],n,o,()=>wI(t,e,i))}function qf(s,t,e,i,n){for(;e;)e=AI(s,t,e,i,n);return e}function wI(s,t,e){const i=s._getTarget();t in i||(i[t]={});const n=i[t];return Q(n)&&V(e)?e:n}function kI(s,t,e,i){let n;for(const o of t)if(n=Zf(yI(o,s),e),jt(n))return Mc(s,n)?Lc(e,i,s,n):n}function Zf(s,t){for(const e of t){if(!e)continue;const i=e[s];if(jt(i))return i}}function Qf(s){let t=s._keys;return t||(t=s._keys=SI(s._scopes)),t}function SI(s){const t=new Set;for(const e of s)for(const i of Object.keys(e).filter(n=>!n.startsWith("_")))t.add(i);return Array.from(t)}function Jf(s,t,e,i){const{iScale:n}=s,{key:o="r"}=this._parsing,r=new Array(i);let a,l,c,h;for(a=0,l=i;a<l;++a)c=a+e,h=t[c],r[a]={r:n.parse(ti(h,o),c)};return r}const OI=Number.EPSILON||1e-14,Ss=(s,t)=>t<s.length&&!s[t].skip&&s[t],t_=s=>s==="x"?"y":"x";function II(s,t,e,i){const n=s.skip?t:s,o=t,r=e.skip?t:e,a=bc(o,n),l=bc(r,o);let c=a/(a+l),h=l/(a+l);c=isNaN(c)?0:c,h=isNaN(h)?0:h;const d=i*c,u=i*h;return{previous:{x:o.x-d*(r.x-n.x),y:o.y-d*(r.y-n.y)},next:{x:o.x+u*(r.x-n.x),y:o.y+u*(r.y-n.y)}}}function DI(s,t,e){const i=s.length;let n,o,r,a,l,c=Ss(s,0);for(let h=0;h<i-1;++h)if(l=c,c=Ss(s,h+1),!(!l||!c)){if(In(t[h],0,OI)){e[h]=e[h+1]=0;continue}n=e[h]/t[h],o=e[h+1]/t[h],a=Math.pow(n,2)+Math.pow(o,2),!(a<=9)&&(r=3/Math.sqrt(a),e[h]=n*r*t[h],e[h+1]=o*r*t[h])}}function MI(s,t,e="x"){const i=t_(e),n=s.length;let o,r,a,l=Ss(s,0);for(let c=0;c<n;++c){if(r=a,a=l,l=Ss(s,c+1),!a)continue;const h=a[e],d=a[i];r&&(o=(h-r[e])/3,a[`cp1${e}`]=h-o,a[`cp1${i}`]=d-o*t[c]),l&&(o=(l[e]-h)/3,a[`cp2${e}`]=h+o,a[`cp2${i}`]=d+o*t[c])}}function LI(s,t="x"){const e=t_(t),i=s.length,n=Array(i).fill(0),o=Array(i);let r,a,l,c=Ss(s,0);for(r=0;r<i;++r)if(a=l,l=c,c=Ss(s,r+1),!!l){if(c){const h=c[t]-l[t];n[r]=h!==0?(c[e]-l[e])/h:0}o[r]=a?c?Ee(n[r-1])!==Ee(n[r])?0:(n[r-1]+n[r])/2:n[r-1]:n[r]}DI(s,n,o),MI(s,o,t)}function Qr(s,t,e){return Math.max(Math.min(s,e),t)}function $I(s,t){let e,i,n,o,r,a=Pn(s[0],t);for(e=0,i=s.length;e<i;++e)r=o,o=a,a=e<i-1&&Pn(s[e+1],t),o&&(n=s[e],r&&(n.cp1x=Qr(n.cp1x,t.left,t.right),n.cp1y=Qr(n.cp1y,t.top,t.bottom)),a&&(n.cp2x=Qr(n.cp2x,t.left,t.right),n.cp2y=Qr(n.cp2y,t.top,t.bottom)))}function RI(s,t,e,i,n){let o,r,a,l;if(t.spanGaps&&(s=s.filter(c=>!c.skip)),t.cubicInterpolationMode==="monotone")LI(s,n);else{let c=i?s[s.length-1]:s[0];for(o=0,r=s.length;o<r;++o)a=s[o],l=II(c,a,s[Math.min(o+1,r-(i?0:1))%r],t.tension),a.cp1x=l.previous.x,a.cp1y=l.previous.y,a.cp2x=l.next.x,a.cp2y=l.next.y,c=a}t.capBezierPoints&&$I(s,e)}function e_(){return typeof window<"u"&&typeof document<"u"}function $c(s){let t=s.parentNode;return t&&t.toString()==="[object ShadowRoot]"&&(t=t.host),t}function Jr(s,t,e){let i;return typeof s=="string"?(i=parseInt(s,10),s.indexOf("%")!==-1&&(i=i/100*t.parentNode[e])):i=s,i}const ta=s=>window.getComputedStyle(s,null);function PI(s,t){return ta(s).getPropertyValue(t)}const NI=["top","right","bottom","left"];function Ri(s,t,e){const i={};e=e?"-"+e:"";for(let n=0;n<4;n++){const o=NI[n];i[o]=parseFloat(s[t+"-"+o+e])||0}return i.width=i.left+i.right,i.height=i.top+i.bottom,i}const BI=(s,t,e)=>(s>0||t>0)&&(!e||!e.shadowRoot);function HI(s,t){const e=s.touches,i=e&&e.length?e[0]:s,{offsetX:n,offsetY:o}=i;let r=!1,a,l;if(BI(n,o,s.target))a=n,l=o;else{const c=t.getBoundingClientRect();a=i.clientX-c.left,l=i.clientY-c.top,r=!0}return{x:a,y:l,box:r}}function Pi(s,t){if("native"in s)return s;const{canvas:e,currentDevicePixelRatio:i}=t,n=ta(e),o=n.boxSizing==="border-box",r=Ri(n,"padding"),a=Ri(n,"border","width"),{x:l,y:c,box:h}=HI(s,e),d=r.left+(h&&a.left),u=r.top+(h&&a.top);let{width:p,height:f}=t;return o&&(p-=r.width+a.width,f-=r.height+a.height),{x:Math.round((l-d)/p*e.width/i),y:Math.round((c-u)/f*e.height/i)}}function VI(s,t,e){let i,n;if(t===void 0||e===void 0){const o=$c(s);if(!o)t=s.clientWidth,e=s.clientHeight;else{const r=o.getBoundingClientRect(),a=ta(o),l=Ri(a,"border","width"),c=Ri(a,"padding");t=r.width-c.width-l.width,e=r.height-c.height-l.height,i=Jr(a.maxWidth,o,"clientWidth"),n=Jr(a.maxHeight,o,"clientHeight")}}return{width:t,height:e,maxWidth:i||zr,maxHeight:n||zr}}const Rc=s=>Math.round(s*10)/10;function FI(s,t,e,i){const n=ta(s),o=Ri(n,"margin"),r=Jr(n.maxWidth,s,"clientWidth")||zr,a=Jr(n.maxHeight,s,"clientHeight")||zr,l=VI(s,t,e);let{width:c,height:h}=l;if(n.boxSizing==="content-box"){const d=Ri(n,"border","width"),u=Ri(n,"padding");c-=u.width+d.width,h-=u.height+d.height}return c=Math.max(0,c-o.width),h=Math.max(0,i?Math.floor(c/i):h-o.height),c=Rc(Math.min(c,r,l.maxWidth)),h=Rc(Math.min(h,a,l.maxHeight)),c&&!h&&(h=Rc(c/2)),{width:c,height:h}}function i_(s,t,e){const i=t||1,n=Math.floor(s.height*i),o=Math.floor(s.width*i);s.height=n/i,s.width=o/i;const r=s.canvas;return r.style&&(e||!r.style.height&&!r.style.width)&&(r.style.height=`${s.height}px`,r.style.width=`${s.width}px`),s.currentDevicePixelRatio!==i||r.height!==n||r.width!==o?(s.currentDevicePixelRatio=i,r.height=n,r.width=o,s.ctx.setTransform(i,0,0,i,0,0),!0):!1}const WI=function(){let s=!1;try{const t={get passive(){return s=!0,!1}};window.addEventListener("test",null,t),window.removeEventListener("test",null,t)}catch{}return s}();function s_(s,t){const e=PI(s,t),i=e&&e.match(/^(\d+)(\.\d+)?px$/);return i?+i[1]:void 0}function Ni(s,t,e,i){return{x:s.x+e*(t.x-s.x),y:s.y+e*(t.y-s.y)}}function zI(s,t,e,i){return{x:s.x+e*(t.x-s.x),y:i==="middle"?e<.5?s.y:t.y:i==="after"?e<1?s.y:t.y:e>0?t.y:s.y}}function jI(s,t,e,i){const n={x:s.cp2x,y:s.cp2y},o={x:t.cp1x,y:t.cp1y},r=Ni(s,n,e),a=Ni(n,o,e),l=Ni(o,t,e),c=Ni(r,a,e),h=Ni(a,l,e);return Ni(c,h,e)}const n_=new Map;function YI(s,t){t=t||{};const e=s+JSON.stringify(t);let i=n_.get(e);return i||(i=new Intl.NumberFormat(s,t),n_.set(e,i)),i}function Bn(s,t,e){return YI(t,e).format(s)}const KI=function(s,t){return{x(e){return s+s+t-e},setWidth(e){t=e},textAlign(e){return e==="center"?e:e==="right"?"left":"right"},xPlus(e,i){return e-i},leftForLtr(e,i){return e-i}}},UI=function(){return{x(s){return s},setWidth(s){},textAlign(s){return s},xPlus(s,t){return s+t},leftForLtr(s,t){return s}}};function Os(s,t,e){return s?KI(t,e):UI()}function o_(s,t){let e,i;(t==="ltr"||t==="rtl")&&(e=s.canvas.style,i=[e.getPropertyValue("direction"),e.getPropertyPriority("direction")],e.setProperty("direction",t,"important"),s.prevTextDirection=i)}function r_(s,t){t!==void 0&&(delete s.prevTextDirection,s.canvas.style.setProperty("direction",t[0],t[1]))}function a_(s){return s==="angle"?{between:Dn,compare:LO,normalize:Vt}:{between:Ie,compare:(t,e)=>t-e,normalize:t=>t}}function l_({start:s,end:t,count:e,loop:i,style:n}){return{start:s%e,end:t%e,loop:i&&(t-s+1)%e===0,style:n}}function XI(s,t,e){const{property:i,start:n,end:o}=e,{between:r,normalize:a}=a_(i),l=t.length;let{start:c,end:h,loop:d}=s,u,p;if(d){for(c+=l,h+=l,u=0,p=l;u<p&&r(a(t[c%l][i]),n,o);++u)c--,h--;c%=l,h%=l}return h<c&&(h+=l),{start:c,end:h,loop:d,style:s.style}}function c_(s,t,e){if(!e)return[s];const{property:i,start:n,end:o}=e,r=t.length,{compare:a,between:l,normalize:c}=a_(i),{start:h,end:d,loop:u,style:p}=XI(s,t,e),f=[];let b=!1,v=null,y,T,x;const E=()=>l(n,x,y)&&a(n,x)!==0,C=()=>a(o,y)===0||l(o,x,y),A=()=>b||E(),w=()=>!b||C();for(let S=h,k=h;S<=d;++S)T=t[S%r],!T.skip&&(y=c(T[i]),y!==x&&(b=l(y,n,o),v===null&&A()&&(v=a(y,n)===0?S:k),v!==null&&w()&&(f.push(l_({start:v,end:S,loop:u,count:r,style:p})),v=null),k=S,x=y));return v!==null&&f.push(l_({start:v,end:d,loop:u,count:r,style:p})),f}function h_(s,t){const e=[],i=s.segments;for(let n=0;n<i.length;n++){const o=c_(i[n],s.points,t);o.length&&e.push(...o)}return e}function GI(s,t,e,i){let n=0,o=t-1;if(e&&!i)for(;n<t&&!s[n].skip;)n++;for(;n<t&&s[n].skip;)n++;for(n%=t,e&&(o+=n);o>n&&s[o%t].skip;)o--;return o%=t,{start:n,end:o}}function qI(s,t,e,i){const n=s.length,o=[];let r=t,a=s[t],l;for(l=t+1;l<=e;++l){const c=s[l%n];c.skip||c.stop?a.skip||(i=!1,o.push({start:t%n,end:(l-1)%n,loop:i}),t=r=c.stop?l:null):(r=l,a.skip&&(t=l)),a=c}return r!==null&&o.push({start:t%n,end:r%n,loop:i}),o}function ZI(s,t){const e=s.points,i=s.options.spanGaps,n=e.length;if(!n)return[];const o=!!s._loop,{start:r,end:a}=GI(e,n,o,i);if(i===!0)return d_(s,[{start:r,end:a,loop:o}],e,t);const l=a<r?a+n:a,c=!!s._fullLoop&&r===0&&a===n-1;return d_(s,qI(e,r,l,c),e,t)}function d_(s,t,e,i){return!i||!i.setContext||!e?t:QI(s,t,e,i)}function QI(s,t,e,i){const n=s._chart.getContext(),o=u_(s.options),{_datasetIndex:r,options:{spanGaps:a}}=s,l=e.length,c=[];let h=o,d=t[0].start,u=d;function p(f,b,v,y){const T=a?-1:1;if(f!==b){for(f+=l;e[f%l].skip;)f-=T;for(;e[b%l].skip;)b+=T;f%l!==b%l&&(c.push({start:f%l,end:b%l,loop:v,style:y}),h=y,d=b%l)}}for(const f of t){d=a?d:f.start;let b=e[d%l],v;for(u=d+1;u<=f.end;u++){const y=e[u%l];v=u_(i.setContext(ni(n,{type:"segment",p0:b,p1:y,p0DataIndex:(u-1)%l,p1DataIndex:u%l,datasetIndex:r}))),JI(v,h)&&p(d,u-1,f.loop,h),b=y,h=v}d<u-1&&p(d,u-1,f.loop,h)}return c}function u_(s){return{backgroundColor:s.backgroundColor,borderCapStyle:s.borderCapStyle,borderDash:s.borderDash,borderDashOffset:s.borderDashOffset,borderJoinStyle:s.borderJoinStyle,borderWidth:s.borderWidth,borderColor:s.borderColor}}function JI(s,t){return t&&JSON.stringify(s)!==JSON.stringify(t)}/*!
+ * Chart.js v3.9.1
+ * https://www.chartjs.org
+ * (c) 2022 Chart.js Contributors
+ * Released under the MIT License
+ */class tD{constructor(){this._request=null,this._charts=new Map,this._running=!1,this._lastDate=void 0}_notify(t,e,i,n){const o=e.listeners[n],r=e.duration;o.forEach(a=>a({chart:t,initial:e.initial,numSteps:r,currentStep:Math.min(i-e.start,r)}))}_refresh(){this._request||(this._running=!0,this._request=Sf.call(window,()=>{this._update(),this._request=null,this._running&&this._refresh()}))}_update(t=Date.now()){let e=0;this._charts.forEach((i,n)=>{if(!i.running||!i.items.length)return;const o=i.items;let r=o.length-1,a=!1,l;for(;r>=0;--r)l=o[r],l._active?(l._total>i.duration&&(i.duration=l._total),l.tick(t),a=!0):(o[r]=o[o.length-1],o.pop());a&&(n.draw(),this._notify(n,i,t,"progress")),o.length||(i.running=!1,this._notify(n,i,t,"complete"),i.initial=!1),e+=o.length}),this._lastDate=t,e===0&&(this._running=!1)}_getAnims(t){const e=this._charts;let i=e.get(t);return i||(i={running:!1,initial:!0,items:[],listeners:{complete:[],progress:[]}},e.set(t,i)),i}listen(t,e,i){this._getAnims(t).listeners[e].push(i)}add(t,e){!e||!e.length||this._getAnims(t).items.push(...e)}has(t){return this._getAnims(t).items.length>0}start(t){const e=this._charts.get(t);e&&(e.running=!0,e.start=Date.now(),e.duration=e.items.reduce((i,n)=>Math.max(i,n._duration),0),this._refresh())}running(t){if(!this._running)return!1;const e=this._charts.get(t);return!(!e||!e.running||!e.items.length)}stop(t){const e=this._charts.get(t);if(!e||!e.items.length)return;const i=e.items;let n=i.length-1;for(;n>=0;--n)i[n].cancel();e.items=[],this._notify(t,e,Date.now(),"complete")}remove(t){return this._charts.delete(t)}}var xe=new tD;const p_="transparent",eD={boolean(s,t,e){return e>.5?t:s},color(s,t,e){const i=zf(s||p_),n=i.valid&&zf(t||p_);return n&&n.valid?n.mix(i,e).hexString():t},number(s,t,e){return s+(t-s)*e}};class f_{constructor(t,e,i,n){const o=e[i];n=tt([t.to,n,o,t.from]);const r=tt([t.from,o,n]);this._active=!0,this._fn=t.fn||eD[t.type||typeof r],this._easing=Mn[t.easing]||Mn.linear,this._start=Math.floor(Date.now()+(t.delay||0)),this._duration=this._total=Math.floor(t.duration),this._loop=!!t.loop,this._target=e,this._prop=i,this._from=r,this._to=n,this._promises=void 0}active(){return this._active}update(t,e,i){if(this._active){this._notify(!1);const n=this._target[this._prop],o=i-this._start,r=this._duration-o;this._start=i,this._duration=Math.floor(Math.max(r,t.duration)),this._total+=o,this._loop=!!t.loop,this._to=tt([t.to,e,n,t.from]),this._from=tt([t.from,n,e])}}cancel(){this._active&&(this.tick(Date.now()),this._active=!1,this._notify(!1))}tick(t){const e=t-this._start,i=this._duration,n=this._prop,o=this._from,r=this._loop,a=this._to;let l;if(this._active=o!==a&&(r||e<i),!this._active){this._target[n]=a,this._notify(!0);return}if(e<0){this._target[n]=o;return}l=e/i%2,l=r&&l>1?2-l:l,l=this._easing(Math.min(1,Math.max(0,l))),this._target[n]=this._fn(o,a,l)}wait(){const t=this._promises||(this._promises=[]);return new Promise((e,i)=>{t.push({res:e,rej:i})})}_notify(t){const e=t?"res":"rej",i=this._promises||[];for(let n=0;n<i.length;n++)i[n][e]()}}const iD=["x","y","borderWidth","radius","tension"],sD=["color","borderColor","backgroundColor"];F.set("animation",{delay:void 0,duration:1e3,easing:"easeOutQuart",fn:void 0,from:void 0,loop:void 0,to:void 0,type:void 0});const nD=Object.keys(F.animation);F.describe("animation",{_fallback:!1,_indexable:!1,_scriptable:s=>s!=="onProgress"&&s!=="onComplete"&&s!=="fn"}),F.set("animations",{colors:{type:"color",properties:sD},numbers:{type:"number",properties:iD}}),F.describe("animations",{_fallback:"animation"}),F.set("transitions",{active:{animation:{duration:400}},resize:{animation:{duration:0}},show:{animations:{colors:{from:"transparent"},visible:{type:"boolean",duration:0}}},hide:{animations:{colors:{to:"transparent"},visible:{type:"boolean",easing:"linear",fn:s=>s|0}}}});class Pc{constructor(t,e){this._chart=t,this._properties=new Map,this.configure(e)}configure(t){if(!V(t))return;const e=this._properties;Object.getOwnPropertyNames(t).forEach(i=>{const n=t[i];if(!V(n))return;const o={};for(const r of nD)o[r]=n[r];(Q(n.properties)&&n.properties||[i]).forEach(r=>{(r===i||!e.has(r))&&e.set(r,o)})})}_animateOptions(t,e){const i=e.options,n=rD(t,i);if(!n)return[];const o=this._createAnimations(n,i);return i.$shared&&oD(t.options.$animations,i).then(()=>{t.options=i},()=>{}),o}_createAnimations(t,e){const i=this._properties,n=[],o=t.$animations||(t.$animations={}),r=Object.keys(e),a=Date.now();let l;for(l=r.length-1;l>=0;--l){const c=r[l];if(c.charAt(0)==="$")continue;if(c==="options"){n.push(...this._animateOptions(t,e));continue}const h=e[c];let d=o[c];const u=i.get(c);if(d)if(u&&d.active()){d.update(u,h,a);continue}else d.cancel();if(!u||!u.duration){t[c]=h;continue}o[c]=d=new f_(u,t,c,h),n.push(d)}return n}update(t,e){if(this._properties.size===0){Object.assign(t,e);return}const i=this._createAnimations(t,e);if(i.length)return xe.add(this._chart,i),!0}}function oD(s,t){const e=[],i=Object.keys(t);for(let n=0;n<i.length;n++){const o=s[i[n]];o&&o.active()&&e.push(o.wait())}return Promise.all(e)}function rD(s,t){if(!t)return;let e=s.options;if(!e){s.options=t;return}return e.$shared&&(s.options=e=Object.assign({},e,{$shared:!1,$animations:{}})),e}function __(s,t){const e=s&&s.options||{},i=e.reverse,n=e.min===void 0?t:0,o=e.max===void 0?t:0;return{start:i?o:n,end:i?n:o}}function aD(s,t,e){if(e===!1)return!1;const i=__(s,e),n=__(t,e);return{top:n.end,right:i.end,bottom:n.start,left:i.start}}function lD(s){let t,e,i,n;return V(s)?(t=s.top,e=s.right,i=s.bottom,n=s.left):t=e=i=n=s,{top:t,right:e,bottom:i,left:n,disabled:s===!1}}function g_(s,t){const e=[],i=s._getSortedDatasetMetas(t);let n,o;for(n=0,o=i.length;n<o;++n)e.push(i[n].index);return e}function m_(s,t,e,i={}){const n=s.keys,o=i.mode==="single";let r,a,l,c;if(t!==null){for(r=0,a=n.length;r<a;++r){if(l=+n[r],l===e){if(i.all)continue;break}c=s.values[l],rt(c)&&(o||t===0||Ee(t)===Ee(c))&&(t+=c)}return t}}function cD(s){const t=Object.keys(s),e=new Array(t.length);let i,n,o;for(i=0,n=t.length;i<n;++i)o=t[i],e[i]={x:o,y:s[o]};return e}function b_(s,t){const e=s&&s.options.stacked;return e||e===void 0&&t.stack!==void 0}function hD(s,t,e){return`${s.id}.${t.id}.${e.stack||e.type}`}function dD(s){const{min:t,max:e,minDefined:i,maxDefined:n}=s.getUserBounds();return{min:i?t:Number.NEGATIVE_INFINITY,max:n?e:Number.POSITIVE_INFINITY}}function uD(s,t,e){const i=s[t]||(s[t]={});return i[e]||(i[e]={})}function v_(s,t,e,i){for(const n of t.getMatchingVisibleMetas(i).reverse()){const o=s[n.index];if(e&&o>0||!e&&o<0)return n.index}return null}function y_(s,t){const{chart:e,_cachedMeta:i}=s,n=e._stacks||(e._stacks={}),{iScale:o,vScale:r,index:a}=i,l=o.axis,c=r.axis,h=hD(o,r,i),d=t.length;let u;for(let p=0;p<d;++p){const f=t[p],{[l]:b,[c]:v}=f,y=f._stacks||(f._stacks={});u=y[c]=uD(n,h,b),u[a]=v,u._top=v_(u,r,!0,i.type),u._bottom=v_(u,r,!1,i.type)}}function Nc(s,t){const e=s.scales;return Object.keys(e).filter(i=>e[i].axis===t).shift()}function pD(s,t){return ni(s,{active:!1,dataset:void 0,datasetIndex:t,index:t,mode:"default",type:"dataset"})}function fD(s,t,e){return ni(s,{active:!1,dataIndex:t,parsed:void 0,raw:void 0,element:e,index:t,mode:"default",type:"data"})}function Hn(s,t){const e=s.controller.index,i=s.vScale&&s.vScale.axis;if(i){t=t||s._parsed;for(const n of t){const o=n._stacks;if(!o||o[i]===void 0||o[i][e]===void 0)return;delete o[i][e]}}}const Bc=s=>s==="reset"||s==="none",T_=(s,t)=>t?s:Object.assign({},s),_D=(s,t,e)=>s&&!t.hidden&&t._stacked&&{keys:g_(e,!0),values:null};class Ut{constructor(t,e){this.chart=t,this._ctx=t.ctx,this.index=e,this._cachedDataOpts={},this._cachedMeta=this.getMeta(),this._type=this._cachedMeta.type,this.options=void 0,this._parsing=!1,this._data=void 0,this._objectData=void 0,this._sharedOptions=void 0,this._drawStart=void 0,this._drawCount=void 0,this.enableOptionSharing=!1,this.supportsDecimation=!1,this.$context=void 0,this._syncList=[],this.initialize()}initialize(){const t=this._cachedMeta;this.configure(),this.linkScales(),t._stacked=b_(t.vScale,t),this.addElements()}updateIndex(t){this.index!==t&&Hn(this._cachedMeta),this.index=t}linkScales(){const t=this.chart,e=this._cachedMeta,i=this.getDataset(),n=(d,u,p,f)=>d==="x"?u:d==="r"?f:p,o=e.xAxisID=B(i.xAxisID,Nc(t,"x")),r=e.yAxisID=B(i.yAxisID,Nc(t,"y")),a=e.rAxisID=B(i.rAxisID,Nc(t,"r")),l=e.indexAxis,c=e.iAxisID=n(l,o,r,a),h=e.vAxisID=n(l,r,o,a);e.xScale=this.getScaleForId(o),e.yScale=this.getScaleForId(r),e.rScale=this.getScaleForId(a),e.iScale=this.getScaleForId(c),e.vScale=this.getScaleForId(h)}getDataset(){return this.chart.data.datasets[this.index]}getMeta(){return this.chart.getDatasetMeta(this.index)}getScaleForId(t){return this.chart.scales[t]}_getOtherScale(t){const e=this._cachedMeta;return t===e.iScale?e.vScale:e.iScale}reset(){this._update("reset")}_destroy(){const t=this._cachedMeta;this._data&&wf(this._data,this),t._stacked&&Hn(t)}_dataCheck(){const t=this.getDataset(),e=t.data||(t.data=[]),i=this._data;if(V(e))this._data=cD(e);else if(i!==e){if(i){wf(i,this);const n=this._cachedMeta;Hn(n),n._parsed=[]}e&&Object.isExtensible(e)&&NO(e,this),this._syncList=[],this._data=e}}addElements(){const t=this._cachedMeta;this._dataCheck(),this.datasetElementType&&(t.dataset=new this.datasetElementType)}buildOrUpdateElements(t){const e=this._cachedMeta,i=this.getDataset();let n=!1;this._dataCheck();const o=e._stacked;e._stacked=b_(e.vScale,e),e.stack!==i.stack&&(n=!0,Hn(e),e.stack=i.stack),this._resyncElements(t),(n||o!==e._stacked)&&y_(this,e._parsed)}configure(){const t=this.chart.config,e=t.datasetScopeKeys(this._type),i=t.getOptionScopes(this.getDataset(),e,!0);this.options=t.createResolver(i,this.getContext()),this._parsing=this.options.parsing,this._cachedDataOpts={}}parse(t,e){const{_cachedMeta:i,_data:n}=this,{iScale:o,_stacked:r}=i,a=o.axis;let l=t===0&&e===n.length?!0:i._sorted,c=t>0&&i._parsed[t-1],h,d,u;if(this._parsing===!1)i._parsed=n,i._sorted=!0,u=n;else{Q(n[t])?u=this.parseArrayData(i,n,t,e):V(n[t])?u=this.parseObjectData(i,n,t,e):u=this.parsePrimitiveData(i,n,t,e);const p=()=>d[a]===null||c&&d[a]<c[a];for(h=0;h<e;++h)i._parsed[h+t]=d=u[h],l&&(p()&&(l=!1),c=d);i._sorted=l}r&&y_(this,u)}parsePrimitiveData(t,e,i,n){const{iScale:o,vScale:r}=t,a=o.axis,l=r.axis,c=o.getLabels(),h=o===r,d=new Array(n);let u,p,f;for(u=0,p=n;u<p;++u)f=u+i,d[u]={[a]:h||o.parse(c[f],f),[l]:r.parse(e[f],f)};return d}parseArrayData(t,e,i,n){const{xScale:o,yScale:r}=t,a=new Array(n);let l,c,h,d;for(l=0,c=n;l<c;++l)h=l+i,d=e[h],a[l]={x:o.parse(d[0],h),y:r.parse(d[1],h)};return a}parseObjectData(t,e,i,n){const{xScale:o,yScale:r}=t,{xAxisKey:a="x",yAxisKey:l="y"}=this._parsing,c=new Array(n);let h,d,u,p;for(h=0,d=n;h<d;++h)u=h+i,p=e[u],c[h]={x:o.parse(ti(p,a),u),y:r.parse(ti(p,l),u)};return c}getParsed(t){return this._cachedMeta._parsed[t]}getDataElement(t){return this._cachedMeta.data[t]}applyStack(t,e,i){const n=this.chart,o=this._cachedMeta,r=e[t.axis],a={keys:g_(n,!0),values:e._stacks[t.axis]};return m_(a,r,o.index,{mode:i})}updateRangeFromParsed(t,e,i,n){const o=i[e.axis];let r=o===null?NaN:o;const a=n&&i._stacks[e.axis];n&&a&&(n.values=a,r=m_(n,o,this._cachedMeta.index)),t.min=Math.min(t.min,r),t.max=Math.max(t.max,r)}getMinMax(t,e){const i=this._cachedMeta,n=i._parsed,o=i._sorted&&t===i.iScale,r=n.length,a=this._getOtherScale(t),l=_D(e,i,this.chart),c={min:Number.POSITIVE_INFINITY,max:Number.NEGATIVE_INFINITY},{min:h,max:d}=dD(a);let u,p;function f(){p=n[u];const b=p[a.axis];return!rt(p[t.axis])||h>b||d<b}for(u=0;u<r&&!(!f()&&(this.updateRangeFromParsed(c,t,p,l),o));++u);if(o){for(u=r-1;u>=0;--u)if(!f()){this.updateRangeFromParsed(c,t,p,l);break}}return c}getAllParsedValues(t){const e=this._cachedMeta._parsed,i=[];let n,o,r;for(n=0,o=e.length;n<o;++n)r=e[n][t.axis],rt(r)&&i.push(r);return i}getMaxOverflow(){return!1}getLabelAndValue(t){const e=this._cachedMeta,i=e.iScale,n=e.vScale,o=this.getParsed(t);return{label:i?""+i.getLabelForValue(o[i.axis]):"",value:n?""+n.getLabelForValue(o[n.axis]):""}}_update(t){const e=this._cachedMeta;this.update(t||"default"),e._clip=lD(B(this.options.clip,aD(e.xScale,e.yScale,this.getMaxOverflow())))}update(t){}draw(){const t=this._ctx,e=this.chart,i=this._cachedMeta,n=i.data||[],o=e.chartArea,r=[],a=this._drawStart||0,l=this._drawCount||n.length-a,c=this.options.drawActiveElementsOnTop;let h;for(i.dataset&&i.dataset.draw(t,o,a,l),h=a;h<a+l;++h){const d=n[h];d.hidden||(d.active&&c?r.push(d):d.draw(t,o))}for(h=0;h<r.length;++h)r[h].draw(t,o)}getStyle(t,e){const i=e?"active":"default";return t===void 0&&this._cachedMeta.dataset?this.resolveDatasetElementOptions(i):this.resolveDataElementOptions(t||0,i)}getContext(t,e,i){const n=this.getDataset();let o;if(t>=0&&t<this._cachedMeta.data.length){const r=this._cachedMeta.data[t];o=r.$context||(r.$context=fD(this.getContext(),t,r)),o.parsed=this.getParsed(t),o.raw=n.data[t],o.index=o.dataIndex=t}else o=this.$context||(this.$context=pD(this.chart.getContext(),this.index)),o.dataset=n,o.index=o.datasetIndex=this.index;return o.active=!!e,o.mode=i,o}resolveDatasetElementOptions(t){return this._resolveElementOptions(this.datasetElementType.id,t)}resolveDataElementOptions(t,e){return this._resolveElementOptions(this.dataElementType.id,e,t)}_resolveElementOptions(t,e="default",i){const n=e==="active",o=this._cachedDataOpts,r=t+"-"+e,a=o[r],l=this.enableOptionSharing&&jt(i);if(a)return T_(a,l);const c=this.chart.config,h=c.datasetElementScopeKeys(this._type,t),d=n?[`${t}Hover`,"hover",t,""]:[t,""],u=c.getOptionScopes(this.getDataset(),h),p=Object.keys(F.elements[t]),f=()=>this.getContext(i,n),b=c.resolveNamedOptions(u,p,f,d);return b.$shared&&(b.$shared=l,o[r]=Object.freeze(T_(b,l))),b}_resolveAnimations(t,e,i){const n=this.chart,o=this._cachedDataOpts,r=`animation-${e}`,a=o[r];if(a)return a;let l;if(n.options.animation!==!1){const h=this.chart.config,d=h.datasetAnimationScopeKeys(this._type,e),u=h.getOptionScopes(this.getDataset(),d);l=h.createResolver(u,this.getContext(t,i,e))}const c=new Pc(n,l&&l.animations);return l&&l._cacheable&&(o[r]=Object.freeze(c)),c}getSharedOptions(t){if(t.$shared)return this._sharedOptions||(this._sharedOptions=Object.assign({},t))}includeOptions(t,e){return!e||Bc(t)||this.chart._animationsDisabled}_getSharedOptions(t,e){const i=this.resolveDataElementOptions(t,e),n=this._sharedOptions,o=this.getSharedOptions(i),r=this.includeOptions(e,o)||o!==n;return this.updateSharedOptions(o,e,i),{sharedOptions:o,includeOptions:r}}updateElement(t,e,i,n){Bc(n)?Object.assign(t,i):this._resolveAnimations(e,n).update(t,i)}updateSharedOptions(t,e,i){t&&!Bc(e)&&this._resolveAnimations(void 0,e).update(t,i)}_setStyle(t,e,i,n){t.active=n;const o=this.getStyle(e,n);this._resolveAnimations(e,i,n).update(t,{options:!n&&this.getSharedOptions(o)||o})}removeHoverStyle(t,e,i){this._setStyle(t,i,"active",!1)}setHoverStyle(t,e,i){this._setStyle(t,i,"active",!0)}_removeDatasetHoverStyle(){const t=this._cachedMeta.dataset;t&&this._setStyle(t,void 0,"active",!1)}_setDatasetHoverStyle(){const t=this._cachedMeta.dataset;t&&this._setStyle(t,void 0,"active",!0)}_resyncElements(t){const e=this._data,i=this._cachedMeta.data;for(const[a,l,c]of this._syncList)this[a](l,c);this._syncList=[];const n=i.length,o=e.length,r=Math.min(o,n);r&&this.parse(0,r),o>n?this._insertElements(n,o-n,t):o<n&&this._removeElements(o,n-o)}_insertElements(t,e,i=!0){const n=this._cachedMeta,o=n.data,r=t+e;let a;const l=c=>{for(c.length+=e,a=c.length-1;a>=r;a--)c[a]=c[a-e]};for(l(o),a=t;a<r;++a)o[a]=new this.dataElementType;this._parsing&&l(n._parsed),this.parse(t,e),i&&this.updateElements(o,t,e,"reset")}updateElements(t,e,i,n){}_removeElements(t,e){const i=this._cachedMeta;if(this._parsing){const n=i._parsed.splice(t,e);i._stacked&&Hn(i,n)}i.data.splice(t,e)}_sync(t){if(this._parsing)this._syncList.push(t);else{const[e,i,n]=t;this[e](i,n)}this.chart._dataChanges.push([this.index,...t])}_onDataPush(){const t=arguments.length;this._sync(["_insertElements",this.getDataset().data.length-t,t])}_onDataPop(){this._sync(["_removeElements",this._cachedMeta.data.length-1,1])}_onDataShift(){this._sync(["_removeElements",0,1])}_onDataSplice(t,e){e&&this._sync(["_removeElements",t,e]);const i=arguments.length-2;i&&this._sync(["_insertElements",t,i])}_onDataUnshift(){this._sync(["_insertElements",0,arguments.length])}}Ut.defaults={},Ut.prototype.datasetElementType=null,Ut.prototype.dataElementType=null;function gD(s,t){if(!s._cache.$bar){const e=s.getMatchingVisibleMetas(t);let i=[];for(let n=0,o=e.length;n<o;n++)i=i.concat(e[n].controller.getAllParsedValues(s));s._cache.$bar=kf(i.sort((n,o)=>n-o))}return s._cache.$bar}function mD(s){const t=s.iScale,e=gD(t,s.type);let i=t._length,n,o,r,a;const l=()=>{r===32767||r===-32768||(jt(a)&&(i=Math.min(i,Math.abs(r-a)||i)),a=r)};for(n=0,o=e.length;n<o;++n)r=t.getPixelForValue(e[n]),l();for(a=void 0,n=0,o=t.ticks.length;n<o;++n)r=t.getPixelForTick(n),l();return i}function bD(s,t,e,i){const n=e.barThickness;let o,r;return H(n)?(o=t.min*e.categoryPercentage,r=e.barPercentage):(o=n*i,r=1),{chunk:o/i,ratio:r,start:t.pixels[s]-o/2}}function vD(s,t,e,i){const n=t.pixels,o=n[s];let r=s>0?n[s-1]:null,a=s<n.length-1?n[s+1]:null;const l=e.categoryPercentage;r===null&&(r=o-(a===null?t.end-t.start:a-o)),a===null&&(a=o+o-r);const c=o-(o-Math.min(r,a))/2*l;return{chunk:Math.abs(a-r)/2*l/i,ratio:e.barPercentage,start:c}}function yD(s,t,e,i){const n=e.parse(s[0],i),o=e.parse(s[1],i),r=Math.min(n,o),a=Math.max(n,o);let l=r,c=a;Math.abs(r)>Math.abs(a)&&(l=a,c=r),t[e.axis]=c,t._custom={barStart:l,barEnd:c,start:n,end:o,min:r,max:a}}function E_(s,t,e,i){return Q(s)?yD(s,t,e,i):t[e.axis]=e.parse(s,i),t}function x_(s,t,e,i){const n=s.iScale,o=s.vScale,r=n.getLabels(),a=n===o,l=[];let c,h,d,u;for(c=e,h=e+i;c<h;++c)u=t[c],d={},d[n.axis]=a||n.parse(r[c],c),l.push(E_(u,d,o,c));return l}function Hc(s){return s&&s.barStart!==void 0&&s.barEnd!==void 0}function TD(s,t,e){return s!==0?Ee(s):(t.isHorizontal()?1:-1)*(t.min>=e?1:-1)}function ED(s){let t,e,i,n,o;return s.horizontal?(t=s.base>s.x,e="left",i="right"):(t=s.base<s.y,e="bottom",i="top"),t?(n="end",o="start"):(n="start",o="end"),{start:e,end:i,reverse:t,top:n,bottom:o}}function xD(s,t,e,i){let n=t.borderSkipped;const o={};if(!n){s.borderSkipped=o;return}if(n===!0){s.borderSkipped={top:!0,right:!0,bottom:!0,left:!0};return}const{start:r,end:a,reverse:l,top:c,bottom:h}=ED(s);n==="middle"&&e&&(s.enableBorderRadius=!0,(e._top||0)===i?n=c:(e._bottom||0)===i?n=h:(o[C_(h,r,a,l)]=!0,n=c)),o[C_(n,r,a,l)]=!0,s.borderSkipped=o}function C_(s,t,e,i){return i?(s=CD(s,t,e),s=A_(s,e,t)):s=A_(s,t,e),s}function CD(s,t,e){return s===t?e:s===e?t:s}function A_(s,t,e){return s==="start"?t:s==="end"?e:s}function AD(s,{inflateAmount:t},e){s.inflateAmount=t==="auto"?e===1?.33:0:t}class Vn extends Ut{parsePrimitiveData(t,e,i,n){return x_(t,e,i,n)}parseArrayData(t,e,i,n){return x_(t,e,i,n)}parseObjectData(t,e,i,n){const{iScale:o,vScale:r}=t,{xAxisKey:a="x",yAxisKey:l="y"}=this._parsing,c=o.axis==="x"?a:l,h=r.axis==="x"?a:l,d=[];let u,p,f,b;for(u=i,p=i+n;u<p;++u)b=e[u],f={},f[o.axis]=o.parse(ti(b,c),u),d.push(E_(ti(b,h),f,r,u));return d}updateRangeFromParsed(t,e,i,n){super.updateRangeFromParsed(t,e,i,n);const o=i._custom;o&&e===this._cachedMeta.vScale&&(t.min=Math.min(t.min,o.min),t.max=Math.max(t.max,o.max))}getMaxOverflow(){return 0}getLabelAndValue(t){const e=this._cachedMeta,{iScale:i,vScale:n}=e,o=this.getParsed(t),r=o._custom,a=Hc(r)?"["+r.start+", "+r.end+"]":""+n.getLabelForValue(o[n.axis]);return{label:""+i.getLabelForValue(o[i.axis]),value:a}}initialize(){this.enableOptionSharing=!0,super.initialize();const t=this._cachedMeta;t.stack=this.getDataset().stack}update(t){const e=this._cachedMeta;this.updateElements(e.data,0,e.data.length,t)}updateElements(t,e,i,n){const o=n==="reset",{index:r,_cachedMeta:{vScale:a}}=this,l=a.getBasePixel(),c=a.isHorizontal(),h=this._getRuler(),{sharedOptions:d,includeOptions:u}=this._getSharedOptions(e,n);for(let p=e;p<e+i;p++){const f=this.getParsed(p),b=o||H(f[a.axis])?{base:l,head:l}:this._calculateBarValuePixels(p),v=this._calculateBarIndexPixels(p,h),y=(f._stacks||{})[a.axis],T={horizontal:c,base:b.base,enableBorderRadius:!y||Hc(f._custom)||r===y._top||r===y._bottom,x:c?b.head:v.center,y:c?v.center:b.head,height:c?v.size:Math.abs(b.size),width:c?Math.abs(b.size):v.size};u&&(T.options=d||this.resolveDataElementOptions(p,t[p].active?"active":n));const x=T.options||t[p].options;xD(T,x,y,r),AD(T,x,h.ratio),this.updateElement(t[p],p,T,n)}}_getStacks(t,e){const{iScale:i}=this._cachedMeta,n=i.getMatchingVisibleMetas(this._type).filter(l=>l.controller.options.grouped),o=i.options.stacked,r=[],a=l=>{const c=l.controller.getParsed(e),h=c&&c[l.vScale.axis];if(H(h)||isNaN(h))return!0};for(const l of n)if(!(e!==void 0&&a(l))&&((o===!1||r.indexOf(l.stack)===-1||o===void 0&&l.stack===void 0)&&r.push(l.stack),l.index===t))break;return r.length||r.push(void 0),r}_getStackCount(t){return this._getStacks(void 0,t).length}_getStackIndex(t,e,i){const n=this._getStacks(t,i),o=e!==void 0?n.indexOf(e):-1;return o===-1?n.length-1:o}_getRuler(){const t=this.options,e=this._cachedMeta,i=e.iScale,n=[];let o,r;for(o=0,r=e.data.length;o<r;++o)n.push(i.getPixelForValue(this.getParsed(o)[i.axis],o));const a=t.barThickness;return{min:a||mD(e),pixels:n,start:i._startPixel,end:i._endPixel,stackCount:this._getStackCount(),scale:i,grouped:t.grouped,ratio:a?1:t.categoryPercentage*t.barPercentage}}_calculateBarValuePixels(t){const{_cachedMeta:{vScale:e,_stacked:i},options:{base:n,minBarLength:o}}=this,r=n||0,a=this.getParsed(t),l=a._custom,c=Hc(l);let h=a[e.axis],d=0,u=i?this.applyStack(e,a,i):h,p,f;u!==h&&(d=u-h,u=h),c&&(h=l.barStart,u=l.barEnd-l.barStart,h!==0&&Ee(h)!==Ee(l.barEnd)&&(d=0),d+=h);const b=!H(n)&&!c?n:d;let v=e.getPixelForValue(b);if(this.chart.getDataVisibility(t)?p=e.getPixelForValue(d+u):p=v,f=p-v,Math.abs(f)<o){f=TD(f,e,r)*o,h===r&&(v-=f/2);const y=e.getPixelForDecimal(0),T=e.getPixelForDecimal(1),x=Math.min(y,T),E=Math.max(y,T);v=Math.max(Math.min(v,E),x),p=v+f}if(v===e.getPixelForValue(r)){const y=Ee(f)*e.getLineWidthForValue(r)/2;v+=y,f-=y}return{size:f,base:v,head:p,center:p+f/2}}_calculateBarIndexPixels(t,e){const i=e.scale,n=this.options,o=n.skipNull,r=B(n.maxBarThickness,1/0);let a,l;if(e.grouped){const c=o?this._getStackCount(t):e.stackCount,h=n.barThickness==="flex"?vD(t,e,n,c):bD(t,e,n,c),d=this._getStackIndex(this.index,this._cachedMeta.stack,o?t:void 0);a=h.start+h.chunk*d+h.chunk/2,l=Math.min(r,h.chunk*h.ratio)}else a=i.getPixelForValue(this.getParsed(t)[i.axis],t),l=Math.min(r,e.min*e.ratio);return{base:a-l/2,head:a+l/2,center:a,size:l}}draw(){const t=this._cachedMeta,e=t.vScale,i=t.data,n=i.length;let o=0;for(;o<n;++o)this.getParsed(o)[e.axis]!==null&&i[o].draw(this._ctx)}}Vn.id="bar",Vn.defaults={datasetElementType:!1,dataElementType:"bar",categoryPercentage:.8,barPercentage:.9,grouped:!0,animations:{numbers:{type:"number",properties:["x","y","base","width","height"]}}},Vn.overrides={scales:{_index_:{type:"category",offset:!0,grid:{offset:!0}},_value_:{type:"linear",beginAtZero:!0}}};class Fn extends Ut{initialize(){this.enableOptionSharing=!0,super.initialize()}parsePrimitiveData(t,e,i,n){const o=super.parsePrimitiveData(t,e,i,n);for(let r=0;r<o.length;r++)o[r]._custom=this.resolveDataElementOptions(r+i).radius;return o}parseArrayData(t,e,i,n){const o=super.parseArrayData(t,e,i,n);for(let r=0;r<o.length;r++){const a=e[i+r];o[r]._custom=B(a[2],this.resolveDataElementOptions(r+i).radius)}return o}parseObjectData(t,e,i,n){const o=super.parseObjectData(t,e,i,n);for(let r=0;r<o.length;r++){const a=e[i+r];o[r]._custom=B(a&&a.r&&+a.r,this.resolveDataElementOptions(r+i).radius)}return o}getMaxOverflow(){const t=this._cachedMeta.data;let e=0;for(let i=t.length-1;i>=0;--i)e=Math.max(e,t[i].size(this.resolveDataElementOptions(i))/2);return e>0&&e}getLabelAndValue(t){const e=this._cachedMeta,{xScale:i,yScale:n}=e,o=this.getParsed(t),r=i.getLabelForValue(o.x),a=n.getLabelForValue(o.y),l=o._custom;return{label:e.label,value:"("+r+", "+a+(l?", "+l:"")+")"}}update(t){const e=this._cachedMeta.data;this.updateElements(e,0,e.length,t)}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a}=this._cachedMeta,{sharedOptions:l,includeOptions:c}=this._getSharedOptions(e,n),h=r.axis,d=a.axis;for(let u=e;u<e+i;u++){const p=t[u],f=!o&&this.getParsed(u),b={},v=b[h]=o?r.getPixelForDecimal(.5):r.getPixelForValue(f[h]),y=b[d]=o?a.getBasePixel():a.getPixelForValue(f[d]);b.skip=isNaN(v)||isNaN(y),c&&(b.options=l||this.resolveDataElementOptions(u,p.active?"active":n),o&&(b.options.radius=0)),this.updateElement(p,u,b,n)}}resolveDataElementOptions(t,e){const i=this.getParsed(t);let n=super.resolveDataElementOptions(t,e);n.$shared&&(n=Object.assign({},n,{$shared:!1}));const o=n.radius;return e!=="active"&&(n.radius=0),n.radius+=B(i&&i._custom,o),n}}Fn.id="bubble",Fn.defaults={datasetElementType:!1,dataElementType:"point",animations:{numbers:{type:"number",properties:["x","y","borderWidth","radius"]}}},Fn.overrides={scales:{x:{type:"linear"},y:{type:"linear"}},plugins:{tooltip:{callbacks:{title(){return""}}}}};function wD(s,t,e){let i=1,n=1,o=0,r=0;if(t<q){const a=s,l=a+t,c=Math.cos(a),h=Math.sin(a),d=Math.cos(l),u=Math.sin(l),p=(x,E,C)=>Dn(x,a,l,!0)?1:Math.max(E,E*e,C,C*e),f=(x,E,C)=>Dn(x,a,l,!0)?-1:Math.min(E,E*e,C,C*e),b=p(0,c,d),v=p(nt,h,u),y=f(it,c,d),T=f(it+nt,h,u);i=(b-y)/2,n=(v-T)/2,o=-(b+y)/2,r=-(v+T)/2}return{ratioX:i,ratioY:n,offsetX:o,offsetY:r}}class Bi extends Ut{constructor(t,e){super(t,e),this.enableOptionSharing=!0,this.innerRadius=void 0,this.outerRadius=void 0,this.offsetX=void 0,this.offsetY=void 0}linkScales(){}parse(t,e){const i=this.getDataset().data,n=this._cachedMeta;if(this._parsing===!1)n._parsed=i;else{let o=l=>+i[l];if(V(i[t])){const{key:l="value"}=this._parsing;o=c=>+ti(i[c],l)}let r,a;for(r=t,a=t+e;r<a;++r)n._parsed[r]=o(r)}}_getRotation(){return se(this.options.rotation-90)}_getCircumference(){return se(this.options.circumference)}_getRotationExtents(){let t=q,e=-q;for(let i=0;i<this.chart.data.datasets.length;++i)if(this.chart.isDatasetVisible(i)){const n=this.chart.getDatasetMeta(i).controller,o=n._getRotation(),r=n._getCircumference();t=Math.min(t,o),e=Math.max(e,o+r)}return{rotation:t,circumference:e-t}}update(t){const e=this.chart,{chartArea:i}=e,n=this._cachedMeta,o=n.data,r=this.getMaxBorderWidth()+this.getMaxOffset(o)+this.options.spacing,a=Math.max((Math.min(i.width,i.height)-r)/2,0),l=Math.min(xO(this.options.cutout,a),1),c=this._getRingWeight(this.index),{circumference:h,rotation:d}=this._getRotationExtents(),{ratioX:u,ratioY:p,offsetX:f,offsetY:b}=wD(d,h,l),v=(i.width-r)/u,y=(i.height-r)/p,T=Math.max(Math.min(v,y)/2,0),x=gf(this.options.radius,T),E=Math.max(x*l,0),C=(x-E)/this._getVisibleDatasetWeightTotal();this.offsetX=f*x,this.offsetY=b*x,n.total=this.calculateTotal(),this.outerRadius=x-C*this._getRingWeightOffset(this.index),this.innerRadius=Math.max(this.outerRadius-C*c,0),this.updateElements(o,0,o.length,t)}_circumference(t,e){const i=this.options,n=this._cachedMeta,o=this._getCircumference();return e&&i.animation.animateRotate||!this.chart.getDataVisibility(t)||n._parsed[t]===null||n.data[t].hidden?0:this.calculateCircumference(n._parsed[t]*o/q)}updateElements(t,e,i,n){const o=n==="reset",r=this.chart,a=r.chartArea,c=r.options.animation,h=(a.left+a.right)/2,d=(a.top+a.bottom)/2,u=o&&c.animateScale,p=u?0:this.innerRadius,f=u?0:this.outerRadius,{sharedOptions:b,includeOptions:v}=this._getSharedOptions(e,n);let y=this._getRotation(),T;for(T=0;T<e;++T)y+=this._circumference(T,o);for(T=e;T<e+i;++T){const x=this._circumference(T,o),E=t[T],C={x:h+this.offsetX,y:d+this.offsetY,startAngle:y,endAngle:y+x,circumference:x,outerRadius:f,innerRadius:p};v&&(C.options=b||this.resolveDataElementOptions(T,E.active?"active":n)),y+=x,this.updateElement(E,T,C,n)}}calculateTotal(){const t=this._cachedMeta,e=t.data;let i=0,n;for(n=0;n<e.length;n++){const o=t._parsed[n];o!==null&&!isNaN(o)&&this.chart.getDataVisibility(n)&&!e[n].hidden&&(i+=Math.abs(o))}return i}calculateCircumference(t){const e=this._cachedMeta.total;return e>0&&!isNaN(t)?q*(Math.abs(t)/e):0}getLabelAndValue(t){const e=this._cachedMeta,i=this.chart,n=i.data.labels||[],o=Bn(e._parsed[t],i.options.locale);return{label:n[t]||"",value:o}}getMaxBorderWidth(t){let e=0;const i=this.chart;let n,o,r,a,l;if(!t){for(n=0,o=i.data.datasets.length;n<o;++n)if(i.isDatasetVisible(n)){r=i.getDatasetMeta(n),t=r.data,a=r.controller;break}}if(!t)return 0;for(n=0,o=t.length;n<o;++n)l=a.resolveDataElementOptions(n),l.borderAlign!=="inner"&&(e=Math.max(e,l.borderWidth||0,l.hoverBorderWidth||0));return e}getMaxOffset(t){let e=0;for(let i=0,n=t.length;i<n;++i){const o=this.resolveDataElementOptions(i);e=Math.max(e,o.offset||0,o.hoverOffset||0)}return e}_getRingWeightOffset(t){let e=0;for(let i=0;i<t;++i)this.chart.isDatasetVisible(i)&&(e+=this._getRingWeight(i));return e}_getRingWeight(t){return Math.max(B(this.chart.data.datasets[t].weight,1),0)}_getVisibleDatasetWeightTotal(){return this._getRingWeightOffset(this.chart.data.datasets.length)||1}}Bi.id="doughnut",Bi.defaults={datasetElementType:!1,dataElementType:"arc",animation:{animateRotate:!0,animateScale:!1},animations:{numbers:{type:"number",properties:["circumference","endAngle","innerRadius","outerRadius","startAngle","x","y","offset","borderWidth","spacing"]}},cutout:"50%",rotation:0,circumference:360,radius:"100%",spacing:0,indexAxis:"r"},Bi.descriptors={_scriptable:s=>s!=="spacing",_indexable:s=>s!=="spacing"},Bi.overrides={aspectRatio:1,plugins:{legend:{labels:{generateLabels(s){const t=s.data;if(t.labels.length&&t.datasets.length){const{labels:{pointStyle:e}}=s.legend.options;return t.labels.map((i,n)=>{const r=s.getDatasetMeta(0).controller.getStyle(n);return{text:i,fillStyle:r.backgroundColor,strokeStyle:r.borderColor,lineWidth:r.borderWidth,pointStyle:e,hidden:!s.getDataVisibility(n),index:n}})}return[]}},onClick(s,t,e){e.chart.toggleDataVisibility(t.index),e.chart.update()}},tooltip:{callbacks:{title(){return""},label(s){let t=s.label;const e=": "+s.formattedValue;return Q(t)?(t=t.slice(),t[0]+=e):t+=e,t}}}}};class Wn extends Ut{initialize(){this.enableOptionSharing=!0,this.supportsDecimation=!0,super.initialize()}update(t){const e=this._cachedMeta,{dataset:i,data:n=[],_dataset:o}=e,r=this.chart._animationsDisabled;let{start:a,count:l}=If(e,n,r);this._drawStart=a,this._drawCount=l,Df(e)&&(a=0,l=n.length),i._chart=this.chart,i._datasetIndex=this.index,i._decimated=!!o._decimated,i.points=n;const c=this.resolveDatasetElementOptions(t);this.options.showLine||(c.borderWidth=0),c.segment=this.options.segment,this.updateElement(i,void 0,{animated:!r,options:c},t),this.updateElements(n,a,l,t)}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a,_stacked:l,_dataset:c}=this._cachedMeta,{sharedOptions:h,includeOptions:d}=this._getSharedOptions(e,n),u=r.axis,p=a.axis,{spanGaps:f,segment:b}=this.options,v=As(f)?f:Number.POSITIVE_INFINITY,y=this.chart._animationsDisabled||o||n==="none";let T=e>0&&this.getParsed(e-1);for(let x=e;x<e+i;++x){const E=t[x],C=this.getParsed(x),A=y?E:{},w=H(C[p]),S=A[u]=r.getPixelForValue(C[u],x),k=A[p]=o||w?a.getBasePixel():a.getPixelForValue(l?this.applyStack(a,C,l):C[p],x);A.skip=isNaN(S)||isNaN(k)||w,A.stop=x>0&&Math.abs(C[u]-T[u])>v,b&&(A.parsed=C,A.raw=c.data[x]),d&&(A.options=h||this.resolveDataElementOptions(x,E.active?"active":n)),y||this.updateElement(E,x,A,n),T=C}}getMaxOverflow(){const t=this._cachedMeta,e=t.dataset,i=e.options&&e.options.borderWidth||0,n=t.data||[];if(!n.length)return i;const o=n[0].size(this.resolveDataElementOptions(0)),r=n[n.length-1].size(this.resolveDataElementOptions(n.length-1));return Math.max(i,o,r)/2}draw(){const t=this._cachedMeta;t.dataset.updateControlPoints(this.chart.chartArea,t.iScale.axis),super.draw()}}Wn.id="line",Wn.defaults={datasetElementType:"line",dataElementType:"point",showLine:!0,spanGaps:!1},Wn.overrides={scales:{_index_:{type:"category"},_value_:{type:"linear"}}};class zn extends Ut{constructor(t,e){super(t,e),this.innerRadius=void 0,this.outerRadius=void 0}getLabelAndValue(t){const e=this._cachedMeta,i=this.chart,n=i.data.labels||[],o=Bn(e._parsed[t].r,i.options.locale);return{label:n[t]||"",value:o}}parseObjectData(t,e,i,n){return Jf.bind(this)(t,e,i,n)}update(t){const e=this._cachedMeta.data;this._updateRadius(),this.updateElements(e,0,e.length,t)}getMinMax(){const t=this._cachedMeta,e={min:Number.POSITIVE_INFINITY,max:Number.NEGATIVE_INFINITY};return t.data.forEach((i,n)=>{const o=this.getParsed(n).r;!isNaN(o)&&this.chart.getDataVisibility(n)&&(o<e.min&&(e.min=o),o>e.max&&(e.max=o))}),e}_updateRadius(){const t=this.chart,e=t.chartArea,i=t.options,n=Math.min(e.right-e.left,e.bottom-e.top),o=Math.max(n/2,0),r=Math.max(i.cutoutPercentage?o/100*i.cutoutPercentage:1,0),a=(o-r)/t.getVisibleDatasetCount();this.outerRadius=o-a*this.index,this.innerRadius=this.outerRadius-a}updateElements(t,e,i,n){const o=n==="reset",r=this.chart,l=r.options.animation,c=this._cachedMeta.rScale,h=c.xCenter,d=c.yCenter,u=c.getIndexAngle(0)-.5*it;let p=u,f;const b=360/this.countVisibleElements();for(f=0;f<e;++f)p+=this._computeAngle(f,n,b);for(f=e;f<e+i;f++){const v=t[f];let y=p,T=p+this._computeAngle(f,n,b),x=r.getDataVisibility(f)?c.getDistanceFromCenterForValue(this.getParsed(f).r):0;p=T,o&&(l.animateScale&&(x=0),l.animateRotate&&(y=T=u));const E={x:h,y:d,innerRadius:0,outerRadius:x,startAngle:y,endAngle:T,options:this.resolveDataElementOptions(f,v.active?"active":n)};this.updateElement(v,f,E,n)}}countVisibleElements(){const t=this._cachedMeta;let e=0;return t.data.forEach((i,n)=>{!isNaN(this.getParsed(n).r)&&this.chart.getDataVisibility(n)&&e++}),e}_computeAngle(t,e,i){return this.chart.getDataVisibility(t)?se(this.resolveDataElementOptions(t,e).angle||i):0}}zn.id="polarArea",zn.defaults={dataElementType:"arc",animation:{animateRotate:!0,animateScale:!0},animations:{numbers:{type:"number",properties:["x","y","startAngle","endAngle","innerRadius","outerRadius"]}},indexAxis:"r",startAngle:0},zn.overrides={aspectRatio:1,plugins:{legend:{labels:{generateLabels(s){const t=s.data;if(t.labels.length&&t.datasets.length){const{labels:{pointStyle:e}}=s.legend.options;return t.labels.map((i,n)=>{const r=s.getDatasetMeta(0).controller.getStyle(n);return{text:i,fillStyle:r.backgroundColor,strokeStyle:r.borderColor,lineWidth:r.borderWidth,pointStyle:e,hidden:!s.getDataVisibility(n),index:n}})}return[]}},onClick(s,t,e){e.chart.toggleDataVisibility(t.index),e.chart.update()}},tooltip:{callbacks:{title(){return""},label(s){return s.chart.data.labels[s.dataIndex]+": "+s.formattedValue}}}},scales:{r:{type:"radialLinear",angleLines:{display:!1},beginAtZero:!0,grid:{circular:!0},pointLabels:{display:!1},startAngle:0}}};class ea extends Bi{}ea.id="pie",ea.defaults={cutout:0,rotation:0,circumference:360,radius:"100%"};class jn extends Ut{getLabelAndValue(t){const e=this._cachedMeta.vScale,i=this.getParsed(t);return{label:e.getLabels()[t],value:""+e.getLabelForValue(i[e.axis])}}parseObjectData(t,e,i,n){return Jf.bind(this)(t,e,i,n)}update(t){const e=this._cachedMeta,i=e.dataset,n=e.data||[],o=e.iScale.getLabels();if(i.points=n,t!=="resize"){const r=this.resolveDatasetElementOptions(t);this.options.showLine||(r.borderWidth=0);const a={_loop:!0,_fullLoop:o.length===n.length,options:r};this.updateElement(i,void 0,a,t)}this.updateElements(n,0,n.length,t)}updateElements(t,e,i,n){const o=this._cachedMeta.rScale,r=n==="reset";for(let a=e;a<e+i;a++){const l=t[a],c=this.resolveDataElementOptions(a,l.active?"active":n),h=o.getPointPositionForValue(a,this.getParsed(a).r),d=r?o.xCenter:h.x,u=r?o.yCenter:h.y,p={x:d,y:u,angle:h.angle,skip:isNaN(d)||isNaN(u),options:c};this.updateElement(l,a,p,n)}}}jn.id="radar",jn.defaults={datasetElementType:"line",dataElementType:"point",indexAxis:"r",showLine:!0,elements:{line:{fill:"start"}}},jn.overrides={aspectRatio:1,scales:{r:{type:"radialLinear"}}};let Xt=class{constructor(){this.x=void 0,this.y=void 0,this.active=!1,this.options=void 0,this.$animations=void 0}tooltipPosition(t){const{x:e,y:i}=this.getProps(["x","y"],t);return{x:e,y:i}}hasValue(){return As(this.x)&&As(this.y)}getProps(t,e){const i=this.$animations;if(!e||!i)return this;const n={};return t.forEach(o=>{n[o]=i[o]&&i[o].active()?i[o]._to:this[o]}),n}};Xt.defaults={},Xt.defaultRoutes=void 0;const w_={values(s){return Q(s)?s:""+s},numeric(s,t,e){if(s===0)return"0";const i=this.chart.options.locale;let n,o=s;if(e.length>1){const c=Math.max(Math.abs(e[0].value),Math.abs(e[e.length-1].value));(c<1e-4||c>1e15)&&(n="scientific"),o=kD(s,e)}const r=Yt(Math.abs(o)),a=Math.max(Math.min(-1*Math.floor(r),20),0),l={notation:n,minimumFractionDigits:a,maximumFractionDigits:a};return Object.assign(l,this.options.ticks.format),Bn(s,i,l)},logarithmic(s,t,e){if(s===0)return"0";const i=s/Math.pow(10,Math.floor(Yt(s)));return i===1||i===2||i===5?w_.numeric.call(this,s,t,e):""}};function kD(s,t){let e=t.length>3?t[2].value-t[1].value:t[1].value-t[0].value;return Math.abs(e)>=1&&s!==Math.floor(s)&&(e=s-Math.floor(s)),e}var Yn={formatters:w_};F.set("scale",{display:!0,offset:!1,reverse:!1,beginAtZero:!1,bounds:"ticks",grace:0,grid:{display:!0,lineWidth:1,drawBorder:!0,drawOnChartArea:!0,drawTicks:!0,tickLength:8,tickWidth:(s,t)=>t.lineWidth,tickColor:(s,t)=>t.color,offset:!1,borderDash:[],borderDashOffset:0,borderWidth:1},title:{display:!1,text:"",padding:{top:4,bottom:4}},ticks:{minRotation:0,maxRotation:50,mirror:!1,textStrokeWidth:0,textStrokeColor:"",padding:3,display:!0,autoSkip:!0,autoSkipPadding:3,labelOffset:0,callback:Yn.formatters.values,minor:{},major:{},align:"center",crossAlign:"near",showLabelBackdrop:!1,backdropColor:"rgba(255, 255, 255, 0.75)",backdropPadding:2}}),F.route("scale.ticks","color","","color"),F.route("scale.grid","color","","borderColor"),F.route("scale.grid","borderColor","","borderColor"),F.route("scale.title","color","","color"),F.describe("scale",{_fallback:!1,_scriptable:s=>!s.startsWith("before")&&!s.startsWith("after")&&s!=="callback"&&s!=="parser",_indexable:s=>s!=="borderDash"&&s!=="tickBorderDash"}),F.describe("scales",{_fallback:"scale"}),F.describe("scale.ticks",{_scriptable:s=>s!=="backdropPadding"&&s!=="callback",_indexable:s=>s!=="backdropPadding"});function SD(s,t){const e=s.options.ticks,i=e.maxTicksLimit||OD(s),n=e.major.enabled?DD(t):[],o=n.length,r=n[0],a=n[o-1],l=[];if(o>i)return MD(t,l,n,o/i),l;const c=ID(n,t,i);if(o>0){let h,d;const u=o>1?Math.round((a-r)/(o-1)):null;for(ia(t,l,c,H(u)?0:r-u,r),h=0,d=o-1;h<d;h++)ia(t,l,c,n[h],n[h+1]);return ia(t,l,c,a,H(u)?t.length:a+u),l}return ia(t,l,c),l}function OD(s){const t=s.options.offset,e=s._tickSize(),i=s._length/e+(t?0:1),n=s._maxLength/e;return Math.floor(Math.min(i,n))}function ID(s,t,e){const i=LD(s),n=t.length/e;if(!i)return Math.max(n,1);const o=DO(i);for(let r=0,a=o.length-1;r<a;r++){const l=o[r];if(l>n)return l}return Math.max(n,1)}function DD(s){const t=[];let e,i;for(e=0,i=s.length;e<i;e++)s[e].major&&t.push(e);return t}function MD(s,t,e,i){let n=0,o=e[0],r;for(i=Math.ceil(i),r=0;r<s.length;r++)r===o&&(t.push(s[r]),n++,o=e[n*i])}function ia(s,t,e,i,n){const o=B(i,0),r=Math.min(B(n,s.length),s.length);let a=0,l,c,h;for(e=Math.ceil(e),n&&(l=n-i,e=l/Math.floor(l/e)),h=o;h<0;)a++,h=Math.round(o+a*e);for(c=Math.max(o,0);c<r;c++)c===h&&(t.push(s[c]),a++,h=Math.round(o+a*e))}function LD(s){const t=s.length;let e,i;if(t<2)return!1;for(i=s[0],e=1;e<t;++e)if(s[e]-s[e-1]!==i)return!1;return i}const $D=s=>s==="left"?"right":s==="right"?"left":s,k_=(s,t,e)=>t==="top"||t==="left"?s[t]+e:s[t]-e;function S_(s,t){const e=[],i=s.length/t,n=s.length;let o=0;for(;o<n;o+=i)e.push(s[Math.floor(o)]);return e}function RD(s,t,e){const i=s.ticks.length,n=Math.min(t,i-1),o=s._startPixel,r=s._endPixel,a=1e-6;let l=s.getPixelForTick(n),c;if(!(e&&(i===1?c=Math.max(l-o,r-l):t===0?c=(s.getPixelForTick(1)-l)/2:c=(l-s.getPixelForTick(n-1))/2,l+=n<t?c:-c,l<o-a||l>r+a)))return l}function PD(s,t){U(s,e=>{const i=e.gc,n=i.length/2;let o;if(n>t){for(o=0;o<n;++o)delete e.data[i[o]];i.splice(0,n)}})}function Kn(s){return s.drawTicks?s.tickLength:0}function O_(s,t){if(!s.display)return 0;const e=lt(s.font,t),i=pt(s.padding);return(Q(s.text)?s.text.length:1)*e.lineHeight+i.height}function ND(s,t){return ni(s,{scale:t,type:"scale"})}function BD(s,t,e){return ni(s,{tick:e,index:t,type:"tick"})}function HD(s,t,e){let i=yc(s);return(e&&t!=="right"||!e&&t==="right")&&(i=$D(i)),i}function VD(s,t,e,i){const{top:n,left:o,bottom:r,right:a,chart:l}=s,{chartArea:c,scales:h}=l;let d=0,u,p,f;const b=r-n,v=a-o;if(s.isHorizontal()){if(p=gt(i,o,a),V(e)){const y=Object.keys(e)[0],T=e[y];f=h[y].getPixelForValue(T)+b-t}else e==="center"?f=(c.bottom+c.top)/2+b-t:f=k_(s,e,t);u=a-o}else{if(V(e)){const y=Object.keys(e)[0],T=e[y];p=h[y].getPixelForValue(T)-v+t}else e==="center"?p=(c.left+c.right)/2-v+t:p=k_(s,e,t);f=gt(i,r,n),d=e==="left"?-nt:nt}return{titleX:p,titleY:f,maxWidth:u,rotation:d}}class oi extends Xt{constructor(t){super(),this.id=t.id,this.type=t.type,this.options=void 0,this.ctx=t.ctx,this.chart=t.chart,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.width=void 0,this.height=void 0,this._margins={left:0,right:0,top:0,bottom:0},this.maxWidth=void 0,this.maxHeight=void 0,this.paddingTop=void 0,this.paddingBottom=void 0,this.paddingLeft=void 0,this.paddingRight=void 0,this.axis=void 0,this.labelRotation=void 0,this.min=void 0,this.max=void 0,this._range=void 0,this.ticks=[],this._gridLineItems=null,this._labelItems=null,this._labelSizes=null,this._length=0,this._maxLength=0,this._longestTextCache={},this._startPixel=void 0,this._endPixel=void 0,this._reversePixels=!1,this._userMax=void 0,this._userMin=void 0,this._suggestedMax=void 0,this._suggestedMin=void 0,this._ticksLength=0,this._borderValue=0,this._cache={},this._dataLimitsCached=!1,this.$context=void 0}init(t){this.options=t.setContext(this.getContext()),this.axis=t.axis,this._userMin=this.parse(t.min),this._userMax=this.parse(t.max),this._suggestedMin=this.parse(t.suggestedMin),this._suggestedMax=this.parse(t.suggestedMax)}parse(t,e){return t}getUserBounds(){let{_userMin:t,_userMax:e,_suggestedMin:i,_suggestedMax:n}=this;return t=zt(t,Number.POSITIVE_INFINITY),e=zt(e,Number.NEGATIVE_INFINITY),i=zt(i,Number.POSITIVE_INFINITY),n=zt(n,Number.NEGATIVE_INFINITY),{min:zt(t,i),max:zt(e,n),minDefined:rt(t),maxDefined:rt(e)}}getMinMax(t){let{min:e,max:i,minDefined:n,maxDefined:o}=this.getUserBounds(),r;if(n&&o)return{min:e,max:i};const a=this.getMatchingVisibleMetas();for(let l=0,c=a.length;l<c;++l)r=a[l].controller.getMinMax(this,t),n||(e=Math.min(e,r.min)),o||(i=Math.max(i,r.max));return e=o&&e>i?i:e,i=n&&e>i?e:i,{min:zt(e,zt(i,e)),max:zt(i,zt(e,i))}}getPadding(){return{left:this.paddingLeft||0,top:this.paddingTop||0,right:this.paddingRight||0,bottom:this.paddingBottom||0}}getTicks(){return this.ticks}getLabels(){const t=this.chart.data;return this.options.labels||(this.isHorizontal()?t.xLabels:t.yLabels)||t.labels||[]}beforeLayout(){this._cache={},this._dataLimitsCached=!1}beforeUpdate(){G(this.options.beforeUpdate,[this])}update(t,e,i){const{beginAtZero:n,grace:o,ticks:r}=this.options,a=r.sampleSize;this.beforeUpdate(),this.maxWidth=t,this.maxHeight=e,this._margins=i=Object.assign({left:0,right:0,top:0,bottom:0},i),this.ticks=null,this._labelSizes=null,this._gridLineItems=null,this._labelItems=null,this.beforeSetDimensions(),this.setDimensions(),this.afterSetDimensions(),this._maxLength=this.isHorizontal()?this.width+i.left+i.right:this.height+i.top+i.bottom,this._dataLimitsCached||(this.beforeDataLimits(),this.determineDataLimits(),this.afterDataLimits(),this._range=vI(this,o,n),this._dataLimitsCached=!0),this.beforeBuildTicks(),this.ticks=this.buildTicks()||[],this.afterBuildTicks();const l=a<this.ticks.length;this._convertTicksToLabels(l?S_(this.ticks,a):this.ticks),this.configure(),this.beforeCalculateLabelRotation(),this.calculateLabelRotation(),this.afterCalculateLabelRotation(),r.display&&(r.autoSkip||r.source==="auto")&&(this.ticks=SD(this,this.ticks),this._labelSizes=null,this.afterAutoSkip()),l&&this._convertTicksToLabels(this.ticks),this.beforeFit(),this.fit(),this.afterFit(),this.afterUpdate()}configure(){let t=this.options.reverse,e,i;this.isHorizontal()?(e=this.left,i=this.right):(e=this.top,i=this.bottom,t=!t),this._startPixel=e,this._endPixel=i,this._reversePixels=t,this._length=i-e,this._alignToPixels=this.options.alignToPixels}afterUpdate(){G(this.options.afterUpdate,[this])}beforeSetDimensions(){G(this.options.beforeSetDimensions,[this])}setDimensions(){this.isHorizontal()?(this.width=this.maxWidth,this.left=0,this.right=this.width):(this.height=this.maxHeight,this.top=0,this.bottom=this.height),this.paddingLeft=0,this.paddingTop=0,this.paddingRight=0,this.paddingBottom=0}afterSetDimensions(){G(this.options.afterSetDimensions,[this])}_callHooks(t){this.chart.notifyPlugins(t,this.getContext()),G(this.options[t],[this])}beforeDataLimits(){this._callHooks("beforeDataLimits")}determineDataLimits(){}afterDataLimits(){this._callHooks("afterDataLimits")}beforeBuildTicks(){this._callHooks("beforeBuildTicks")}buildTicks(){return[]}afterBuildTicks(){this._callHooks("afterBuildTicks")}beforeTickToLabelConversion(){G(this.options.beforeTickToLabelConversion,[this])}generateTickLabels(t){const e=this.options.ticks;let i,n,o;for(i=0,n=t.length;i<n;i++)o=t[i],o.label=G(e.callback,[o.value,i,t],this)}afterTickToLabelConversion(){G(this.options.afterTickToLabelConversion,[this])}beforeCalculateLabelRotation(){G(this.options.beforeCalculateLabelRotation,[this])}calculateLabelRotation(){const t=this.options,e=t.ticks,i=this.ticks.length,n=e.minRotation||0,o=e.maxRotation;let r=n,a,l,c;if(!this._isVisible()||!e.display||n>=o||i<=1||!this.isHorizontal()){this.labelRotation=n;return}const h=this._getLabelSizes(),d=h.widest.width,u=h.highest.height,p=dt(this.chart.width-d,0,this.maxWidth);a=t.offset?this.maxWidth/i:p/(i-1),d+6>a&&(a=p/(i-(t.offset?.5:1)),l=this.maxHeight-Kn(t.grid)-e.padding-O_(t.title,this.chart.options.font),c=Math.sqrt(d*d+u*u),r=mc(Math.min(Math.asin(dt((h.highest.height+6)/a,-1,1)),Math.asin(dt(l/c,-1,1))-Math.asin(dt(u/c,-1,1)))),r=Math.max(n,Math.min(o,r))),this.labelRotation=r}afterCalculateLabelRotation(){G(this.options.afterCalculateLabelRotation,[this])}afterAutoSkip(){}beforeFit(){G(this.options.beforeFit,[this])}fit(){const t={width:0,height:0},{chart:e,options:{ticks:i,title:n,grid:o}}=this,r=this._isVisible(),a=this.isHorizontal();if(r){const l=O_(n,e.options.font);if(a?(t.width=this.maxWidth,t.height=Kn(o)+l):(t.height=this.maxHeight,t.width=Kn(o)+l),i.display&&this.ticks.length){const{first:c,last:h,widest:d,highest:u}=this._getLabelSizes(),p=i.padding*2,f=se(this.labelRotation),b=Math.cos(f),v=Math.sin(f);if(a){const y=i.mirror?0:v*d.width+b*u.height;t.height=Math.min(this.maxHeight,t.height+y+p)}else{const y=i.mirror?0:b*d.width+v*u.height;t.width=Math.min(this.maxWidth,t.width+y+p)}this._calculatePadding(c,h,v,b)}}this._handleMargins(),a?(this.width=this._length=e.width-this._margins.left-this._margins.right,this.height=t.height):(this.width=t.width,this.height=this._length=e.height-this._margins.top-this._margins.bottom)}_calculatePadding(t,e,i,n){const{ticks:{align:o,padding:r},position:a}=this.options,l=this.labelRotation!==0,c=a!=="top"&&this.axis==="x";if(this.isHorizontal()){const h=this.getPixelForTick(0)-this.left,d=this.right-this.getPixelForTick(this.ticks.length-1);let u=0,p=0;l?c?(u=n*t.width,p=i*e.height):(u=i*t.height,p=n*e.width):o==="start"?p=e.width:o==="end"?u=t.width:o!=="inner"&&(u=t.width/2,p=e.width/2),this.paddingLeft=Math.max((u-h+r)*this.width/(this.width-h),0),this.paddingRight=Math.max((p-d+r)*this.width/(this.width-d),0)}else{let h=e.height/2,d=t.height/2;o==="start"?(h=0,d=t.height):o==="end"&&(h=e.height,d=0),this.paddingTop=h+r,this.paddingBottom=d+r}}_handleMargins(){this._margins&&(this._margins.left=Math.max(this.paddingLeft,this._margins.left),this._margins.top=Math.max(this.paddingTop,this._margins.top),this._margins.right=Math.max(this.paddingRight,this._margins.right),this._margins.bottom=Math.max(this.paddingBottom,this._margins.bottom))}afterFit(){G(this.options.afterFit,[this])}isHorizontal(){const{axis:t,position:e}=this.options;return e==="top"||e==="bottom"||t==="x"}isFullSize(){return this.options.fullSize}_convertTicksToLabels(t){this.beforeTickToLabelConversion(),this.generateTickLabels(t);let e,i;for(e=0,i=t.length;e<i;e++)H(t[e].label)&&(t.splice(e,1),i--,e--);this.afterTickToLabelConversion()}_getLabelSizes(){let t=this._labelSizes;if(!t){const e=this.options.ticks.sampleSize;let i=this.ticks;e<i.length&&(i=S_(i,e)),this._labelSizes=t=this._computeLabelSizes(i,i.length)}return t}_computeLabelSizes(t,e){const{ctx:i,_longestTextCache:n}=this,o=[],r=[];let a=0,l=0,c,h,d,u,p,f,b,v,y,T,x;for(c=0;c<e;++c){if(u=t[c].label,p=this._resolveTickFontOptions(c),i.font=f=p.string,b=n[f]=n[f]||{data:{},gc:[]},v=p.lineHeight,y=T=0,!H(u)&&!Q(u))y=Gr(i,b.data,b.gc,y,u),T=v;else if(Q(u))for(h=0,d=u.length;h<d;++h)x=u[h],!H(x)&&!Q(x)&&(y=Gr(i,b.data,b.gc,y,x),T+=v);o.push(y),r.push(T),a=Math.max(y,a),l=Math.max(T,l)}PD(n,e);const E=o.indexOf(a),C=r.indexOf(l),A=w=>({width:o[w]||0,height:r[w]||0});return{first:A(0),last:A(e-1),widest:A(E),highest:A(C),widths:o,heights:r}}getLabelForValue(t){return t}getPixelForValue(t,e){return NaN}getValueForPixel(t){}getPixelForTick(t){const e=this.ticks;return t<0||t>e.length-1?null:this.getPixelForValue(e[t].value)}getPixelForDecimal(t){this._reversePixels&&(t=1-t);const e=this._startPixel+t*this._length;return $O(this._alignToPixels?Mi(this.chart,e,0):e)}getDecimalForPixel(t){const e=(t-this._startPixel)/this._length;return this._reversePixels?1-e:e}getBasePixel(){return this.getPixelForValue(this.getBaseValue())}getBaseValue(){const{min:t,max:e}=this;return t<0&&e<0?e:t>0&&e>0?t:0}getContext(t){const e=this.ticks||[];if(t>=0&&t<e.length){const i=e[t];return i.$context||(i.$context=BD(this.getContext(),t,i))}return this.$context||(this.$context=ND(this.chart.getContext(),this))}_tickSize(){const t=this.options.ticks,e=se(this.labelRotation),i=Math.abs(Math.cos(e)),n=Math.abs(Math.sin(e)),o=this._getLabelSizes(),r=t.autoSkipPadding||0,a=o?o.widest.width+r:0,l=o?o.highest.height+r:0;return this.isHorizontal()?l*i>a*n?a/i:l/n:l*n<a*i?l/i:a/n}_isVisible(){const t=this.options.display;return t!=="auto"?!!t:this.getMatchingVisibleMetas().length>0}_computeGridLineItems(t){const e=this.axis,i=this.chart,n=this.options,{grid:o,position:r}=n,a=o.offset,l=this.isHorizontal(),h=this.ticks.length+(a?1:0),d=Kn(o),u=[],p=o.setContext(this.getContext()),f=p.drawBorder?p.borderWidth:0,b=f/2,v=function(R){return Mi(i,R,f)};let y,T,x,E,C,A,w,S,k,D,I,M;if(r==="top")y=v(this.bottom),A=this.bottom-d,S=y-b,D=v(t.top)+b,M=t.bottom;else if(r==="bottom")y=v(this.top),D=t.top,M=v(t.bottom)-b,A=y+b,S=this.top+d;else if(r==="left")y=v(this.right),C=this.right-d,w=y-b,k=v(t.left)+b,I=t.right;else if(r==="right")y=v(this.left),k=t.left,I=v(t.right)-b,C=y+b,w=this.left+d;else if(e==="x"){if(r==="center")y=v((t.top+t.bottom)/2+.5);else if(V(r)){const R=Object.keys(r)[0],z=r[R];y=v(this.chart.scales[R].getPixelForValue(z))}D=t.top,M=t.bottom,A=y+b,S=A+d}else if(e==="y"){if(r==="center")y=v((t.left+t.right)/2);else if(V(r)){const R=Object.keys(r)[0],z=r[R];y=v(this.chart.scales[R].getPixelForValue(z))}C=y-b,w=C-d,k=t.left,I=t.right}const P=B(n.ticks.maxTicksLimit,h),X=Math.max(1,Math.ceil(h/P));for(T=0;T<h;T+=X){const R=o.setContext(this.getContext(T)),z=R.lineWidth,Y=R.color,Gt=R.borderDash||[],oe=R.borderDashOffset,re=R.tickWidth,li=R.tickColor,qt=R.tickBorderDash||[],Ae=R.tickBorderDashOffset;x=RD(this,T,a),x!==void 0&&(E=Mi(i,x,z),l?C=w=k=I=E:A=S=D=M=E,u.push({tx1:C,ty1:A,tx2:w,ty2:S,x1:k,y1:D,x2:I,y2:M,width:z,color:Y,borderDash:Gt,borderDashOffset:oe,tickWidth:re,tickColor:li,tickBorderDash:qt,tickBorderDashOffset:Ae}))}return this._ticksLength=h,this._borderValue=y,u}_computeLabelItems(t){const e=this.axis,i=this.options,{position:n,ticks:o}=i,r=this.isHorizontal(),a=this.ticks,{align:l,crossAlign:c,padding:h,mirror:d}=o,u=Kn(i.grid),p=u+h,f=d?-h:p,b=-se(this.labelRotation),v=[];let y,T,x,E,C,A,w,S,k,D,I,M,P="middle";if(n==="top")A=this.bottom-f,w=this._getXAxisLabelAlignment();else if(n==="bottom")A=this.top+f,w=this._getXAxisLabelAlignment();else if(n==="left"){const R=this._getYAxisLabelAlignment(u);w=R.textAlign,C=R.x}else if(n==="right"){const R=this._getYAxisLabelAlignment(u);w=R.textAlign,C=R.x}else if(e==="x"){if(n==="center")A=(t.top+t.bottom)/2+p;else if(V(n)){const R=Object.keys(n)[0],z=n[R];A=this.chart.scales[R].getPixelForValue(z)+p}w=this._getXAxisLabelAlignment()}else if(e==="y"){if(n==="center")C=(t.left+t.right)/2-p;else if(V(n)){const R=Object.keys(n)[0],z=n[R];C=this.chart.scales[R].getPixelForValue(z)}w=this._getYAxisLabelAlignment(u).textAlign}e==="y"&&(l==="start"?P="top":l==="end"&&(P="bottom"));const X=this._getLabelSizes();for(y=0,T=a.length;y<T;++y){x=a[y],E=x.label;const R=o.setContext(this.getContext(y));S=this.getPixelForTick(y)+o.labelOffset,k=this._resolveTickFontOptions(y),D=k.lineHeight,I=Q(E)?E.length:1;const z=I/2,Y=R.color,Gt=R.textStrokeColor,oe=R.textStrokeWidth;let re=w;r?(C=S,w==="inner"&&(y===T-1?re=this.options.reverse?"left":"right":y===0?re=this.options.reverse?"right":"left":re="center"),n==="top"?c==="near"||b!==0?M=-I*D+D/2:c==="center"?M=-X.highest.height/2-z*D+D:M=-X.highest.height+D/2:c==="near"||b!==0?M=D/2:c==="center"?M=X.highest.height/2-z*D:M=X.highest.height-I*D,d&&(M*=-1)):(A=S,M=(1-I)*D/2);let li;if(R.showLabelBackdrop){const qt=pt(R.backdropPadding),Ae=X.heights[y],we=X.widths[y];let Zt=A+M-qt.top,Pe=C-qt.left;switch(P){case"middle":Zt-=Ae/2;break;case"bottom":Zt-=Ae;break}switch(w){case"center":Pe-=we/2;break;case"right":Pe-=we;break}li={left:Pe,top:Zt,width:we+qt.width,height:Ae+qt.height,color:R.backdropColor}}v.push({rotation:b,label:E,font:k,color:Y,strokeColor:Gt,strokeWidth:oe,textOffset:M,textAlign:re,textBaseline:P,translation:[C,A],backdrop:li})}return v}_getXAxisLabelAlignment(){const{position:t,ticks:e}=this.options;if(-se(this.labelRotation))return t==="top"?"left":"right";let n="center";return e.align==="start"?n="left":e.align==="end"?n="right":e.align==="inner"&&(n="inner"),n}_getYAxisLabelAlignment(t){const{position:e,ticks:{crossAlign:i,mirror:n,padding:o}}=this.options,r=this._getLabelSizes(),a=t+o,l=r.widest.width;let c,h;return e==="left"?n?(h=this.right+o,i==="near"?c="left":i==="center"?(c="center",h+=l/2):(c="right",h+=l)):(h=this.right-a,i==="near"?c="right":i==="center"?(c="center",h-=l/2):(c="left",h=this.left)):e==="right"?n?(h=this.left+o,i==="near"?c="right":i==="center"?(c="center",h-=l/2):(c="left",h-=l)):(h=this.left+a,i==="near"?c="left":i==="center"?(c="center",h+=l/2):(c="right",h=this.right)):c="right",{textAlign:c,x:h}}_computeLabelArea(){if(this.options.ticks.mirror)return;const t=this.chart,e=this.options.position;if(e==="left"||e==="right")return{top:0,left:this.left,bottom:t.height,right:this.right};if(e==="top"||e==="bottom")return{top:this.top,left:0,bottom:this.bottom,right:t.width}}drawBackground(){const{ctx:t,options:{backgroundColor:e},left:i,top:n,width:o,height:r}=this;e&&(t.save(),t.fillStyle=e,t.fillRect(i,n,o,r),t.restore())}getLineWidthForValue(t){const e=this.options.grid;if(!this._isVisible()||!e.display)return 0;const n=this.ticks.findIndex(o=>o.value===t);return n>=0?e.setContext(this.getContext(n)).lineWidth:0}drawGrid(t){const e=this.options.grid,i=this.ctx,n=this._gridLineItems||(this._gridLineItems=this._computeGridLineItems(t));let o,r;const a=(l,c,h)=>{!h.width||!h.color||(i.save(),i.lineWidth=h.width,i.strokeStyle=h.color,i.setLineDash(h.borderDash||[]),i.lineDashOffset=h.borderDashOffset,i.beginPath(),i.moveTo(l.x,l.y),i.lineTo(c.x,c.y),i.stroke(),i.restore())};if(e.display)for(o=0,r=n.length;o<r;++o){const l=n[o];e.drawOnChartArea&&a({x:l.x1,y:l.y1},{x:l.x2,y:l.y2},l),e.drawTicks&&a({x:l.tx1,y:l.ty1},{x:l.tx2,y:l.ty2},{color:l.tickColor,width:l.tickWidth,borderDash:l.tickBorderDash,borderDashOffset:l.tickBorderDashOffset})}}drawBorder(){const{chart:t,ctx:e,options:{grid:i}}=this,n=i.setContext(this.getContext()),o=i.drawBorder?n.borderWidth:0;if(!o)return;const r=i.setContext(this.getContext(0)).lineWidth,a=this._borderValue;let l,c,h,d;this.isHorizontal()?(l=Mi(t,this.left,o)-o/2,c=Mi(t,this.right,r)+r/2,h=d=a):(h=Mi(t,this.top,o)-o/2,d=Mi(t,this.bottom,r)+r/2,l=c=a),e.save(),e.lineWidth=n.borderWidth,e.strokeStyle=n.borderColor,e.beginPath(),e.moveTo(l,h),e.lineTo(c,d),e.stroke(),e.restore()}drawLabels(t){if(!this.options.ticks.display)return;const i=this.ctx,n=this._computeLabelArea();n&&qr(i,n);const o=this._labelItems||(this._labelItems=this._computeLabelItems(t));let r,a;for(r=0,a=o.length;r<a;++r){const l=o[r],c=l.font,h=l.label;l.backdrop&&(i.fillStyle=l.backdrop.color,i.fillRect(l.backdrop.left,l.backdrop.top,l.backdrop.width,l.backdrop.height));let d=l.textOffset;Li(i,h,0,d,c,l)}n&&Zr(i)}drawTitle(){const{ctx:t,options:{position:e,title:i,reverse:n}}=this;if(!i.display)return;const o=lt(i.font),r=pt(i.padding),a=i.align;let l=o.lineHeight/2;e==="bottom"||e==="center"||V(e)?(l+=r.bottom,Q(i.text)&&(l+=o.lineHeight*(i.text.length-1))):l+=r.top;const{titleX:c,titleY:h,maxWidth:d,rotation:u}=VD(this,l,e,a);Li(t,i.text,0,0,o,{color:i.color,maxWidth:d,rotation:u,textAlign:HD(a,e,n),textBaseline:"middle",translation:[c,h]})}draw(t){this._isVisible()&&(this.drawBackground(),this.drawGrid(t),this.drawBorder(),this.drawTitle(),this.drawLabels(t))}_layers(){const t=this.options,e=t.ticks&&t.ticks.z||0,i=B(t.grid&&t.grid.z,-1);return!this._isVisible()||this.draw!==oi.prototype.draw?[{z:e,draw:n=>{this.draw(n)}}]:[{z:i,draw:n=>{this.drawBackground(),this.drawGrid(n),this.drawTitle()}},{z:i+1,draw:()=>{this.drawBorder()}},{z:e,draw:n=>{this.drawLabels(n)}}]}getMatchingVisibleMetas(t){const e=this.chart.getSortedVisibleDatasetMetas(),i=this.axis+"AxisID",n=[];let o,r;for(o=0,r=e.length;o<r;++o){const a=e[o];a[i]===this.id&&(!t||a.type===t)&&n.push(a)}return n}_resolveTickFontOptions(t){const e=this.options.ticks.setContext(this.getContext(t));return lt(e.font)}_maxDigits(){const t=this._resolveTickFontOptions(0).lineHeight;return(this.isHorizontal()?this.width:this.height)/t}}class sa{constructor(t,e,i){this.type=t,this.scope=e,this.override=i,this.items=Object.create(null)}isForType(t){return Object.prototype.isPrototypeOf.call(this.type.prototype,t.prototype)}register(t){const e=Object.getPrototypeOf(t);let i;zD(e)&&(i=this.register(e));const n=this.items,o=t.id,r=this.scope+"."+o;if(!o)throw new Error("class does not have id: "+t);return o in n||(n[o]=t,FD(t,r,i),this.override&&F.override(t.id,t.overrides)),r}get(t){return this.items[t]}unregister(t){const e=this.items,i=t.id,n=this.scope;i in e&&delete e[i],n&&i in F[n]&&(delete F[n][i],this.override&&delete Di[i])}}function FD(s,t,e){const i=Te(Object.create(null),[e?F.get(e):{},F.get(t),s.defaults]);F.set(t,i),s.defaultRoutes&&WD(t,s.defaultRoutes),s.descriptors&&F.describe(t,s.descriptors)}function WD(s,t){Object.keys(t).forEach(e=>{const i=e.split("."),n=i.pop(),o=[s].concat(i).join("."),r=t[e].split("."),a=r.pop(),l=r.join(".");F.route(o,n,l,a)})}function zD(s){return"id"in s&&"defaults"in s}class jD{constructor(){this.controllers=new sa(Ut,"datasets",!0),this.elements=new sa(Xt,"elements"),this.plugins=new sa(Object,"plugins"),this.scales=new sa(oi,"scales"),this._typedRegistries=[this.controllers,this.scales,this.elements]}add(...t){this._each("register",t)}remove(...t){this._each("unregister",t)}addControllers(...t){this._each("register",t,this.controllers)}addElements(...t){this._each("register",t,this.elements)}addPlugins(...t){this._each("register",t,this.plugins)}addScales(...t){this._each("register",t,this.scales)}getController(t){return this._get(t,this.controllers,"controller")}getElement(t){return this._get(t,this.elements,"element")}getPlugin(t){return this._get(t,this.plugins,"plugin")}getScale(t){return this._get(t,this.scales,"scale")}removeControllers(...t){this._each("unregister",t,this.controllers)}removeElements(...t){this._each("unregister",t,this.elements)}removePlugins(...t){this._each("unregister",t,this.plugins)}removeScales(...t){this._each("unregister",t,this.scales)}_each(t,e,i){[...e].forEach(n=>{const o=i||this._getRegistryForType(n);i||o.isForType(n)||o===this.plugins&&n.id?this._exec(t,o,n):U(n,r=>{const a=i||this._getRegistryForType(r);this._exec(t,a,r)})})}_exec(t,e,i){const n=gc(t);G(i["before"+n],[],i),e[t](i),G(i["after"+n],[],i)}_getRegistryForType(t){for(let e=0;e<this._typedRegistries.length;e++){const i=this._typedRegistries[e];if(i.isForType(t))return i}return this.plugins}_get(t,e,i){const n=e.get(t);if(n===void 0)throw new Error('"'+t+'" is not a registered '+i+".");return n}}var ne=new jD;class Un extends Ut{update(t){const e=this._cachedMeta,{data:i=[]}=e,n=this.chart._animationsDisabled;let{start:o,count:r}=If(e,i,n);if(this._drawStart=o,this._drawCount=r,Df(e)&&(o=0,r=i.length),this.options.showLine){const{dataset:a,_dataset:l}=e;a._chart=this.chart,a._datasetIndex=this.index,a._decimated=!!l._decimated,a.points=i;const c=this.resolveDatasetElementOptions(t);c.segment=this.options.segment,this.updateElement(a,void 0,{animated:!n,options:c},t)}this.updateElements(i,o,r,t)}addElements(){const{showLine:t}=this.options;!this.datasetElementType&&t&&(this.datasetElementType=ne.getElement("line")),super.addElements()}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a,_stacked:l,_dataset:c}=this._cachedMeta,h=this.resolveDataElementOptions(e,n),d=this.getSharedOptions(h),u=this.includeOptions(n,d),p=r.axis,f=a.axis,{spanGaps:b,segment:v}=this.options,y=As(b)?b:Number.POSITIVE_INFINITY,T=this.chart._animationsDisabled||o||n==="none";let x=e>0&&this.getParsed(e-1);for(let E=e;E<e+i;++E){const C=t[E],A=this.getParsed(E),w=T?C:{},S=H(A[f]),k=w[p]=r.getPixelForValue(A[p],E),D=w[f]=o||S?a.getBasePixel():a.getPixelForValue(l?this.applyStack(a,A,l):A[f],E);w.skip=isNaN(k)||isNaN(D)||S,w.stop=E>0&&Math.abs(A[p]-x[p])>y,v&&(w.parsed=A,w.raw=c.data[E]),u&&(w.options=d||this.resolveDataElementOptions(E,C.active?"active":n)),T||this.updateElement(C,E,w,n),x=A}this.updateSharedOptions(d,n,h)}getMaxOverflow(){const t=this._cachedMeta,e=t.data||[];if(!this.options.showLine){let a=0;for(let l=e.length-1;l>=0;--l)a=Math.max(a,e[l].size(this.resolveDataElementOptions(l))/2);return a>0&&a}const i=t.dataset,n=i.options&&i.options.borderWidth||0;if(!e.length)return n;const o=e[0].size(this.resolveDataElementOptions(0)),r=e[e.length-1].size(this.resolveDataElementOptions(e.length-1));return Math.max(n,o,r)/2}}Un.id="scatter",Un.defaults={datasetElementType:!1,dataElementType:"point",showLine:!1,fill:!1},Un.overrides={interaction:{mode:"point"},plugins:{tooltip:{callbacks:{title(){return""},label(s){return"("+s.label+", "+s.formattedValue+")"}}}},scales:{x:{type:"linear"},y:{type:"linear"}}};var I_=Object.freeze({__proto__:null,BarController:Vn,BubbleController:Fn,DoughnutController:Bi,LineController:Wn,PolarAreaController:zn,PieController:ea,RadarController:jn,ScatterController:Un});function Hi(){throw new Error("This method is not implemented: Check that a complete date adapter is provided.")}class Vc{constructor(t){this.options=t||{}}init(t){}formats(){return Hi()}parse(t,e){return Hi()}format(t,e){return Hi()}add(t,e,i){return Hi()}diff(t,e,i){return Hi()}startOf(t,e,i){return Hi()}endOf(t,e){return Hi()}}Vc.override=function(s){Object.assign(Vc.prototype,s)};var D_={_date:Vc};function YD(s,t,e,i){const{controller:n,data:o,_sorted:r}=s,a=n._cachedMeta.iScale;if(a&&t===a.axis&&t!=="r"&&r&&o.length){const l=a._reversePixels?RO:De;if(i){if(n._sharedOptions){const c=o[0],h=typeof c.getRange=="function"&&c.getRange(t);if(h){const d=l(o,t,e-h),u=l(o,t,e+h);return{lo:d.lo,hi:u.hi}}}}else return l(o,t,e)}return{lo:0,hi:o.length-1}}function Xn(s,t,e,i,n){const o=s.getSortedVisibleDatasetMetas(),r=e[t];for(let a=0,l=o.length;a<l;++a){const{index:c,data:h}=o[a],{lo:d,hi:u}=YD(o[a],t,r,n);for(let p=d;p<=u;++p){const f=h[p];f.skip||i(f,c,p)}}}function KD(s){const t=s.indexOf("x")!==-1,e=s.indexOf("y")!==-1;return function(i,n){const o=t?Math.abs(i.x-n.x):0,r=e?Math.abs(i.y-n.y):0;return Math.sqrt(Math.pow(o,2)+Math.pow(r,2))}}function Fc(s,t,e,i,n){const o=[];return!n&&!s.isPointInArea(t)||Xn(s,e,t,function(a,l,c){!n&&!Pn(a,s.chartArea,0)||a.inRange(t.x,t.y,i)&&o.push({element:a,datasetIndex:l,index:c})},!0),o}function UD(s,t,e,i){let n=[];function o(r,a,l){const{startAngle:c,endAngle:h}=r.getProps(["startAngle","endAngle"],i),{angle:d}=Cf(r,{x:t.x,y:t.y});Dn(d,c,h)&&n.push({element:r,datasetIndex:a,index:l})}return Xn(s,e,t,o),n}function XD(s,t,e,i,n,o){let r=[];const a=KD(e);let l=Number.POSITIVE_INFINITY;function c(h,d,u){const p=h.inRange(t.x,t.y,n);if(i&&!p)return;const f=h.getCenterPoint(n);if(!(!!o||s.isPointInArea(f))&&!p)return;const v=a(t,f);v<l?(r=[{element:h,datasetIndex:d,index:u}],l=v):v===l&&r.push({element:h,datasetIndex:d,index:u})}return Xn(s,e,t,c),r}function Wc(s,t,e,i,n,o){return!o&&!s.isPointInArea(t)?[]:e==="r"&&!i?UD(s,t,e,n):XD(s,t,e,i,n,o)}function M_(s,t,e,i,n){const o=[],r=e==="x"?"inXRange":"inYRange";let a=!1;return Xn(s,e,t,(l,c,h)=>{l[r](t[e],n)&&(o.push({element:l,datasetIndex:c,index:h}),a=a||l.inRange(t.x,t.y,n))}),i&&!a?[]:o}var L_={evaluateInteractionItems:Xn,modes:{index(s,t,e,i){const n=Pi(t,s),o=e.axis||"x",r=e.includeInvisible||!1,a=e.intersect?Fc(s,n,o,i,r):Wc(s,n,o,!1,i,r),l=[];return a.length?(s.getSortedVisibleDatasetMetas().forEach(c=>{const h=a[0].index,d=c.data[h];d&&!d.skip&&l.push({element:d,datasetIndex:c.index,index:h})}),l):[]},dataset(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;let a=e.intersect?Fc(s,n,o,i,r):Wc(s,n,o,!1,i,r);if(a.length>0){const l=a[0].datasetIndex,c=s.getDatasetMeta(l).data;a=[];for(let h=0;h<c.length;++h)a.push({element:c[h],datasetIndex:l,index:h})}return a},point(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;return Fc(s,n,o,i,r)},nearest(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;return Wc(s,n,o,e.intersect,i,r)},x(s,t,e,i){const n=Pi(t,s);return M_(s,n,"x",e.intersect,i)},y(s,t,e,i){const n=Pi(t,s);return M_(s,n,"y",e.intersect,i)}}};const $_=["left","top","right","bottom"];function Gn(s,t){return s.filter(e=>e.pos===t)}function R_(s,t){return s.filter(e=>$_.indexOf(e.pos)===-1&&e.box.axis===t)}function qn(s,t){return s.sort((e,i)=>{const n=t?i:e,o=t?e:i;return n.weight===o.weight?n.index-o.index:n.weight-o.weight})}function GD(s){const t=[];let e,i,n,o,r,a;for(e=0,i=(s||[]).length;e<i;++e)n=s[e],{position:o,options:{stack:r,stackWeight:a=1}}=n,t.push({index:e,box:n,pos:o,horizontal:n.isHorizontal(),weight:n.weight,stack:r&&o+r,stackWeight:a});return t}function qD(s){const t={};for(const e of s){const{stack:i,pos:n,stackWeight:o}=e;if(!i||!$_.includes(n))continue;const r=t[i]||(t[i]={count:0,placed:0,weight:0,size:0});r.count++,r.weight+=o}return t}function ZD(s,t){const e=qD(s),{vBoxMaxWidth:i,hBoxMaxHeight:n}=t;let o,r,a;for(o=0,r=s.length;o<r;++o){a=s[o];const{fullSize:l}=a.box,c=e[a.stack],h=c&&a.stackWeight/c.weight;a.horizontal?(a.width=h?h*i:l&&t.availableWidth,a.height=n):(a.width=i,a.height=h?h*n:l&&t.availableHeight)}return e}function QD(s){const t=GD(s),e=qn(t.filter(c=>c.box.fullSize),!0),i=qn(Gn(t,"left"),!0),n=qn(Gn(t,"right")),o=qn(Gn(t,"top"),!0),r=qn(Gn(t,"bottom")),a=R_(t,"x"),l=R_(t,"y");return{fullSize:e,leftAndTop:i.concat(o),rightAndBottom:n.concat(l).concat(r).concat(a),chartArea:Gn(t,"chartArea"),vertical:i.concat(n).concat(l),horizontal:o.concat(r).concat(a)}}function P_(s,t,e,i){return Math.max(s[e],t[e])+Math.max(s[i],t[i])}function N_(s,t){s.top=Math.max(s.top,t.top),s.left=Math.max(s.left,t.left),s.bottom=Math.max(s.bottom,t.bottom),s.right=Math.max(s.right,t.right)}function JD(s,t,e,i){const{pos:n,box:o}=e,r=s.maxPadding;if(!V(n)){e.size&&(s[n]-=e.size);const d=i[e.stack]||{size:0,count:1};d.size=Math.max(d.size,e.horizontal?o.height:o.width),e.size=d.size/d.count,s[n]+=e.size}o.getPadding&&N_(r,o.getPadding());const a=Math.max(0,t.outerWidth-P_(r,s,"left","right")),l=Math.max(0,t.outerHeight-P_(r,s,"top","bottom")),c=a!==s.w,h=l!==s.h;return s.w=a,s.h=l,e.horizontal?{same:c,other:h}:{same:h,other:c}}function t1(s){const t=s.maxPadding;function e(i){const n=Math.max(t[i]-s[i],0);return s[i]+=n,n}s.y+=e("top"),s.x+=e("left"),e("right"),e("bottom")}function e1(s,t){const e=t.maxPadding;function i(n){const o={left:0,top:0,right:0,bottom:0};return n.forEach(r=>{o[r]=Math.max(t[r],e[r])}),o}return i(s?["left","right"]:["top","bottom"])}function Zn(s,t,e,i){const n=[];let o,r,a,l,c,h;for(o=0,r=s.length,c=0;o<r;++o){a=s[o],l=a.box,l.update(a.width||t.w,a.height||t.h,e1(a.horizontal,t));const{same:d,other:u}=JD(t,e,a,i);c|=d&&n.length,h=h||u,l.fullSize||n.push(a)}return c&&Zn(n,t,e,i)||h}function na(s,t,e,i,n){s.top=e,s.left=t,s.right=t+i,s.bottom=e+n,s.width=i,s.height=n}function B_(s,t,e,i){const n=e.padding;let{x:o,y:r}=t;for(const a of s){const l=a.box,c=i[a.stack]||{count:1,placed:0,weight:1},h=a.stackWeight/c.weight||1;if(a.horizontal){const d=t.w*h,u=c.size||l.height;jt(c.start)&&(r=c.start),l.fullSize?na(l,n.left,r,e.outerWidth-n.right-n.left,u):na(l,t.left+c.placed,r,d,u),c.start=r,c.placed+=d,r=l.bottom}else{const d=t.h*h,u=c.size||l.width;jt(c.start)&&(o=c.start),l.fullSize?na(l,o,n.top,u,e.outerHeight-n.bottom-n.top):na(l,o,t.top+c.placed,u,d),c.start=o,c.placed+=d,o=l.right}}t.x=o,t.y=r}F.set("layout",{autoPadding:!0,padding:{top:0,right:0,bottom:0,left:0}});var ft={addBox(s,t){s.boxes||(s.boxes=[]),t.fullSize=t.fullSize||!1,t.position=t.position||"top",t.weight=t.weight||0,t._layers=t._layers||function(){return[{z:0,draw(e){t.draw(e)}}]},s.boxes.push(t)},removeBox(s,t){const e=s.boxes?s.boxes.indexOf(t):-1;e!==-1&&s.boxes.splice(e,1)},configure(s,t,e){t.fullSize=e.fullSize,t.position=e.position,t.weight=e.weight},update(s,t,e,i){if(!s)return;const n=pt(s.options.layout.padding),o=Math.max(t-n.width,0),r=Math.max(e-n.height,0),a=QD(s.boxes),l=a.vertical,c=a.horizontal;U(s.boxes,b=>{typeof b.beforeLayout=="function"&&b.beforeLayout()});const h=l.reduce((b,v)=>v.box.options&&v.box.options.display===!1?b:b+1,0)||1,d=Object.freeze({outerWidth:t,outerHeight:e,padding:n,availableWidth:o,availableHeight:r,vBoxMaxWidth:o/2/h,hBoxMaxHeight:r/2}),u=Object.assign({},n);N_(u,pt(i));const p=Object.assign({maxPadding:u,w:o,h:r,x:n.left,y:n.top},n),f=ZD(l.concat(c),d);Zn(a.fullSize,p,d,f),Zn(l,p,d,f),Zn(c,p,d,f)&&Zn(l,p,d,f),t1(p),B_(a.leftAndTop,p,d,f),p.x+=p.w,p.y+=p.h,B_(a.rightAndBottom,p,d,f),s.chartArea={left:p.left,top:p.top,right:p.left+p.w,bottom:p.top+p.h,height:p.h,width:p.w},U(a.chartArea,b=>{const v=b.box;Object.assign(v,s.chartArea),v.update(p.w,p.h,{left:0,top:0,right:0,bottom:0})})}};class zc{acquireContext(t,e){}releaseContext(t){return!1}addEventListener(t,e,i){}removeEventListener(t,e,i){}getDevicePixelRatio(){return 1}getMaximumSize(t,e,i,n){return e=Math.max(0,e||t.width),i=i||t.height,{width:e,height:Math.max(0,n?Math.floor(e/n):i)}}isAttached(t){return!0}updateConfig(t){}}class H_ extends zc{acquireContext(t){return t&&t.getContext&&t.getContext("2d")||null}updateConfig(t){t.options.animation=!1}}const oa="$chartjs",i1={touchstart:"mousedown",touchmove:"mousemove",touchend:"mouseup",pointerenter:"mouseenter",pointerdown:"mousedown",pointermove:"mousemove",pointerup:"mouseup",pointerleave:"mouseout",pointerout:"mouseout"},V_=s=>s===null||s==="";function s1(s,t){const e=s.style,i=s.getAttribute("height"),n=s.getAttribute("width");if(s[oa]={initial:{height:i,width:n,style:{display:e.display,height:e.height,width:e.width}}},e.display=e.display||"block",e.boxSizing=e.boxSizing||"border-box",V_(n)){const o=s_(s,"width");o!==void 0&&(s.width=o)}if(V_(i))if(s.style.height==="")s.height=s.width/(t||2);else{const o=s_(s,"height");o!==void 0&&(s.height=o)}return s}const F_=WI?{passive:!0}:!1;function n1(s,t,e){s.addEventListener(t,e,F_)}function o1(s,t,e){s.canvas.removeEventListener(t,e,F_)}function r1(s,t){const e=i1[s.type]||s.type,{x:i,y:n}=Pi(s,t);return{type:e,chart:t,native:s,x:i!==void 0?i:null,y:n!==void 0?n:null}}function ra(s,t){for(const e of s)if(e===t||e.contains(t))return!0}function a1(s,t,e){const i=s.canvas,n=new MutationObserver(o=>{let r=!1;for(const a of o)r=r||ra(a.addedNodes,i),r=r&&!ra(a.removedNodes,i);r&&e()});return n.observe(document,{childList:!0,subtree:!0}),n}function l1(s,t,e){const i=s.canvas,n=new MutationObserver(o=>{let r=!1;for(const a of o)r=r||ra(a.removedNodes,i),r=r&&!ra(a.addedNodes,i);r&&e()});return n.observe(document,{childList:!0,subtree:!0}),n}const Qn=new Map;let W_=0;function z_(){const s=window.devicePixelRatio;s!==W_&&(W_=s,Qn.forEach((t,e)=>{e.currentDevicePixelRatio!==s&&t()}))}function c1(s,t){Qn.size||window.addEventListener("resize",z_),Qn.set(s,t)}function h1(s){Qn.delete(s),Qn.size||window.removeEventListener("resize",z_)}function d1(s,t,e){const i=s.canvas,n=i&&$c(i);if(!n)return;const o=Of((a,l)=>{const c=n.clientWidth;e(a,l),c<n.clientWidth&&e()},window),r=new ResizeObserver(a=>{const l=a[0],c=l.contentRect.width,h=l.contentRect.height;c===0&&h===0||o(c,h)});return r.observe(n),c1(s,o),r}function jc(s,t,e){e&&e.disconnect(),t==="resize"&&h1(s)}function u1(s,t,e){const i=s.canvas,n=Of(o=>{s.ctx!==null&&e(r1(o,s))},s,o=>{const r=o[0];return[r,r.offsetX,r.offsetY]});return n1(i,t,n),n}class j_ extends zc{acquireContext(t,e){const i=t&&t.getContext&&t.getContext("2d");return i&&i.canvas===t?(s1(t,e),i):null}releaseContext(t){const e=t.canvas;if(!e[oa])return!1;const i=e[oa].initial;["height","width"].forEach(o=>{const r=i[o];H(r)?e.removeAttribute(o):e.setAttribute(o,r)});const n=i.style||{};return Object.keys(n).forEach(o=>{e.style[o]=n[o]}),e.width=e.width,delete e[oa],!0}addEventListener(t,e,i){this.removeEventListener(t,e);const n=t.$proxies||(t.$proxies={}),r={attach:a1,detach:l1,resize:d1}[e]||u1;n[e]=r(t,e,i)}removeEventListener(t,e){const i=t.$proxies||(t.$proxies={}),n=i[e];if(!n)return;({attach:jc,detach:jc,resize:jc}[e]||o1)(t,e,n),i[e]=void 0}getDevicePixelRatio(){return window.devicePixelRatio}getMaximumSize(t,e,i,n){return FI(t,e,i,n)}isAttached(t){const e=$c(t);return!!(e&&e.isConnected)}}function Y_(s){return!e_()||typeof OffscreenCanvas<"u"&&s instanceof OffscreenCanvas?H_:j_}class p1{constructor(){this._init=[]}notify(t,e,i,n){e==="beforeInit"&&(this._init=this._createDescriptors(t,!0),this._notify(this._init,t,"install"));const o=n?this._descriptors(t).filter(n):this._descriptors(t),r=this._notify(o,t,e,i);return e==="afterDestroy"&&(this._notify(o,t,"stop"),this._notify(this._init,t,"uninstall")),r}_notify(t,e,i,n){n=n||{};for(const o of t){const r=o.plugin,a=r[i],l=[e,n,o.options];if(G(a,l,r)===!1&&n.cancelable)return!1}return!0}invalidate(){H(this._cache)||(this._oldCache=this._cache,this._cache=void 0)}_descriptors(t){if(this._cache)return this._cache;const e=this._cache=this._createDescriptors(t);return this._notifyStateChanges(t),e}_createDescriptors(t,e){const i=t&&t.config,n=B(i.options&&i.options.plugins,{}),o=f1(i);return n===!1&&!e?[]:g1(t,o,n,e)}_notifyStateChanges(t){const e=this._oldCache||[],i=this._cache,n=(o,r)=>o.filter(a=>!r.some(l=>a.plugin.id===l.plugin.id));this._notify(n(e,i),t,"stop"),this._notify(n(i,e),t,"start")}}function f1(s){const t={},e=[],i=Object.keys(ne.plugins.items);for(let o=0;o<i.length;o++)e.push(ne.getPlugin(i[o]));const n=s.plugins||[];for(let o=0;o<n.length;o++){const r=n[o];e.indexOf(r)===-1&&(e.push(r),t[r.id]=!0)}return{plugins:e,localIds:t}}function _1(s,t){return!t&&s===!1?null:s===!0?{}:s}function g1(s,{plugins:t,localIds:e},i,n){const o=[],r=s.getContext();for(const a of t){const l=a.id,c=_1(i[l],n);c!==null&&o.push({plugin:a,options:m1(s.config,{plugin:a,local:e[l]},c,r)})}return o}function m1(s,{plugin:t,local:e},i,n){const o=s.pluginScopeKeys(t),r=s.getOptionScopes(i,o);return e&&t.defaults&&r.push(t.defaults),s.createResolver(r,n,[""],{scriptable:!1,indexable:!1,allKeys:!0})}function Yc(s,t){const e=F.datasets[s]||{};return((t.datasets||{})[s]||{}).indexAxis||t.indexAxis||e.indexAxis||"x"}function b1(s,t){let e=s;return s==="_index_"?e=t:s==="_value_"&&(e=t==="x"?"y":"x"),e}function v1(s,t){return s===t?"_index_":"_value_"}function y1(s){if(s==="top"||s==="bottom")return"x";if(s==="left"||s==="right")return"y"}function Kc(s,t){return s==="x"||s==="y"?s:t.axis||y1(t.position)||s.charAt(0).toLowerCase()}function T1(s,t){const e=Di[s.type]||{scales:{}},i=t.scales||{},n=Yc(s.type,t),o=Object.create(null),r=Object.create(null);return Object.keys(i).forEach(a=>{const l=i[a];if(!V(l))return console.error(`Invalid scale configuration for scale: ${a}`);if(l._proxy)return console.warn(`Ignoring resolver passed as options for scale: ${a}`);const c=Kc(a,l),h=v1(c,n),d=e.scales||{};o[c]=o[c]||a,r[a]=Sn(Object.create(null),[{axis:c},l,d[c],d[h]])}),s.data.datasets.forEach(a=>{const l=a.type||s.type,c=a.indexAxis||Yc(l,t),d=(Di[l]||{}).scales||{};Object.keys(d).forEach(u=>{const p=b1(u,c),f=a[p+"AxisID"]||o[p]||p;r[f]=r[f]||Object.create(null),Sn(r[f],[{axis:p},i[f],d[u]])})}),Object.keys(r).forEach(a=>{const l=r[a];Sn(l,[F.scales[l.type],F.scale])}),r}function K_(s){const t=s.options||(s.options={});t.plugins=B(t.plugins,{}),t.scales=T1(s,t)}function U_(s){return s=s||{},s.datasets=s.datasets||[],s.labels=s.labels||[],s}function E1(s){return s=s||{},s.data=U_(s.data),K_(s),s}const X_=new Map,G_=new Set;function aa(s,t){let e=X_.get(s);return e||(e=t(),X_.set(s,e),G_.add(e)),e}const Jn=(s,t,e)=>{const i=ti(t,e);i!==void 0&&s.add(i)};class x1{constructor(t){this._config=E1(t),this._scopeCache=new Map,this._resolverCache=new Map}get platform(){return this._config.platform}get type(){return this._config.type}set type(t){this._config.type=t}get data(){return this._config.data}set data(t){this._config.data=U_(t)}get options(){return this._config.options}set options(t){this._config.options=t}get plugins(){return this._config.plugins}update(){const t=this._config;this.clearCache(),K_(t)}clearCache(){this._scopeCache.clear(),this._resolverCache.clear()}datasetScopeKeys(t){return aa(t,()=>[[`datasets.${t}`,""]])}datasetAnimationScopeKeys(t,e){return aa(`${t}.transition.${e}`,()=>[[`datasets.${t}.transitions.${e}`,`transitions.${e}`],[`datasets.${t}`,""]])}datasetElementScopeKeys(t,e){return aa(`${t}-${e}`,()=>[[`datasets.${t}.elements.${e}`,`datasets.${t}`,`elements.${e}`,""]])}pluginScopeKeys(t){const e=t.id,i=this.type;return aa(`${i}-plugin-${e}`,()=>[[`plugins.${e}`,...t.additionalOptionScopes||[]]])}_cachedScopes(t,e){const i=this._scopeCache;let n=i.get(t);return(!n||e)&&(n=new Map,i.set(t,n)),n}getOptionScopes(t,e,i){const{options:n,type:o}=this,r=this._cachedScopes(t,i),a=r.get(e);if(a)return a;const l=new Set;e.forEach(h=>{t&&(l.add(t),h.forEach(d=>Jn(l,t,d))),h.forEach(d=>Jn(l,n,d)),h.forEach(d=>Jn(l,Di[o]||{},d)),h.forEach(d=>Jn(l,F,d)),h.forEach(d=>Jn(l,kc,d))});const c=Array.from(l);return c.length===0&&c.push(Object.create(null)),G_.has(e)&&r.set(e,c),c}chartOptionScopes(){const{options:t,type:e}=this;return[t,Di[e]||{},F.datasets[e]||{},{type:e},F,kc]}resolveNamedOptions(t,e,i,n=[""]){const o={$shared:!0},{resolver:r,subPrefixes:a}=q_(this._resolverCache,t,n);let l=r;if(A1(r,e)){o.$shared=!1,i=ei(i)?i():i;const c=this.createResolver(t,i,a);l=ks(r,i,c)}for(const c of e)o[c]=l[c];return o}createResolver(t,e,i=[""],n){const{resolver:o}=q_(this._resolverCache,t,i);return V(e)?ks(o,e,void 0,n):o}}function q_(s,t,e){let i=s.get(t);i||(i=new Map,s.set(t,i));const n=e.join();let o=i.get(n);return o||(o={resolver:Dc(t,e),subPrefixes:e.filter(a=>!a.toLowerCase().includes("hover"))},i.set(n,o)),o}const C1=s=>V(s)&&Object.getOwnPropertyNames(s).reduce((t,e)=>t||ei(s[e]),!1);function A1(s,t){const{isScriptable:e,isIndexable:i}=Uf(s);for(const n of t){const o=e(n),r=i(n),a=(r||o)&&s[n];if(o&&(ei(a)||C1(a))||r&&Q(a))return!0}return!1}var w1="3.9.1";const k1=["top","bottom","left","right","chartArea"];function Z_(s,t){return s==="top"||s==="bottom"||k1.indexOf(s)===-1&&t==="x"}function Q_(s,t){return function(e,i){return e[s]===i[s]?e[t]-i[t]:e[s]-i[s]}}function J_(s){const t=s.chart,e=t.options.animation;t.notifyPlugins("afterRender"),G(e&&e.onComplete,[s],t)}function S1(s){const t=s.chart,e=t.options.animation;G(e&&e.onProgress,[s],t)}function tg(s){return e_()&&typeof s=="string"?s=document.getElementById(s):s&&s.length&&(s=s[0]),s&&s.canvas&&(s=s.canvas),s}const la={},eg=s=>{const t=tg(s);return Object.values(la).filter(e=>e.canvas===t).pop()};function O1(s,t,e){const i=Object.keys(s);for(const n of i){const o=+n;if(o>=t){const r=s[n];delete s[n],(e>0||o>t)&&(s[o+e]=r)}}}function I1(s,t,e,i){return!e||s.type==="mouseout"?null:i?t:s}class Uc{constructor(t,e){const i=this.config=new x1(e),n=tg(t),o=eg(n);if(o)throw new Error("Canvas is already in use. Chart with ID '"+o.id+"' must be destroyed before the canvas with ID '"+o.canvas.id+"' can be reused.");const r=i.createResolver(i.chartOptionScopes(),this.getContext());this.platform=new(i.platform||Y_(n)),this.platform.updateConfig(i);const a=this.platform.acquireContext(n,r.aspectRatio),l=a&&a.canvas,c=l&&l.height,h=l&&l.width;if(this.id=EO(),this.ctx=a,this.canvas=l,this.width=h,this.height=c,this._options=r,this._aspectRatio=this.aspectRatio,this._layers=[],this._metasets=[],this._stacks=void 0,this.boxes=[],this.currentDevicePixelRatio=void 0,this.chartArea=void 0,this._active=[],this._lastEvent=void 0,this._listeners={},this._responsiveListeners=void 0,this._sortedMetasets=[],this.scales={},this._plugins=new p1,this.$proxies={},this._hiddenIndices={},this.attached=!1,this._animationsDisabled=void 0,this.$context=void 0,this._doResize=BO(d=>this.update(d),r.resizeDelay||0),this._dataChanges=[],la[this.id]=this,!a||!l){console.error("Failed to create chart: can't acquire context from the given item");return}xe.listen(this,"complete",J_),xe.listen(this,"progress",S1),this._initialize(),this.attached&&this.update()}get aspectRatio(){const{options:{aspectRatio:t,maintainAspectRatio:e},width:i,height:n,_aspectRatio:o}=this;return H(t)?e&&o?o:n?i/n:null:t}get data(){return this.config.data}set data(t){this.config.data=t}get options(){return this._options}set options(t){this.config.options=t}_initialize(){return this.notifyPlugins("beforeInit"),this.options.responsive?this.resize():i_(this,this.options.devicePixelRatio),this.bindEvents(),this.notifyPlugins("afterInit"),this}clear(){return jf(this.canvas,this.ctx),this}stop(){return xe.stop(this),this}resize(t,e){xe.running(this)?this._resizeBeforeDraw={width:t,height:e}:this._resize(t,e)}_resize(t,e){const i=this.options,n=this.canvas,o=i.maintainAspectRatio&&this.aspectRatio,r=this.platform.getMaximumSize(n,t,e,o),a=i.devicePixelRatio||this.platform.getDevicePixelRatio(),l=this.width?"resize":"attach";this.width=r.width,this.height=r.height,this._aspectRatio=this.aspectRatio,i_(this,a,!0)&&(this.notifyPlugins("resize",{size:r}),G(i.onResize,[this,r],this),this.attached&&this._doResize(l)&&this.render())}ensureScalesHaveIDs(){const e=this.options.scales||{};U(e,(i,n)=>{i.id=n})}buildOrUpdateScales(){const t=this.options,e=t.scales,i=this.scales,n=Object.keys(i).reduce((r,a)=>(r[a]=!1,r),{});let o=[];e&&(o=o.concat(Object.keys(e).map(r=>{const a=e[r],l=Kc(r,a),c=l==="r",h=l==="x";return{options:a,dposition:c?"chartArea":h?"bottom":"left",dtype:c?"radialLinear":h?"category":"linear"}}))),U(o,r=>{const a=r.options,l=a.id,c=Kc(l,a),h=B(a.type,r.dtype);(a.position===void 0||Z_(a.position,c)!==Z_(r.dposition))&&(a.position=r.dposition),n[l]=!0;let d=null;if(l in i&&i[l].type===h)d=i[l];else{const u=ne.getScale(h);d=new u({id:l,type:h,ctx:this.ctx,chart:this}),i[d.id]=d}d.init(a,t)}),U(n,(r,a)=>{r||delete i[a]}),U(i,r=>{ft.configure(this,r,r.options),ft.addBox(this,r)})}_updateMetasets(){const t=this._metasets,e=this.data.datasets.length,i=t.length;if(t.sort((n,o)=>n.index-o.index),i>e){for(let n=e;n<i;++n)this._destroyDatasetMeta(n);t.splice(e,i-e)}this._sortedMetasets=t.slice(0).sort(Q_("order","index"))}_removeUnreferencedMetasets(){const{_metasets:t,data:{datasets:e}}=this;t.length>e.length&&delete this._stacks,t.forEach((i,n)=>{e.filter(o=>o===i._dataset).length===0&&this._destroyDatasetMeta(n)})}buildOrUpdateControllers(){const t=[],e=this.data.datasets;let i,n;for(this._removeUnreferencedMetasets(),i=0,n=e.length;i<n;i++){const o=e[i];let r=this.getDatasetMeta(i);const a=o.type||this.config.type;if(r.type&&r.type!==a&&(this._destroyDatasetMeta(i),r=this.getDatasetMeta(i)),r.type=a,r.indexAxis=o.indexAxis||Yc(a,this.options),r.order=o.order||0,r.index=i,r.label=""+o.label,r.visible=this.isDatasetVisible(i),r.controller)r.controller.updateIndex(i),r.controller.linkScales();else{const l=ne.getController(a),{datasetElementType:c,dataElementType:h}=F.datasets[a];Object.assign(l.prototype,{dataElementType:ne.getElement(h),datasetElementType:c&&ne.getElement(c)}),r.controller=new l(this,i),t.push(r.controller)}}return this._updateMetasets(),t}_resetElements(){U(this.data.datasets,(t,e)=>{this.getDatasetMeta(e).controller.reset()},this)}reset(){this._resetElements(),this.notifyPlugins("reset")}update(t){const e=this.config;e.update();const i=this._options=e.createResolver(e.chartOptionScopes(),this.getContext()),n=this._animationsDisabled=!i.animation;if(this._updateScales(),this._checkEventBindings(),this._updateHiddenIndices(),this._plugins.invalidate(),this.notifyPlugins("beforeUpdate",{mode:t,cancelable:!0})===!1)return;const o=this.buildOrUpdateControllers();this.notifyPlugins("beforeElementsUpdate");let r=0;for(let c=0,h=this.data.datasets.length;c<h;c++){const{controller:d}=this.getDatasetMeta(c),u=!n&&o.indexOf(d)===-1;d.buildOrUpdateElements(u),r=Math.max(+d.getMaxOverflow(),r)}r=this._minPadding=i.layout.autoPadding?r:0,this._updateLayout(r),n||U(o,c=>{c.reset()}),this._updateDatasets(t),this.notifyPlugins("afterUpdate",{mode:t}),this._layers.sort(Q_("z","_idx"));const{_active:a,_lastEvent:l}=this;l?this._eventHandler(l,!0):a.length&&this._updateHoverStyles(a,a,!0),this.render()}_updateScales(){U(this.scales,t=>{ft.removeBox(this,t)}),this.ensureScalesHaveIDs(),this.buildOrUpdateScales()}_checkEventBindings(){const t=this.options,e=new Set(Object.keys(this._listeners)),i=new Set(t.events);(!vf(e,i)||!!this._responsiveListeners!==t.responsive)&&(this.unbindEvents(),this.bindEvents())}_updateHiddenIndices(){const{_hiddenIndices:t}=this,e=this._getUniformDataChanges()||[];for(const{method:i,start:n,count:o}of e){const r=i==="_removeElements"?-o:o;O1(t,n,r)}}_getUniformDataChanges(){const t=this._dataChanges;if(!t||!t.length)return;this._dataChanges=[];const e=this.data.datasets.length,i=o=>new Set(t.filter(r=>r[0]===o).map((r,a)=>a+","+r.splice(1).join(","))),n=i(0);for(let o=1;o<e;o++)if(!vf(n,i(o)))return;return Array.from(n).map(o=>o.split(",")).map(o=>({method:o[1],start:+o[2],count:+o[3]}))}_updateLayout(t){if(this.notifyPlugins("beforeLayout",{cancelable:!0})===!1)return;ft.update(this,this.width,this.height,t);const e=this.chartArea,i=e.width<=0||e.height<=0;this._layers=[],U(this.boxes,n=>{i&&n.position==="chartArea"||(n.configure&&n.configure(),this._layers.push(...n._layers()))},this),this._layers.forEach((n,o)=>{n._idx=o}),this.notifyPlugins("afterLayout")}_updateDatasets(t){if(this.notifyPlugins("beforeDatasetsUpdate",{mode:t,cancelable:!0})!==!1){for(let e=0,i=this.data.datasets.length;e<i;++e)this.getDatasetMeta(e).controller.configure();for(let e=0,i=this.data.datasets.length;e<i;++e)this._updateDataset(e,ei(t)?t({datasetIndex:e}):t);this.notifyPlugins("afterDatasetsUpdate",{mode:t})}}_updateDataset(t,e){const i=this.getDatasetMeta(t),n={meta:i,index:t,mode:e,cancelable:!0};this.notifyPlugins("beforeDatasetUpdate",n)!==!1&&(i.controller._update(e),n.cancelable=!1,this.notifyPlugins("afterDatasetUpdate",n))}render(){this.notifyPlugins("beforeRender",{cancelable:!0})!==!1&&(xe.has(this)?this.attached&&!xe.running(this)&&xe.start(this):(this.draw(),J_({chart:this})))}draw(){let t;if(this._resizeBeforeDraw){const{width:i,height:n}=this._resizeBeforeDraw;this._resize(i,n),this._resizeBeforeDraw=null}if(this.clear(),this.width<=0||this.height<=0||this.notifyPlugins("beforeDraw",{cancelable:!0})===!1)return;const e=this._layers;for(t=0;t<e.length&&e[t].z<=0;++t)e[t].draw(this.chartArea);for(this._drawDatasets();t<e.length;++t)e[t].draw(this.chartArea);this.notifyPlugins("afterDraw")}_getSortedDatasetMetas(t){const e=this._sortedMetasets,i=[];let n,o;for(n=0,o=e.length;n<o;++n){const r=e[n];(!t||r.visible)&&i.push(r)}return i}getSortedVisibleDatasetMetas(){return this._getSortedDatasetMetas(!0)}_drawDatasets(){if(this.notifyPlugins("beforeDatasetsDraw",{cancelable:!0})===!1)return;const t=this.getSortedVisibleDatasetMetas();for(let e=t.length-1;e>=0;--e)this._drawDataset(t[e]);this.notifyPlugins("afterDatasetsDraw")}_drawDataset(t){const e=this.ctx,i=t._clip,n=!i.disabled,o=this.chartArea,r={meta:t,index:t.index,cancelable:!0};this.notifyPlugins("beforeDatasetDraw",r)!==!1&&(n&&qr(e,{left:i.left===!1?0:o.left-i.left,right:i.right===!1?this.width:o.right+i.right,top:i.top===!1?0:o.top-i.top,bottom:i.bottom===!1?this.height:o.bottom+i.bottom}),t.controller.draw(),n&&Zr(e),r.cancelable=!1,this.notifyPlugins("afterDatasetDraw",r))}isPointInArea(t){return Pn(t,this.chartArea,this._minPadding)}getElementsAtEventForMode(t,e,i,n){const o=L_.modes[e];return typeof o=="function"?o(this,t,i,n):[]}getDatasetMeta(t){const e=this.data.datasets[t],i=this._metasets;let n=i.filter(o=>o&&o._dataset===e).pop();return n||(n={type:null,data:[],dataset:null,controller:null,hidden:null,xAxisID:null,yAxisID:null,order:e&&e.order||0,index:t,_dataset:e,_parsed:[],_sorted:!1},i.push(n)),n}getContext(){return this.$context||(this.$context=ni(null,{chart:this,type:"chart"}))}getVisibleDatasetCount(){return this.getSortedVisibleDatasetMetas().length}isDatasetVisible(t){const e=this.data.datasets[t];if(!e)return!1;const i=this.getDatasetMeta(t);return typeof i.hidden=="boolean"?!i.hidden:!e.hidden}setDatasetVisibility(t,e){const i=this.getDatasetMeta(t);i.hidden=!e}toggleDataVisibility(t){this._hiddenIndices[t]=!this._hiddenIndices[t]}getDataVisibility(t){return!this._hiddenIndices[t]}_updateVisibility(t,e,i){const n=i?"show":"hide",o=this.getDatasetMeta(t),r=o.controller._resolveAnimations(void 0,n);jt(e)?(o.data[e].hidden=!i,this.update()):(this.setDatasetVisibility(t,i),r.update(o,{visible:i}),this.update(a=>a.datasetIndex===t?n:void 0))}hide(t,e){this._updateVisibility(t,e,!1)}show(t,e){this._updateVisibility(t,e,!0)}_destroyDatasetMeta(t){const e=this._metasets[t];e&&e.controller&&e.controller._destroy(),delete this._metasets[t]}_stop(){let t,e;for(this.stop(),xe.remove(this),t=0,e=this.data.datasets.length;t<e;++t)this._destroyDatasetMeta(t)}destroy(){this.notifyPlugins("beforeDestroy");const{canvas:t,ctx:e}=this;this._stop(),this.config.clearCache(),t&&(this.unbindEvents(),jf(t,e),this.platform.releaseContext(e),this.canvas=null,this.ctx=null),this.notifyPlugins("destroy"),delete la[this.id],this.notifyPlugins("afterDestroy")}toBase64Image(...t){return this.canvas.toDataURL(...t)}bindEvents(){this.bindUserEvents(),this.options.responsive?this.bindResponsiveEvents():this.attached=!0}bindUserEvents(){const t=this._listeners,e=this.platform,i=(o,r)=>{e.addEventListener(this,o,r),t[o]=r},n=(o,r,a)=>{o.offsetX=r,o.offsetY=a,this._eventHandler(o)};U(this.options.events,o=>i(o,n))}bindResponsiveEvents(){this._responsiveListeners||(this._responsiveListeners={});const t=this._responsiveListeners,e=this.platform,i=(l,c)=>{e.addEventListener(this,l,c),t[l]=c},n=(l,c)=>{t[l]&&(e.removeEventListener(this,l,c),delete t[l])},o=(l,c)=>{this.canvas&&this.resize(l,c)};let r;const a=()=>{n("attach",a),this.attached=!0,this.resize(),i("resize",o),i("detach",r)};r=()=>{this.attached=!1,n("resize",o),this._stop(),this._resize(0,0),i("attach",a)},e.isAttached(this.canvas)?a():r()}unbindEvents(){U(this._listeners,(t,e)=>{this.platform.removeEventListener(this,e,t)}),this._listeners={},U(this._responsiveListeners,(t,e)=>{this.platform.removeEventListener(this,e,t)}),this._responsiveListeners=void 0}updateHoverStyle(t,e,i){const n=i?"set":"remove";let o,r,a,l;for(e==="dataset"&&(o=this.getDatasetMeta(t[0].datasetIndex),o.controller["_"+n+"DatasetHoverStyle"]()),a=0,l=t.length;a<l;++a){r=t[a];const c=r&&this.getDatasetMeta(r.datasetIndex).controller;c&&c[n+"HoverStyle"](r.element,r.datasetIndex,r.index)}}getActiveElements(){return this._active||[]}setActiveElements(t){const e=this._active||[],i=t.map(({datasetIndex:o,index:r})=>{const a=this.getDatasetMeta(o);if(!a)throw new Error("No dataset found at index "+o);return{datasetIndex:o,element:a.data[r],index:r}});!Fr(i,e)&&(this._active=i,this._lastEvent=null,this._updateHoverStyles(i,e))}notifyPlugins(t,e,i){return this._plugins.notify(this,t,e,i)}_updateHoverStyles(t,e,i){const n=this.options.hover,o=(l,c)=>l.filter(h=>!c.some(d=>h.datasetIndex===d.datasetIndex&&h.index===d.index)),r=o(e,t),a=i?t:o(t,e);r.length&&this.updateHoverStyle(r,n.mode,!1),a.length&&n.mode&&this.updateHoverStyle(a,n.mode,!0)}_eventHandler(t,e){const i={event:t,replay:e,cancelable:!0,inChartArea:this.isPointInArea(t)},n=r=>(r.options.events||this.options.events).includes(t.native.type);if(this.notifyPlugins("beforeEvent",i,n)===!1)return;const o=this._handleEvent(t,e,i.inChartArea);return i.cancelable=!1,this.notifyPlugins("afterEvent",i,n),(o||i.changed)&&this.render(),this}_handleEvent(t,e,i){const{_active:n=[],options:o}=this,r=e,a=this._getActiveElements(t,n,i,r),l=SO(t),c=I1(t,this._lastEvent,i,l);i&&(this._lastEvent=null,G(o.onHover,[t,a,this],this),l&&G(o.onClick,[t,a,this],this));const h=!Fr(a,n);return(h||e)&&(this._active=a,this._updateHoverStyles(a,n,e)),this._lastEvent=c,h}_getActiveElements(t,e,i,n){if(t.type==="mouseout")return[];if(!i)return e;const o=this.options.hover;return this.getElementsAtEventForMode(t,o.mode,o,n)}}const ig=()=>U(Uc.instances,s=>s._plugins.invalidate()),ri=!0;Object.defineProperties(Uc,{defaults:{enumerable:ri,value:F},instances:{enumerable:ri,value:la},overrides:{enumerable:ri,value:Di},registry:{enumerable:ri,value:ne},version:{enumerable:ri,value:w1},getChart:{enumerable:ri,value:eg},register:{enumerable:ri,value:(...s)=>{ne.add(...s),ig()}},unregister:{enumerable:ri,value:(...s)=>{ne.remove(...s),ig()}}});function sg(s,t,e){const{startAngle:i,pixelMargin:n,x:o,y:r,outerRadius:a,innerRadius:l}=t;let c=n/a;s.beginPath(),s.arc(o,r,a,i-c,e+c),l>n?(c=n/l,s.arc(o,r,l,e+c,i-c,!0)):s.arc(o,r,n,e+nt,i-nt),s.closePath(),s.clip()}function D1(s){return Ic(s,["outerStart","outerEnd","innerStart","innerEnd"])}function M1(s,t,e,i){const n=D1(s.options.borderRadius),o=(e-t)/2,r=Math.min(o,i*t/2),a=l=>{const c=(e-Math.min(o,l))*i/2;return dt(l,0,Math.min(o,c))};return{outerStart:a(n.outerStart),outerEnd:a(n.outerEnd),innerStart:dt(n.innerStart,0,r),innerEnd:dt(n.innerEnd,0,r)}}function Is(s,t,e,i){return{x:e+s*Math.cos(t),y:i+s*Math.sin(t)}}function Xc(s,t,e,i,n,o){const{x:r,y:a,startAngle:l,pixelMargin:c,innerRadius:h}=t,d=Math.max(t.outerRadius+i+e-c,0),u=h>0?h+i+e+c:0;let p=0;const f=n-l;if(i){const R=h>0?h-i:0,z=d>0?d-i:0,Y=(R+z)/2,Gt=Y!==0?f*Y/(Y+i):f;p=(f-Gt)/2}const b=Math.max(.001,f*d-e/it)/d,v=(f-b)/2,y=l+v+p,T=n-v-p,{outerStart:x,outerEnd:E,innerStart:C,innerEnd:A}=M1(t,u,d,T-y),w=d-x,S=d-E,k=y+x/w,D=T-E/S,I=u+C,M=u+A,P=y+C/I,X=T-A/M;if(s.beginPath(),o){if(s.arc(r,a,d,k,D),E>0){const Y=Is(S,D,r,a);s.arc(Y.x,Y.y,E,D,T+nt)}const R=Is(M,T,r,a);if(s.lineTo(R.x,R.y),A>0){const Y=Is(M,X,r,a);s.arc(Y.x,Y.y,A,T+nt,X+Math.PI)}if(s.arc(r,a,u,T-A/u,y+C/u,!0),C>0){const Y=Is(I,P,r,a);s.arc(Y.x,Y.y,C,P+Math.PI,y-nt)}const z=Is(w,y,r,a);if(s.lineTo(z.x,z.y),x>0){const Y=Is(w,k,r,a);s.arc(Y.x,Y.y,x,y-nt,k)}}else{s.moveTo(r,a);const R=Math.cos(k)*d+r,z=Math.sin(k)*d+a;s.lineTo(R,z);const Y=Math.cos(D)*d+r,Gt=Math.sin(D)*d+a;s.lineTo(Y,Gt)}s.closePath()}function L1(s,t,e,i,n){const{fullCircles:o,startAngle:r,circumference:a}=t;let l=t.endAngle;if(o){Xc(s,t,e,i,r+q,n);for(let c=0;c<o;++c)s.fill();isNaN(a)||(l=r+a%q,a%q===0&&(l+=q))}return Xc(s,t,e,i,l,n),s.fill(),l}function $1(s,t,e){const{x:i,y:n,startAngle:o,pixelMargin:r,fullCircles:a}=t,l=Math.max(t.outerRadius-r,0),c=t.innerRadius+r;let h;for(e&&sg(s,t,o+q),s.beginPath(),s.arc(i,n,c,o+q,o,!0),h=0;h<a;++h)s.stroke();for(s.beginPath(),s.arc(i,n,l,o,o+q),h=0;h<a;++h)s.stroke()}function R1(s,t,e,i,n,o){const{options:r}=t,{borderWidth:a,borderJoinStyle:l}=r,c=r.borderAlign==="inner";a&&(c?(s.lineWidth=a*2,s.lineJoin=l||"round"):(s.lineWidth=a,s.lineJoin=l||"bevel"),t.fullCircles&&$1(s,t,c),c&&sg(s,t,n),Xc(s,t,e,i,n,o),s.stroke())}class Ds extends Xt{constructor(t){super(),this.options=void 0,this.circumference=void 0,this.startAngle=void 0,this.endAngle=void 0,this.innerRadius=void 0,this.outerRadius=void 0,this.pixelMargin=0,this.fullCircles=0,t&&Object.assign(this,t)}inRange(t,e,i){const n=this.getProps(["x","y"],i),{angle:o,distance:r}=Cf(n,{x:t,y:e}),{startAngle:a,endAngle:l,innerRadius:c,outerRadius:h,circumference:d}=this.getProps(["startAngle","endAngle","innerRadius","outerRadius","circumference"],i),u=this.options.spacing/2,f=B(d,l-a)>=q||Dn(o,a,l),b=Ie(r,c+u,h+u);return f&&b}getCenterPoint(t){const{x:e,y:i,startAngle:n,endAngle:o,innerRadius:r,outerRadius:a}=this.getProps(["x","y","startAngle","endAngle","innerRadius","outerRadius","circumference"],t),{offset:l,spacing:c}=this.options,h=(n+o)/2,d=(r+a+c+l)/2;return{x:e+Math.cos(h)*d,y:i+Math.sin(h)*d}}tooltipPosition(t){return this.getCenterPoint(t)}draw(t){const{options:e,circumference:i}=this,n=(e.offset||0)/2,o=(e.spacing||0)/2,r=e.circular;if(this.pixelMargin=e.borderAlign==="inner"?.33:0,this.fullCircles=i>q?Math.floor(i/q):0,i===0||this.innerRadius<0||this.outerRadius<0)return;t.save();let a=0;if(n){a=n/2;const c=(this.startAngle+this.endAngle)/2;t.translate(Math.cos(c)*a,Math.sin(c)*a),this.circumference>=it&&(a=n)}t.fillStyle=e.backgroundColor,t.strokeStyle=e.borderColor;const l=L1(t,this,a,o,r);R1(t,this,a,o,l,r),t.restore()}}Ds.id="arc",Ds.defaults={borderAlign:"center",borderColor:"#fff",borderJoinStyle:void 0,borderRadius:0,borderWidth:2,offset:0,spacing:0,angle:void 0,circular:!0},Ds.defaultRoutes={backgroundColor:"backgroundColor"};function ng(s,t,e=t){s.lineCap=B(e.borderCapStyle,t.borderCapStyle),s.setLineDash(B(e.borderDash,t.borderDash)),s.lineDashOffset=B(e.borderDashOffset,t.borderDashOffset),s.lineJoin=B(e.borderJoinStyle,t.borderJoinStyle),s.lineWidth=B(e.borderWidth,t.borderWidth),s.strokeStyle=B(e.borderColor,t.borderColor)}function P1(s,t,e){s.lineTo(e.x,e.y)}function N1(s){return s.stepped?dI:s.tension||s.cubicInterpolationMode==="monotone"?uI:P1}function og(s,t,e={}){const i=s.length,{start:n=0,end:o=i-1}=e,{start:r,end:a}=t,l=Math.max(n,r),c=Math.min(o,a),h=n<r&&o<r||n>a&&o>a;return{count:i,start:l,loop:t.loop,ilen:c<l&&!h?i+c-l:c-l}}function B1(s,t,e,i){const{points:n,options:o}=t,{count:r,start:a,loop:l,ilen:c}=og(n,e,i),h=N1(o);let{move:d=!0,reverse:u}=i||{},p,f,b;for(p=0;p<=c;++p)f=n[(a+(u?c-p:p))%r],!f.skip&&(d?(s.moveTo(f.x,f.y),d=!1):h(s,b,f,u,o.stepped),b=f);return l&&(f=n[(a+(u?c:0))%r],h(s,b,f,u,o.stepped)),!!l}function H1(s,t,e,i){const n=t.points,{count:o,start:r,ilen:a}=og(n,e,i),{move:l=!0,reverse:c}=i||{};let h=0,d=0,u,p,f,b,v,y;const T=E=>(r+(c?a-E:E))%o,x=()=>{b!==v&&(s.lineTo(h,v),s.lineTo(h,b),s.lineTo(h,y))};for(l&&(p=n[T(0)],s.moveTo(p.x,p.y)),u=0;u<=a;++u){if(p=n[T(u)],p.skip)continue;const E=p.x,C=p.y,A=E|0;A===f?(C<b?b=C:C>v&&(v=C),h=(d*h+E)/++d):(x(),s.lineTo(E,C),f=A,d=0,b=v=C),y=C}x()}function Gc(s){const t=s.options,e=t.borderDash&&t.borderDash.length;return!s._decimated&&!s._loop&&!t.tension&&t.cubicInterpolationMode!=="monotone"&&!t.stepped&&!e?H1:B1}function V1(s){return s.stepped?zI:s.tension||s.cubicInterpolationMode==="monotone"?jI:Ni}function F1(s,t,e,i){let n=t._path;n||(n=t._path=new Path2D,t.path(n,e,i)&&n.closePath()),ng(s,t.options),s.stroke(n)}function W1(s,t,e,i){const{segments:n,options:o}=t,r=Gc(t);for(const a of n)ng(s,o,a.style),s.beginPath(),r(s,t,a,{start:e,end:e+i-1})&&s.closePath(),s.stroke()}const z1=typeof Path2D=="function";function j1(s,t,e,i){z1&&!t.options.segment?F1(s,t,e,i):W1(s,t,e,i)}class Le extends Xt{constructor(t){super(),this.animated=!0,this.options=void 0,this._chart=void 0,this._loop=void 0,this._fullLoop=void 0,this._path=void 0,this._points=void 0,this._segments=void 0,this._decimated=!1,this._pointsUpdated=!1,this._datasetIndex=void 0,t&&Object.assign(this,t)}updateControlPoints(t,e){const i=this.options;if((i.tension||i.cubicInterpolationMode==="monotone")&&!i.stepped&&!this._pointsUpdated){const n=i.spanGaps?this._loop:this._fullLoop;RI(this._points,i,t,n,e),this._pointsUpdated=!0}}set points(t){this._points=t,delete this._segments,delete this._path,this._pointsUpdated=!1}get points(){return this._points}get segments(){return this._segments||(this._segments=ZI(this,this.options.segment))}first(){const t=this.segments,e=this.points;return t.length&&e[t[0].start]}last(){const t=this.segments,e=this.points,i=t.length;return i&&e[t[i-1].end]}interpolate(t,e){const i=this.options,n=t[e],o=this.points,r=h_(this,{property:e,start:n,end:n});if(!r.length)return;const a=[],l=V1(i);let c,h;for(c=0,h=r.length;c<h;++c){const{start:d,end:u}=r[c],p=o[d],f=o[u];if(p===f){a.push(p);continue}const b=Math.abs((n-p[e])/(f[e]-p[e])),v=l(p,f,b,i.stepped);v[e]=t[e],a.push(v)}return a.length===1?a[0]:a}pathSegment(t,e,i){return Gc(this)(t,this,e,i)}path(t,e,i){const n=this.segments,o=Gc(this);let r=this._loop;e=e||0,i=i||this.points.length-e;for(const a of n)r&=o(t,this,a,{start:e,end:e+i-1});return!!r}draw(t,e,i,n){const o=this.options||{};(this.points||[]).length&&o.borderWidth&&(t.save(),j1(t,this,i,n),t.restore()),this.animated&&(this._pointsUpdated=!1,this._path=void 0)}}Le.id="line",Le.defaults={borderCapStyle:"butt",borderDash:[],borderDashOffset:0,borderJoinStyle:"miter",borderWidth:3,capBezierPoints:!0,cubicInterpolationMode:"default",fill:!1,spanGaps:!1,stepped:!1,tension:0},Le.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"},Le.descriptors={_scriptable:!0,_indexable:s=>s!=="borderDash"&&s!=="fill"};function rg(s,t,e,i){const n=s.options,{[e]:o}=s.getProps([e],i);return Math.abs(t-o)<n.radius+n.hitRadius}class Ms extends Xt{constructor(t){super(),this.options=void 0,this.parsed=void 0,this.skip=void 0,this.stop=void 0,t&&Object.assign(this,t)}inRange(t,e,i){const n=this.options,{x:o,y:r}=this.getProps(["x","y"],i);return Math.pow(t-o,2)+Math.pow(e-r,2)<Math.pow(n.hitRadius+n.radius,2)}inXRange(t,e){return rg(this,t,"x",e)}inYRange(t,e){return rg(this,t,"y",e)}getCenterPoint(t){const{x:e,y:i}=this.getProps(["x","y"],t);return{x:e,y:i}}size(t){t=t||this.options||{};let e=t.radius||0;e=Math.max(e,e&&t.hoverRadius||0);const i=e&&t.borderWidth||0;return(e+i)*2}draw(t,e){const i=this.options;this.skip||i.radius<.1||!Pn(this,e,this.size(i)/2)||(t.strokeStyle=i.borderColor,t.lineWidth=i.borderWidth,t.fillStyle=i.backgroundColor,Oc(t,i,this.x,this.y))}getRange(){const t=this.options||{};return t.radius+t.hitRadius}}Ms.id="point",Ms.defaults={borderWidth:1,hitRadius:1,hoverBorderWidth:1,hoverRadius:4,pointStyle:"circle",radius:3,rotation:0},Ms.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"};function ag(s,t){const{x:e,y:i,base:n,width:o,height:r}=s.getProps(["x","y","base","width","height"],t);let a,l,c,h,d;return s.horizontal?(d=r/2,a=Math.min(e,n),l=Math.max(e,n),c=i-d,h=i+d):(d=o/2,a=e-d,l=e+d,c=Math.min(i,n),h=Math.max(i,n)),{left:a,top:c,right:l,bottom:h}}function ai(s,t,e,i){return s?0:dt(t,e,i)}function Y1(s,t,e){const i=s.options.borderWidth,n=s.borderSkipped,o=Kf(i);return{t:ai(n.top,o.top,0,e),r:ai(n.right,o.right,0,t),b:ai(n.bottom,o.bottom,0,e),l:ai(n.left,o.left,0,t)}}function K1(s,t,e){const{enableBorderRadius:i}=s.getProps(["enableBorderRadius"]),n=s.options.borderRadius,o=$i(n),r=Math.min(t,e),a=s.borderSkipped,l=i||V(n);return{topLeft:ai(!l||a.top||a.left,o.topLeft,0,r),topRight:ai(!l||a.top||a.right,o.topRight,0,r),bottomLeft:ai(!l||a.bottom||a.left,o.bottomLeft,0,r),bottomRight:ai(!l||a.bottom||a.right,o.bottomRight,0,r)}}function U1(s){const t=ag(s),e=t.right-t.left,i=t.bottom-t.top,n=Y1(s,e/2,i/2),o=K1(s,e/2,i/2);return{outer:{x:t.left,y:t.top,w:e,h:i,radius:o},inner:{x:t.left+n.l,y:t.top+n.t,w:e-n.l-n.r,h:i-n.t-n.b,radius:{topLeft:Math.max(0,o.topLeft-Math.max(n.t,n.l)),topRight:Math.max(0,o.topRight-Math.max(n.t,n.r)),bottomLeft:Math.max(0,o.bottomLeft-Math.max(n.b,n.l)),bottomRight:Math.max(0,o.bottomRight-Math.max(n.b,n.r))}}}}function qc(s,t,e,i){const n=t===null,o=e===null,a=s&&!(n&&o)&&ag(s,i);return a&&(n||Ie(t,a.left,a.right))&&(o||Ie(e,a.top,a.bottom))}function X1(s){return s.topLeft||s.topRight||s.bottomLeft||s.bottomRight}function G1(s,t){s.rect(t.x,t.y,t.w,t.h)}function Zc(s,t,e={}){const i=s.x!==e.x?-t:0,n=s.y!==e.y?-t:0,o=(s.x+s.w!==e.x+e.w?t:0)-i,r=(s.y+s.h!==e.y+e.h?t:0)-n;return{x:s.x+i,y:s.y+n,w:s.w+o,h:s.h+r,radius:s.radius}}class Ls extends Xt{constructor(t){super(),this.options=void 0,this.horizontal=void 0,this.base=void 0,this.width=void 0,this.height=void 0,this.inflateAmount=void 0,t&&Object.assign(this,t)}draw(t){const{inflateAmount:e,options:{borderColor:i,backgroundColor:n}}=this,{inner:o,outer:r}=U1(this),a=X1(r.radius)?Nn:G1;t.save(),(r.w!==o.w||r.h!==o.h)&&(t.beginPath(),a(t,Zc(r,e,o)),t.clip(),a(t,Zc(o,-e,r)),t.fillStyle=i,t.fill("evenodd")),t.beginPath(),a(t,Zc(o,e)),t.fillStyle=n,t.fill(),t.restore()}inRange(t,e,i){return qc(this,t,e,i)}inXRange(t,e){return qc(this,t,null,e)}inYRange(t,e){return qc(this,null,t,e)}getCenterPoint(t){const{x:e,y:i,base:n,horizontal:o}=this.getProps(["x","y","base","horizontal"],t);return{x:o?(e+n)/2:e,y:o?i:(i+n)/2}}getRange(t){return t==="x"?this.width/2:this.height/2}}Ls.id="bar",Ls.defaults={borderSkipped:"start",borderWidth:0,borderRadius:0,inflateAmount:"auto",pointStyle:void 0},Ls.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"};var lg=Object.freeze({__proto__:null,ArcElement:Ds,LineElement:Le,PointElement:Ms,BarElement:Ls});function q1(s,t,e,i,n){const o=n.samples||i;if(o>=e)return s.slice(t,t+e);const r=[],a=(e-2)/(o-2);let l=0;const c=t+e-1;let h=t,d,u,p,f,b;for(r[l++]=s[h],d=0;d<o-2;d++){let v=0,y=0,T;const x=Math.floor((d+1)*a)+1+t,E=Math.min(Math.floor((d+2)*a)+1,e)+t,C=E-x;for(T=x;T<E;T++)v+=s[T].x,y+=s[T].y;v/=C,y/=C;const A=Math.floor(d*a)+1+t,w=Math.min(Math.floor((d+1)*a)+1,e)+t,{x:S,y:k}=s[h];for(p=f=-1,T=A;T<w;T++)f=.5*Math.abs((S-v)*(s[T].y-k)-(S-s[T].x)*(y-k)),f>p&&(p=f,u=s[T],b=T);r[l++]=u,h=b}return r[l++]=s[c],r}function Z1(s,t,e,i){let n=0,o=0,r,a,l,c,h,d,u,p,f,b;const v=[],y=t+e-1,T=s[t].x,E=s[y].x-T;for(r=t;r<t+e;++r){a=s[r],l=(a.x-T)/E*i,c=a.y;const C=l|0;if(C===h)c<f?(f=c,d=r):c>b&&(b=c,u=r),n=(o*n+a.x)/++o;else{const A=r-1;if(!H(d)&&!H(u)){const w=Math.min(d,u),S=Math.max(d,u);w!==p&&w!==A&&v.push({...s[w],x:n}),S!==p&&S!==A&&v.push({...s[S],x:n})}r>0&&A!==p&&v.push(s[A]),v.push(a),h=C,o=0,f=b=c,d=u=p=r}}return v}function cg(s){if(s._decimated){const t=s._data;delete s._decimated,delete s._data,Object.defineProperty(s,"data",{value:t})}}function hg(s){s.data.datasets.forEach(t=>{cg(t)})}function Q1(s,t){const e=t.length;let i=0,n;const{iScale:o}=s,{min:r,max:a,minDefined:l,maxDefined:c}=o.getUserBounds();return l&&(i=dt(De(t,o.axis,r).lo,0,e-1)),c?n=dt(De(t,o.axis,a).hi+1,i,e)-i:n=e-i,{start:i,count:n}}var dg={id:"decimation",defaults:{algorithm:"min-max",enabled:!1},beforeElementsUpdate:(s,t,e)=>{if(!e.enabled){hg(s);return}const i=s.width;s.data.datasets.forEach((n,o)=>{const{_data:r,indexAxis:a}=n,l=s.getDatasetMeta(o),c=r||n.data;if(tt([a,s.options.indexAxis])==="y"||!l.controller.supportsDecimation)return;const h=s.scales[l.xAxisID];if(h.type!=="linear"&&h.type!=="time"||s.options.parsing)return;let{start:d,count:u}=Q1(l,c);const p=e.threshold||4*i;if(u<=p){cg(n);return}H(r)&&(n._data=c,delete n.data,Object.defineProperty(n,"data",{configurable:!0,enumerable:!0,get:function(){return this._decimated},set:function(b){this._data=b}}));let f;switch(e.algorithm){case"lttb":f=q1(c,d,u,i,e);break;case"min-max":f=Z1(c,d,u,i);break;default:throw new Error(`Unsupported decimation algorithm '${e.algorithm}'`)}n._decimated=f})},destroy(s){hg(s)}};function J1(s,t,e){const i=s.segments,n=s.points,o=t.points,r=[];for(const a of i){let{start:l,end:c}=a;c=Jc(l,c,n);const h=Qc(e,n[l],n[c],a.loop);if(!t.segments){r.push({source:a,target:h,start:n[l],end:n[c]});continue}const d=h_(t,h);for(const u of d){const p=Qc(e,o[u.start],o[u.end],u.loop),f=c_(a,n,p);for(const b of f)r.push({source:b,target:u,start:{[e]:ug(h,p,"start",Math.max)},end:{[e]:ug(h,p,"end",Math.min)}})}}return r}function Qc(s,t,e,i){if(i)return;let n=t[s],o=e[s];return s==="angle"&&(n=Vt(n),o=Vt(o)),{property:s,start:n,end:o}}function tM(s,t){const{x:e=null,y:i=null}=s||{},n=t.points,o=[];return t.segments.forEach(({start:r,end:a})=>{a=Jc(r,a,n);const l=n[r],c=n[a];i!==null?(o.push({x:l.x,y:i}),o.push({x:c.x,y:i})):e!==null&&(o.push({x:e,y:l.y}),o.push({x:e,y:c.y}))}),o}function Jc(s,t,e){for(;t>s;t--){const i=e[t];if(!isNaN(i.x)&&!isNaN(i.y))break}return t}function ug(s,t,e,i){return s&&t?i(s[e],t[e]):s?s[e]:t?t[e]:0}function pg(s,t){let e=[],i=!1;return Q(s)?(i=!0,e=s):e=tM(s,t),e.length?new Le({points:e,options:{tension:0},_loop:i,_fullLoop:i}):null}function fg(s){return s&&s.fill!==!1}function eM(s,t,e){let n=s[t].fill;const o=[t];let r;if(!e)return n;for(;n!==!1&&o.indexOf(n)===-1;){if(!rt(n))return n;if(r=s[n],!r)return!1;if(r.visible)return n;o.push(n),n=r.fill}return!1}function iM(s,t,e){const i=rM(s);if(V(i))return isNaN(i.value)?!1:i;let n=parseFloat(i);return rt(n)&&Math.floor(n)===n?sM(i[0],t,n,e):["origin","start","end","stack","shape"].indexOf(i)>=0&&i}function sM(s,t,e,i){return(s==="-"||s==="+")&&(e=t+e),e===t||e<0||e>=i?!1:e}function nM(s,t){let e=null;return s==="start"?e=t.bottom:s==="end"?e=t.top:V(s)?e=t.getPixelForValue(s.value):t.getBasePixel&&(e=t.getBasePixel()),e}function oM(s,t,e){let i;return s==="start"?i=e:s==="end"?i=t.options.reverse?t.min:t.max:V(s)?i=s.value:i=t.getBaseValue(),i}function rM(s){const t=s.options,e=t.fill;let i=B(e&&e.target,e);return i===void 0&&(i=!!t.backgroundColor),i===!1||i===null?!1:i===!0?"origin":i}function aM(s){const{scale:t,index:e,line:i}=s,n=[],o=i.segments,r=i.points,a=lM(t,e);a.push(pg({x:null,y:t.bottom},i));for(let l=0;l<o.length;l++){const c=o[l];for(let h=c.start;h<=c.end;h++)cM(n,r[h],a)}return new Le({points:n,options:{}})}function lM(s,t){const e=[],i=s.getMatchingVisibleMetas("line");for(let n=0;n<i.length;n++){const o=i[n];if(o.index===t)break;o.hidden||e.unshift(o.dataset)}return e}function cM(s,t,e){const i=[];for(let n=0;n<e.length;n++){const o=e[n],{first:r,last:a,point:l}=hM(o,t,"x");if(!(!l||r&&a)){if(r)i.unshift(l);else if(s.push(l),!a)break}}s.push(...i)}function hM(s,t,e){const i=s.interpolate(t,e);if(!i)return{};const n=i[e],o=s.segments,r=s.points;let a=!1,l=!1;for(let c=0;c<o.length;c++){const h=o[c],d=r[h.start][e],u=r[h.end][e];if(Ie(n,d,u)){a=n===d,l=n===u;break}}return{first:a,last:l,point:i}}class _g{constructor(t){this.x=t.x,this.y=t.y,this.radius=t.radius}pathSegment(t,e,i){const{x:n,y:o,radius:r}=this;return e=e||{start:0,end:q},t.arc(n,o,r,e.end,e.start,!0),!i.bounds}interpolate(t){const{x:e,y:i,radius:n}=this,o=t.angle;return{x:e+Math.cos(o)*n,y:i+Math.sin(o)*n,angle:o}}}function dM(s){const{chart:t,fill:e,line:i}=s;if(rt(e))return uM(t,e);if(e==="stack")return aM(s);if(e==="shape")return!0;const n=pM(s);return n instanceof _g?n:pg(n,i)}function uM(s,t){const e=s.getDatasetMeta(t);return e&&s.isDatasetVisible(t)?e.dataset:null}function pM(s){return(s.scale||{}).getPointPositionForValue?_M(s):fM(s)}function fM(s){const{scale:t={},fill:e}=s,i=nM(e,t);if(rt(i)){const n=t.isHorizontal();return{x:n?i:null,y:n?null:i}}return null}function _M(s){const{scale:t,fill:e}=s,i=t.options,n=t.getLabels().length,o=i.reverse?t.max:t.min,r=oM(e,t,o),a=[];if(i.grid.circular){const l=t.getPointPositionForValue(0,o);return new _g({x:l.x,y:l.y,radius:t.getDistanceFromCenterForValue(r)})}for(let l=0;l<n;++l)a.push(t.getPointPositionForValue(l,r));return a}function th(s,t,e){const i=dM(t),{line:n,scale:o,axis:r}=t,a=n.options,l=a.fill,c=a.backgroundColor,{above:h=c,below:d=c}=l||{};i&&n.points.length&&(qr(s,e),gM(s,{line:n,target:i,above:h,below:d,area:e,scale:o,axis:r}),Zr(s))}function gM(s,t){const{line:e,target:i,above:n,below:o,area:r,scale:a}=t,l=e._loop?"angle":t.axis;s.save(),l==="x"&&o!==n&&(gg(s,i,r.top),mg(s,{line:e,target:i,color:n,scale:a,property:l}),s.restore(),s.save(),gg(s,i,r.bottom)),mg(s,{line:e,target:i,color:o,scale:a,property:l}),s.restore()}function gg(s,t,e){const{segments:i,points:n}=t;let o=!0,r=!1;s.beginPath();for(const a of i){const{start:l,end:c}=a,h=n[l],d=n[Jc(l,c,n)];o?(s.moveTo(h.x,h.y),o=!1):(s.lineTo(h.x,e),s.lineTo(h.x,h.y)),r=!!t.pathSegment(s,a,{move:r}),r?s.closePath():s.lineTo(d.x,e)}s.lineTo(t.first().x,e),s.closePath(),s.clip()}function mg(s,t){const{line:e,target:i,property:n,color:o,scale:r}=t,a=J1(e,i,n);for(const{source:l,target:c,start:h,end:d}of a){const{style:{backgroundColor:u=o}={}}=l,p=i!==!0;s.save(),s.fillStyle=u,mM(s,r,p&&Qc(n,h,d)),s.beginPath();const f=!!e.pathSegment(s,l);let b;if(p){f?s.closePath():bg(s,i,d,n);const v=!!i.pathSegment(s,c,{move:f,reverse:!0});b=f&&v,b||bg(s,i,h,n)}s.closePath(),s.fill(b?"evenodd":"nonzero"),s.restore()}}function mM(s,t,e){const{top:i,bottom:n}=t.chart.chartArea,{property:o,start:r,end:a}=e||{};o==="x"&&(s.beginPath(),s.rect(r,i,a-r,n-i),s.clip())}function bg(s,t,e,i){const n=t.interpolate(e,i);n&&s.lineTo(n.x,n.y)}var vg={id:"filler",afterDatasetsUpdate(s,t,e){const i=(s.data.datasets||[]).length,n=[];let o,r,a,l;for(r=0;r<i;++r)o=s.getDatasetMeta(r),a=o.dataset,l=null,a&&a.options&&a instanceof Le&&(l={visible:s.isDatasetVisible(r),index:r,fill:iM(a,r,i),chart:s,axis:o.controller.options.indexAxis,scale:o.vScale,line:a}),o.$filler=l,n.push(l);for(r=0;r<i;++r)l=n[r],!(!l||l.fill===!1)&&(l.fill=eM(n,r,e.propagate))},beforeDraw(s,t,e){const i=e.drawTime==="beforeDraw",n=s.getSortedVisibleDatasetMetas(),o=s.chartArea;for(let r=n.length-1;r>=0;--r){const a=n[r].$filler;a&&(a.line.updateControlPoints(o,a.axis),i&&a.fill&&th(s.ctx,a,o))}},beforeDatasetsDraw(s,t,e){if(e.drawTime!=="beforeDatasetsDraw")return;const i=s.getSortedVisibleDatasetMetas();for(let n=i.length-1;n>=0;--n){const o=i[n].$filler;fg(o)&&th(s.ctx,o,s.chartArea)}},beforeDatasetDraw(s,t,e){const i=t.meta.$filler;!fg(i)||e.drawTime!=="beforeDatasetDraw"||th(s.ctx,i,s.chartArea)},defaults:{propagate:!0,drawTime:"beforeDatasetDraw"}};const yg=(s,t)=>{let{boxHeight:e=t,boxWidth:i=t}=s;return s.usePointStyle&&(e=Math.min(e,t),i=s.pointStyleWidth||Math.min(i,t)),{boxWidth:i,boxHeight:e,itemHeight:Math.max(t,e)}},bM=(s,t)=>s!==null&&t!==null&&s.datasetIndex===t.datasetIndex&&s.index===t.index;class Tg extends Xt{constructor(t){super(),this._added=!1,this.legendHitBoxes=[],this._hoveredItem=null,this.doughnutMode=!1,this.chart=t.chart,this.options=t.options,this.ctx=t.ctx,this.legendItems=void 0,this.columnSizes=void 0,this.lineWidths=void 0,this.maxHeight=void 0,this.maxWidth=void 0,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.height=void 0,this.width=void 0,this._margins=void 0,this.position=void 0,this.weight=void 0,this.fullSize=void 0}update(t,e,i){this.maxWidth=t,this.maxHeight=e,this._margins=i,this.setDimensions(),this.buildLabels(),this.fit()}setDimensions(){this.isHorizontal()?(this.width=this.maxWidth,this.left=this._margins.left,this.right=this.width):(this.height=this.maxHeight,this.top=this._margins.top,this.bottom=this.height)}buildLabels(){const t=this.options.labels||{};let e=G(t.generateLabels,[this.chart],this)||[];t.filter&&(e=e.filter(i=>t.filter(i,this.chart.data))),t.sort&&(e=e.sort((i,n)=>t.sort(i,n,this.chart.data))),this.options.reverse&&e.reverse(),this.legendItems=e}fit(){const{options:t,ctx:e}=this;if(!t.display){this.width=this.height=0;return}const i=t.labels,n=lt(i.font),o=n.size,r=this._computeTitleHeight(),{boxWidth:a,itemHeight:l}=yg(i,o);let c,h;e.font=n.string,this.isHorizontal()?(c=this.maxWidth,h=this._fitRows(r,o,a,l)+10):(h=this.maxHeight,c=this._fitCols(r,o,a,l)+10),this.width=Math.min(c,t.maxWidth||this.maxWidth),this.height=Math.min(h,t.maxHeight||this.maxHeight)}_fitRows(t,e,i,n){const{ctx:o,maxWidth:r,options:{labels:{padding:a}}}=this,l=this.legendHitBoxes=[],c=this.lineWidths=[0],h=n+a;let d=t;o.textAlign="left",o.textBaseline="middle";let u=-1,p=-h;return this.legendItems.forEach((f,b)=>{const v=i+e/2+o.measureText(f.text).width;(b===0||c[c.length-1]+v+2*a>r)&&(d+=h,c[c.length-(b>0?0:1)]=0,p+=h,u++),l[b]={left:0,top:p,row:u,width:v,height:n},c[c.length-1]+=v+a}),d}_fitCols(t,e,i,n){const{ctx:o,maxHeight:r,options:{labels:{padding:a}}}=this,l=this.legendHitBoxes=[],c=this.columnSizes=[],h=r-t;let d=a,u=0,p=0,f=0,b=0;return this.legendItems.forEach((v,y)=>{const T=i+e/2+o.measureText(v.text).width;y>0&&p+n+2*a>h&&(d+=u+a,c.push({width:u,height:p}),f+=u+a,b++,u=p=0),l[y]={left:f,top:p,col:b,width:T,height:n},u=Math.max(u,T),p+=n+a}),d+=u,c.push({width:u,height:p}),d}adjustHitBoxes(){if(!this.options.display)return;const t=this._computeTitleHeight(),{legendHitBoxes:e,options:{align:i,labels:{padding:n},rtl:o}}=this,r=Os(o,this.left,this.width);if(this.isHorizontal()){let a=0,l=gt(i,this.left+n,this.right-this.lineWidths[a]);for(const c of e)a!==c.row&&(a=c.row,l=gt(i,this.left+n,this.right-this.lineWidths[a])),c.top+=this.top+t+n,c.left=r.leftForLtr(r.x(l),c.width),l+=c.width+n}else{let a=0,l=gt(i,this.top+t+n,this.bottom-this.columnSizes[a].height);for(const c of e)c.col!==a&&(a=c.col,l=gt(i,this.top+t+n,this.bottom-this.columnSizes[a].height)),c.top=l,c.left+=this.left+n,c.left=r.leftForLtr(r.x(c.left),c.width),l+=c.height+n}}isHorizontal(){return this.options.position==="top"||this.options.position==="bottom"}draw(){if(this.options.display){const t=this.ctx;qr(t,this),this._draw(),Zr(t)}}_draw(){const{options:t,columnSizes:e,lineWidths:i,ctx:n}=this,{align:o,labels:r}=t,a=F.color,l=Os(t.rtl,this.left,this.width),c=lt(r.font),{color:h,padding:d}=r,u=c.size,p=u/2;let f;this.drawTitle(),n.textAlign=l.textAlign("left"),n.textBaseline="middle",n.lineWidth=.5,n.font=c.string;const{boxWidth:b,boxHeight:v,itemHeight:y}=yg(r,u),T=function(w,S,k){if(isNaN(b)||b<=0||isNaN(v)||v<0)return;n.save();const D=B(k.lineWidth,1);if(n.fillStyle=B(k.fillStyle,a),n.lineCap=B(k.lineCap,"butt"),n.lineDashOffset=B(k.lineDashOffset,0),n.lineJoin=B(k.lineJoin,"miter"),n.lineWidth=D,n.strokeStyle=B(k.strokeStyle,a),n.setLineDash(B(k.lineDash,[])),r.usePointStyle){const I={radius:v*Math.SQRT2/2,pointStyle:k.pointStyle,rotation:k.rotation,borderWidth:D},M=l.xPlus(w,b/2),P=S+p;Yf(n,I,M,P,r.pointStyleWidth&&b)}else{const I=S+Math.max((u-v)/2,0),M=l.leftForLtr(w,b),P=$i(k.borderRadius);n.beginPath(),Object.values(P).some(X=>X!==0)?Nn(n,{x:M,y:I,w:b,h:v,radius:P}):n.rect(M,I,b,v),n.fill(),D!==0&&n.stroke()}n.restore()},x=function(w,S,k){Li(n,k.text,w,S+y/2,c,{strikethrough:k.hidden,textAlign:l.textAlign(k.textAlign)})},E=this.isHorizontal(),C=this._computeTitleHeight();E?f={x:gt(o,this.left+d,this.right-i[0]),y:this.top+d+C,line:0}:f={x:this.left+d,y:gt(o,this.top+C+d,this.bottom-e[0].height),line:0},o_(this.ctx,t.textDirection);const A=y+d;this.legendItems.forEach((w,S)=>{n.strokeStyle=w.fontColor||h,n.fillStyle=w.fontColor||h;const k=n.measureText(w.text).width,D=l.textAlign(w.textAlign||(w.textAlign=r.textAlign)),I=b+p+k;let M=f.x,P=f.y;l.setWidth(this.width),E?S>0&&M+I+d>this.right&&(P=f.y+=A,f.line++,M=f.x=gt(o,this.left+d,this.right-i[f.line])):S>0&&P+A>this.bottom&&(M=f.x=M+e[f.line].width+d,f.line++,P=f.y=gt(o,this.top+C+d,this.bottom-e[f.line].height));const X=l.x(M);T(X,P,w),M=HO(D,M+b+p,E?M+I:this.right,t.rtl),x(l.x(M),P,w),E?f.x+=I+d:f.y+=A}),r_(this.ctx,t.textDirection)}drawTitle(){const t=this.options,e=t.title,i=lt(e.font),n=pt(e.padding);if(!e.display)return;const o=Os(t.rtl,this.left,this.width),r=this.ctx,a=e.position,l=i.size/2,c=n.top+l;let h,d=this.left,u=this.width;if(this.isHorizontal())u=Math.max(...this.lineWidths),h=this.top+c,d=gt(t.align,d,this.right-u);else{const f=this.columnSizes.reduce((b,v)=>Math.max(b,v.height),0);h=c+gt(t.align,this.top,this.bottom-f-t.labels.padding-this._computeTitleHeight())}const p=gt(a,d,d+u);r.textAlign=o.textAlign(yc(a)),r.textBaseline="middle",r.strokeStyle=e.color,r.fillStyle=e.color,r.font=i.string,Li(r,e.text,p,h,i)}_computeTitleHeight(){const t=this.options.title,e=lt(t.font),i=pt(t.padding);return t.display?e.lineHeight+i.height:0}_getLegendItemAt(t,e){let i,n,o;if(Ie(t,this.left,this.right)&&Ie(e,this.top,this.bottom)){for(o=this.legendHitBoxes,i=0;i<o.length;++i)if(n=o[i],Ie(t,n.left,n.left+n.width)&&Ie(e,n.top,n.top+n.height))return this.legendItems[i]}return null}handleEvent(t){const e=this.options;if(!vM(t.type,e))return;const i=this._getLegendItemAt(t.x,t.y);if(t.type==="mousemove"||t.type==="mouseout"){const n=this._hoveredItem,o=bM(n,i);n&&!o&&G(e.onLeave,[t,n,this],this),this._hoveredItem=i,i&&!o&&G(e.onHover,[t,i,this],this)}else i&&G(e.onClick,[t,i,this],this)}}function vM(s,t){return!!((s==="mousemove"||s==="mouseout")&&(t.onHover||t.onLeave)||t.onClick&&(s==="click"||s==="mouseup"))}var Eg={id:"legend",_element:Tg,start(s,t,e){const i=s.legend=new Tg({ctx:s.ctx,options:e,chart:s});ft.configure(s,i,e),ft.addBox(s,i)},stop(s){ft.removeBox(s,s.legend),delete s.legend},beforeUpdate(s,t,e){const i=s.legend;ft.configure(s,i,e),i.options=e},afterUpdate(s){const t=s.legend;t.buildLabels(),t.adjustHitBoxes()},afterEvent(s,t){t.replay||s.legend.handleEvent(t.event)},defaults:{display:!0,position:"top",align:"center",fullSize:!0,reverse:!1,weight:1e3,onClick(s,t,e){const i=t.datasetIndex,n=e.chart;n.isDatasetVisible(i)?(n.hide(i),t.hidden=!0):(n.show(i),t.hidden=!1)},onHover:null,onLeave:null,labels:{color:s=>s.chart.options.color,boxWidth:40,padding:10,generateLabels(s){const t=s.data.datasets,{labels:{usePointStyle:e,pointStyle:i,textAlign:n,color:o}}=s.legend.options;return s._getSortedDatasetMetas().map(r=>{const a=r.controller.getStyle(e?0:void 0),l=pt(a.borderWidth);return{text:t[r.index].label,fillStyle:a.backgroundColor,fontColor:o,hidden:!r.visible,lineCap:a.borderCapStyle,lineDash:a.borderDash,lineDashOffset:a.borderDashOffset,lineJoin:a.borderJoinStyle,lineWidth:(l.width+l.height)/4,strokeStyle:a.borderColor,pointStyle:i||a.pointStyle,rotation:a.rotation,textAlign:n||a.textAlign,borderRadius:0,datasetIndex:r.index}},this)}},title:{color:s=>s.chart.options.color,display:!1,position:"center",text:""}},descriptors:{_scriptable:s=>!s.startsWith("on"),labels:{_scriptable:s=>!["generateLabels","filter","sort"].includes(s)}}};class eh extends Xt{constructor(t){super(),this.chart=t.chart,this.options=t.options,this.ctx=t.ctx,this._padding=void 0,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.width=void 0,this.height=void 0,this.position=void 0,this.weight=void 0,this.fullSize=void 0}update(t,e){const i=this.options;if(this.left=0,this.top=0,!i.display){this.width=this.height=this.right=this.bottom=0;return}this.width=this.right=t,this.height=this.bottom=e;const n=Q(i.text)?i.text.length:1;this._padding=pt(i.padding);const o=n*lt(i.font).lineHeight+this._padding.height;this.isHorizontal()?this.height=o:this.width=o}isHorizontal(){const t=this.options.position;return t==="top"||t==="bottom"}_drawArgs(t){const{top:e,left:i,bottom:n,right:o,options:r}=this,a=r.align;let l=0,c,h,d;return this.isHorizontal()?(h=gt(a,i,o),d=e+t,c=o-i):(r.position==="left"?(h=i+t,d=gt(a,n,e),l=it*-.5):(h=o-t,d=gt(a,e,n),l=it*.5),c=n-e),{titleX:h,titleY:d,maxWidth:c,rotation:l}}draw(){const t=this.ctx,e=this.options;if(!e.display)return;const i=lt(e.font),o=i.lineHeight/2+this._padding.top,{titleX:r,titleY:a,maxWidth:l,rotation:c}=this._drawArgs(o);Li(t,e.text,0,0,i,{color:e.color,maxWidth:l,rotation:c,textAlign:yc(e.align),textBaseline:"middle",translation:[r,a]})}}function yM(s,t){const e=new eh({ctx:s.ctx,options:t,chart:s});ft.configure(s,e,t),ft.addBox(s,e),s.titleBlock=e}var xg={id:"title",_element:eh,start(s,t,e){yM(s,e)},stop(s){const t=s.titleBlock;ft.removeBox(s,t),delete s.titleBlock},beforeUpdate(s,t,e){const i=s.titleBlock;ft.configure(s,i,e),i.options=e},defaults:{align:"center",display:!1,font:{weight:"bold"},fullSize:!0,padding:10,position:"top",text:"",weight:2e3},defaultRoutes:{color:"color"},descriptors:{_scriptable:!0,_indexable:!1}};const ca=new WeakMap;var Cg={id:"subtitle",start(s,t,e){const i=new eh({ctx:s.ctx,options:e,chart:s});ft.configure(s,i,e),ft.addBox(s,i),ca.set(s,i)},stop(s){ft.removeBox(s,ca.get(s)),ca.delete(s)},beforeUpdate(s,t,e){const i=ca.get(s);ft.configure(s,i,e),i.options=e},defaults:{align:"center",display:!1,font:{weight:"normal"},fullSize:!0,padding:0,position:"top",text:"",weight:1500},defaultRoutes:{color:"color"},descriptors:{_scriptable:!0,_indexable:!1}};const to={average(s){if(!s.length)return!1;let t,e,i=0,n=0,o=0;for(t=0,e=s.length;t<e;++t){const r=s[t].element;if(r&&r.hasValue()){const a=r.tooltipPosition();i+=a.x,n+=a.y,++o}}return{x:i/o,y:n/o}},nearest(s,t){if(!s.length)return!1;let e=t.x,i=t.y,n=Number.POSITIVE_INFINITY,o,r,a;for(o=0,r=s.length;o<r;++o){const l=s[o].element;if(l&&l.hasValue()){const c=l.getCenterPoint(),h=bc(t,c);h<n&&(n=h,a=l)}}if(a){const l=a.tooltipPosition();e=l.x,i=l.y}return{x:e,y:i}}};function Ce(s,t){return t&&(Q(t)?Array.prototype.push.apply(s,t):s.push(t)),s}function $e(s){return(typeof s=="string"||s instanceof String)&&s.indexOf(`
+`)>-1?s.split(`
+`):s}function TM(s,t){const{element:e,datasetIndex:i,index:n}=t,o=s.getDatasetMeta(i).controller,{label:r,value:a}=o.getLabelAndValue(n);return{chart:s,label:r,parsed:o.getParsed(n),raw:s.data.datasets[i].data[n],formattedValue:a,dataset:o.getDataset(),dataIndex:n,datasetIndex:i,element:e}}function Ag(s,t){const e=s.chart.ctx,{body:i,footer:n,title:o}=s,{boxWidth:r,boxHeight:a}=t,l=lt(t.bodyFont),c=lt(t.titleFont),h=lt(t.footerFont),d=o.length,u=n.length,p=i.length,f=pt(t.padding);let b=f.height,v=0,y=i.reduce((E,C)=>E+C.before.length+C.lines.length+C.after.length,0);if(y+=s.beforeBody.length+s.afterBody.length,d&&(b+=d*c.lineHeight+(d-1)*t.titleSpacing+t.titleMarginBottom),y){const E=t.displayColors?Math.max(a,l.lineHeight):l.lineHeight;b+=p*E+(y-p)*l.lineHeight+(y-1)*t.bodySpacing}u&&(b+=t.footerMarginTop+u*h.lineHeight+(u-1)*t.footerSpacing);let T=0;const x=function(E){v=Math.max(v,e.measureText(E).width+T)};return e.save(),e.font=c.string,U(s.title,x),e.font=l.string,U(s.beforeBody.concat(s.afterBody),x),T=t.displayColors?r+2+t.boxPadding:0,U(i,E=>{U(E.before,x),U(E.lines,x),U(E.after,x)}),T=0,e.font=h.string,U(s.footer,x),e.restore(),v+=f.width,{width:v,height:b}}function EM(s,t){const{y:e,height:i}=t;return e<i/2?"top":e>s.height-i/2?"bottom":"center"}function xM(s,t,e,i){const{x:n,width:o}=i,r=e.caretSize+e.caretPadding;if(s==="left"&&n+o+r>t.width||s==="right"&&n-o-r<0)return!0}function CM(s,t,e,i){const{x:n,width:o}=e,{width:r,chartArea:{left:a,right:l}}=s;let c="center";return i==="center"?c=n<=(a+l)/2?"left":"right":n<=o/2?c="left":n>=r-o/2&&(c="right"),xM(c,s,t,e)&&(c="center"),c}function wg(s,t,e){const i=e.yAlign||t.yAlign||EM(s,e);return{xAlign:e.xAlign||t.xAlign||CM(s,t,e,i),yAlign:i}}function AM(s,t){let{x:e,width:i}=s;return t==="right"?e-=i:t==="center"&&(e-=i/2),e}function wM(s,t,e){let{y:i,height:n}=s;return t==="top"?i+=e:t==="bottom"?i-=n+e:i-=n/2,i}function kg(s,t,e,i){const{caretSize:n,caretPadding:o,cornerRadius:r}=s,{xAlign:a,yAlign:l}=e,c=n+o,{topLeft:h,topRight:d,bottomLeft:u,bottomRight:p}=$i(r);let f=AM(t,a);const b=wM(t,l,c);return l==="center"?a==="left"?f+=c:a==="right"&&(f-=c):a==="left"?f-=Math.max(h,u)+n:a==="right"&&(f+=Math.max(d,p)+n),{x:dt(f,0,i.width-t.width),y:dt(b,0,i.height-t.height)}}function ha(s,t,e){const i=pt(e.padding);return t==="center"?s.x+s.width/2:t==="right"?s.x+s.width-i.right:s.x+i.left}function Sg(s){return Ce([],$e(s))}function kM(s,t,e){return ni(s,{tooltip:t,tooltipItems:e,type:"tooltip"})}function Og(s,t){const e=t&&t.dataset&&t.dataset.tooltip&&t.dataset.tooltip.callbacks;return e?s.override(e):s}class ih extends Xt{constructor(t){super(),this.opacity=0,this._active=[],this._eventPosition=void 0,this._size=void 0,this._cachedAnimations=void 0,this._tooltipItems=[],this.$animations=void 0,this.$context=void 0,this.chart=t.chart||t._chart,this._chart=this.chart,this.options=t.options,this.dataPoints=void 0,this.title=void 0,this.beforeBody=void 0,this.body=void 0,this.afterBody=void 0,this.footer=void 0,this.xAlign=void 0,this.yAlign=void 0,this.x=void 0,this.y=void 0,this.height=void 0,this.width=void 0,this.caretX=void 0,this.caretY=void 0,this.labelColors=void 0,this.labelPointStyles=void 0,this.labelTextColors=void 0}initialize(t){this.options=t,this._cachedAnimations=void 0,this.$context=void 0}_resolveAnimations(){const t=this._cachedAnimations;if(t)return t;const e=this.chart,i=this.options.setContext(this.getContext()),n=i.enabled&&e.options.animation&&i.animations,o=new Pc(this.chart,n);return n._cacheable&&(this._cachedAnimations=Object.freeze(o)),o}getContext(){return this.$context||(this.$context=kM(this.chart.getContext(),this,this._tooltipItems))}getTitle(t,e){const{callbacks:i}=e,n=i.beforeTitle.apply(this,[t]),o=i.title.apply(this,[t]),r=i.afterTitle.apply(this,[t]);let a=[];return a=Ce(a,$e(n)),a=Ce(a,$e(o)),a=Ce(a,$e(r)),a}getBeforeBody(t,e){return Sg(e.callbacks.beforeBody.apply(this,[t]))}getBody(t,e){const{callbacks:i}=e,n=[];return U(t,o=>{const r={before:[],lines:[],after:[]},a=Og(i,o);Ce(r.before,$e(a.beforeLabel.call(this,o))),Ce(r.lines,a.label.call(this,o)),Ce(r.after,$e(a.afterLabel.call(this,o))),n.push(r)}),n}getAfterBody(t,e){return Sg(e.callbacks.afterBody.apply(this,[t]))}getFooter(t,e){const{callbacks:i}=e,n=i.beforeFooter.apply(this,[t]),o=i.footer.apply(this,[t]),r=i.afterFooter.apply(this,[t]);let a=[];return a=Ce(a,$e(n)),a=Ce(a,$e(o)),a=Ce(a,$e(r)),a}_createItems(t){const e=this._active,i=this.chart.data,n=[],o=[],r=[];let a=[],l,c;for(l=0,c=e.length;l<c;++l)a.push(TM(this.chart,e[l]));return t.filter&&(a=a.filter((h,d,u)=>t.filter(h,d,u,i))),t.itemSort&&(a=a.sort((h,d)=>t.itemSort(h,d,i))),U(a,h=>{const d=Og(t.callbacks,h);n.push(d.labelColor.call(this,h)),o.push(d.labelPointStyle.call(this,h)),r.push(d.labelTextColor.call(this,h))}),this.labelColors=n,this.labelPointStyles=o,this.labelTextColors=r,this.dataPoints=a,a}update(t,e){const i=this.options.setContext(this.getContext()),n=this._active;let o,r=[];if(!n.length)this.opacity!==0&&(o={opacity:0});else{const a=to[i.position].call(this,n,this._eventPosition);r=this._createItems(i),this.title=this.getTitle(r,i),this.beforeBody=this.getBeforeBody(r,i),this.body=this.getBody(r,i),this.afterBody=this.getAfterBody(r,i),this.footer=this.getFooter(r,i);const l=this._size=Ag(this,i),c=Object.assign({},a,l),h=wg(this.chart,i,c),d=kg(i,c,h,this.chart);this.xAlign=h.xAlign,this.yAlign=h.yAlign,o={opacity:1,x:d.x,y:d.y,width:l.width,height:l.height,caretX:a.x,caretY:a.y}}this._tooltipItems=r,this.$context=void 0,o&&this._resolveAnimations().update(this,o),t&&i.external&&i.external.call(this,{chart:this.chart,tooltip:this,replay:e})}drawCaret(t,e,i,n){const o=this.getCaretPosition(t,i,n);e.lineTo(o.x1,o.y1),e.lineTo(o.x2,o.y2),e.lineTo(o.x3,o.y3)}getCaretPosition(t,e,i){const{xAlign:n,yAlign:o}=this,{caretSize:r,cornerRadius:a}=i,{topLeft:l,topRight:c,bottomLeft:h,bottomRight:d}=$i(a),{x:u,y:p}=t,{width:f,height:b}=e;let v,y,T,x,E,C;return o==="center"?(E=p+b/2,n==="left"?(v=u,y=v-r,x=E+r,C=E-r):(v=u+f,y=v+r,x=E-r,C=E+r),T=v):(n==="left"?y=u+Math.max(l,h)+r:n==="right"?y=u+f-Math.max(c,d)-r:y=this.caretX,o==="top"?(x=p,E=x-r,v=y-r,T=y+r):(x=p+b,E=x+r,v=y+r,T=y-r),C=x),{x1:v,x2:y,x3:T,y1:x,y2:E,y3:C}}drawTitle(t,e,i){const n=this.title,o=n.length;let r,a,l;if(o){const c=Os(i.rtl,this.x,this.width);for(t.x=ha(this,i.titleAlign,i),e.textAlign=c.textAlign(i.titleAlign),e.textBaseline="middle",r=lt(i.titleFont),a=i.titleSpacing,e.fillStyle=i.titleColor,e.font=r.string,l=0;l<o;++l)e.fillText(n[l],c.x(t.x),t.y+r.lineHeight/2),t.y+=r.lineHeight+a,l+1===o&&(t.y+=i.titleMarginBottom-a)}}_drawColorBox(t,e,i,n,o){const r=this.labelColors[i],a=this.labelPointStyles[i],{boxHeight:l,boxWidth:c,boxPadding:h}=o,d=lt(o.bodyFont),u=ha(this,"left",o),p=n.x(u),f=l<d.lineHeight?(d.lineHeight-l)/2:0,b=e.y+f;if(o.usePointStyle){const v={radius:Math.min(c,l)/2,pointStyle:a.pointStyle,rotation:a.rotation,borderWidth:1},y=n.leftForLtr(p,c)+c/2,T=b+l/2;t.strokeStyle=o.multiKeyBackground,t.fillStyle=o.multiKeyBackground,Oc(t,v,y,T),t.strokeStyle=r.borderColor,t.fillStyle=r.backgroundColor,Oc(t,v,y,T)}else{t.lineWidth=V(r.borderWidth)?Math.max(...Object.values(r.borderWidth)):r.borderWidth||1,t.strokeStyle=r.borderColor,t.setLineDash(r.borderDash||[]),t.lineDashOffset=r.borderDashOffset||0;const v=n.leftForLtr(p,c-h),y=n.leftForLtr(n.xPlus(p,1),c-h-2),T=$i(r.borderRadius);Object.values(T).some(x=>x!==0)?(t.beginPath(),t.fillStyle=o.multiKeyBackground,Nn(t,{x:v,y:b,w:c,h:l,radius:T}),t.fill(),t.stroke(),t.fillStyle=r.backgroundColor,t.beginPath(),Nn(t,{x:y,y:b+1,w:c-2,h:l-2,radius:T}),t.fill()):(t.fillStyle=o.multiKeyBackground,t.fillRect(v,b,c,l),t.strokeRect(v,b,c,l),t.fillStyle=r.backgroundColor,t.fillRect(y,b+1,c-2,l-2))}t.fillStyle=this.labelTextColors[i]}drawBody(t,e,i){const{body:n}=this,{bodySpacing:o,bodyAlign:r,displayColors:a,boxHeight:l,boxWidth:c,boxPadding:h}=i,d=lt(i.bodyFont);let u=d.lineHeight,p=0;const f=Os(i.rtl,this.x,this.width),b=function(S){e.fillText(S,f.x(t.x+p),t.y+u/2),t.y+=u+o},v=f.textAlign(r);let y,T,x,E,C,A,w;for(e.textAlign=r,e.textBaseline="middle",e.font=d.string,t.x=ha(this,v,i),e.fillStyle=i.bodyColor,U(this.beforeBody,b),p=a&&v!=="right"?r==="center"?c/2+h:c+2+h:0,E=0,A=n.length;E<A;++E){for(y=n[E],T=this.labelTextColors[E],e.fillStyle=T,U(y.before,b),x=y.lines,a&&x.length&&(this._drawColorBox(e,t,E,f,i),u=Math.max(d.lineHeight,l)),C=0,w=x.length;C<w;++C)b(x[C]),u=d.lineHeight;U(y.after,b)}p=0,u=d.lineHeight,U(this.afterBody,b),t.y-=o}drawFooter(t,e,i){const n=this.footer,o=n.length;let r,a;if(o){const l=Os(i.rtl,this.x,this.width);for(t.x=ha(this,i.footerAlign,i),t.y+=i.footerMarginTop,e.textAlign=l.textAlign(i.footerAlign),e.textBaseline="middle",r=lt(i.footerFont),e.fillStyle=i.footerColor,e.font=r.string,a=0;a<o;++a)e.fillText(n[a],l.x(t.x),t.y+r.lineHeight/2),t.y+=r.lineHeight+i.footerSpacing}}drawBackground(t,e,i,n){const{xAlign:o,yAlign:r}=this,{x:a,y:l}=t,{width:c,height:h}=i,{topLeft:d,topRight:u,bottomLeft:p,bottomRight:f}=$i(n.cornerRadius);e.fillStyle=n.backgroundColor,e.strokeStyle=n.borderColor,e.lineWidth=n.borderWidth,e.beginPath(),e.moveTo(a+d,l),r==="top"&&this.drawCaret(t,e,i,n),e.lineTo(a+c-u,l),e.quadraticCurveTo(a+c,l,a+c,l+u),r==="center"&&o==="right"&&this.drawCaret(t,e,i,n),e.lineTo(a+c,l+h-f),e.quadraticCurveTo(a+c,l+h,a+c-f,l+h),r==="bottom"&&this.drawCaret(t,e,i,n),e.lineTo(a+p,l+h),e.quadraticCurveTo(a,l+h,a,l+h-p),r==="center"&&o==="left"&&this.drawCaret(t,e,i,n),e.lineTo(a,l+d),e.quadraticCurveTo(a,l,a+d,l),e.closePath(),e.fill(),n.borderWidth>0&&e.stroke()}_updateAnimationTarget(t){const e=this.chart,i=this.$animations,n=i&&i.x,o=i&&i.y;if(n||o){const r=to[t.position].call(this,this._active,this._eventPosition);if(!r)return;const a=this._size=Ag(this,t),l=Object.assign({},r,this._size),c=wg(e,t,l),h=kg(t,l,c,e);(n._to!==h.x||o._to!==h.y)&&(this.xAlign=c.xAlign,this.yAlign=c.yAlign,this.width=a.width,this.height=a.height,this.caretX=r.x,this.caretY=r.y,this._resolveAnimations().update(this,h))}}_willRender(){return!!this.opacity}draw(t){const e=this.options.setContext(this.getContext());let i=this.opacity;if(!i)return;this._updateAnimationTarget(e);const n={width:this.width,height:this.height},o={x:this.x,y:this.y};i=Math.abs(i)<.001?0:i;const r=pt(e.padding),a=this.title.length||this.beforeBody.length||this.body.length||this.afterBody.length||this.footer.length;e.enabled&&a&&(t.save(),t.globalAlpha=i,this.drawBackground(o,t,n,e),o_(t,e.textDirection),o.y+=r.top,this.drawTitle(o,t,e),this.drawBody(o,t,e),this.drawFooter(o,t,e),r_(t,e.textDirection),t.restore())}getActiveElements(){return this._active||[]}setActiveElements(t,e){const i=this._active,n=t.map(({datasetIndex:a,index:l})=>{const c=this.chart.getDatasetMeta(a);if(!c)throw new Error("Cannot find a dataset at index "+a);return{datasetIndex:a,element:c.data[l],index:l}}),o=!Fr(i,n),r=this._positionChanged(n,e);(o||r)&&(this._active=n,this._eventPosition=e,this._ignoreReplayEvents=!0,this.update(!0))}handleEvent(t,e,i=!0){if(e&&this._ignoreReplayEvents)return!1;this._ignoreReplayEvents=!1;const n=this.options,o=this._active||[],r=this._getActiveElements(t,o,e,i),a=this._positionChanged(r,t),l=e||!Fr(r,o)||a;return l&&(this._active=r,(n.enabled||n.external)&&(this._eventPosition={x:t.x,y:t.y},this.update(!0,e))),l}_getActiveElements(t,e,i,n){const o=this.options;if(t.type==="mouseout")return[];if(!n)return e;const r=this.chart.getElementsAtEventForMode(t,o.mode,o,i);return o.reverse&&r.reverse(),r}_positionChanged(t,e){const{caretX:i,caretY:n,options:o}=this,r=to[o.position].call(this,t,e);return r!==!1&&(i!==r.x||n!==r.y)}}ih.positioners=to;var Ig={id:"tooltip",_element:ih,positioners:to,afterInit(s,t,e){e&&(s.tooltip=new ih({chart:s,options:e}))},beforeUpdate(s,t,e){s.tooltip&&s.tooltip.initialize(e)},reset(s,t,e){s.tooltip&&s.tooltip.initialize(e)},afterDraw(s){const t=s.tooltip;if(t&&t._willRender()){const e={tooltip:t};if(s.notifyPlugins("beforeTooltipDraw",e)===!1)return;t.draw(s.ctx),s.notifyPlugins("afterTooltipDraw",e)}},afterEvent(s,t){if(s.tooltip){const e=t.replay;s.tooltip.handleEvent(t.event,e,t.inChartArea)&&(t.changed=!0)}},defaults:{enabled:!0,external:null,position:"average",backgroundColor:"rgba(0,0,0,0.8)",titleColor:"#fff",titleFont:{weight:"bold"},titleSpacing:2,titleMarginBottom:6,titleAlign:"left",bodyColor:"#fff",bodySpacing:2,bodyFont:{},bodyAlign:"left",footerColor:"#fff",footerSpacing:2,footerMarginTop:6,footerFont:{weight:"bold"},footerAlign:"left",padding:6,caretPadding:2,caretSize:5,cornerRadius:6,boxHeight:(s,t)=>t.bodyFont.size,boxWidth:(s,t)=>t.bodyFont.size,multiKeyBackground:"#fff",displayColors:!0,boxPadding:0,borderColor:"rgba(0,0,0,0)",borderWidth:0,animation:{duration:400,easing:"easeOutQuart"},animations:{numbers:{type:"number",properties:["x","y","width","height","caretX","caretY"]},opacity:{easing:"linear",duration:200}},callbacks:{beforeTitle:Oe,title(s){if(s.length>0){const t=s[0],e=t.chart.data.labels,i=e?e.length:0;if(this&&this.options&&this.options.mode==="dataset")return t.dataset.label||"";if(t.label)return t.label;if(i>0&&t.dataIndex<i)return e[t.dataIndex]}return""},afterTitle:Oe,beforeBody:Oe,beforeLabel:Oe,label(s){if(this&&this.options&&this.options.mode==="dataset")return s.label+": "+s.formattedValue||s.formattedValue;let t=s.dataset.label||"";t&&(t+=": ");const e=s.formattedValue;return H(e)||(t+=e),t},labelColor(s){const e=s.chart.getDatasetMeta(s.datasetIndex).controller.getStyle(s.dataIndex);return{borderColor:e.borderColor,backgroundColor:e.backgroundColor,borderWidth:e.borderWidth,borderDash:e.borderDash,borderDashOffset:e.borderDashOffset,borderRadius:0}},labelTextColor(){return this.options.bodyColor},labelPointStyle(s){const e=s.chart.getDatasetMeta(s.datasetIndex).controller.getStyle(s.dataIndex);return{pointStyle:e.pointStyle,rotation:e.rotation}},afterLabel:Oe,afterBody:Oe,beforeFooter:Oe,footer:Oe,afterFooter:Oe}},defaultRoutes:{bodyFont:"font",footerFont:"font",titleFont:"font"},descriptors:{_scriptable:s=>s!=="filter"&&s!=="itemSort"&&s!=="external",_indexable:!1,callbacks:{_scriptable:!1,_indexable:!1},animation:{_fallback:!1},animations:{_fallback:"animation"}},additionalOptionScopes:["interaction"]},Dg=Object.freeze({__proto__:null,Decimation:dg,Filler:vg,Legend:Eg,SubTitle:Cg,Title:xg,Tooltip:Ig});const SM=(s,t,e,i)=>(typeof t=="string"?(e=s.push(t)-1,i.unshift({index:e,label:t})):isNaN(t)&&(e=null),e);function OM(s,t,e,i){const n=s.indexOf(t);if(n===-1)return SM(s,t,e,i);const o=s.lastIndexOf(t);return n!==o?e:n}const IM=(s,t)=>s===null?null:dt(Math.round(s),0,t);class eo extends oi{constructor(t){super(t),this._startValue=void 0,this._valueRange=0,this._addedLabels=[]}init(t){const e=this._addedLabels;if(e.length){const i=this.getLabels();for(const{index:n,label:o}of e)i[n]===o&&i.splice(n,1);this._addedLabels=[]}super.init(t)}parse(t,e){if(H(t))return null;const i=this.getLabels();return e=isFinite(e)&&i[e]===t?e:OM(i,t,B(e,t),this._addedLabels),IM(e,i.length-1)}determineDataLimits(){const{minDefined:t,maxDefined:e}=this.getUserBounds();let{min:i,max:n}=this.getMinMax(!0);this.options.bounds==="ticks"&&(t||(i=0),e||(n=this.getLabels().length-1)),this.min=i,this.max=n}buildTicks(){const t=this.min,e=this.max,i=this.options.offset,n=[];let o=this.getLabels();o=t===0&&e===o.length-1?o:o.slice(t,e+1),this._valueRange=Math.max(o.length-(i?0:1),1),this._startValue=this.min-(i?.5:0);for(let r=t;r<=e;r++)n.push({value:r});return n}getLabelForValue(t){const e=this.getLabels();return t>=0&&t<e.length?e[t]:t}configure(){super.configure(),this.isHorizontal()||(this._reversePixels=!this._reversePixels)}getPixelForValue(t){return typeof t!="number"&&(t=this.parse(t)),t===null?NaN:this.getPixelForDecimal((t-this._startValue)/this._valueRange)}getPixelForTick(t){const e=this.ticks;return t<0||t>e.length-1?null:this.getPixelForValue(e[t].value)}getValueForPixel(t){return Math.round(this._startValue+this.getDecimalForPixel(t)*this._valueRange)}getBasePixel(){return this.bottom}}eo.id="category",eo.defaults={ticks:{callback:eo.prototype.getLabelForValue}};function DM(s,t){const e=[],{bounds:n,step:o,min:r,max:a,precision:l,count:c,maxTicks:h,maxDigits:d,includeBounds:u}=s,p=o||1,f=h-1,{min:b,max:v}=t,y=!H(r),T=!H(a),x=!H(c),E=(v-b)/(d+1);let C=Tf((v-b)/f/p)*p,A,w,S,k;if(C<1e-14&&!y&&!T)return[{value:b},{value:v}];k=Math.ceil(v/C)-Math.floor(b/C),k>f&&(C=Tf(k*C/f/p)*p),H(l)||(A=Math.pow(10,l),C=Math.ceil(C*A)/A),n==="ticks"?(w=Math.floor(b/C)*C,S=Math.ceil(v/C)*C):(w=b,S=v),y&&T&&o&&MO((a-r)/o,C/1e3)?(k=Math.round(Math.min((a-r)/C,h)),C=(a-r)/k,w=r,S=a):x?(w=y?r:w,S=T?a:S,k=c-1,C=(S-w)/k):(k=(S-w)/C,In(k,Math.round(k),C/1e3)?k=Math.round(k):k=Math.ceil(k));const D=Math.max(xf(C),xf(w));A=Math.pow(10,H(l)?D:l),w=Math.round(w*A)/A,S=Math.round(S*A)/A;let I=0;for(y&&(u&&w!==r?(e.push({value:r}),w<r&&I++,In(Math.round((w+I*C)*A)/A,r,Mg(r,E,s))&&I++):w<r&&I++);I<k;++I)e.push({value:Math.round((w+I*C)*A)/A});return T&&u&&S!==a?e.length&&In(e[e.length-1].value,a,Mg(a,E,s))?e[e.length-1].value=a:e.push({value:a}):(!T||S===a)&&e.push({value:S}),e}function Mg(s,t,{horizontal:e,minRotation:i}){const n=se(i),o=(e?Math.sin(n):Math.cos(n))||.001,r=.75*t*(""+s).length;return Math.min(t/o,r)}class da extends oi{constructor(t){super(t),this.start=void 0,this.end=void 0,this._startValue=void 0,this._endValue=void 0,this._valueRange=0}parse(t,e){return H(t)||(typeof t=="number"||t instanceof Number)&&!isFinite(+t)?null:+t}handleTickRangeOptions(){const{beginAtZero:t}=this.options,{minDefined:e,maxDefined:i}=this.getUserBounds();let{min:n,max:o}=this;const r=l=>n=e?n:l,a=l=>o=i?o:l;if(t){const l=Ee(n),c=Ee(o);l<0&&c<0?a(0):l>0&&c>0&&r(0)}if(n===o){let l=1;(o>=Number.MAX_SAFE_INTEGER||n<=Number.MIN_SAFE_INTEGER)&&(l=Math.abs(o*.05)),a(o+l),t||r(n-l)}this.min=n,this.max=o}getTickLimit(){const t=this.options.ticks;let{maxTicksLimit:e,stepSize:i}=t,n;return i?(n=Math.ceil(this.max/i)-Math.floor(this.min/i)+1,n>1e3&&(console.warn(`scales.${this.id}.ticks.stepSize: ${i} would result generating up to ${n} ticks. Limiting to 1000.`),n=1e3)):(n=this.computeTickLimit(),e=e||11),e&&(n=Math.min(e,n)),n}computeTickLimit(){return Number.POSITIVE_INFINITY}buildTicks(){const t=this.options,e=t.ticks;let i=this.getTickLimit();i=Math.max(2,i);const n={maxTicks:i,bounds:t.bounds,min:t.min,max:t.max,precision:e.precision,step:e.stepSize,count:e.count,maxDigits:this._maxDigits(),horizontal:this.isHorizontal(),minRotation:e.minRotation||0,includeBounds:e.includeBounds!==!1},o=this._range||this,r=DM(n,o);return t.bounds==="ticks"&&Ef(r,this,"value"),t.reverse?(r.reverse(),this.start=this.max,this.end=this.min):(this.start=this.min,this.end=this.max),r}configure(){const t=this.ticks;let e=this.min,i=this.max;if(super.configure(),this.options.offset&&t.length){const n=(i-e)/Math.max(t.length-1,1)/2;e-=n,i+=n}this._startValue=e,this._endValue=i,this._valueRange=i-e}getLabelForValue(t){return Bn(t,this.chart.options.locale,this.options.ticks.format)}}class ua extends da{determineDataLimits(){const{min:t,max:e}=this.getMinMax(!0);this.min=rt(t)?t:0,this.max=rt(e)?e:1,this.handleTickRangeOptions()}computeTickLimit(){const t=this.isHorizontal(),e=t?this.width:this.height,i=se(this.options.ticks.minRotation),n=(t?Math.sin(i):Math.cos(i))||.001,o=this._resolveTickFontOptions(0);return Math.ceil(e/Math.min(40,o.lineHeight/n))}getPixelForValue(t){return t===null?NaN:this.getPixelForDecimal((t-this._startValue)/this._valueRange)}getValueForPixel(t){return this._startValue+this.getDecimalForPixel(t)*this._valueRange}}ua.id="linear",ua.defaults={ticks:{callback:Yn.formatters.numeric}};function Lg(s){return s/Math.pow(10,Math.floor(Yt(s)))===1}function MM(s,t){const e=Math.floor(Yt(t.max)),i=Math.ceil(t.max/Math.pow(10,e)),n=[];let o=zt(s.min,Math.pow(10,Math.floor(Yt(t.min)))),r=Math.floor(Yt(o)),a=Math.floor(o/Math.pow(10,r)),l=r<0?Math.pow(10,Math.abs(r)):1;do n.push({value:o,major:Lg(o)}),++a,a===10&&(a=1,++r,l=r>=0?1:l),o=Math.round(a*Math.pow(10,r)*l)/l;while(r<e||r===e&&a<i);const c=zt(s.max,o);return n.push({value:c,major:Lg(o)}),n}class pa extends oi{constructor(t){super(t),this.start=void 0,this.end=void 0,this._startValue=void 0,this._valueRange=0}parse(t,e){const i=da.prototype.parse.apply(this,[t,e]);if(i===0){this._zero=!0;return}return rt(i)&&i>0?i:null}determineDataLimits(){const{min:t,max:e}=this.getMinMax(!0);this.min=rt(t)?Math.max(0,t):null,this.max=rt(e)?Math.max(0,e):null,this.options.beginAtZero&&(this._zero=!0),this.handleTickRangeOptions()}handleTickRangeOptions(){const{minDefined:t,maxDefined:e}=this.getUserBounds();let i=this.min,n=this.max;const o=l=>i=t?i:l,r=l=>n=e?n:l,a=(l,c)=>Math.pow(10,Math.floor(Yt(l))+c);i===n&&(i<=0?(o(1),r(10)):(o(a(i,-1)),r(a(n,1)))),i<=0&&o(a(n,-1)),n<=0&&r(a(i,1)),this._zero&&this.min!==this._suggestedMin&&i===a(this.min,0)&&o(a(i,-1)),this.min=i,this.max=n}buildTicks(){const t=this.options,e={min:this._userMin,max:this._userMax},i=MM(e,this);return t.bounds==="ticks"&&Ef(i,this,"value"),t.reverse?(i.reverse(),this.start=this.max,this.end=this.min):(this.start=this.min,this.end=this.max),i}getLabelForValue(t){return t===void 0?"0":Bn(t,this.chart.options.locale,this.options.ticks.format)}configure(){const t=this.min;super.configure(),this._startValue=Yt(t),this._valueRange=Yt(this.max)-Yt(t)}getPixelForValue(t){return(t===void 0||t===0)&&(t=this.min),t===null||isNaN(t)?NaN:this.getPixelForDecimal(t===this.min?0:(Yt(t)-this._startValue)/this._valueRange)}getValueForPixel(t){const e=this.getDecimalForPixel(t);return Math.pow(10,this._startValue+e*this._valueRange)}}pa.id="logarithmic",pa.defaults={ticks:{callback:Yn.formatters.logarithmic,major:{enabled:!0}}};function sh(s){const t=s.ticks;if(t.display&&s.display){const e=pt(t.backdropPadding);return B(t.font&&t.font.size,F.font.size)+e.height}return 0}function LM(s,t,e){return e=Q(e)?e:[e],{w:hI(s,t.string,e),h:e.length*t.lineHeight}}function $g(s,t,e,i,n){return s===i||s===n?{start:t-e/2,end:t+e/2}:s<i||s>n?{start:t-e,end:t}:{start:t,end:t+e}}function $M(s){const t={l:s.left+s._padding.left,r:s.right-s._padding.right,t:s.top+s._padding.top,b:s.bottom-s._padding.bottom},e=Object.assign({},t),i=[],n=[],o=s._pointLabels.length,r=s.options.pointLabels,a=r.centerPointLabels?it/o:0;for(let l=0;l<o;l++){const c=r.setContext(s.getPointLabelContext(l));n[l]=c.padding;const h=s.getPointPosition(l,s.drawingArea+n[l],a),d=lt(c.font),u=LM(s.ctx,d,s._pointLabels[l]);i[l]=u;const p=Vt(s.getIndexAngle(l)+a),f=Math.round(mc(p)),b=$g(f,h.x,u.w,0,180),v=$g(f,h.y,u.h,90,270);RM(e,t,p,b,v)}s.setCenterPoint(t.l-e.l,e.r-t.r,t.t-e.t,e.b-t.b),s._pointLabelItems=PM(s,i,n)}function RM(s,t,e,i,n){const o=Math.abs(Math.sin(e)),r=Math.abs(Math.cos(e));let a=0,l=0;i.start<t.l?(a=(t.l-i.start)/o,s.l=Math.min(s.l,t.l-a)):i.end>t.r&&(a=(i.end-t.r)/o,s.r=Math.max(s.r,t.r+a)),n.start<t.t?(l=(t.t-n.start)/r,s.t=Math.min(s.t,t.t-l)):n.end>t.b&&(l=(n.end-t.b)/r,s.b=Math.max(s.b,t.b+l))}function PM(s,t,e){const i=[],n=s._pointLabels.length,o=s.options,r=sh(o)/2,a=s.drawingArea,l=o.pointLabels.centerPointLabels?it/n:0;for(let c=0;c<n;c++){const h=s.getPointPosition(c,a+r+e[c],l),d=Math.round(mc(Vt(h.angle+nt))),u=t[c],p=HM(h.y,u.h,d),f=NM(d),b=BM(h.x,u.w,f);i.push({x:h.x,y:p,textAlign:f,left:b,top:p,right:b+u.w,bottom:p+u.h})}return i}function NM(s){return s===0||s===180?"center":s<180?"left":"right"}function BM(s,t,e){return e==="right"?s-=t:e==="center"&&(s-=t/2),s}function HM(s,t,e){return e===90||e===270?s-=t/2:(e>270||e<90)&&(s-=t),s}function VM(s,t){const{ctx:e,options:{pointLabels:i}}=s;for(let n=t-1;n>=0;n--){const o=i.setContext(s.getPointLabelContext(n)),r=lt(o.font),{x:a,y:l,textAlign:c,left:h,top:d,right:u,bottom:p}=s._pointLabelItems[n],{backdropColor:f}=o;if(!H(f)){const b=$i(o.borderRadius),v=pt(o.backdropPadding);e.fillStyle=f;const y=h-v.left,T=d-v.top,x=u-h+v.width,E=p-d+v.height;Object.values(b).some(C=>C!==0)?(e.beginPath(),Nn(e,{x:y,y:T,w:x,h:E,radius:b}),e.fill()):e.fillRect(y,T,x,E)}Li(e,s._pointLabels[n],a,l+r.lineHeight/2,r,{color:o.color,textAlign:c,textBaseline:"middle"})}}function Rg(s,t,e,i){const{ctx:n}=s;if(e)n.arc(s.xCenter,s.yCenter,t,0,q);else{let o=s.getPointPosition(0,t);n.moveTo(o.x,o.y);for(let r=1;r<i;r++)o=s.getPointPosition(r,t),n.lineTo(o.x,o.y)}}function FM(s,t,e,i){const n=s.ctx,o=t.circular,{color:r,lineWidth:a}=t;!o&&!i||!r||!a||e<0||(n.save(),n.strokeStyle=r,n.lineWidth=a,n.setLineDash(t.borderDash),n.lineDashOffset=t.borderDashOffset,n.beginPath(),Rg(s,e,o,i),n.closePath(),n.stroke(),n.restore())}function WM(s,t,e){return ni(s,{label:e,index:t,type:"pointLabel"})}class $s extends da{constructor(t){super(t),this.xCenter=void 0,this.yCenter=void 0,this.drawingArea=void 0,this._pointLabels=[],this._pointLabelItems=[]}setDimensions(){const t=this._padding=pt(sh(this.options)/2),e=this.width=this.maxWidth-t.width,i=this.height=this.maxHeight-t.height;this.xCenter=Math.floor(this.left+e/2+t.left),this.yCenter=Math.floor(this.top+i/2+t.top),this.drawingArea=Math.floor(Math.min(e,i)/2)}determineDataLimits(){const{min:t,max:e}=this.getMinMax(!1);this.min=rt(t)&&!isNaN(t)?t:0,this.max=rt(e)&&!isNaN(e)?e:0,this.handleTickRangeOptions()}computeTickLimit(){return Math.ceil(this.drawingArea/sh(this.options))}generateTickLabels(t){da.prototype.generateTickLabels.call(this,t),this._pointLabels=this.getLabels().map((e,i)=>{const n=G(this.options.pointLabels.callback,[e,i],this);return n||n===0?n:""}).filter((e,i)=>this.chart.getDataVisibility(i))}fit(){const t=this.options;t.display&&t.pointLabels.display?$M(this):this.setCenterPoint(0,0,0,0)}setCenterPoint(t,e,i,n){this.xCenter+=Math.floor((t-e)/2),this.yCenter+=Math.floor((i-n)/2),this.drawingArea-=Math.min(this.drawingArea/2,Math.max(t,e,i,n))}getIndexAngle(t){const e=q/(this._pointLabels.length||1),i=this.options.startAngle||0;return Vt(t*e+se(i))}getDistanceFromCenterForValue(t){if(H(t))return NaN;const e=this.drawingArea/(this.max-this.min);return this.options.reverse?(this.max-t)*e:(t-this.min)*e}getValueForDistanceFromCenter(t){if(H(t))return NaN;const e=t/(this.drawingArea/(this.max-this.min));return this.options.reverse?this.max-e:this.min+e}getPointLabelContext(t){const e=this._pointLabels||[];if(t>=0&&t<e.length){const i=e[t];return WM(this.getContext(),t,i)}}getPointPosition(t,e,i=0){const n=this.getIndexAngle(t)-nt+i;return{x:Math.cos(n)*e+this.xCenter,y:Math.sin(n)*e+this.yCenter,angle:n}}getPointPositionForValue(t,e){return this.getPointPosition(t,this.getDistanceFromCenterForValue(e))}getBasePosition(t){return this.getPointPositionForValue(t||0,this.getBaseValue())}getPointLabelPosition(t){const{left:e,top:i,right:n,bottom:o}=this._pointLabelItems[t];return{left:e,top:i,right:n,bottom:o}}drawBackground(){const{backgroundColor:t,grid:{circular:e}}=this.options;if(t){const i=this.ctx;i.save(),i.beginPath(),Rg(this,this.getDistanceFromCenterForValue(this._endValue),e,this._pointLabels.length),i.closePath(),i.fillStyle=t,i.fill(),i.restore()}}drawGrid(){const t=this.ctx,e=this.options,{angleLines:i,grid:n}=e,o=this._pointLabels.length;let r,a,l;if(e.pointLabels.display&&VM(this,o),n.display&&this.ticks.forEach((c,h)=>{if(h!==0){a=this.getDistanceFromCenterForValue(c.value);const d=n.setContext(this.getContext(h-1));FM(this,d,a,o)}}),i.display){for(t.save(),r=o-1;r>=0;r--){const c=i.setContext(this.getPointLabelContext(r)),{color:h,lineWidth:d}=c;!d||!h||(t.lineWidth=d,t.strokeStyle=h,t.setLineDash(c.borderDash),t.lineDashOffset=c.borderDashOffset,a=this.getDistanceFromCenterForValue(e.ticks.reverse?this.min:this.max),l=this.getPointPosition(r,a),t.beginPath(),t.moveTo(this.xCenter,this.yCenter),t.lineTo(l.x,l.y),t.stroke())}t.restore()}}drawBorder(){}drawLabels(){const t=this.ctx,e=this.options,i=e.ticks;if(!i.display)return;const n=this.getIndexAngle(0);let o,r;t.save(),t.translate(this.xCenter,this.yCenter),t.rotate(n),t.textAlign="center",t.textBaseline="middle",this.ticks.forEach((a,l)=>{if(l===0&&!e.reverse)return;const c=i.setContext(this.getContext(l)),h=lt(c.font);if(o=this.getDistanceFromCenterForValue(this.ticks[l].value),c.showLabelBackdrop){t.font=h.string,r=t.measureText(a.label).width,t.fillStyle=c.backdropColor;const d=pt(c.backdropPadding);t.fillRect(-r/2-d.left,-o-h.size/2-d.top,r+d.width,h.size+d.height)}Li(t,a.label,0,-o,h,{color:c.color})}),t.restore()}drawTitle(){}}$s.id="radialLinear",$s.defaults={display:!0,animate:!0,position:"chartArea",angleLines:{display:!0,lineWidth:1,borderDash:[],borderDashOffset:0},grid:{circular:!1},startAngle:0,ticks:{showLabelBackdrop:!0,callback:Yn.formatters.numeric},pointLabels:{backdropColor:void 0,backdropPadding:2,display:!0,font:{size:10},callback(s){return s},padding:5,centerPointLabels:!1}},$s.defaultRoutes={"angleLines.color":"borderColor","pointLabels.color":"color","ticks.color":"color"},$s.descriptors={angleLines:{_fallback:"grid"}};const fa={millisecond:{common:!0,size:1,steps:1e3},second:{common:!0,size:1e3,steps:60},minute:{common:!0,size:6e4,steps:60},hour:{common:!0,size:36e5,steps:24},day:{common:!0,size:864e5,steps:30},week:{common:!1,size:6048e5,steps:4},month:{common:!0,size:2628e6,steps:12},quarter:{common:!1,size:7884e6,steps:4},year:{common:!0,size:3154e7}},It=Object.keys(fa);function zM(s,t){return s-t}function Pg(s,t){if(H(t))return null;const e=s._adapter,{parser:i,round:n,isoWeekday:o}=s._parseOpts;let r=t;return typeof i=="function"&&(r=i(r)),rt(r)||(r=typeof i=="string"?e.parse(r,i):e.parse(r)),r===null?null:(n&&(r=n==="week"&&(As(o)||o===!0)?e.startOf(r,"isoWeek",o):e.startOf(r,n)),+r)}function Ng(s,t,e,i){const n=It.length;for(let o=It.indexOf(s);o<n-1;++o){const r=fa[It[o]],a=r.steps?r.steps:Number.MAX_SAFE_INTEGER;if(r.common&&Math.ceil((e-t)/(a*r.size))<=i)return It[o]}return It[n-1]}function jM(s,t,e,i,n){for(let o=It.length-1;o>=It.indexOf(e);o--){const r=It[o];if(fa[r].common&&s._adapter.diff(n,i,r)>=t-1)return r}return It[e?It.indexOf(e):0]}function YM(s){for(let t=It.indexOf(s)+1,e=It.length;t<e;++t)if(fa[It[t]].common)return It[t]}function Bg(s,t,e){if(!e)s[t]=!0;else if(e.length){const{lo:i,hi:n}=vc(e,t),o=e[i]>=t?e[i]:e[n];s[o]=!0}}function KM(s,t,e,i){const n=s._adapter,o=+n.startOf(t[0].value,i),r=t[t.length-1].value;let a,l;for(a=o;a<=r;a=+n.add(a,1,i))l=e[a],l>=0&&(t[l].major=!0);return t}function Hg(s,t,e){const i=[],n={},o=t.length;let r,a;for(r=0;r<o;++r)a=t[r],n[a]=r,i.push({value:a,major:!1});return o===0||!e?i:KM(s,i,n,e)}class Rs extends oi{constructor(t){super(t),this._cache={data:[],labels:[],all:[]},this._unit="day",this._majorUnit=void 0,this._offsets={},this._normalized=!1,this._parseOpts=void 0}init(t,e){const i=t.time||(t.time={}),n=this._adapter=new D_._date(t.adapters.date);n.init(e),Sn(i.displayFormats,n.formats()),this._parseOpts={parser:i.parser,round:i.round,isoWeekday:i.isoWeekday},super.init(t),this._normalized=e.normalized}parse(t,e){return t===void 0?null:Pg(this,t)}beforeLayout(){super.beforeLayout(),this._cache={data:[],labels:[],all:[]}}determineDataLimits(){const t=this.options,e=this._adapter,i=t.time.unit||"day";let{min:n,max:o,minDefined:r,maxDefined:a}=this.getUserBounds();function l(c){!r&&!isNaN(c.min)&&(n=Math.min(n,c.min)),!a&&!isNaN(c.max)&&(o=Math.max(o,c.max))}(!r||!a)&&(l(this._getLabelBounds()),(t.bounds!=="ticks"||t.ticks.source!=="labels")&&l(this.getMinMax(!1))),n=rt(n)&&!isNaN(n)?n:+e.startOf(Date.now(),i),o=rt(o)&&!isNaN(o)?o:+e.endOf(Date.now(),i)+1,this.min=Math.min(n,o-1),this.max=Math.max(n+1,o)}_getLabelBounds(){const t=this.getLabelTimestamps();let e=Number.POSITIVE_INFINITY,i=Number.NEGATIVE_INFINITY;return t.length&&(e=t[0],i=t[t.length-1]),{min:e,max:i}}buildTicks(){const t=this.options,e=t.time,i=t.ticks,n=i.source==="labels"?this.getLabelTimestamps():this._generate();t.bounds==="ticks"&&n.length&&(this.min=this._userMin||n[0],this.max=this._userMax||n[n.length-1]);const o=this.min,r=this.max,a=PO(n,o,r);return this._unit=e.unit||(i.autoSkip?Ng(e.minUnit,this.min,this.max,this._getLabelCapacity(o)):jM(this,a.length,e.minUnit,this.min,this.max)),this._majorUnit=!i.major.enabled||this._unit==="year"?void 0:YM(this._unit),this.initOffsets(n),t.reverse&&a.reverse(),Hg(this,a,this._majorUnit)}afterAutoSkip(){this.options.offsetAfterAutoskip&&this.initOffsets(this.ticks.map(t=>+t.value))}initOffsets(t){let e=0,i=0,n,o;this.options.offset&&t.length&&(n=this.getDecimalForValue(t[0]),t.length===1?e=1-n:e=(this.getDecimalForValue(t[1])-n)/2,o=this.getDecimalForValue(t[t.length-1]),t.length===1?i=o:i=(o-this.getDecimalForValue(t[t.length-2]))/2);const r=t.length<3?.5:.25;e=dt(e,0,r),i=dt(i,0,r),this._offsets={start:e,end:i,factor:1/(e+1+i)}}_generate(){const t=this._adapter,e=this.min,i=this.max,n=this.options,o=n.time,r=o.unit||Ng(o.minUnit,e,i,this._getLabelCapacity(e)),a=B(o.stepSize,1),l=r==="week"?o.isoWeekday:!1,c=As(l)||l===!0,h={};let d=e,u,p;if(c&&(d=+t.startOf(d,"isoWeek",l)),d=+t.startOf(d,c?"day":r),t.diff(i,e,r)>1e5*a)throw new Error(e+" and "+i+" are too far apart with stepSize of "+a+" "+r);const f=n.ticks.source==="data"&&this.getDataTimestamps();for(u=d,p=0;u<i;u=+t.add(u,a,r),p++)Bg(h,u,f);return(u===i||n.bounds==="ticks"||p===1)&&Bg(h,u,f),Object.keys(h).sort((b,v)=>b-v).map(b=>+b)}getLabelForValue(t){const e=this._adapter,i=this.options.time;return i.tooltipFormat?e.format(t,i.tooltipFormat):e.format(t,i.displayFormats.datetime)}_tickFormatFunction(t,e,i,n){const o=this.options,r=o.time.displayFormats,a=this._unit,l=this._majorUnit,c=a&&r[a],h=l&&r[l],d=i[e],u=l&&h&&d&&d.major,p=this._adapter.format(t,n||(u?h:c)),f=o.ticks.callback;return f?G(f,[p,e,i],this):p}generateTickLabels(t){let e,i,n;for(e=0,i=t.length;e<i;++e)n=t[e],n.label=this._tickFormatFunction(n.value,e,t)}getDecimalForValue(t){return t===null?NaN:(t-this.min)/(this.max-this.min)}getPixelForValue(t){const e=this._offsets,i=this.getDecimalForValue(t);return this.getPixelForDecimal((e.start+i)*e.factor)}getValueForPixel(t){const e=this._offsets,i=this.getDecimalForPixel(t)/e.factor-e.end;return this.min+i*(this.max-this.min)}_getLabelSize(t){const e=this.options.ticks,i=this.ctx.measureText(t).width,n=se(this.isHorizontal()?e.maxRotation:e.minRotation),o=Math.cos(n),r=Math.sin(n),a=this._resolveTickFontOptions(0).size;return{w:i*o+a*r,h:i*r+a*o}}_getLabelCapacity(t){const e=this.options.time,i=e.displayFormats,n=i[e.unit]||i.millisecond,o=this._tickFormatFunction(t,0,Hg(this,[t],this._majorUnit),n),r=this._getLabelSize(o),a=Math.floor(this.isHorizontal()?this.width/r.w:this.height/r.h)-1;return a>0?a:1}getDataTimestamps(){let t=this._cache.data||[],e,i;if(t.length)return t;const n=this.getMatchingVisibleMetas();if(this._normalized&&n.length)return this._cache.data=n[0].controller.getAllParsedValues(this);for(e=0,i=n.length;e<i;++e)t=t.concat(n[e].controller.getAllParsedValues(this));return this._cache.data=this.normalize(t)}getLabelTimestamps(){const t=this._cache.labels||[];let e,i;if(t.length)return t;const n=this.getLabels();for(e=0,i=n.length;e<i;++e)t.push(Pg(this,n[e]));return this._cache.labels=this._normalized?t:this.normalize(t)}normalize(t){return kf(t.sort(zM))}}Rs.id="time",Rs.defaults={bounds:"data",adapters:{},time:{parser:!1,unit:!1,round:!1,isoWeekday:!1,minUnit:"millisecond",displayFormats:{}},ticks:{source:"auto",major:{enabled:!1}}};function _a(s,t,e){let i=0,n=s.length-1,o,r,a,l;e?(t>=s[i].pos&&t<=s[n].pos&&({lo:i,hi:n}=De(s,"pos",t)),{pos:o,time:a}=s[i],{pos:r,time:l}=s[n]):(t>=s[i].time&&t<=s[n].time&&({lo:i,hi:n}=De(s,"time",t)),{time:o,pos:a}=s[i],{time:r,pos:l}=s[n]);const c=r-o;return c?a+(l-a)*(t-o)/c:a}class ga extends Rs{constructor(t){super(t),this._table=[],this._minPos=void 0,this._tableRange=void 0}initOffsets(){const t=this._getTimestampsForTable(),e=this._table=this.buildLookupTable(t);this._minPos=_a(e,this.min),this._tableRange=_a(e,this.max)-this._minPos,super.initOffsets(t)}buildLookupTable(t){const{min:e,max:i}=this,n=[],o=[];let r,a,l,c,h;for(r=0,a=t.length;r<a;++r)c=t[r],c>=e&&c<=i&&n.push(c);if(n.length<2)return[{time:e,pos:0},{time:i,pos:1}];for(r=0,a=n.length;r<a;++r)h=n[r+1],l=n[r-1],c=n[r],Math.round((h+l)/2)!==c&&o.push({time:c,pos:r/(a-1)});return o}_getTimestampsForTable(){let t=this._cache.all||[];if(t.length)return t;const e=this.getDataTimestamps(),i=this.getLabelTimestamps();return e.length&&i.length?t=this.normalize(e.concat(i)):t=e.length?e:i,t=this._cache.all=t,t}getDecimalForValue(t){return(_a(this._table,t)-this._minPos)/this._tableRange}getValueForPixel(t){const e=this._offsets,i=this.getDecimalForPixel(t)/e.factor-e.end;return _a(this._table,i*this._tableRange+this._minPos,!0)}}ga.id="timeseries",ga.defaults=Rs.defaults;var Vg=Object.freeze({__proto__:null,CategoryScale:eo,LinearScale:ua,LogarithmicScale:pa,RadialLinearScale:$s,TimeScale:Rs,TimeSeriesScale:ga});const UM=Object.freeze(Object.defineProperty({__proto__:null,Animation:f_,Animations:Pc,ArcElement:Ds,BarController:Vn,BarElement:Ls,BasePlatform:zc,BasicPlatform:H_,BubbleController:Fn,CategoryScale:eo,Chart:Uc,DatasetController:Ut,Decimation:dg,DomPlatform:j_,DoughnutController:Bi,Element:Xt,Filler:vg,Interaction:L_,Legend:Eg,LineController:Wn,LineElement:Le,LinearScale:ua,LogarithmicScale:pa,PieController:ea,PointElement:Ms,PolarAreaController:zn,RadarController:jn,RadialLinearScale:$s,Scale:oi,ScatterController:Un,SubTitle:Cg,Ticks:Yn,TimeScale:Rs,TimeSeriesScale:ga,Title:xg,Tooltip:Ig,_adapters:D_,_detectPlatform:Y_,animator:xe,controllers:I_,defaults:F,elements:lg,layouts:ft,plugins:Dg,registerables:[I_,lg,Dg,Vg],registry:ne,scales:Vg},Symbol.toStringTag,{value:"Module"}));/*!
+ * chartjs-plugin-datalabels v2.2.0
+ * https://chartjs-plugin-datalabels.netlify.app
+ * (c) 2017-2022 chartjs-plugin-datalabels contributors
+ * Released under the MIT license
+ */var Fg=function(){if(typeof window<"u"){if(window.devicePixelRatio)return window.devicePixelRatio;var s=window.screen;if(s)return(s.deviceXDPI||1)/(s.logicalXDPI||1)}return 1}(),io={toTextLines:function(s){var t=[],e;for(s=[].concat(s);s.length;)e=s.pop(),typeof e=="string"?t.unshift.apply(t,e.split(`
+`)):Array.isArray(e)?s.push.apply(s,e):H(s)||t.unshift(""+e);return t},textSize:function(s,t,e){var i=[].concat(t),n=i.length,o=s.font,r=0,a;for(s.font=e.string,a=0;a<n;++a)r=Math.max(s.measureText(i[a]).width,r);return s.font=o,{height:n*e.lineHeight,width:r}},bound:function(s,t,e){return Math.max(s,Math.min(t,e))},arrayDiff:function(s,t){var e=s.slice(),i=[],n,o,r,a;for(n=0,r=t.length;n<r;++n)a=t[n],o=e.indexOf(a),o===-1?i.push([a,1]):e.splice(o,1);for(n=0,r=e.length;n<r;++n)i.push([e[n],-1]);return i},rasterize:function(s){return Math.round(s*Fg)/Fg}};function nh(s,t){var e=t.x,i=t.y;if(e===null)return{x:0,y:-1};if(i===null)return{x:1,y:0};var n=s.x-e,o=s.y-i,r=Math.sqrt(n*n+o*o);return{x:r?n/r:0,y:r?o/r:-1}}function XM(s,t,e,i,n){switch(n){case"center":e=i=0;break;case"bottom":e=0,i=1;break;case"right":e=1,i=0;break;case"left":e=-1,i=0;break;case"top":e=0,i=-1;break;case"start":e=-e,i=-i;break;case"end":break;default:n*=Math.PI/180,e=Math.cos(n),i=Math.sin(n);break}return{x:s,y:t,vx:e,vy:i}}var GM=0,Wg=1,zg=2,jg=4,Yg=8;function ma(s,t,e){var i=GM;return s<e.left?i|=Wg:s>e.right&&(i|=zg),t<e.top?i|=Yg:t>e.bottom&&(i|=jg),i}function qM(s,t){for(var e=s.x0,i=s.y0,n=s.x1,o=s.y1,r=ma(e,i,t),a=ma(n,o,t),l,c,h;!(!(r|a)||r&a);)l=r||a,l&Yg?(c=e+(n-e)*(t.top-i)/(o-i),h=t.top):l&jg?(c=e+(n-e)*(t.bottom-i)/(o-i),h=t.bottom):l&zg?(h=i+(o-i)*(t.right-e)/(n-e),c=t.right):l&Wg&&(h=i+(o-i)*(t.left-e)/(n-e),c=t.left),l===r?(e=c,i=h,r=ma(e,i,t)):(n=c,o=h,a=ma(n,o,t));return{x0:e,x1:n,y0:i,y1:o}}function ba(s,t){var e=t.anchor,i=s,n,o;return t.clamp&&(i=qM(i,t.area)),e==="start"?(n=i.x0,o=i.y0):e==="end"?(n=i.x1,o=i.y1):(n=(i.x0+i.x1)/2,o=(i.y0+i.y1)/2),XM(n,o,s.vx,s.vy,t.align)}var va={arc:function(s,t){var e=(s.startAngle+s.endAngle)/2,i=Math.cos(e),n=Math.sin(e),o=s.innerRadius,r=s.outerRadius;return ba({x0:s.x+i*o,y0:s.y+n*o,x1:s.x+i*r,y1:s.y+n*r,vx:i,vy:n},t)},point:function(s,t){var e=nh(s,t.origin),i=e.x*s.options.radius,n=e.y*s.options.radius;return ba({x0:s.x-i,y0:s.y-n,x1:s.x+i,y1:s.y+n,vx:e.x,vy:e.y},t)},bar:function(s,t){var e=nh(s,t.origin),i=s.x,n=s.y,o=0,r=0;return s.horizontal?(i=Math.min(s.x,s.base),o=Math.abs(s.base-s.x)):(n=Math.min(s.y,s.base),r=Math.abs(s.base-s.y)),ba({x0:i,y0:n+r,x1:i+o,y1:n,vx:e.x,vy:e.y},t)},fallback:function(s,t){var e=nh(s,t.origin);return ba({x0:s.x,y0:s.y,x1:s.x+(s.width||0),y1:s.y+(s.height||0),vx:e.x,vy:e.y},t)}},Re=io.rasterize;function ZM(s){var t=s.borderWidth||0,e=s.padding,i=s.size.height,n=s.size.width,o=-n/2,r=-i/2;return{frame:{x:o-e.left-t,y:r-e.top-t,w:n+e.width+t*2,h:i+e.height+t*2},text:{x:o,y:r,w:n,h:i}}}function QM(s,t){var e=t.chart.getDatasetMeta(t.datasetIndex).vScale;if(!e)return null;if(e.xCenter!==void 0&&e.yCenter!==void 0)return{x:e.xCenter,y:e.yCenter};var i=e.getBasePixel();return s.horizontal?{x:i,y:null}:{x:null,y:i}}function JM(s){return s instanceof Ds?va.arc:s instanceof Ms?va.point:s instanceof Ls?va.bar:va.fallback}function tL(s,t,e,i,n,o){var r=Math.PI/2;if(o){var a=Math.min(o,n/2,i/2),l=t+a,c=e+a,h=t+i-a,d=e+n-a;s.moveTo(t,c),l<h&&c<d?(s.arc(l,c,a,-Math.PI,-r),s.arc(h,c,a,-r,0),s.arc(h,d,a,0,r),s.arc(l,d,a,r,Math.PI)):l<h?(s.moveTo(l,e),s.arc(h,c,a,-r,r),s.arc(l,c,a,r,Math.PI+r)):c<d?(s.arc(l,c,a,-Math.PI,0),s.arc(l,d,a,0,Math.PI)):s.arc(l,c,a,-Math.PI,Math.PI),s.closePath(),s.moveTo(t,e)}else s.rect(t,e,i,n)}function eL(s,t,e){var i=e.backgroundColor,n=e.borderColor,o=e.borderWidth;!i&&(!n||!o)||(s.beginPath(),tL(s,Re(t.x)+o/2,Re(t.y)+o/2,Re(t.w)-o,Re(t.h)-o,e.borderRadius),s.closePath(),i&&(s.fillStyle=i,s.fill()),n&&o&&(s.strokeStyle=n,s.lineWidth=o,s.lineJoin="miter",s.stroke()))}function iL(s,t,e){var i=e.lineHeight,n=s.w,o=s.x,r=s.y+i/2;return t==="center"?o+=n/2:(t==="end"||t==="right")&&(o+=n),{h:i,w:n,x:o,y:r}}function sL(s,t,e){var i=s.shadowBlur,n=e.stroked,o=Re(e.x),r=Re(e.y),a=Re(e.w);n&&s.strokeText(t,o,r,a),e.filled&&(i&&n&&(s.shadowBlur=0),s.fillText(t,o,r,a),i&&n&&(s.shadowBlur=i))}function nL(s,t,e,i){var n=i.textAlign,o=i.color,r=!!o,a=i.font,l=t.length,c=i.textStrokeColor,h=i.textStrokeWidth,d=c&&h,u;if(!(!l||!r&&!d))for(e=iL(e,n,a),s.font=a.string,s.textAlign=n,s.textBaseline="middle",s.shadowBlur=i.textShadowBlur,s.shadowColor=i.textShadowColor,r&&(s.fillStyle=o),d&&(s.lineJoin="round",s.lineWidth=h,s.strokeStyle=c),u=0,l=t.length;u<l;++u)sL(s,t[u],{stroked:d,filled:r,w:e.w,x:e.x,y:e.y+e.h*u})}var Kg=function(s,t,e,i){var n=this;n._config=s,n._index=i,n._model=null,n._rects=null,n._ctx=t,n._el=e};Te(Kg.prototype,{_modelize:function(s,t,e,i){var n=this,o=n._index,r=lt(tt([e.font,{}],i,o)),a=tt([e.color,F.color],i,o);return{align:tt([e.align,"center"],i,o),anchor:tt([e.anchor,"center"],i,o),area:i.chart.chartArea,backgroundColor:tt([e.backgroundColor,null],i,o),borderColor:tt([e.borderColor,null],i,o),borderRadius:tt([e.borderRadius,0],i,o),borderWidth:tt([e.borderWidth,0],i,o),clamp:tt([e.clamp,!1],i,o),clip:tt([e.clip,!1],i,o),color:a,display:s,font:r,lines:t,offset:tt([e.offset,4],i,o),opacity:tt([e.opacity,1],i,o),origin:QM(n._el,i),padding:pt(tt([e.padding,4],i,o)),positioner:JM(n._el),rotation:tt([e.rotation,0],i,o)*(Math.PI/180),size:io.textSize(n._ctx,t,r),textAlign:tt([e.textAlign,"start"],i,o),textShadowBlur:tt([e.textShadowBlur,0],i,o),textShadowColor:tt([e.textShadowColor,a],i,o),textStrokeColor:tt([e.textStrokeColor,a],i,o),textStrokeWidth:tt([e.textStrokeWidth,0],i,o)}},update:function(s){var t=this,e=null,i=null,n=t._index,o=t._config,r,a,l,c=tt([o.display,!0],s,n);c&&(r=s.dataset.data[n],a=B(G(o.formatter,[r,s]),r),l=H(a)?[]:io.toTextLines(a),l.length&&(e=t._modelize(c,l,o,s),i=ZM(e))),t._model=e,t._rects=i},geometry:function(){return this._rects?this._rects.frame:{}},rotation:function(){return this._model?this._model.rotation:0},visible:function(){return this._model&&this._model.opacity},model:function(){return this._model},draw:function(s,t){var e=this,i=s.ctx,n=e._model,o=e._rects,r;this.visible()&&(i.save(),n.clip&&(r=n.area,i.beginPath(),i.rect(r.left,r.top,r.right-r.left,r.bottom-r.top),i.clip()),i.globalAlpha=io.bound(0,n.opacity,1),i.translate(Re(t.x),Re(t.y)),i.rotate(n.rotation),eL(i,o.frame,n),nL(i,n.lines,o.text,n),i.restore())}});var oL=Number.MIN_SAFE_INTEGER||-9007199254740991,rL=Number.MAX_SAFE_INTEGER||9007199254740991;function so(s,t,e){var i=Math.cos(e),n=Math.sin(e),o=t.x,r=t.y;return{x:o+i*(s.x-o)-n*(s.y-r),y:r+n*(s.x-o)+i*(s.y-r)}}function Ug(s,t){var e=rL,i=oL,n=t.origin,o,r,a,l,c;for(o=0;o<s.length;++o)r=s[o],a=r.x-n.x,l=r.y-n.y,c=t.vx*a+t.vy*l,e=Math.min(e,c),i=Math.max(i,c);return{min:e,max:i}}function ya(s,t){var e=t.x-s.x,i=t.y-s.y,n=Math.sqrt(e*e+i*i);return{vx:(t.x-s.x)/n,vy:(t.y-s.y)/n,origin:s,ln:n}}var Xg=function(){this._rotation=0,this._rect={x:0,y:0,w:0,h:0}};Te(Xg.prototype,{center:function(){var s=this._rect;return{x:s.x+s.w/2,y:s.y+s.h/2}},update:function(s,t,e){this._rotation=e,this._rect={x:t.x+s.x,y:t.y+s.y,w:t.w,h:t.h}},contains:function(s){var t=this,e=1,i=t._rect;return s=so(s,t.center(),-t._rotation),!(s.x<i.x-e||s.y<i.y-e||s.x>i.x+i.w+e*2||s.y>i.y+i.h+e*2)},intersects:function(s){var t=this._points(),e=s._points(),i=[ya(t[0],t[1]),ya(t[0],t[3])],n,o,r;for(this._rotation!==s._rotation&&i.push(ya(e[0],e[1]),ya(e[0],e[3])),n=0;n<i.length;++n)if(o=Ug(t,i[n]),r=Ug(e,i[n]),o.max<r.min||r.max<o.min)return!1;return!0},_points:function(){var s=this,t=s._rect,e=s._rotation,i=s.center();return[so({x:t.x,y:t.y},i,e),so({x:t.x+t.w,y:t.y},i,e),so({x:t.x+t.w,y:t.y+t.h},i,e),so({x:t.x,y:t.y+t.h},i,e)]}});function Gg(s,t,e){var i=t.positioner(s,t),n=i.vx,o=i.vy;if(!n&&!o)return{x:i.x,y:i.y};var r=e.w,a=e.h,l=t.rotation,c=Math.abs(r/2*Math.cos(l))+Math.abs(a/2*Math.sin(l)),h=Math.abs(r/2*Math.sin(l))+Math.abs(a/2*Math.cos(l)),d=1/Math.max(Math.abs(n),Math.abs(o));return c*=n*d,h*=o*d,c+=t.offset*n,h+=t.offset*o,{x:i.x+c,y:i.y+h}}function aL(s,t){var e,i,n,o;for(e=s.length-1;e>=0;--e)for(n=s[e].$layout,i=e-1;i>=0&&n._visible;--i)o=s[i].$layout,o._visible&&n._box.intersects(o._box)&&t(n,o);return s}function lL(s){var t,e,i,n,o,r,a;for(t=0,e=s.length;t<e;++t)i=s[t],n=i.$layout,n._visible&&(a=new Proxy(i._el,{get:(l,c)=>l.getProps([c],!0)[c]}),o=i.geometry(),r=Gg(a,i.model(),o),n._box.update(r,o,i.rotation()));return aL(s,function(l,c){var h=l._hidable,d=c._hidable;h&&d||d?c._visible=!1:h&&(l._visible=!1)})}var no={prepare:function(s){var t=[],e,i,n,o,r;for(e=0,n=s.length;e<n;++e)for(i=0,o=s[e].length;i<o;++i)r=s[e][i],t.push(r),r.$layout={_box:new Xg,_hidable:!1,_visible:!0,_set:e,_idx:r._index};return t.sort(function(a,l){var c=a.$layout,h=l.$layout;return c._idx===h._idx?h._set-c._set:h._idx-c._idx}),this.update(t),t},update:function(s){var t=!1,e,i,n,o,r;for(e=0,i=s.length;e<i;++e)n=s[e],o=n.model(),r=n.$layout,r._hidable=o&&o.display==="auto",r._visible=n.visible(),t|=r._hidable;t&&lL(s)},lookup:function(s,t){var e,i;for(e=s.length-1;e>=0;--e)if(i=s[e].$layout,i&&i._visible&&i._box.contains(t))return s[e];return null},draw:function(s,t){var e,i,n,o,r,a;for(e=0,i=t.length;e<i;++e)n=t[e],o=n.$layout,o._visible&&(r=n.geometry(),a=Gg(n._el,n.model(),r),o._box.update(a,r,n.rotation()),n.draw(s,a))}},cL=function(s){if(H(s))return null;var t=s,e,i,n;if(V(s))if(!H(s.label))t=s.label;else if(!H(s.r))t=s.r;else for(t="",e=Object.keys(s),n=0,i=e.length;n<i;++n)t+=(n!==0?", ":"")+e[n]+": "+s[e[n]];return""+t},hL={align:"center",anchor:"center",backgroundColor:null,borderColor:null,borderRadius:0,borderWidth:0,clamp:!1,clip:!1,color:void 0,display:!0,font:{family:void 0,lineHeight:1.2,size:void 0,style:void 0,weight:null},formatter:cL,labels:void 0,listeners:{},offset:4,opacity:1,padding:{top:4,right:4,bottom:4,left:4},rotation:0,textAlign:"start",textStrokeColor:void 0,textStrokeWidth:0,textShadowBlur:0,textShadowColor:void 0},Dt="$datalabels",qg="$default";function dL(s,t){var e=s.datalabels,i={},n=[],o,r;return e===!1?null:(e===!0&&(e={}),t=Te({},[t,e]),o=t.labels||{},r=Object.keys(o),delete t.labels,r.length?r.forEach(function(a){o[a]&&n.push(Te({},[t,o[a],{_key:a}]))}):n.push(t),i=n.reduce(function(a,l){return U(l.listeners||{},function(c,h){a[h]=a[h]||{},a[h][l._key||qg]=c}),delete l.listeners,a},{}),{labels:n,listeners:i})}function oh(s,t,e,i){if(t){var n=e.$context,o=e.$groups,r;t[o._set]&&(r=t[o._set][o._key],r&&G(r,[n,i])===!0&&(s[Dt]._dirty=!0,e.update(n)))}}function uL(s,t,e,i,n){var o,r;!e&&!i||(e?i?e!==i&&(r=o=!0):r=!0:o=!0,r&&oh(s,t.leave,e,n),o&&oh(s,t.enter,i,n))}function pL(s,t){var e=s[Dt],i=e._listeners,n,o;if(!(!i.enter&&!i.leave)){if(t.type==="mousemove")o=no.lookup(e._labels,t);else if(t.type!=="mouseout")return;n=e._hovered,e._hovered=o,uL(s,i,n,o,t)}}function fL(s,t){var e=s[Dt],i=e._listeners.click,n=i&&no.lookup(e._labels,t);n&&oh(s,i,n,t)}var _L={id:"datalabels",defaults:hL,beforeInit:function(s){s[Dt]={_actives:[]}},beforeUpdate:function(s){var t=s[Dt];t._listened=!1,t._listeners={},t._datasets=[],t._labels=[]},afterDatasetUpdate:function(s,t,e){var i=t.index,n=s[Dt],o=n._datasets[i]=[],r=s.isDatasetVisible(i),a=s.data.datasets[i],l=dL(a,e),c=t.meta.data||[],h=s.ctx,d,u,p,f,b,v,y,T;for(h.save(),d=0,p=c.length;d<p;++d)if(y=c[d],y[Dt]=[],r&&y&&s.getDataVisibility(d)&&!y.skip)for(u=0,f=l.labels.length;u<f;++u)b=l.labels[u],v=b._key,T=new Kg(b,h,y,d),T.$groups={_set:i,_key:v||qg},T.$context={active:!1,chart:s,dataIndex:d,dataset:a,datasetIndex:i},T.update(T.$context),y[Dt].push(T),o.push(T);h.restore(),Te(n._listeners,l.listeners,{merger:function(x,E,C){E[x]=E[x]||{},E[x][t.index]=C[x],n._listened=!0}})},afterUpdate:function(s){s[Dt]._labels=no.prepare(s[Dt]._datasets)},afterDatasetsDraw:function(s){no.draw(s,s[Dt]._labels)},beforeEvent:function(s,t){if(s[Dt]._listened){var e=t.event;switch(e.type){case"mousemove":case"mouseout":pL(s,e);break;case"click":fL(s,e);break}}},afterEvent:function(s){var t=s[Dt],e=t._actives,i=t._actives=s.getActiveElements(),n=io.arrayDiff(e,i),o,r,a,l,c,h,d;for(o=0,r=n.length;o<r;++o)if(c=n[o],c[1])for(d=c[0].element[Dt]||[],a=0,l=d.length;a<l;++a)h=d[a],h.$context.active=c[1]===1,h.update(h.$context);(t._dirty||n.length)&&(no.update(t._labels),s.render()),delete t._dirty}};const gL=Object.freeze(Object.defineProperty({__proto__:null,default:_L},Symbol.toStringTag,{value:"Module"}));N.Alert=Ws,N.Animate=Gs,N.Autocomplete=Pr,N.Button=ao,N.Carousel=he,N.Chart=yp,N.Chip=ki,N.ChipsInput=gp,N.Clipboard=Ar,N.Collapse=ce,N.Datatable=pr,N.Datepicker=xl,N.Datetimepicker=Dr,N.Dropdown=Ft,N.InfiniteScroll=kr,N.Input=Z,N.LazyLoad=yn,N.Lightbox=ys,N.LoadingManagement=Or,N.Modal=Ys,N.MultiRangeSlider=Hr,N.Offcanvas=ts,N.PerfectScrollbar=ms,N.Popconfirm=_r,N.Popover=Eo,N.Rating=Bp,N.Ripple=Ye,N.ScrollSpy=xo,N.Select=on,N.Sidenav=Ii,N.SmoothScroll=xr,N.Stepper=Wu,N.Sticky=Lr,N.Tab=wo,N.Timepicker=Ll,N.Toast=Xs,N.Tooltip=is,N.Touch=Er,N.Validation=Tr,N.initTE=ff,Object.defineProperty(N,Symbol.toStringTag,{value:"Module"})});
+
+
+    </script>
+  </body>
+</html>
diff --git a/test/sample_data/html/triple_overlay_profile_example.htm b/test/sample_data/html/triple_overlay_profile_example.htm
new file mode 100644
index 0000000000..3578180ac7
--- /dev/null
+++ b/test/sample_data/html/triple_overlay_profile_example.htm
@@ -0,0 +1,558697 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Administrator Report</title>
+    <style>
+      /*! tailwindcss v3.4.4 | MIT License | https://tailwindcss.com*/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}:host,html{-webkit-text-size-adjust:100%;font-feature-settings:normal;-webkit-tap-highlight-color:transparent;font-family:Roboto,sans-serif;font-variation-settings:normal;line-height:1.5;-moz-tab-size:4;-o-tab-size:4;tab-size:4}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-feature-settings:normal;font-family:ui-monospace,monospace;font-size:1em;font-variation-settings:normal}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{border-collapse:collapse;border-color:inherit;text-indent:0}button,input,optgroup,select,textarea{font-feature-settings:inherit;color:inherit;font-family:inherit;font-size:100%;font-variation-settings:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{color:#9ca3af;opacity:1}input::placeholder,textarea::placeholder{color:#9ca3af;opacity:1}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{height:auto;max-width:100%}[hidden]{display:none}input[type=range]::-webkit-slider-thumb{appearance:none;-moz-appearance:none;-webkit-appearance:none;background:#3b71ca;border:0;border-radius:9999px;cursor:pointer;height:1rem;width:1rem}input[type=range]:disabled::-webkit-slider-thumb,input[type=range]:disabled:focus::-webkit-slider-thumb{background:#a3a3a3}input[type=range]:disabled:active::-webkit-slider-thumb{background:#a3a3a3}input[type=range]::-moz-range-thumb{appearance:none;-moz-appearance:none;-webkit-appearance:none;background:#3b71ca;border:0;border-radius:9999px;cursor:pointer;height:1rem;width:1rem}input[type=range]:disabled::-moz-range-thumb{background:#a3a3a3}input[type=range]::-moz-range-progress{background:#3061af}input[type=range]::-ms-fill-lower{background:#3061af}input[type=range]:focus{outline:none}input[type=range]:focus::-webkit-slider-thumb{background:#3061af}input[type=range]:active::-webkit-slider-thumb{background:#285192}*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }.collapse{visibility:collapse}.relative{position:relative}.top-0{top:0}.z-10{z-index:10}.mx-2{margin-left:.5rem;margin-right:.5rem}.mx-4{margin-left:1rem;margin-right:1rem}.mx-6{margin-left:1.5rem;margin-right:1.5rem}.my-1{margin-bottom:.25rem;margin-top:.25rem}.my-2{margin-bottom:.5rem;margin-top:.5rem}.my-3{margin-bottom:.75rem;margin-top:.75rem}.my-4{margin-bottom:1rem;margin-top:1rem}.-mr-1{margin-right:-.25rem}.mb-0{margin-bottom:0}.mb-2{margin-bottom:.5rem}.ml-auto{margin-left:auto}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.block{display:block}.inline-block{display:inline-block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.h-1{height:.25rem}.h-5{height:1.25rem}.h-6{height:1.5rem}.w-1\/2{width:50%}.w-24{width:6rem}.w-28{width:7rem}.w-32{width:8rem}.w-36{width:9rem}.w-40{width:10rem}.w-5{width:1.25rem}.w-56{width:14rem}.w-6{width:1.5rem}.w-64{width:16rem}.w-full{width:100%}.min-w-full{min-width:100%}.shrink{flex-shrink:1}.shrink-0{flex-shrink:0}.border-separate{border-collapse:separate}.border-spacing-x-2{--tw-border-spacing-x:0.5rem;border-spacing:var(--tw-border-spacing-x) var(--tw-border-spacing-y)}.rotate-\[-180deg\]{--tw-rotate:-180deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.grid-flow-row{grid-auto-flow:row}.grid-flow-col{grid-auto-flow:column}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.flex-wrap{flex-wrap:wrap}.items-center{align-items:center}.justify-between{justify-content:space-between}.gap-x-2{-moz-column-gap:.5rem;column-gap:.5rem}.gap-x-6{-moz-column-gap:1.5rem;column-gap:1.5rem}.gap-y-1{row-gap:.25rem}.gap-y-2{row-gap:.5rem}.overflow-hidden{overflow:hidden}.whitespace-pre-line{white-space:pre-line}.whitespace-pre-wrap{white-space:pre-wrap}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-full{border-radius:9999px}.rounded-xl{border-radius:.75rem}.rounded-t-xl{border-top-left-radius:.75rem;border-top-right-radius:.75rem}.border{border-width:1px}.border-4{border-width:4px}.border-b{border-bottom-width:1px}.border-r{border-right-width:1px}.border-black{--tw-border-opacity:1;border-color:rgb(0 0 0/var(--tw-border-opacity))}.border-gray-300{--tw-border-opacity:1;border-color:rgb(209 213 219/var(--tw-border-opacity))}.bg-gray-100{--tw-bg-opacity:1;background-color:rgb(243 244 246/var(--tw-bg-opacity))}.bg-gray-300{--tw-bg-opacity:1;background-color:rgb(209 213 219/var(--tw-bg-opacity))}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.fill-\[\#336dec\]{fill:#336dec}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-1{padding-bottom:.25rem;padding-top:.25rem}.py-2{padding-bottom:.5rem;padding-top:.5rem}.py-3{padding-bottom:.75rem;padding-top:.75rem}.py-4{padding-bottom:1rem;padding-top:1rem}.py-6{padding-top:1.5rem}.pb-6,.py-6{padding-bottom:1.5rem}.pl-3{padding-left:.75rem}.pl-4{padding-left:1rem}.pl-8{padding-left:2rem}.pr-1{padding-right:.25rem}.pt-1{padding-top:.25rem}.text-left{text-align:left}.text-center{text-align:center}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.text-black{--tw-text-opacity:1;color:rgb(0 0 0/var(--tw-text-opacity))}.text-gray-400{--tw-text-opacity:1;color:rgb(156 163 175/var(--tw-text-opacity))}.text-red-700{--tw-text-opacity:1;color:rgb(185 28 28/var(--tw-text-opacity))}.underline{text-decoration-line:underline}.shadow-lg{--tw-shadow:0 10px 15px -3px rgba(0,0,0,.1),0 4px 6px -4px rgba(0,0,0,.1);--tw-shadow-colored:0 10px 15px -3px var(--tw-shadow-color),0 4px 6px -4px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.transition{transition-duration:.15s;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1)}.transition-transform{transition-duration:.15s;transition-property:transform;transition-timing-function:cubic-bezier(.4,0,.2,1)}.duration-200{transition-duration:.2s}.ease-in-out{transition-timing-function:cubic-bezier(.4,0,.2,1)}.\[overflow-anchor\:none\]{overflow-anchor:none}.odd\:bg-gray-100:nth-child(odd){--tw-bg-opacity:1;background-color:rgb(243 244 246/var(--tw-bg-opacity))}.even\:bg-white:nth-child(2n){--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.hover\:z-\[2\]:hover{z-index:2}.focus\:z-\[3\]:focus{z-index:3}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:mr-0{margin-right:0}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:rotate-0{--tw-rotate:0deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.group[data-te-collapse-collapsed] .group-\[\[data-te-collapse-collapsed\]\]\:fill-\[\#212529\]{fill:#212529}@media (prefers-reduced-motion:reduce){.motion-reduce\:transition-none{transition-property:none}}@media (min-width:640px){.sm\:block{display:block}.sm\:grid{display:grid}.sm\:hidden{display:none}.sm\:w-40{width:10rem}.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:grid-cols-\[10\%_90\%\]{grid-template-columns:10% 90%}.sm\:break-words{overflow-wrap:break-word}.sm\:font-normal{font-weight:400}.sm\:no-underline{text-decoration-line:none}}@media (min-width:768px){.md\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}@media (min-width:1024px){.lg\:sticky{position:sticky}.lg\:block{display:block}.lg\:grid{display:grid}.lg\:hidden{display:none}.lg\:w-32{width:8rem}.lg\:w-36{width:9rem}.lg\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.lg\:break-normal{overflow-wrap:normal;word-break:normal}.lg\:pl-9{padding-left:2.25rem}}@media (min-width:1280px){.xl\:w-52{width:13rem}.xl\:grid-flow-col{grid-auto-flow:column}.xl\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.xl\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}}@media print{.print\:block{display:block}.print\:hidden{display:none}.print\:border-none{border-style:none}.print\:border-black{--tw-border-opacity:1;border-color:rgb(0 0 0/var(--tw-border-opacity))}.print\:bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity))}.print\:text-left{text-align:left}.print\:text-2xl{font-size:1.5rem;line-height:2rem}}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:bg-blue-200:not([data-te-collapse-collapsed]){--tw-bg-opacity:1;background-color:rgb(191 219 254/var(--tw-bg-opacity))}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:text-blue-900:not([data-te-collapse-collapsed]){--tw-text-opacity:1;color:rgb(30 58 138/var(--tw-text-opacity))}.\[\&\:not\(\[data-te-collapse-collapsed\]\)\]\:\[box-shadow\:inset_0_-1px_0_rgba\(229\2c 231\2c 235\)\]:not([data-te-collapse-collapsed]){box-shadow:inset 0 -1px 0 #e5e7eb}.\[\&\[data-te-dropdown-show\]\]\:grid[data-te-dropdown-show]{display:grid}
+    </style>
+    <style>
+      .border-low {
+        --tw-border-opacity: 1;
+        border-color: rgb(243 67 53 / var(--tw-border-opacity));
+      }
+      .border-medium {
+        --tw-border-opacity: 1;
+        border-color: rgb(255 235 59 / var(--tw-border-opacity));
+      }
+      .border-high {
+        --tw-border-opacity: 1;
+        border-color: rgb(76 176 79 / var(--tw-border-opacity));
+      }
+    </style>
+  </head>
+
+  <body>
+    <!-- Navbar -->
+    <!-- WARNING: Tailwind Elements interactive components get disabled on Android's HTML viewer; use a browser instead -->
+    <nav
+      class="relative top-0 z-10 min-w-full border-b border-gray-300 bg-gray-100 px-3 py-3 shadow-lg print:hidden lg:sticky"
+    >
+      <!-- Heimdall report -->
+      <a href="#" class="px-3 py-2 text-lg font-medium">Heimdall Report</a>
+      <!-- Profile info link -->
+      <button role="button" aria-label="Jump to profile info card">
+        <a href="#profileInfo" class="px-3 py-2 text-sm" aria-current="page">
+          Profile Info
+        </a>
+      </button>
+      <!-- Result sets dropdown menu -->
+      <div class="inline-block" data-te-dropdown-ref>
+        <!-- Button def -->
+        <button
+          type="button"
+          class="inline-flex px-3 py-2 text-sm"
+          data-te-dropdown-toggle-ref
+          href="#resultSetsList"
+          role="button"
+          aria-controls="resultSetsList"
+          aria-expanded="false"
+          aria-label="Toggle navigation dropdown"
+        >
+          Result Sets
+          <svg
+            class="-mr-1 h-5 w-5 text-gray-400"
+            viewBox="0 0 20 20"
+            fill="currentColor"
+            role="img"
+            aria-hidden="true"
+          >
+            <path
+              fill-rule="evenodd"
+              d="M5.23 7.21a.75.75 0 011.06.02L10 11.168l3.71-3.938a.75.75 0 111.08 1.04l-4.25 4.5a.75.75 0 01-1.08 0l-4.25-4.5a.75.75 0 01.02-1.06z"
+              clip-rule="evenodd"
+            />
+          </svg>
+        </button>
+        <!-- Menu def -->
+        <div
+          class="z-10 mt-2 hidden grid-cols-1 sm:grid-cols-2 md:grid-cols-3 lg:grid-cols-4 [&[data-te-dropdown-show]]:grid"
+          id="resultSetsList"
+          data-te-dropdown-menu-ref
+          aria-labelledby="resultSetsList"
+        >
+          <!-- Generate links for every result set -->
+          <div
+            class="block w-56 break-words border border-gray-300 bg-white px-4 py-3 text-sm shadow-lg"
+          >
+            <a href="#0" data-te-dropdown-item-ref>triple_overlay_profile_example.json</a>
+          </div>
+        </div>
+      </div>
+      <!-- Toggle result set accordion collapse state -->
+      <button
+        class="px-3 py-2 text-sm"
+        type="button"
+        data-te-collapse-init
+        data-te-target=".multi-collapse-outer"
+        aria-expanded="true"
+        aria-controls="result-accordion-body"
+      >
+        Toggle Result Sets Expansion
+      </button>
+      <!-- Toggle result accordion collapse state -->
+      <button
+        class="px-3 py-2 text-sm"
+        type="button"
+        data-te-collapse-init
+        data-te-target=".multi-collapse-inner"
+        aria-expanded="true"
+        aria-controls="result-accordion-body"
+      >
+        Toggle Results Expansion
+      </button>
+      <span class="px-3 py-2 text-sm">
+        (To Expand All, Refresh Browser Page)
+      </span>
+    </nav>
+
+    <!-- Profile status card -->
+    <div class="px-4 py-6">
+      <div
+        class="min-w-full rounded-xl border border-gray-300 bg-gray-100 px-4 py-2 print:border-black print:bg-white"
+      >
+        <h5 class="mb-2 text-xl font-bold">Profile Status</h5>
+        <div class="grid grid-flow-row justify-between xl:grid-flow-col">
+          <!-- Status counts -->
+          <div class="px-2 py-2">
+            <div class="font-bold">Count</div>
+            <div class="pt-1">
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                Passed: 57 (87
+                individual checks passed)
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                Failed: 165
+                (63 individual checks
+                passed, 420 failed out of
+                483 total checks)
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Not Applicable: 132
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Not Reviewed: 246
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(121, 134, 203)" d="M13 14H11V9H13M13 18H11V16H13M1 21H23L12 2L1 21Z"/></svg></span>
+                Profile Error: 0
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="black" d="M17,16V14H7V16H17M19,3A2,2 0 0,1 21,5V19A2,2 0 0,1 19,21H5C3.89,21 3,20.1 3,19V5C3,3.89 3.89,3 5,3H19M17,10V8H7V10H17Z"/></svg></span>
+                Total: 600
+              </div>
+            </div>
+          </div>
+
+          <!-- Severity report -->
+          <div class="px-2 py-2">
+            <div class="font-bold">Severity</div>
+            <div class="pt-1">
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                None: 132
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Low: 21
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                Medium: 420
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden"><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                High: 27
+              </div>
+              <div class="flex">
+                <span class="pr-1 print:hidden">
+                  <svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(244, 67, 54)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg>
+                </span>
+                Critical: 0
+              </div>
+            </div>
+          </div>
+
+          <!-- Compliance level -->
+          <div class="w-64 px-2 py-2">
+            <div class="font-bold">Compliance</div>
+            <div>
+              <div
+                class="my-1 rounded-full border-4 border-low text-center text-4xl print:border-none print:text-left print:text-2xl"
+              >
+                12.17%
+              </div>
+              [Passed/(Passed + Failed + Not Reviewed + Profile Error) * 100]
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- Profile info card -->
+    <div class="px-4 pb-6" id="profileInfo">
+      <div
+        class="min-w-full rounded-xl border border-gray-300 bg-gray-100 px-4 py-2 print:border-black print:bg-white"
+      >
+        <h5 class="mb-2 text-xl font-bold">Profile Info</h5>
+        <div class="grid grid-cols-2 md:grid-cols-3 xl:grid-cols-4">
+          <!-- Generate an info report for every profile -->
+          <div class="mx-2 my-2 break-words">
+            <div><strong>Filename:</strong> triple_overlay_profile_example.json</div>
+            <div><strong>Tool Version:</strong> 4.18.100</div>
+            <div><strong>Platform:</strong> centos</div>
+            <div><strong>Duration:</strong> 0.353633098</div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="overflow-hidden">
+      <!-- Result section -->
+      <!-- If empty, then this should be an executive report HTML export type -->
+      <!-- If not such export type, error has occurred -->
+      <!-- Result set accordion -->
+      <!-- Generate a result set accordion for every result set -->
+      <!-- Outer accordion -->
+      <div
+        class="mx-2 rounded-t-xl border border-gray-300 bg-white print:hidden"
+        id="0"
+      >
+        <div class="mb-0">
+          <!-- Button def -->
+          <button
+            class="group flex w-full items-center rounded-t-xl bg-white px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+            type="button"
+            data-te-collapse-init
+            data-te-target="#collapseable-0"
+            aria-expanded="true"
+            aria-controls="collapseable-0"
+          >
+            triple_overlay_profile_example.json
+            <span
+              class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+            >
+              <svg
+                xmlns="http://www.w3.org/2000/svg"
+                fill="none"
+                viewBox="0 0 24 24"
+                stroke-width="1.5"
+                stroke="currentColor"
+                class="h-6 w-6"
+                role="img"
+                aria-hidden="true"
+              >
+                <path
+                  stroke-linecap="round"
+                  stroke-linejoin="round"
+                  d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                />
+              </svg>
+            </span>
+          </button>
+        </div>
+
+        <!-- Inner accordion -->
+        <!-- Accordion body def -->
+        <div
+          id="collapseable-0"
+          class="multi-collapse-outer my-4"
+          data-te-collapse-item
+          data-te-collapse-show
+        >
+          <!-- Result header -->
+          <div class="mx-4 rounded-t-xl border border-gray-300 bg-gray-100">
+            <div class="mx-6 my-4 flex w-full shrink">
+              <!-- Status indicator -->
+              <!-- Headers eventually collapse under status column -->
+              <span class="grid w-36 grid-cols-1 sm:w-40">
+                <!-- ID -->
+                <span class="sm:hidden">ID</span>
+                <hr class="h-1 w-32 bg-gray-300 sm:hidden" />
+                <!-- Status indicator -->
+                <span>Status</span>
+                <hr class="h-1 w-32 bg-gray-300 lg:hidden" />
+                <!-- Severity indicator -->
+                <span class="lg:hidden">Severity</span>
+                <hr class="h-1 w-32 bg-gray-300 lg:hidden" />
+                <!-- Control tags -->
+                <span class="lg:hidden">800-53 Controls & CCIs</span>
+              </span>
+              <!-- ID -->
+              <span class="hidden w-28 pl-4 sm:block lg:w-32">ID</span>
+              <!-- Severity indicator -->
+              <span class="hidden w-28 pl-3 lg:block">Severity</span>
+              <!-- Title -->
+              <span class="w-1/2 pl-8 sm:block lg:pl-9">Title</span>
+              <!-- Control tags -->
+              <span class="hidden lg:block lg:w-36 xl:w-52">
+                800-53 Controls & CCIs
+              </span>
+            </div>
+          </div>
+
+          <!-- Generate a result accordion for every result -->
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61409"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61409"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61409</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61409
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61409"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61409"
+            >
+              <!-- Result description -->
+              Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is retained for at least one year</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61409</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement an audit retention policy and 
+    procedures.
+
+    It is recommended that the most recent ninety days of audit logs remain 
+    available online.
+
+    After thirty ninety days, the audit logs may be maintained off-line.
+
+    Online maintenance provides for a more timely capability and inclination to         
+    investigate suspicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61409&#39; do
+    title &#39;Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.&#39;
+    desc &#39;Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.&#39;
+    desc &#39;check&#39;, &#39;Develop, document and implement an audit retention policy and 
+    procedures.
+
+    It is recommended that the most recent ninety days of audit logs remain 
+    available online.
+
+    After thirty ninety days, the audit logs may be maintained off-line.
+
+    Online maintenance provides for a more timely capability and inclination to         
+    investigate suspicious activity.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61409&#39; do
+  title &#39;Audit trail data must be retained for at least one year.&#39;
+  desc  &quot;Without preservation, a complete discovery of an attack or suspicious
+  activity may not be determined.  DBMS audit data also contributes to the
+  complete investigation of unauthorized activity and needs to be included in
+  audit retention plans and procedures.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61409&#39;
+  tag &quot;rid&quot;: &#39;SV-75899r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67325r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review and verify the implementation of an audit trail
+  retention policy.
+
+  Verify that audit data is maintained for a minimum of one year.
+
+  If audit data is not maintained for a minimum of one year, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61411"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61411"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61411</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61411
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to default accounts used to support replication must be
+  restricted to authorized DBAs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61411"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61411"
+            >
+              <!-- Result description -->
+              Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61411</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61411&#39; do
+  title &quot;Access to default accounts used to support replication must be
+  restricted to authorized DBAs.&quot;
+  desc &quot;Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61411&#39;
+  tag &quot;rid&quot;: &#39;SV-75901r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67327r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+  tag &quot;fix&quot;: &quot;Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.&quot;
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61413"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61413"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61413</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61413
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle instance names must not contain Oracle version numbers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61413"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61413"
+            >
+              <!-- Result description -->
+              Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61413</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle instance names must not contain Oracle version numbers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61413&#39; do
+  title &#39;Oracle instance names must not contain Oracle version numbers.&#39;
+  desc  &quot;Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61413&#39;
+  tag &quot;rid&quot;: &#39;SV-75903r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67329r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.&quot;
+  tag &quot;fix&quot;: &quot;Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+  db_instance_name &#x3D; sql.query(&#39;select instance_name from v$instance;&#39;).column(&#39;instance_name&#39;)
+
+  describe &#39;The oracle database instance name&#39; do
+    subject { db_instance_name }
+    it { should_not include version.to_s }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61415"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61415"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61415</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61415
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Fixed user and public database links must be authorized for use.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61415"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61415"
+            >
+              <!-- Result description -->
+              Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61415</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Fixed user and public database links must be authorized for use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61415&#39; do
+  title &#39;Fixed user and public database links must be authorized for use.&#39;
+  desc  &quot;Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61415&#39;
+  tag &quot;rid&quot;: &#39;SV-75905r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67331r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61417"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61417"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61417</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61417
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61417"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61417"
+            >
+              <!-- Result description -->
+              Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61417</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61417&#39; do
+  title &quot;A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.&quot;
+  desc &quot;Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.&quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61417&#39;
+  tag &quot;rid&quot;: &#39;SV-75907r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67333r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.&quot;
+  tag &quot;fix&quot;: &quot;To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  controlfiles &#x3D; sql.query(&#39;select name from v$controlfile;&#39;).column(&#39;name&#39;)
+  partitions &#x3D; []
+
+  controlfiles.each do |files|
+    file &#x3D; files[1..-1]
+    get_pos_slash &#x3D; file.index(&#39;&#x2F;&#39;)
+    partition &#x3D; file[0..get_pos_slash]
+    partitions.push(partition)
+  end
+
+  control_file1_partition &#x3D; partitions[0]
+  control_file2_partition &#x3D; partitions[1]
+
+  describe &quot;The oracable control file permission: #{control_file1_partition}&quot; do
+    subject { control_file1_partition }
+    it { should_not cmp control_file2_partition }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61419"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61419"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61419</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61419
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61419"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61419"
+            >
+              <!-- Result description -->
+              The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61419</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61419&#39; do
+  title &quot;A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.&quot;
+  desc &quot;The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61419&#39;
+  tag &quot;rid&quot;: &#39;SV-75909r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67335r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&#39;select count(*) from V$LOG;&#39;).column(&#39;count(*)&#39;) do
+    it { should cmp &gt;&#x3D; 2 }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61421"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61421"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61421</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61421
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61421"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61421"
+            >
+              <!-- Result description -->
+              An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61421</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61421&#39; do
+  title &quot;The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.&quot;
+  desc &quot;An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61421&#39;
+  tag &quot;rid&quot;: &#39;SV-75911r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67337r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;&quot;).row(0).column(&quot;grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name&quot;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61425"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61425"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61425</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61425
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61425"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61425"
+            >
+              <!-- Result description -->
+              Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61425</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61425&#39; do
+  title &#39;The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.&#39;
+  desc  &quot;Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61425&#39;
+  tag &quot;rid&quot;: &#39;SV-75915r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67341r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_AUTHENT parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61427"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61427"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61427</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61427
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61427"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61427"
+            >
+              <!-- Result description -->
+              Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61427</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61427&#39; do
+  title &#39;The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.&#39;
+  desc  &quot;Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61427&#39;
+  tag &quot;rid&quot;: &#39;SV-75917r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67343r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_ROLES parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61429"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61429"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61429</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61429
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle SQL92_SECURITY parameter must be set to TRUE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61429"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61429"
+            >
+              <!-- Result description -->
+              The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61429</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle SQL92_SECURITY parameter must be set to TRUE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61429&#39; do
+  title &#39;The Oracle SQL92_SECURITY parameter must be set to TRUE.&#39;
+  desc  &quot;The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61429&#39;
+  tag &quot;rid&quot;: &#39;SV-75919r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67345r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database SQL92_SECURITY parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;TRUE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61431"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61431"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61431</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61431
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61431"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61431"
+            >
+              <!-- Result description -->
+              The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61431</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61431&#39; do
+  title &quot;The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.&quot;
+  desc &quot;The REMOTE_LOGIN_PASSWORDFILE setting of \&quot;NONE\&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  \&quot;EXCLUSIVE\&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to \&quot;EXCLUSIVE\&quot;, remote connections to the database as \&quot;internal\&quot;
+  or \&quot;as SYSDBA\&quot; are not logged to an individual account.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61431&#39;
+  tag &quot;rid&quot;: &#39;SV-75921r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67347r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;&quot;).column(&#39;value&#39;)
+
+  describe.one do
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;EXCLUSIVE&#39; }
+    end
+
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;NONE&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61433"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61433"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61433</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61433
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61433"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61433"
+            >
+              <!-- Result description -->
+              The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61433</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61433&#39; do
+  title &quot;System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61433&#39;
+  tag &quot;rid&quot;: &#39;SV-75923r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67349r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61435"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61435"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61435</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61435
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  System Privileges must not be granted to PUBLIC.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61435"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61435"
+            >
+              <!-- Result description -->
+              System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61435</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System Privileges must not be granted to PUBLIC.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61435&#39; do
+  title &#39;System Privileges must not be granted to PUBLIC.&#39;
+  desc  &quot;System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61435&#39;
+  tag &quot;rid&quot;: &#39;SV-75925r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67351r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;privilege&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61437"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61437"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61437</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61437
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61437"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61437"
+            >
+              <!-- Result description -->
+              The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61437</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61437&#39; do
+  title &quot;Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61437&#39;
+  tag &quot;rid&quot;: &#39;SV-75927r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67353r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_option &#x3D; sql.query(&quot;select grantee from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_admin_option.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_option.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61439"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61439"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61439</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61439
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Object permissions granted to PUBLIC must be restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61439"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61439"
+            >
+              <!-- Result description -->
+              Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: CTXSYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: XDB with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61439</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Object permissions granted to PUBLIC must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61439&#39; do
+  title &#39;Object permissions granted to PUBLIC must be restricted.&#39;
+  desc  &quot;Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61439&#39;
+  tag &quot;rid&quot;: &#39;SV-75929r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67355r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_public_access &#x3D; sql.query(&quot;select DISTINCT owner from dba_tab_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).column(&#39;owner&#39;).uniq
+
+  if users_with_public_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with access to PUBLIC, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with access to PUBLIC&#39;
+    end
+  else
+    users_with_public_access.each do |user|
+      describe &quot;oracle user: #{user} with access to PUBLIC&quot; do
+        subject { user }
+        it { should be_in input(&#39;users_allowed_access_to_public&#39;)}
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61441"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61441"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61441</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61441
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle Listener must be configured to require administration
+  authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61441"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61441"
+            >
+              <!-- Result description -->
+              Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61441</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle Listener must be configured to require administration
+  authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If &quot;Security &#x3D; OFF&quot; is displayed, this is a finding.
+
+  If &quot;Security &#x3D; ON: Local OS Authentication&quot; is displayed, this is not a
+  finding.
+
+  If &quot;Security &#x3D; ON: Password or Local OS Authentication&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61441&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+         skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61441&#39; do
+  title &quot;The Oracle Listener must be configured to require administration
+  authentication.&quot;
+  desc &quot;Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61441&#39;
+  tag &quot;rid&quot;: &#39;SV-75931r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67357r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If \&quot;Security &#x3D; OFF\&quot; is displayed, this is a finding.
+
+  If \&quot;Security &#x3D; ON: Local OS Authentication\&quot; is displayed, this is not a
+  finding.
+
+  If \&quot;Security &#x3D; ON: Password or Local OS Authentication\&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.&quot;
+  tag &quot;fix&quot;: &quot;By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.&quot;
+
+  listener_name &#x3D; command(&quot;ps -ef | grep tnslsnr | grep -v grep|awk &#39;{ print $9; }&#39;&quot;).stdout.strip
+
+  listener_status &#x3D; command(&quot;lsnrctl status #{listener_name}&quot;).stdout.strip
+
+  describe &#39;The Oracle Listener status&#39; do
+    subject { listener_status }
+    it { should_not include &#39;Security                  OFF&#39; }
+    it { should_not include &#39;Security                  ON: Password or Local OS Authentication&#39; }
+  end
+  describe listener_status do
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61443"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61443"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61443</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61443
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application role permissions must not be assigned to the Oracle PUBLIC
+  role.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61443"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61443"
+            >
+              <!-- Result description -->
+              Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61443</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61443&#39; do
+  title &quot;Application role permissions must not be assigned to the Oracle PUBLIC
+  role.&quot;
+  desc &quot;Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61443&#39;
+  tag &quot;rid&quot;: &#39;SV-75933r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67359r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;granted_role&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61445"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61445"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61445</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61445
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle application administration roles must be disabled if not
+  required and authorized.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61445"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61445"
+            >
+              <!-- Result description -->
+              Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61445</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle application administration roles must be disabled if not
+  required and authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61445&#39; do
+  title &quot;Oracle application administration roles must be disabled if not
+  required and authorized.&quot;
+  desc &quot;Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61445&#39;
+  tag &quot;rid&quot;: &#39;SV-75935r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67361r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dba_role &#x3D; sql.query(&quot;select grantee from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dba_role.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_dba_role.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_dba_role&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61447"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61447"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61447</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61447
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61447"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61447"
+            >
+              <!-- Result description -->
+              Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61447</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure communications between the DBMS and remote 
+       applications&#x2F;application servers to use CMS-approved encryption.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61447&#39; do
+  desc &#39;Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.&#39;
+  desc &#39;fix&#39;, &#39;Configure communications between the DBMS and remote 
+       applications&#x2F;application servers to use CMS-approved encryption.&#39;	
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61447&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61447&#39; do
+  title &quot;Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  &quot;
+  desc &quot;Multi-tier systems may be configured with the database and connecting
+  middle-tier system located on an internal network, with the database located on
+  an internal network behind a firewall and the middle-tier system located in a
+  DMZ. In cases where either or both systems are located in the DMZ (or on
+  networks external to DoD), network communications between the systems must be
+  encrypted.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61447&#39;
+  tag &quot;rid&quot;: &#39;SV-75937r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67363r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure communications between the DBMS and remote
+  applications&#x2F;application servers to use DoD-approved encryption.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61449"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61449"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61449</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61449
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61449"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61449"
+            >
+              <!-- Result description -->
+              Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61449</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61449&#39; do
+  title &quot;Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.&quot;
+  desc &quot;Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61449&#39;
+  tag &quot;rid&quot;: &#39;SV-75939r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67365r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_jobs &#x3D; sql.query(&quot;select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;).column(&#39;job_name&#39;)
+
+  describe &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot; do
+    skip &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61451"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61451"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61451</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61451
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unauthorized database links must not be defined and active.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61451"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61451"
+            >
+              <!-- Result description -->
+              DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61451</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized database links must not be defined and active.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61451&#39; do
+  title &#39;Unauthorized database links must not be defined and active.&#39;
+  desc  &quot;DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61451&#39;
+  tag &quot;rid&quot;: &#39;SV-75941r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67367r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61453"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61453"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61453</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61453
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Sensitive information from production database exports must be
+  modified before import to a development database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61453"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61453"
+            >
+              <!-- Result description -->
+              Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61453</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Sensitive information from production database exports must be
+  modified before import to a development database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61453&#39; do
+    desc &#39;Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61453&#39; do
+  title &quot;Sensitive information from production database exports must be
+  modified before import to a development database.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers do not have a need to know to sensitive data. Any access
+  they may have to production data would be considered unauthorized access and
+  subject the sensitive data to unlawful or unauthorized disclosure. See DODD
+  8500.1 for a definition of Sensitive Information.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61453&#39;
+  tag &quot;rid&quot;: &#39;SV-75943r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67369r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.&quot;
+  describe &#39;A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database&#39; do
+    skip &#39;A manual review is required to ensure sensitive information from production database exports are
+    modified before import to a development database&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61455"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61455"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61455</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61455
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61455"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61455"
+            >
+              <!-- Result description -->
+              Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61455</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61455&#39; do
+    title &#39;Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.&#39;
+    desc &#39;Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61455&#39; do
+  title &quot;Application user privilege assignment must be reviewed monthly or more
+  frequently to ensure compliance with least privilege and documented policy.&quot;
+  desc &quot;Users granted privileges not required to perform their assigned
+  functions are able to make unauthorized modifications to the production data or
+  database. Monthly or more frequent periodic review of privilege assignments
+  assures that organizational and&#x2F;or functional changes are reflected
+  appropriately.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61455&#39;
+  tag &quot;rid&quot;: &#39;SV-75945r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67371r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61457"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61457"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61457</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61457
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Audit trail data must be reviewed daily or more frequently.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61457"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61457"
+            >
+              <!-- Result description -->
+              Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is reviewed daily or more frequently</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61457</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit trail data must be reviewed daily or more frequently.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures to monitor
+  audit trail data daily.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61457&#39; do
+  title &#39;Audit trail data must be reviewed daily or more frequently.&#39;
+  desc  &quot;Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61457&#39;
+  tag &quot;rid&quot;: &#39;SV-75947r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67373r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  audit trail data daily.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61459"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61459"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61459</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61459
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61459"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61459"
+            >
+              <!-- Result description -->
+              The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_name is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_value is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSBACKUP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSDG is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61459</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the &quot;alter user&quot; for each affected user account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61459&#39; do
+  title &quot;Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.&quot;
+  desc  &quot;The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61459&#39;
+  tag &quot;rid&quot;: &#39;SV-75949r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67375r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the \&quot;alter user\&quot; for each affected user account.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  property_name &#x3D; sql.query(&quot;select property_name
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_name&#39;)
+
+  describe &#39;The oracle database property_name&#39; do
+    subject { property_name }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  property_value &#x3D; sql.query(&quot;select property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_value&#39;)
+
+  describe &#39;The oracle database property_value&#39; do
+    subject { property_value }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  users_with_system_tablespace &#x3D; sql.query(&quot;select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);&quot;).column(&#39;username&#39;).uniq
+  if users_with_system_tablespace.empty?
+    impact 0.0
+    describe &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_system_tablespace.each do |user|
+      describe &quot;oracle users with system tablespace: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_system_tablespace&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61461"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61461"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61461</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61461
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application owner accounts must have a dedicated application
+  tablespace.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61461"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61461"
+            >
+              <!-- Result description -->
+              Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61461</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application owner accounts must have a dedicated application
+  tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61461&#39; do
+  title &quot;Application owner accounts must have a dedicated application
+  tablespace.&quot;
+  desc &quot;Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61461&#39;
+  tag &quot;rid&quot;: &#39;SV-75951r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67377r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  application_owners &#x3D; sql.query(&quot;select distinct owner
+  from dba_SEGMENTS;&quot;).column(&#39;owner&#39;).uniq
+  if application_owners.empty?
+    impact 0.0
+    describe &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39;
+    end
+  else
+    application_owners.each do |user|
+      describe &quot;oracle db application owners: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_application_owners&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61463"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61463"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61463</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61463
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61463"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61463"
+            >
+              <!-- Result description -->
+              The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61463</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61463&#39; do
+  title &quot;The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.&quot;
+  desc  &quot;The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61463&#39;
+  tag &quot;rid&quot;: &#39;SV-75953r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67379r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_archive_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database log_archive_dest parameter&#39; do
+    subject { log_archive_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  parameter &#x3D; sql.query(&quot;select DISTINCT value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database value for log_archive_dest parameter&#39; do
+    subject { parameter }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  db_recovery_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;&quot;).column(&#39;value&#39;).uniq
+
+  describe &#39;The oracle database db_recovery_file_dest parameter&#39; do
+    subject { db_recovery_file_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61465"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61465"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61465</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61465
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61465"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61465"
+            >
+              <!-- Result description -->
+              The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61465</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61465&#39; do
+  title &quot;The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.&quot;
+  desc  &quot;The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61465&#39;
+  tag &quot;rid&quot;: &#39;SV-75955r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67381r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database _TRACE_FILES_PUBLIC parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;TRUE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61467"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61467"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61467</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61467
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61467"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61467"
+            >
+              <!-- Result description -->
+              Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61467</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61467&#39; do
+  title &quot;Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.&quot;
+  desc &quot;Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61467&#39;
+  tag &quot;rid&quot;: &#39;SV-75957r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67383r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+
+  unlocked_accounts &#x3D; sql.query(&quot;select distinct o.owner from dba_objects o, dba_users u
+  where
+   o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;&quot;).column(&#39;owner&#39;).uniq
+  if unlocked_accounts.empty?
+    impact 0.0
+    describe &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39; do
+      skip &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39;
+    end
+  else
+    unlocked_accounts.each do |user|
+      describe &quot;oracle user: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_unlocked_oracledb_accounts&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61487"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61487"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61487</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61487
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61487"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61487"
+            >
+              <!-- Result description -->
+              Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61487</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61487&#39; do
+  title &quot;DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.&quot;
+  desc &quot;Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61487&#39;
+  tag &quot;rid&quot;: &#39;SV-75977r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67403r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.&quot;
+  tag &quot;fix&quot;: &quot;Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.&#39; do
+    skip &#39;A manual review is required to ensure DBMS production application and data directories are protected
+  from developers on shared production&#x2F;development DBMS host systems.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61489"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61489"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61489</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61489
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of the DBMS installation account must be logged.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61489"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61489"
+            >
+              <!-- Result description -->
+              The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61489</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of the DBMS installation account must be logged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61489&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61489&#39; do
+  title &#39;Use of the DBMS installation account must be logged.&#39;
+  desc  &quot;The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61489&#39;
+  tag &quot;rid&quot;: &#39;SV-75979r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67405r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.&quot;
+  describe command(&quot;grep -ie &#39;^[^#]*NOPASSWD&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe command(&quot;grep -ie &#39;^[^#]*!authenticate&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;sudoers\s+\-p\s+wa\s+\-k\s+[-\w]+\s*$&#x2F;) }
+  end
+  describe sshd_config do
+    its(&#39;PrintLastLog&#39;) { should be_nil.or eq &#39;yes&#39; }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;group\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;passwd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;gshadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;shadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;security\&#x2F;opasswd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61491"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61491"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61491</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61491
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61491"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61491"
+            >
+              <!-- Result description -->
+              The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61491</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure all related application components and the DBMS host platform 
+         in accordance with the applicable CMS ARS.
+
+         Regularly audit the security configuration of related applications and the host 
+         platform to confirm continued compliance with security requirements.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61491&#39; do
+    title &#39;The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.&#39;
+    desc &#39;fix&#39;, &#39;Configure all related application components and the DBMS host platform 
+         in accordance with the applicable CMS ARS.
+
+         Regularly audit the security configuration of related applications and the host 
+         platform to confirm continued compliance with security requirements.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61491&#39; do
+  title &quot;The DBMS host platform and other dependent applications must be
+  configured in compliance with applicable STIG requirements.&quot;
+  desc &quot;The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61491&#39;
+  tag &quot;rid&quot;: &#39;SV-75981r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67407r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure all related application components and the DBMS host
+  platform in accordance with the applicable DoD STIG.
+
+  Regularly audit the security configuration of related applications and the host
+  platform to confirm continued compliance with security requirements.&quot;
+  describe &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39; do
+    skip &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61493"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61493"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61493</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61493
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61493"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61493"
+            >
+              <!-- Result description -->
+              Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61493</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61493&#39; do
+  title &quot;Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.&quot;
+  desc &quot;Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61493&#39;
+  tag &quot;rid&quot;: &#39;SV-75983r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67409r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61495"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61495"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61495</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61495
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The database must not be directly accessible from public or
+  unauthorized networks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61495"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61495"
+            >
+              <!-- Result description -->
+              Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61495</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The database must not be directly accessible from public or
+  unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61495&#39; do
+  title &quot;The database must not be directly accessible from public or
+  unauthorized networks.&quot;
+  desc &quot;Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61495&#39;
+  tag &quot;rid&quot;: &#39;SV-75985r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67411r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.&quot;
+  describe &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39; do
+    skip &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61497"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61497"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61497</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61497
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ISSM must review changes to DBA role assignments.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61497"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61497"
+            >
+              <!-- Result description -->
+              Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61497</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ISSM must review changes to DBA role assignments.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61497&#39; do
+  title &#39;The ISSM must review changes to DBA role assignments.&#39;
+  desc  &quot;Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61497&#39;
+  tag &quot;rid&quot;: &#39;SV-75987r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67413r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61499"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61499"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61499</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61499
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61499"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61499"
+            >
+              <!-- Result description -->
+              Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61499</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61499&#39; do
+  title &quot;Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.&quot;
+  desc &quot;Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61499&#39;
+  tag &quot;rid&quot;: &#39;SV-75989r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67415r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.&quot;
+  describe &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39; do
+    skip &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61501"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61501"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61501</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61501
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61501"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61501"
+            >
+              <!-- Result description -->
+              Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61501</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61501&#39; do
+  title &quot;Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61501&#39;
+  tag &quot;rid&quot;: &#39;SV-75991r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67417r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.&quot;
+  describe &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39; do
+    skip &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61503"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61503"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61503</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61503
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61503"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61503"
+            >
+              <!-- Result description -->
+              A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61503</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled &quot;SSN&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61503&#39; do
+  title &quot;Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.&quot;
+  desc &quot;A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61503&#39;
+  tag &quot;rid&quot;: &#39;SV-75993r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67419r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled \&quot;SSN\&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.&quot;
+  describe &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39; do
+    skip &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61507"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61507"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61507</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61507
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61507"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61507"
+            >
+              <!-- Result description -->
+              Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61507</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61507&#39; do
+  title &quot;Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.&quot;
+  desc &quot;Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61507&#39;
+  tag &quot;rid&quot;: &#39;SV-75997r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67423r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61509"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61509"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61509</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61509
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must not share a host supporting an independent security
+  service.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61509"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61509"
+            >
+              <!-- Result description -->
+              The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61509</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must not share a host supporting an independent security
+  service.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61509&#39; do
+  title &quot;The DBMS must not share a host supporting an independent security
+  service.&quot;
+  desc &quot;The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61509&#39;
+  tag &quot;rid&quot;: &#39;SV-75999r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67425r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.&quot;
+  tag &quot;fix&quot;: &quot;Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service&#39; do
+    skip &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+   service&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61511"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61511"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61511</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61511
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to DBMS software files and directories must not be granted to
+  unauthorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61511"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61511"
+            >
+              <!-- Result description -->
+              The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61511</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to DBMS software files and directories must not be granted to
+  unauthorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \Program Files\Oracle\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61511&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61511&#39; do
+  title &quot;Access to DBMS software files and directories must not be granted to
+  unauthorized users.&quot;
+  desc &quot;The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61511&#39;
+  tag &quot;rid&quot;: &#39;SV-76001r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67427r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \\Program Files\\Oracle\\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61513"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61513"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61513</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61513
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Replication accounts must not be granted DBA privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61513"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61513"
+            >
+              <!-- Result description -->
+              Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61513</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication accounts must not be granted DBA privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61513&#39; do
+  title &#39;Replication accounts must not be granted DBA privileges.&#39;
+  desc  &quot;Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61513&#39;
+  tag &quot;rid&quot;: &#39;SV-76003r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67429r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61515"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61515"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61515</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61515
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Network access to the DBMS must be restricted to authorized personnel.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61515"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61515"
+            >
+              <!-- Result description -->
+              Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61515</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network access to the DBMS must be restricted to authorized personnel.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (&quot;&#x2F;32&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a &quot;&#x2F;&quot; indicates acceptance by subnet mask where the
+  number after the &quot;&#x2F;&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61515&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61515&#39; do
+  title &#39;Network access to the DBMS must be restricted to authorized personnel.&#39;
+  desc  &quot;Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61515&#39;
+  tag &quot;rid&quot;: &#39;SV-76005r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67431r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (\&quot;&#x2F;32\&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a \&quot;&#x2F;\&quot; indicates acceptance by subnet mask where the
+  number after the \&quot;&#x2F;\&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.&quot;
+  tag &quot;fix&quot;: &quot;Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;tcp.validnode_checking&#x3D;YES&#39; }
+    its(&#39;content&#39;) { should match &#x2F;tcp.invited_nodes&#x3D;(\W*)&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61519"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61519"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61519</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61519
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Changes to configuration options must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61519"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61519"
+            >
+              <!-- Result description -->
+              The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61519</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Changes to configuration options must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61519&#39; do
+  title &#39;Changes to configuration options must be audited.&#39;
+  desc  &quot;The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61519&#39;
+  tag &quot;rid&quot;: &#39;SV-76009r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67435r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database AUDIT_SYS_OPERATIONS parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61523"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61523"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61523</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61523
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote DBMS administration must be documented and authorized or
+  disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61523"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61523"
+            >
+              <!-- Result description -->
+              Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61523</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote DBMS administration must be documented and authorized or
+  disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan for authorization, assignments and usage 
+         procedures for remote DBMS administration.
+
+         If remote administration of the DBMS is not documented or poorly documented, this 
+         is a finding.
+
+         If remote administration of the DBMS is not authorized and not disabled, this is 
+         a finding.
+         
+         If remote administration is to be performed from outside the CMS network, but is not 
+         done via an approved and properly configured VPN, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61523&#39; do
+    desc &#39;Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.&#39;
+
+    desc &#39;check&#39;, &#39;Review the System Security Plan for authorization, assignments and usage 
+         procedures for remote DBMS administration.
+
+         If remote administration of the DBMS is not documented or poorly documented, this 
+         is a finding.
+
+         If remote administration of the DBMS is not authorized and not disabled, this is 
+         a finding.
+         
+         If remote administration is to be performed from outside the CMS network, but is not 
+         done via an approved and properly configured VPN, this is a finding.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61523&#39; do
+  title &quot;Remote DBMS administration must be documented and authorized or
+  disabled.&quot;
+  desc &quot;Remote administration may expose configuration and sensitive data to
+  unauthorized viewing during transit across the network or allow unauthorized
+  administrative access to the DBMS to remote users.
+
+      For the purposes of this STIG, \&quot;Remote\&quot; means \&quot;outside the DoDIN.\&quot;
+  However, use of an approved and properly configured VPN counts as inside the
+  DoDIN.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61523&#39;
+  tag &quot;rid&quot;: &#39;SV-76013r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67439r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for authorization, assignments
+  and usage procedures for remote DBMS administration.
+
+  If remote administration of the DBMS is not documented or poorly documented,
+  this is a finding.
+
+  If remote administration of the DBMS is not authorized and not disabled, this
+  is a finding.
+
+  If remote administration is to be performed from outside the DoDIN, but is not
+  done via an approved and properly configured VPN, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61525"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61525"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61525</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61525
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61525"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61525"
+            >
+              <!-- Result description -->
+              Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61525</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61525&#39; do
+  title &quot;DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.&quot;
+  desc &quot;Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61525&#39;
+  tag &quot;rid&quot;: &#39;SV-76015r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67441r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.&quot;
+  tag &quot;fix&quot;: &quot;Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.&quot;
+  describe &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61527"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61527"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61527</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61527
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Changes to DBMS security labels must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61527"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61527"
+            >
+              <!-- Result description -->
+              Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61527</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Changes to DBMS security labels must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61527&#39; do
+  title &#39;Changes to DBMS security labels must be audited.&#39;
+  desc  &quot;Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61527&#39;
+  tag &quot;rid&quot;: &#39;SV-76017r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67443r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39;Changes to security label assignment is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Changes to security label assignment is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61529"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61529"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61529</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61529
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote database or other external access must use fully-qualified
+  names.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61529"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61529"
+            >
+              <!-- Result description -->
+              The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61529</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote database or other external access must use fully-qualified
+  names.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61529&#39; do
+  title &quot;Remote database or other external access must use fully-qualified
+  names.&quot;
+  desc  &quot;The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61529&#39;
+  tag &quot;rid&quot;: &#39;SV-76019r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67445r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;global_names&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database GLOBAL_NAMES parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61531"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61531"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61531</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61531
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61531"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61531"
+            >
+              <!-- Result description -->
+              &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61531</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append &quot;&#x2F;diag&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61531&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61531&#39; do
+  title &quot;The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.&quot;
+  desc &#39;&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.&#39;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61531&#39;
+  tag &quot;rid&quot;: &#39;SV-76021r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67447r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append \&quot;&#x2F;diag\&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \\diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.&quot;
+  tag &quot;fix&quot;: &quot;Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_diagnostic_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;diagnostic_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  diagnostic_dest &#x3D; get_diagnostic_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{diagnostic_dest}&#x2F;diag |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61533"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61533"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61533</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61533
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote administration must be disabled for the Oracle connection
+  manager.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61533"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61533"
+            >
+              <!-- Result description -->
+              Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61533</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration must be disabled for the Oracle connection
+  manager.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61533&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61533&#39; do
+  title &quot;Remote administration must be disabled for the Oracle connection
+  manager.&quot;
+  desc  &quot;Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61533&#39;
+  tag &quot;rid&quot;: &#39;SV-76023r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67449r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;cman.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;REMOTE_ADMIN &#x3D; NO&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61535"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61535"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61535</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61535
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Network client connections must be restricted to supported versions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61535"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61535"
+            >
+              <!-- Result description -->
+              Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61535</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network client connections must be restricted to supported versions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  &quot;Database Net Services Reference&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61535&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61535&#39; do
+  title &#39;Network client connections must be restricted to supported versions.&#39;
+  desc  &quot;Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61535&#39;
+  tag &quot;rid&quot;: &#39;SV-76025r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67451r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied&quot;
+  tag &quot;fix&quot;: &quot;Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  \&quot;Database Net Services Reference\&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;11&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;11&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12a&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12a&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61537"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61537"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61537</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61537
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61537"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61537"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no dba users, therefore this control is NA</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61537</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If &quot;root&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61537&#39; do
+  title &quot;DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000021&#39;
+  tag &quot;gid&quot;: &#39;V-61537&#39;
+  tag &quot;rid&quot;: &#39;SV-76027r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-004500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67453r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If \&quot;root\&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.&quot;
+
+  get_dba_users &#x3D; command(&#39;cat &#x2F;etc&#x2F;group | grep -i dba&#39;).stdout.strip.split(&quot;\n&quot;)
+  get_members_root_group &#x3D; command(&#39;groups root&#39;).stdout.strip.split(&quot;\n&quot;)
+
+  get_dba_users.each do |user|
+    describe &quot;The dba user: #{user} in &#x2F;etc&#x2F;group&quot; do
+      subject { user }
+      it { should_not cmp &#39;root&#39; }
+    end
+
+    get_members_root_group.each do |member|
+      describe &quot;The user: #{member} in the root group&quot; do
+        subject { member }
+        it { should_not cmp user.to_s }
+      end
+    end
+  end
+  if get_dba_users.empty?
+    describe &#39;There are no dba users, therefore this control is NA&#39; do
+      skip &#39;There are no dba users, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61539"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61539"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61539</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61539
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle software must be evaluated and patched against newly found
+  vulnerabilities.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61539"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61539"
+            >
+              <!-- Result description -->
+              Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61539</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61539&#39; do
+  title &quot;Oracle software must be evaluated and patched against newly found
+  vulnerabilities.&quot;
+  desc &quot;Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000205&#39;
+  tag &quot;gid&quot;: &#39;V-61539&#39;
+  tag &quot;rid&quot;: &#39;SV-76029r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-011100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67455r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  patches &#x3D; sql.query(&#39;SELECT patch_id from dba_registry_sqlpatch;&#39;).column(&#39;patch_id&#39;)
+
+  describe &#39;The oracle database installed patches&#39; do
+    subject { patches }
+    it { should_not cmp nil }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61541"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61541"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61541</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61541
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS default accounts must be assigned custom passwords.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61541"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61541"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61541</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS default accounts must be assigned custom passwords.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61541&#39; do
+  title &#39;DBMS default accounts must be assigned custom passwords.&#39;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000078&#39;
+  tag &quot;gid&quot;: &#39;V-61541&#39;
+  tag &quot;rid&quot;: &#39;SV-76031r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67457r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)&quot;
+  tag &quot;fix&quot;: &quot;Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sys_dba_users_with_defpwd &#x3D; sql.query(&#39; SELECT username FROM SYS.DBA_USERS_WITH_DEFPWD;&#39;).column(&#39;username&#39;).uniq
+
+  describe.one do
+    sys_dba_users_with_defpwd.each do |user|
+      describe &quot;The oracle system database user: #{user} with a default password&quot; do
+        subject { user }
+        it { should cmp &#39;XS$NULL&#39; }
+      end
+    end
+    
+    describe sys_dba_users_with_defpwd do
+      it { should be_empty }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61543"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61543"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61543</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000186
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61543
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000186
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61543"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61543"
+            >
+              <!-- Result description -->
+              The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61543</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61543&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61543&#39; do
+  title &quot;The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000176-DB-000068&#39;
+  tag &quot;gid&quot;: &#39;V-61543&#39;
+  tag &quot;rid&quot;: &#39;SV-76033r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67459r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000186&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61545"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61545"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61545</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61545
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61545"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61545"
+            >
+              <!-- Result description -->
+              Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61545</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61545&#39; do
+    desc &#39;Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it\&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61545&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61545&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.&quot;
+  desc &quot;Preventing the disclosure of transmitted information requires that
+  applications take measures to employ some form of cryptographic mechanism in
+  order to protect the information during transmission. This is usually achieved
+  through the use of Transport Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+      Alternative physical protection measures include Protected Distribution
+  Systems (PDS). PDS are used to transmit unencrypted classified NSI through an
+  area of lesser classification or control. Inasmuch as the classified NSI is
+  unencrypted, the PDS must provide adequate electrical, electromagnetic, and
+  physical safeguards to deter exploitation. Refer to NSTSSI No. 7003 for
+  additional details on a PDS.
+
+      Information in transmission is particularly vulnerable to attack. If the
+  DBMS does not employ cryptographic mechanisms preventing unauthorized
+  disclosure of information during transit, the information may be compromised.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000264-DB-000136&#39;
+  tag &quot;gid&quot;: &#39;V-61545&#39;
+  tag &quot;rid&quot;: &#39;SV-76035r5_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-019700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67461r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002421&#39;]
+  tag &quot;nist&quot;: [&#39;SC-8 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61553"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61553"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61553</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (10)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002186
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61553
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (10)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002186
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61553"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61553"
+            >
+              <!-- Result description -->
+              Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61553</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (10), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61553&#39; do
+  title &quot;The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.&quot;
+  desc &quot;Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000019-DB-000197&#39;
+  tag &quot;gid&quot;: &#39;V-61553&#39;
+  tag &quot;rid&quot;: &#39;SV-76043r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67469r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002186&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (10)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61555"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61555"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61555</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61555
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61555"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61555"
+            >
+              <!-- Result description -->
+              This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61555</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine if the database is utilizing any network 
+         protocols deemed nonsecure.  If the DBMS is not using any network protocols deemed nonsecure, 
+         this is not a finding.
+
+         If the database is utilizing protocols specified as nonsecure, verify the protocols are 
+         explicitly identified in the System Security Plan and that they are in support of specific 
+         operational requirements. If they are not identified in the SSP or are not supporting specific 
+         operational requirements, this is a finding.
+
+         If nonsecure network protocols are not being used but are not disabled in the DBMS&#39;s 
+         configuration, this is a finding.
+
+         After determining the site-specific operational requirements and which protocols are explicitly 
+         defined in the System Security Plan, check the $TNS_ADMIN setting for the location of the Oracle 
+         listener.ora file.  The listener.ora file is a configuration file for Oracle Net Listener that 
+         identifies the following:
+
+         A unique name for the listener, typically LISTENER
+         A protocol address that it is accepting connection requests on, and
+         A service it is listening for.
+         
+         If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed nonsecure, 
+         that is a finding.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+             (ADDRESS_LIST&#x3D;
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+         Protocol Parameters
+
+         The Oracle Listener and the Oracle Connection Manager are identified by protocol addresses. 
+         The information below contains the &quot;Protocol-Specific Parameters&quot; used by the Oracle protocol 
+         support.
+
+         Protocol-Specific Parameters
+         Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+         Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the service. Oracle 
+                                                       recommends using the service name or SID of the 
+                                                       service.
+         Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+         Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+         Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the Oracle server.
+         Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used to connect to the 
+                                                     database server.
+                                                     This is the same PIPE keyword specified on the server 
+                                                     with Named Pipes.  This name can be any name.
+
+         Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+            
+         Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+         Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+
+         Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+         Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+         Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+         Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+ 
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the value.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening port number.
+                                                        Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+                                                                (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable any network protocol listed as nonsecure in the PPSM documentation.
+
+         To disable the protocol deemed not secure, stop the listener by issuing the following command as the 
+         Oracle Software owner, typically Oracle.
+          $ lsnrctl stop
+         This will stop the listener.  Edit the LISTENER.ORA file and remove the protocols deemed not secure 
+         and restart the listener.
+
+         For example, if TCP was deemed as not secure, the listener.ora would need to be changed and the tcp 
+         entry would need to be removed.  That would only allow the listener to listen for an IPC connection.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+           (ADDRESS_LIST&#x3D;
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line and properly balance the parentheses -
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+          Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL portion of the connect 
+          string.  For example, if TCP was deemed as not secure and the listener.ora was changed to listen for an 
+          IPC connection the code below would be required:
+
+          net_service_name&#x3D;
+          (DESCRIPTION&#x3D;
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+          (CONNECT_DATA&#x3D;
+          (SERVICE_NAME&#x3D;sales.us.example.com)))</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61555&#39; do
+    desc &#39;This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.&#39;
+
+    desc &#39;check&#39;, &#39;Review DBMS settings to determine if the database is utilizing any network 
+         protocols deemed nonsecure.  If the DBMS is not using any network protocols deemed nonsecure, 
+         this is not a finding.
+
+         If the database is utilizing protocols specified as nonsecure, verify the protocols are 
+         explicitly identified in the System Security Plan and that they are in support of specific 
+         operational requirements. If they are not identified in the SSP or are not supporting specific 
+         operational requirements, this is a finding.
+
+         If nonsecure network protocols are not being used but are not disabled in the DBMS\&#39;s 
+         configuration, this is a finding.
+
+         After determining the site-specific operational requirements and which protocols are explicitly 
+         defined in the System Security Plan, check the $TNS_ADMIN setting for the location of the Oracle 
+         listener.ora file.  The listener.ora file is a configuration file for Oracle Net Listener that 
+         identifies the following:
+
+         A unique name for the listener, typically LISTENER
+         A protocol address that it is accepting connection requests on, and
+         A service it is listening for.
+         
+         If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed nonsecure, 
+         that is a finding.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+             (ADDRESS_LIST&#x3D;
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+         Protocol Parameters
+
+         The Oracle Listener and the Oracle Connection Manager are identified by protocol addresses. 
+         The information below contains the &quot;Protocol-Specific Parameters&quot; used by the Oracle protocol 
+         support.
+
+         Protocol-Specific Parameters
+         Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+         Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the service. Oracle 
+                                                       recommends using the service name or SID of the 
+                                                       service.
+         Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+         Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+         Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the Oracle server.
+         Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used to connect to the 
+                                                     database server.
+                                                     This is the same PIPE keyword specified on the server 
+                                                     with Named Pipes.  This name can be any name.
+
+         Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+            
+         Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+         Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+
+         Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+         Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+         Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+         Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+ 
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the value.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening port number.
+                                                        Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+                                                                (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)&#39;
+    desc &#39;fix&#39;, &#39;Disable any network protocol listed as nonsecure in the PPSM documentation.
+
+         To disable the protocol deemed not secure, stop the listener by issuing the following command as the 
+         Oracle Software owner, typically Oracle.
+          $ lsnrctl stop
+         This will stop the listener.  Edit the LISTENER.ORA file and remove the protocols deemed not secure 
+         and restart the listener.
+
+         For example, if TCP was deemed as not secure, the listener.ora would need to be changed and the tcp 
+         entry would need to be removed.  That would only allow the listener to listen for an IPC connection.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+           (ADDRESS_LIST&#x3D;
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line and properly balance the parentheses -
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+          Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL portion of the connect 
+          string.  For example, if TCP was deemed as not secure and the listener.ora was changed to listen for an 
+          IPC connection the code below would be required:
+
+          net_service_name&#x3D;
+          (DESCRIPTION&#x3D;
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+          (CONNECT_DATA&#x3D;
+          (SERVICE_NAME&#x3D;sales.us.example.com)))&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61555&#39; do
+  title &quot;The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.&quot;
+  desc &quot;This requirement is related to remote access, but more specifically to
+  the networking protocols allowing systems to communicate. Remote access is any
+  access to an organizational information system by a user (or an information
+  system) communicating through an external, non-organization  controlled network
+  (e.g., the Internet). Examples of remote access methods include dial-up,
+  broadband, and wireless.
+
+      Some networking protocols allowing remote access may not meet security
+  requirements to protect data and components. Bluetooth and peer-to-peer
+  networking are examples of less than secure networking protocols.
+
+      The DoD Ports, Protocols, and Services Management (PPSM) program provides
+  implementation guidance on the use of IP protocols and application and data
+  services traversing the DoD Networks in a manner supporting net-centric
+  operations.
+
+      Applications implementing or utilizing remote access network protocols need
+  to ensure the application is developed and implemented in accordance with the
+  PPSM requirements. In situations where it has been determined that specific
+  operational requirements outweigh the risks of enabling an insecure network
+  protocol, the organization may pursue a risk acceptance.
+
+      Using protocols deemed nonsecure would compromise the ability of the DBMS
+  to operate in a secure fashion. The database must be able to disable network
+  protocols deemed nonsecure.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000020-DB-000194&#39;
+  tag &quot;gid&quot;: &#39;V-61555&#39;
+  tag &quot;rid&quot;: &#39;SV-76045r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67471r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the PPSM Technical Assurance List to acquire an
+  up-to-date list of network protocols deemed nonsecure.
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  Review DBMS settings to determine if the database is utilizing any network
+  protocols deemed nonsecure.  If the DBMS is not using any network protocols
+  deemed nonsecure, this is not a finding.
+
+  If the database is utilizing protocols specified as nonsecure in the PPSM,
+  verify the protocols are explicitly identified in the System Security Plan and
+  that they are in support of specific operational requirements. If they are not
+  identified in the SSP or are not supporting specific operational requirements,
+  this is a finding.
+
+  If nonsecure network protocols are not being used but are not disabled in the
+  DBMS&#39;s configuration, this is a finding.
+
+  After determining the site-specific operational requirements and which
+  protocols are explicitly defined in the System Security Plan, check the
+  $TNS_ADMIN setting for the location of the Oracle listener.ora file.  The
+  listener.ora file is a configuration file for Oracle Net Listener that
+  identifies the following:
+
+  A unique name for the listener, typically LISTENER
+  A protocol address that it is accepting connection requests on, and
+  A service it is listening for.
+
+  If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed
+  nonsecure, that is a finding.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Protocol Parameters
+
+  The Oracle Listener and the Oracle Connection Manager are identified by
+  protocol addresses. The information below contains the \&quot;Protocol-Specific
+  Parameters\&quot; used by the Oracle protocol support.
+
+  Protocol-Specific Parameters
+
+  Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+  Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the
+  service. Oracle recommends using the service name or SID of the service.
+  Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+  Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+  Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the
+  Oracle server.
+  Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used
+  to connect to the database server.
+  This is the same PIPE keyword specified on the server with Named Pipes.  This
+  name can be any name.
+  Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+
+  Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+  Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+  Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the
+  value.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or
+  IP address of the computer.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening
+  port number.
+
+  Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+          (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)&quot;
+  tag &quot;fix&quot;: &quot;Disable any network protocol listed as nonsecure in the PPSM
+  documentation.
+
+  To disable the protocol deemed not secure, stop the listener by issuing the
+  following command as the Oracle Software owner, typically Oracle.
+            $ lsnrctl stop
+  This will stop the listener.  Edit the LISTENER.ORA file and remove the
+  protocols deemed not secure and restart the listener.
+
+  For example, if TCP was deemed as not secure, the listener.ora would need to be
+  changed and the tcp entry would need to be removed.  That would only allow the
+  listener to listen for an IPC connection.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line
+  and properly balance the parentheses -
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL
+  portion of the connect string.  For example, if TCP was deemed as not secure
+  and the listener.ora was changed to listen for an IPC connection the code below
+  would be required:
+
+  net_service_name&#x3D;
+  (DESCRIPTION&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+  (CONNECT_DATA&#x3D;
+  (SERVICE_NAME&#x3D;sales.us.example.com)))&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61557"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61557"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61557</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000015
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61557
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must employ automated mechanisms for supporting Oracle user
+  account management.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000015
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61557"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61557"
+            >
+              <!-- Result description -->
+              A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61557</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must employ automated mechanisms for supporting Oracle user
+  account management.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61557&#39; do
+  title &quot;The system must employ automated mechanisms for supporting Oracle user
+  account management.&quot;
+  desc &quot;A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000023-DB-000001&#39;
+  tag &quot;gid&quot;: &#39;V-61557&#39;
+  tag &quot;rid&quot;: &#39;SV-76047r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67473r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000015&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.&quot;
+  describe &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39; do
+    skip &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61559"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61559"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61559</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61559
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61559"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61559"
+            >
+              <!-- Result description -->
+              Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61559</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61559&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.&quot;
+  desc &quot;Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000002&#39;
+  tag &quot;gid&quot;: &#39;V-61559&#39;
+  tag &quot;rid&quot;: &#39;SV-76049r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67475r6_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61561"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61561"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61561</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61561
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61561"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61561"
+            >
+              <!-- Result description -->
+              Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61561</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+         or temporary accounts, this is not a finding.
+
+         If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access mechanism, 
+         and not by Oracle, this is not a finding.
+
+         Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+         determine if the site utilizes a mechanism whereby temporary or emergency accounts can be terminated after 
+         an organization-defined time period. If not, this is a finding.
+
+         Check the profiles to see what the password_life_time is set to in the table dba_profiles. 
+         The password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+         in the RESOURCE_NAME column.
+
+         SQL&gt;select
+         profile,
+         resource_name,
+         resource_type,
+         limit
+         from dba_profiles
+         where upper(resource_name) like &quot;PASSWORD_LIFE_TIME&quot;;
+
+         Verify that the user in question is assigned to a profile with the PASSWORD_LIFE_TIME set to 60 days.  
+         If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If using database mechanisms to satisfy this requirement, use a profile with a distinctive name 
+         (for example, TEMPORARY_USERS), so that temporary users can be easily identified.  Whenever a temporary user 
+         account is created, assign it to this profile.
+
+         Create a job to lock accounts under this profile that are more than 60 days old, where n is the 
+         organization-defined time period.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61561&#39; do
+    desc &#39;check&#39;, &#39;If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+         or temporary accounts, this is not a finding.
+
+         If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access mechanism, 
+         and not by Oracle, this is not a finding.
+
+         Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+         determine if the site utilizes a mechanism whereby temporary or emergency accounts can be terminated after 
+         an organization-defined time period. If not, this is a finding.
+
+         Check the profiles to see what the password_life_time is set to in the table dba_profiles. 
+         The password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+         in the RESOURCE_NAME column.
+
+         SQL&gt;select
+         profile,
+         resource_name,
+         resource_type,
+         limit
+         from dba_profiles
+         where upper(resource_name) like &quot;PASSWORD_LIFE_TIME&quot;;
+
+         Verify that the user in question is assigned to a profile with the PASSWORD_LIFE_TIME set to 60 days.  
+         If not, this is a finding.&#39;
+    desc &#39;fix&#39;, &#39;If using database mechanisms to satisfy this requirement, use a profile with a distinctive name 
+         (for example, TEMPORARY_USERS), so that temporary users can be easily identified.  Whenever a temporary user 
+         account is created, assign it to this profile.
+
+         Create a job to lock accounts under this profile that are more than 60 days old, where n is the 
+         organization-defined time period.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61561&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.&quot;
+  desc &quot;Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000003&#39;
+  tag &quot;gid&quot;: &#39;V-61561&#39;
+  tag &quot;rid&quot;: &#39;SV-76051r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67477r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if the site utilizes a mechanism whereby
+  temporary or emergency accounts can be terminated after an organization-defined
+  time period. If not, this is a finding.
+
+  Check the profiles to see what the password_life_time is set to in the table
+  dba_profiles. The password_life_time is a value stored in the LIMIT column, and
+  identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME column.
+
+  SQL&gt;select
+  profile,
+  resource_name,
+  resource_type,
+  limit
+  from dba_profiles
+  where upper(resource_name) like &#39;PASSWORD_LIFE_TIME&#39;;
+
+  Verify that the user in question is assigned to a profile with the
+  PASSWORD_LIFE_TIME set to the amount of time the user is expected to be using
+  the password.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If using database mechanisms to satisfy this requirement, use a
+  profile with a distinctive name (for example, TEMPORARY_USERS), so that
+  temporary users can be easily identified.  Whenever a temporary user account is
+  created, assign it to this profile.
+
+  Create a job to lock accounts under this profile that are more than n days old,
+  where n is the organization-defined time period.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  if user_profiles.empty?
+    describe &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39; do
+      skip &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39;
+    end
+  end
+
+  if !user_profiles.empty?
+    user_profiles.each do |profile|
+      unless input(&#39;emergency_profile_list&#39;).include?(profile)
+      	describe &quot;The profile #{profile} &quot; do
+	  subject { profile }
+	  it &quot;should not be in the org-defined list of profiles for emergency or temporary account management&quot; do
+	    expect(subject).should_not be_in(input(&#39;emergency_profile_list&#39;)) 
+	  end
+        end
+	next
+      end
+      password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+      describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+        subject { password_life_time }
+        it { should cmp &lt;&#x3D; input(&#39;password_life_time&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61565"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61565"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61565</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61565
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account creation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61565"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61565"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61565</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account creation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61565&#39; do
+  title &#39;The DBMS must automatically audit account creation.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000026-DB-000005&#39;
+  tag &quot;gid&quot;: &#39;V-61565&#39;
+  tag &quot;rid&quot;: &#39;SV-76055r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67481r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000018&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account creation is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account creation is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61569"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61569"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61569</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61569
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must  automatically audit account modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61569"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61569"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61569</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must  automatically audit account modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61569&#39; do
+  title &#39;The DBMS must  automatically audit account modification.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000027-DB-000186&#39;
+  tag &quot;gid&quot;: &#39;V-61569&#39;
+  tag &quot;rid&quot;: &#39;SV-76059r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67485r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001403&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account modification is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account modification is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account modification&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61571"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61571"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61571</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001404
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61571
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001404
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61571"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61571"
+            >
+              <!-- Result description -->
+              When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61571</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61571&#39; do
+  title &quot;The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000028-DB-000187&#39;
+  tag &quot;gid&quot;: &#39;V-61571&#39;
+  tag &quot;rid&quot;: &#39;SV-76061r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67487r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001404&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account disabling is not being audited. &#39;
+    FROM dual
+    WHERE (SELECT Count(*)
+    FROM (select policy_name , audit_option from audit_unified_policies
+    WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+    and policy_name in (select policy_name from audit_unified_enabled_policies
+    where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+    OR (SELECT value
+    FROM v$option
+    WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account disabling is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account disabling actions&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61573"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61573"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61573</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001405
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61573
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account termination.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001405
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61573"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61573"
+            >
+              <!-- Result description -->
+              When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61573</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account termination.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61573&#39; do
+  title &#39;The DBMS must automatically audit account termination.&#39;
+  desc  &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000029-DB-000188&#39;
+  tag &quot;gid&quot;: &#39;V-61573&#39;
+  tag &quot;rid&quot;: &#39;SV-76063r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67489r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001405&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account termination is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account termination is not being audited&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account termination&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61575"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61575"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61575</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61575
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61575"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61575"
+            >
+              <!-- Result description -->
+              Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61575</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role &quot;User roles and privileges&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61575&#39; do
+  title &quot;The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.&quot;
+  desc &quot;Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000033-DB-000084&#39;
+  tag &quot;gid&quot;: &#39;V-61575&#39;
+  tag &quot;rid&quot;: &#39;SV-76065r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67491r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000213&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role \&quot;User roles and privileges\&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61577"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61577"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61577</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61577
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61577"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61577"
+            >
+              <!-- Result description -->
+              Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61577</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61577&#39; do
+  title &quot;The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&quot;
+  desc &quot;Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000036-DB-000174&#39;
+  tag &quot;gid&quot;: &#39;V-61577&#39;
+  tag &quot;rid&quot;: &#39;SV-76067r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67493r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+    allowing users to specify and control sharing by named individuals, groups of
+    individuals, or by both, limiting propagation of access rights and including or
+    excluding access to the granularity of a single user.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61579"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61579"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61579</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61579
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS processes or services must run under custom, dedicated OS
+  accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61579"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61579"
+            >
+              <!-- Result description -->
+              Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61579</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS processes or services must run under custom, dedicated OS
+  accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61579&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61579&#39; do
+  title &quot;DBMS processes or services must run under custom, dedicated OS
+  accounts.&quot;
+  desc &quot;Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000010&#39;
+  tag &quot;gid&quot;: &#39;V-61579&#39;
+  tag &quot;rid&quot;: &#39;SV-76069r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67495r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_&quot;
+  tag &quot;fix&quot;: &quot;Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.&quot;
+
+  oracle_file_owners &#x3D; command(&quot;ls -l  $ORACLE_HOME|awk &#39;{ print $3; }&#39; | sort -u&quot;).stdout.strip.split(&quot;\n&quot;)
+
+  oracle_file_owners.each do |owner|
+    describe &#39;The file and directory inside the Oracle Home directory&#39; do
+      subject { owner }
+      it { should cmp &#39;oracle&#39; }
+    end
+  end
+  if oracle_file_owners.empty?
+    describe &#39;There are no oracle file owners, therefore this control is NA&#39; do
+      skip &#39;There are no oracle file owners, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61581"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61581"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61581</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61581
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict grants to sensitive information to authorized
+  user roles.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61581"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61581"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61581</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict grants to sensitive information to authorized
+  user roles.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61581&#39; do
+  title &quot;The DBMS must restrict grants to sensitive information to authorized
+  user roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000011&#39;
+  tag &quot;gid&quot;: &#39;V-61581&#39;
+  tag &quot;rid&quot;: &#39;SV-76071r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67497r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61583"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61583"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61583</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61583
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A single database connection configuration file must not be used to
+  configure all database clients.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61583"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61583"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61583</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A single database connection configuration file must not be used to
+  configure all database clients.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to supply database connection information to
+  only those databases authorized for the user.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61583&#39; do
+  title &quot;A single database connection configuration file must not be used to
+  configure all database clients.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000012&#39;
+  tag &quot;gid&quot;: &#39;V-61583&#39;
+  tag &quot;rid&quot;: &#39;SV-76073r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67499r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to supply database connection information to
+  only those databases authorized for the user.&quot;
+  describe &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39; do
+    skip &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61585"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61585"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61585</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61585
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must be protected from unauthorized access by developers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61585"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61585"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61585</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must be protected from unauthorized access by developers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61585&#39; do
+  title &#39;The DBMS must be protected from unauthorized access by developers.&#39;
+  desc  &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000014&#39;
+  tag &quot;gid&quot;: &#39;V-61585&#39;
+  tag &quot;rid&quot;: &#39;SV-76075r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67501r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61587"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61587"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61587</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61587
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61587"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61587"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61587</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61587&#39; do
+  title &quot;The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000015&#39;
+  tag &quot;gid&quot;: &#39;V-61587&#39;
+  tag &quot;rid&quot;: &#39;SV-76077r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67503r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61589"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61589"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61589</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61589
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61589"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61589"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADMIN1 with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: APPQOSSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CTXSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: DBA with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: PUBLIC with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: RDSADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSDG with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSKM with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDB with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDBADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61589</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61589&#39; do
+  title &quot;The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000016&#39;
+  tag &quot;gid&quot;: &#39;V-61589&#39;
+  tag &quot;rid&quot;: &#39;SV-76079r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67505r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dictionary_table_access &#x3D; sql.query(&quot;SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dictionary_table_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39;
+    end
+  else
+    users_with_dictionary_table_access.each do |user|
+      describe &quot;oracle users: #{user} with access to the dictionary table&quot; do
+        subject { user }
+        it { should be_in USERS_ALLOWED_ACCESS_TO_DICTIONARY_TABLE }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61591"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61591"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61591</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61591
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Administrative privileges must be assigned to database accounts via
+  database roles.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61591"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61591"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Database accounts with administrative privileges is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61591</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Administrative privileges must be assigned to database accounts via
+  database roles.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61591&#39; do
+  title &quot;Administrative privileges must be assigned to database accounts via
+  database roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000034&#39;
+  tag &quot;gid&quot;: &#39;V-61591&#39;
+  tag &quot;rid&quot;: &#39;SV-76081r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67507r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)&quot;
+  tag &quot;fix&quot;: &quot;Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_accounts_with_administrative_privs &#x3D; sql.query(&quot;SELECT grantee
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  );&quot;).column(&#39;grantee&#39;).uniq
+
+  describe &#39;Database accounts with administrative privileges&#39; do
+    subject { database_accounts_with_administrative_privs }
+    it { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61593"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61593"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61593</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61593
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61593"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61593"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61593</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61593&#39; do
+  title &quot;Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000017&#39;
+  tag &quot;gid&quot;: &#39;V-61593&#39;
+  tag &quot;rid&quot;: &#39;SV-76083r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67509r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  &quot;
+  tag &quot;fix&quot;: &quot;Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.&quot;
+  describe &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39; do
+    skip &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61595"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61595"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61595</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61595
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  All use of privileged accounts must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61595"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61595"
+            >
+              <!-- Result description -->
+              This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of unified auditing policies defined is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of users being audited is expected to include &quot;ALL USERS&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61595</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >All use of privileged accounts must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61595&#39; do
+  title &#39;All use of privileged accounts must be audited.&#39;
+  desc  &quot;This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61595&#39;
+  tag &quot;rid&quot;: &#39;SV-76085r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67511r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  unified_auditing_policies_defined &#x3D; sql.query(&#39;SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  describe &#39;The list of unified auditing policies defined&#39; do
+    subject { unified_auditing_policies_defined }
+    it { should_not be_empty }
+  end
+
+  users_being_audited &#x3D; sql.query(&#39;SELECT unique user_name from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;user_name&#39;)
+
+  describe &#39;The list of users being audited&#39; do
+    subject { users_being_audited }
+    it { should include &#39;ALL USERS&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61597"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61597"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61597</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61597
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61597"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61597"
+            >
+              <!-- Result description -->
+              Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61597</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61597&#39; do
+  title &quot;Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.&quot;
+  desc &quot;Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61597&#39;
+  tag &quot;rid&quot;: &#39;SV-76087r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004210&#39;
+  tag &quot;fix_id&quot;: &#39;F-67513r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.&quot;
+  describe &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39; do
+    skip &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61599"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61599"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61599</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61599
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBA role must not be assigned excessive or unauthorized
+  privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61599"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61599"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: ADMIN1 with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: RDSADMIN with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61599</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBA role must not be assigned excessive or unauthorized
+  privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role &quot;USER PRIVS&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61599&#39; do
+  title &quot;The DBA role must not be assigned excessive or unauthorized
+  privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000019&#39;
+  tag &quot;gid&quot;: &#39;V-61599&#39;
+  tag &quot;rid&quot;: &#39;SV-76089r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67515r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role \&quot;USER PRIVS\&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map&quot;
+  tag &quot;fix&quot;: &quot;Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_privs &#x3D; sql.query(&quot;SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;&quot;).column(&#39;username&#39;).uniq
+  if users_with_admin_privs.empty?
+    impact 0.0
+    describe &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_privs.each do |user|
+      describe &quot;oracle database users: #{user} with administative privileges&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_with_admin_privs&#39;)}
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61601"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61601"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61601</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61601
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61601"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61601"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61601</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61601&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61601&#39; do
+  title &quot;OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000020&#39;
+  tag &quot;gid&quot;: &#39;V-61601&#39;
+  tag &quot;rid&quot;: &#39;SV-76091r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67517r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS&quot;
+  tag &quot;fix&quot;: &quot;Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should include &#39;run_group &#x3D; nobody&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61603"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61603"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61603</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002236
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61603
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must verify account lockouts persist until reset by an
+      administrator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002236
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61603"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61603"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61603</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must verify account lockouts persist until reset by an
+      administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61603&#39; do
+      title &quot;The DBMS must verify account lockouts persist until reset by an
+      administrator.&quot;
+      desc &quot;Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+      &quot;
+      impact 0.5
+      tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+      tag &quot;gid&quot;: &#39;V-61603&#39;
+      tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+      tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+      tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+      tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+      tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+      tag &quot;false_negatives&quot;: nil
+      tag &quot;false_positives&quot;: nil
+      tag &quot;documentable&quot;: false
+      tag &quot;mitigations&quot;: nil
+      tag &quot;severity_override_guidance&quot;: false
+      tag &quot;potential_impacts&quot;: nil
+      tag &quot;third_party_tools&quot;: nil
+      tag &quot;mitigation_controls&quot;: nil
+      tag &quot;responsibility&quot;: nil
+      tag &quot;ia_controls&quot;: nil
+      tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.&quot;
+      tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+    
+      sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+    
+      query &#x3D; %{
+        SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+      }
+    
+      user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+    
+      user_profiles.each do |profile|
+        next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+        password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+    
+        describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+          subject { password_lock_time }
+          it { should cmp &#39;UNLIMITED&#39; }
+        end
+      end
+      if user_profiles.empty?
+        describe &#39;There are no user profiles, therefore this control is NA&#39; do
+          skip &#39;There are no user profiles, therefore this control is NA&#39;
+        end
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61603&#39; do
+  title &quot;The DBMS must verify account lockouts persist until reset by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed, to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+  tag &quot;gid&quot;: &#39;V-61603&#39;
+  tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+  to a user.
+
+  To see what profile is assigned to a user, enter the query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for password_lock_time - this specifies how long to lock the
+  account after the number of consecutive failed logon attempts reaches the
+  limit. If the value is not UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+  duration:
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61605"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61605"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61605</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61605
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the number of consecutive failed logon attempts to 5.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61605"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61605"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61605</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the number of consecutive failed logon attempts to 5.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&amp;USERNAME&quot;
+         This will return the profile name assigned to that user.
+
+         Now check the values assigned to the profile returned from the query above:
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE &quot;&amp;PROFILE_NAME&quot;
+
+         Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;
+
+         (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.  Note: It remains 
+         necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61605&#39; do
+    title &#39;The DBMS must limit the number of consecutive failed logon attempts to 5.&#39;
+    desc &#39;check&#39;, &#39;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&amp;USERNAME&quot;
+         This will return the profile name assigned to that user.
+
+         Now check the values assigned to the profile returned from the query above:
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE &quot;&amp;PROFILE_NAME&quot;
+
+         Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.&#39;
+    desc &#39;fix&#39;, &#39;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;
+
+         (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.  Note: It remains 
+         necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.)&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61605&#39; do
+  title &quot;The DBMS must limit the number of consecutive failed logon attempts to
+  3.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000025&#39;
+  tag &quot;gid&quot;: &#39;V-61605&#39;
+  tag &quot;rid&quot;: &#39;SV-76095r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67521r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000044&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&amp;USERNAME&#39;
+  This will return the profile name assigned to that user.
+
+  Now check the values assigned to the profile returned from the query above:
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE
+  &#39;&amp;PROFILE_NAME&#39;
+
+  Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;
+
+  (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.
+  Note: It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time.first }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61607"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61607"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61607</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61607
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61607"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61607"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61607</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&lt;username&gt;&quot;
+
+         This will return the profile name assigned to that user.
+
+         The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy 
+         the STIG requirements pertaining to the profile parameters. Oracle recommends that this profile be 
+         customized with any site-specific requirements and assigned to all users where applicable.  
+         Note: It remains necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.
+
+         Now check the values assigned to the profile returned from the query above:
+
+         column profile format a20
+         column limit format a20
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D; &quot;ORA_STIG_PROFILE&quot;;
+
+         Check the settings for failed_login_attempts - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61607&#39; do
+    desc &#39;check&#39;, &#39;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&lt;username&gt;&quot;
+
+         This will return the profile name assigned to that user.
+
+         The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy 
+         the STIG requirements pertaining to the profile parameters. Oracle recommends that this profile be 
+         customized with any site-specific requirements and assigned to all users where applicable.  
+         Note: It remains necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.
+
+         Now check the values assigned to the profile returned from the query above:
+
+         column profile format a20
+         column limit format a20
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D; &quot;ORA_STIG_PROFILE&quot;;
+
+         Check the settings for failed_login_attempts - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;(This addresses both O121-C2-005000 and O121-C2-005200.)
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61607&#39; do
+      sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+    
+      query &#x3D; %{
+        SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+      }
+    
+      user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+    
+      user_profiles.each do |profile|
+        next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+        password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+    
+        describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+          subject { password_lock_time }
+          it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+        end
+      end
+      if user_profiles.empty?
+        describe &#39;There are no user profiles, therefore this control is NA&#39; do
+          skip &#39;There are no user profiles, therefore this control is NA&#39;
+        end
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61607&#39; do
+  title &quot;The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000067-DB-000026&#39;
+  tag &quot;gid&quot;: &#39;V-61607&#39;
+  tag &quot;rid&quot;: &#39;SV-76097r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67523r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for failed_login_attempts - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61613"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61613"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61613</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61613
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61613"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61613"
+            >
+              <!-- Result description -->
+              Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61613</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61613&#39; do
+  title &quot;The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.&quot;
+  desc &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000071-DB-000047&#39;
+  tag &quot;gid&quot;: &#39;V-61613&#39;
+  tag &quot;rid&quot;: &#39;SV-76103r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67529r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61615"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61615"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61615</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61615
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must have allocated audit record storage capacity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61615"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61615"
+            >
+              <!-- Result description -->
+              Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has allocated audit record storage capacity</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61615</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must have allocated audit record storage capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61615&#39; do
+  title &#39;The DBMS must have allocated audit record storage capacity.&#39;
+  desc  &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000072-DB-000046&#39;
+  tag &quot;gid&quot;: &#39;V-61615&#39;
+  tag &quot;rid&quot;: &#39;SV-76105r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67531r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61617"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61617"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61617</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61617
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61617"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61617"
+            >
+              <!-- Result description -->
+              Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61617</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61619"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61619"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61619</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61619
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61619"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61619"
+            >
+              <!-- Result description -->
+              DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61619</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61619&#39; do
+  title &quot;A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.&quot;
+  desc &quot;DAC is based on the notion that individual users are \&quot;owners\&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000087-DB-000013&#39;
+  tag &quot;gid&quot;: &#39;V-61619&#39;
+  tag &quot;rid&quot;: &#39;SV-76109r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67535r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)&quot;
+  describe &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39; do
+    skip &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61621"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61621"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61621</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000169
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61621
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000169
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61621"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61621"
+            >
+              <!-- Result description -->
+              Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61621</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61621&#39; do
+    desc &#39;Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61621&#39; do
+  title &quot;The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system. (e.g., network interface, hard disk, modem, etc.). From an
+  application perspective, certain specific application functionalities may be
+  audited as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations define which application components shall provide auditable
+  events.
+
+      The DBMS must provide auditing for the list of events defined by the
+  organization or risk negatively impacting forensic investigations into
+  malicious behavior in the information system. Audit records can be generated
+  from various components within the information system, such as network
+  interfaces, hard disks, modems, etc. From an application perspective, certain
+  specific application functionalities may be audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000089-DB-000064&#39;
+  tag &quot;gid&quot;: &#39;V-61621&#39;
+  tag &quot;rid&quot;: &#39;SV-76111r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67537r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000169&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61623"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61623"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61623</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61623
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61623"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61623"
+            >
+              <!-- Result description -->
+              The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61623</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61623&#39; do
+  title &quot;The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.&quot;
+  desc  &quot;The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000090-DB-000065&#39;
+  tag &quot;gid&quot;: &#39;V-61623&#39;
+  tag &quot;rid&quot;: &#39;SV-76113r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67539r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000171&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39; do
+    skip &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61625"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61625"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61625</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61625
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61625"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61625"
+            >
+              <!-- Result description -->
+              Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61625</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine if auditing is being performed on the 
+    events on the list of auditable events that lie within the scope of Oracle audit capabilities:
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of 
+    information (e.g., classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system-level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - All account creations, modifications, disabling, and terminations.
+
+    If auditing is not being performed for any of these events, this is a finding.
+
+    Notes on Oracle audit capabilities follow.
+
+    Unified Audit supports named audit policies, which are defined using the CREATE AUDIT POLICY statement. 
+    A policy specifies the actions that should be audited and the objects to which it should apply. 
+    If no specific objects are included in the policy definition, it applies to all objects.
+
+    A named policy is enabled using the AUDIT POLICY statement. It can be enabled for all users, for 
+    specific users only, or for all except a specified list of users. The policy can audit successful actions, 
+    unsuccessful actions, or both.
+
+    Verifying existing audit policy: existing Unified Audit policies are listed in the view AUDIT_UNIFIED_POLICIES. 
+    The AUDIT_OPTION column contains one of the actions specified in a CREATE AUDIT POLICY statement. 
+    The AUDIT_OPTION_TYPE column contains &quot;STANDARD ACTION&quot; for a policy that applies to all objects or 
+    &quot;OBJECT ACTION&quot; for a policy that audits actions on a specific object.
+
+    select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; and 
+    AUDIT_OPTION_TYPE&#x3D;&quot;STANDARD ACTION&quot;;
+
+    To find policies that audit privilege grants on specific objects:
+
+    select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; 
+    and AUDIT_OPTION_TYPE&#x3D;&quot;OBJECT ACTION&quot;;
+
+    The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are enabled. The ENABLED_OPT 
+    and USER_NAME columns show the users for whom the policy is enabled or &quot;ALL USERS&quot;. The SUCCESS and FAILURE 
+    columns indicate if the policy is enabled for successful or unsuccessful actions, respectively.
+
+    select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from SYS.AUDIT_UNIFIED_ENABLED_POLICIES where 
+    POLICY_NAME&#x3D;&quot;POLICY1&quot;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing settings to include auditing of events on the selected list 
+    of auditable events.
+
+    1) Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security 
+    levels, or categories of information (e.g., classification levels)
+
+    To audit granting and revocation of any privilege:
+    create audit policy policy1 actions grant;
+    create audit policy policy2 actions revoke;
+
+    To audit grants of object privileges on a specific object:
+    create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+    If Oracle Label Security is enabled, this will audit all OLS administrative actions:
+    create audit policy policy4 actions component &#x3D; OLS all;
+
+    2) Successful and unsuccessful logon attempts, privileged activities or other system-level access
+ 
+    To audit all user logon attempts:
+    create audit policy policy5 actions logon;
+
+    To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+    audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+    3) Starting and ending time for user access to the system, concurrent logons from different 
+    workstations
+
+    This policy will audit all logon and logoff events. An individual session is identified in the 
+    UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID, SESSIONID) and the start and end time will be 
+    indicated by the EVENT_TIMESTAMP of the logon and logoff events:
+
+    create audit policy policy6 actions logon, logoff;
+
+    4) Successful and unsuccessful accesses to objects
+
+    To audit all accesses to a specific table:
+    create audit policy policy7 actions select, insert, delete, alter on &lt;schema&gt;.&lt;object&gt;; 
+
+    Different actions are defined for other object types. To audit all supported actions on a specific object:
+    create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+    5) All program initiations
+
+    To audit execution of any PL&#x2F;SQL program unit:
+    create audit policy policy9 actions EXECUTE;
+
+    To audit execution of a specific function, procedure, or package:
+    create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+    6) All direct access to the information system
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    7) All account creations, modifications, disabling, and terminations
+
+    To audit all user administration actions:
+    create audit policy policy11 actions create user, alter user, drop user, change password;
+
+    8) All kernel module loads, unloads, and restarts
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    9) All database parameter changes
+
+    To audit any database parameter changes, dynamic or static:
+    create audit policy policy12 actions alter database, alter system, create spfile;
+
+    Applying the Policy
+
+    The following command will enable the policy in all database sessions and audit both 
+    successful and unsuccessful actions: audit policy policy1; 
+
+    To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+    audit policy policy1 whenever not successful;
+
+    Either command above can be limited to only database sessions started by a specific user as 
+    follows:
+    audit policy policy1 by &lt;user&gt;;
+    audit policy policy1 by &lt;user&gt; whenever not successful;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61625&#39; do
+    title &#39;The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.&#39;
+
+    desc &#39;Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.&#39;
+    
+    desc &#39;check&#39;, &#39;Check DBMS settings to determine if auditing is being performed on the 
+    events on the list of auditable events that lie within the scope of Oracle audit capabilities:
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of 
+    information (e.g., classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system-level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - All account creations, modifications, disabling, and terminations.
+
+    If auditing is not being performed for any of these events, this is a finding.
+
+    Notes on Oracle audit capabilities follow.
+
+    Unified Audit supports named audit policies, which are defined using the CREATE AUDIT POLICY statement. 
+    A policy specifies the actions that should be audited and the objects to which it should apply. 
+    If no specific objects are included in the policy definition, it applies to all objects.
+
+    A named policy is enabled using the AUDIT POLICY statement. It can be enabled for all users, for 
+    specific users only, or for all except a specified list of users. The policy can audit successful actions, 
+    unsuccessful actions, or both.
+
+    Verifying existing audit policy: existing Unified Audit policies are listed in the view AUDIT_UNIFIED_POLICIES. 
+    The AUDIT_OPTION column contains one of the actions specified in a CREATE AUDIT POLICY statement. 
+    The AUDIT_OPTION_TYPE column contains &quot;STANDARD ACTION&quot; for a policy that applies to all objects or 
+    &quot;OBJECT ACTION&quot; for a policy that audits actions on a specific object.
+
+    select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; and 
+    AUDIT_OPTION_TYPE&#x3D;&quot;STANDARD ACTION&quot;;
+
+    To find policies that audit privilege grants on specific objects:
+
+    select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; 
+    and AUDIT_OPTION_TYPE&#x3D;&quot;OBJECT ACTION&quot;;
+
+    The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are enabled. The ENABLED_OPT 
+    and USER_NAME columns show the users for whom the policy is enabled or &quot;ALL USERS&quot;. The SUCCESS and FAILURE 
+    columns indicate if the policy is enabled for successful or unsuccessful actions, respectively.
+
+    select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from SYS.AUDIT_UNIFIED_ENABLED_POLICIES where 
+    POLICY_NAME&#x3D;&quot;POLICY1&quot;;&#39;
+
+    desc &#39;fix&#39;, &#39;Configure the DBMS\&#39;s auditing settings to include auditing of events on the selected list 
+    of auditable events.
+
+    1) Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security 
+    levels, or categories of information (e.g., classification levels)
+
+    To audit granting and revocation of any privilege:
+    create audit policy policy1 actions grant;
+    create audit policy policy2 actions revoke;
+
+    To audit grants of object privileges on a specific object:
+    create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+    If Oracle Label Security is enabled, this will audit all OLS administrative actions:
+    create audit policy policy4 actions component &#x3D; OLS all;
+
+    2) Successful and unsuccessful logon attempts, privileged activities or other system-level access
+ 
+    To audit all user logon attempts:
+    create audit policy policy5 actions logon;
+
+    To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+    audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+    3) Starting and ending time for user access to the system, concurrent logons from different 
+    workstations
+
+    This policy will audit all logon and logoff events. An individual session is identified in the 
+    UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID, SESSIONID) and the start and end time will be 
+    indicated by the EVENT_TIMESTAMP of the logon and logoff events:
+
+    create audit policy policy6 actions logon, logoff;
+
+    4) Successful and unsuccessful accesses to objects
+
+    To audit all accesses to a specific table:
+    create audit policy policy7 actions select, insert, delete, alter on &lt;schema&gt;.&lt;object&gt;; 
+
+    Different actions are defined for other object types. To audit all supported actions on a specific object:
+    create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+    5) All program initiations
+
+    To audit execution of any PL&#x2F;SQL program unit:
+    create audit policy policy9 actions EXECUTE;
+
+    To audit execution of a specific function, procedure, or package:
+    create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+    6) All direct access to the information system
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    7) All account creations, modifications, disabling, and terminations
+
+    To audit all user administration actions:
+    create audit policy policy11 actions create user, alter user, drop user, change password;
+
+    8) All kernel module loads, unloads, and restarts
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    9) All database parameter changes
+
+    To audit any database parameter changes, dynamic or static:
+    create audit policy policy12 actions alter database, alter system, create spfile;
+
+    Applying the Policy
+
+    The following command will enable the policy in all database sessions and audit both 
+    successful and unsuccessful actions: audit policy policy1; 
+
+    To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+    audit policy policy1 whenever not successful;
+
+    Either command above can be limited to only database sessions started by a specific user as 
+    follows:
+    audit policy policy1 by &lt;user&gt;;
+    audit policy policy1 by &lt;user&gt; whenever not successful;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61625&#39; do
+  title &quot;The DBMS must generate audit records for the DoD-selected list of
+  auditable events, to the extent such information is available.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system, such as network interfaces, hard disks, modems, etc. From
+  an application perspective, certain specific application functionalities may be
+  audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000091-DB-000066&#39;
+  tag &quot;gid&quot;: &#39;V-61625&#39;
+  tag &quot;rid&quot;: &#39;SV-76115r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67541r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000172&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if auditing is being performed
+  on the events on the DoD-selected list of auditable events that lie within the
+  scope of Oracle audit capabilities:
+  - Successful and unsuccessful attempts to access, modify, or delete privileges,
+  security objects, security levels, or categories of information (e.g.,
+  classification levels).
+  - Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+  - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+  - Successful and unsuccessful accesses to objects.
+  - All program initiations.
+  - All account creations, modifications, disabling, and terminations.
+
+  If auditing is not being performed for any of these events, this is a finding.
+
+  Notes on Oracle audit capabilities follow.
+
+  Unified Audit supports named audit policies, which are defined using the CREATE
+  AUDIT POLICY statement. A policy specifies the actions that should be audited
+  and the objects to which it should apply. If no specific objects are included
+  in the policy definition, it applies to all objects.
+
+  A named policy is enabled using the AUDIT POLICY statement. It can be enabled
+  for all users, for specific users only, or for all except a specified list of
+  users. The policy can audit successful actions, unsuccessful actions, or both.
+
+  Verifying existing audit policy:  existing Unified Audit policies are listed in
+  the view AUDIT_UNIFIED_POLICIES. The AUDIT_OPTION column contains one of the
+  actions specified in a CREATE AUDIT POLICY statement. The AUDIT_OPTION_TYPE
+  column contains &#39;STANDARD ACTION&#39; for a policy that applies to all objects or
+  &#39;OBJECT ACTION&#39; for a policy that audits actions on a specific object.
+
+  select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&#39;GRANT&#39;
+  and AUDIT_OPTION_TYPE&#x3D;&#39;STANDARD ACTION&#39;;
+
+  To find policies that audit privilege grants on specific objects:
+
+  select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;
+
+  The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are
+  enabled. The ENABLED_OPT and USER_NAME columns show the users for whom the
+  policy is enabled or &#39;ALL USERS&#39;. The SUCCESS and FAILURE columns indicate if
+  the policy is enabled for successful or unsuccessful actions, respectively.
+
+  select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from
+  SYS.AUDIT_UNIFIED_ENABLED_POLICIES where POLICY_NAME&#x3D;&#39;POLICY1&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing settings to include auditing of
+  events on the DoD-selected list of auditable events.
+
+  1) Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g., classification levels)
+
+  To audit granting and revocation of any privilege:
+  create audit policy policy1 actions grant;
+  create audit policy policy2 actions revoke;
+
+  To audit grants of object privileges on a specific object:
+  create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+  If Oracle Label Security is enabled, this will audit all OLS administrative
+  actions:
+  create audit policy policy4 actions component &#x3D; OLS all;
+
+  2) Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+
+  To audit all user logon attempts:
+  create audit policy policy5 actions logon;
+
+  To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+  audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+  3) Starting and ending time for user access to the system, concurrent logons
+  from different workstations
+
+  This policy will audit all logon and logoff events. An individual session is
+  identified in the UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID,
+  SESSIONID) and the start and end time will be indicated by the EVENT_TIMESTAMP
+  of the logon and logoff events:
+  create audit policy policy6 actions logon, logoff;
+
+  4) Successful and unsuccessful accesses to objects
+
+  To audit all accesses to a specific table:
+  create audit policy policy7 actions select, insert, delete, alter on
+  &lt;schema&gt;.&lt;object&gt;;
+
+  Different actions are defined for other object types. To audit all supported
+  actions on a specific object:
+  create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+  5) All program initiations
+
+  To audit execution of any PL&#x2F;SQL program unit:
+  create audit policy policy9 actions EXECUTE;
+
+  To audit execution of a specific function, procedure, or package:
+  create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+  6) All direct access to the information system
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  7) All account creations, modifications, disabling, and terminations
+
+  To audit all user administration actions:
+  create audit policy policy11 actions create user, alter user, drop user, change
+  password;
+
+  8) All kernel module loads, unloads, and restarts
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  9) All database parameter changes
+
+  To audit any database parameter changes, dynamic or static:
+  create audit policy policy12 actions alter database, alter system, create
+  spfile;
+
+  Applying the Policy
+
+  The following command will enable the policy in all database sessions and audit
+  both successful and unsuccessful actions:
+  audit policy policy1;
+
+  To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+  audit policy policy1 whenever not successful;
+
+  Either command above can be limited to only database sessions started by a
+  specific user as follows:
+  audit policy policy1 by &lt;user&gt;;
+  audit policy policy1 by &lt;user&gt; whenever not successful;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_policies_auditing_grant_privileges &#x3D; sql.query(&quot;select DISTINCT POLICY_NAME from AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;&quot;).column(&#39;policy_name&#39;)
+  unified_audit_policies_enabled &#x3D; sql.query(&#39;select POLICY_NAME from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The audit policies that audit privilege grants on specific objects&#39; do
+      subject { audit_policies_auditing_grant_privileges }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The list of unified audit policies enabled&#39; do
+      subject { unified_audit_policies_enabled }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61627"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61627"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61627</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61627
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61627"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61627"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61627</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61627&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000095-DB-000039&#39;
+  tag &quot;gid&quot;: &#39;V-61627&#39;
+  tag &quot;rid&quot;: &#39;SV-76117r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67543r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000130&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61631"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61631"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61631</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000131
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61631
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000131
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61631"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61631"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61631</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61631&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000096-DB-000040&#39;
+  tag &quot;gid&quot;: &#39;V-61631&#39;
+  tag &quot;rid&quot;: &#39;SV-76121r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67881r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000131&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61633"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61633"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61633</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000132
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61633
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000132
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61633"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61633"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61633</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61633&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000097-DB-000041&#39;
+  tag &quot;gid&quot;: &#39;V-61633&#39;
+  tag &quot;rid&quot;: &#39;SV-76123r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67545r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000132&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61635"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61635"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61635</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61635
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61635"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61635"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61635</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61635&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000098-DB-000042&#39;
+  tag &quot;gid&quot;: &#39;V-61635&#39;
+  tag &quot;rid&quot;: &#39;SV-76125r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67547r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000133&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61637"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61637"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61637</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000134
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61637
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000134
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61637"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61637"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61637</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61637&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000099-DB-000043&#39;
+  tag &quot;gid&quot;: &#39;V-61637&#39;
+  tag &quot;rid&quot;: &#39;SV-76127r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67549r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000134&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61639"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61639"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61639</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001487
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61639
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001487
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61639"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61639"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61639</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61639&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.&quot;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000100-DB-000201&#39;
+  tag &quot;gid&quot;: &#39;V-61639&#39;
+  tag &quot;rid&quot;: &#39;SV-76129r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67551r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001487&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61641"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61641"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61641</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61641
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61641"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61641"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61641</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &quot;OS&quot;, &quot;DB&quot;, &quot;DB,EXTENDED&quot;, &quot;XML&quot; or
+  &quot;XML,EXTENDED&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61641&#39; do
+  title &quot;The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000101-DB-000044&#39;
+  tag &quot;gid&quot;: &#39;V-61641&#39;
+  tag &quot;rid&quot;: &#39;SV-76131r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67553r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000135&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be \&quot;OS\&quot;, \&quot;DB\&quot;, \&quot;DB,EXTENDED\&quot;, \&quot;XML\&quot; or
+  \&quot;XML,EXTENDED\&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+  fga_audit_events &#x3D; sql.query(&quot; SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;&quot;).column(&#39;TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The oracle database fine grained  auditing events captured&#39; do
+      subject { fga_audit_events }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61643"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61643"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61643</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61643
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61643"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61643"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61643</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61643&#39; do
+  title &quot;The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000103-DB-000050&#39;
+  tag &quot;gid&quot;: &#39;V-61643&#39;
+  tag &quot;rid&quot;: &#39;SV-76133r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67555r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001855&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1&quot;
+
+  describe &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61645"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61645"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61645</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61645
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide a real-time alert when organization-defined
+  audit failure events occur.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61645"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61645"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61645</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide a real-time alert when organization-defined
+  audit failure events occur.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61645&#39; do
+  title &quot;The system must provide a real-time alert when organization-defined
+  audit failure events occur.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000104-DB-000051&#39;
+  tag &quot;gid&quot;: &#39;V-61645&#39;
+  tag &quot;rid&quot;: &#39;SV-76135r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67559r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001858&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)&quot;
+  describe &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39; do
+    skip &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61647"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61647"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61647</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000139
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61647
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must alert designated organizational officials in the event
+  of an audit processing failure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000139
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61647"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61647"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61647</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must alert designated organizational officials in the event
+  of an audit processing failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61647&#39; do
+  title &quot;The system must alert designated organizational officials in the event
+  of an audit processing failure.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000108-DB-000048&#39;
+  tag &quot;gid&quot;: &#39;V-61647&#39;
+  tag &quot;rid&quot;: &#39;SV-76137r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67561r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000139&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.&quot;
+  describe &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39; do
+    skip &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61649"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61649"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61649</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61649
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61649"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61649"
+            >
+              <!-- Result description -->
+              Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61649</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61649&#39; do
+  title &quot;The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.&quot;
+  desc &quot;Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000055&#39;
+  tag &quot;gid&quot;: &#39;V-61649&#39;
+  tag &quot;rid&quot;: &#39;SV-76139r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67563r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.&quot;
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61651"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61651"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61651</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61651
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Attempts to bypass access controls must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61651"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61651"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61651</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Attempts to bypass access controls must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col &quot;tmp tba&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace &quot;TMP TBS&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61651&#39; do
+  title &#39;Attempts to bypass access controls must be audited.&#39;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000056&#39;
+  tag &quot;gid&quot;: &#39;V-61651&#39;
+  tag &quot;rid&quot;: &#39;SV-76141r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67565r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col \&quot;tmp tba\&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace \&quot;TMP TBS\&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER&quot;
+  tag &quot;fix&quot;: &quot;Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61653"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61653"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61653</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000162
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61653
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from any type of
+  unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000162
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61653"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61653"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61653</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from any type of
+  unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61653&#39; do
+  title &quot;The system must protect audit information from any type of
+  unauthorized access.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000118-DB-000059&#39;
+  tag &quot;gid&quot;: &#39;V-61653&#39;
+  tag &quot;rid&quot;: &#39;SV-76143r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67567r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000162&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61655"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61655"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61655</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000163
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61655
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from unauthorized
+  modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000163
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61655"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61655"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61655</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from unauthorized
+  modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61655&#39; do
+  title &quot;The system must protect audit information from unauthorized
+  modification.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000119-DB-000060&#39;
+  tag &quot;gid&quot;: &#39;V-61655&#39;
+  tag &quot;rid&quot;: &#39;SV-76145r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67569r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000163&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61657"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61657"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61657</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000164
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61657
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from unauthorized deletion.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000164
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61657"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61657"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61657</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from unauthorized deletion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61657&#39; do
+  title &#39;The system must protect audit information from unauthorized deletion.&#39;
+  desc  &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000120-DB-000061&#39;
+  tag &quot;gid&quot;: &#39;V-61657&#39;
+  tag &quot;rid&quot;: &#39;SV-76147r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67571r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000164&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61659"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61659"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61659</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001493
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61659
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001493
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61659"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61659"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61659</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61659&#39; do
+  title &#39;The system must protect audit tools from unauthorized access.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000121-DB-000202&#39;
+  tag &quot;gid&quot;: &#39;V-61659&#39;
+  tag &quot;rid&quot;: &#39;SV-76149r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67573r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001493&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61661"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61661"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61661</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61661
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61661"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61661"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61661</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61661&#39; do
+  title &#39;The system must protect audit tools from unauthorized modification.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000122-DB-000203&#39;
+  tag &quot;gid&quot;: &#39;V-61661&#39;
+  tag &quot;rid&quot;: &#39;SV-76151r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67575r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001494&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61663"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61663"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61663</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61663
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized deletion.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61663"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61663"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61663</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized deletion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61663&#39; do
+  title &#39;The system must protect audit tools from unauthorized deletion.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000123-DB-000204&#39;
+  tag &quot;gid&quot;: &#39;V-61663&#39;
+  tag &quot;rid&quot;: &#39;SV-76153r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67577r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001495&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61665"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61665"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61665</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001348
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61665
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001348
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61665"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61665"
+            >
+              <!-- Result description -->
+              Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61665</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61665&#39; do
+  title &quot;The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.&quot;
+  desc &quot;Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000125-DB-000170&#39;
+  tag &quot;gid&quot;: &#39;V-61665&#39;
+  tag &quot;rid&quot;: &#39;SV-76155r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67579r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001348&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61667"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61667"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61667</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001350
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61667
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001350
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61667"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61667"
+            >
+              <!-- Result description -->
+              Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61667</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY &quot;password&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61667&#39; do
+  title &quot;The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000126-DB-000171&#39;
+  tag &quot;gid&quot;: &#39;V-61667&#39;
+  tag &quot;rid&quot;: &#39;SV-76157r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67581r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001350&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY \&quot;password\&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE&quot;
+  describe &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61669"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61669"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61669</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001351
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61669
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001351
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61669"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61669"
+            >
+              <!-- Result description -->
+              Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61669</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61669&#39; do
+  title &quot;The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000127-DB-000172&#39;
+  tag &quot;gid&quot;: &#39;V-61669&#39;
+  tag &quot;rid&quot;: &#39;SV-76159r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67583r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-001351&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61671"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61671"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61671</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000345
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61671
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000345
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61671"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61671"
+            >
+              <!-- Result description -->
+              When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61671</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61671&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61671&#39; do
+  title &quot;The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.&quot;
+  desc &quot;When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000128-DB-000086&#39;
+  tag &quot;gid&quot;: &#39;V-61671&#39;
+  tag &quot;rid&quot;: &#39;SV-76161r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67585r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000345&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61673"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61673"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61673</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61673
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database objects must be owned by accounts authorized for ownership.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61673"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61673"
+            >
+              <!-- Result description -->
+              Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61673</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database objects must be owned by accounts authorized for ownership.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61673&#39; do
+  title &#39;Database objects must be owned by accounts authorized for ownership.&#39;
+  desc  &quot;Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000200&#39;
+  tag &quot;gid&quot;: &#39;V-61673&#39;
+  tag &quot;rid&quot;: &#39;SV-76163r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67587r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;&quot;
+  tag &quot;fix&quot;: &quot;Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_object_owners &#x3D; sql.query(&#39;select DISTINCT owner from dba_objects;&#39;).column(&#39;owner&#39;).uniq
+  if dba_object_owners .empty?
+    impact 0.0
+    describe &#39;There are no oracle dba object owners, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle dba object owners, control N&#x2F;A&#39;
+    end
+  else
+    dba_object_owners .each do |owner|
+      describe &quot;oracle datbase object owner: #{owner}&quot; do
+        subject { owner }
+        it { should be_in input(&#39;allowed_dbaobject_owners&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61675"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61675"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61675</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61675
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce requirements for remote connections to the
+  information system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61675"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61675"
+            >
+              <!-- Result description -->
+              Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61675</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce requirements for remote connections to the
+  information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review organization&#39;s access control policies and procedures addressing remote 
+    access to the information system.
+
+    If remote connections are not allowed by the organization, this is NA. (Note that &quot;remote&quot; means 
+    &quot;from outside the CMS network&quot; and that connections via approved Virtual Private Networks (VPNs) 
+    are considered to be inside the CMS network.)
+
+    Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify access controls and 
+    auditing settings exist and they enforce the requirements for remote access defined by the organization.
+
+    If access controls and auditing do not exist or do not fully enforce the requirements defined in the 
+    organization&#39;s policies and procedures, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61675&#39; do
+    desc &#39;check&#39;, &#39;Review organization\&#39;s access control policies and procedures addressing remote 
+    access to the information system.
+
+    If remote connections are not allowed by the organization, this is NA. (Note that &quot;remote&quot; means 
+    &quot;from outside the CMS network&quot; and that connections via approved Virtual Private Networks (VPNs) 
+    are considered to be inside the CMS network.)
+
+    Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify access controls and 
+    auditing settings exist and they enforce the requirements for remote access defined by the organization.
+
+    If access controls and auditing do not exist or do not fully enforce the requirements defined in the 
+    organization\&#39;s policies and procedures, this is a finding.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61675&#39; do
+  title &quot;The DBMS must enforce requirements for remote connections to the
+  information system.&quot;
+  desc &quot;Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000140-DB-000033&#39;
+  tag &quot;gid&quot;: &#39;V-61675&#39;
+  tag &quot;rid&quot;: &#39;SV-76165r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67589r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review organization&#39;s access control policies and procedures
+  addressing remote access to the information system.
+
+  If remote connections are not allowed by the organization, this is NA. (Note
+  that \&quot;remote\&quot; means \&quot;from outside the DoD Information Network (DoDIN)\&quot; and
+  that connections via approved Virtual Private Networks (VPNs) are considered to
+  be inside the DoDIN.)
+
+  Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify
+  access controls and auditing settings exist and they enforce the requirements
+  for remote access defined by the organization.
+
+  If access controls and auditing do not exist or do not fully enforce the
+  requirements defined in the organization&#39;s policies and procedures, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61677"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61677"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61677</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61677
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Default demonstration and sample databases, database objects, and
+  applications must be removed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61677"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61677"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle default sample schema user accounts is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61677</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Default demonstration and sample databases, database objects, and
+  applications must be removed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61677&#39; do
+  title &quot;Default demonstration and sample databases, database objects, and
+  applications must be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000090&#39;
+  tag &quot;gid&quot;: &#39;V-61677&#39;
+  tag &quot;rid&quot;: &#39;SV-76167r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67591r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sample_schema_user_accounts &#x3D; sql.query(&quot;select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);&quot;).column(&#39;username&#39;)
+
+  describe &#39;The list of oracle default sample schema user accounts&#39; do
+    subject { sample_schema_user_accounts }
+    it { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61679"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61679"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61679</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61679
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unused database components, DBMS software, and database objects must
+  be removed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61679"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61679"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components: Oracle Text is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61679</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unused database components, DBMS software, and database objects must
+  be removed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61679&#39; do
+  title &quot;Unused database components, DBMS software, and database objects must
+  be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000091&#39;
+  tag &quot;gid&quot;: &#39;V-61679&#39;
+  tag &quot;rid&quot;: &#39;SV-76169r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67593r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault&quot;
+  tag &quot;fix&quot;: &quot;If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components &#x3D; sql.query(&quot;SELECT comp_id, comp_name, version, status from dba_registry where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);&quot;).column(&#39;comp_name&#39;).uniq
+  if list_of_installed_components.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components installed, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components installed, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components.each do |component|
+      describe &quot;The installed oracle database components: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61681"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61681"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61681</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61681
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61681"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61681"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: OLAP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61681</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61681&#39; do
+  title &quot;Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000092&#39;
+  tag &quot;gid&quot;: &#39;V-61681&#39;
+  tag &quot;rid&quot;: &#39;SV-76171r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67595r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components_integrated_into_dbms &#x3D; sql.query(&quot;SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );&quot;).column(&#39;parameter&#39;).uniq
+  if list_of_installed_components_integrated_into_dbms.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components integrated into the DBMS, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components integrated into the DBMS, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components_integrated_into_dbms.each do |component|
+      describe &quot;The installed oracle database components integrated into the DBMS: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components_integrated_into_dbms&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61683"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61683"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61683</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61683
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of external executables must be authorized.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61683"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61683"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61683</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of external executables must be authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61683&#39; do
+  title &#39;Use of external executables must be authorized.&#39;
+  desc  &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61683&#39;
+  tag &quot;rid&quot;: &#39;SV-76173r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67597r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;&quot;
+  tag &quot;fix&quot;: &quot;Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;&quot;).column(&#39;owner&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61685"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61685"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61685</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61685
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to external executables must be disabled or restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61685"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61685"
+            >
+              <!-- Result description -->
+              The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61685</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to external executables must be disabled or restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference &quot;extproc&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference &quot;extproc&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to &quot;extproc&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61685&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61685&#39; do
+  title &#39;Access to external executables must be disabled or restricted.&#39;
+  desc  &quot;The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61685&#39;
+  tag &quot;rid&quot;: &#39;SV-76175r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011810&#39;
+  tag &quot;fix_id&quot;: &#39;F-67599r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference \&quot;extproc\&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference \&quot;extproc\&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to \&quot;extproc\&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;\&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages\&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.&quot;
+  tag &quot;fix&quot;: &quot;If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should_not include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should_not include &#39;run_group &#x3D; nobody&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;hs&#x2F;admin&#x2F;extproc.ora&quot; do
+    it { should exist }
+    its(&#39;content&#39;) { should match &#x2F;^EXTPROC_DLLS&#x3D;ONLY:\s*\w*&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61687"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61687"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61687</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61687
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61687"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61687"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61687</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings for functions, ports, protocols, and services that are not 
+    approved.
+
+    If any are found, this is a finding.
+
+    - - - - -
+    In the Oracle database, the communications with the database and incoming requests are performed by 
+    the Oracle Listener.  The Oracle Listener listens on a specific port or ports for connections to a 
+    specific database.  The Oracle Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin 
+    directory.  To check the ports and protocols in use, go to that directory and review the SQLNET.ora, 
+    LISTENER.ora, and the TNSNAMES.ora. If protocols or ports are in use that are not authorized, this 
+    is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61687&#39; do
+    desc &#39;check&#39;, &#39;Review the DBMS settings for functions, ports, protocols, and services that are not 
+    approved.
+
+    If any are found, this is a finding.
+
+    - - - - -
+    In the Oracle database, the communications with the database and incoming requests are performed by 
+    the Oracle Listener.  The Oracle Listener listens on a specific port or ports for connections to a 
+    specific database.  The Oracle Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin 
+    directory.  To check the ports and protocols in use, go to that directory and review the SQLNET.ora, 
+    LISTENER.ora, and the TNSNAMES.ora. If protocols or ports are in use that are not authorized, this 
+    is a finding.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61687&#39; do
+  title &quot;The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000142-DB-000094&#39;
+  tag &quot;gid&quot;: &#39;V-61687&#39;
+  tag &quot;rid&quot;: &#39;SV-76177r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67601r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000382&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings for functions, ports, protocols, and
+  services that are not approved.
+
+  If any are found, this is a finding.
+
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  - - - - -
+  In the Oracle database, the communications with the database and incoming
+  requests are performed by the Oracle Listener.  The Oracle Listener listens on
+  a specific port or ports for connections to a specific database.  The Oracle
+  Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.  To check the ports and protocols in use, go to  that directory and
+  review the SQLNET.ora, LISTENER.ora, and the TNSNAMES.ora.  If protocols or
+  ports are in use that are not authorized, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61689"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61689"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61689</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-10 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000553
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61689
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-10 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000553
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61689"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61689"
+            >
+              <!-- Result description -->
+              Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61689</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-10 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61689&#39; do
+  title &quot;Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.&quot;
+  desc &quot;Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000144-DB-000101&#39;
+  tag &quot;gid&quot;: &#39;V-61689&#39;
+  tag &quot;rid&quot;: &#39;SV-76179r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67603r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000553&#39;]
+  tag &quot;nist&quot;: [&#39;CP-10 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.&quot;
+  tag &quot;fix&quot;: &quot;Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.&quot;
+  describe &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39; do
+    skip &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61693"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61693"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61693</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61693
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle must back up user-level information per a defined frequency.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61693"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61693"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Oracle backs up user-level information per a defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61693</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle must back up user-level information per a defined frequency.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61693&#39; do
+    desc &#39;Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61693&#39; do
+  title &#39;Oracle must back up user-level information per a defined frequency.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Databases that do not backup information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000095&#39;
+  tag &quot;gid&quot;: &#39;V-61693&#39;
+  tag &quot;rid&quot;: &#39;SV-76183r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67609r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)&quot;
+  tag &quot;fix&quot;: &quot;Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.&quot;
+  describe &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39; do
+    skip &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61695"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61695"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61695</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61695
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database backup procedures must be defined, documented, and
+  implemented.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61695"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61695"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61695</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database backup procedures must be defined, documented, and
+  implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file &quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement database backup procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61695&#39; do
+    desc &#39;Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61695&#39; do
+  title &quot;Database backup procedures must be defined, documented, and
+  implemented.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Database backups provide the required means to restore databases after
+  compromise or loss. Backups help reduce the vulnerability to unauthorized
+  access or hardware loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000096&#39;
+  tag &quot;gid&quot;: &#39;V-61695&#39;
+  tag &quot;rid&quot;: &#39;SV-76185r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67611r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file \&quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1\&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3&quot;
+  tag &quot;fix&quot;: &#39;Develop, document, and implement database backup procedures.&#39;
+  describe &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39; do
+    skip &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61697"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61697"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61697</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61697
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61697"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61697"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61697</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61697&#39; do
+    desc &#39;Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61697&#39; do
+  title &quot;Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency.  This includes data stored on file
+  systems, within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Problems with backup procedures or backup media may not be discovered until
+  after a recovery is needed. Testing and verification of procedures provides the
+  opportunity to discover oversights, conflicts, or other issues in the backup
+  procedures or use of media designed to be used.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000097&#39;
+  tag &quot;gid&quot;: &#39;V-61697&#39;
+  tag &quot;rid&quot;: &#39;SV-76187r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67613r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.&quot;
+  describe &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39; do
+    skip &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61699"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61699"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61699</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61699
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS backup and restoration files must be protected from unauthorized
+  access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61699"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61699"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61699</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS backup and restoration files must be protected from unauthorized
+  access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61699&#39; do
+    desc &#39;Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS\&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61699&#39; do
+  title &quot;DBMS backup and restoration files must be protected from unauthorized
+  access.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Lost or compromised DBMS backup and restoration files may lead to not only
+  the loss of data, but also the unauthorized access to sensitive data. Backup
+  files need the same protections against unauthorized access when stored on
+  backup media as when online and actively in use by the database system. In
+  addition, the backup media needs to be protected against physical loss. Most
+  DBMS&#39;s maintain online copies of critical control files to provide transparent
+  or easy recovery from hard disk loss or other interruptions to database
+  operation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000098&#39;
+  tag &quot;gid&quot;: &#39;V-61699&#39;
+  tag &quot;rid&quot;: &#39;SV-76189r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67615r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.&quot;
+  tag &quot;fix&quot;: &quot;Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.&quot;
+  describe &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39; do
+    skip &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61701"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61701"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61701</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61701
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61701"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61701"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61701</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61701&#39; do
+  title &quot;DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000099&#39;
+  tag &quot;gid&quot;: &#39;V-61701&#39;
+  tag &quot;rid&quot;: &#39;SV-76191r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67617r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.&quot;
+  describe &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39; do
+    skip &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61703"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61703"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61703</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61703
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for network access to
+  privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61703"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61703"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61703</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for network access to
+  privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access 
+    mechanism settings to determine whether users logging on to privileged accounts via a network are 
+    required to use multifactor authentication.
+
+    If users logging on to privileged accounts via a network are not required to use multifactor 
+    authentication, this is a finding.
+
+    Use authentication to prove the identities of users who are attempting to log on to the database. 
+    Authenticating user identity is imperative in distributed environments, without which there can be 
+    little confidence in network security. Passwords are the most common means of authentication. Oracle 
+    Database enables strong authentication with Oracle authentication adapters that support various 
+    third-party authentication services, including TLS with digital certificates, as well as Smart Cards (PIV).
+
+    If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the following, TLS is enabled. 
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the 
+    supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or 
+    differently located sqlnet.ora files.)
+
+    SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+    SSL_VERSION &#x3D; 1.2 or 1.1
+    SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+    WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+    (METHOD &#x3D; FILE)
+    (METHOD_DATA &#x3D;
+    (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+    )
+    )
+
+    SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+    ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+    Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for network users logging on to privileged accounts. 
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61703&#39; do
+    desc &#39;check&#39;, &#39;Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access 
+    mechanism settings to determine whether users logging on to privileged accounts via a network are 
+    required to use multifactor authentication.
+
+    If users logging on to privileged accounts via a network are not required to use multifactor 
+    authentication, this is a finding.
+
+    Use authentication to prove the identities of users who are attempting to log on to the database. 
+    Authenticating user identity is imperative in distributed environments, without which there can be 
+    little confidence in network security. Passwords are the most common means of authentication. Oracle 
+    Database enables strong authentication with Oracle authentication adapters that support various 
+    third-party authentication services, including TLS with digital certificates, as well as Smart Cards (PIV).
+
+    If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the following, TLS is enabled. 
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the 
+    supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or 
+    differently located sqlnet.ora files.)
+
+    SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+    SSL_VERSION &#x3D; 1.2 or 1.1
+    SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+    WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+    (METHOD &#x3D; FILE)
+    (METHOD_DATA &#x3D;
+    (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+    )
+    )
+
+    SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+    ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+    Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use one or the other.&#39;
+  
+    desc &#39;fix&#39;, &#39;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for network users logging on to privileged accounts. 
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61703&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61703&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000149-DB-000104&#39;
+  tag &quot;gid&quot;: &#39;V-61703&#39;
+  tag &quot;rid&quot;: &#39;SV-76193r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67619r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000765&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts via a network are not required to
+  use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates,
+  as well as Smart Cards (CAC, PIV).
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled. (Note: This assumes that a single sqlnet.ora file,
+  in the default location, is in use. Please see the supplemental file
+  \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or
+  differently located sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+  (SOURCE &#x3D;
+  (METHOD &#x3D; FILE)
+  (METHOD_DATA &#x3D;
+  (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+  )
+  )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61705"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61705"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61705</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61705
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61705"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61705"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61705</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to 
+    require multifactor authentication for network users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61705&#39; do
+    desc &#39;fix&#39;, &#39;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to 
+    require multifactor authentication for network users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61705&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61705&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000150-DB-000105&#39;
+  tag &quot;gid&quot;: &#39;V-61705&#39;
+  tag &quot;rid&quot;: &#39;SV-76195r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67621r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000766&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61707"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61707"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61707</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61707
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for local access to
+  privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61707"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61707"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61707</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for local access to
+  privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61707&#39; do
+    desc &#39;fix&#39;, &#39;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61707&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61707&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000151-DB-000106&#39;
+  tag &quot;gid&quot;: &#39;V-61707&#39;
+  tag &quot;rid&quot;: &#39;SV-76197r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67623r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000767&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61709"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61709"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61709</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000768
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61709
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000768
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61709"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61709"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61709</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to non-privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61709&#39; do
+    desc &#39;fix&#39;, &#39;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to non-privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61709&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61709&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000152-DB-000107&#39;
+  tag &quot;gid&quot;: &#39;V-61709&#39;
+  tag &quot;rid&quot;: &#39;SV-76199r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67625r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000768&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE &#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)))&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61711"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61711"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61711</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61711
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61711"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61711"
+            >
+              <!-- Result description -->
+              Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61711</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (5), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61711&#39; do
+  desc &#39;Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61711&#39; do
+  title &quot;The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.&quot;
+  desc &quot;To assure individual accountability and prevent unauthorized access,
+  application users (and any processes acting on behalf of users) must be
+  individually identified and authenticated.
+
+      A shared authenticator is a generic account used by multiple individuals.
+  Use of a shared authenticator alone does not uniquely identify individual
+  users. An example of a shared authenticator is the UNIX OS &#39;root&#39; user account,
+  a Windows &#39;administrator&#39; account, an &#39;SA&#39; account, or a &#39;helpdesk&#39; account.
+
+      For example, the UNIX and Windows operating systems offer a &#39;switch user&#39;
+  capability allowing users to authenticate with their individual credentials
+  and, when needed, &#39;switch&#39; to the administrator role. This method provides for
+  unique individual authentication prior to using a shared authenticator.
+
+      Some applications may not have the need to provide a group authenticator;
+  this is considered a matter of application design. In those instances where the
+  application design includes the use of a shared authenticator, this requirement
+  will apply.
+
+      There may also be instances when specific user actions need to be performed
+  on the information system without unique user identification or authentication.
+  An example of this type of access is a web server which contains publicly
+  releasable information. These types of accesses are allowed but must be
+  explicitly identified and documented by the organization.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000153-DB-000108&#39;
+  tag &quot;gid&quot;: &#39;V-61711&#39;
+  tag &quot;rid&quot;: &#39;SV-76201r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67627r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000770&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (5)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.&quot;
+  describe &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39; do
+    skip &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61713"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61713"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61713</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61713
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61713"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61713"
+            >
+              <!-- Result description -->
+              An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61713</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (8), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61713&#39; do
+    desc &#39;An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it\&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61713&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61713&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in unfettered access to the database settings and data. A successful
+  replay attack against a privileged database account could result in a complete
+  compromise of the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000156-DB-000111&#39;
+  tag &quot;gid&quot;: &#39;V-61713&#39;
+  tag &quot;rid&quot;: &#39;SV-76203r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67629r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001941&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (8)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61715"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61715"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61715</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61715
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61715"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61715"
+            >
+              <!-- Result description -->
+              An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61715</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (9), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61715&#39; do
+    desc &#39;An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it\&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.&#39;  
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61715&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61715&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in access to database data.  A successful replay attack against a
+  non-privileged database account could result in a compromise of data stored on
+  the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000157-DB-000112&#39;
+  tag &quot;gid&quot;: &#39;V-61715&#39;
+  tag &quot;rid&quot;: &#39;SV-76205r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67631r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001942&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (9)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61717"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61717"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61717</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61717
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must disable user accounts after 60 days of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61717"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61717"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61717</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must disable user accounts after 60 days of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-4 e), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For accounts managed by Oracle, check DBMS settings to determine if accounts can be automatically disabled 
+    by the system after 60 days of inactivity. Also, ask the DBA if an alternative method, such as a stored 
+    procedure run daily, to disable Oracle-managed accounts inactive for more than 60 days, has been deployed.
+
+    If the ability to disable accounts after 60 days of inactivity, by either of these means, does not exist, 
+    this is a finding.
+
+    - - - - -
+
+    Check to see what profile each user is associated with, if any, with this query:
+
+    select username, profile from dba_users order by 1,2;
+
+    Then check the profile to see what the password_life_time is set to in the table dba_profiles; the 
+    password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+    in the RESOURCE_NAME column.
+    SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where upper(resource_name) &#x3D; &quot;PASSWORD_LIFE_TIME&quot;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For accounts managed by Oracle, determine if it is practical and acceptable to require a 
+    password change every 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue the statement:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60;
+    (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for examples.)
+
+    If password changes every 60 days or fewer are unacceptable or impractical, implement an alternative method, 
+    such as a stored procedure run daily, to disable accounts inactive for more than 60 days.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61717&#39; do
+    title &#39;The DBMS must disable user accounts after 60 days of inactivity.&#39;
+    desc &#39;check&#39;, &#39;If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For accounts managed by Oracle, check DBMS settings to determine if accounts can be automatically disabled 
+    by the system after 60 days of inactivity. Also, ask the DBA if an alternative method, such as a stored 
+    procedure run daily, to disable Oracle-managed accounts inactive for more than 60 days, has been deployed.
+
+    If the ability to disable accounts after 60 days of inactivity, by either of these means, does not exist, 
+    this is a finding.
+
+    - - - - -
+
+    Check to see what profile each user is associated with, if any, with this query:
+
+    select username, profile from dba_users order by 1,2;
+
+    Then check the profile to see what the password_life_time is set to in the table dba_profiles; the 
+    password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+    in the RESOURCE_NAME column.
+    SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where upper(resource_name) &#x3D; &quot;PASSWORD_LIFE_TIME&quot;;&#39;
+
+    desc &#39;fix&#39;, &#39;For accounts managed by Oracle, determine if it is practical and acceptable to require a 
+    password change every 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue the statement:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60;
+    (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for examples.)
+
+    If password changes every 60 days or fewer are unacceptable or impractical, implement an alternative method, 
+    such as a stored procedure run daily, to disable accounts inactive for more than 60 days.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61719"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61719"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61719</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61719
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce minimum
+  password length.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61719"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61719"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61719</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce minimum
+  password length.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called 
+    DEFAULT, determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+
+    For each password verification function, examine its source code.
+    
+    If it does not enforce the CMS-defined minimum length (15 unless otherwise specified), this is 
+    a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+&lt;   oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61719&#39; do
+    desc &#39;check&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle\&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called 
+    DEFAULT, determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+
+    For each password verification function, examine its source code.
+    
+    If it does not enforce the CMS-defined minimum length (15 unless otherwise specified), this is 
+    a finding.&#39;
+    desc &#39;fix&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+&lt;   oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61719&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce minimum
+  password length.&quot;
+  desc &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000164-DB-000082&#39;
+  tag &quot;gid&quot;: &#39;V-61719&#39;
+  tag &quot;rid&quot;: &#39;SV-76209r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67635r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000205&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the DoD-defined minimum length (15 unless otherwise
+  specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61721"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61721"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61721</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61721
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61721"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61721"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61721</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (e), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password reuse rule, if any, that is in effect:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME IN (&quot;PASSWORD_REUSE_MAX&quot;, &quot;PASSWORD_REUSE_TIME&quot;)
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE, RESOURCE_NAME;
+    Bearing in mind that a profile can inherit from another profile, and the root profile is 
+    called DEFAULT, determine the value of the PASSWORD_REUSE_MAX effective for each profile.
+
+    If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the CMS-defined minimum 
+    number of password changes before a password may be repeated (five or greater), this is a finding.
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so if both are 
+    UNLIMITED, this is a finding.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  For each profile, set the PASSWORD_REUSE_MAX to 
+    enforce the CMS-defined minimum number of password changes before a password may be 
+    repeated (six or greater).
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so ensure also 
+    that it has a meaningful value.  Since the minimum password lifetime is 1 day, the smallest 
+    meaningful value is the same as the PASSWORD_REUSE_MAX value.
+
+    Using PPPPPP as an example, the statement to do this is:
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 6 PASSWORD_REUSE_TIME 6;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61721&#39; do
+    desc &#39;check&#39;, &#39;&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle\&#39;s control, 
+    determine the password reuse rule, if any, that is in effect:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME IN (&quot;PASSWORD_REUSE_MAX&quot;, &quot;PASSWORD_REUSE_TIME&quot;)
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE, RESOURCE_NAME;
+    Bearing in mind that a profile can inherit from another profile, and the root profile is 
+    called DEFAULT, determine the value of the PASSWORD_REUSE_MAX effective for each profile.
+
+    If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the CMS-defined minimum 
+    number of password changes before a password may be repeated (five or greater), this is a finding.
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so if both are 
+    UNLIMITED, this is a finding.&quot;&#39;
+    desc &#39;fix&#39;, &#39;&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  For each profile, set the PASSWORD_REUSE_MAX to 
+    enforce the CMS-defined minimum number of password changes before a password may be 
+    repeated (six or greater).
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so ensure also 
+    that it has a meaningful value.  Since the minimum password lifetime is 1 day, the smallest 
+    meaningful value is the same as the PASSWORD_REUSE_MAX value.
+
+    Using PPPPPP as an example, the statement to do this is:
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 6 PASSWORD_REUSE_TIME 6;&quot;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61723"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61723"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61723</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61723
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61723"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61723"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61723</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification 
+    function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61723&#39; do
+    desc &#39;fix&#39;, &#39;&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification 
+    function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61723&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000166-DB-000070&#39;
+  tag &quot;gid&quot;: &#39;V-61723&#39;
+  tag &quot;rid&quot;: &#39;SV-76213r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67639r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000192&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61725"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61725"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61725</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61725
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61725"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61725"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61725</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61725&#39; do
+    desc &#39;fix&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61725&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000167-DB-000071&#39;
+  tag &quot;gid&quot;: &#39;V-61725&#39;
+  tag &quot;rid&quot;: &#39;SV-76215r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67641r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000193&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61727"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61727"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61727</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61727
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61727"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61727"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61727</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61727&#39; do
+    desc &#39;fix&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61727&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000168-DB-000072&#39;
+  tag &quot;gid&quot;: &#39;V-61727&#39;
+  tag &quot;rid&quot;: &#39;SV-76217r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67643r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000194&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61729"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61729"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61729</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61729
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61729"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61729"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61729</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61729&#39; do
+    desc &#39;fix&#39;, &#39;&quot;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61729&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000169-DB-000176&#39;
+  tag &quot;gid&quot;: &#39;V-61729&#39;
+  tag &quot;rid&quot;: &#39;SV-76219r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67645r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001619&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61731"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61731"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61731</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61731
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61731"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61731"
+            >
+              <!-- Result description -->
+              Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61731</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called DEFAULT, 
+    determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+    
+    For each password verification function, examine its source code.
+
+    If it does not enforce the organization-defined minimum number of characters by which the password must differ 
+    from the previous password (six of the characters unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If any user accounts are managed by Oracle:  Develop, test and implement a password 
+    verification function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61731&#39; do
+    desc &#39;check&#39;, &#39;If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle\&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called DEFAULT, 
+    determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+    
+    For each password verification function, examine its source code.
+
+    If it does not enforce the organization-defined minimum number of characters by which the password must differ 
+    from the previous password (six of the characters unless otherwise specified), this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;If any user accounts are managed by Oracle:  Develop, test and implement a password 
+    verification function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61731&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.&quot;
+  desc  &quot;Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000170-DB-000073&#39;
+  tag &quot;gid&quot;: &#39;V-61731&#39;
+  tag &quot;rid&quot;: &#39;SV-76221r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67647r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000195&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of characters by
+  which the password must differ from the previous password (eight of the
+  characters unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If any user accounts are managed by Oracle:  Develop, test and
+  implement a password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the
+  starting point for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61733"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61733"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61733</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61733
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  encryption for storage.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61733"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61733"
+            >
+              <!-- Result description -->
+              Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61733</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  encryption for storage.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME  etwork\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61733&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61733&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  encryption for storage.&quot;
+  desc &quot;Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000171-DB-000074&#39;
+  tag &quot;gid&quot;: &#39;V-61733&#39;
+  tag &quot;rid&quot;: &#39;SV-76223r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67649r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000196&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME\
+  etwork\\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61735"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61735"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61735</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61735
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61735"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61735"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61735</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, this is not a finding.
+
+    Where accounts are authenticated using passwords, review procedures and implementation evidence for creation 
+    of temporary passwords.
+
+    If the procedures or evidence do not exist or do not enforce passwords to meet CMS password requirements, this 
+    is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures for assigning temporary passwords to user accounts.
+
+    Procedures should include instructions to meet current CMS password length and complexity requirements and 
+    provide a secure method to relay the temporary password to the user.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61735&#39; do
+    title &#39;Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.&#39;
+
+    desc &#39;check&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, this is not a finding.
+
+    Where accounts are authenticated using passwords, review procedures and implementation evidence for creation 
+    of temporary passwords.
+
+    If the procedures or evidence do not exist or do not enforce passwords to meet CMS password requirements, this 
+    is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;Implement procedures for assigning temporary passwords to user accounts.
+
+    Procedures should include instructions to meet current CMS password length and complexity requirements and 
+    provide a secure method to relay the temporary password to the user.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61735&#39; do
+  title &quot;Procedures for establishing temporary passwords that meet DoD password
+  requirements for new accounts must be defined, documented, and implemented.&quot;
+  desc &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000077&#39;
+  tag &quot;gid&quot;: &#39;V-61735&#39;
+  tag &quot;rid&quot;: &#39;SV-76225r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67651r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Where accounts are authenticated using passwords, review procedures and
+  implementation evidence for creation of temporary passwords.
+
+  If the procedures or evidence do not exist or do not enforce passwords to meet
+  DoD password requirements, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures for assigning temporary passwords to user
+  accounts.
+
+  Procedures should include instructions to meet current DoD password length and
+  complexity requirements and provide a secure method to relay the temporary
+  password to the user.&quot;
+  describe &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39; do
+    skip &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61737"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61737"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61737</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61737
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61737"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61737"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61737</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61737&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61737&#39; do
+  title &quot;DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.&quot;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000079&#39;
+  tag &quot;gid&quot;: &#39;V-61737&#39;
+  tag &quot;rid&quot;: &#39;SV-76227r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67653r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61739"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61739"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61739</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61739
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce password maximum lifetime restrictions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61739"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61739"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61739</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce password maximum lifetime restrictions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    Review DBMS settings to determine if passwords must be changed periodically. If not, this is a finding:
+
+    SELECT p1.profile,
+    CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit, &#39;DEFAULT&#39;, p4.limit, p2.limit))
+    END
+    END
+    END
+    END effective_life_time
+    FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+    WHERE p1.profile&#x3D;p2.profile
+    AND p3.profile&#x3D;&#39;DEFAULT&#39;
+    AND p4.profile&#x3D;&#39;DEFAULT&#39;
+    AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+    AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+    AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+    AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+    order by 1;
+
+    If the “effective_life_time” is greater than “60” for any profile applied to user accounts, and the 
+    need for this has not been documented and approved by the ISSO, this is a finding.
+
+    If the value is greater than 60 for any profile applied to user accounts, and the DBMS is configured to use 
+    Password Lifetime to disable inactive accounts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For user accounts managed by Oracle: Modify DBMS settings to force users to periodically change 
+    their passwords. For example, using PPPPPP to stand for a profile name:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60 PASSWORD_GRACE_TIME 0;
+    Do this for each profile applied to user accounts.
+    
+    Where a password lifetime longer than “60” is needed, document the reasons and obtain ISSO approval.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61739&#39; do
+    desc &#39;check&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    Review DBMS settings to determine if passwords must be changed periodically. If not, this is a finding:
+
+    SELECT p1.profile,
+    CASE p1.limit WHEN \&#39;UNLIMITED\&#39; THEN \&#39;UNLIMITED\&#39; ELSE
+    CASE p2.limit WHEN \&#39;UNLIMITED\&#39; THEN \&#39;UNLIMITED\&#39; ELSE
+    CASE p3.limit WHEN \&#39;UNLIMITED\&#39; THEN \&#39;UNLIMITED\&#39; ELSE
+    CASE p4.limit WHEN \&#39;UNLIMITED\&#39; THEN \&#39;UNLIMITED\&#39; ELSE
+    TO_CHAR(DECODE(p1.limit, \&#39;DEFAULT\&#39;, p3.limit, p1.limit) + DECODE(p2.limit, \&#39;DEFAULT\&#39;, p4.limit, p2.limit))
+    END
+    END
+    END
+    END effective_life_time
+    FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+    WHERE p1.profile&#x3D;p2.profile
+    AND p3.profile&#x3D;\&#39;DEFAULT\&#39;
+    AND p4.profile&#x3D;\&#39;DEFAULT\&#39;
+    AND p1.resource_name&#x3D;\&#39;PASSWORD_LIFE_TIME\&#39;
+    AND p2.resource_name&#x3D;\&#39;PASSWORD_GRACE_TIME\&#39;
+    AND p3.resource_name&#x3D;\&#39;PASSWORD_LIFE_TIME\&#39; -- from DEFAULT profile
+    AND p4.resource_name&#x3D;\&#39;PASSWORD_GRACE_TIME\&#39; -- from DEFAULT profile
+    order by 1;
+
+    If the “effective_life_time” is greater than “60” for any profile applied to user accounts, and the 
+    need for this has not been documented and approved by the ISSO, this is a finding.
+
+    If the value is greater than 60 for any profile applied to user accounts, and the DBMS is configured to use 
+    Password Lifetime to disable inactive accounts, this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;For user accounts managed by Oracle: Modify DBMS settings to force users to periodically change 
+    their passwords. For example, using PPPPPP to stand for a profile name:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60 PASSWORD_GRACE_TIME 0;
+    Do this for each profile applied to user accounts.
+    
+    Where a password lifetime longer than “60” is needed, document the reasons and obtain ISSO approval.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61739&#39; do
+  title &#39;The DBMS must enforce password maximum lifetime restrictions.&#39;
+  desc  &quot;Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000080&#39;
+  tag &quot;gid&quot;: &#39;V-61739&#39;
+  tag &quot;rid&quot;: &#39;SV-76229r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67655r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Review DBMS settings to determine if passwords must be changed periodically. If
+  not, this is a finding:
+
+  SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;
+
+  If the “effective_life_time” is greater than “60” for any profile applied to
+  user accounts, and the need for this has not been documented and approved by
+  the ISSO, this is a finding.
+
+  If the value is greater than 35 for any profile applied to user accounts, and
+  the DBMS is configured to use Password Lifetime to disable inactive accounts,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For user accounts managed by Oracle: Modify DBMS settings to
+  force users to periodically change their passwords. For example, using PPPPPP
+  to stand for a profile name:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35 PASSWORD_GRACE_TIME 0;
+  Do this for each profile applied to user accounts.
+
+  (Note: Although the DoD requirement is for a password change every 60 days,
+  using a value of “35” facilitates the use of “PASSWORD_LIFE_TIME” as a means of
+  locking accounts inactive for 35 days. But if “35” is not a practical or
+  acceptable limit for password lifetime, set it to the standard DoD value of
+  “60”.)
+
+  Where a password lifetime longer than “60” is needed, document the reasons and
+  obtain ISSO approval.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_effective_life_time &#x3D; sql.query(&quot;SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;&quot;).column(&#39;effective_life_time&#39;)
+
+  get_effective_life_time.each do |effective_life_time|
+
+    describe &#39;The oracle database account effective life time limit&#39; do
+      subject { effective_life_time }
+      it { should cmp &gt;&#x3D; 60 }
+    end
+  end
+  describe get_effective_life_time do
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61741"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61741"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61741</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61741
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61741"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61741"
+            >
+              <!-- Result description -->
+              A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61741</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61741&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61741&#39; do
+  title &quot;The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.&quot;
+  desc &quot;A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000175-DB-000067&#39;
+  tag &quot;gid&quot;: &#39;V-61741&#39;
+  tag &quot;rid&quot;: &#39;SV-76231r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67657r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000185&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61743"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61743"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61743</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000187
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61743
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000187
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61743"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61743"
+            >
+              <!-- Result description -->
+              The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61743</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61743&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61743&#39; do
+  title &quot;The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61743&#39;
+  tag &quot;rid&quot;: &#39;SV-76233r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67659r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000187&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;FALSE)&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61745"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61745"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61745</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61745
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61745"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61745"
+            >
+              <!-- Result description -->
+              Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61745</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review configuration to confirm that accounts used by processes to connect to the DBMS are 
+    authenticated using valid, current CMS-issued PKI certificates.
+
+    If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not certificate-based, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each such account, use CMS certificate-based authentication.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61745&#39; do
+    title &#39;Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.&#39;
+
+    desc &#39;Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.&#39;
+
+    desc &#39;check&#39;, &#39;Review configuration to confirm that accounts used by processes to connect to the DBMS are 
+    authenticated using valid, current CMS-issued PKI certificates.
+
+    If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not certificate-based, this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;For each such account, use CMS certificate-based authentication.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61745&#39; do
+  title &quot;Processes (services, applications, etc.) that connect to the DBMS
+  independently of individual users, must use valid, current DoD-issued PKI
+  certificates for authentication to the  DBMS.&quot;
+  desc &quot;Just as individual users must be authenticated, and just as they must
+  use PKI-based authentication, so must any processes that connect to the DBMS.
+
+      The DoD standard for authentication of a process or device communicating
+  with another process or device is the presentation of a valid, current,
+  DoD-issued Public Key Infrastructure (PKI) certificate that has previously been
+  verified as Trusted by an administrator of the other process or device.
+
+      This applies both to processes that run on the same server as the DBMS and
+  to processes running on other computers.
+
+      The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are
+  exceptions.  These cannot currently use certificate-based authentication.  For
+  this reason among others, use of these accounts should be restricted to where
+  it is truly needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61745&#39;
+  tag &quot;rid&quot;: &#39;SV-76235r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015501&#39;
+  tag &quot;fix_id&quot;: &#39;F-67661r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review configuration to confirm that accounts used by processes
+  to connect to the DBMS are authenticated using valid, current DoD-issued PKI
+  certificates.
+
+  If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not
+  certificate-based, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;For each such account, use DoD certificate-based authentication.&#39;
+  describe &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39; do
+    skip &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61747"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61747"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61747</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61747
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61747"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61747"
+            >
+              <!-- Result description -->
+              Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61747</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-7, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  </span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61747&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61747&#39; do
+  title &quot;The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.&quot;
+  desc &quot;Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000179-DB-000114&#39;
+  tag &quot;gid&quot;: &#39;V-61747&#39;
+  tag &quot;rid&quot;: &#39;SV-76237r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67663r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000803&#39;]
+  tag &quot;nist&quot;: [&#39;IA-7&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  &quot;
+  sql &#x3D; oracledb_session(user: &#39;system&#39;, password: &#39;xvIA7zonxGM&#x3D;1&#39;, host: &#39;localhost&#39;, service: &#39;ORCLCDB&#39;, sqlplus_bin: &#39;&#x2F;opt&#x2F;oracle&#x2F;product&#x2F;12.2.0.1&#x2F;dbhome_1&#x2F;bin&#x2F;sqlplus&#39;)
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61749"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61749"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61749</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002890
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61749
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002890
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61749"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61749"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61749</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not 
+    mandatory in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >MA-4 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61749&#39; do
+    impact 0.0
+    desc &#39;caveat&#39;, &#39;Not applicable for this CMS ARS 3.1 overlay, since the related security control is not 
+    mandatory in CMS ARS 3.1&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61749&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61749&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000184-DB-000119&#39;
+  tag &quot;gid&quot;: &#39;V-61749&#39;
+  tag &quot;rid&quot;: &#39;SV-76239r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67665r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002890&#39;, &#39;CCI-003123&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61751"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61751"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61751</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000877
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61751
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000877
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61751"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61751"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61751</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >MA-4 c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61751&#39; do
+  title &quot;The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000185-DB-000116&#39;
+  tag &quot;gid&quot;: &#39;V-61751&#39;
+  tag &quot;rid&quot;: &#39;SV-76241r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67667r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000877&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61753"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61753"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61753</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61753
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61753"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61753"
+            >
+              <!-- Result description -->
+              When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61753</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61753&#39; do
+  title &quot;Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.&quot;
+  desc &quot;When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000187-DB-000120&#39;
+  tag &quot;gid&quot;: &#39;V-61753&#39;
+  tag &quot;rid&quot;: &#39;SV-76243r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67669r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)&quot;
+  tag &quot;fix&quot;: &quot;Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.&quot;
+  describe &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39; do
+    skip &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61755"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61755"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61755</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-16 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002262
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61755
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-16 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002262
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61755"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61755"
+            >
+              <!-- Result description -->
+              When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61755</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not                               
+    mandatory in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-16 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61755&#39; do
+    impact 0.0
+    desc &#39;caveat&#39;, &#39;Not applicable for this CMS ARS 3.1 overlay, since the related security control is not                               
+    mandatory in CMS ARS 3.1&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61755&#39; do
+  title &quot;The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.&quot;
+  desc &quot;When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000188-DB-000121&#39;
+  tag &quot;gid&quot;: &#39;V-61755&#39;
+  tag &quot;rid&quot;: &#39;SV-76245r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67671r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002262&#39;]
+  tag &quot;nist&quot;: [&#39;AC-16 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61757"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61757"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61757</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61757
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61757"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61757"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61757</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and vendor documentation to verify network connections 
+    are terminated when a database communications session is ended or after 30 minutes of inactivity.
+
+    If the network connection is not terminated, this is a finding.
+
+    The defined duration for these timeouts 30 minutes, except to fulfill documented and validated mission 
+    requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and&#x2F;or OS settings to disconnect network sessions when database communication 
+    sessions have ended or after the CMS-defined period of inactivity.
+
+    To configure this in Oracle, modify each relevant profile.  The resource name is IDLE_TIME, which is 
+    expressed in minutes.  Using PPPPPP as an example of a profile, set the timeout to 30 minutes with:
+    ALTER PROFILE PPPPPP LIMIT IDLE_TIME 30;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61757&#39; do
+    title &#39;The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.&#39;
+
+    desc &#39;check&#39;, &#39;Review DBMS settings, OS settings, and vendor documentation to verify network connections 
+    are terminated when a database communications session is ended or after 30 minutes of inactivity.
+
+    If the network connection is not terminated, this is a finding.
+
+    The defined duration for these timeouts 30 minutes, except to fulfill documented and validated mission 
+    requirements.&#39;
+
+    desc &#39;fix&#39;, &#39;Configure DBMS and&#x2F;or OS settings to disconnect network sessions when database communication 
+    sessions have ended or after the CMS-defined period of inactivity.
+
+    To configure this in Oracle, modify each relevant profile.  The resource name is IDLE_TIME, which is 
+    expressed in minutes.  Using PPPPPP as an example of a profile, set the timeout to 30 minutes with:
+    ALTER PROFILE PPPPPP LIMIT IDLE_TIME 30;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61757&#39; do
+  title &quot;The DBMS must terminate the network connection associated with a
+  communications session at the end of the session or 15 minutes of inactivity.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000190-DB-000137&#39;
+  tag &quot;gid&quot;: &#39;V-61757&#39;
+  tag &quot;rid&quot;: &#39;SV-76247r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67673r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001133&#39;]
+  tag &quot;nist&quot;: [&#39;SC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and vendor documentation to
+  verify network connections are terminated when a database communications
+  session is ended or after 15 minutes of inactivity.
+
+  If the network connection is not terminated, this is a finding.
+
+  The defined duration for these timeouts 15 minutes, except to fulfill
+  documented and validated mission requirements.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or OS settings to disconnect network sessions
+  when database communication sessions have ended or after the DoD-defined period
+  of inactivity.
+
+  To configure this in Oracle, modify each relevant profile.  The resource name
+  is IDLE_TIME, which is expressed in minutes.  Using PPPPPP as an example of a
+  profile, set the timeout to 15 minutes with:
+  ALTER PROFILE PPPPPP LIMIT IDLE_TIME 15;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idele time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61759"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61759"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61759</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61759
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61759"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61759"
+            >
+              <!-- Result description -->
+              Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61759</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-13, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61759&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61759&#39; do
+  title &quot;The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.&quot;
+  desc &quot;Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000140&#39;
+  tag &quot;gid&quot;: &#39;V-61759&#39;
+  tag &quot;rid&quot;: &#39;SV-76249r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67675r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61761"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61761"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61761</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61761
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database data files containing sensitive information must be
+  encrypted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61761"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61761"
+            >
+              <!-- Result description -->
+              Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61761</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database data files containing sensitive information must be
+  encrypted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-13, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61761&#39; do
+  title &quot;Database data files containing sensitive information must be
+  encrypted.&quot;
+  desc &quot;Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000141&#39;
+  tag &quot;gid&quot;: &#39;V-61761&#39;
+  tag &quot;rid&quot;: &#39;SV-76251r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67677r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61763"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61763"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61763</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61763
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect the integrity of publicly available information
+  and applications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61763"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61763"
+            >
+              <!-- Result description -->
+              The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61763</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect the integrity of publicly available information
+  and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61763&#39; do
+  title &quot;The DBMS must protect the integrity of publicly available information
+  and applications.&quot;
+  desc &quot;The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000201-DB-000145&#39;
+  tag &quot;gid&quot;: &#39;V-61763&#39;
+  tag &quot;rid&quot;: &#39;SV-76253r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67679r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.&quot;
+  describe &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61765"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61765"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61765</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001185
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61765
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001185
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61765"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61765"
+            >
+              <!-- Result description -->
+              This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61765</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not selected in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-23 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with &quot;alter profile&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   </span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61765&#39; do
+    impact 0.0
+    desc &#39;caveat&#39;, &#39;Not applicable for this CMS ARS 3.1 overlay, since the related security control is not selected in CMS ARS 3.1&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61765&#39; do
+  title &quot;The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.&quot;
+  desc  &quot;This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000220-DB-000149&#39;
+  tag &quot;gid&quot;: &#39;V-61765&#39;
+  tag &quot;rid&quot;: &#39;SV-76255r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67681r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001185&#39;]
+  tag &quot;nist&quot;: [&#39;SC-23 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with \&quot;alter profile\&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   &quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_idle_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  query_sessions_per_user &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;
+  }
+
+  query_connect_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;CONNECT_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query_idle_time, profile: profile)).column(&#39;limit&#39;)
+    sessions_per_user &#x3D; sql.query(format(query_sessions_per_user, profile: profile)).column(&#39;limit&#39;)
+    connect_time &#x3D; sql.query(format(query_connect_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idle time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+
+    describe &quot;The oracle database number of sessions per user for profile: #{profile}&quot; do
+      subject { sessions_per_user }
+      it { should cmp &lt;&#x3D; 3 }
+    end
+
+    describe &quot;The oracle database connect time for profile: #{profile}&quot; do
+      subject { connect_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61769"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61769"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61769</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-24
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001665
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61769
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-24
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001665
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61769"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61769"
+            >
+              <!-- Result description -->
+              Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61769</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-24, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as &quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61769&#39; do
+  title &quot;The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.&quot;
+  desc &quot;Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000226-DB-000147&#39;
+  tag &quot;gid&quot;: &#39;V-61769&#39;
+  tag &quot;rid&quot;: &#39;SV-76259r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67685r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001665&#39;]
+  tag &quot;nist&quot;: [&#39;SC-24&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as \&quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes\&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_mode &#x3D; sql.query(&#39;select log_mode from v$database;&#39;).column(&#39;log_mode&#39;)
+
+  describe &#39;The list of oracle database log mode&#39; do
+    subject { log_mode }
+    it { should cmp &#39;ARCHIVELOG&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61771"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61771"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61771</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61771
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61771"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61771"
+            >
+              <!-- Result description -->
+              This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61771</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-28, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name &quot;TSName&quot;,
+  e.encryptionalg &quot;Algorithm&quot;,
+  d.file_name &quot;File Name&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner &quot;Owner&quot;,
+  a.table_name &quot;Table Name&quot;,
+  e.encryptionalg &quot;Algorithm&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61771&#39; do
+  title &quot;The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.&quot;
+  desc &quot;This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000231-DB-000154&#39;
+  tag &quot;gid&quot;: &#39;V-61771&#39;
+  tag &quot;rid&quot;: &#39;SV-76261r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67687r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001199&#39;]
+  tag &quot;nist&quot;: [&#39;SC-28&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name \&quot;TSName\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;,
+  d.file_name \&quot;File Name\&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner \&quot;Owner\&quot;,
+  a.table_name \&quot;Table Name\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61775"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61775"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61775</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61775
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61775"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61775"
+            >
+              <!-- Result description -->
+              Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61775</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61775&#39; do
+  title &quot;The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.&quot;
+  desc  &quot;Security functions are defined as \&quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based\&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000233-DB-000124&#39;
+  tag &quot;gid&quot;: &#39;V-61775&#39;
+  tag &quot;rid&quot;: &#39;SV-76265r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67691r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001084&#39;]
+  tag &quot;nist&quot;: [&#39;SC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.&quot;
+  tag &quot;fix&quot;: &quot;Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.&quot;
+  describe &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39; do
+    skip &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61777"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61777"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61777</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61777
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically terminate emergency accounts after 60 days for each type of account.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61777"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61777"
+            >
+              <!-- Result description -->
+              Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61777</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+    or temporary accounts, this is not a finding.
+
+    Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+    determine if emergency accounts are being automatically terminated by the system after 60 days. Check also 
+    for custom code (scheduled jobs, procedures, triggers, etc.) for achieving this. 
+
+    If emergency accounts are not being terminated after 60 days, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create a profile specifically for emergency or temporary accounts.  When creating the accounts, 
+    assign them to this profile.  Configure DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, 
+    or implement custom code, to terminate accounts with this profile after 60 days.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61777&#39; do
+    title &#39;The DBMS must automatically terminate emergency accounts after 60 days for each type of account.&#39;
+
+    desc &#39;Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.&#39;
+
+    desc &#39;check&#39;, &#39;If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+    or temporary accounts, this is not a finding.
+
+    Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+    determine if emergency accounts are being automatically terminated by the system after 60 days. Check also 
+    for custom code (scheduled jobs, procedures, triggers, etc.) for achieving this. 
+
+    If emergency accounts are not being terminated after 60 days, this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;Create a profile specifically for emergency or temporary accounts.  When creating the accounts, 
+    assign them to this profile.  Configure DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, 
+    or implement custom code, to terminate accounts with this profile after 60 days.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61777&#39; do
+  title &quot;The DBMS must automatically terminate emergency accounts after an
+  organization-defined time period for each type of account.&quot;
+  desc &quot;Emergency application accounts are typically created due to an
+  unforeseen operational event or could ostensibly be used in the event of a
+  vendor support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      In the event emergency application accounts are required, the application
+  must ensure accounts that are designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or application data compromised.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      If it is possible for any temporary emergency accounts to be created and
+  managed by Oracle, then the DBMS or application must provide or utilize a
+  mechanism to automatically terminate such accounts after an
+  organization-defined time period.
+
+      Emergency database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being misused.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000234-DB-000157&#39;
+  tag &quot;gid&quot;: &#39;V-61777&#39;
+  tag &quot;rid&quot;: &#39;SV-76267r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67693r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001682&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if emergency accounts are being automatically
+  terminated by the system after an organization-defined time period. Check also
+  for custom code (scheduled jobs, procedures, triggers, etc.) for achieving
+  this.
+
+  If emergency accounts are not being terminated after an organization-defined
+  time period, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create a profile specifically for emergency or temporary
+  accounts.  When creating the accounts, assign them to this profile.  Configure
+  DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, or
+  implement custom code, to terminate accounts with this profile after an
+  organization-defined time period.&quot;
+  describe &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39; do
+    skip &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61779"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61779"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61779</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001274
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61779
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001274
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61779"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61779"
+            >
+              <!-- Result description -->
+              Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61779</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-4 (12), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61779&#39; do
+  title &quot;The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.&quot;
+  desc &quot;Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000237-DB-000158&#39;
+  tag &quot;gid&quot;: &#39;V-61779&#39;
+  tag &quot;rid&quot;: &#39;SV-76269r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67695r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001274&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (12)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61781"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61781"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61781</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001090
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61781
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001090
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61781"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61781"
+            >
+              <!-- Result description -->
+              The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61781</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61781&#39; do
+  title &quot;The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.&quot;
+  desc &quot;The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000243-DB-000128&#39;
+  tag &quot;gid&quot;: &#39;V-61781&#39;
+  tag &quot;rid&quot;: &#39;SV-76271r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67697r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001090&#39;]
+  tag &quot;nist&quot;: [&#39;SC-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61783"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61783"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61783</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002385
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61783
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002385
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61783"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61783"
+            >
+              <!-- Result description -->
+              A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61783</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61783&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61783&#39; do
+  title &quot;The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.&quot;
+  desc &quot;A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000245-DB-000132&#39;
+  tag &quot;gid&quot;: &#39;V-61783&#39;
+  tag &quot;rid&quot;: &#39;SV-76273r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67699r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002385&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;RATE_LIMIT&#x3D;&#39; }
+    its(&#39;content&#39;) { should match &#x2F;CONNECTION_RATE_LISTENER&#x3D;\d*&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61785"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61785"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61785</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001310
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61785
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must check the validity of data inputs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001310
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61785"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61785"
+            >
+              <!-- Result description -->
+              Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS checks the validity of data inputs</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61785</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must check the validity of data inputs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See &quot;Reporting Constraint Exceptions&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61785&#39; do
+  title &#39;The DBMS must check the validity of data inputs.&#39;
+  desc  &quot;Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000251-DB-000160&#39;
+  tag &quot;gid&quot;: &#39;V-61785&#39;
+  tag &quot;rid&quot;: &#39;SV-76275r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67701r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001310&#39;]
+  tag &quot;nist&quot;: [&#39;SI-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See \&quot;Reporting Constraint Exceptions\&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  tag &quot;fix&quot;: &quot;Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  describe &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39; do
+    skip &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61787"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61787"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61787</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-7 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002716
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002718
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61787
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must verify there have not been unauthorized changes to the
+  DBMS software and information.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-7 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002716
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002718
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61787"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61787"
+            >
+              <!-- Result description -->
+              Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61787</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-7 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61787&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61787&#39; do
+  title &quot;The system must verify there have not been unauthorized changes to the
+  DBMS software and information.&quot;
+  desc &quot;Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000262-DB-000159&#39;
+  tag &quot;gid&quot;: &#39;V-61787&#39;
+  tag &quot;rid&quot;: &#39;SV-76277r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67703r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002716&#39;, &#39;CCI-002718&#39;]
+  tag &quot;nist&quot;: [&#39;SI-7 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61789"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61789"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61789</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61789
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must identify potentially security-relevant error conditions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61789"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61789"
+            >
+              <!-- Result description -->
+              The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61789</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must identify potentially security-relevant error conditions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61789&#39; do
+  title &#39;The DBMS must identify potentially security-relevant error conditions.&#39;
+  desc  &quot;The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000265-DB-000161&#39;
+  tag &quot;gid&quot;: &#39;V-61789&#39;
+  tag &quot;rid&quot;: &#39;SV-76279r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67705r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.&quot;
+  describe &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61791"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61791"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61791</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001312
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61791
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001312
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61791"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61791"
+            >
+              <!-- Result description -->
+              Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61791</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61791&#39; do
+  title &quot;The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.&quot;
+  desc &quot;Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000266-DB-000162&#39;
+  tag &quot;gid&quot;: &#39;V-61791&#39;
+  tag &quot;rid&quot;: &#39;SV-76281r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67707r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001312&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.&quot;
+  describe &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61793"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61793"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61793</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001314
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61793
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict error messages so only authorized personnel may
+  view them.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001314
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61793"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61793"
+            >
+              <!-- Result description -->
+              If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61793</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict error messages so only authorized personnel may
+  view them.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-11 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61793&#39; do
+  title &quot;The DBMS must restrict error messages so only authorized personnel may
+  view them.&quot;
+  desc &quot;If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000267-DB-000163&#39;
+  tag &quot;gid&quot;: &#39;V-61793&#39;
+  tag &quot;rid&quot;: &#39;SV-76283r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67709r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001314&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.&quot;
+  describe &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39; do
+    skip &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61795"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61795"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61795</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (7)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001670
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61795
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (7)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001670
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61795"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61795"
+            >
+              <!-- Result description -->
+              System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61795</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-4 (7), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61795&#39; do
+  title &quot;The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.&quot;
+  desc &quot;System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000287-DB-000126&#39;
+  tag &quot;gid&quot;: &#39;V-61795&#39;
+  tag &quot;rid&quot;: &#39;SV-76285r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67711r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001670&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (7)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61797"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61797"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61797</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61797
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  created.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61797"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61797"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61797</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  created.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61797&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  created.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000291-DB-000139&#39;
+  tag &quot;gid&quot;: &#39;V-61797&#39;
+  tag &quot;rid&quot;: &#39;SV-76287r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67713r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001683&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61799"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61799"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61799</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61799
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  modified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61799"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61799"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61799</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  modified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61799&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  modified.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000292-DB-000138&#39;
+  tag &quot;gid&quot;: &#39;V-61799&#39;
+  tag &quot;rid&quot;: &#39;SV-76289r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67715r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001684&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61801"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61801"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61801</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61801
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when account disabling
+  actions are taken.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61801"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61801"
+            >
+              <!-- Result description -->
+              When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61801</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61801&#39; do
+  title &quot;The DBMS must notify appropriate individuals when account disabling
+  actions are taken.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000293-DB-000130&#39;
+  tag &quot;gid&quot;: &#39;V-61801&#39;
+  tag &quot;rid&quot;: &#39;SV-76291r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67717r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001685&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61803"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61803"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61803</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61803
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  terminated.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61803"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61803"
+            >
+              <!-- Result description -->
+              When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61803</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  terminated.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61803&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  terminated.&quot;
+  desc &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000294-DB-000129&#39;
+  tag &quot;gid&quot;: &#39;V-61803&#39;
+  tag &quot;rid&quot;: &#39;SV-76293r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67719r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001686&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61809"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61809"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61809</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61809
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must implement separation of duties through assigned
+    information access authorizations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61809"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61809"
+            >
+              <!-- Result description -->
+              Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61809</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must implement separation of duties through assigned
+    information access authorizations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61809&#39; do
+  title &quot;The DBMS must implement separation of duties through assigned
+    information access authorizations.&quot;
+  desc  &quot;Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000009&#39;
+  tag &quot;gid&quot;: &#39;V-61809&#39;
+  tag &quot;rid&quot;: &#39;SV-76299r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-003300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67725r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)&quot;
+  tag &quot;fix&quot;: &quot;Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.&quot;
+  describe &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39; do
+    skip &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61813"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61813"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61813</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001875
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61813
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide an audit log reduction capability.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001875
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61813"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61813"
+            >
+              <!-- Result description -->
+              Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides an audit log reduction capability</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61813</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide an audit log reduction capability.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Deploy software capable of performing audit data reduction.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61813&#39; do
+  title &#39;The system must provide an audit log reduction capability.&#39;
+  desc  &quot;Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000113-DB-000053&#39;
+  tag &quot;gid&quot;: &#39;V-61813&#39;
+  tag &quot;rid&quot;: &#39;SV-76303r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67729r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001875&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;Deploy software capable of performing audit data reduction.&#39;
+  describe &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39; do
+    skip &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61815"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61815"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61815</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001094
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61815
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001094
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61815"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61815"
+            >
+              <!-- Result description -->
+              When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61815</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to restrict functionality that could be used to initiate DoS attacks.
+
+    Securing the Network Connection:
+    Protecting the network and its traffic from inappropriate access or modification is the essence of network 
+    security. You should consider all paths the data travels, and assess the threats on each path and node. Then, 
+    take steps to lessen or eliminate those threats and the consequences of a security breach. In addition, 
+    monitor and audit to detect either increased threat levels or penetration attempts.
+
+    The following practices improve network security:
+
+    1. Disable the Default Listener.
+    All listeners have a unique name instead of the name LISTENER and have startup protection.
+
+    LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+    
+    This configuration prevents the default listener from starting.
+
+    2. Prevent online administration by requiring the administrator to have the write privilege on the 
+    listener.ora file on the server.
+
+    a. Add or alter this line in the listener.ora file:
+
+    ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+    b. Use RELOAD to reload the configuration.
+
+    3. Set Protection against crafted network packets on database level.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should take when bad packets are 
+    received from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the default)
+
+    NONE: The database server ignores the bad packets and does not generate any trace files or log messages. 
+    (Not recommended)
+
+    TRACE: A detailed trace file is generated when bad packets are received, which can be used to debug any 
+    problems in client&#x2F;server communication.
+
+    LOG: A minimal log message is printed in the alert logfile and in the server trace file. A minimal amount 
+    of disk space is used.
+
+    ALERT: An alert message is sent to a DBA or monitoring console.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad 
+    packets from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) | (DROP,integer) } (DROP,3 is the default)
+
+    CONTINUE: The server process continues execution. The database server may be subject to a Denial of Service (DoS) 
+    if bad packets continue to be sent by a malicious client. (Not recommended)
+
+    (DELAY, integer) :The client experiences a delay of integer seconds before the server process accepts the 
+    next request from the same client connection. Malicious clients are prevented from excessive consumption 
+    of server resources while legitimate clients experience degradation in performance but can continue to function.
+
+    (DROP, integer) : The server forcefully terminates the client connection after integer bad packets. The server 
+    protects itself at the expense of the client (for example, a client transaction may be lost). The client may 
+    reconnect and attempt the same operation.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can be made by a client on a 
+    connection to the server process. After the specified number of failure attempts, the connection will be 
+    automatically dropped by the server process.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to unlimited. (A value of 1 to 3 is 
+    recommended)
+
+    For more information about the parameters in listener.ora, 
+    see https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+    
+    4. When a host computer has multiple IP addresses associated with multiple network interface controller (NIC) 
+    cards, configure the listener to the specific IP address.
+
+    You can restrict the listener to listen on a specific IP address. Oracle recommends that you specify the specific 
+    IP addresses on these types of computers, rather than allowing the listener to listen on all IP addresses. 
+    Restricting the listener to specific IP addresses helps to prevent an intruder from stealing a TCP end point from 
+    under the listener process.
+
+    5. Restrict the privileges of the listener, so that it cannot read or write files in the database or the Oracle 
+    server address space.
+
+    The default configuration for external procedures does not require a network listener to work with Oracle Database 
+    and the extproc agent. The extproc agent is spawned directly by Oracle Database and eliminates the risks that the 
+    extproc agent might be spawned by Oracle Listener unexpectedly. This default configuration is recommended for maximum 
+    security. For more information about securing external procedures see
+    https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+    However, the extproc agent can be configured to be spawned by a listener. In that case (not recommended) the listener 
+    should have restricted privileges.
+
+    6. Use a firewall, IAW CMS network policy and guidance.
+    
+    Appropriately placed and configured firewalls can prevent outside access to your databases.
+
+    7. Prevent unauthorized administration of the Oracle listener.
+
+    Local administration of the listener is secure by default through the local operating system. Therefore configuring 
+    a password is neither required nor recommended for secure local administration. However, a password can be configured 
+    for the listener to provide security for administrative operations, such as starting or stopping the listener, 
+    viewing a list of supported services, or saving changes to the Listener Control configuration.
+
+    By default, Oracle Net Listener permits only local administration for security reasons. As a policy, the listener 
+    can be administered only by the user who started it. This is enforced through local operating system authentication. 
+    For example, if user1 starts the listener, then only user1 can administer it. Any other user trying to administer 
+    the listener gets an error. The super user is the only exception.
+
+    Oracle recommends that you perform listener administration in the default mode (secure by means of local operating 
+    system authentication), and access the system remotely using a remote logon. Oracle Enterprise Manager Cloud 
+    Control can also be used for remote administration.
+
+    8. Encrypt network traffic.  (Mandatory for sensitive data and optional for non-sensitive, as covered in other 
+    STIG requirements.)
+
+    Where applicable, use Oracle network data encryption to encrypt network traffic among clients, databases, 
+    and application servers.
+
+    9. Set Connect Rate to organization defined limit. (Also required by O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+    The connection rate limiter feature in Oracle Net Listener enables a database administrator to limit the number of 
+    new connections handled by the listener. When this feature is enabled, Oracle Net Listener imposes a user-specified 
+    maximum limit on the number of new connections handled by the listener every second.
+
+    CONNECTION_RATE_LISTENER&#x3D;10
+    LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))  
+    )
+
+    10. Setup Valid Node Checking.
+    (See also O121-BP-025600.)
+
+    Valid node checking is a security feature that protects DBMS instances from malevolent or errant Oracle Net 
+    connections over TCP&#x2F;IP, without the need for a firewall or IP address filtering at the operating system-level. 
+    The feature is controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes, and tcp.excluded_nodes.
+
+    Modify the sqlnet.ora file manually
+    TCP.VALIDNODE_CHECKING&#x3D;yes
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the supplemental 
+    file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+    If this parameter is set to yes, then incoming connections are allowed only if they originate from a node that conforms 
+    to the list specified by TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter is 
+    set to yes (no is the default).
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter 
+    is set to yes.
+
+    Modify the listener.ora file manually
+
+    TCP.EXCLUDED_NODES Syntax:
+    TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25, 172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+    TCP.INVITED_NODES Syntax:
+    TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*, 2001:DB8:200C:433B&#x2F;32)
+
+    Usage Notes:
+
+    Use TCP.INVITED_NODES to specify which clients are allowed access to the database. This list takes precedence 
+    over the TCP.EXCLUDED_NODES parameter if both lists are present. These parameters can use wildcards for IPv4 
+    addresses and CIDR notation for IPv4 and IPv6 addresses.
+
+    11. Apply Listener Security Patches.
+    (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+    Critical Patch Updates are cumulative. Therefore, the latest patch will contain all previous security patches 
+    for the Listener.
+
+    12. Ensure that listener logging is turned on.
+
+    Listener logging is on by default. If logging is not on, configure logging for all listeners in order to capture 
+    Listener commands and brute force password attacks.
+
+    13. Monitor the listener logfile.
+
+    The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors, which may signify attacks or 
+    inappropriate activity. Monitor the logfile and generate an alert whenever these errors are encountered.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61815&#39; do
+    desc &#39;fix&#39;, &#39;Configure DBMS settings to restrict functionality that could be used to initiate DoS attacks.
+
+    Securing the Network Connection:
+    Protecting the network and its traffic from inappropriate access or modification is the essence of network 
+    security. You should consider all paths the data travels, and assess the threats on each path and node. Then, 
+    take steps to lessen or eliminate those threats and the consequences of a security breach. In addition, 
+    monitor and audit to detect either increased threat levels or penetration attempts.
+
+    The following practices improve network security:
+
+    1. Disable the Default Listener.
+    All listeners have a unique name instead of the name LISTENER and have startup protection.
+
+    LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+    
+    This configuration prevents the default listener from starting.
+
+    2. Prevent online administration by requiring the administrator to have the write privilege on the 
+    listener.ora file on the server.
+
+    a. Add or alter this line in the listener.ora file:
+
+    ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+    b. Use RELOAD to reload the configuration.
+
+    3. Set Protection against crafted network packets on database level.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should take when bad packets are 
+    received from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the default)
+
+    NONE: The database server ignores the bad packets and does not generate any trace files or log messages. 
+    (Not recommended)
+
+    TRACE: A detailed trace file is generated when bad packets are received, which can be used to debug any 
+    problems in client&#x2F;server communication.
+
+    LOG: A minimal log message is printed in the alert logfile and in the server trace file. A minimal amount 
+    of disk space is used.
+
+    ALERT: An alert message is sent to a DBA or monitoring console.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad 
+    packets from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) | (DROP,integer) } (DROP,3 is the default)
+
+    CONTINUE: The server process continues execution. The database server may be subject to a Denial of Service (DoS) 
+    if bad packets continue to be sent by a malicious client. (Not recommended)
+
+    (DELAY, integer) :The client experiences a delay of integer seconds before the server process accepts the 
+    next request from the same client connection. Malicious clients are prevented from excessive consumption 
+    of server resources while legitimate clients experience degradation in performance but can continue to function.
+
+    (DROP, integer) : The server forcefully terminates the client connection after integer bad packets. The server 
+    protects itself at the expense of the client (for example, a client transaction may be lost). The client may 
+    reconnect and attempt the same operation.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can be made by a client on a 
+    connection to the server process. After the specified number of failure attempts, the connection will be 
+    automatically dropped by the server process.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to unlimited. (A value of 1 to 3 is 
+    recommended)
+
+    For more information about the parameters in listener.ora, 
+    see https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+    
+    4. When a host computer has multiple IP addresses associated with multiple network interface controller (NIC) 
+    cards, configure the listener to the specific IP address.
+
+    You can restrict the listener to listen on a specific IP address. Oracle recommends that you specify the specific 
+    IP addresses on these types of computers, rather than allowing the listener to listen on all IP addresses. 
+    Restricting the listener to specific IP addresses helps to prevent an intruder from stealing a TCP end point from 
+    under the listener process.
+
+    5. Restrict the privileges of the listener, so that it cannot read or write files in the database or the Oracle 
+    server address space.
+
+    The default configuration for external procedures does not require a network listener to work with Oracle Database 
+    and the extproc agent. The extproc agent is spawned directly by Oracle Database and eliminates the risks that the 
+    extproc agent might be spawned by Oracle Listener unexpectedly. This default configuration is recommended for maximum 
+    security. For more information about securing external procedures see
+    https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+    However, the extproc agent can be configured to be spawned by a listener. In that case (not recommended) the listener 
+    should have restricted privileges.
+
+    6. Use a firewall, IAW CMS network policy and guidance.
+    
+    Appropriately placed and configured firewalls can prevent outside access to your databases.
+
+    7. Prevent unauthorized administration of the Oracle listener.
+
+    Local administration of the listener is secure by default through the local operating system. Therefore configuring 
+    a password is neither required nor recommended for secure local administration. However, a password can be configured 
+    for the listener to provide security for administrative operations, such as starting or stopping the listener, 
+    viewing a list of supported services, or saving changes to the Listener Control configuration.
+
+    By default, Oracle Net Listener permits only local administration for security reasons. As a policy, the listener 
+    can be administered only by the user who started it. This is enforced through local operating system authentication. 
+    For example, if user1 starts the listener, then only user1 can administer it. Any other user trying to administer 
+    the listener gets an error. The super user is the only exception.
+
+    Oracle recommends that you perform listener administration in the default mode (secure by means of local operating 
+    system authentication), and access the system remotely using a remote logon. Oracle Enterprise Manager Cloud 
+    Control can also be used for remote administration.
+
+    8. Encrypt network traffic.  (Mandatory for sensitive data and optional for non-sensitive, as covered in other 
+    STIG requirements.)
+
+    Where applicable, use Oracle network data encryption to encrypt network traffic among clients, databases, 
+    and application servers.
+
+    9. Set Connect Rate to organization defined limit. (Also required by O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+    The connection rate limiter feature in Oracle Net Listener enables a database administrator to limit the number of 
+    new connections handled by the listener. When this feature is enabled, Oracle Net Listener imposes a user-specified 
+    maximum limit on the number of new connections handled by the listener every second.
+
+    CONNECTION_RATE_LISTENER&#x3D;10
+    LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))  
+    )
+
+    10. Setup Valid Node Checking.
+    (See also O121-BP-025600.)
+
+    Valid node checking is a security feature that protects DBMS instances from malevolent or errant Oracle Net 
+    connections over TCP&#x2F;IP, without the need for a firewall or IP address filtering at the operating system-level. 
+    The feature is controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes, and tcp.excluded_nodes.
+
+    Modify the sqlnet.ora file manually
+    TCP.VALIDNODE_CHECKING&#x3D;yes
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the supplemental 
+    file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+    If this parameter is set to yes, then incoming connections are allowed only if they originate from a node that conforms 
+    to the list specified by TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter is 
+    set to yes (no is the default).
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter 
+    is set to yes.
+
+    Modify the listener.ora file manually
+
+    TCP.EXCLUDED_NODES Syntax:
+    TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25, 172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+    TCP.INVITED_NODES Syntax:
+    TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*, 2001:DB8:200C:433B&#x2F;32)
+
+    Usage Notes:
+
+    Use TCP.INVITED_NODES to specify which clients are allowed access to the database. This list takes precedence 
+    over the TCP.EXCLUDED_NODES parameter if both lists are present. These parameters can use wildcards for IPv4 
+    addresses and CIDR notation for IPv4 and IPv6 addresses.
+
+    11. Apply Listener Security Patches.
+    (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+    Critical Patch Updates are cumulative. Therefore, the latest patch will contain all previous security patches 
+    for the Listener.
+
+    12. Ensure that listener logging is turned on.
+
+    Listener logging is on by default. If logging is not on, configure logging for all listeners in order to capture 
+    Listener commands and brute force password attacks.
+
+    13. Monitor the listener logfile.
+
+    The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors, which may signify attacks or 
+    inappropriate activity. Monitor the logfile and generate an alert whenever these errors are encountered.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61815&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61815&#39; do
+  title &quot;The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.&quot;
+  desc &quot;When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+    &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000246-DB-000133&#39;
+  tag &quot;gid&quot;: &#39;V-61815&#39;
+  tag &quot;rid&quot;: &#39;SV-76305r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67731r10_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001094&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to restrict functionality that could be
+  used to initiate DoS attacks.
+
+  Securing the Network Connection:
+  Protecting the network and its traffic from inappropriate access or
+  modification is the essence of network security. You should consider all paths
+  the data travels, and assess the threats on each path and node. Then, take
+  steps to lessen or eliminate those threats and the consequences of a security
+  breach. In addition, monitor and audit to detect either increased threat levels
+  or penetration attempts.
+
+  The following practices improve network security:
+
+  1. Disable the Default Listener.
+  All listeners have a unique name instead of the name LISTENER and have startup
+  protection.
+
+  LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+
+  This configuration prevents the default listener from starting.
+
+  2. Prevent online administration by requiring the administrator to have the
+  write privilege on the listener.ora file on the server.
+  a. Add or alter this line in the listener.ora file:
+
+  ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+  b. Use RELOAD to reload the configuration.
+
+  3. Set Protection against crafted network packets on database level.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should
+  take when bad packets are received from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the
+  default)
+
+  NONE: The database server ignores the bad packets and does not generate any
+  trace files or log messages. (Not recommended)
+
+  TRACE: A detailed trace file is generated when bad packets are received, which
+  can be used to debug any problems in client&#x2F;server communication.
+
+  LOG: A minimal log message is printed in the alert logfile and in the server
+  trace file. A minimal amount of disk space is used.
+
+  ALERT: An alert message is sent to a DBA or monitoring console.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server
+  process when receiving bad packets from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) |
+  (DROP,integer) } (DROP,3 is the default)
+
+  CONTINUE: The server process continues execution. The database server may be
+  subject to a Denial of Service (DoS) if bad packets continue to be sent by a
+  malicious client. (Not recommended)
+
+  (DELAY, integer) :The client experiences a delay of integer seconds before the
+  server process accepts the next request from the same client connection.
+  Malicious clients are prevented from excessive consumption of server resources
+  while legitimate clients experience degradation in performance but can continue
+  to function.
+
+  (DROP, integer) : The server forcefully terminates the client connection after
+  integer bad packets. The server protects itself at the expense of the client
+  (for example, a client transaction may be lost). The client may reconnect and
+  attempt the same operation.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts
+  that can be made by a client on a connection to the server process. After the
+  specified number of failure attempts, the connection will be automatically
+  dropped by the server process.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to
+  unlimited. (A value of 1 to 3 is recommended)
+
+  For more information about the parameters in listener.ora, see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+
+  4. When a host computer has multiple IP addresses associated with multiple
+  network interface controller (NIC) cards, configure the listener to the
+  specific IP address.
+
+  You can restrict the listener to listen on a specific IP address. Oracle
+  recommends that you specify the specific IP addresses on these types of
+  computers, rather than allowing the listener to listen on all IP addresses.
+  Restricting the listener to specific IP addresses helps to prevent an intruder
+  from stealing a TCP end point from under the listener process.
+
+  5. Restrict the privileges of the listener, so that it cannot read or write
+  files in the database or the Oracle server address space.
+
+  The default configuration for external procedures does not require a network
+  listener to work with Oracle Database and the extproc agent. The extproc agent
+  is spawned directly by Oracle Database and eliminates the risks that the
+  extproc agent might be spawned by Oracle Listener unexpectedly. This default
+  configuration is recommended for maximum security. For more information about
+  securing external procedures see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+  However, the extproc agent can be configured to be spawned by a listener. In
+  that case (not recommended) the listener should have restricted privileges.
+
+  6. Use a firewall, IAW DoD network policy and guidance.
+
+  Appropriately placed and configured firewalls can prevent outside access to
+  your databases.
+
+  7. Prevent unauthorized administration of the Oracle listener.
+
+  Local administration of the listener is secure by default through the local
+  operating system. Therefore configuring a password is neither required nor
+  recommended for secure local administration. However, a password can be
+  configured for the listener to provide security for administrative operations,
+  such as starting or stopping the listener, viewing a list of supported
+  services, or saving changes to the Listener Control configuration.
+
+  By default, Oracle Net Listener permits only local administration for security
+  reasons. As a policy, the listener can be administered only by the user who
+  started it. This is enforced through local operating system authentication. For
+  example, if user1 starts the listener, then only user1 can administer it. Any
+  other user trying to administer the listener gets an error. The super user is
+  the only exception.
+
+  Oracle recommends that you perform listener administration in the default mode
+  (secure by means of local operating system authentication), and access the
+  system remotely using a remote logon. Oracle Enterprise Manager Cloud Control
+  can also be used for remote administration.
+
+  8. Encrypt network traffic.  (Mandatory for sensitive data and optional for
+  non-sensitive, as covered in other STIG requirements.)
+
+  Where applicable, use Oracle network data encryption to encrypt network traffic
+  among clients, databases, and application servers.
+
+  9. Set Connect Rate to organization defined limit. (Also required by
+  O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+  The connection rate limiter feature in Oracle Net Listener enables a database
+  administrator to limit the number of new connections handled by the listener.
+  When this feature is enabled, Oracle Net Listener imposes a user-specified
+  maximum limit on the number of new connections handled by the listener every
+  second.
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+  LISTENER&#x3D;
+  (ADDRESS_LIST&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+  )
+
+  10. Setup Valid Node Checking.
+  (See also O121-BP-025600.)
+
+  Valid node checking is a security feature that protects DBMS instances from
+  malevolent or errant Oracle Net connections over TCP&#x2F;IP, without the need for a
+  firewall or IP address filtering at the operating system-level. The feature is
+  controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes,
+  and tcp.excluded_nodes.
+
+  Modify the sqlnet.ora file manually
+  TCP.VALIDNODE_CHECKING&#x3D;yes
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  If this parameter is set to yes, then incoming connections are allowed only if
+  they originate from a node that conforms to the list specified by
+  TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes (no is the default).
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes.
+
+  Modify the listener.ora file manually
+
+  TCP.EXCLUDED_NODES Syntax:
+  TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25,
+  172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+  TCP.INVITED_NODES Syntax:
+  TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*,
+  2001:DB8:200C:433B&#x2F;32)
+
+  Usage Notes:
+
+  Use TCP.INVITED_NODES to specify which clients are allowed access to the
+  database. This list takes precedence over the TCP.EXCLUDED_NODES parameter if
+  both lists are present. These parameters can use wildcards for IPv4 addresses
+  and CIDR notation for IPv4 and IPv6 addresses.
+
+  11. Apply Listener Security Patches.
+  (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+  Critical Patch Updates are cumulative. Therefore, the latest patch will contain
+  all previous security patches for the Listener.
+
+  12. Ensure that listener logging is turned on.
+
+  Listener logging is on by default. If logging is not on, configure logging for
+  all listeners in order to capture Listener commands and brute force password
+  attacks.
+
+  13. Monitor the listener logfile.
+
+  The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors,
+  which may signify attacks or inappropriate activity. Monitor the logfile and
+  generate an alert whenever these errors are encountered.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))&#39; }
+    its(&#39;content&#39;) {
+      should include &#39;LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))&#39;
+    }
+    its(&#39;content&#39;) { should include &#39;CONNECTION_RATE_LISTENER&#x3D;10&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_MAX_FAILED_LOGIN_ATTEMPTS&#x3D;3&#39; }
+    its(&#39;content&#39;) { should include &#39;ADMIN_RESTRICTIONS_LISTENER&#x3D;ON&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_PROTOCOL_ERROR_TRACE_ACTION&#x3D;TRACE&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.INVITED_NODES&#x3D;&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.EXCLUDED_NODES&#x3D;&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;TCP.VALIDNODE_CHECKING&#x3D;yes&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61817"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61817"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61817</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61817
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61817"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61817"
+            >
+              <!-- Result description -->
+              In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61817</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61817&#39; do
+  title &quot;The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.&quot;
+  desc &quot;In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000247-DB-000134&#39;
+  tag &quot;gid&quot;: &#39;V-61817&#39;
+  tag &quot;rid&quot;: &#39;SV-76307r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67733r8_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001095&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select DISTINCT b.limit from dba_users a, dba_profiles b where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user profile limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61819"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61819"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61819</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-6
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002394
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61819
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-6
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002394
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61819"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61819"
+            >
+              <!-- Result description -->
+              Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61819</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-6, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61819&#39; do
+  title &quot;The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.&quot;
+  desc &quot;Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000248-DB-000135&#39;
+  tag &quot;gid&quot;: &#39;V-61819&#39;
+  tag &quot;rid&quot;: &#39;SV-76309r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67735r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002394&#39;]
+  tag &quot;nist&quot;: [&#39;SC-6&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select
+    DISTINCT b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61843"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61843"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61843</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61843
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61843"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61843"
+            >
+              <!-- Result description -->
+              To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61843</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61843&#39; do
+  title &quot;Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.&quot;
+  desc &quot;To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61843&#39;
+  tag &quot;rid&quot;: &#39;SV-76333r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67759r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.&quot;
+  describe &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39; do
+    skip &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61845"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61845"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61845</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61845
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61845"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61845"
+            >
+              <!-- Result description -->
+              The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61845</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\oracle\product\12.1.0\db_1\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61845&#39; do
+  title &quot;When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.&quot;
+  desc &quot;The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61845&#39;
+  tag &quot;rid&quot;: &#39;SV-76335r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015602&#39;
+  tag &quot;fix_id&quot;: &#39;F-67761r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.&quot;
+  describe &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39; do
+    skip &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61849"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61849"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61849</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61849
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS default accounts must be protected from misuse.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61849"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61849"
+            >
+              <!-- Result description -->
+              The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS default accounts are protected from misuse</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61849</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS default accounts must be protected from misuse.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61849&#39; do
+  title &#39;DBMS default accounts must be protected from misuse.&#39;
+  desc  &quot;The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000023&#39;
+  tag &quot;gid&quot;: &#39;V-61849&#39;
+  tag &quot;rid&quot;: &#39;SV-76339r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-004701&#39;
+  tag &quot;fix_id&quot;: &#39;F-67765r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.&quot;
+  describe &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39; do
+    skip &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61853"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61853"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61853</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61853
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61853"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61853"
+            >
+              <!-- Result description -->
+              It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61853</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61853&#39; do
+  title &quot;Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.&quot;
+  desc &quot;It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, \&quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.\&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000109-DB-000049&#39;
+  tag &quot;gid&quot;: &#39;V-61853&#39;
+  tag &quot;rid&quot;: &#39;SV-76343r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-008601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67769r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1&quot;
+  describe &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39; do
+    skip &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61865"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61865"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61865</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61865
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of the DBMS software installation account must be restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61865"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61865"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the use of the DBMS software installation account is restricted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61865</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of the DBMS software installation account must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61865&#39; do
+  title &#39;Use of the DBMS software installation account must be restricted.&#39;
+  desc  &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000022&#39;
+  tag &quot;gid&quot;: &#39;V-61865&#39;
+  tag &quot;rid&quot;: &#39;SV-76355r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-004600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67781r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.&quot;
+  describe &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39; do
+    skip &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61867"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61867"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61867</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61867
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61867"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61867"
+            >
+              <!-- Result description -->
+              Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61867</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61867&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+          skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61867&#39; do
+  title &quot;Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-61867&#39;
+  tag &quot;rid&quot;: &#39;SV-76357r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67783r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61869"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61869"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61869</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61869
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61869"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61869"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61869</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61869&#39; do
+  title &quot;The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000207&#39;
+  tag &quot;gid&quot;: &#39;V-61869&#39;
+  tag &quot;rid&quot;: &#39;SV-76359r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-011200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67785r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot; do
+      skip &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA&#39;s users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;oracle_dbas&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61871"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61871"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61871</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001844
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61871
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001844
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61871"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61871"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61871</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61871&#39; do
+  title &quot;The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000102-DB-000045&#39;
+  tag &quot;gid&quot;: &#39;V-61871&#39;
+  tag &quot;rid&quot;: &#39;SV-76361r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-008100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67787r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001844&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61873"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61873"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61873</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61873
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS software installation account must be restricted to
+  authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61873"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61873"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61873</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software installation account must be restricted to
+  authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61873&#39; do
+  title &quot;The DBMS software installation account must be restricted to
+  authorized users.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000198&#39;
+  tag &quot;gid&quot;: &#39;V-61873&#39;
+  tag &quot;rid&quot;: &#39;SV-76363r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67789r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39; do
+
+    skip &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61875"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61875"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61875</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61875
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61875"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61875"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61875</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61875&#39; do
+  title &quot;Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000199&#39;
+  tag &quot;gid&quot;: &#39;V-61875&#39;
+  tag &quot;rid&quot;: &#39;SV-76365r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67791r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.&quot;
+  describe &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39; do
+    skip &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61877"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61877"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61877</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61877
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS software libraries must be periodically backed up.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61877"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61877"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software libraries are periodically backed up</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61877</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software libraries must be periodically backed up.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure backups to include all DBMS application and third-party
+  database application software libraries.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61877&#39; do
+  title &#39;The DBMS software libraries must be periodically backed up.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000100&#39;
+  tag &quot;gid&quot;: &#39;V-61877&#39;
+  tag &quot;rid&quot;: &#39;SV-76367r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67793r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure backups to include all DBMS application and third-party
+  database application software libraries.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39; do
+    skip &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61879"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61879"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61879</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61879
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61879"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61879"
+            >
+              <!-- Result description -->
+              To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61879</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61879&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).&quot;
+  desc &quot;To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000148-DB-000103&#39;
+  tag &quot;gid&quot;: &#39;V-61879&#39;
+  tag &quot;rid&quot;: &#39;SV-76369r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67795r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000764&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61881"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61881"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61881</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61881
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61881"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61881"
+            >
+              <!-- Result description -->
+              Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61881</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-8, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61881&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).&quot;
+  desc  &quot;Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000180-DB-000115&#39;
+  tag &quot;gid&quot;: &#39;V-61881&#39;
+  tag &quot;rid&quot;: &#39;SV-76371r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-015800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67797r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000804&#39;]
+  tag &quot;nist&quot;: [&#39;IA-8&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+    users (or processes acting on behalf of non-organizational users).&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61883"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61883"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61883</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61883
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must separate user functionality (including user interface
+  services) from database management functionality.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61883"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61883"
+            >
+              <!-- Result description -->
+              Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61883</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-2, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61883&#39; do
+  title &quot;The DBMS must separate user functionality (including user interface
+  services) from database management functionality.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000211-DB-000122&#39;
+  tag &quot;gid&quot;: &#39;V-61883&#39;
+  tag &quot;rid&quot;: &#39;SV-76373r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67799r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001082&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39; do
+    skip &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61885"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61885"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61885</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001083
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61885
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001083
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61885"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61885"
+            >
+              <!-- Result description -->
+              Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61885</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61885&#39; do
+  title &quot;The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000212-DB-000123&#39;
+  tag &quot;gid&quot;: &#39;V-61885&#39;
+  tag &quot;rid&quot;: &#39;SV-76375r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67801r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001083&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61887"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61887"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61887</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61887
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61887"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61887"
+            >
+              <!-- Result description -->
+              Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61887</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61887&#39; do
+  title &quot;The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.&quot;
+  desc &quot;Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000080-DB-000063&#39;
+  tag &quot;gid&quot;: &#39;V-61887&#39;
+  tag &quot;rid&quot;: &#39;SV-76377r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P3-006200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67803r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000166&#39;]
+  tag &quot;nist&quot;: [&#39;AU-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61963"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61963"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61963</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61963
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61963"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61963"
+            >
+              <!-- Result description -->
+              Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61963</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61963&#39; do
+  title &quot;The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.&quot;
+  desc &quot;Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61963&#39;
+  tag &quot;rid&quot;: &#39;SV-76453r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67883r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.&quot;
+  describe &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39; do
+    skip &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61965"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61965"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61965</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61965
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61965"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61965"
+            >
+              <!-- Result description -->
+              The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61965</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\WINDOWS\system32\config\EventLogs\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61965&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61965&#39; do
+  title &quot;The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.&quot;
+  desc &quot;The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61965&#39;
+  tag &quot;rid&quot;: &#39;SV-76455r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025101&#39;
+  tag &quot;fix_id&quot;: &#39;F-67885r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\\WINDOWS\\system32\\config\\EventLogs\\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database audit trail&#39; do
+    subject { audit_trail }
+    it { should_not cmp &#39;NONE&#39; }
+  end
+
+  get_audit_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  audit_file_dest &#x3D; get_audit_file_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{audit_file_dest}&#x2F; |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61967"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61967"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61967</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61967
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61967"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61967"
+            >
+              <!-- Result description -->
+              Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61967</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Limit concurrent connections for each system account to a number less than or equal to the 
+    organization-defined number of sessions using the following SQL. Create profiles that conform to the 
+    requirements. Assign users to the appropriate profile.
+
+    The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy the STIG 
+    requirements pertaining to the profile parameters. Oracle recommends that this profile be customized with 
+    any site-specific requirements and assigned to all users where applicable.  Note: It remains necessary to 
+    create a customized replacement for the password validation function, ORA12C_STRONG_VERIFY_FUNCTION, if 
+    relying on this technique to verify password complexity.
+
+    The defaults for ORA_STIG_PROFILE are set as follows:
+    Resource Name                   Limit
+    -------------                   ------
+    COMPOSITE_LIMIT                 DEFAULT
+    SESSIONS_PER_USER               DEFAULT
+    CPU_PER_SESSION                 DEFAULT
+    CPU_PER_CALL                    DEFAULT
+    LOGICAL_READS_PER_SESSION       DEFAULT
+    LOGICAL_READS_PER_CALL          DEFAULT
+    IDLE_TIME                          15
+    CONNECT_TIME                    DEFAULT
+    PRIVATE_SGA                     DEFAULT
+    FAILED_LOGIN_ATTEMPTS               3 
+    PASSWORD_LIFE_TIME                 60
+    PASSWORD_REUSE_TIME               365
+    PASSWORD_REUSE_MAX                 10
+    PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+    PASSWORD_LOCK_TIME              UNLIMITED
+    PASSWORD_GRACE_TIME                 5
+
+    Change the value of SESSIONS_PER_USER (along with the other parameters, where relevant) from UNLIMITED to 
+    CMS-compliant, site-specific requirements and then assign users to the profile.
+    ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+    To assign the user to the profile do the following:
+    ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61967&#39; do
+    desc &#39;fix&#39;, &#39;Limit concurrent connections for each system account to a number less than or equal to the 
+    organization-defined number of sessions using the following SQL. Create profiles that conform to the 
+    requirements. Assign users to the appropriate profile.
+
+    The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy the STIG 
+    requirements pertaining to the profile parameters. Oracle recommends that this profile be customized with 
+    any site-specific requirements and assigned to all users where applicable.  Note: It remains necessary to 
+    create a customized replacement for the password validation function, ORA12C_STRONG_VERIFY_FUNCTION, if 
+    relying on this technique to verify password complexity.
+
+    The defaults for ORA_STIG_PROFILE are set as follows:
+    Resource Name                   Limit
+    -------------                   ------
+    COMPOSITE_LIMIT                 DEFAULT
+    SESSIONS_PER_USER               DEFAULT
+    CPU_PER_SESSION                 DEFAULT
+    CPU_PER_CALL                    DEFAULT
+    LOGICAL_READS_PER_SESSION       DEFAULT
+    LOGICAL_READS_PER_CALL          DEFAULT
+    IDLE_TIME                          15
+    CONNECT_TIME                    DEFAULT
+    PRIVATE_SGA                     DEFAULT
+    FAILED_LOGIN_ATTEMPTS               3 
+    PASSWORD_LIFE_TIME                 60
+    PASSWORD_REUSE_TIME               365
+    PASSWORD_REUSE_MAX                 10
+    PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+    PASSWORD_LOCK_TIME              UNLIMITED
+    PASSWORD_GRACE_TIME                 5
+
+    Change the value of SESSIONS_PER_USER (along with the other parameters, where relevant) from UNLIMITED to 
+    CMS-compliant, site-specific requirements and then assign users to the profile.
+    ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+    To assign the user to the profile do the following:
+    ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61967&#39; do
+  title &quot;The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.&quot;
+  desc  &quot;Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000001-DB-000031&#39;
+  tag &quot;gid&quot;: &#39;V-61967&#39;
+  tag &quot;rid&quot;: &#39;SV-76457r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-000100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67887r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000054&#39;]
+  tag &quot;nist&quot;: [&#39;AC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Limit concurrent connections for each system account to a number
+  less than or equal to the organization-defined number of sessions using the
+  following SQL. Create profiles that conform to the requirements. Assign users
+  to the appropriate profile.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  The defaults for ORA_STIG_PROFILE are set as follows:
+  Resource Name                   Limit
+  -------------                   ------
+  COMPOSITE_LIMIT                 DEFAULT
+  SESSIONS_PER_USER               DEFAULT
+  CPU_PER_SESSION                 DEFAULT
+  CPU_PER_CALL                    DEFAULT
+  LOGICAL_READS_PER_SESSION       DEFAULT
+  LOGICAL_READS_PER_CALL          DEFAULT
+  IDLE_TIME                          15
+  CONNECT_TIME                    DEFAULT
+  PRIVATE_SGA                     DEFAULT
+  FAILED_LOGIN_ATTEMPTS               3
+  PASSWORD_LIFE_TIME                 60
+  PASSWORD_REUSE_TIME               365
+  PASSWORD_REUSE_MAX                 10
+  PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME              UNLIMITED
+  PASSWORD_GRACE_TIME                 5
+
+  Change the value of SESSIONS_PER_USER (along with the other parameters, where
+  relevant) from UNLIMITED to DoD-compliant, site-specific requirements and then
+  assign users to the profile.
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+  To assign the user to the profile do the following:
+  ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  concurrent_sessions &#x3D; sql.query(&quot;SELECT limit FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database number of concurrent sessions allowed&#39; do
+    subject { concurrent_sessions }
+    it { should_not include &#39;UNLIMITED&#39; }
+    it { should_not include &#39;DEFAULT&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61969"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61969"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61969</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001878
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61969
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide a report generation capability for audit
+  reduction data.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001878
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61969"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61969"
+            >
+              <!-- Result description -->
+              In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61969</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide a report generation capability for audit
+  reduction data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61969&#39; do
+  title &quot;The system must provide a report generation capability for audit
+  reduction data.&quot;
+  desc  &quot;In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000114-DB-000054&#39;
+  tag &quot;gid&quot;: &#39;V-61969&#39;
+  tag &quot;rid&quot;: &#39;SV-76459r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67889r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001878&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.&quot;
+  describe &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39; do
+    skip &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-68863"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-68863"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-68863</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-68863
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-68863"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-68863"
+            >
+              <!-- Result description -->
+              Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-68863</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-68863&#39; do
+  title &quot;Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-68863&#39;
+  tag &quot;rid&quot;: &#39;SV-83467r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010710&#39;
+  tag &quot;fix_id&quot;: &#39;F-75045r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.&quot;
+  describe &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39; do
+    skip &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61409"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61409"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61409</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61409
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61409"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61409"
+            >
+              <!-- Result description -->
+              Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is retained for at least one year</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is retained for at least one year</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61409</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement an audit retention policy and 
+    procedures.
+
+    It is recommended that the most recent ninety days of audit logs remain 
+    available online.
+
+    After thirty ninety days, the audit logs may be maintained off-line.
+
+    Online maintenance provides for a more timely capability and inclination to         
+    investigate suspicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61409&#39; do
+  title &#39;Audit trail data must be retained for at least one year.&#39;
+  desc  &quot;Without preservation, a complete discovery of an attack or suspicious
+  activity may not be determined.  DBMS audit data also contributes to the
+  complete investigation of unauthorized activity and needs to be included in
+  audit retention plans and procedures.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61409&#39;
+  tag &quot;rid&quot;: &#39;SV-75899r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67325r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review and verify the implementation of an audit trail
+  retention policy.
+
+  Verify that audit data is maintained for a minimum of one year.
+
+  If audit data is not maintained for a minimum of one year, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61411"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61411"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61411</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61411
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to default accounts used to support replication must be
+  restricted to authorized DBAs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61411"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61411"
+            >
+              <!-- Result description -->
+              Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61411</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61411&#39; do
+  title &quot;Access to default accounts used to support replication must be
+  restricted to authorized DBAs.&quot;
+  desc &quot;Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61411&#39;
+  tag &quot;rid&quot;: &#39;SV-75901r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67327r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+  tag &quot;fix&quot;: &quot;Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.&quot;
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61413"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61413"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61413</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61413
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle instance names must not contain Oracle version numbers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61413"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61413"
+            >
+              <!-- Result description -->
+              Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61413</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle instance names must not contain Oracle version numbers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61413&#39; do
+  title &#39;Oracle instance names must not contain Oracle version numbers.&#39;
+  desc  &quot;Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61413&#39;
+  tag &quot;rid&quot;: &#39;SV-75903r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67329r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.&quot;
+  tag &quot;fix&quot;: &quot;Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+  db_instance_name &#x3D; sql.query(&#39;select instance_name from v$instance;&#39;).column(&#39;instance_name&#39;)
+
+  describe &#39;The oracle database instance name&#39; do
+    subject { db_instance_name }
+    it { should_not include version.to_s }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61415"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61415"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61415</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61415
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Fixed user and public database links must be authorized for use.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61415"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61415"
+            >
+              <!-- Result description -->
+              Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61415</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Fixed user and public database links must be authorized for use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61415&#39; do
+  title &#39;Fixed user and public database links must be authorized for use.&#39;
+  desc  &quot;Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61415&#39;
+  tag &quot;rid&quot;: &#39;SV-75905r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67331r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61417"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61417"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61417</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61417
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61417"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61417"
+            >
+              <!-- Result description -->
+              Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61417</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61417&#39; do
+  title &quot;A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.&quot;
+  desc &quot;Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.&quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61417&#39;
+  tag &quot;rid&quot;: &#39;SV-75907r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67333r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.&quot;
+  tag &quot;fix&quot;: &quot;To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  controlfiles &#x3D; sql.query(&#39;select name from v$controlfile;&#39;).column(&#39;name&#39;)
+  partitions &#x3D; []
+
+  controlfiles.each do |files|
+    file &#x3D; files[1..-1]
+    get_pos_slash &#x3D; file.index(&#39;&#x2F;&#39;)
+    partition &#x3D; file[0..get_pos_slash]
+    partitions.push(partition)
+  end
+
+  control_file1_partition &#x3D; partitions[0]
+  control_file2_partition &#x3D; partitions[1]
+
+  describe &quot;The oracable control file permission: #{control_file1_partition}&quot; do
+    subject { control_file1_partition }
+    it { should_not cmp control_file2_partition }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61419"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61419"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61419</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61419
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61419"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61419"
+            >
+              <!-- Result description -->
+              The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61419</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61419&#39; do
+  title &quot;A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.&quot;
+  desc &quot;The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61419&#39;
+  tag &quot;rid&quot;: &#39;SV-75909r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67335r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&#39;select count(*) from V$LOG;&#39;).column(&#39;count(*)&#39;) do
+    it { should cmp &gt;&#x3D; 2 }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61421"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61421"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61421</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61421
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61421"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61421"
+            >
+              <!-- Result description -->
+              An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61421</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61421&#39; do
+  title &quot;The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.&quot;
+  desc &quot;An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61421&#39;
+  tag &quot;rid&quot;: &#39;SV-75911r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67337r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;&quot;).row(0).column(&quot;grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name&quot;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61425"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61425"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61425</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61425
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61425"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61425"
+            >
+              <!-- Result description -->
+              Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61425</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61425&#39; do
+  title &#39;The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.&#39;
+  desc  &quot;Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61425&#39;
+  tag &quot;rid&quot;: &#39;SV-75915r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67341r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_AUTHENT parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61427"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61427"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61427</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61427
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61427"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61427"
+            >
+              <!-- Result description -->
+              Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61427</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61427&#39; do
+  title &#39;The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.&#39;
+  desc  &quot;Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61427&#39;
+  tag &quot;rid&quot;: &#39;SV-75917r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67343r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_ROLES parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61429"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61429"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61429</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61429
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle SQL92_SECURITY parameter must be set to TRUE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61429"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61429"
+            >
+              <!-- Result description -->
+              The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61429</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle SQL92_SECURITY parameter must be set to TRUE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61429&#39; do
+  title &#39;The Oracle SQL92_SECURITY parameter must be set to TRUE.&#39;
+  desc  &quot;The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61429&#39;
+  tag &quot;rid&quot;: &#39;SV-75919r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67345r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database SQL92_SECURITY parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;TRUE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61431"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61431"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61431</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61431
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61431"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61431"
+            >
+              <!-- Result description -->
+              The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61431</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61431&#39; do
+  title &quot;The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.&quot;
+  desc &quot;The REMOTE_LOGIN_PASSWORDFILE setting of \&quot;NONE\&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  \&quot;EXCLUSIVE\&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to \&quot;EXCLUSIVE\&quot;, remote connections to the database as \&quot;internal\&quot;
+  or \&quot;as SYSDBA\&quot; are not logged to an individual account.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61431&#39;
+  tag &quot;rid&quot;: &#39;SV-75921r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67347r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;&quot;).column(&#39;value&#39;)
+
+  describe.one do
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;EXCLUSIVE&#39; }
+    end
+
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;NONE&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61433"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61433"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61433</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61433
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61433"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61433"
+            >
+              <!-- Result description -->
+              The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61433</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61433&#39; do
+  title &quot;System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61433&#39;
+  tag &quot;rid&quot;: &#39;SV-75923r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67349r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61435"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61435"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61435</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61435
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  System Privileges must not be granted to PUBLIC.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61435"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61435"
+            >
+              <!-- Result description -->
+              System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61435</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System Privileges must not be granted to PUBLIC.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61435&#39; do
+  title &#39;System Privileges must not be granted to PUBLIC.&#39;
+  desc  &quot;System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61435&#39;
+  tag &quot;rid&quot;: &#39;SV-75925r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67351r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;privilege&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61437"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61437"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61437</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61437
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61437"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61437"
+            >
+              <!-- Result description -->
+              The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61437</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61437&#39; do
+  title &quot;Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61437&#39;
+  tag &quot;rid&quot;: &#39;SV-75927r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67353r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_option &#x3D; sql.query(&quot;select grantee from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_admin_option.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_option.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61439"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61439"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61439</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61439
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Object permissions granted to PUBLIC must be restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61439"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61439"
+            >
+              <!-- Result description -->
+              Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: CTXSYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: XDB with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: CTXSYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: XDB with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61439</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Object permissions granted to PUBLIC must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61439&#39; do
+  title &#39;Object permissions granted to PUBLIC must be restricted.&#39;
+  desc  &quot;Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61439&#39;
+  tag &quot;rid&quot;: &#39;SV-75929r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67355r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_public_access &#x3D; sql.query(&quot;select DISTINCT owner from dba_tab_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).column(&#39;owner&#39;).uniq
+
+  if users_with_public_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with access to PUBLIC, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with access to PUBLIC&#39;
+    end
+  else
+    users_with_public_access.each do |user|
+      describe &quot;oracle user: #{user} with access to PUBLIC&quot; do
+        subject { user }
+        it { should be_in input(&#39;users_allowed_access_to_public&#39;)}
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61441"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61441"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61441</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61441
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle Listener must be configured to require administration
+  authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61441"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61441"
+            >
+              <!-- Result description -->
+              Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61441</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle Listener must be configured to require administration
+  authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If &quot;Security &#x3D; OFF&quot; is displayed, this is a finding.
+
+  If &quot;Security &#x3D; ON: Local OS Authentication&quot; is displayed, this is not a
+  finding.
+
+  If &quot;Security &#x3D; ON: Password or Local OS Authentication&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61441&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+         skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61441&#39; do
+  title &quot;The Oracle Listener must be configured to require administration
+  authentication.&quot;
+  desc &quot;Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61441&#39;
+  tag &quot;rid&quot;: &#39;SV-75931r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67357r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If \&quot;Security &#x3D; OFF\&quot; is displayed, this is a finding.
+
+  If \&quot;Security &#x3D; ON: Local OS Authentication\&quot; is displayed, this is not a
+  finding.
+
+  If \&quot;Security &#x3D; ON: Password or Local OS Authentication\&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.&quot;
+  tag &quot;fix&quot;: &quot;By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.&quot;
+
+  listener_name &#x3D; command(&quot;ps -ef | grep tnslsnr | grep -v grep|awk &#39;{ print $9; }&#39;&quot;).stdout.strip
+
+  listener_status &#x3D; command(&quot;lsnrctl status #{listener_name}&quot;).stdout.strip
+
+  describe &#39;The Oracle Listener status&#39; do
+    subject { listener_status }
+    it { should_not include &#39;Security                  OFF&#39; }
+    it { should_not include &#39;Security                  ON: Password or Local OS Authentication&#39; }
+  end
+  describe listener_status do
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61443"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61443"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61443</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61443
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application role permissions must not be assigned to the Oracle PUBLIC
+  role.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61443"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61443"
+            >
+              <!-- Result description -->
+              Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61443</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61443&#39; do
+  title &quot;Application role permissions must not be assigned to the Oracle PUBLIC
+  role.&quot;
+  desc &quot;Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61443&#39;
+  tag &quot;rid&quot;: &#39;SV-75933r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67359r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;granted_role&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61445"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61445"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61445</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61445
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle application administration roles must be disabled if not
+  required and authorized.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61445"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61445"
+            >
+              <!-- Result description -->
+              Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61445</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle application administration roles must be disabled if not
+  required and authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61445&#39; do
+  title &quot;Oracle application administration roles must be disabled if not
+  required and authorized.&quot;
+  desc &quot;Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61445&#39;
+  tag &quot;rid&quot;: &#39;SV-75935r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67361r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dba_role &#x3D; sql.query(&quot;select grantee from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dba_role.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_dba_role.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_dba_role&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61447"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61447"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61447</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61447
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61447"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61447"
+            >
+              <!-- Result description -->
+              Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61447</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure communications between the DBMS and remote 
+       applications&#x2F;application servers to use CMS-approved encryption.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61447&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61447&#39; do
+  title &quot;Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  &quot;
+  desc &quot;Multi-tier systems may be configured with the database and connecting
+  middle-tier system located on an internal network, with the database located on
+  an internal network behind a firewall and the middle-tier system located in a
+  DMZ. In cases where either or both systems are located in the DMZ (or on
+  networks external to DoD), network communications between the systems must be
+  encrypted.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61447&#39;
+  tag &quot;rid&quot;: &#39;SV-75937r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67363r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure communications between the DBMS and remote
+  applications&#x2F;application servers to use DoD-approved encryption.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61449"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61449"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61449</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61449
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61449"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61449"
+            >
+              <!-- Result description -->
+              Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61449</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61449&#39; do
+  title &quot;Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.&quot;
+  desc &quot;Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61449&#39;
+  tag &quot;rid&quot;: &#39;SV-75939r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67365r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_jobs &#x3D; sql.query(&quot;select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;).column(&#39;job_name&#39;)
+
+  describe &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot; do
+    skip &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61451"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61451"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61451</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61451
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unauthorized database links must not be defined and active.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61451"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61451"
+            >
+              <!-- Result description -->
+              DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61451</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized database links must not be defined and active.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61451&#39; do
+  title &#39;Unauthorized database links must not be defined and active.&#39;
+  desc  &quot;DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61451&#39;
+  tag &quot;rid&quot;: &#39;SV-75941r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67367r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61453"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61453"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61453</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61453
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Sensitive information from production database exports must be
+  modified before import to a development database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61453"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61453"
+            >
+              <!-- Result description -->
+              Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61453</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Sensitive information from production database exports must be
+  modified before import to a development database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61453&#39; do
+  title &quot;Sensitive information from production database exports must be
+  modified before import to a development database.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers do not have a need to know to sensitive data. Any access
+  they may have to production data would be considered unauthorized access and
+  subject the sensitive data to unlawful or unauthorized disclosure. See DODD
+  8500.1 for a definition of Sensitive Information.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61453&#39;
+  tag &quot;rid&quot;: &#39;SV-75943r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67369r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.&quot;
+  describe &#39;A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database&#39; do
+    skip &#39;A manual review is required to ensure sensitive information from production database exports are
+    modified before import to a development database&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61455"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61455"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61455</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61455
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61455"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61455"
+            >
+              <!-- Result description -->
+              Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61455</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61455&#39; do
+  title &quot;Application user privilege assignment must be reviewed monthly or more
+  frequently to ensure compliance with least privilege and documented policy.&quot;
+  desc &quot;Users granted privileges not required to perform their assigned
+  functions are able to make unauthorized modifications to the production data or
+  database. Monthly or more frequent periodic review of privilege assignments
+  assures that organizational and&#x2F;or functional changes are reflected
+  appropriately.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61455&#39;
+  tag &quot;rid&quot;: &#39;SV-75945r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67371r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61457"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61457"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61457</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61457
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Audit trail data must be reviewed daily or more frequently.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61457"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61457"
+            >
+              <!-- Result description -->
+              Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is reviewed daily or more frequently</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is reviewed daily or more frequently</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61457</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit trail data must be reviewed daily or more frequently.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures to monitor
+  audit trail data daily.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61457&#39; do
+  title &#39;Audit trail data must be reviewed daily or more frequently.&#39;
+  desc  &quot;Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61457&#39;
+  tag &quot;rid&quot;: &#39;SV-75947r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67373r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  audit trail data daily.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61459"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61459"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61459</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61459
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61459"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61459"
+            >
+              <!-- Result description -->
+              The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_name is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_value is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSBACKUP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSDG is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_name is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_value is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSBACKUP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSDG is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61459</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the &quot;alter user&quot; for each affected user account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61459&#39; do
+  title &quot;Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.&quot;
+  desc  &quot;The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61459&#39;
+  tag &quot;rid&quot;: &#39;SV-75949r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67375r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the \&quot;alter user\&quot; for each affected user account.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  property_name &#x3D; sql.query(&quot;select property_name
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_name&#39;)
+
+  describe &#39;The oracle database property_name&#39; do
+    subject { property_name }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  property_value &#x3D; sql.query(&quot;select property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_value&#39;)
+
+  describe &#39;The oracle database property_value&#39; do
+    subject { property_value }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  users_with_system_tablespace &#x3D; sql.query(&quot;select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);&quot;).column(&#39;username&#39;).uniq
+  if users_with_system_tablespace.empty?
+    impact 0.0
+    describe &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_system_tablespace.each do |user|
+      describe &quot;oracle users with system tablespace: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_system_tablespace&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61461"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61461"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61461</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61461
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application owner accounts must have a dedicated application
+  tablespace.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61461"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61461"
+            >
+              <!-- Result description -->
+              Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61461</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application owner accounts must have a dedicated application
+  tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61461&#39; do
+  title &quot;Application owner accounts must have a dedicated application
+  tablespace.&quot;
+  desc &quot;Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61461&#39;
+  tag &quot;rid&quot;: &#39;SV-75951r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67377r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  application_owners &#x3D; sql.query(&quot;select distinct owner
+  from dba_SEGMENTS;&quot;).column(&#39;owner&#39;).uniq
+  if application_owners.empty?
+    impact 0.0
+    describe &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39;
+    end
+  else
+    application_owners.each do |user|
+      describe &quot;oracle db application owners: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_application_owners&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61463"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61463"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61463</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61463
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61463"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61463"
+            >
+              <!-- Result description -->
+              The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61463</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61463&#39; do
+  title &quot;The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.&quot;
+  desc  &quot;The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61463&#39;
+  tag &quot;rid&quot;: &#39;SV-75953r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67379r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_archive_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database log_archive_dest parameter&#39; do
+    subject { log_archive_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  parameter &#x3D; sql.query(&quot;select DISTINCT value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database value for log_archive_dest parameter&#39; do
+    subject { parameter }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  db_recovery_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;&quot;).column(&#39;value&#39;).uniq
+
+  describe &#39;The oracle database db_recovery_file_dest parameter&#39; do
+    subject { db_recovery_file_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61465"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61465"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61465</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61465
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61465"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61465"
+            >
+              <!-- Result description -->
+              The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61465</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61465&#39; do
+  title &quot;The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.&quot;
+  desc  &quot;The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61465&#39;
+  tag &quot;rid&quot;: &#39;SV-75955r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67381r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database _TRACE_FILES_PUBLIC parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;TRUE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61467"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61467"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61467</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61467
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61467"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61467"
+            >
+              <!-- Result description -->
+              Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61467</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61467&#39; do
+  title &quot;Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.&quot;
+  desc &quot;Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61467&#39;
+  tag &quot;rid&quot;: &#39;SV-75957r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67383r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+
+  unlocked_accounts &#x3D; sql.query(&quot;select distinct o.owner from dba_objects o, dba_users u
+  where
+   o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;&quot;).column(&#39;owner&#39;).uniq
+  if unlocked_accounts.empty?
+    impact 0.0
+    describe &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39; do
+      skip &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39;
+    end
+  else
+    unlocked_accounts.each do |user|
+      describe &quot;oracle user: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_unlocked_oracledb_accounts&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61487"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61487"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61487</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61487
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61487"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61487"
+            >
+              <!-- Result description -->
+              Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61487</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61487&#39; do
+  title &quot;DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.&quot;
+  desc &quot;Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61487&#39;
+  tag &quot;rid&quot;: &#39;SV-75977r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67403r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.&quot;
+  tag &quot;fix&quot;: &quot;Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.&#39; do
+    skip &#39;A manual review is required to ensure DBMS production application and data directories are protected
+  from developers on shared production&#x2F;development DBMS host systems.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61489"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61489"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61489</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61489
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of the DBMS installation account must be logged.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61489"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61489"
+            >
+              <!-- Result description -->
+              The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61489</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of the DBMS installation account must be logged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61489&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61489&#39; do
+  title &#39;Use of the DBMS installation account must be logged.&#39;
+  desc  &quot;The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61489&#39;
+  tag &quot;rid&quot;: &#39;SV-75979r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67405r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.&quot;
+  describe command(&quot;grep -ie &#39;^[^#]*NOPASSWD&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe command(&quot;grep -ie &#39;^[^#]*!authenticate&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;sudoers\s+\-p\s+wa\s+\-k\s+[-\w]+\s*$&#x2F;) }
+  end
+  describe sshd_config do
+    its(&#39;PrintLastLog&#39;) { should be_nil.or eq &#39;yes&#39; }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;group\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;passwd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;gshadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;shadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;security\&#x2F;opasswd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61491"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61491"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61491</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61491
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61491"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61491"
+            >
+              <!-- Result description -->
+              The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61491</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure all related application components and the DBMS host platform 
+         in accordance with the applicable CMS ARS.
+
+         Regularly audit the security configuration of related applications and the host 
+         platform to confirm continued compliance with security requirements.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61491&#39; do
+  title &quot;The DBMS host platform and other dependent applications must be
+  configured in compliance with applicable STIG requirements.&quot;
+  desc &quot;The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61491&#39;
+  tag &quot;rid&quot;: &#39;SV-75981r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67407r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure all related application components and the DBMS host
+  platform in accordance with the applicable DoD STIG.
+
+  Regularly audit the security configuration of related applications and the host
+  platform to confirm continued compliance with security requirements.&quot;
+  describe &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39; do
+    skip &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61493"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61493"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61493</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61493
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61493"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61493"
+            >
+              <!-- Result description -->
+              Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61493</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61493&#39; do
+  title &quot;Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.&quot;
+  desc &quot;Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61493&#39;
+  tag &quot;rid&quot;: &#39;SV-75983r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67409r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61495"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61495"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61495</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61495
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The database must not be directly accessible from public or
+  unauthorized networks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61495"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61495"
+            >
+              <!-- Result description -->
+              Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61495</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The database must not be directly accessible from public or
+  unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61495&#39; do
+  title &quot;The database must not be directly accessible from public or
+  unauthorized networks.&quot;
+  desc &quot;Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61495&#39;
+  tag &quot;rid&quot;: &#39;SV-75985r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67411r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.&quot;
+  describe &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39; do
+    skip &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61497"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61497"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61497</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61497
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ISSM must review changes to DBA role assignments.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61497"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61497"
+            >
+              <!-- Result description -->
+              Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61497</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ISSM must review changes to DBA role assignments.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61497&#39; do
+  title &#39;The ISSM must review changes to DBA role assignments.&#39;
+  desc  &quot;Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61497&#39;
+  tag &quot;rid&quot;: &#39;SV-75987r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67413r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61499"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61499"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61499</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61499
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61499"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61499"
+            >
+              <!-- Result description -->
+              Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61499</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61499&#39; do
+  title &quot;Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.&quot;
+  desc &quot;Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61499&#39;
+  tag &quot;rid&quot;: &#39;SV-75989r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67415r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.&quot;
+  describe &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39; do
+    skip &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61501"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61501"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61501</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61501
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61501"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61501"
+            >
+              <!-- Result description -->
+              Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61501</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61501&#39; do
+  title &quot;Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61501&#39;
+  tag &quot;rid&quot;: &#39;SV-75991r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67417r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.&quot;
+  describe &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39; do
+    skip &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61503"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61503"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61503</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61503
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61503"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61503"
+            >
+              <!-- Result description -->
+              A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61503</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled &quot;SSN&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61503&#39; do
+  title &quot;Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.&quot;
+  desc &quot;A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61503&#39;
+  tag &quot;rid&quot;: &#39;SV-75993r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67419r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled \&quot;SSN\&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.&quot;
+  describe &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39; do
+    skip &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61507"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61507"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61507</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61507
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61507"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61507"
+            >
+              <!-- Result description -->
+              Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61507</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61507&#39; do
+  title &quot;Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.&quot;
+  desc &quot;Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61507&#39;
+  tag &quot;rid&quot;: &#39;SV-75997r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67423r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61509"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61509"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61509</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61509
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must not share a host supporting an independent security
+  service.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61509"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61509"
+            >
+              <!-- Result description -->
+              The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61509</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must not share a host supporting an independent security
+  service.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61509&#39; do
+  title &quot;The DBMS must not share a host supporting an independent security
+  service.&quot;
+  desc &quot;The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61509&#39;
+  tag &quot;rid&quot;: &#39;SV-75999r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67425r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.&quot;
+  tag &quot;fix&quot;: &quot;Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service&#39; do
+    skip &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+   service&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61511"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61511"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61511</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61511
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to DBMS software files and directories must not be granted to
+  unauthorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61511"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61511"
+            >
+              <!-- Result description -->
+              The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61511</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to DBMS software files and directories must not be granted to
+  unauthorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \Program Files\Oracle\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61511&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61511&#39; do
+  title &quot;Access to DBMS software files and directories must not be granted to
+  unauthorized users.&quot;
+  desc &quot;The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61511&#39;
+  tag &quot;rid&quot;: &#39;SV-76001r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67427r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \\Program Files\\Oracle\\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61513"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61513"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61513</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61513
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Replication accounts must not be granted DBA privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61513"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61513"
+            >
+              <!-- Result description -->
+              Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61513</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication accounts must not be granted DBA privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61513&#39; do
+  title &#39;Replication accounts must not be granted DBA privileges.&#39;
+  desc  &quot;Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61513&#39;
+  tag &quot;rid&quot;: &#39;SV-76003r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67429r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61515"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61515"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61515</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61515
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Network access to the DBMS must be restricted to authorized personnel.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61515"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61515"
+            >
+              <!-- Result description -->
+              Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61515</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network access to the DBMS must be restricted to authorized personnel.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (&quot;&#x2F;32&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a &quot;&#x2F;&quot; indicates acceptance by subnet mask where the
+  number after the &quot;&#x2F;&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61515&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61515&#39; do
+  title &#39;Network access to the DBMS must be restricted to authorized personnel.&#39;
+  desc  &quot;Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61515&#39;
+  tag &quot;rid&quot;: &#39;SV-76005r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67431r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (\&quot;&#x2F;32\&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a \&quot;&#x2F;\&quot; indicates acceptance by subnet mask where the
+  number after the \&quot;&#x2F;\&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.&quot;
+  tag &quot;fix&quot;: &quot;Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;tcp.validnode_checking&#x3D;YES&#39; }
+    its(&#39;content&#39;) { should match &#x2F;tcp.invited_nodes&#x3D;(\W*)&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61519"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61519"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61519</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61519
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Changes to configuration options must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61519"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61519"
+            >
+              <!-- Result description -->
+              The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61519</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Changes to configuration options must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61519&#39; do
+  title &#39;Changes to configuration options must be audited.&#39;
+  desc  &quot;The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61519&#39;
+  tag &quot;rid&quot;: &#39;SV-76009r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67435r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database AUDIT_SYS_OPERATIONS parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61523"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61523"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61523</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61523
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote DBMS administration must be documented and authorized or
+  disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61523"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61523"
+            >
+              <!-- Result description -->
+              Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61523</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote DBMS administration must be documented and authorized or
+  disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan for authorization, assignments and usage 
+         procedures for remote DBMS administration.
+
+         If remote administration of the DBMS is not documented or poorly documented, this 
+         is a finding.
+
+         If remote administration of the DBMS is not authorized and not disabled, this is 
+         a finding.
+         
+         If remote administration is to be performed from outside the CMS network, but is not 
+         done via an approved and properly configured VPN, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61523&#39; do
+  title &quot;Remote DBMS administration must be documented and authorized or
+  disabled.&quot;
+  desc &quot;Remote administration may expose configuration and sensitive data to
+  unauthorized viewing during transit across the network or allow unauthorized
+  administrative access to the DBMS to remote users.
+
+      For the purposes of this STIG, \&quot;Remote\&quot; means \&quot;outside the DoDIN.\&quot;
+  However, use of an approved and properly configured VPN counts as inside the
+  DoDIN.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61523&#39;
+  tag &quot;rid&quot;: &#39;SV-76013r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67439r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for authorization, assignments
+  and usage procedures for remote DBMS administration.
+
+  If remote administration of the DBMS is not documented or poorly documented,
+  this is a finding.
+
+  If remote administration of the DBMS is not authorized and not disabled, this
+  is a finding.
+
+  If remote administration is to be performed from outside the DoDIN, but is not
+  done via an approved and properly configured VPN, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61525"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61525"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61525</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61525
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61525"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61525"
+            >
+              <!-- Result description -->
+              Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61525</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61525&#39; do
+  title &quot;DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.&quot;
+  desc &quot;Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61525&#39;
+  tag &quot;rid&quot;: &#39;SV-76015r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67441r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.&quot;
+  tag &quot;fix&quot;: &quot;Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.&quot;
+  describe &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61527"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61527"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61527</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61527
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Changes to DBMS security labels must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61527"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61527"
+            >
+              <!-- Result description -->
+              Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61527</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Changes to DBMS security labels must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61527&#39; do
+  title &#39;Changes to DBMS security labels must be audited.&#39;
+  desc  &quot;Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61527&#39;
+  tag &quot;rid&quot;: &#39;SV-76017r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67443r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39;Changes to security label assignment is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Changes to security label assignment is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61529"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61529"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61529</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61529
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote database or other external access must use fully-qualified
+  names.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61529"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61529"
+            >
+              <!-- Result description -->
+              The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61529</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote database or other external access must use fully-qualified
+  names.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61529&#39; do
+  title &quot;Remote database or other external access must use fully-qualified
+  names.&quot;
+  desc  &quot;The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61529&#39;
+  tag &quot;rid&quot;: &#39;SV-76019r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67445r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;global_names&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database GLOBAL_NAMES parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61531"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61531"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61531</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61531
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61531"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61531"
+            >
+              <!-- Result description -->
+              &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61531</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append &quot;&#x2F;diag&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61531&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61531&#39; do
+  title &quot;The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.&quot;
+  desc &#39;&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.&#39;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61531&#39;
+  tag &quot;rid&quot;: &#39;SV-76021r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67447r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append \&quot;&#x2F;diag\&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \\diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.&quot;
+  tag &quot;fix&quot;: &quot;Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_diagnostic_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;diagnostic_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  diagnostic_dest &#x3D; get_diagnostic_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{diagnostic_dest}&#x2F;diag |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61533"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61533"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61533</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61533
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote administration must be disabled for the Oracle connection
+  manager.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61533"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61533"
+            >
+              <!-- Result description -->
+              Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61533</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration must be disabled for the Oracle connection
+  manager.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61533&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61533&#39; do
+  title &quot;Remote administration must be disabled for the Oracle connection
+  manager.&quot;
+  desc  &quot;Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61533&#39;
+  tag &quot;rid&quot;: &#39;SV-76023r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67449r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;cman.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;REMOTE_ADMIN &#x3D; NO&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61535"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61535"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61535</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61535
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Network client connections must be restricted to supported versions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61535"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61535"
+            >
+              <!-- Result description -->
+              Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61535</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network client connections must be restricted to supported versions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  &quot;Database Net Services Reference&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61535&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61535&#39; do
+  title &#39;Network client connections must be restricted to supported versions.&#39;
+  desc  &quot;Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61535&#39;
+  tag &quot;rid&quot;: &#39;SV-76025r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67451r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied&quot;
+  tag &quot;fix&quot;: &quot;Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  \&quot;Database Net Services Reference\&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;11&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;11&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12a&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12a&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61537"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61537"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61537</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61537
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61537"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61537"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no dba users, therefore this control is NA</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no dba users, therefore this control is NA</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61537</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If &quot;root&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61537&#39; do
+  title &quot;DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000021&#39;
+  tag &quot;gid&quot;: &#39;V-61537&#39;
+  tag &quot;rid&quot;: &#39;SV-76027r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-004500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67453r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If \&quot;root\&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.&quot;
+
+  get_dba_users &#x3D; command(&#39;cat &#x2F;etc&#x2F;group | grep -i dba&#39;).stdout.strip.split(&quot;\n&quot;)
+  get_members_root_group &#x3D; command(&#39;groups root&#39;).stdout.strip.split(&quot;\n&quot;)
+
+  get_dba_users.each do |user|
+    describe &quot;The dba user: #{user} in &#x2F;etc&#x2F;group&quot; do
+      subject { user }
+      it { should_not cmp &#39;root&#39; }
+    end
+
+    get_members_root_group.each do |member|
+      describe &quot;The user: #{member} in the root group&quot; do
+        subject { member }
+        it { should_not cmp user.to_s }
+      end
+    end
+  end
+  if get_dba_users.empty?
+    describe &#39;There are no dba users, therefore this control is NA&#39; do
+      skip &#39;There are no dba users, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61539"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61539"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61539</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61539
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle software must be evaluated and patched against newly found
+  vulnerabilities.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61539"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61539"
+            >
+              <!-- Result description -->
+              Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61539</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61539&#39; do
+  title &quot;Oracle software must be evaluated and patched against newly found
+  vulnerabilities.&quot;
+  desc &quot;Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000205&#39;
+  tag &quot;gid&quot;: &#39;V-61539&#39;
+  tag &quot;rid&quot;: &#39;SV-76029r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-011100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67455r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  patches &#x3D; sql.query(&#39;SELECT patch_id from dba_registry_sqlpatch;&#39;).column(&#39;patch_id&#39;)
+
+  describe &#39;The oracle database installed patches&#39; do
+    subject { patches }
+    it { should_not cmp nil }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61541"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61541"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61541</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61541
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS default accounts must be assigned custom passwords.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61541"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61541"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61541</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS default accounts must be assigned custom passwords.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61541&#39; do
+  title &#39;DBMS default accounts must be assigned custom passwords.&#39;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000078&#39;
+  tag &quot;gid&quot;: &#39;V-61541&#39;
+  tag &quot;rid&quot;: &#39;SV-76031r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67457r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)&quot;
+  tag &quot;fix&quot;: &quot;Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sys_dba_users_with_defpwd &#x3D; sql.query(&#39; SELECT username FROM SYS.DBA_USERS_WITH_DEFPWD;&#39;).column(&#39;username&#39;).uniq
+
+  describe.one do
+    sys_dba_users_with_defpwd.each do |user|
+      describe &quot;The oracle system database user: #{user} with a default password&quot; do
+        subject { user }
+        it { should cmp &#39;XS$NULL&#39; }
+      end
+    end
+    
+    describe sys_dba_users_with_defpwd do
+      it { should be_empty }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61543"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61543"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61543</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000186
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61543
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000186
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61543"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61543"
+            >
+              <!-- Result description -->
+              The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61543</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61543&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61543&#39; do
+  title &quot;The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000176-DB-000068&#39;
+  tag &quot;gid&quot;: &#39;V-61543&#39;
+  tag &quot;rid&quot;: &#39;SV-76033r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67459r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000186&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61545"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61545"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61545</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61545
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61545"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61545"
+            >
+              <!-- Result description -->
+              Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61545</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61545&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61545&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.&quot;
+  desc &quot;Preventing the disclosure of transmitted information requires that
+  applications take measures to employ some form of cryptographic mechanism in
+  order to protect the information during transmission. This is usually achieved
+  through the use of Transport Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+      Alternative physical protection measures include Protected Distribution
+  Systems (PDS). PDS are used to transmit unencrypted classified NSI through an
+  area of lesser classification or control. Inasmuch as the classified NSI is
+  unencrypted, the PDS must provide adequate electrical, electromagnetic, and
+  physical safeguards to deter exploitation. Refer to NSTSSI No. 7003 for
+  additional details on a PDS.
+
+      Information in transmission is particularly vulnerable to attack. If the
+  DBMS does not employ cryptographic mechanisms preventing unauthorized
+  disclosure of information during transit, the information may be compromised.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000264-DB-000136&#39;
+  tag &quot;gid&quot;: &#39;V-61545&#39;
+  tag &quot;rid&quot;: &#39;SV-76035r5_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-019700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67461r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002421&#39;]
+  tag &quot;nist&quot;: [&#39;SC-8 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61553"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61553"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61553</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (10)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002186
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61553
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (10)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002186
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61553"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61553"
+            >
+              <!-- Result description -->
+              Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61553</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (10), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61553&#39; do
+  title &quot;The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.&quot;
+  desc &quot;Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000019-DB-000197&#39;
+  tag &quot;gid&quot;: &#39;V-61553&#39;
+  tag &quot;rid&quot;: &#39;SV-76043r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67469r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002186&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (10)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61555"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61555"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61555</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61555
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61555"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61555"
+            >
+              <!-- Result description -->
+              This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61555</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine if the database is utilizing any network 
+         protocols deemed nonsecure.  If the DBMS is not using any network protocols deemed nonsecure, 
+         this is not a finding.
+
+         If the database is utilizing protocols specified as nonsecure, verify the protocols are 
+         explicitly identified in the System Security Plan and that they are in support of specific 
+         operational requirements. If they are not identified in the SSP or are not supporting specific 
+         operational requirements, this is a finding.
+
+         If nonsecure network protocols are not being used but are not disabled in the DBMS&#39;s 
+         configuration, this is a finding.
+
+         After determining the site-specific operational requirements and which protocols are explicitly 
+         defined in the System Security Plan, check the $TNS_ADMIN setting for the location of the Oracle 
+         listener.ora file.  The listener.ora file is a configuration file for Oracle Net Listener that 
+         identifies the following:
+
+         A unique name for the listener, typically LISTENER
+         A protocol address that it is accepting connection requests on, and
+         A service it is listening for.
+         
+         If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed nonsecure, 
+         that is a finding.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+             (ADDRESS_LIST&#x3D;
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+         Protocol Parameters
+
+         The Oracle Listener and the Oracle Connection Manager are identified by protocol addresses. 
+         The information below contains the &quot;Protocol-Specific Parameters&quot; used by the Oracle protocol 
+         support.
+
+         Protocol-Specific Parameters
+         Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+         Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the service. Oracle 
+                                                       recommends using the service name or SID of the 
+                                                       service.
+         Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+         Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+         Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the Oracle server.
+         Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used to connect to the 
+                                                     database server.
+                                                     This is the same PIPE keyword specified on the server 
+                                                     with Named Pipes.  This name can be any name.
+
+         Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+            
+         Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+         Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+
+         Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+         Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+         Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+         Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+ 
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the value.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening port number.
+                                                        Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+                                                                (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable any network protocol listed as nonsecure in the PPSM documentation.
+
+         To disable the protocol deemed not secure, stop the listener by issuing the following command as the 
+         Oracle Software owner, typically Oracle.
+          $ lsnrctl stop
+         This will stop the listener.  Edit the LISTENER.ORA file and remove the protocols deemed not secure 
+         and restart the listener.
+
+         For example, if TCP was deemed as not secure, the listener.ora would need to be changed and the tcp 
+         entry would need to be removed.  That would only allow the listener to listen for an IPC connection.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+           (ADDRESS_LIST&#x3D;
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line and properly balance the parentheses -
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+          Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL portion of the connect 
+          string.  For example, if TCP was deemed as not secure and the listener.ora was changed to listen for an 
+          IPC connection the code below would be required:
+
+          net_service_name&#x3D;
+          (DESCRIPTION&#x3D;
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+          (CONNECT_DATA&#x3D;
+          (SERVICE_NAME&#x3D;sales.us.example.com)))</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61555&#39; do
+  title &quot;The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.&quot;
+  desc &quot;This requirement is related to remote access, but more specifically to
+  the networking protocols allowing systems to communicate. Remote access is any
+  access to an organizational information system by a user (or an information
+  system) communicating through an external, non-organization  controlled network
+  (e.g., the Internet). Examples of remote access methods include dial-up,
+  broadband, and wireless.
+
+      Some networking protocols allowing remote access may not meet security
+  requirements to protect data and components. Bluetooth and peer-to-peer
+  networking are examples of less than secure networking protocols.
+
+      The DoD Ports, Protocols, and Services Management (PPSM) program provides
+  implementation guidance on the use of IP protocols and application and data
+  services traversing the DoD Networks in a manner supporting net-centric
+  operations.
+
+      Applications implementing or utilizing remote access network protocols need
+  to ensure the application is developed and implemented in accordance with the
+  PPSM requirements. In situations where it has been determined that specific
+  operational requirements outweigh the risks of enabling an insecure network
+  protocol, the organization may pursue a risk acceptance.
+
+      Using protocols deemed nonsecure would compromise the ability of the DBMS
+  to operate in a secure fashion. The database must be able to disable network
+  protocols deemed nonsecure.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000020-DB-000194&#39;
+  tag &quot;gid&quot;: &#39;V-61555&#39;
+  tag &quot;rid&quot;: &#39;SV-76045r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67471r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the PPSM Technical Assurance List to acquire an
+  up-to-date list of network protocols deemed nonsecure.
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  Review DBMS settings to determine if the database is utilizing any network
+  protocols deemed nonsecure.  If the DBMS is not using any network protocols
+  deemed nonsecure, this is not a finding.
+
+  If the database is utilizing protocols specified as nonsecure in the PPSM,
+  verify the protocols are explicitly identified in the System Security Plan and
+  that they are in support of specific operational requirements. If they are not
+  identified in the SSP or are not supporting specific operational requirements,
+  this is a finding.
+
+  If nonsecure network protocols are not being used but are not disabled in the
+  DBMS&#39;s configuration, this is a finding.
+
+  After determining the site-specific operational requirements and which
+  protocols are explicitly defined in the System Security Plan, check the
+  $TNS_ADMIN setting for the location of the Oracle listener.ora file.  The
+  listener.ora file is a configuration file for Oracle Net Listener that
+  identifies the following:
+
+  A unique name for the listener, typically LISTENER
+  A protocol address that it is accepting connection requests on, and
+  A service it is listening for.
+
+  If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed
+  nonsecure, that is a finding.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Protocol Parameters
+
+  The Oracle Listener and the Oracle Connection Manager are identified by
+  protocol addresses. The information below contains the \&quot;Protocol-Specific
+  Parameters\&quot; used by the Oracle protocol support.
+
+  Protocol-Specific Parameters
+
+  Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+  Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the
+  service. Oracle recommends using the service name or SID of the service.
+  Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+  Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+  Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the
+  Oracle server.
+  Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used
+  to connect to the database server.
+  This is the same PIPE keyword specified on the server with Named Pipes.  This
+  name can be any name.
+  Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+
+  Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+  Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+  Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the
+  value.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or
+  IP address of the computer.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening
+  port number.
+
+  Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+          (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)&quot;
+  tag &quot;fix&quot;: &quot;Disable any network protocol listed as nonsecure in the PPSM
+  documentation.
+
+  To disable the protocol deemed not secure, stop the listener by issuing the
+  following command as the Oracle Software owner, typically Oracle.
+            $ lsnrctl stop
+  This will stop the listener.  Edit the LISTENER.ORA file and remove the
+  protocols deemed not secure and restart the listener.
+
+  For example, if TCP was deemed as not secure, the listener.ora would need to be
+  changed and the tcp entry would need to be removed.  That would only allow the
+  listener to listen for an IPC connection.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line
+  and properly balance the parentheses -
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL
+  portion of the connect string.  For example, if TCP was deemed as not secure
+  and the listener.ora was changed to listen for an IPC connection the code below
+  would be required:
+
+  net_service_name&#x3D;
+  (DESCRIPTION&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+  (CONNECT_DATA&#x3D;
+  (SERVICE_NAME&#x3D;sales.us.example.com)))&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61557"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61557"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61557</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000015
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61557
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must employ automated mechanisms for supporting Oracle user
+  account management.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000015
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61557"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61557"
+            >
+              <!-- Result description -->
+              A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61557</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must employ automated mechanisms for supporting Oracle user
+  account management.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61557&#39; do
+  title &quot;The system must employ automated mechanisms for supporting Oracle user
+  account management.&quot;
+  desc &quot;A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000023-DB-000001&#39;
+  tag &quot;gid&quot;: &#39;V-61557&#39;
+  tag &quot;rid&quot;: &#39;SV-76047r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67473r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000015&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.&quot;
+  describe &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39; do
+    skip &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61559"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61559"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61559</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61559
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61559"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61559"
+            >
+              <!-- Result description -->
+              Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61559</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61559&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.&quot;
+  desc &quot;Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000002&#39;
+  tag &quot;gid&quot;: &#39;V-61559&#39;
+  tag &quot;rid&quot;: &#39;SV-76049r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67475r6_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61561"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61561"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61561</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61561
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61561"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61561"
+            >
+              <!-- Result description -->
+              Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61561</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+         or temporary accounts, this is not a finding.
+
+         If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access mechanism, 
+         and not by Oracle, this is not a finding.
+
+         Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+         determine if the site utilizes a mechanism whereby temporary or emergency accounts can be terminated after 
+         an organization-defined time period. If not, this is a finding.
+
+         Check the profiles to see what the password_life_time is set to in the table dba_profiles. 
+         The password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+         in the RESOURCE_NAME column.
+
+         SQL&gt;select
+         profile,
+         resource_name,
+         resource_type,
+         limit
+         from dba_profiles
+         where upper(resource_name) like &quot;PASSWORD_LIFE_TIME&quot;;
+
+         Verify that the user in question is assigned to a profile with the PASSWORD_LIFE_TIME set to 60 days.  
+         If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If using database mechanisms to satisfy this requirement, use a profile with a distinctive name 
+         (for example, TEMPORARY_USERS), so that temporary users can be easily identified.  Whenever a temporary user 
+         account is created, assign it to this profile.
+
+         Create a job to lock accounts under this profile that are more than 60 days old, where n is the 
+         organization-defined time period.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61561&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.&quot;
+  desc &quot;Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000003&#39;
+  tag &quot;gid&quot;: &#39;V-61561&#39;
+  tag &quot;rid&quot;: &#39;SV-76051r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67477r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if the site utilizes a mechanism whereby
+  temporary or emergency accounts can be terminated after an organization-defined
+  time period. If not, this is a finding.
+
+  Check the profiles to see what the password_life_time is set to in the table
+  dba_profiles. The password_life_time is a value stored in the LIMIT column, and
+  identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME column.
+
+  SQL&gt;select
+  profile,
+  resource_name,
+  resource_type,
+  limit
+  from dba_profiles
+  where upper(resource_name) like &#39;PASSWORD_LIFE_TIME&#39;;
+
+  Verify that the user in question is assigned to a profile with the
+  PASSWORD_LIFE_TIME set to the amount of time the user is expected to be using
+  the password.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If using database mechanisms to satisfy this requirement, use a
+  profile with a distinctive name (for example, TEMPORARY_USERS), so that
+  temporary users can be easily identified.  Whenever a temporary user account is
+  created, assign it to this profile.
+
+  Create a job to lock accounts under this profile that are more than n days old,
+  where n is the organization-defined time period.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  if user_profiles.empty?
+    describe &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39; do
+      skip &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39;
+    end
+  end
+
+  if !user_profiles.empty?
+    user_profiles.each do |profile|
+      unless input(&#39;emergency_profile_list&#39;).include?(profile)
+      	describe &quot;The profile #{profile} &quot; do
+	  subject { profile }
+	  it &quot;should not be in the org-defined list of profiles for emergency or temporary account management&quot; do
+	    expect(subject).should_not be_in(input(&#39;emergency_profile_list&#39;)) 
+	  end
+        end
+	next
+      end
+      password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+      describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+        subject { password_life_time }
+        it { should cmp &lt;&#x3D; input(&#39;password_life_time&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61565"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61565"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61565</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61565
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account creation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61565"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61565"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61565</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account creation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61565&#39; do
+  title &#39;The DBMS must automatically audit account creation.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000026-DB-000005&#39;
+  tag &quot;gid&quot;: &#39;V-61565&#39;
+  tag &quot;rid&quot;: &#39;SV-76055r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67481r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000018&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account creation is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account creation is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61569"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61569"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61569</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61569
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must  automatically audit account modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61569"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61569"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61569</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must  automatically audit account modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61569&#39; do
+  title &#39;The DBMS must  automatically audit account modification.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000027-DB-000186&#39;
+  tag &quot;gid&quot;: &#39;V-61569&#39;
+  tag &quot;rid&quot;: &#39;SV-76059r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67485r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001403&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account modification is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account modification is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account modification&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61571"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61571"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61571</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001404
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61571
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001404
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61571"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61571"
+            >
+              <!-- Result description -->
+              When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61571</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61571&#39; do
+  title &quot;The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000028-DB-000187&#39;
+  tag &quot;gid&quot;: &#39;V-61571&#39;
+  tag &quot;rid&quot;: &#39;SV-76061r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67487r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001404&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account disabling is not being audited. &#39;
+    FROM dual
+    WHERE (SELECT Count(*)
+    FROM (select policy_name , audit_option from audit_unified_policies
+    WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+    and policy_name in (select policy_name from audit_unified_enabled_policies
+    where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+    OR (SELECT value
+    FROM v$option
+    WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account disabling is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account disabling actions&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61573"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61573"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61573</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001405
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61573
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account termination.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001405
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61573"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61573"
+            >
+              <!-- Result description -->
+              When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61573</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account termination.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61573&#39; do
+  title &#39;The DBMS must automatically audit account termination.&#39;
+  desc  &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000029-DB-000188&#39;
+  tag &quot;gid&quot;: &#39;V-61573&#39;
+  tag &quot;rid&quot;: &#39;SV-76063r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67489r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001405&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account termination is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account termination is not being audited&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account termination&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61575"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61575"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61575</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61575
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61575"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61575"
+            >
+              <!-- Result description -->
+              Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61575</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role &quot;User roles and privileges&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61575&#39; do
+  title &quot;The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.&quot;
+  desc &quot;Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000033-DB-000084&#39;
+  tag &quot;gid&quot;: &#39;V-61575&#39;
+  tag &quot;rid&quot;: &#39;SV-76065r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67491r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000213&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role \&quot;User roles and privileges\&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61577"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61577"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61577</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61577
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61577"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61577"
+            >
+              <!-- Result description -->
+              Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61577</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61577&#39; do
+  title &quot;The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&quot;
+  desc &quot;Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000036-DB-000174&#39;
+  tag &quot;gid&quot;: &#39;V-61577&#39;
+  tag &quot;rid&quot;: &#39;SV-76067r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67493r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+    allowing users to specify and control sharing by named individuals, groups of
+    individuals, or by both, limiting propagation of access rights and including or
+    excluding access to the granularity of a single user.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61579"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61579"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61579</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61579
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS processes or services must run under custom, dedicated OS
+  accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61579"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61579"
+            >
+              <!-- Result description -->
+              Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61579</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS processes or services must run under custom, dedicated OS
+  accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61579&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61579&#39; do
+  title &quot;DBMS processes or services must run under custom, dedicated OS
+  accounts.&quot;
+  desc &quot;Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000010&#39;
+  tag &quot;gid&quot;: &#39;V-61579&#39;
+  tag &quot;rid&quot;: &#39;SV-76069r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67495r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_&quot;
+  tag &quot;fix&quot;: &quot;Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.&quot;
+
+  oracle_file_owners &#x3D; command(&quot;ls -l  $ORACLE_HOME|awk &#39;{ print $3; }&#39; | sort -u&quot;).stdout.strip.split(&quot;\n&quot;)
+
+  oracle_file_owners.each do |owner|
+    describe &#39;The file and directory inside the Oracle Home directory&#39; do
+      subject { owner }
+      it { should cmp &#39;oracle&#39; }
+    end
+  end
+  if oracle_file_owners.empty?
+    describe &#39;There are no oracle file owners, therefore this control is NA&#39; do
+      skip &#39;There are no oracle file owners, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61581"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61581"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61581</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61581
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict grants to sensitive information to authorized
+  user roles.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61581"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61581"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61581</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict grants to sensitive information to authorized
+  user roles.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61581&#39; do
+  title &quot;The DBMS must restrict grants to sensitive information to authorized
+  user roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000011&#39;
+  tag &quot;gid&quot;: &#39;V-61581&#39;
+  tag &quot;rid&quot;: &#39;SV-76071r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67497r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61583"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61583"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61583</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61583
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A single database connection configuration file must not be used to
+  configure all database clients.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61583"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61583"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61583</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A single database connection configuration file must not be used to
+  configure all database clients.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to supply database connection information to
+  only those databases authorized for the user.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61583&#39; do
+  title &quot;A single database connection configuration file must not be used to
+  configure all database clients.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000012&#39;
+  tag &quot;gid&quot;: &#39;V-61583&#39;
+  tag &quot;rid&quot;: &#39;SV-76073r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67499r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to supply database connection information to
+  only those databases authorized for the user.&quot;
+  describe &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39; do
+    skip &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61585"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61585"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61585</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61585
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must be protected from unauthorized access by developers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61585"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61585"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61585</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must be protected from unauthorized access by developers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61585&#39; do
+  title &#39;The DBMS must be protected from unauthorized access by developers.&#39;
+  desc  &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000014&#39;
+  tag &quot;gid&quot;: &#39;V-61585&#39;
+  tag &quot;rid&quot;: &#39;SV-76075r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67501r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61587"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61587"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61587</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61587
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61587"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61587"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61587</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61587&#39; do
+  title &quot;The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000015&#39;
+  tag &quot;gid&quot;: &#39;V-61587&#39;
+  tag &quot;rid&quot;: &#39;SV-76077r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67503r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61589"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61589"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61589</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61589
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61589"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61589"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADMIN1 with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: APPQOSSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CTXSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: DBA with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: PUBLIC with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: RDSADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSDG with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSKM with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDB with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDBADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADMIN1 with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: APPQOSSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CTXSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: DBA with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: PUBLIC with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: RDSADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSDG with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSKM with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDB with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDBADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61589</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61589&#39; do
+  title &quot;The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000016&#39;
+  tag &quot;gid&quot;: &#39;V-61589&#39;
+  tag &quot;rid&quot;: &#39;SV-76079r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67505r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dictionary_table_access &#x3D; sql.query(&quot;SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dictionary_table_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39;
+    end
+  else
+    users_with_dictionary_table_access.each do |user|
+      describe &quot;oracle users: #{user} with access to the dictionary table&quot; do
+        subject { user }
+        it { should be_in USERS_ALLOWED_ACCESS_TO_DICTIONARY_TABLE }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61591"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61591"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61591</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61591
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Administrative privileges must be assigned to database accounts via
+  database roles.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61591"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61591"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Database accounts with administrative privileges is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Database accounts with administrative privileges is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61591</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Administrative privileges must be assigned to database accounts via
+  database roles.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61591&#39; do
+  title &quot;Administrative privileges must be assigned to database accounts via
+  database roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000034&#39;
+  tag &quot;gid&quot;: &#39;V-61591&#39;
+  tag &quot;rid&quot;: &#39;SV-76081r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67507r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)&quot;
+  tag &quot;fix&quot;: &quot;Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_accounts_with_administrative_privs &#x3D; sql.query(&quot;SELECT grantee
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  );&quot;).column(&#39;grantee&#39;).uniq
+
+  describe &#39;Database accounts with administrative privileges&#39; do
+    subject { database_accounts_with_administrative_privs }
+    it { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61593"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61593"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61593</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61593
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61593"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61593"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61593</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61593&#39; do
+  title &quot;Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000017&#39;
+  tag &quot;gid&quot;: &#39;V-61593&#39;
+  tag &quot;rid&quot;: &#39;SV-76083r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67509r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  &quot;
+  tag &quot;fix&quot;: &quot;Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.&quot;
+  describe &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39; do
+    skip &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61595"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61595"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61595</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61595
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  All use of privileged accounts must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61595"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61595"
+            >
+              <!-- Result description -->
+              This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of unified auditing policies defined is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of users being audited is expected to include &quot;ALL USERS&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of unified auditing policies defined is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of users being audited is expected to include &quot;ALL USERS&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61595</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >All use of privileged accounts must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61595&#39; do
+  title &#39;All use of privileged accounts must be audited.&#39;
+  desc  &quot;This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61595&#39;
+  tag &quot;rid&quot;: &#39;SV-76085r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67511r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  unified_auditing_policies_defined &#x3D; sql.query(&#39;SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  describe &#39;The list of unified auditing policies defined&#39; do
+    subject { unified_auditing_policies_defined }
+    it { should_not be_empty }
+  end
+
+  users_being_audited &#x3D; sql.query(&#39;SELECT unique user_name from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;user_name&#39;)
+
+  describe &#39;The list of users being audited&#39; do
+    subject { users_being_audited }
+    it { should include &#39;ALL USERS&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61597"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61597"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61597</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61597
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61597"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61597"
+            >
+              <!-- Result description -->
+              Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61597</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61597&#39; do
+  title &quot;Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.&quot;
+  desc &quot;Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61597&#39;
+  tag &quot;rid&quot;: &#39;SV-76087r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004210&#39;
+  tag &quot;fix_id&quot;: &#39;F-67513r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.&quot;
+  describe &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39; do
+    skip &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61599"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61599"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61599</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61599
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBA role must not be assigned excessive or unauthorized
+  privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61599"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61599"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: ADMIN1 with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: RDSADMIN with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: ADMIN1 with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: RDSADMIN with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61599</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBA role must not be assigned excessive or unauthorized
+  privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role &quot;USER PRIVS&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61599&#39; do
+  title &quot;The DBA role must not be assigned excessive or unauthorized
+  privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000019&#39;
+  tag &quot;gid&quot;: &#39;V-61599&#39;
+  tag &quot;rid&quot;: &#39;SV-76089r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67515r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role \&quot;USER PRIVS\&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map&quot;
+  tag &quot;fix&quot;: &quot;Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_privs &#x3D; sql.query(&quot;SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;&quot;).column(&#39;username&#39;).uniq
+  if users_with_admin_privs.empty?
+    impact 0.0
+    describe &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_privs.each do |user|
+      describe &quot;oracle database users: #{user} with administative privileges&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_with_admin_privs&#39;)}
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61601"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61601"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61601</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61601
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61601"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61601"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61601</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61601&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61601&#39; do
+  title &quot;OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000020&#39;
+  tag &quot;gid&quot;: &#39;V-61601&#39;
+  tag &quot;rid&quot;: &#39;SV-76091r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67517r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS&quot;
+  tag &quot;fix&quot;: &quot;Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should include &#39;run_group &#x3D; nobody&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61603"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61603"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61603</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002236
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61603
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must verify account lockouts persist until reset by an
+      administrator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002236
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61603"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61603"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61603</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must verify account lockouts persist until reset by an
+      administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61603&#39; do
+      title &quot;The DBMS must verify account lockouts persist until reset by an
+      administrator.&quot;
+      desc &quot;Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+      &quot;
+      impact 0.5
+      tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+      tag &quot;gid&quot;: &#39;V-61603&#39;
+      tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+      tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+      tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+      tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+      tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+      tag &quot;false_negatives&quot;: nil
+      tag &quot;false_positives&quot;: nil
+      tag &quot;documentable&quot;: false
+      tag &quot;mitigations&quot;: nil
+      tag &quot;severity_override_guidance&quot;: false
+      tag &quot;potential_impacts&quot;: nil
+      tag &quot;third_party_tools&quot;: nil
+      tag &quot;mitigation_controls&quot;: nil
+      tag &quot;responsibility&quot;: nil
+      tag &quot;ia_controls&quot;: nil
+      tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.&quot;
+      tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+    
+      sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+    
+      query &#x3D; %{
+        SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+      }
+    
+      user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+    
+      user_profiles.each do |profile|
+        next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+        password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+    
+        describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+          subject { password_lock_time }
+          it { should cmp &#39;UNLIMITED&#39; }
+        end
+      end
+      if user_profiles.empty?
+        describe &#39;There are no user profiles, therefore this control is NA&#39; do
+          skip &#39;There are no user profiles, therefore this control is NA&#39;
+        end
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61603&#39; do
+  title &quot;The DBMS must verify account lockouts persist until reset by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed, to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+  tag &quot;gid&quot;: &#39;V-61603&#39;
+  tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+  to a user.
+
+  To see what profile is assigned to a user, enter the query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for password_lock_time - this specifies how long to lock the
+  account after the number of consecutive failed logon attempts reaches the
+  limit. If the value is not UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+  duration:
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61605"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61605"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61605</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61605
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the number of consecutive failed logon attempts to 5.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61605"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61605"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61605</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the number of consecutive failed logon attempts to 5.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&amp;USERNAME&quot;
+         This will return the profile name assigned to that user.
+
+         Now check the values assigned to the profile returned from the query above:
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE &quot;&amp;PROFILE_NAME&quot;
+
+         Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;
+
+         (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.  Note: It remains 
+         necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61605&#39; do
+  title &quot;The DBMS must limit the number of consecutive failed logon attempts to
+  3.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000025&#39;
+  tag &quot;gid&quot;: &#39;V-61605&#39;
+  tag &quot;rid&quot;: &#39;SV-76095r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67521r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000044&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&amp;USERNAME&#39;
+  This will return the profile name assigned to that user.
+
+  Now check the values assigned to the profile returned from the query above:
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE
+  &#39;&amp;PROFILE_NAME&#39;
+
+  Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;
+
+  (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.
+  Note: It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time.first }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61607"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61607"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61607</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61607
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61607"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61607"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61607</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&lt;username&gt;&quot;
+
+         This will return the profile name assigned to that user.
+
+         The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy 
+         the STIG requirements pertaining to the profile parameters. Oracle recommends that this profile be 
+         customized with any site-specific requirements and assigned to all users where applicable.  
+         Note: It remains necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.
+
+         Now check the values assigned to the profile returned from the query above:
+
+         column profile format a20
+         column limit format a20
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D; &quot;ORA_STIG_PROFILE&quot;;
+
+         Check the settings for failed_login_attempts - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61607&#39; do
+      sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+    
+      query &#x3D; %{
+        SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+      }
+    
+      user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+    
+      user_profiles.each do |profile|
+        next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+        password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+    
+        describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+          subject { password_lock_time }
+          it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+        end
+      end
+      if user_profiles.empty?
+        describe &#39;There are no user profiles, therefore this control is NA&#39; do
+          skip &#39;There are no user profiles, therefore this control is NA&#39;
+        end
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61607&#39; do
+  title &quot;The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000067-DB-000026&#39;
+  tag &quot;gid&quot;: &#39;V-61607&#39;
+  tag &quot;rid&quot;: &#39;SV-76097r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67523r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for failed_login_attempts - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61613"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61613"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61613</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61613
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61613"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61613"
+            >
+              <!-- Result description -->
+              Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61613</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61613&#39; do
+  title &quot;The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.&quot;
+  desc &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000071-DB-000047&#39;
+  tag &quot;gid&quot;: &#39;V-61613&#39;
+  tag &quot;rid&quot;: &#39;SV-76103r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67529r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61615"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61615"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61615</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61615
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must have allocated audit record storage capacity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61615"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61615"
+            >
+              <!-- Result description -->
+              Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has allocated audit record storage capacity</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has allocated audit record storage capacity</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61615</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must have allocated audit record storage capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61615&#39; do
+  title &#39;The DBMS must have allocated audit record storage capacity.&#39;
+  desc  &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000072-DB-000046&#39;
+  tag &quot;gid&quot;: &#39;V-61615&#39;
+  tag &quot;rid&quot;: &#39;SV-76105r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67531r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61617"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61617"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61617</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61617
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61617"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61617"
+            >
+              <!-- Result description -->
+              Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61617</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61619"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61619"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61619</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61619
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61619"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61619"
+            >
+              <!-- Result description -->
+              DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61619</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61619&#39; do
+  title &quot;A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.&quot;
+  desc &quot;DAC is based on the notion that individual users are \&quot;owners\&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000087-DB-000013&#39;
+  tag &quot;gid&quot;: &#39;V-61619&#39;
+  tag &quot;rid&quot;: &#39;SV-76109r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67535r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)&quot;
+  describe &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39; do
+    skip &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61621"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61621"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61621</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000169
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61621
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000169
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61621"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61621"
+            >
+              <!-- Result description -->
+              Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61621</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61621&#39; do
+  title &quot;The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system. (e.g., network interface, hard disk, modem, etc.). From an
+  application perspective, certain specific application functionalities may be
+  audited as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations define which application components shall provide auditable
+  events.
+
+      The DBMS must provide auditing for the list of events defined by the
+  organization or risk negatively impacting forensic investigations into
+  malicious behavior in the information system. Audit records can be generated
+  from various components within the information system, such as network
+  interfaces, hard disks, modems, etc. From an application perspective, certain
+  specific application functionalities may be audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000089-DB-000064&#39;
+  tag &quot;gid&quot;: &#39;V-61621&#39;
+  tag &quot;rid&quot;: &#39;SV-76111r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67537r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000169&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61623"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61623"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61623</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61623
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61623"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61623"
+            >
+              <!-- Result description -->
+              The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61623</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61623&#39; do
+  title &quot;The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.&quot;
+  desc  &quot;The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000090-DB-000065&#39;
+  tag &quot;gid&quot;: &#39;V-61623&#39;
+  tag &quot;rid&quot;: &#39;SV-76113r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67539r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000171&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39; do
+    skip &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61625"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61625"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61625</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61625
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61625"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61625"
+            >
+              <!-- Result description -->
+              Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61625</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine if auditing is being performed on the 
+    events on the list of auditable events that lie within the scope of Oracle audit capabilities:
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of 
+    information (e.g., classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system-level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - All account creations, modifications, disabling, and terminations.
+
+    If auditing is not being performed for any of these events, this is a finding.
+
+    Notes on Oracle audit capabilities follow.
+
+    Unified Audit supports named audit policies, which are defined using the CREATE AUDIT POLICY statement. 
+    A policy specifies the actions that should be audited and the objects to which it should apply. 
+    If no specific objects are included in the policy definition, it applies to all objects.
+
+    A named policy is enabled using the AUDIT POLICY statement. It can be enabled for all users, for 
+    specific users only, or for all except a specified list of users. The policy can audit successful actions, 
+    unsuccessful actions, or both.
+
+    Verifying existing audit policy: existing Unified Audit policies are listed in the view AUDIT_UNIFIED_POLICIES. 
+    The AUDIT_OPTION column contains one of the actions specified in a CREATE AUDIT POLICY statement. 
+    The AUDIT_OPTION_TYPE column contains &quot;STANDARD ACTION&quot; for a policy that applies to all objects or 
+    &quot;OBJECT ACTION&quot; for a policy that audits actions on a specific object.
+
+    select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; and 
+    AUDIT_OPTION_TYPE&#x3D;&quot;STANDARD ACTION&quot;;
+
+    To find policies that audit privilege grants on specific objects:
+
+    select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; 
+    and AUDIT_OPTION_TYPE&#x3D;&quot;OBJECT ACTION&quot;;
+
+    The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are enabled. The ENABLED_OPT 
+    and USER_NAME columns show the users for whom the policy is enabled or &quot;ALL USERS&quot;. The SUCCESS and FAILURE 
+    columns indicate if the policy is enabled for successful or unsuccessful actions, respectively.
+
+    select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from SYS.AUDIT_UNIFIED_ENABLED_POLICIES where 
+    POLICY_NAME&#x3D;&quot;POLICY1&quot;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing settings to include auditing of events on the selected list 
+    of auditable events.
+
+    1) Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security 
+    levels, or categories of information (e.g., classification levels)
+
+    To audit granting and revocation of any privilege:
+    create audit policy policy1 actions grant;
+    create audit policy policy2 actions revoke;
+
+    To audit grants of object privileges on a specific object:
+    create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+    If Oracle Label Security is enabled, this will audit all OLS administrative actions:
+    create audit policy policy4 actions component &#x3D; OLS all;
+
+    2) Successful and unsuccessful logon attempts, privileged activities or other system-level access
+ 
+    To audit all user logon attempts:
+    create audit policy policy5 actions logon;
+
+    To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+    audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+    3) Starting and ending time for user access to the system, concurrent logons from different 
+    workstations
+
+    This policy will audit all logon and logoff events. An individual session is identified in the 
+    UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID, SESSIONID) and the start and end time will be 
+    indicated by the EVENT_TIMESTAMP of the logon and logoff events:
+
+    create audit policy policy6 actions logon, logoff;
+
+    4) Successful and unsuccessful accesses to objects
+
+    To audit all accesses to a specific table:
+    create audit policy policy7 actions select, insert, delete, alter on &lt;schema&gt;.&lt;object&gt;; 
+
+    Different actions are defined for other object types. To audit all supported actions on a specific object:
+    create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+    5) All program initiations
+
+    To audit execution of any PL&#x2F;SQL program unit:
+    create audit policy policy9 actions EXECUTE;
+
+    To audit execution of a specific function, procedure, or package:
+    create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+    6) All direct access to the information system
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    7) All account creations, modifications, disabling, and terminations
+
+    To audit all user administration actions:
+    create audit policy policy11 actions create user, alter user, drop user, change password;
+
+    8) All kernel module loads, unloads, and restarts
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    9) All database parameter changes
+
+    To audit any database parameter changes, dynamic or static:
+    create audit policy policy12 actions alter database, alter system, create spfile;
+
+    Applying the Policy
+
+    The following command will enable the policy in all database sessions and audit both 
+    successful and unsuccessful actions: audit policy policy1; 
+
+    To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+    audit policy policy1 whenever not successful;
+
+    Either command above can be limited to only database sessions started by a specific user as 
+    follows:
+    audit policy policy1 by &lt;user&gt;;
+    audit policy policy1 by &lt;user&gt; whenever not successful;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61625&#39; do
+  title &quot;The DBMS must generate audit records for the DoD-selected list of
+  auditable events, to the extent such information is available.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system, such as network interfaces, hard disks, modems, etc. From
+  an application perspective, certain specific application functionalities may be
+  audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000091-DB-000066&#39;
+  tag &quot;gid&quot;: &#39;V-61625&#39;
+  tag &quot;rid&quot;: &#39;SV-76115r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67541r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000172&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if auditing is being performed
+  on the events on the DoD-selected list of auditable events that lie within the
+  scope of Oracle audit capabilities:
+  - Successful and unsuccessful attempts to access, modify, or delete privileges,
+  security objects, security levels, or categories of information (e.g.,
+  classification levels).
+  - Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+  - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+  - Successful and unsuccessful accesses to objects.
+  - All program initiations.
+  - All account creations, modifications, disabling, and terminations.
+
+  If auditing is not being performed for any of these events, this is a finding.
+
+  Notes on Oracle audit capabilities follow.
+
+  Unified Audit supports named audit policies, which are defined using the CREATE
+  AUDIT POLICY statement. A policy specifies the actions that should be audited
+  and the objects to which it should apply. If no specific objects are included
+  in the policy definition, it applies to all objects.
+
+  A named policy is enabled using the AUDIT POLICY statement. It can be enabled
+  for all users, for specific users only, or for all except a specified list of
+  users. The policy can audit successful actions, unsuccessful actions, or both.
+
+  Verifying existing audit policy:  existing Unified Audit policies are listed in
+  the view AUDIT_UNIFIED_POLICIES. The AUDIT_OPTION column contains one of the
+  actions specified in a CREATE AUDIT POLICY statement. The AUDIT_OPTION_TYPE
+  column contains &#39;STANDARD ACTION&#39; for a policy that applies to all objects or
+  &#39;OBJECT ACTION&#39; for a policy that audits actions on a specific object.
+
+  select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&#39;GRANT&#39;
+  and AUDIT_OPTION_TYPE&#x3D;&#39;STANDARD ACTION&#39;;
+
+  To find policies that audit privilege grants on specific objects:
+
+  select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;
+
+  The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are
+  enabled. The ENABLED_OPT and USER_NAME columns show the users for whom the
+  policy is enabled or &#39;ALL USERS&#39;. The SUCCESS and FAILURE columns indicate if
+  the policy is enabled for successful or unsuccessful actions, respectively.
+
+  select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from
+  SYS.AUDIT_UNIFIED_ENABLED_POLICIES where POLICY_NAME&#x3D;&#39;POLICY1&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing settings to include auditing of
+  events on the DoD-selected list of auditable events.
+
+  1) Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g., classification levels)
+
+  To audit granting and revocation of any privilege:
+  create audit policy policy1 actions grant;
+  create audit policy policy2 actions revoke;
+
+  To audit grants of object privileges on a specific object:
+  create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+  If Oracle Label Security is enabled, this will audit all OLS administrative
+  actions:
+  create audit policy policy4 actions component &#x3D; OLS all;
+
+  2) Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+
+  To audit all user logon attempts:
+  create audit policy policy5 actions logon;
+
+  To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+  audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+  3) Starting and ending time for user access to the system, concurrent logons
+  from different workstations
+
+  This policy will audit all logon and logoff events. An individual session is
+  identified in the UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID,
+  SESSIONID) and the start and end time will be indicated by the EVENT_TIMESTAMP
+  of the logon and logoff events:
+  create audit policy policy6 actions logon, logoff;
+
+  4) Successful and unsuccessful accesses to objects
+
+  To audit all accesses to a specific table:
+  create audit policy policy7 actions select, insert, delete, alter on
+  &lt;schema&gt;.&lt;object&gt;;
+
+  Different actions are defined for other object types. To audit all supported
+  actions on a specific object:
+  create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+  5) All program initiations
+
+  To audit execution of any PL&#x2F;SQL program unit:
+  create audit policy policy9 actions EXECUTE;
+
+  To audit execution of a specific function, procedure, or package:
+  create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+  6) All direct access to the information system
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  7) All account creations, modifications, disabling, and terminations
+
+  To audit all user administration actions:
+  create audit policy policy11 actions create user, alter user, drop user, change
+  password;
+
+  8) All kernel module loads, unloads, and restarts
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  9) All database parameter changes
+
+  To audit any database parameter changes, dynamic or static:
+  create audit policy policy12 actions alter database, alter system, create
+  spfile;
+
+  Applying the Policy
+
+  The following command will enable the policy in all database sessions and audit
+  both successful and unsuccessful actions:
+  audit policy policy1;
+
+  To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+  audit policy policy1 whenever not successful;
+
+  Either command above can be limited to only database sessions started by a
+  specific user as follows:
+  audit policy policy1 by &lt;user&gt;;
+  audit policy policy1 by &lt;user&gt; whenever not successful;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_policies_auditing_grant_privileges &#x3D; sql.query(&quot;select DISTINCT POLICY_NAME from AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;&quot;).column(&#39;policy_name&#39;)
+  unified_audit_policies_enabled &#x3D; sql.query(&#39;select POLICY_NAME from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The audit policies that audit privilege grants on specific objects&#39; do
+      subject { audit_policies_auditing_grant_privileges }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The list of unified audit policies enabled&#39; do
+      subject { unified_audit_policies_enabled }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61627"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61627"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61627</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61627
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61627"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61627"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61627</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61627&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000095-DB-000039&#39;
+  tag &quot;gid&quot;: &#39;V-61627&#39;
+  tag &quot;rid&quot;: &#39;SV-76117r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67543r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000130&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61631"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61631"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61631</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000131
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61631
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000131
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61631"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61631"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61631</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61631&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000096-DB-000040&#39;
+  tag &quot;gid&quot;: &#39;V-61631&#39;
+  tag &quot;rid&quot;: &#39;SV-76121r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67881r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000131&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61633"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61633"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61633</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000132
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61633
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000132
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61633"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61633"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61633</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61633&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000097-DB-000041&#39;
+  tag &quot;gid&quot;: &#39;V-61633&#39;
+  tag &quot;rid&quot;: &#39;SV-76123r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67545r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000132&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61635"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61635"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61635</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61635
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61635"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61635"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61635</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61635&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000098-DB-000042&#39;
+  tag &quot;gid&quot;: &#39;V-61635&#39;
+  tag &quot;rid&quot;: &#39;SV-76125r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67547r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000133&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61637"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61637"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61637</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000134
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61637
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000134
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61637"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61637"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61637</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61637&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000099-DB-000043&#39;
+  tag &quot;gid&quot;: &#39;V-61637&#39;
+  tag &quot;rid&quot;: &#39;SV-76127r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67549r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000134&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61639"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61639"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61639</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001487
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61639
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001487
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61639"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61639"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61639</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61639&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.&quot;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000100-DB-000201&#39;
+  tag &quot;gid&quot;: &#39;V-61639&#39;
+  tag &quot;rid&quot;: &#39;SV-76129r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67551r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001487&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61641"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61641"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61641</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61641
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61641"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61641"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61641</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &quot;OS&quot;, &quot;DB&quot;, &quot;DB,EXTENDED&quot;, &quot;XML&quot; or
+  &quot;XML,EXTENDED&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61641&#39; do
+  title &quot;The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000101-DB-000044&#39;
+  tag &quot;gid&quot;: &#39;V-61641&#39;
+  tag &quot;rid&quot;: &#39;SV-76131r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67553r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000135&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be \&quot;OS\&quot;, \&quot;DB\&quot;, \&quot;DB,EXTENDED\&quot;, \&quot;XML\&quot; or
+  \&quot;XML,EXTENDED\&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+  fga_audit_events &#x3D; sql.query(&quot; SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;&quot;).column(&#39;TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The oracle database fine grained  auditing events captured&#39; do
+      subject { fga_audit_events }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61643"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61643"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61643</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61643
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61643"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61643"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61643</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61643&#39; do
+  title &quot;The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000103-DB-000050&#39;
+  tag &quot;gid&quot;: &#39;V-61643&#39;
+  tag &quot;rid&quot;: &#39;SV-76133r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67555r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001855&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1&quot;
+
+  describe &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61645"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61645"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61645</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61645
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide a real-time alert when organization-defined
+  audit failure events occur.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61645"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61645"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61645</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide a real-time alert when organization-defined
+  audit failure events occur.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61645&#39; do
+  title &quot;The system must provide a real-time alert when organization-defined
+  audit failure events occur.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000104-DB-000051&#39;
+  tag &quot;gid&quot;: &#39;V-61645&#39;
+  tag &quot;rid&quot;: &#39;SV-76135r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67559r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001858&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)&quot;
+  describe &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39; do
+    skip &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61647"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61647"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61647</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000139
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61647
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must alert designated organizational officials in the event
+  of an audit processing failure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000139
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61647"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61647"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61647</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must alert designated organizational officials in the event
+  of an audit processing failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61647&#39; do
+  title &quot;The system must alert designated organizational officials in the event
+  of an audit processing failure.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000108-DB-000048&#39;
+  tag &quot;gid&quot;: &#39;V-61647&#39;
+  tag &quot;rid&quot;: &#39;SV-76137r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67561r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000139&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.&quot;
+  describe &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39; do
+    skip &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61649"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61649"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61649</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61649
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61649"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61649"
+            >
+              <!-- Result description -->
+              Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61649</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61649&#39; do
+  title &quot;The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.&quot;
+  desc &quot;Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000055&#39;
+  tag &quot;gid&quot;: &#39;V-61649&#39;
+  tag &quot;rid&quot;: &#39;SV-76139r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67563r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.&quot;
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61651"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61651"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61651</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61651
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Attempts to bypass access controls must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61651"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61651"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61651</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Attempts to bypass access controls must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col &quot;tmp tba&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace &quot;TMP TBS&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61651&#39; do
+  title &#39;Attempts to bypass access controls must be audited.&#39;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000056&#39;
+  tag &quot;gid&quot;: &#39;V-61651&#39;
+  tag &quot;rid&quot;: &#39;SV-76141r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67565r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col \&quot;tmp tba\&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace \&quot;TMP TBS\&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER&quot;
+  tag &quot;fix&quot;: &quot;Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61653"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61653"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61653</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000162
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61653
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from any type of
+  unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000162
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61653"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61653"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61653</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from any type of
+  unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61653&#39; do
+  title &quot;The system must protect audit information from any type of
+  unauthorized access.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000118-DB-000059&#39;
+  tag &quot;gid&quot;: &#39;V-61653&#39;
+  tag &quot;rid&quot;: &#39;SV-76143r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67567r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000162&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61655"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61655"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61655</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000163
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61655
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from unauthorized
+  modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000163
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61655"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61655"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61655</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from unauthorized
+  modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61655&#39; do
+  title &quot;The system must protect audit information from unauthorized
+  modification.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000119-DB-000060&#39;
+  tag &quot;gid&quot;: &#39;V-61655&#39;
+  tag &quot;rid&quot;: &#39;SV-76145r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67569r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000163&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61657"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61657"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61657</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000164
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61657
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from unauthorized deletion.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000164
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61657"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61657"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61657</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from unauthorized deletion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61657&#39; do
+  title &#39;The system must protect audit information from unauthorized deletion.&#39;
+  desc  &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000120-DB-000061&#39;
+  tag &quot;gid&quot;: &#39;V-61657&#39;
+  tag &quot;rid&quot;: &#39;SV-76147r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67571r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000164&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61659"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61659"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61659</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001493
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61659
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001493
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61659"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61659"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61659</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61659&#39; do
+  title &#39;The system must protect audit tools from unauthorized access.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000121-DB-000202&#39;
+  tag &quot;gid&quot;: &#39;V-61659&#39;
+  tag &quot;rid&quot;: &#39;SV-76149r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67573r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001493&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61661"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61661"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61661</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61661
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61661"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61661"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61661</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61661&#39; do
+  title &#39;The system must protect audit tools from unauthorized modification.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000122-DB-000203&#39;
+  tag &quot;gid&quot;: &#39;V-61661&#39;
+  tag &quot;rid&quot;: &#39;SV-76151r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67575r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001494&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61663"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61663"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61663</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61663
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized deletion.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61663"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61663"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61663</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized deletion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61663&#39; do
+  title &#39;The system must protect audit tools from unauthorized deletion.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000123-DB-000204&#39;
+  tag &quot;gid&quot;: &#39;V-61663&#39;
+  tag &quot;rid&quot;: &#39;SV-76153r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67577r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001495&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61665"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61665"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61665</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001348
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61665
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001348
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61665"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61665"
+            >
+              <!-- Result description -->
+              Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61665</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61665&#39; do
+  title &quot;The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.&quot;
+  desc &quot;Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000125-DB-000170&#39;
+  tag &quot;gid&quot;: &#39;V-61665&#39;
+  tag &quot;rid&quot;: &#39;SV-76155r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67579r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001348&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61667"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61667"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61667</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001350
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61667
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001350
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61667"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61667"
+            >
+              <!-- Result description -->
+              Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61667</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY &quot;password&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61667&#39; do
+  title &quot;The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000126-DB-000171&#39;
+  tag &quot;gid&quot;: &#39;V-61667&#39;
+  tag &quot;rid&quot;: &#39;SV-76157r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67581r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001350&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY \&quot;password\&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE&quot;
+  describe &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61669"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61669"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61669</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001351
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61669
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001351
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61669"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61669"
+            >
+              <!-- Result description -->
+              Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61669</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61669&#39; do
+  title &quot;The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000127-DB-000172&#39;
+  tag &quot;gid&quot;: &#39;V-61669&#39;
+  tag &quot;rid&quot;: &#39;SV-76159r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67583r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-001351&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61671"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61671"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61671</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000345
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61671
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000345
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61671"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61671"
+            >
+              <!-- Result description -->
+              When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61671</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61671&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61671&#39; do
+  title &quot;The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.&quot;
+  desc &quot;When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000128-DB-000086&#39;
+  tag &quot;gid&quot;: &#39;V-61671&#39;
+  tag &quot;rid&quot;: &#39;SV-76161r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67585r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000345&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61673"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61673"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61673</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61673
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database objects must be owned by accounts authorized for ownership.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61673"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61673"
+            >
+              <!-- Result description -->
+              Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61673</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database objects must be owned by accounts authorized for ownership.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61673&#39; do
+  title &#39;Database objects must be owned by accounts authorized for ownership.&#39;
+  desc  &quot;Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000200&#39;
+  tag &quot;gid&quot;: &#39;V-61673&#39;
+  tag &quot;rid&quot;: &#39;SV-76163r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67587r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;&quot;
+  tag &quot;fix&quot;: &quot;Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_object_owners &#x3D; sql.query(&#39;select DISTINCT owner from dba_objects;&#39;).column(&#39;owner&#39;).uniq
+  if dba_object_owners .empty?
+    impact 0.0
+    describe &#39;There are no oracle dba object owners, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle dba object owners, control N&#x2F;A&#39;
+    end
+  else
+    dba_object_owners .each do |owner|
+      describe &quot;oracle datbase object owner: #{owner}&quot; do
+        subject { owner }
+        it { should be_in input(&#39;allowed_dbaobject_owners&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61675"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61675"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61675</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61675
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce requirements for remote connections to the
+  information system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61675"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61675"
+            >
+              <!-- Result description -->
+              Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61675</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce requirements for remote connections to the
+  information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review organization&#39;s access control policies and procedures addressing remote 
+    access to the information system.
+
+    If remote connections are not allowed by the organization, this is NA. (Note that &quot;remote&quot; means 
+    &quot;from outside the CMS network&quot; and that connections via approved Virtual Private Networks (VPNs) 
+    are considered to be inside the CMS network.)
+
+    Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify access controls and 
+    auditing settings exist and they enforce the requirements for remote access defined by the organization.
+
+    If access controls and auditing do not exist or do not fully enforce the requirements defined in the 
+    organization&#39;s policies and procedures, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61675&#39; do
+  title &quot;The DBMS must enforce requirements for remote connections to the
+  information system.&quot;
+  desc &quot;Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000140-DB-000033&#39;
+  tag &quot;gid&quot;: &#39;V-61675&#39;
+  tag &quot;rid&quot;: &#39;SV-76165r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67589r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review organization&#39;s access control policies and procedures
+  addressing remote access to the information system.
+
+  If remote connections are not allowed by the organization, this is NA. (Note
+  that \&quot;remote\&quot; means \&quot;from outside the DoD Information Network (DoDIN)\&quot; and
+  that connections via approved Virtual Private Networks (VPNs) are considered to
+  be inside the DoDIN.)
+
+  Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify
+  access controls and auditing settings exist and they enforce the requirements
+  for remote access defined by the organization.
+
+  If access controls and auditing do not exist or do not fully enforce the
+  requirements defined in the organization&#39;s policies and procedures, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61677"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61677"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61677</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61677
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Default demonstration and sample databases, database objects, and
+  applications must be removed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61677"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61677"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle default sample schema user accounts is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle default sample schema user accounts is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61677</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Default demonstration and sample databases, database objects, and
+  applications must be removed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61677&#39; do
+  title &quot;Default demonstration and sample databases, database objects, and
+  applications must be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000090&#39;
+  tag &quot;gid&quot;: &#39;V-61677&#39;
+  tag &quot;rid&quot;: &#39;SV-76167r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67591r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sample_schema_user_accounts &#x3D; sql.query(&quot;select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);&quot;).column(&#39;username&#39;)
+
+  describe &#39;The list of oracle default sample schema user accounts&#39; do
+    subject { sample_schema_user_accounts }
+    it { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61679"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61679"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61679</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61679
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unused database components, DBMS software, and database objects must
+  be removed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61679"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61679"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components: Oracle Text is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components: Oracle Text is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61679</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unused database components, DBMS software, and database objects must
+  be removed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61679&#39; do
+  title &quot;Unused database components, DBMS software, and database objects must
+  be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000091&#39;
+  tag &quot;gid&quot;: &#39;V-61679&#39;
+  tag &quot;rid&quot;: &#39;SV-76169r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67593r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault&quot;
+  tag &quot;fix&quot;: &quot;If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components &#x3D; sql.query(&quot;SELECT comp_id, comp_name, version, status from dba_registry where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);&quot;).column(&#39;comp_name&#39;).uniq
+  if list_of_installed_components.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components installed, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components installed, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components.each do |component|
+      describe &quot;The installed oracle database components: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61681"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61681"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61681</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61681
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61681"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61681"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: OLAP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: OLAP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61681</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61681&#39; do
+  title &quot;Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000092&#39;
+  tag &quot;gid&quot;: &#39;V-61681&#39;
+  tag &quot;rid&quot;: &#39;SV-76171r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67595r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components_integrated_into_dbms &#x3D; sql.query(&quot;SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );&quot;).column(&#39;parameter&#39;).uniq
+  if list_of_installed_components_integrated_into_dbms.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components integrated into the DBMS, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components integrated into the DBMS, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components_integrated_into_dbms.each do |component|
+      describe &quot;The installed oracle database components integrated into the DBMS: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components_integrated_into_dbms&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61683"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61683"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61683</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61683
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of external executables must be authorized.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61683"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61683"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61683</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of external executables must be authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61683&#39; do
+  title &#39;Use of external executables must be authorized.&#39;
+  desc  &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61683&#39;
+  tag &quot;rid&quot;: &#39;SV-76173r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67597r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;&quot;
+  tag &quot;fix&quot;: &quot;Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;&quot;).column(&#39;owner&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61685"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61685"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61685</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61685
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to external executables must be disabled or restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61685"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61685"
+            >
+              <!-- Result description -->
+              The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61685</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to external executables must be disabled or restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference &quot;extproc&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference &quot;extproc&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to &quot;extproc&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61685&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61685&#39; do
+  title &#39;Access to external executables must be disabled or restricted.&#39;
+  desc  &quot;The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61685&#39;
+  tag &quot;rid&quot;: &#39;SV-76175r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011810&#39;
+  tag &quot;fix_id&quot;: &#39;F-67599r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference \&quot;extproc\&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference \&quot;extproc\&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to \&quot;extproc\&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;\&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages\&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.&quot;
+  tag &quot;fix&quot;: &quot;If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should_not include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should_not include &#39;run_group &#x3D; nobody&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;hs&#x2F;admin&#x2F;extproc.ora&quot; do
+    it { should exist }
+    its(&#39;content&#39;) { should match &#x2F;^EXTPROC_DLLS&#x3D;ONLY:\s*\w*&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61687"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61687"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61687</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61687
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61687"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61687"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61687</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings for functions, ports, protocols, and services that are not 
+    approved.
+
+    If any are found, this is a finding.
+
+    - - - - -
+    In the Oracle database, the communications with the database and incoming requests are performed by 
+    the Oracle Listener.  The Oracle Listener listens on a specific port or ports for connections to a 
+    specific database.  The Oracle Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin 
+    directory.  To check the ports and protocols in use, go to that directory and review the SQLNET.ora, 
+    LISTENER.ora, and the TNSNAMES.ora. If protocols or ports are in use that are not authorized, this 
+    is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61687&#39; do
+  title &quot;The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000142-DB-000094&#39;
+  tag &quot;gid&quot;: &#39;V-61687&#39;
+  tag &quot;rid&quot;: &#39;SV-76177r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67601r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000382&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings for functions, ports, protocols, and
+  services that are not approved.
+
+  If any are found, this is a finding.
+
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  - - - - -
+  In the Oracle database, the communications with the database and incoming
+  requests are performed by the Oracle Listener.  The Oracle Listener listens on
+  a specific port or ports for connections to a specific database.  The Oracle
+  Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.  To check the ports and protocols in use, go to  that directory and
+  review the SQLNET.ora, LISTENER.ora, and the TNSNAMES.ora.  If protocols or
+  ports are in use that are not authorized, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61689"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61689"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61689</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-10 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000553
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61689
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-10 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000553
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61689"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61689"
+            >
+              <!-- Result description -->
+              Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61689</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-10 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61689&#39; do
+  title &quot;Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.&quot;
+  desc &quot;Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000144-DB-000101&#39;
+  tag &quot;gid&quot;: &#39;V-61689&#39;
+  tag &quot;rid&quot;: &#39;SV-76179r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67603r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000553&#39;]
+  tag &quot;nist&quot;: [&#39;CP-10 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.&quot;
+  tag &quot;fix&quot;: &quot;Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.&quot;
+  describe &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39; do
+    skip &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61693"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61693"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61693</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61693
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle must back up user-level information per a defined frequency.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61693"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61693"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Oracle backs up user-level information per a defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Oracle backs up user-level information per a defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61693</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle must back up user-level information per a defined frequency.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61693&#39; do
+  title &#39;Oracle must back up user-level information per a defined frequency.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Databases that do not backup information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000095&#39;
+  tag &quot;gid&quot;: &#39;V-61693&#39;
+  tag &quot;rid&quot;: &#39;SV-76183r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67609r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)&quot;
+  tag &quot;fix&quot;: &quot;Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.&quot;
+  describe &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39; do
+    skip &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61695"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61695"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61695</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61695
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database backup procedures must be defined, documented, and
+  implemented.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61695"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61695"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61695</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database backup procedures must be defined, documented, and
+  implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file &quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement database backup procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61695&#39; do
+  title &quot;Database backup procedures must be defined, documented, and
+  implemented.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Database backups provide the required means to restore databases after
+  compromise or loss. Backups help reduce the vulnerability to unauthorized
+  access or hardware loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000096&#39;
+  tag &quot;gid&quot;: &#39;V-61695&#39;
+  tag &quot;rid&quot;: &#39;SV-76185r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67611r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file \&quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1\&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3&quot;
+  tag &quot;fix&quot;: &#39;Develop, document, and implement database backup procedures.&#39;
+  describe &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39; do
+    skip &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61697"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61697"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61697</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61697
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61697"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61697"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61697</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61697&#39; do
+  title &quot;Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency.  This includes data stored on file
+  systems, within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Problems with backup procedures or backup media may not be discovered until
+  after a recovery is needed. Testing and verification of procedures provides the
+  opportunity to discover oversights, conflicts, or other issues in the backup
+  procedures or use of media designed to be used.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000097&#39;
+  tag &quot;gid&quot;: &#39;V-61697&#39;
+  tag &quot;rid&quot;: &#39;SV-76187r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67613r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.&quot;
+  describe &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39; do
+    skip &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61699"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61699"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61699</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61699
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS backup and restoration files must be protected from unauthorized
+  access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61699"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61699"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61699</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS backup and restoration files must be protected from unauthorized
+  access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61699&#39; do
+  title &quot;DBMS backup and restoration files must be protected from unauthorized
+  access.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Lost or compromised DBMS backup and restoration files may lead to not only
+  the loss of data, but also the unauthorized access to sensitive data. Backup
+  files need the same protections against unauthorized access when stored on
+  backup media as when online and actively in use by the database system. In
+  addition, the backup media needs to be protected against physical loss. Most
+  DBMS&#39;s maintain online copies of critical control files to provide transparent
+  or easy recovery from hard disk loss or other interruptions to database
+  operation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000098&#39;
+  tag &quot;gid&quot;: &#39;V-61699&#39;
+  tag &quot;rid&quot;: &#39;SV-76189r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67615r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.&quot;
+  tag &quot;fix&quot;: &quot;Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.&quot;
+  describe &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39; do
+    skip &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61701"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61701"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61701</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61701
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61701"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61701"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61701</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61701&#39; do
+  title &quot;DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000099&#39;
+  tag &quot;gid&quot;: &#39;V-61701&#39;
+  tag &quot;rid&quot;: &#39;SV-76191r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67617r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.&quot;
+  describe &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39; do
+    skip &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61703"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61703"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61703</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61703
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for network access to
+  privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61703"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61703"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61703</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for network access to
+  privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access 
+    mechanism settings to determine whether users logging on to privileged accounts via a network are 
+    required to use multifactor authentication.
+
+    If users logging on to privileged accounts via a network are not required to use multifactor 
+    authentication, this is a finding.
+
+    Use authentication to prove the identities of users who are attempting to log on to the database. 
+    Authenticating user identity is imperative in distributed environments, without which there can be 
+    little confidence in network security. Passwords are the most common means of authentication. Oracle 
+    Database enables strong authentication with Oracle authentication adapters that support various 
+    third-party authentication services, including TLS with digital certificates, as well as Smart Cards (PIV).
+
+    If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the following, TLS is enabled. 
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the 
+    supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or 
+    differently located sqlnet.ora files.)
+
+    SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+    SSL_VERSION &#x3D; 1.2 or 1.1
+    SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+    WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+    (METHOD &#x3D; FILE)
+    (METHOD_DATA &#x3D;
+    (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+    )
+    )
+
+    SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+    ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+    Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for network users logging on to privileged accounts. 
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61703&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61703&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000149-DB-000104&#39;
+  tag &quot;gid&quot;: &#39;V-61703&#39;
+  tag &quot;rid&quot;: &#39;SV-76193r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67619r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000765&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts via a network are not required to
+  use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates,
+  as well as Smart Cards (CAC, PIV).
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled. (Note: This assumes that a single sqlnet.ora file,
+  in the default location, is in use. Please see the supplemental file
+  \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or
+  differently located sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+  (SOURCE &#x3D;
+  (METHOD &#x3D; FILE)
+  (METHOD_DATA &#x3D;
+  (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+  )
+  )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61705"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61705"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61705</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61705
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61705"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61705"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61705</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to 
+    require multifactor authentication for network users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61705&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61705&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000150-DB-000105&#39;
+  tag &quot;gid&quot;: &#39;V-61705&#39;
+  tag &quot;rid&quot;: &#39;SV-76195r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67621r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000766&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61707"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61707"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61707</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61707
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for local access to
+  privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61707"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61707"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61707</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for local access to
+  privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61707&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61707&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000151-DB-000106&#39;
+  tag &quot;gid&quot;: &#39;V-61707&#39;
+  tag &quot;rid&quot;: &#39;SV-76197r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67623r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000767&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61709"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61709"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61709</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000768
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61709
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000768
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61709"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61709"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61709</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to non-privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61709&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61709&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000152-DB-000107&#39;
+  tag &quot;gid&quot;: &#39;V-61709&#39;
+  tag &quot;rid&quot;: &#39;SV-76199r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67625r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000768&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE &#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)))&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61711"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61711"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61711</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61711
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61711"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61711"
+            >
+              <!-- Result description -->
+              Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61711</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (5), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61711&#39; do
+  title &quot;The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.&quot;
+  desc &quot;To assure individual accountability and prevent unauthorized access,
+  application users (and any processes acting on behalf of users) must be
+  individually identified and authenticated.
+
+      A shared authenticator is a generic account used by multiple individuals.
+  Use of a shared authenticator alone does not uniquely identify individual
+  users. An example of a shared authenticator is the UNIX OS &#39;root&#39; user account,
+  a Windows &#39;administrator&#39; account, an &#39;SA&#39; account, or a &#39;helpdesk&#39; account.
+
+      For example, the UNIX and Windows operating systems offer a &#39;switch user&#39;
+  capability allowing users to authenticate with their individual credentials
+  and, when needed, &#39;switch&#39; to the administrator role. This method provides for
+  unique individual authentication prior to using a shared authenticator.
+
+      Some applications may not have the need to provide a group authenticator;
+  this is considered a matter of application design. In those instances where the
+  application design includes the use of a shared authenticator, this requirement
+  will apply.
+
+      There may also be instances when specific user actions need to be performed
+  on the information system without unique user identification or authentication.
+  An example of this type of access is a web server which contains publicly
+  releasable information. These types of accesses are allowed but must be
+  explicitly identified and documented by the organization.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000153-DB-000108&#39;
+  tag &quot;gid&quot;: &#39;V-61711&#39;
+  tag &quot;rid&quot;: &#39;SV-76201r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67627r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000770&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (5)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.&quot;
+  describe &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39; do
+    skip &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61713"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61713"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61713</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61713
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61713"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61713"
+            >
+              <!-- Result description -->
+              An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61713</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (8), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61713&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61713&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in unfettered access to the database settings and data. A successful
+  replay attack against a privileged database account could result in a complete
+  compromise of the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000156-DB-000111&#39;
+  tag &quot;gid&quot;: &#39;V-61713&#39;
+  tag &quot;rid&quot;: &#39;SV-76203r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67629r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001941&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (8)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61715"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61715"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61715</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61715
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61715"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61715"
+            >
+              <!-- Result description -->
+              An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61715</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (9), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61715&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61715&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in access to database data.  A successful replay attack against a
+  non-privileged database account could result in a compromise of data stored on
+  the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000157-DB-000112&#39;
+  tag &quot;gid&quot;: &#39;V-61715&#39;
+  tag &quot;rid&quot;: &#39;SV-76205r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67631r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001942&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (9)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61717"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61717"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61717</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61717
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must disable user accounts after 60 days of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61717"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61717"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61717</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must disable user accounts after 60 days of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-4 e), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For accounts managed by Oracle, check DBMS settings to determine if accounts can be automatically disabled 
+    by the system after 60 days of inactivity. Also, ask the DBA if an alternative method, such as a stored 
+    procedure run daily, to disable Oracle-managed accounts inactive for more than 60 days, has been deployed.
+
+    If the ability to disable accounts after 60 days of inactivity, by either of these means, does not exist, 
+    this is a finding.
+
+    - - - - -
+
+    Check to see what profile each user is associated with, if any, with this query:
+
+    select username, profile from dba_users order by 1,2;
+
+    Then check the profile to see what the password_life_time is set to in the table dba_profiles; the 
+    password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+    in the RESOURCE_NAME column.
+    SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where upper(resource_name) &#x3D; &quot;PASSWORD_LIFE_TIME&quot;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For accounts managed by Oracle, determine if it is practical and acceptable to require a 
+    password change every 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue the statement:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60;
+    (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for examples.)
+
+    If password changes every 60 days or fewer are unacceptable or impractical, implement an alternative method, 
+    such as a stored procedure run daily, to disable accounts inactive for more than 60 days.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61719"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61719"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61719</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61719
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce minimum
+  password length.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61719"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61719"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61719</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce minimum
+  password length.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called 
+    DEFAULT, determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+
+    For each password verification function, examine its source code.
+    
+    If it does not enforce the CMS-defined minimum length (15 unless otherwise specified), this is 
+    a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+&lt;   oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61719&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce minimum
+  password length.&quot;
+  desc &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000164-DB-000082&#39;
+  tag &quot;gid&quot;: &#39;V-61719&#39;
+  tag &quot;rid&quot;: &#39;SV-76209r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67635r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000205&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the DoD-defined minimum length (15 unless otherwise
+  specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61721"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61721"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61721</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61721
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61721"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61721"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61721</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (e), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password reuse rule, if any, that is in effect:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME IN (&quot;PASSWORD_REUSE_MAX&quot;, &quot;PASSWORD_REUSE_TIME&quot;)
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE, RESOURCE_NAME;
+    Bearing in mind that a profile can inherit from another profile, and the root profile is 
+    called DEFAULT, determine the value of the PASSWORD_REUSE_MAX effective for each profile.
+
+    If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the CMS-defined minimum 
+    number of password changes before a password may be repeated (five or greater), this is a finding.
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so if both are 
+    UNLIMITED, this is a finding.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  For each profile, set the PASSWORD_REUSE_MAX to 
+    enforce the CMS-defined minimum number of password changes before a password may be 
+    repeated (six or greater).
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so ensure also 
+    that it has a meaningful value.  Since the minimum password lifetime is 1 day, the smallest 
+    meaningful value is the same as the PASSWORD_REUSE_MAX value.
+
+    Using PPPPPP as an example, the statement to do this is:
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 6 PASSWORD_REUSE_TIME 6;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61723"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61723"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61723</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61723
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61723"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61723"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61723</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification 
+    function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61723&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000166-DB-000070&#39;
+  tag &quot;gid&quot;: &#39;V-61723&#39;
+  tag &quot;rid&quot;: &#39;SV-76213r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67639r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000192&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61725"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61725"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61725</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61725
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61725"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61725"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61725</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61725&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000167-DB-000071&#39;
+  tag &quot;gid&quot;: &#39;V-61725&#39;
+  tag &quot;rid&quot;: &#39;SV-76215r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67641r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000193&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61727"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61727"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61727</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61727
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61727"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61727"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61727</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61727&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000168-DB-000072&#39;
+  tag &quot;gid&quot;: &#39;V-61727&#39;
+  tag &quot;rid&quot;: &#39;SV-76217r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67643r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000194&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61729"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61729"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61729</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61729
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61729"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61729"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61729</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61729&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000169-DB-000176&#39;
+  tag &quot;gid&quot;: &#39;V-61729&#39;
+  tag &quot;rid&quot;: &#39;SV-76219r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67645r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001619&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61731"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61731"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61731</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61731
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61731"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61731"
+            >
+              <!-- Result description -->
+              Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61731</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called DEFAULT, 
+    determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+    
+    For each password verification function, examine its source code.
+
+    If it does not enforce the organization-defined minimum number of characters by which the password must differ 
+    from the previous password (six of the characters unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If any user accounts are managed by Oracle:  Develop, test and implement a password 
+    verification function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61731&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.&quot;
+  desc  &quot;Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000170-DB-000073&#39;
+  tag &quot;gid&quot;: &#39;V-61731&#39;
+  tag &quot;rid&quot;: &#39;SV-76221r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67647r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000195&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of characters by
+  which the password must differ from the previous password (eight of the
+  characters unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If any user accounts are managed by Oracle:  Develop, test and
+  implement a password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the
+  starting point for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61733"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61733"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61733</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61733
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  encryption for storage.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61733"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61733"
+            >
+              <!-- Result description -->
+              Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61733</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  encryption for storage.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME  etwork\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61733&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61733&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  encryption for storage.&quot;
+  desc &quot;Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000171-DB-000074&#39;
+  tag &quot;gid&quot;: &#39;V-61733&#39;
+  tag &quot;rid&quot;: &#39;SV-76223r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67649r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000196&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME\
+  etwork\\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61735"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61735"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61735</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61735
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61735"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61735"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61735</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, this is not a finding.
+
+    Where accounts are authenticated using passwords, review procedures and implementation evidence for creation 
+    of temporary passwords.
+
+    If the procedures or evidence do not exist or do not enforce passwords to meet CMS password requirements, this 
+    is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures for assigning temporary passwords to user accounts.
+
+    Procedures should include instructions to meet current CMS password length and complexity requirements and 
+    provide a secure method to relay the temporary password to the user.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61735&#39; do
+  title &quot;Procedures for establishing temporary passwords that meet DoD password
+  requirements for new accounts must be defined, documented, and implemented.&quot;
+  desc &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000077&#39;
+  tag &quot;gid&quot;: &#39;V-61735&#39;
+  tag &quot;rid&quot;: &#39;SV-76225r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67651r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Where accounts are authenticated using passwords, review procedures and
+  implementation evidence for creation of temporary passwords.
+
+  If the procedures or evidence do not exist or do not enforce passwords to meet
+  DoD password requirements, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures for assigning temporary passwords to user
+  accounts.
+
+  Procedures should include instructions to meet current DoD password length and
+  complexity requirements and provide a secure method to relay the temporary
+  password to the user.&quot;
+  describe &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39; do
+    skip &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61737"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61737"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61737</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61737
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61737"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61737"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61737</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61737&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61737&#39; do
+  title &quot;DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.&quot;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000079&#39;
+  tag &quot;gid&quot;: &#39;V-61737&#39;
+  tag &quot;rid&quot;: &#39;SV-76227r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67653r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61739"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61739"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61739</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61739
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce password maximum lifetime restrictions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61739"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61739"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61739</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce password maximum lifetime restrictions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    Review DBMS settings to determine if passwords must be changed periodically. If not, this is a finding:
+
+    SELECT p1.profile,
+    CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit, &#39;DEFAULT&#39;, p4.limit, p2.limit))
+    END
+    END
+    END
+    END effective_life_time
+    FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+    WHERE p1.profile&#x3D;p2.profile
+    AND p3.profile&#x3D;&#39;DEFAULT&#39;
+    AND p4.profile&#x3D;&#39;DEFAULT&#39;
+    AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+    AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+    AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+    AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+    order by 1;
+
+    If the “effective_life_time” is greater than “60” for any profile applied to user accounts, and the 
+    need for this has not been documented and approved by the ISSO, this is a finding.
+
+    If the value is greater than 60 for any profile applied to user accounts, and the DBMS is configured to use 
+    Password Lifetime to disable inactive accounts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For user accounts managed by Oracle: Modify DBMS settings to force users to periodically change 
+    their passwords. For example, using PPPPPP to stand for a profile name:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60 PASSWORD_GRACE_TIME 0;
+    Do this for each profile applied to user accounts.
+    
+    Where a password lifetime longer than “60” is needed, document the reasons and obtain ISSO approval.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61739&#39; do
+  title &#39;The DBMS must enforce password maximum lifetime restrictions.&#39;
+  desc  &quot;Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000080&#39;
+  tag &quot;gid&quot;: &#39;V-61739&#39;
+  tag &quot;rid&quot;: &#39;SV-76229r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67655r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Review DBMS settings to determine if passwords must be changed periodically. If
+  not, this is a finding:
+
+  SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;
+
+  If the “effective_life_time” is greater than “60” for any profile applied to
+  user accounts, and the need for this has not been documented and approved by
+  the ISSO, this is a finding.
+
+  If the value is greater than 35 for any profile applied to user accounts, and
+  the DBMS is configured to use Password Lifetime to disable inactive accounts,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For user accounts managed by Oracle: Modify DBMS settings to
+  force users to periodically change their passwords. For example, using PPPPPP
+  to stand for a profile name:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35 PASSWORD_GRACE_TIME 0;
+  Do this for each profile applied to user accounts.
+
+  (Note: Although the DoD requirement is for a password change every 60 days,
+  using a value of “35” facilitates the use of “PASSWORD_LIFE_TIME” as a means of
+  locking accounts inactive for 35 days. But if “35” is not a practical or
+  acceptable limit for password lifetime, set it to the standard DoD value of
+  “60”.)
+
+  Where a password lifetime longer than “60” is needed, document the reasons and
+  obtain ISSO approval.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_effective_life_time &#x3D; sql.query(&quot;SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;&quot;).column(&#39;effective_life_time&#39;)
+
+  get_effective_life_time.each do |effective_life_time|
+
+    describe &#39;The oracle database account effective life time limit&#39; do
+      subject { effective_life_time }
+      it { should cmp &gt;&#x3D; 60 }
+    end
+  end
+  describe get_effective_life_time do
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61741"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61741"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61741</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61741
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61741"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61741"
+            >
+              <!-- Result description -->
+              A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61741</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61741&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61741&#39; do
+  title &quot;The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.&quot;
+  desc &quot;A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000175-DB-000067&#39;
+  tag &quot;gid&quot;: &#39;V-61741&#39;
+  tag &quot;rid&quot;: &#39;SV-76231r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67657r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000185&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61743"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61743"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61743</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000187
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61743
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000187
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61743"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61743"
+            >
+              <!-- Result description -->
+              The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61743</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61743&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61743&#39; do
+  title &quot;The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61743&#39;
+  tag &quot;rid&quot;: &#39;SV-76233r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67659r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000187&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;FALSE)&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61745"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61745"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61745</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61745
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61745"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61745"
+            >
+              <!-- Result description -->
+              Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61745</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review configuration to confirm that accounts used by processes to connect to the DBMS are 
+    authenticated using valid, current CMS-issued PKI certificates.
+
+    If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not certificate-based, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each such account, use CMS certificate-based authentication.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61745&#39; do
+  title &quot;Processes (services, applications, etc.) that connect to the DBMS
+  independently of individual users, must use valid, current DoD-issued PKI
+  certificates for authentication to the  DBMS.&quot;
+  desc &quot;Just as individual users must be authenticated, and just as they must
+  use PKI-based authentication, so must any processes that connect to the DBMS.
+
+      The DoD standard for authentication of a process or device communicating
+  with another process or device is the presentation of a valid, current,
+  DoD-issued Public Key Infrastructure (PKI) certificate that has previously been
+  verified as Trusted by an administrator of the other process or device.
+
+      This applies both to processes that run on the same server as the DBMS and
+  to processes running on other computers.
+
+      The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are
+  exceptions.  These cannot currently use certificate-based authentication.  For
+  this reason among others, use of these accounts should be restricted to where
+  it is truly needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61745&#39;
+  tag &quot;rid&quot;: &#39;SV-76235r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015501&#39;
+  tag &quot;fix_id&quot;: &#39;F-67661r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review configuration to confirm that accounts used by processes
+  to connect to the DBMS are authenticated using valid, current DoD-issued PKI
+  certificates.
+
+  If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not
+  certificate-based, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;For each such account, use DoD certificate-based authentication.&#39;
+  describe &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39; do
+    skip &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61747"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61747"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61747</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61747
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61747"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61747"
+            >
+              <!-- Result description -->
+              Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61747</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-7, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  </span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61747&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61747&#39; do
+  title &quot;The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.&quot;
+  desc &quot;Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000179-DB-000114&#39;
+  tag &quot;gid&quot;: &#39;V-61747&#39;
+  tag &quot;rid&quot;: &#39;SV-76237r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67663r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000803&#39;]
+  tag &quot;nist&quot;: [&#39;IA-7&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  &quot;
+  sql &#x3D; oracledb_session(user: &#39;system&#39;, password: &#39;xvIA7zonxGM&#x3D;1&#39;, host: &#39;localhost&#39;, service: &#39;ORCLCDB&#39;, sqlplus_bin: &#39;&#x2F;opt&#x2F;oracle&#x2F;product&#x2F;12.2.0.1&#x2F;dbhome_1&#x2F;bin&#x2F;sqlplus&#39;)
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61749"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61749"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61749</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002890
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61749
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002890
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61749"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61749"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61749</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not 
+    mandatory in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >MA-4 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61749&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61749&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000184-DB-000119&#39;
+  tag &quot;gid&quot;: &#39;V-61749&#39;
+  tag &quot;rid&quot;: &#39;SV-76239r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67665r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002890&#39;, &#39;CCI-003123&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61751"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61751"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61751</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000877
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61751
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000877
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61751"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61751"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61751</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >MA-4 c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61751&#39; do
+  title &quot;The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000185-DB-000116&#39;
+  tag &quot;gid&quot;: &#39;V-61751&#39;
+  tag &quot;rid&quot;: &#39;SV-76241r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67667r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000877&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61753"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61753"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61753</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61753
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61753"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61753"
+            >
+              <!-- Result description -->
+              When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61753</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61753&#39; do
+  title &quot;Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.&quot;
+  desc &quot;When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000187-DB-000120&#39;
+  tag &quot;gid&quot;: &#39;V-61753&#39;
+  tag &quot;rid&quot;: &#39;SV-76243r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67669r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)&quot;
+  tag &quot;fix&quot;: &quot;Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.&quot;
+  describe &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39; do
+    skip &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61755"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61755"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61755</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-16 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002262
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61755
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-16 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002262
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61755"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61755"
+            >
+              <!-- Result description -->
+              When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61755</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not                               
+    mandatory in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-16 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61755&#39; do
+  title &quot;The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.&quot;
+  desc &quot;When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000188-DB-000121&#39;
+  tag &quot;gid&quot;: &#39;V-61755&#39;
+  tag &quot;rid&quot;: &#39;SV-76245r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67671r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002262&#39;]
+  tag &quot;nist&quot;: [&#39;AC-16 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61757"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61757"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61757</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61757
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61757"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61757"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61757</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and vendor documentation to verify network connections 
+    are terminated when a database communications session is ended or after 30 minutes of inactivity.
+
+    If the network connection is not terminated, this is a finding.
+
+    The defined duration for these timeouts 30 minutes, except to fulfill documented and validated mission 
+    requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and&#x2F;or OS settings to disconnect network sessions when database communication 
+    sessions have ended or after the CMS-defined period of inactivity.
+
+    To configure this in Oracle, modify each relevant profile.  The resource name is IDLE_TIME, which is 
+    expressed in minutes.  Using PPPPPP as an example of a profile, set the timeout to 30 minutes with:
+    ALTER PROFILE PPPPPP LIMIT IDLE_TIME 30;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61757&#39; do
+  title &quot;The DBMS must terminate the network connection associated with a
+  communications session at the end of the session or 15 minutes of inactivity.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000190-DB-000137&#39;
+  tag &quot;gid&quot;: &#39;V-61757&#39;
+  tag &quot;rid&quot;: &#39;SV-76247r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67673r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001133&#39;]
+  tag &quot;nist&quot;: [&#39;SC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and vendor documentation to
+  verify network connections are terminated when a database communications
+  session is ended or after 15 minutes of inactivity.
+
+  If the network connection is not terminated, this is a finding.
+
+  The defined duration for these timeouts 15 minutes, except to fulfill
+  documented and validated mission requirements.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or OS settings to disconnect network sessions
+  when database communication sessions have ended or after the DoD-defined period
+  of inactivity.
+
+  To configure this in Oracle, modify each relevant profile.  The resource name
+  is IDLE_TIME, which is expressed in minutes.  Using PPPPPP as an example of a
+  profile, set the timeout to 15 minutes with:
+  ALTER PROFILE PPPPPP LIMIT IDLE_TIME 15;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idele time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61759"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61759"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61759</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61759
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61759"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61759"
+            >
+              <!-- Result description -->
+              Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61759</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-13, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61759&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61759&#39; do
+  title &quot;The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.&quot;
+  desc &quot;Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000140&#39;
+  tag &quot;gid&quot;: &#39;V-61759&#39;
+  tag &quot;rid&quot;: &#39;SV-76249r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67675r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61761"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61761"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61761</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61761
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database data files containing sensitive information must be
+  encrypted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61761"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61761"
+            >
+              <!-- Result description -->
+              Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61761</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database data files containing sensitive information must be
+  encrypted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-13, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61761&#39; do
+  title &quot;Database data files containing sensitive information must be
+  encrypted.&quot;
+  desc &quot;Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000141&#39;
+  tag &quot;gid&quot;: &#39;V-61761&#39;
+  tag &quot;rid&quot;: &#39;SV-76251r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67677r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61763"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61763"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61763</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61763
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect the integrity of publicly available information
+  and applications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61763"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61763"
+            >
+              <!-- Result description -->
+              The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61763</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect the integrity of publicly available information
+  and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61763&#39; do
+  title &quot;The DBMS must protect the integrity of publicly available information
+  and applications.&quot;
+  desc &quot;The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000201-DB-000145&#39;
+  tag &quot;gid&quot;: &#39;V-61763&#39;
+  tag &quot;rid&quot;: &#39;SV-76253r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67679r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.&quot;
+  describe &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61765"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61765"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61765</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001185
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61765
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001185
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61765"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61765"
+            >
+              <!-- Result description -->
+              This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61765</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not selected in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-23 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with &quot;alter profile&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   </span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61765&#39; do
+  title &quot;The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.&quot;
+  desc  &quot;This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000220-DB-000149&#39;
+  tag &quot;gid&quot;: &#39;V-61765&#39;
+  tag &quot;rid&quot;: &#39;SV-76255r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67681r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001185&#39;]
+  tag &quot;nist&quot;: [&#39;SC-23 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with \&quot;alter profile\&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   &quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_idle_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  query_sessions_per_user &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;
+  }
+
+  query_connect_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;CONNECT_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query_idle_time, profile: profile)).column(&#39;limit&#39;)
+    sessions_per_user &#x3D; sql.query(format(query_sessions_per_user, profile: profile)).column(&#39;limit&#39;)
+    connect_time &#x3D; sql.query(format(query_connect_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idle time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+
+    describe &quot;The oracle database number of sessions per user for profile: #{profile}&quot; do
+      subject { sessions_per_user }
+      it { should cmp &lt;&#x3D; 3 }
+    end
+
+    describe &quot;The oracle database connect time for profile: #{profile}&quot; do
+      subject { connect_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61769"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61769"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61769</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-24
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001665
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61769
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-24
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001665
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61769"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61769"
+            >
+              <!-- Result description -->
+              Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61769</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-24, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as &quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61769&#39; do
+  title &quot;The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.&quot;
+  desc &quot;Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000226-DB-000147&#39;
+  tag &quot;gid&quot;: &#39;V-61769&#39;
+  tag &quot;rid&quot;: &#39;SV-76259r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67685r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001665&#39;]
+  tag &quot;nist&quot;: [&#39;SC-24&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as \&quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes\&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_mode &#x3D; sql.query(&#39;select log_mode from v$database;&#39;).column(&#39;log_mode&#39;)
+
+  describe &#39;The list of oracle database log mode&#39; do
+    subject { log_mode }
+    it { should cmp &#39;ARCHIVELOG&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61771"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61771"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61771</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61771
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61771"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61771"
+            >
+              <!-- Result description -->
+              This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61771</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-28, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name &quot;TSName&quot;,
+  e.encryptionalg &quot;Algorithm&quot;,
+  d.file_name &quot;File Name&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner &quot;Owner&quot;,
+  a.table_name &quot;Table Name&quot;,
+  e.encryptionalg &quot;Algorithm&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61771&#39; do
+  title &quot;The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.&quot;
+  desc &quot;This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000231-DB-000154&#39;
+  tag &quot;gid&quot;: &#39;V-61771&#39;
+  tag &quot;rid&quot;: &#39;SV-76261r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67687r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001199&#39;]
+  tag &quot;nist&quot;: [&#39;SC-28&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name \&quot;TSName\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;,
+  d.file_name \&quot;File Name\&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner \&quot;Owner\&quot;,
+  a.table_name \&quot;Table Name\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61775"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61775"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61775</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61775
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61775"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61775"
+            >
+              <!-- Result description -->
+              Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61775</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61775&#39; do
+  title &quot;The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.&quot;
+  desc  &quot;Security functions are defined as \&quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based\&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000233-DB-000124&#39;
+  tag &quot;gid&quot;: &#39;V-61775&#39;
+  tag &quot;rid&quot;: &#39;SV-76265r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67691r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001084&#39;]
+  tag &quot;nist&quot;: [&#39;SC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.&quot;
+  tag &quot;fix&quot;: &quot;Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.&quot;
+  describe &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39; do
+    skip &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61777"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61777"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61777</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61777
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically terminate emergency accounts after 60 days for each type of account.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61777"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61777"
+            >
+              <!-- Result description -->
+              Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61777</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+    or temporary accounts, this is not a finding.
+
+    Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+    determine if emergency accounts are being automatically terminated by the system after 60 days. Check also 
+    for custom code (scheduled jobs, procedures, triggers, etc.) for achieving this. 
+
+    If emergency accounts are not being terminated after 60 days, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create a profile specifically for emergency or temporary accounts.  When creating the accounts, 
+    assign them to this profile.  Configure DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, 
+    or implement custom code, to terminate accounts with this profile after 60 days.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61777&#39; do
+  title &quot;The DBMS must automatically terminate emergency accounts after an
+  organization-defined time period for each type of account.&quot;
+  desc &quot;Emergency application accounts are typically created due to an
+  unforeseen operational event or could ostensibly be used in the event of a
+  vendor support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      In the event emergency application accounts are required, the application
+  must ensure accounts that are designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or application data compromised.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      If it is possible for any temporary emergency accounts to be created and
+  managed by Oracle, then the DBMS or application must provide or utilize a
+  mechanism to automatically terminate such accounts after an
+  organization-defined time period.
+
+      Emergency database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being misused.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000234-DB-000157&#39;
+  tag &quot;gid&quot;: &#39;V-61777&#39;
+  tag &quot;rid&quot;: &#39;SV-76267r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67693r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001682&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if emergency accounts are being automatically
+  terminated by the system after an organization-defined time period. Check also
+  for custom code (scheduled jobs, procedures, triggers, etc.) for achieving
+  this.
+
+  If emergency accounts are not being terminated after an organization-defined
+  time period, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create a profile specifically for emergency or temporary
+  accounts.  When creating the accounts, assign them to this profile.  Configure
+  DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, or
+  implement custom code, to terminate accounts with this profile after an
+  organization-defined time period.&quot;
+  describe &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39; do
+    skip &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61779"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61779"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61779</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001274
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61779
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001274
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61779"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61779"
+            >
+              <!-- Result description -->
+              Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61779</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-4 (12), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61779&#39; do
+  title &quot;The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.&quot;
+  desc &quot;Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000237-DB-000158&#39;
+  tag &quot;gid&quot;: &#39;V-61779&#39;
+  tag &quot;rid&quot;: &#39;SV-76269r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67695r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001274&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (12)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61781"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61781"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61781</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001090
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61781
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001090
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61781"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61781"
+            >
+              <!-- Result description -->
+              The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61781</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61781&#39; do
+  title &quot;The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.&quot;
+  desc &quot;The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000243-DB-000128&#39;
+  tag &quot;gid&quot;: &#39;V-61781&#39;
+  tag &quot;rid&quot;: &#39;SV-76271r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67697r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001090&#39;]
+  tag &quot;nist&quot;: [&#39;SC-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61783"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61783"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61783</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002385
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61783
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002385
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61783"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61783"
+            >
+              <!-- Result description -->
+              A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61783</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61783&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61783&#39; do
+  title &quot;The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.&quot;
+  desc &quot;A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000245-DB-000132&#39;
+  tag &quot;gid&quot;: &#39;V-61783&#39;
+  tag &quot;rid&quot;: &#39;SV-76273r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67699r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002385&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;RATE_LIMIT&#x3D;&#39; }
+    its(&#39;content&#39;) { should match &#x2F;CONNECTION_RATE_LISTENER&#x3D;\d*&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61785"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61785"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61785</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001310
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61785
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must check the validity of data inputs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001310
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61785"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61785"
+            >
+              <!-- Result description -->
+              Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS checks the validity of data inputs</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS checks the validity of data inputs</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61785</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must check the validity of data inputs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See &quot;Reporting Constraint Exceptions&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61785&#39; do
+  title &#39;The DBMS must check the validity of data inputs.&#39;
+  desc  &quot;Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000251-DB-000160&#39;
+  tag &quot;gid&quot;: &#39;V-61785&#39;
+  tag &quot;rid&quot;: &#39;SV-76275r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67701r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001310&#39;]
+  tag &quot;nist&quot;: [&#39;SI-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See \&quot;Reporting Constraint Exceptions\&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  tag &quot;fix&quot;: &quot;Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  describe &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39; do
+    skip &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61787"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61787"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61787</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-7 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002716
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002718
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61787
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must verify there have not been unauthorized changes to the
+  DBMS software and information.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-7 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002716
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002718
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61787"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61787"
+            >
+              <!-- Result description -->
+              Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61787</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-7 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61787&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61787&#39; do
+  title &quot;The system must verify there have not been unauthorized changes to the
+  DBMS software and information.&quot;
+  desc &quot;Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000262-DB-000159&#39;
+  tag &quot;gid&quot;: &#39;V-61787&#39;
+  tag &quot;rid&quot;: &#39;SV-76277r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67703r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002716&#39;, &#39;CCI-002718&#39;]
+  tag &quot;nist&quot;: [&#39;SI-7 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61789"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61789"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61789</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61789
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must identify potentially security-relevant error conditions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61789"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61789"
+            >
+              <!-- Result description -->
+              The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61789</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must identify potentially security-relevant error conditions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61789&#39; do
+  title &#39;The DBMS must identify potentially security-relevant error conditions.&#39;
+  desc  &quot;The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000265-DB-000161&#39;
+  tag &quot;gid&quot;: &#39;V-61789&#39;
+  tag &quot;rid&quot;: &#39;SV-76279r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67705r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.&quot;
+  describe &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61791"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61791"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61791</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001312
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61791
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001312
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61791"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61791"
+            >
+              <!-- Result description -->
+              Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61791</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61791&#39; do
+  title &quot;The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.&quot;
+  desc &quot;Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000266-DB-000162&#39;
+  tag &quot;gid&quot;: &#39;V-61791&#39;
+  tag &quot;rid&quot;: &#39;SV-76281r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67707r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001312&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.&quot;
+  describe &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61793"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61793"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61793</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001314
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61793
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict error messages so only authorized personnel may
+  view them.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001314
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61793"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61793"
+            >
+              <!-- Result description -->
+              If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61793</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict error messages so only authorized personnel may
+  view them.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-11 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61793&#39; do
+  title &quot;The DBMS must restrict error messages so only authorized personnel may
+  view them.&quot;
+  desc &quot;If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000267-DB-000163&#39;
+  tag &quot;gid&quot;: &#39;V-61793&#39;
+  tag &quot;rid&quot;: &#39;SV-76283r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67709r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001314&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.&quot;
+  describe &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39; do
+    skip &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61795"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61795"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61795</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (7)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001670
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61795
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (7)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001670
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61795"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61795"
+            >
+              <!-- Result description -->
+              System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61795</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-4 (7), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61795&#39; do
+  title &quot;The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.&quot;
+  desc &quot;System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000287-DB-000126&#39;
+  tag &quot;gid&quot;: &#39;V-61795&#39;
+  tag &quot;rid&quot;: &#39;SV-76285r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67711r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001670&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (7)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61797"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61797"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61797</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61797
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  created.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61797"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61797"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61797</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  created.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61797&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  created.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000291-DB-000139&#39;
+  tag &quot;gid&quot;: &#39;V-61797&#39;
+  tag &quot;rid&quot;: &#39;SV-76287r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67713r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001683&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61799"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61799"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61799</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61799
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  modified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61799"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61799"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61799</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  modified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61799&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  modified.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000292-DB-000138&#39;
+  tag &quot;gid&quot;: &#39;V-61799&#39;
+  tag &quot;rid&quot;: &#39;SV-76289r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67715r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001684&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61801"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61801"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61801</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61801
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when account disabling
+  actions are taken.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61801"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61801"
+            >
+              <!-- Result description -->
+              When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61801</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61801&#39; do
+  title &quot;The DBMS must notify appropriate individuals when account disabling
+  actions are taken.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000293-DB-000130&#39;
+  tag &quot;gid&quot;: &#39;V-61801&#39;
+  tag &quot;rid&quot;: &#39;SV-76291r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67717r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001685&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61803"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61803"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61803</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61803
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  terminated.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61803"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61803"
+            >
+              <!-- Result description -->
+              When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61803</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  terminated.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61803&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  terminated.&quot;
+  desc &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000294-DB-000129&#39;
+  tag &quot;gid&quot;: &#39;V-61803&#39;
+  tag &quot;rid&quot;: &#39;SV-76293r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67719r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001686&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61809"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61809"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61809</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61809
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must implement separation of duties through assigned
+    information access authorizations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61809"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61809"
+            >
+              <!-- Result description -->
+              Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61809</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must implement separation of duties through assigned
+    information access authorizations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61809&#39; do
+  title &quot;The DBMS must implement separation of duties through assigned
+    information access authorizations.&quot;
+  desc  &quot;Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000009&#39;
+  tag &quot;gid&quot;: &#39;V-61809&#39;
+  tag &quot;rid&quot;: &#39;SV-76299r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-003300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67725r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)&quot;
+  tag &quot;fix&quot;: &quot;Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.&quot;
+  describe &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39; do
+    skip &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61813"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61813"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61813</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001875
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61813
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide an audit log reduction capability.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001875
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61813"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61813"
+            >
+              <!-- Result description -->
+              Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides an audit log reduction capability</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides an audit log reduction capability</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61813</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide an audit log reduction capability.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Deploy software capable of performing audit data reduction.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61813&#39; do
+  title &#39;The system must provide an audit log reduction capability.&#39;
+  desc  &quot;Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000113-DB-000053&#39;
+  tag &quot;gid&quot;: &#39;V-61813&#39;
+  tag &quot;rid&quot;: &#39;SV-76303r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67729r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001875&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;Deploy software capable of performing audit data reduction.&#39;
+  describe &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39; do
+    skip &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61815"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61815"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61815</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001094
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61815
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001094
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61815"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61815"
+            >
+              <!-- Result description -->
+              When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61815</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to restrict functionality that could be used to initiate DoS attacks.
+
+    Securing the Network Connection:
+    Protecting the network and its traffic from inappropriate access or modification is the essence of network 
+    security. You should consider all paths the data travels, and assess the threats on each path and node. Then, 
+    take steps to lessen or eliminate those threats and the consequences of a security breach. In addition, 
+    monitor and audit to detect either increased threat levels or penetration attempts.
+
+    The following practices improve network security:
+
+    1. Disable the Default Listener.
+    All listeners have a unique name instead of the name LISTENER and have startup protection.
+
+    LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+    
+    This configuration prevents the default listener from starting.
+
+    2. Prevent online administration by requiring the administrator to have the write privilege on the 
+    listener.ora file on the server.
+
+    a. Add or alter this line in the listener.ora file:
+
+    ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+    b. Use RELOAD to reload the configuration.
+
+    3. Set Protection against crafted network packets on database level.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should take when bad packets are 
+    received from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the default)
+
+    NONE: The database server ignores the bad packets and does not generate any trace files or log messages. 
+    (Not recommended)
+
+    TRACE: A detailed trace file is generated when bad packets are received, which can be used to debug any 
+    problems in client&#x2F;server communication.
+
+    LOG: A minimal log message is printed in the alert logfile and in the server trace file. A minimal amount 
+    of disk space is used.
+
+    ALERT: An alert message is sent to a DBA or monitoring console.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad 
+    packets from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) | (DROP,integer) } (DROP,3 is the default)
+
+    CONTINUE: The server process continues execution. The database server may be subject to a Denial of Service (DoS) 
+    if bad packets continue to be sent by a malicious client. (Not recommended)
+
+    (DELAY, integer) :The client experiences a delay of integer seconds before the server process accepts the 
+    next request from the same client connection. Malicious clients are prevented from excessive consumption 
+    of server resources while legitimate clients experience degradation in performance but can continue to function.
+
+    (DROP, integer) : The server forcefully terminates the client connection after integer bad packets. The server 
+    protects itself at the expense of the client (for example, a client transaction may be lost). The client may 
+    reconnect and attempt the same operation.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can be made by a client on a 
+    connection to the server process. After the specified number of failure attempts, the connection will be 
+    automatically dropped by the server process.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to unlimited. (A value of 1 to 3 is 
+    recommended)
+
+    For more information about the parameters in listener.ora, 
+    see https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+    
+    4. When a host computer has multiple IP addresses associated with multiple network interface controller (NIC) 
+    cards, configure the listener to the specific IP address.
+
+    You can restrict the listener to listen on a specific IP address. Oracle recommends that you specify the specific 
+    IP addresses on these types of computers, rather than allowing the listener to listen on all IP addresses. 
+    Restricting the listener to specific IP addresses helps to prevent an intruder from stealing a TCP end point from 
+    under the listener process.
+
+    5. Restrict the privileges of the listener, so that it cannot read or write files in the database or the Oracle 
+    server address space.
+
+    The default configuration for external procedures does not require a network listener to work with Oracle Database 
+    and the extproc agent. The extproc agent is spawned directly by Oracle Database and eliminates the risks that the 
+    extproc agent might be spawned by Oracle Listener unexpectedly. This default configuration is recommended for maximum 
+    security. For more information about securing external procedures see
+    https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+    However, the extproc agent can be configured to be spawned by a listener. In that case (not recommended) the listener 
+    should have restricted privileges.
+
+    6. Use a firewall, IAW CMS network policy and guidance.
+    
+    Appropriately placed and configured firewalls can prevent outside access to your databases.
+
+    7. Prevent unauthorized administration of the Oracle listener.
+
+    Local administration of the listener is secure by default through the local operating system. Therefore configuring 
+    a password is neither required nor recommended for secure local administration. However, a password can be configured 
+    for the listener to provide security for administrative operations, such as starting or stopping the listener, 
+    viewing a list of supported services, or saving changes to the Listener Control configuration.
+
+    By default, Oracle Net Listener permits only local administration for security reasons. As a policy, the listener 
+    can be administered only by the user who started it. This is enforced through local operating system authentication. 
+    For example, if user1 starts the listener, then only user1 can administer it. Any other user trying to administer 
+    the listener gets an error. The super user is the only exception.
+
+    Oracle recommends that you perform listener administration in the default mode (secure by means of local operating 
+    system authentication), and access the system remotely using a remote logon. Oracle Enterprise Manager Cloud 
+    Control can also be used for remote administration.
+
+    8. Encrypt network traffic.  (Mandatory for sensitive data and optional for non-sensitive, as covered in other 
+    STIG requirements.)
+
+    Where applicable, use Oracle network data encryption to encrypt network traffic among clients, databases, 
+    and application servers.
+
+    9. Set Connect Rate to organization defined limit. (Also required by O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+    The connection rate limiter feature in Oracle Net Listener enables a database administrator to limit the number of 
+    new connections handled by the listener. When this feature is enabled, Oracle Net Listener imposes a user-specified 
+    maximum limit on the number of new connections handled by the listener every second.
+
+    CONNECTION_RATE_LISTENER&#x3D;10
+    LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))  
+    )
+
+    10. Setup Valid Node Checking.
+    (See also O121-BP-025600.)
+
+    Valid node checking is a security feature that protects DBMS instances from malevolent or errant Oracle Net 
+    connections over TCP&#x2F;IP, without the need for a firewall or IP address filtering at the operating system-level. 
+    The feature is controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes, and tcp.excluded_nodes.
+
+    Modify the sqlnet.ora file manually
+    TCP.VALIDNODE_CHECKING&#x3D;yes
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the supplemental 
+    file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+    If this parameter is set to yes, then incoming connections are allowed only if they originate from a node that conforms 
+    to the list specified by TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter is 
+    set to yes (no is the default).
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter 
+    is set to yes.
+
+    Modify the listener.ora file manually
+
+    TCP.EXCLUDED_NODES Syntax:
+    TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25, 172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+    TCP.INVITED_NODES Syntax:
+    TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*, 2001:DB8:200C:433B&#x2F;32)
+
+    Usage Notes:
+
+    Use TCP.INVITED_NODES to specify which clients are allowed access to the database. This list takes precedence 
+    over the TCP.EXCLUDED_NODES parameter if both lists are present. These parameters can use wildcards for IPv4 
+    addresses and CIDR notation for IPv4 and IPv6 addresses.
+
+    11. Apply Listener Security Patches.
+    (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+    Critical Patch Updates are cumulative. Therefore, the latest patch will contain all previous security patches 
+    for the Listener.
+
+    12. Ensure that listener logging is turned on.
+
+    Listener logging is on by default. If logging is not on, configure logging for all listeners in order to capture 
+    Listener commands and brute force password attacks.
+
+    13. Monitor the listener logfile.
+
+    The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors, which may signify attacks or 
+    inappropriate activity. Monitor the logfile and generate an alert whenever these errors are encountered.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61815&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61815&#39; do
+  title &quot;The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.&quot;
+  desc &quot;When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+    &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000246-DB-000133&#39;
+  tag &quot;gid&quot;: &#39;V-61815&#39;
+  tag &quot;rid&quot;: &#39;SV-76305r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67731r10_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001094&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to restrict functionality that could be
+  used to initiate DoS attacks.
+
+  Securing the Network Connection:
+  Protecting the network and its traffic from inappropriate access or
+  modification is the essence of network security. You should consider all paths
+  the data travels, and assess the threats on each path and node. Then, take
+  steps to lessen or eliminate those threats and the consequences of a security
+  breach. In addition, monitor and audit to detect either increased threat levels
+  or penetration attempts.
+
+  The following practices improve network security:
+
+  1. Disable the Default Listener.
+  All listeners have a unique name instead of the name LISTENER and have startup
+  protection.
+
+  LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+
+  This configuration prevents the default listener from starting.
+
+  2. Prevent online administration by requiring the administrator to have the
+  write privilege on the listener.ora file on the server.
+  a. Add or alter this line in the listener.ora file:
+
+  ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+  b. Use RELOAD to reload the configuration.
+
+  3. Set Protection against crafted network packets on database level.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should
+  take when bad packets are received from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the
+  default)
+
+  NONE: The database server ignores the bad packets and does not generate any
+  trace files or log messages. (Not recommended)
+
+  TRACE: A detailed trace file is generated when bad packets are received, which
+  can be used to debug any problems in client&#x2F;server communication.
+
+  LOG: A minimal log message is printed in the alert logfile and in the server
+  trace file. A minimal amount of disk space is used.
+
+  ALERT: An alert message is sent to a DBA or monitoring console.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server
+  process when receiving bad packets from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) |
+  (DROP,integer) } (DROP,3 is the default)
+
+  CONTINUE: The server process continues execution. The database server may be
+  subject to a Denial of Service (DoS) if bad packets continue to be sent by a
+  malicious client. (Not recommended)
+
+  (DELAY, integer) :The client experiences a delay of integer seconds before the
+  server process accepts the next request from the same client connection.
+  Malicious clients are prevented from excessive consumption of server resources
+  while legitimate clients experience degradation in performance but can continue
+  to function.
+
+  (DROP, integer) : The server forcefully terminates the client connection after
+  integer bad packets. The server protects itself at the expense of the client
+  (for example, a client transaction may be lost). The client may reconnect and
+  attempt the same operation.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts
+  that can be made by a client on a connection to the server process. After the
+  specified number of failure attempts, the connection will be automatically
+  dropped by the server process.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to
+  unlimited. (A value of 1 to 3 is recommended)
+
+  For more information about the parameters in listener.ora, see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+
+  4. When a host computer has multiple IP addresses associated with multiple
+  network interface controller (NIC) cards, configure the listener to the
+  specific IP address.
+
+  You can restrict the listener to listen on a specific IP address. Oracle
+  recommends that you specify the specific IP addresses on these types of
+  computers, rather than allowing the listener to listen on all IP addresses.
+  Restricting the listener to specific IP addresses helps to prevent an intruder
+  from stealing a TCP end point from under the listener process.
+
+  5. Restrict the privileges of the listener, so that it cannot read or write
+  files in the database or the Oracle server address space.
+
+  The default configuration for external procedures does not require a network
+  listener to work with Oracle Database and the extproc agent. The extproc agent
+  is spawned directly by Oracle Database and eliminates the risks that the
+  extproc agent might be spawned by Oracle Listener unexpectedly. This default
+  configuration is recommended for maximum security. For more information about
+  securing external procedures see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+  However, the extproc agent can be configured to be spawned by a listener. In
+  that case (not recommended) the listener should have restricted privileges.
+
+  6. Use a firewall, IAW DoD network policy and guidance.
+
+  Appropriately placed and configured firewalls can prevent outside access to
+  your databases.
+
+  7. Prevent unauthorized administration of the Oracle listener.
+
+  Local administration of the listener is secure by default through the local
+  operating system. Therefore configuring a password is neither required nor
+  recommended for secure local administration. However, a password can be
+  configured for the listener to provide security for administrative operations,
+  such as starting or stopping the listener, viewing a list of supported
+  services, or saving changes to the Listener Control configuration.
+
+  By default, Oracle Net Listener permits only local administration for security
+  reasons. As a policy, the listener can be administered only by the user who
+  started it. This is enforced through local operating system authentication. For
+  example, if user1 starts the listener, then only user1 can administer it. Any
+  other user trying to administer the listener gets an error. The super user is
+  the only exception.
+
+  Oracle recommends that you perform listener administration in the default mode
+  (secure by means of local operating system authentication), and access the
+  system remotely using a remote logon. Oracle Enterprise Manager Cloud Control
+  can also be used for remote administration.
+
+  8. Encrypt network traffic.  (Mandatory for sensitive data and optional for
+  non-sensitive, as covered in other STIG requirements.)
+
+  Where applicable, use Oracle network data encryption to encrypt network traffic
+  among clients, databases, and application servers.
+
+  9. Set Connect Rate to organization defined limit. (Also required by
+  O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+  The connection rate limiter feature in Oracle Net Listener enables a database
+  administrator to limit the number of new connections handled by the listener.
+  When this feature is enabled, Oracle Net Listener imposes a user-specified
+  maximum limit on the number of new connections handled by the listener every
+  second.
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+  LISTENER&#x3D;
+  (ADDRESS_LIST&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+  )
+
+  10. Setup Valid Node Checking.
+  (See also O121-BP-025600.)
+
+  Valid node checking is a security feature that protects DBMS instances from
+  malevolent or errant Oracle Net connections over TCP&#x2F;IP, without the need for a
+  firewall or IP address filtering at the operating system-level. The feature is
+  controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes,
+  and tcp.excluded_nodes.
+
+  Modify the sqlnet.ora file manually
+  TCP.VALIDNODE_CHECKING&#x3D;yes
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  If this parameter is set to yes, then incoming connections are allowed only if
+  they originate from a node that conforms to the list specified by
+  TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes (no is the default).
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes.
+
+  Modify the listener.ora file manually
+
+  TCP.EXCLUDED_NODES Syntax:
+  TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25,
+  172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+  TCP.INVITED_NODES Syntax:
+  TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*,
+  2001:DB8:200C:433B&#x2F;32)
+
+  Usage Notes:
+
+  Use TCP.INVITED_NODES to specify which clients are allowed access to the
+  database. This list takes precedence over the TCP.EXCLUDED_NODES parameter if
+  both lists are present. These parameters can use wildcards for IPv4 addresses
+  and CIDR notation for IPv4 and IPv6 addresses.
+
+  11. Apply Listener Security Patches.
+  (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+  Critical Patch Updates are cumulative. Therefore, the latest patch will contain
+  all previous security patches for the Listener.
+
+  12. Ensure that listener logging is turned on.
+
+  Listener logging is on by default. If logging is not on, configure logging for
+  all listeners in order to capture Listener commands and brute force password
+  attacks.
+
+  13. Monitor the listener logfile.
+
+  The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors,
+  which may signify attacks or inappropriate activity. Monitor the logfile and
+  generate an alert whenever these errors are encountered.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))&#39; }
+    its(&#39;content&#39;) {
+      should include &#39;LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))&#39;
+    }
+    its(&#39;content&#39;) { should include &#39;CONNECTION_RATE_LISTENER&#x3D;10&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_MAX_FAILED_LOGIN_ATTEMPTS&#x3D;3&#39; }
+    its(&#39;content&#39;) { should include &#39;ADMIN_RESTRICTIONS_LISTENER&#x3D;ON&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_PROTOCOL_ERROR_TRACE_ACTION&#x3D;TRACE&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.INVITED_NODES&#x3D;&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.EXCLUDED_NODES&#x3D;&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;TCP.VALIDNODE_CHECKING&#x3D;yes&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61817"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61817"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61817</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61817
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61817"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61817"
+            >
+              <!-- Result description -->
+              In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61817</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61817&#39; do
+  title &quot;The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.&quot;
+  desc &quot;In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000247-DB-000134&#39;
+  tag &quot;gid&quot;: &#39;V-61817&#39;
+  tag &quot;rid&quot;: &#39;SV-76307r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67733r8_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001095&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select DISTINCT b.limit from dba_users a, dba_profiles b where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user profile limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61819"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61819"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61819</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-6
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002394
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61819
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-6
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002394
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61819"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61819"
+            >
+              <!-- Result description -->
+              Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61819</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-6, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61819&#39; do
+  title &quot;The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.&quot;
+  desc &quot;Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000248-DB-000135&#39;
+  tag &quot;gid&quot;: &#39;V-61819&#39;
+  tag &quot;rid&quot;: &#39;SV-76309r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67735r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002394&#39;]
+  tag &quot;nist&quot;: [&#39;SC-6&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select
+    DISTINCT b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61843"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61843"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61843</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61843
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61843"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61843"
+            >
+              <!-- Result description -->
+              To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61843</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61843&#39; do
+  title &quot;Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.&quot;
+  desc &quot;To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61843&#39;
+  tag &quot;rid&quot;: &#39;SV-76333r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67759r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.&quot;
+  describe &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39; do
+    skip &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61845"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61845"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61845</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61845
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61845"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61845"
+            >
+              <!-- Result description -->
+              The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61845</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\oracle\product\12.1.0\db_1\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61845&#39; do
+  title &quot;When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.&quot;
+  desc &quot;The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61845&#39;
+  tag &quot;rid&quot;: &#39;SV-76335r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015602&#39;
+  tag &quot;fix_id&quot;: &#39;F-67761r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.&quot;
+  describe &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39; do
+    skip &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61849"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61849"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61849</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61849
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS default accounts must be protected from misuse.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61849"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61849"
+            >
+              <!-- Result description -->
+              The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS default accounts are protected from misuse</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS default accounts are protected from misuse</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61849</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS default accounts must be protected from misuse.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61849&#39; do
+  title &#39;DBMS default accounts must be protected from misuse.&#39;
+  desc  &quot;The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000023&#39;
+  tag &quot;gid&quot;: &#39;V-61849&#39;
+  tag &quot;rid&quot;: &#39;SV-76339r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-004701&#39;
+  tag &quot;fix_id&quot;: &#39;F-67765r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.&quot;
+  describe &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39; do
+    skip &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61853"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61853"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61853</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61853
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61853"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61853"
+            >
+              <!-- Result description -->
+              It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61853</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61853&#39; do
+  title &quot;Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.&quot;
+  desc &quot;It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, \&quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.\&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000109-DB-000049&#39;
+  tag &quot;gid&quot;: &#39;V-61853&#39;
+  tag &quot;rid&quot;: &#39;SV-76343r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-008601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67769r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1&quot;
+  describe &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39; do
+    skip &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61865"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61865"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61865</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61865
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of the DBMS software installation account must be restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61865"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61865"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the use of the DBMS software installation account is restricted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the use of the DBMS software installation account is restricted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61865</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of the DBMS software installation account must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61865&#39; do
+  title &#39;Use of the DBMS software installation account must be restricted.&#39;
+  desc  &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000022&#39;
+  tag &quot;gid&quot;: &#39;V-61865&#39;
+  tag &quot;rid&quot;: &#39;SV-76355r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-004600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67781r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.&quot;
+  describe &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39; do
+    skip &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61867"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61867"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61867</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61867
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61867"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61867"
+            >
+              <!-- Result description -->
+              Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61867</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61867&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+          skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61867&#39; do
+  title &quot;Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-61867&#39;
+  tag &quot;rid&quot;: &#39;SV-76357r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67783r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61869"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61869"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61869</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61869
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61869"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61869"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61869</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61869&#39; do
+  title &quot;The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000207&#39;
+  tag &quot;gid&quot;: &#39;V-61869&#39;
+  tag &quot;rid&quot;: &#39;SV-76359r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-011200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67785r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot; do
+      skip &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA&#39;s users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;oracle_dbas&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61871"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61871"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61871</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001844
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61871
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001844
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61871"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61871"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61871</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61871&#39; do
+  title &quot;The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000102-DB-000045&#39;
+  tag &quot;gid&quot;: &#39;V-61871&#39;
+  tag &quot;rid&quot;: &#39;SV-76361r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-008100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67787r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001844&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61873"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61873"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61873</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61873
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS software installation account must be restricted to
+  authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61873"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61873"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61873</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software installation account must be restricted to
+  authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61873&#39; do
+  title &quot;The DBMS software installation account must be restricted to
+  authorized users.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000198&#39;
+  tag &quot;gid&quot;: &#39;V-61873&#39;
+  tag &quot;rid&quot;: &#39;SV-76363r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67789r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39; do
+
+    skip &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61875"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61875"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61875</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61875
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61875"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61875"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61875</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61875&#39; do
+  title &quot;Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000199&#39;
+  tag &quot;gid&quot;: &#39;V-61875&#39;
+  tag &quot;rid&quot;: &#39;SV-76365r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67791r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.&quot;
+  describe &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39; do
+    skip &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61877"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61877"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61877</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61877
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS software libraries must be periodically backed up.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61877"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61877"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software libraries are periodically backed up</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software libraries are periodically backed up</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61877</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software libraries must be periodically backed up.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure backups to include all DBMS application and third-party
+  database application software libraries.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61877&#39; do
+  title &#39;The DBMS software libraries must be periodically backed up.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000100&#39;
+  tag &quot;gid&quot;: &#39;V-61877&#39;
+  tag &quot;rid&quot;: &#39;SV-76367r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67793r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure backups to include all DBMS application and third-party
+  database application software libraries.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39; do
+    skip &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61879"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61879"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61879</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61879
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61879"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61879"
+            >
+              <!-- Result description -->
+              To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61879</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61879&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).&quot;
+  desc &quot;To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000148-DB-000103&#39;
+  tag &quot;gid&quot;: &#39;V-61879&#39;
+  tag &quot;rid&quot;: &#39;SV-76369r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67795r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000764&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61881"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61881"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61881</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61881
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61881"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61881"
+            >
+              <!-- Result description -->
+              Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61881</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-8, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61881&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).&quot;
+  desc  &quot;Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000180-DB-000115&#39;
+  tag &quot;gid&quot;: &#39;V-61881&#39;
+  tag &quot;rid&quot;: &#39;SV-76371r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-015800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67797r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000804&#39;]
+  tag &quot;nist&quot;: [&#39;IA-8&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+    users (or processes acting on behalf of non-organizational users).&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61883"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61883"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61883</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61883
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must separate user functionality (including user interface
+  services) from database management functionality.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61883"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61883"
+            >
+              <!-- Result description -->
+              Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61883</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-2, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61883&#39; do
+  title &quot;The DBMS must separate user functionality (including user interface
+  services) from database management functionality.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000211-DB-000122&#39;
+  tag &quot;gid&quot;: &#39;V-61883&#39;
+  tag &quot;rid&quot;: &#39;SV-76373r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67799r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001082&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39; do
+    skip &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61885"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61885"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61885</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001083
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61885
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001083
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61885"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61885"
+            >
+              <!-- Result description -->
+              Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61885</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61885&#39; do
+  title &quot;The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000212-DB-000123&#39;
+  tag &quot;gid&quot;: &#39;V-61885&#39;
+  tag &quot;rid&quot;: &#39;SV-76375r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67801r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001083&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61887"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61887"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61887</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61887
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61887"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61887"
+            >
+              <!-- Result description -->
+              Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61887</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61887&#39; do
+  title &quot;The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.&quot;
+  desc &quot;Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000080-DB-000063&#39;
+  tag &quot;gid&quot;: &#39;V-61887&#39;
+  tag &quot;rid&quot;: &#39;SV-76377r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P3-006200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67803r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000166&#39;]
+  tag &quot;nist&quot;: [&#39;AU-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61963"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61963"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61963</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61963
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61963"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61963"
+            >
+              <!-- Result description -->
+              Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61963</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61963&#39; do
+  title &quot;The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.&quot;
+  desc &quot;Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61963&#39;
+  tag &quot;rid&quot;: &#39;SV-76453r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67883r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.&quot;
+  describe &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39; do
+    skip &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61965"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61965"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61965</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61965
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61965"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61965"
+            >
+              <!-- Result description -->
+              The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61965</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\WINDOWS\system32\config\EventLogs\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61965&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61965&#39; do
+  title &quot;The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.&quot;
+  desc &quot;The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61965&#39;
+  tag &quot;rid&quot;: &#39;SV-76455r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025101&#39;
+  tag &quot;fix_id&quot;: &#39;F-67885r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\\WINDOWS\\system32\\config\\EventLogs\\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database audit trail&#39; do
+    subject { audit_trail }
+    it { should_not cmp &#39;NONE&#39; }
+  end
+
+  get_audit_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  audit_file_dest &#x3D; get_audit_file_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{audit_file_dest}&#x2F; |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61967"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61967"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61967</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61967
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61967"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61967"
+            >
+              <!-- Result description -->
+              Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61967</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Limit concurrent connections for each system account to a number less than or equal to the 
+    organization-defined number of sessions using the following SQL. Create profiles that conform to the 
+    requirements. Assign users to the appropriate profile.
+
+    The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy the STIG 
+    requirements pertaining to the profile parameters. Oracle recommends that this profile be customized with 
+    any site-specific requirements and assigned to all users where applicable.  Note: It remains necessary to 
+    create a customized replacement for the password validation function, ORA12C_STRONG_VERIFY_FUNCTION, if 
+    relying on this technique to verify password complexity.
+
+    The defaults for ORA_STIG_PROFILE are set as follows:
+    Resource Name                   Limit
+    -------------                   ------
+    COMPOSITE_LIMIT                 DEFAULT
+    SESSIONS_PER_USER               DEFAULT
+    CPU_PER_SESSION                 DEFAULT
+    CPU_PER_CALL                    DEFAULT
+    LOGICAL_READS_PER_SESSION       DEFAULT
+    LOGICAL_READS_PER_CALL          DEFAULT
+    IDLE_TIME                          15
+    CONNECT_TIME                    DEFAULT
+    PRIVATE_SGA                     DEFAULT
+    FAILED_LOGIN_ATTEMPTS               3 
+    PASSWORD_LIFE_TIME                 60
+    PASSWORD_REUSE_TIME               365
+    PASSWORD_REUSE_MAX                 10
+    PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+    PASSWORD_LOCK_TIME              UNLIMITED
+    PASSWORD_GRACE_TIME                 5
+
+    Change the value of SESSIONS_PER_USER (along with the other parameters, where relevant) from UNLIMITED to 
+    CMS-compliant, site-specific requirements and then assign users to the profile.
+    ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+    To assign the user to the profile do the following:
+    ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61967&#39; do
+  title &quot;The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.&quot;
+  desc  &quot;Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000001-DB-000031&#39;
+  tag &quot;gid&quot;: &#39;V-61967&#39;
+  tag &quot;rid&quot;: &#39;SV-76457r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-000100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67887r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000054&#39;]
+  tag &quot;nist&quot;: [&#39;AC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Limit concurrent connections for each system account to a number
+  less than or equal to the organization-defined number of sessions using the
+  following SQL. Create profiles that conform to the requirements. Assign users
+  to the appropriate profile.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  The defaults for ORA_STIG_PROFILE are set as follows:
+  Resource Name                   Limit
+  -------------                   ------
+  COMPOSITE_LIMIT                 DEFAULT
+  SESSIONS_PER_USER               DEFAULT
+  CPU_PER_SESSION                 DEFAULT
+  CPU_PER_CALL                    DEFAULT
+  LOGICAL_READS_PER_SESSION       DEFAULT
+  LOGICAL_READS_PER_CALL          DEFAULT
+  IDLE_TIME                          15
+  CONNECT_TIME                    DEFAULT
+  PRIVATE_SGA                     DEFAULT
+  FAILED_LOGIN_ATTEMPTS               3
+  PASSWORD_LIFE_TIME                 60
+  PASSWORD_REUSE_TIME               365
+  PASSWORD_REUSE_MAX                 10
+  PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME              UNLIMITED
+  PASSWORD_GRACE_TIME                 5
+
+  Change the value of SESSIONS_PER_USER (along with the other parameters, where
+  relevant) from UNLIMITED to DoD-compliant, site-specific requirements and then
+  assign users to the profile.
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+  To assign the user to the profile do the following:
+  ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  concurrent_sessions &#x3D; sql.query(&quot;SELECT limit FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database number of concurrent sessions allowed&#39; do
+    subject { concurrent_sessions }
+    it { should_not include &#39;UNLIMITED&#39; }
+    it { should_not include &#39;DEFAULT&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61969"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61969"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61969</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001878
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61969
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide a report generation capability for audit
+  reduction data.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001878
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61969"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61969"
+            >
+              <!-- Result description -->
+              In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61969</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide a report generation capability for audit
+  reduction data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61969&#39; do
+  title &quot;The system must provide a report generation capability for audit
+  reduction data.&quot;
+  desc  &quot;In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000114-DB-000054&#39;
+  tag &quot;gid&quot;: &#39;V-61969&#39;
+  tag &quot;rid&quot;: &#39;SV-76459r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67889r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001878&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.&quot;
+  describe &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39; do
+    skip &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-68863"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-68863"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-68863</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-68863
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-68863"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-68863"
+            >
+              <!-- Result description -->
+              Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-68863</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-68863&#39; do
+  title &quot;Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-68863&#39;
+  tag &quot;rid&quot;: &#39;SV-83467r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010710&#39;
+  tag &quot;fix_id&quot;: &#39;F-75045r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.&quot;
+  describe &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39; do
+    skip &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61409"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61409"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61409</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61409
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61409"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61409"
+            >
+              <!-- Result description -->
+              Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is retained for at least one year</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is retained for at least one year</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is retained for at least one year</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is retained for at least one year</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61409</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement an audit retention policy and 
+    procedures.
+
+    It is recommended that the most recent ninety days of audit logs remain 
+    available online.
+
+    After thirty ninety days, the audit logs may be maintained off-line.
+
+    Online maintenance provides for a more timely capability and inclination to         
+    investigate suspicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61409&#39; do
+  title &#39;Audit trail data must be retained for at least one year.&#39;
+  desc  &quot;Without preservation, a complete discovery of an attack or suspicious
+  activity may not be determined.  DBMS audit data also contributes to the
+  complete investigation of unauthorized activity and needs to be included in
+  audit retention plans and procedures.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61409&#39;
+  tag &quot;rid&quot;: &#39;SV-75899r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67325r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review and verify the implementation of an audit trail
+  retention policy.
+
+  Verify that audit data is maintained for a minimum of one year.
+
+  If audit data is not maintained for a minimum of one year, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61411"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61411"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61411</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61411
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to default accounts used to support replication must be
+  restricted to authorized DBAs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61411"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61411"
+            >
+              <!-- Result description -->
+              Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61411</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61411&#39; do
+  title &quot;Access to default accounts used to support replication must be
+  restricted to authorized DBAs.&quot;
+  desc &quot;Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61411&#39;
+  tag &quot;rid&quot;: &#39;SV-75901r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67327r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+  tag &quot;fix&quot;: &quot;Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.&quot;
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61413"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61413"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61413</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61413
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle instance names must not contain Oracle version numbers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61413"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61413"
+            >
+              <!-- Result description -->
+              Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61413</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle instance names must not contain Oracle version numbers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61413&#39; do
+  title &#39;Oracle instance names must not contain Oracle version numbers.&#39;
+  desc  &quot;Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61413&#39;
+  tag &quot;rid&quot;: &#39;SV-75903r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67329r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.&quot;
+  tag &quot;fix&quot;: &quot;Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+  db_instance_name &#x3D; sql.query(&#39;select instance_name from v$instance;&#39;).column(&#39;instance_name&#39;)
+
+  describe &#39;The oracle database instance name&#39; do
+    subject { db_instance_name }
+    it { should_not include version.to_s }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61415"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61415"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61415</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61415
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Fixed user and public database links must be authorized for use.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61415"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61415"
+            >
+              <!-- Result description -->
+              Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61415</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Fixed user and public database links must be authorized for use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61415&#39; do
+  title &#39;Fixed user and public database links must be authorized for use.&#39;
+  desc  &quot;Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61415&#39;
+  tag &quot;rid&quot;: &#39;SV-75905r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67331r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61417"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61417"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61417</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61417
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61417"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61417"
+            >
+              <!-- Result description -->
+              Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61417</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61417&#39; do
+  title &quot;A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.&quot;
+  desc &quot;Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.&quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61417&#39;
+  tag &quot;rid&quot;: &#39;SV-75907r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67333r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.&quot;
+  tag &quot;fix&quot;: &quot;To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  controlfiles &#x3D; sql.query(&#39;select name from v$controlfile;&#39;).column(&#39;name&#39;)
+  partitions &#x3D; []
+
+  controlfiles.each do |files|
+    file &#x3D; files[1..-1]
+    get_pos_slash &#x3D; file.index(&#39;&#x2F;&#39;)
+    partition &#x3D; file[0..get_pos_slash]
+    partitions.push(partition)
+  end
+
+  control_file1_partition &#x3D; partitions[0]
+  control_file2_partition &#x3D; partitions[1]
+
+  describe &quot;The oracable control file permission: #{control_file1_partition}&quot; do
+    subject { control_file1_partition }
+    it { should_not cmp control_file2_partition }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61419"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61419"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61419</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61419
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61419"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61419"
+            >
+              <!-- Result description -->
+              The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61419</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61419&#39; do
+  title &quot;A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.&quot;
+  desc &quot;The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61419&#39;
+  tag &quot;rid&quot;: &#39;SV-75909r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67335r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&#39;select count(*) from V$LOG;&#39;).column(&#39;count(*)&#39;) do
+    it { should cmp &gt;&#x3D; 2 }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61421"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61421"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61421</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61421
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61421"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61421"
+            >
+              <!-- Result description -->
+              An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61421</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61421&#39; do
+  title &quot;The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.&quot;
+  desc &quot;An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61421&#39;
+  tag &quot;rid&quot;: &#39;SV-75911r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67337r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;&quot;).row(0).column(&quot;grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name&quot;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61425"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61425"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61425</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61425
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61425"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61425"
+            >
+              <!-- Result description -->
+              Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61425</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61425&#39; do
+  title &#39;The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.&#39;
+  desc  &quot;Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61425&#39;
+  tag &quot;rid&quot;: &#39;SV-75915r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67341r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_AUTHENT parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61427"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61427"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61427</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61427
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61427"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61427"
+            >
+              <!-- Result description -->
+              Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61427</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61427&#39; do
+  title &#39;The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.&#39;
+  desc  &quot;Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61427&#39;
+  tag &quot;rid&quot;: &#39;SV-75917r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67343r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_ROLES parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61429"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61429"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61429</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61429
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle SQL92_SECURITY parameter must be set to TRUE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61429"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61429"
+            >
+              <!-- Result description -->
+              The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61429</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle SQL92_SECURITY parameter must be set to TRUE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61429&#39; do
+  title &#39;The Oracle SQL92_SECURITY parameter must be set to TRUE.&#39;
+  desc  &quot;The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61429&#39;
+  tag &quot;rid&quot;: &#39;SV-75919r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67345r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database SQL92_SECURITY parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;TRUE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61431"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61431"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61431</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61431
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61431"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61431"
+            >
+              <!-- Result description -->
+              The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61431</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61431&#39; do
+  title &quot;The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.&quot;
+  desc &quot;The REMOTE_LOGIN_PASSWORDFILE setting of \&quot;NONE\&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  \&quot;EXCLUSIVE\&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to \&quot;EXCLUSIVE\&quot;, remote connections to the database as \&quot;internal\&quot;
+  or \&quot;as SYSDBA\&quot; are not logged to an individual account.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61431&#39;
+  tag &quot;rid&quot;: &#39;SV-75921r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67347r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;&quot;).column(&#39;value&#39;)
+
+  describe.one do
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;EXCLUSIVE&#39; }
+    end
+
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;NONE&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61433"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61433"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61433</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61433
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61433"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61433"
+            >
+              <!-- Result description -->
+              The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61433</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61433&#39; do
+  title &quot;System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61433&#39;
+  tag &quot;rid&quot;: &#39;SV-75923r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67349r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61435"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61435"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61435</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61435
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  System Privileges must not be granted to PUBLIC.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61435"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61435"
+            >
+              <!-- Result description -->
+              System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61435</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System Privileges must not be granted to PUBLIC.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61435&#39; do
+  title &#39;System Privileges must not be granted to PUBLIC.&#39;
+  desc  &quot;System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61435&#39;
+  tag &quot;rid&quot;: &#39;SV-75925r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67351r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;privilege&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61437"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61437"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61437</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61437
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61437"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61437"
+            >
+              <!-- Result description -->
+              The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61437</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61437&#39; do
+  title &quot;Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61437&#39;
+  tag &quot;rid&quot;: &#39;SV-75927r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67353r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_option &#x3D; sql.query(&quot;select grantee from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_admin_option.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_option.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61439"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61439"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61439</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61439
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Object permissions granted to PUBLIC must be restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61439"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61439"
+            >
+              <!-- Result description -->
+              Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: CTXSYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: XDB with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: CTXSYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: XDB with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: CTXSYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: XDB with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: CTXSYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: XDB with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS with access to PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61439</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Object permissions granted to PUBLIC must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61439&#39; do
+  title &#39;Object permissions granted to PUBLIC must be restricted.&#39;
+  desc  &quot;Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61439&#39;
+  tag &quot;rid&quot;: &#39;SV-75929r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67355r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_public_access &#x3D; sql.query(&quot;select DISTINCT owner from dba_tab_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).column(&#39;owner&#39;).uniq
+
+  if users_with_public_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with access to PUBLIC, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with access to PUBLIC&#39;
+    end
+  else
+    users_with_public_access.each do |user|
+      describe &quot;oracle user: #{user} with access to PUBLIC&quot; do
+        subject { user }
+        it { should be_in input(&#39;users_allowed_access_to_public&#39;)}
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61441"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61441"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61441</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61441
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle Listener must be configured to require administration
+  authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61441"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61441"
+            >
+              <!-- Result description -->
+              Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61441</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle Listener must be configured to require administration
+  authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If &quot;Security &#x3D; OFF&quot; is displayed, this is a finding.
+
+  If &quot;Security &#x3D; ON: Local OS Authentication&quot; is displayed, this is not a
+  finding.
+
+  If &quot;Security &#x3D; ON: Password or Local OS Authentication&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61441&#39; do
+  title &quot;The Oracle Listener must be configured to require administration
+  authentication.&quot;
+  desc &quot;Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61441&#39;
+  tag &quot;rid&quot;: &#39;SV-75931r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67357r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If \&quot;Security &#x3D; OFF\&quot; is displayed, this is a finding.
+
+  If \&quot;Security &#x3D; ON: Local OS Authentication\&quot; is displayed, this is not a
+  finding.
+
+  If \&quot;Security &#x3D; ON: Password or Local OS Authentication\&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.&quot;
+  tag &quot;fix&quot;: &quot;By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.&quot;
+
+  listener_name &#x3D; command(&quot;ps -ef | grep tnslsnr | grep -v grep|awk &#39;{ print $9; }&#39;&quot;).stdout.strip
+
+  listener_status &#x3D; command(&quot;lsnrctl status #{listener_name}&quot;).stdout.strip
+
+  describe &#39;The Oracle Listener status&#39; do
+    subject { listener_status }
+    it { should_not include &#39;Security                  OFF&#39; }
+    it { should_not include &#39;Security                  ON: Password or Local OS Authentication&#39; }
+  end
+  describe listener_status do
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61443"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61443"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61443</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61443
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application role permissions must not be assigned to the Oracle PUBLIC
+  role.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61443"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61443"
+            >
+              <!-- Result description -->
+              Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SQL Column value is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61443</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61443&#39; do
+  title &quot;Application role permissions must not be assigned to the Oracle PUBLIC
+  role.&quot;
+  desc &quot;Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61443&#39;
+  tag &quot;rid&quot;: &#39;SV-75933r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67359r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;granted_role&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61445"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61445"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61445</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61445
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle application administration roles must be disabled if not
+  required and authorized.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61445"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61445"
+            >
+              <!-- Result description -->
+              Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with admin option: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61445</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle application administration roles must be disabled if not
+  required and authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61445&#39; do
+  title &quot;Oracle application administration roles must be disabled if not
+  required and authorized.&quot;
+  desc &quot;Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61445&#39;
+  tag &quot;rid&quot;: &#39;SV-75935r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67361r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dba_role &#x3D; sql.query(&quot;select grantee from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dba_role.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_dba_role.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_dba_role&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61447"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61447"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61447</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61447
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61447"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61447"
+            >
+              <!-- Result description -->
+              Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61447</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure communications between the DBMS and remote 
+       applications&#x2F;application servers to use CMS-approved encryption.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61447&#39; do
+  title &quot;Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  &quot;
+  desc &quot;Multi-tier systems may be configured with the database and connecting
+  middle-tier system located on an internal network, with the database located on
+  an internal network behind a firewall and the middle-tier system located in a
+  DMZ. In cases where either or both systems are located in the DMZ (or on
+  networks external to DoD), network communications between the systems must be
+  encrypted.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61447&#39;
+  tag &quot;rid&quot;: &#39;SV-75937r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67363r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure communications between the DBMS and remote
+  applications&#x2F;application servers to use DoD-approved encryption.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61449"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61449"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61449</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61449
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61449"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61449"
+            >
+              <!-- Result description -->
+              Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61449</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61449&#39; do
+  title &quot;Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.&quot;
+  desc &quot;Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61449&#39;
+  tag &quot;rid&quot;: &#39;SV-75939r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67365r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_jobs &#x3D; sql.query(&quot;select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;).column(&#39;job_name&#39;)
+
+  describe &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot; do
+    skip &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61451"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61451"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61451</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61451
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unauthorized database links must not be defined and active.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61451"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61451"
+            >
+              <!-- Result description -->
+              DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61451</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized database links must not be defined and active.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61451&#39; do
+  title &#39;Unauthorized database links must not be defined and active.&#39;
+  desc  &quot;DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61451&#39;
+  tag &quot;rid&quot;: &#39;SV-75941r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67367r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61453"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61453"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61453</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61453
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Sensitive information from production database exports must be
+  modified before import to a development database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61453"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61453"
+            >
+              <!-- Result description -->
+              Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61453</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Sensitive information from production database exports must be
+  modified before import to a development database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61453&#39; do
+  title &quot;Sensitive information from production database exports must be
+  modified before import to a development database.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers do not have a need to know to sensitive data. Any access
+  they may have to production data would be considered unauthorized access and
+  subject the sensitive data to unlawful or unauthorized disclosure. See DODD
+  8500.1 for a definition of Sensitive Information.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61453&#39;
+  tag &quot;rid&quot;: &#39;SV-75943r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67369r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.&quot;
+  describe &#39;A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database&#39; do
+    skip &#39;A manual review is required to ensure sensitive information from production database exports are
+    modified before import to a development database&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61455"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61455"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61455</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61455
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61455"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61455"
+            >
+              <!-- Result description -->
+              Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61455</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61455&#39; do
+  title &quot;Application user privilege assignment must be reviewed monthly or more
+  frequently to ensure compliance with least privilege and documented policy.&quot;
+  desc &quot;Users granted privileges not required to perform their assigned
+  functions are able to make unauthorized modifications to the production data or
+  database. Monthly or more frequent periodic review of privilege assignments
+  assures that organizational and&#x2F;or functional changes are reflected
+  appropriately.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61455&#39;
+  tag &quot;rid&quot;: &#39;SV-75945r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67371r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61457"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61457"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61457</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61457
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Audit trail data must be reviewed daily or more frequently.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61457"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61457"
+            >
+              <!-- Result description -->
+              Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is reviewed daily or more frequently</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is reviewed daily or more frequently</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is reviewed daily or more frequently</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure audit trail data is reviewed daily or more frequently</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61457</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit trail data must be reviewed daily or more frequently.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures to monitor
+  audit trail data daily.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61457&#39; do
+  title &#39;Audit trail data must be reviewed daily or more frequently.&#39;
+  desc  &quot;Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61457&#39;
+  tag &quot;rid&quot;: &#39;SV-75947r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67373r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  audit trail data daily.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61459"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61459"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61459</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61459
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61459"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61459"
+            >
+              <!-- Result description -->
+              The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_name is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_value is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSBACKUP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSDG is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_name is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_value is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSBACKUP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSDG is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_name is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_value is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSBACKUP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSDG is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_name is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database property_value is expected not to include &quot;SYSTEM&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSBACKUP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSDG is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users with system tablespace: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61459</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the &quot;alter user&quot; for each affected user account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61459&#39; do
+  title &quot;Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.&quot;
+  desc  &quot;The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61459&#39;
+  tag &quot;rid&quot;: &#39;SV-75949r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67375r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the \&quot;alter user\&quot; for each affected user account.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  property_name &#x3D; sql.query(&quot;select property_name
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_name&#39;)
+
+  describe &#39;The oracle database property_name&#39; do
+    subject { property_name }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  property_value &#x3D; sql.query(&quot;select property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_value&#39;)
+
+  describe &#39;The oracle database property_value&#39; do
+    subject { property_value }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  users_with_system_tablespace &#x3D; sql.query(&quot;select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);&quot;).column(&#39;username&#39;).uniq
+  if users_with_system_tablespace.empty?
+    impact 0.0
+    describe &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_system_tablespace.each do |user|
+      describe &quot;oracle users with system tablespace: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_system_tablespace&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61461"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61461"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61461</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61461
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application owner accounts must have a dedicated application
+  tablespace.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61461"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61461"
+            >
+              <!-- Result description -->
+              Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle db application owners: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61461</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application owner accounts must have a dedicated application
+  tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61461&#39; do
+  title &quot;Application owner accounts must have a dedicated application
+  tablespace.&quot;
+  desc &quot;Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61461&#39;
+  tag &quot;rid&quot;: &#39;SV-75951r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67377r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  application_owners &#x3D; sql.query(&quot;select distinct owner
+  from dba_SEGMENTS;&quot;).column(&#39;owner&#39;).uniq
+  if application_owners.empty?
+    impact 0.0
+    describe &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39;
+    end
+  else
+    application_owners.each do |user|
+      describe &quot;oracle db application owners: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_application_owners&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61463"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61463"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61463</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61463
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61463"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61463"
+            >
+              <!-- Result description -->
+              The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61463</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61463&#39; do
+  title &quot;The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.&quot;
+  desc  &quot;The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61463&#39;
+  tag &quot;rid&quot;: &#39;SV-75953r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67379r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_archive_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database log_archive_dest parameter&#39; do
+    subject { log_archive_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  parameter &#x3D; sql.query(&quot;select DISTINCT value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database value for log_archive_dest parameter&#39; do
+    subject { parameter }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  db_recovery_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;&quot;).column(&#39;value&#39;).uniq
+
+  describe &#39;The oracle database db_recovery_file_dest parameter&#39; do
+    subject { db_recovery_file_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61465"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61465"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61465</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61465
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61465"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61465"
+            >
+              <!-- Result description -->
+              The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61465</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61465&#39; do
+  title &quot;The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.&quot;
+  desc  &quot;The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61465&#39;
+  tag &quot;rid&quot;: &#39;SV-75955r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67381r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database _TRACE_FILES_PUBLIC parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;TRUE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61467"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61467"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61467</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61467
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61467"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61467"
+            >
+              <!-- Result description -->
+              Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYSKM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SCHEDULER_ADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: DBA is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle user: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61467</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61467&#39; do
+  title &quot;Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.&quot;
+  desc &quot;Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61467&#39;
+  tag &quot;rid&quot;: &#39;SV-75957r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67383r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+
+  unlocked_accounts &#x3D; sql.query(&quot;select distinct o.owner from dba_objects o, dba_users u
+  where
+   o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;&quot;).column(&#39;owner&#39;).uniq
+  if unlocked_accounts.empty?
+    impact 0.0
+    describe &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39; do
+      skip &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39;
+    end
+  else
+    unlocked_accounts.each do |user|
+      describe &quot;oracle user: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_unlocked_oracledb_accounts&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61487"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61487"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61487</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61487
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61487"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61487"
+            >
+              <!-- Result description -->
+              Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61487</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61487&#39; do
+  title &quot;DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.&quot;
+  desc &quot;Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61487&#39;
+  tag &quot;rid&quot;: &#39;SV-75977r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67403r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.&quot;
+  tag &quot;fix&quot;: &quot;Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.&#39; do
+    skip &#39;A manual review is required to ensure DBMS production application and data directories are protected
+  from developers on shared production&#x2F;development DBMS host systems.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61489"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61489"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61489</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61489
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of the DBMS installation account must be logged.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61489"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61489"
+            >
+              <!-- Result description -->
+              The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61489</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of the DBMS installation account must be logged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61489&#39; do
+  title &#39;Use of the DBMS installation account must be logged.&#39;
+  desc  &quot;The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61489&#39;
+  tag &quot;rid&quot;: &#39;SV-75979r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67405r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.&quot;
+  describe command(&quot;grep -ie &#39;^[^#]*NOPASSWD&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe command(&quot;grep -ie &#39;^[^#]*!authenticate&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;sudoers\s+\-p\s+wa\s+\-k\s+[-\w]+\s*$&#x2F;) }
+  end
+  describe sshd_config do
+    its(&#39;PrintLastLog&#39;) { should be_nil.or eq &#39;yes&#39; }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;group\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;passwd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;gshadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;shadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;security\&#x2F;opasswd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61491"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61491"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61491</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61491
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61491"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61491"
+            >
+              <!-- Result description -->
+              The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61491</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure all related application components and the DBMS host platform 
+         in accordance with the applicable CMS ARS.
+
+         Regularly audit the security configuration of related applications and the host 
+         platform to confirm continued compliance with security requirements.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61491&#39; do
+  title &quot;The DBMS host platform and other dependent applications must be
+  configured in compliance with applicable STIG requirements.&quot;
+  desc &quot;The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61491&#39;
+  tag &quot;rid&quot;: &#39;SV-75981r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67407r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure all related application components and the DBMS host
+  platform in accordance with the applicable DoD STIG.
+
+  Regularly audit the security configuration of related applications and the host
+  platform to confirm continued compliance with security requirements.&quot;
+  describe &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39; do
+    skip &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61493"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61493"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61493</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61493
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61493"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61493"
+            >
+              <!-- Result description -->
+              Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61493</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61493&#39; do
+  title &quot;Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.&quot;
+  desc &quot;Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61493&#39;
+  tag &quot;rid&quot;: &#39;SV-75983r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67409r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61495"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61495"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61495</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61495
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The database must not be directly accessible from public or
+  unauthorized networks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61495"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61495"
+            >
+              <!-- Result description -->
+              Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61495</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The database must not be directly accessible from public or
+  unauthorized networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61495&#39; do
+  title &quot;The database must not be directly accessible from public or
+  unauthorized networks.&quot;
+  desc &quot;Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61495&#39;
+  tag &quot;rid&quot;: &#39;SV-75985r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67411r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.&quot;
+  describe &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39; do
+    skip &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61497"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61497"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61497</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61497
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The ISSM must review changes to DBA role assignments.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61497"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61497"
+            >
+              <!-- Result description -->
+              Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61497</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The ISSM must review changes to DBA role assignments.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61497&#39; do
+  title &#39;The ISSM must review changes to DBA role assignments.&#39;
+  desc  &quot;Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61497&#39;
+  tag &quot;rid&quot;: &#39;SV-75987r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67413r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61499"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61499"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61499</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61499
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61499"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61499"
+            >
+              <!-- Result description -->
+              Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61499</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61499&#39; do
+  title &quot;Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.&quot;
+  desc &quot;Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61499&#39;
+  tag &quot;rid&quot;: &#39;SV-75989r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67415r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.&quot;
+  describe &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39; do
+    skip &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61501"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61501"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61501</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61501
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61501"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61501"
+            >
+              <!-- Result description -->
+              Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61501</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61501&#39; do
+  title &quot;Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61501&#39;
+  tag &quot;rid&quot;: &#39;SV-75991r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67417r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.&quot;
+  describe &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39; do
+    skip &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61503"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61503"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61503</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61503
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61503"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61503"
+            >
+              <!-- Result description -->
+              A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61503</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled &quot;SSN&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61503&#39; do
+  title &quot;Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.&quot;
+  desc &quot;A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61503&#39;
+  tag &quot;rid&quot;: &#39;SV-75993r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67419r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled \&quot;SSN\&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.&quot;
+  describe &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39; do
+    skip &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61507"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61507"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61507</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61507
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61507"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61507"
+            >
+              <!-- Result description -->
+              Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle database links defined, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61507</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61507&#39; do
+  title &quot;Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.&quot;
+  desc &quot;Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61507&#39;
+  tag &quot;rid&quot;: &#39;SV-75997r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67423r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61509"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61509"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61509</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61509
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must not share a host supporting an independent security
+  service.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61509"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61509"
+            >
+              <!-- Result description -->
+              The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61509</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must not share a host supporting an independent security
+  service.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61509&#39; do
+  title &quot;The DBMS must not share a host supporting an independent security
+  service.&quot;
+  desc &quot;The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61509&#39;
+  tag &quot;rid&quot;: &#39;SV-75999r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67425r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.&quot;
+  tag &quot;fix&quot;: &quot;Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service&#39; do
+    skip &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+   service&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61511"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61511"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61511</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61511
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to DBMS software files and directories must not be granted to
+  unauthorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61511"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61511"
+            >
+              <!-- Result description -->
+              The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61511</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to DBMS software files and directories must not be granted to
+  unauthorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \Program Files\Oracle\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61511&#39; do
+  title &quot;Access to DBMS software files and directories must not be granted to
+  unauthorized users.&quot;
+  desc &quot;The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61511&#39;
+  tag &quot;rid&quot;: &#39;SV-76001r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67427r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \\Program Files\\Oracle\\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61513"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61513"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61513</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61513
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Replication accounts must not be granted DBA privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61513"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61513"
+            >
+              <!-- Result description -->
+              Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61513</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication accounts must not be granted DBA privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61513&#39; do
+  title &#39;Replication accounts must not be granted DBA privileges.&#39;
+  desc  &quot;Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61513&#39;
+  tag &quot;rid&quot;: &#39;SV-76003r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67429r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61515"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61515"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61515</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61515
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Network access to the DBMS must be restricted to authorized personnel.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61515"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61515"
+            >
+              <!-- Result description -->
+              Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61515</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network access to the DBMS must be restricted to authorized personnel.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (&quot;&#x2F;32&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a &quot;&#x2F;&quot; indicates acceptance by subnet mask where the
+  number after the &quot;&#x2F;&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61515&#39; do
+  title &#39;Network access to the DBMS must be restricted to authorized personnel.&#39;
+  desc  &quot;Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61515&#39;
+  tag &quot;rid&quot;: &#39;SV-76005r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67431r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (\&quot;&#x2F;32\&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a \&quot;&#x2F;\&quot; indicates acceptance by subnet mask where the
+  number after the \&quot;&#x2F;\&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.&quot;
+  tag &quot;fix&quot;: &quot;Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;tcp.validnode_checking&#x3D;YES&#39; }
+    its(&#39;content&#39;) { should match &#x2F;tcp.invited_nodes&#x3D;(\W*)&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61519"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61519"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61519</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61519
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Changes to configuration options must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61519"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61519"
+            >
+              <!-- Result description -->
+              The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61519</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Changes to configuration options must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61519&#39; do
+  title &#39;Changes to configuration options must be audited.&#39;
+  desc  &quot;The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61519&#39;
+  tag &quot;rid&quot;: &#39;SV-76009r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67435r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database AUDIT_SYS_OPERATIONS parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61523"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61523"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61523</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61523
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote DBMS administration must be documented and authorized or
+  disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61523"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61523"
+            >
+              <!-- Result description -->
+              Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61523</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote DBMS administration must be documented and authorized or
+  disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan for authorization, assignments and usage 
+         procedures for remote DBMS administration.
+
+         If remote administration of the DBMS is not documented or poorly documented, this 
+         is a finding.
+
+         If remote administration of the DBMS is not authorized and not disabled, this is 
+         a finding.
+         
+         If remote administration is to be performed from outside the CMS network, but is not 
+         done via an approved and properly configured VPN, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61523&#39; do
+  title &quot;Remote DBMS administration must be documented and authorized or
+  disabled.&quot;
+  desc &quot;Remote administration may expose configuration and sensitive data to
+  unauthorized viewing during transit across the network or allow unauthorized
+  administrative access to the DBMS to remote users.
+
+      For the purposes of this STIG, \&quot;Remote\&quot; means \&quot;outside the DoDIN.\&quot;
+  However, use of an approved and properly configured VPN counts as inside the
+  DoDIN.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61523&#39;
+  tag &quot;rid&quot;: &#39;SV-76013r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67439r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for authorization, assignments
+  and usage procedures for remote DBMS administration.
+
+  If remote administration of the DBMS is not documented or poorly documented,
+  this is a finding.
+
+  If remote administration of the DBMS is not authorized and not disabled, this
+  is a finding.
+
+  If remote administration is to be performed from outside the DoDIN, but is not
+  done via an approved and properly configured VPN, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61525"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61525"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61525</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61525
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61525"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61525"
+            >
+              <!-- Result description -->
+              Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61525</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61525&#39; do
+  title &quot;DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.&quot;
+  desc &quot;Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61525&#39;
+  tag &quot;rid&quot;: &#39;SV-76015r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67441r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.&quot;
+  tag &quot;fix&quot;: &quot;Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.&quot;
+  describe &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61527"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61527"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61527</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61527
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Changes to DBMS security labels must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61527"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61527"
+            >
+              <!-- Result description -->
+              Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61527</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Changes to DBMS security labels must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61527&#39; do
+  title &#39;Changes to DBMS security labels must be audited.&#39;
+  desc  &quot;Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61527&#39;
+  tag &quot;rid&quot;: &#39;SV-76017r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67443r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39;Changes to security label assignment is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Changes to security label assignment is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61529"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61529"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61529</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61529
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote database or other external access must use fully-qualified
+  names.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61529"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61529"
+            >
+              <!-- Result description -->
+              The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61529</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote database or other external access must use fully-qualified
+  names.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61529&#39; do
+  title &quot;Remote database or other external access must use fully-qualified
+  names.&quot;
+  desc  &quot;The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61529&#39;
+  tag &quot;rid&quot;: &#39;SV-76019r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67445r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;global_names&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database GLOBAL_NAMES parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61531"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61531"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61531</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61531
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61531"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61531"
+            >
+              <!-- Result description -->
+              &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61531</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append &quot;&#x2F;diag&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61531&#39; do
+  title &quot;The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.&quot;
+  desc &#39;&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.&#39;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61531&#39;
+  tag &quot;rid&quot;: &#39;SV-76021r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67447r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append \&quot;&#x2F;diag\&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \\diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.&quot;
+  tag &quot;fix&quot;: &quot;Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_diagnostic_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;diagnostic_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  diagnostic_dest &#x3D; get_diagnostic_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{diagnostic_dest}&#x2F;diag |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61533"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61533"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61533</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61533
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Remote administration must be disabled for the Oracle connection
+  manager.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61533"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61533"
+            >
+              <!-- Result description -->
+              Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61533</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration must be disabled for the Oracle connection
+  manager.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61533&#39; do
+  title &quot;Remote administration must be disabled for the Oracle connection
+  manager.&quot;
+  desc  &quot;Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61533&#39;
+  tag &quot;rid&quot;: &#39;SV-76023r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67449r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;cman.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;REMOTE_ADMIN &#x3D; NO&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61535"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61535"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61535</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61535
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Network client connections must be restricted to supported versions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61535"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61535"
+            >
+              <!-- Result description -->
+              Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61535</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Network client connections must be restricted to supported versions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  &quot;Database Net Services Reference&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61535&#39; do
+  title &#39;Network client connections must be restricted to supported versions.&#39;
+  desc  &quot;Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61535&#39;
+  tag &quot;rid&quot;: &#39;SV-76025r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67451r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied&quot;
+  tag &quot;fix&quot;: &quot;Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  \&quot;Database Net Services Reference\&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;11&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;11&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12a&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12a&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61537"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61537"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61537</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61537
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61537"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61537"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no dba users, therefore this control is NA</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no dba users, therefore this control is NA</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no dba users, therefore this control is NA</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no dba users, therefore this control is NA</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61537</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If &quot;root&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61537&#39; do
+  title &quot;DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000021&#39;
+  tag &quot;gid&quot;: &#39;V-61537&#39;
+  tag &quot;rid&quot;: &#39;SV-76027r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-004500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67453r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If \&quot;root\&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.&quot;
+
+  get_dba_users &#x3D; command(&#39;cat &#x2F;etc&#x2F;group | grep -i dba&#39;).stdout.strip.split(&quot;\n&quot;)
+  get_members_root_group &#x3D; command(&#39;groups root&#39;).stdout.strip.split(&quot;\n&quot;)
+
+  get_dba_users.each do |user|
+    describe &quot;The dba user: #{user} in &#x2F;etc&#x2F;group&quot; do
+      subject { user }
+      it { should_not cmp &#39;root&#39; }
+    end
+
+    get_members_root_group.each do |member|
+      describe &quot;The user: #{member} in the root group&quot; do
+        subject { member }
+        it { should_not cmp user.to_s }
+      end
+    end
+  end
+  if get_dba_users.empty?
+    describe &#39;There are no dba users, therefore this control is NA&#39; do
+      skip &#39;There are no dba users, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61539"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61539"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61539</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61539
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle software must be evaluated and patched against newly found
+  vulnerabilities.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61539"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61539"
+            >
+              <!-- Result description -->
+              Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61539</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61539&#39; do
+  title &quot;Oracle software must be evaluated and patched against newly found
+  vulnerabilities.&quot;
+  desc &quot;Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000205&#39;
+  tag &quot;gid&quot;: &#39;V-61539&#39;
+  tag &quot;rid&quot;: &#39;SV-76029r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-011100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67455r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  patches &#x3D; sql.query(&#39;SELECT patch_id from dba_registry_sqlpatch;&#39;).column(&#39;patch_id&#39;)
+
+  describe &#39;The oracle database installed patches&#39; do
+    subject { patches }
+    it { should_not cmp nil }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61541"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61541"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61541</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61541
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS default accounts must be assigned custom passwords.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61541"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61541"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61541</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS default accounts must be assigned custom passwords.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61541&#39; do
+  title &#39;DBMS default accounts must be assigned custom passwords.&#39;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000078&#39;
+  tag &quot;gid&quot;: &#39;V-61541&#39;
+  tag &quot;rid&quot;: &#39;SV-76031r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67457r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)&quot;
+  tag &quot;fix&quot;: &quot;Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sys_dba_users_with_defpwd &#x3D; sql.query(&#39; SELECT username FROM SYS.DBA_USERS_WITH_DEFPWD;&#39;).column(&#39;username&#39;).uniq
+
+  describe.one do
+    sys_dba_users_with_defpwd.each do |user|
+      describe &quot;The oracle system database user: #{user} with a default password&quot; do
+        subject { user }
+        it { should cmp &#39;XS$NULL&#39; }
+      end
+    end
+    
+    describe sys_dba_users_with_defpwd do
+      it { should be_empty }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61543"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61543"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61543</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000186
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61543
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000186
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61543"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61543"
+            >
+              <!-- Result description -->
+              The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61543</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61543&#39; do
+  title &quot;The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000176-DB-000068&#39;
+  tag &quot;gid&quot;: &#39;V-61543&#39;
+  tag &quot;rid&quot;: &#39;SV-76033r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67459r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000186&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61545"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61545"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61545</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61545
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-8 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002421
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61545"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61545"
+            >
+              <!-- Result description -->
+              Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61545</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-8 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61545&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.&quot;
+  desc &quot;Preventing the disclosure of transmitted information requires that
+  applications take measures to employ some form of cryptographic mechanism in
+  order to protect the information during transmission. This is usually achieved
+  through the use of Transport Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+      Alternative physical protection measures include Protected Distribution
+  Systems (PDS). PDS are used to transmit unencrypted classified NSI through an
+  area of lesser classification or control. Inasmuch as the classified NSI is
+  unencrypted, the PDS must provide adequate electrical, electromagnetic, and
+  physical safeguards to deter exploitation. Refer to NSTSSI No. 7003 for
+  additional details on a PDS.
+
+      Information in transmission is particularly vulnerable to attack. If the
+  DBMS does not employ cryptographic mechanisms preventing unauthorized
+  disclosure of information during transit, the information may be compromised.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000264-DB-000136&#39;
+  tag &quot;gid&quot;: &#39;V-61545&#39;
+  tag &quot;rid&quot;: &#39;SV-76035r5_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-019700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67461r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002421&#39;]
+  tag &quot;nist&quot;: [&#39;SC-8 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61553"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61553"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61553</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (10)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002186
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61553
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (10)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002186
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61553"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61553"
+            >
+              <!-- Result description -->
+              Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61553</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (10), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61553&#39; do
+  title &quot;The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.&quot;
+  desc &quot;Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000019-DB-000197&#39;
+  tag &quot;gid&quot;: &#39;V-61553&#39;
+  tag &quot;rid&quot;: &#39;SV-76043r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67469r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002186&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (10)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61555"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61555"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61555</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61555
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61555"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61555"
+            >
+              <!-- Result description -->
+              This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61555</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine if the database is utilizing any network 
+         protocols deemed nonsecure.  If the DBMS is not using any network protocols deemed nonsecure, 
+         this is not a finding.
+
+         If the database is utilizing protocols specified as nonsecure, verify the protocols are 
+         explicitly identified in the System Security Plan and that they are in support of specific 
+         operational requirements. If they are not identified in the SSP or are not supporting specific 
+         operational requirements, this is a finding.
+
+         If nonsecure network protocols are not being used but are not disabled in the DBMS&#39;s 
+         configuration, this is a finding.
+
+         After determining the site-specific operational requirements and which protocols are explicitly 
+         defined in the System Security Plan, check the $TNS_ADMIN setting for the location of the Oracle 
+         listener.ora file.  The listener.ora file is a configuration file for Oracle Net Listener that 
+         identifies the following:
+
+         A unique name for the listener, typically LISTENER
+         A protocol address that it is accepting connection requests on, and
+         A service it is listening for.
+         
+         If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed nonsecure, 
+         that is a finding.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+             (ADDRESS_LIST&#x3D;
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+         Protocol Parameters
+
+         The Oracle Listener and the Oracle Connection Manager are identified by protocol addresses. 
+         The information below contains the &quot;Protocol-Specific Parameters&quot; used by the Oracle protocol 
+         support.
+
+         Protocol-Specific Parameters
+         Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+         Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the service. Oracle 
+                                                       recommends using the service name or SID of the 
+                                                       service.
+         Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+         Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+         Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the Oracle server.
+         Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used to connect to the 
+                                                     database server.
+                                                     This is the same PIPE keyword specified on the server 
+                                                     with Named Pipes.  This name can be any name.
+
+         Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+            
+         Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+         Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+
+         Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+         Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+         Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+         Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+ 
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the value.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening port number.
+                                                        Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+                                                                (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable any network protocol listed as nonsecure in the PPSM documentation.
+
+         To disable the protocol deemed not secure, stop the listener by issuing the following command as the 
+         Oracle Software owner, typically Oracle.
+          $ lsnrctl stop
+         This will stop the listener.  Edit the LISTENER.ORA file and remove the protocols deemed not secure 
+         and restart the listener.
+
+         For example, if TCP was deemed as not secure, the listener.ora would need to be changed and the tcp 
+         entry would need to be removed.  That would only allow the listener to listen for an IPC connection.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+           (ADDRESS_LIST&#x3D;
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line and properly balance the parentheses -
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+          Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL portion of the connect 
+          string.  For example, if TCP was deemed as not secure and the listener.ora was changed to listen for an 
+          IPC connection the code below would be required:
+
+          net_service_name&#x3D;
+          (DESCRIPTION&#x3D;
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+          (CONNECT_DATA&#x3D;
+          (SERVICE_NAME&#x3D;sales.us.example.com)))</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61555&#39; do
+  title &quot;The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.&quot;
+  desc &quot;This requirement is related to remote access, but more specifically to
+  the networking protocols allowing systems to communicate. Remote access is any
+  access to an organizational information system by a user (or an information
+  system) communicating through an external, non-organization  controlled network
+  (e.g., the Internet). Examples of remote access methods include dial-up,
+  broadband, and wireless.
+
+      Some networking protocols allowing remote access may not meet security
+  requirements to protect data and components. Bluetooth and peer-to-peer
+  networking are examples of less than secure networking protocols.
+
+      The DoD Ports, Protocols, and Services Management (PPSM) program provides
+  implementation guidance on the use of IP protocols and application and data
+  services traversing the DoD Networks in a manner supporting net-centric
+  operations.
+
+      Applications implementing or utilizing remote access network protocols need
+  to ensure the application is developed and implemented in accordance with the
+  PPSM requirements. In situations where it has been determined that specific
+  operational requirements outweigh the risks of enabling an insecure network
+  protocol, the organization may pursue a risk acceptance.
+
+      Using protocols deemed nonsecure would compromise the ability of the DBMS
+  to operate in a secure fashion. The database must be able to disable network
+  protocols deemed nonsecure.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000020-DB-000194&#39;
+  tag &quot;gid&quot;: &#39;V-61555&#39;
+  tag &quot;rid&quot;: &#39;SV-76045r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67471r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the PPSM Technical Assurance List to acquire an
+  up-to-date list of network protocols deemed nonsecure.
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  Review DBMS settings to determine if the database is utilizing any network
+  protocols deemed nonsecure.  If the DBMS is not using any network protocols
+  deemed nonsecure, this is not a finding.
+
+  If the database is utilizing protocols specified as nonsecure in the PPSM,
+  verify the protocols are explicitly identified in the System Security Plan and
+  that they are in support of specific operational requirements. If they are not
+  identified in the SSP or are not supporting specific operational requirements,
+  this is a finding.
+
+  If nonsecure network protocols are not being used but are not disabled in the
+  DBMS&#39;s configuration, this is a finding.
+
+  After determining the site-specific operational requirements and which
+  protocols are explicitly defined in the System Security Plan, check the
+  $TNS_ADMIN setting for the location of the Oracle listener.ora file.  The
+  listener.ora file is a configuration file for Oracle Net Listener that
+  identifies the following:
+
+  A unique name for the listener, typically LISTENER
+  A protocol address that it is accepting connection requests on, and
+  A service it is listening for.
+
+  If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed
+  nonsecure, that is a finding.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Protocol Parameters
+
+  The Oracle Listener and the Oracle Connection Manager are identified by
+  protocol addresses. The information below contains the \&quot;Protocol-Specific
+  Parameters\&quot; used by the Oracle protocol support.
+
+  Protocol-Specific Parameters
+
+  Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+  Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the
+  service. Oracle recommends using the service name or SID of the service.
+  Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+  Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+  Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the
+  Oracle server.
+  Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used
+  to connect to the database server.
+  This is the same PIPE keyword specified on the server with Named Pipes.  This
+  name can be any name.
+  Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+
+  Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+  Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+  Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the
+  value.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or
+  IP address of the computer.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening
+  port number.
+
+  Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+          (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)&quot;
+  tag &quot;fix&quot;: &quot;Disable any network protocol listed as nonsecure in the PPSM
+  documentation.
+
+  To disable the protocol deemed not secure, stop the listener by issuing the
+  following command as the Oracle Software owner, typically Oracle.
+            $ lsnrctl stop
+  This will stop the listener.  Edit the LISTENER.ORA file and remove the
+  protocols deemed not secure and restart the listener.
+
+  For example, if TCP was deemed as not secure, the listener.ora would need to be
+  changed and the tcp entry would need to be removed.  That would only allow the
+  listener to listen for an IPC connection.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line
+  and properly balance the parentheses -
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL
+  portion of the connect string.  For example, if TCP was deemed as not secure
+  and the listener.ora was changed to listen for an IPC connection the code below
+  would be required:
+
+  net_service_name&#x3D;
+  (DESCRIPTION&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+  (CONNECT_DATA&#x3D;
+  (SERVICE_NAME&#x3D;sales.us.example.com)))&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61557"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61557"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61557</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000015
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61557
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must employ automated mechanisms for supporting Oracle user
+  account management.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000015
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61557"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61557"
+            >
+              <!-- Result description -->
+              A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61557</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must employ automated mechanisms for supporting Oracle user
+  account management.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61557&#39; do
+  title &quot;The system must employ automated mechanisms for supporting Oracle user
+  account management.&quot;
+  desc &quot;A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000023-DB-000001&#39;
+  tag &quot;gid&quot;: &#39;V-61557&#39;
+  tag &quot;rid&quot;: &#39;SV-76047r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67473r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000015&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.&quot;
+  describe &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39; do
+    skip &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61559"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61559"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61559</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61559
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61559"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61559"
+            >
+              <!-- Result description -->
+              Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61559</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61559&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.&quot;
+  desc &quot;Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000002&#39;
+  tag &quot;gid&quot;: &#39;V-61559&#39;
+  tag &quot;rid&quot;: &#39;SV-76049r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67475r6_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61561"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61561"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61561</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61561
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000016
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61561"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61561"
+            >
+              <!-- Result description -->
+              Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61561</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+         or temporary accounts, this is not a finding.
+
+         If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access mechanism, 
+         and not by Oracle, this is not a finding.
+
+         Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+         determine if the site utilizes a mechanism whereby temporary or emergency accounts can be terminated after 
+         an organization-defined time period. If not, this is a finding.
+
+         Check the profiles to see what the password_life_time is set to in the table dba_profiles. 
+         The password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+         in the RESOURCE_NAME column.
+
+         SQL&gt;select
+         profile,
+         resource_name,
+         resource_type,
+         limit
+         from dba_profiles
+         where upper(resource_name) like &quot;PASSWORD_LIFE_TIME&quot;;
+
+         Verify that the user in question is assigned to a profile with the PASSWORD_LIFE_TIME set to 60 days.  
+         If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If using database mechanisms to satisfy this requirement, use a profile with a distinctive name 
+         (for example, TEMPORARY_USERS), so that temporary users can be easily identified.  Whenever a temporary user 
+         account is created, assign it to this profile.
+
+         Create a job to lock accounts under this profile that are more than 60 days old, where n is the 
+         organization-defined time period.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61561&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.&quot;
+  desc &quot;Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000003&#39;
+  tag &quot;gid&quot;: &#39;V-61561&#39;
+  tag &quot;rid&quot;: &#39;SV-76051r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67477r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if the site utilizes a mechanism whereby
+  temporary or emergency accounts can be terminated after an organization-defined
+  time period. If not, this is a finding.
+
+  Check the profiles to see what the password_life_time is set to in the table
+  dba_profiles. The password_life_time is a value stored in the LIMIT column, and
+  identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME column.
+
+  SQL&gt;select
+  profile,
+  resource_name,
+  resource_type,
+  limit
+  from dba_profiles
+  where upper(resource_name) like &#39;PASSWORD_LIFE_TIME&#39;;
+
+  Verify that the user in question is assigned to a profile with the
+  PASSWORD_LIFE_TIME set to the amount of time the user is expected to be using
+  the password.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If using database mechanisms to satisfy this requirement, use a
+  profile with a distinctive name (for example, TEMPORARY_USERS), so that
+  temporary users can be easily identified.  Whenever a temporary user account is
+  created, assign it to this profile.
+
+  Create a job to lock accounts under this profile that are more than n days old,
+  where n is the organization-defined time period.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  if user_profiles.empty?
+    describe &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39; do
+      skip &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39;
+    end
+  end
+
+  if !user_profiles.empty?
+    user_profiles.each do |profile|
+      unless input(&#39;emergency_profile_list&#39;).include?(profile)
+      	describe &quot;The profile #{profile} &quot; do
+	  subject { profile }
+	  it &quot;should not be in the org-defined list of profiles for emergency or temporary account management&quot; do
+	    expect(subject).should_not be_in(input(&#39;emergency_profile_list&#39;)) 
+	  end
+        end
+	next
+      end
+      password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+      describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+        subject { password_life_time }
+        it { should cmp &lt;&#x3D; input(&#39;password_life_time&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61565"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61565"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61565</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61565
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account creation.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000018
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61565"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61565"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61565</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account creation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61565&#39; do
+  title &#39;The DBMS must automatically audit account creation.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000026-DB-000005&#39;
+  tag &quot;gid&quot;: &#39;V-61565&#39;
+  tag &quot;rid&quot;: &#39;SV-76055r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67481r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000018&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account creation is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account creation is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61569"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61569"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61569</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61569
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must  automatically audit account modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001403
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61569"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61569"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61569</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must  automatically audit account modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61569&#39; do
+  title &#39;The DBMS must  automatically audit account modification.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000027-DB-000186&#39;
+  tag &quot;gid&quot;: &#39;V-61569&#39;
+  tag &quot;rid&quot;: &#39;SV-76059r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67485r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001403&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account modification is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account modification is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account modification&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61571"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61571"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61571</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001404
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61571
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001404
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61571"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61571"
+            >
+              <!-- Result description -->
+              When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61571</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61571&#39; do
+  title &quot;The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000028-DB-000187&#39;
+  tag &quot;gid&quot;: &#39;V-61571&#39;
+  tag &quot;rid&quot;: &#39;SV-76061r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67487r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001404&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account disabling is not being audited. &#39;
+    FROM dual
+    WHERE (SELECT Count(*)
+    FROM (select policy_name , audit_option from audit_unified_policies
+    WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+    and policy_name in (select policy_name from audit_unified_enabled_policies
+    where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+    OR (SELECT value
+    FROM v$option
+    WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account disabling is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account disabling actions&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61573"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61573"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61573</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001405
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61573
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically audit account termination.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001405
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61573"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61573"
+            >
+              <!-- Result description -->
+              When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61573</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically audit account termination.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61573&#39; do
+  title &#39;The DBMS must automatically audit account termination.&#39;
+  desc  &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000029-DB-000188&#39;
+  tag &quot;gid&quot;: &#39;V-61573&#39;
+  tag &quot;rid&quot;: &#39;SV-76063r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67489r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001405&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account termination is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account termination is not being audited&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account termination&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61575"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61575"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61575</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61575
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000213
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61575"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61575"
+            >
+              <!-- Result description -->
+              Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61575</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role &quot;User roles and privileges&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61575&#39; do
+  title &quot;The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.&quot;
+  desc &quot;Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000033-DB-000084&#39;
+  tag &quot;gid&quot;: &#39;V-61575&#39;
+  tag &quot;rid&quot;: &#39;SV-76065r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67491r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000213&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role \&quot;User roles and privileges\&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61577"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61577"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61577</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61577
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61577"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61577"
+            >
+              <!-- Result description -->
+              Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61577</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61577&#39; do
+  title &quot;The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&quot;
+  desc &quot;Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000036-DB-000174&#39;
+  tag &quot;gid&quot;: &#39;V-61577&#39;
+  tag &quot;rid&quot;: &#39;SV-76067r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67493r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+    allowing users to specify and control sharing by named individuals, groups of
+    individuals, or by both, limiting propagation of access rights and including or
+    excluding access to the granularity of a single user.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61579"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61579"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61579</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61579
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS processes or services must run under custom, dedicated OS
+  accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61579"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61579"
+            >
+              <!-- Result description -->
+              Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61579</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS processes or services must run under custom, dedicated OS
+  accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61579&#39; do
+  title &quot;DBMS processes or services must run under custom, dedicated OS
+  accounts.&quot;
+  desc &quot;Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000010&#39;
+  tag &quot;gid&quot;: &#39;V-61579&#39;
+  tag &quot;rid&quot;: &#39;SV-76069r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67495r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_&quot;
+  tag &quot;fix&quot;: &quot;Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.&quot;
+
+  oracle_file_owners &#x3D; command(&quot;ls -l  $ORACLE_HOME|awk &#39;{ print $3; }&#39; | sort -u&quot;).stdout.strip.split(&quot;\n&quot;)
+
+  oracle_file_owners.each do |owner|
+    describe &#39;The file and directory inside the Oracle Home directory&#39; do
+      subject { owner }
+      it { should cmp &#39;oracle&#39; }
+    end
+  end
+  if oracle_file_owners.empty?
+    describe &#39;There are no oracle file owners, therefore this control is NA&#39; do
+      skip &#39;There are no oracle file owners, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61581"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61581"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61581</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61581
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict grants to sensitive information to authorized
+  user roles.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61581"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61581"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61581</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict grants to sensitive information to authorized
+  user roles.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61581&#39; do
+  title &quot;The DBMS must restrict grants to sensitive information to authorized
+  user roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000011&#39;
+  tag &quot;gid&quot;: &#39;V-61581&#39;
+  tag &quot;rid&quot;: &#39;SV-76071r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67497r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61583"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61583"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61583</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61583
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A single database connection configuration file must not be used to
+  configure all database clients.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61583"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61583"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61583</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A single database connection configuration file must not be used to
+  configure all database clients.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to supply database connection information to
+  only those databases authorized for the user.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61583&#39; do
+  title &quot;A single database connection configuration file must not be used to
+  configure all database clients.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000012&#39;
+  tag &quot;gid&quot;: &#39;V-61583&#39;
+  tag &quot;rid&quot;: &#39;SV-76073r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67499r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to supply database connection information to
+  only those databases authorized for the user.&quot;
+  describe &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39; do
+    skip &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61585"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61585"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61585</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61585
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must be protected from unauthorized access by developers.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61585"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61585"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61585</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must be protected from unauthorized access by developers.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61585&#39; do
+  title &#39;The DBMS must be protected from unauthorized access by developers.&#39;
+  desc  &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000014&#39;
+  tag &quot;gid&quot;: &#39;V-61585&#39;
+  tag &quot;rid&quot;: &#39;SV-76075r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67501r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61587"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61587"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61587</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61587
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61587"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61587"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61587</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61587&#39; do
+  title &quot;The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000015&#39;
+  tag &quot;gid&quot;: &#39;V-61587&#39;
+  tag &quot;rid&quot;: &#39;SV-76077r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67503r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61589"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61589"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61589</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61589
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61589"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61589"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADMIN1 with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: APPQOSSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CTXSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: DBA with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: PUBLIC with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: RDSADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSDG with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSKM with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDB with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDBADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADMIN1 with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: APPQOSSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CTXSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: DBA with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: PUBLIC with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: RDSADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSDG with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSKM with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDB with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDBADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADMIN1 with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: APPQOSSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CTXSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: DBA with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: PUBLIC with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: RDSADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSDG with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSKM with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDB with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDBADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADMIN1 with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: APPQOSSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: CTXSYS with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: DBA with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: PUBLIC with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: RDSADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSDG with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: SYSKM with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDB with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle users: XDBADMIN with access to the dictionary table is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61589</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61589&#39; do
+  title &quot;The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000016&#39;
+  tag &quot;gid&quot;: &#39;V-61589&#39;
+  tag &quot;rid&quot;: &#39;SV-76079r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67505r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dictionary_table_access &#x3D; sql.query(&quot;SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dictionary_table_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39;
+    end
+  else
+    users_with_dictionary_table_access.each do |user|
+      describe &quot;oracle users: #{user} with access to the dictionary table&quot; do
+        subject { user }
+        it { should be_in USERS_ALLOWED_ACCESS_TO_DICTIONARY_TABLE }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61591"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61591"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61591</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61591
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Administrative privileges must be assigned to database accounts via
+  database roles.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61591"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61591"
+            >
+              <!-- Result description -->
+              Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Database accounts with administrative privileges is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Database accounts with administrative privileges is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Database accounts with administrative privileges is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Database accounts with administrative privileges is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61591</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Administrative privileges must be assigned to database accounts via
+  database roles.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61591&#39; do
+  title &quot;Administrative privileges must be assigned to database accounts via
+  database roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000034&#39;
+  tag &quot;gid&quot;: &#39;V-61591&#39;
+  tag &quot;rid&quot;: &#39;SV-76081r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67507r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)&quot;
+  tag &quot;fix&quot;: &quot;Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_accounts_with_administrative_privs &#x3D; sql.query(&quot;SELECT grantee
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  );&quot;).column(&#39;grantee&#39;).uniq
+
+  describe &#39;Database accounts with administrative privileges&#39; do
+    subject { database_accounts_with_administrative_privs }
+    it { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61593"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61593"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61593</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61593
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61593"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61593"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61593</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61593&#39; do
+  title &quot;Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000017&#39;
+  tag &quot;gid&quot;: &#39;V-61593&#39;
+  tag &quot;rid&quot;: &#39;SV-76083r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67509r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  &quot;
+  tag &quot;fix&quot;: &quot;Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.&quot;
+  describe &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39; do
+    skip &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61595"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61595"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61595</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61595
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  All use of privileged accounts must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61595"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61595"
+            >
+              <!-- Result description -->
+              This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of unified auditing policies defined is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of users being audited is expected to include &quot;ALL USERS&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of unified auditing policies defined is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of users being audited is expected to include &quot;ALL USERS&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of unified auditing policies defined is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of users being audited is expected to include &quot;ALL USERS&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of unified auditing policies defined is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of users being audited is expected to include &quot;ALL USERS&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61595</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >All use of privileged accounts must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61595&#39; do
+  title &#39;All use of privileged accounts must be audited.&#39;
+  desc  &quot;This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61595&#39;
+  tag &quot;rid&quot;: &#39;SV-76085r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67511r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  unified_auditing_policies_defined &#x3D; sql.query(&#39;SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  describe &#39;The list of unified auditing policies defined&#39; do
+    subject { unified_auditing_policies_defined }
+    it { should_not be_empty }
+  end
+
+  users_being_audited &#x3D; sql.query(&#39;SELECT unique user_name from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;user_name&#39;)
+
+  describe &#39;The list of users being audited&#39; do
+    subject { users_being_audited }
+    it { should include &#39;ALL USERS&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61597"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61597"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61597</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61597
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61597"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61597"
+            >
+              <!-- Result description -->
+              Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61597</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61597&#39; do
+  title &quot;Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.&quot;
+  desc &quot;Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61597&#39;
+  tag &quot;rid&quot;: &#39;SV-76087r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004210&#39;
+  tag &quot;fix_id&quot;: &#39;F-67513r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.&quot;
+  describe &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39; do
+    skip &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61599"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61599"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61599</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61599
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBA role must not be assigned excessive or unauthorized
+  privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61599"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61599"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: ADMIN1 with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: RDSADMIN with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: ADMIN1 with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: RDSADMIN with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: ADMIN1 with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: RDSADMIN with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: ADMIN1 with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle database users: RDSADMIN with administative privileges is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61599</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBA role must not be assigned excessive or unauthorized
+  privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role &quot;USER PRIVS&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61599&#39; do
+  title &quot;The DBA role must not be assigned excessive or unauthorized
+  privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000019&#39;
+  tag &quot;gid&quot;: &#39;V-61599&#39;
+  tag &quot;rid&quot;: &#39;SV-76089r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67515r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role \&quot;USER PRIVS\&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map&quot;
+  tag &quot;fix&quot;: &quot;Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_privs &#x3D; sql.query(&quot;SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;&quot;).column(&#39;username&#39;).uniq
+  if users_with_admin_privs.empty?
+    impact 0.0
+    describe &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_privs.each do |user|
+      describe &quot;oracle database users: #{user} with administative privileges&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_with_admin_privs&#39;)}
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61601"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61601"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61601</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61601
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61601"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61601"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61601</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61601&#39; do
+  title &quot;OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000020&#39;
+  tag &quot;gid&quot;: &#39;V-61601&#39;
+  tag &quot;rid&quot;: &#39;SV-76091r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67517r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS&quot;
+  tag &quot;fix&quot;: &quot;Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should include &#39;run_group &#x3D; nobody&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61603"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61603"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61603</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002236
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61603
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must verify account lockouts persist until reset by an
+      administrator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002236
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61603"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61603"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61603</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must verify account lockouts persist until reset by an
+      administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61603&#39; do
+  title &quot;The DBMS must verify account lockouts persist until reset by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed, to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+  tag &quot;gid&quot;: &#39;V-61603&#39;
+  tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+  to a user.
+
+  To see what profile is assigned to a user, enter the query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for password_lock_time - this specifies how long to lock the
+  account after the number of consecutive failed logon attempts reaches the
+  limit. If the value is not UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+  duration:
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61605"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61605"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61605</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61605
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the number of consecutive failed logon attempts to 5.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000044
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61605"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61605"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61605</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the number of consecutive failed logon attempts to 5.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&amp;USERNAME&quot;
+         This will return the profile name assigned to that user.
+
+         Now check the values assigned to the profile returned from the query above:
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE &quot;&amp;PROFILE_NAME&quot;
+
+         Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;
+
+         (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.  Note: It remains 
+         necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61605&#39; do
+  title &quot;The DBMS must limit the number of consecutive failed logon attempts to
+  3.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000025&#39;
+  tag &quot;gid&quot;: &#39;V-61605&#39;
+  tag &quot;rid&quot;: &#39;SV-76095r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67521r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000044&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&amp;USERNAME&#39;
+  This will return the profile name assigned to that user.
+
+  Now check the values assigned to the profile returned from the query above:
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE
+  &#39;&amp;PROFILE_NAME&#39;
+
+  Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;
+
+  (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.
+  Note: It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time.first }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61607"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61607"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61607</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61607
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61607"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61607"
+            >
+              <!-- Result description -->
+              Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61607</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&lt;username&gt;&quot;
+
+         This will return the profile name assigned to that user.
+
+         The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy 
+         the STIG requirements pertaining to the profile parameters. Oracle recommends that this profile be 
+         customized with any site-specific requirements and assigned to all users where applicable.  
+         Note: It remains necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.
+
+         Now check the values assigned to the profile returned from the query above:
+
+         column profile format a20
+         column limit format a20
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D; &quot;ORA_STIG_PROFILE&quot;;
+
+         Check the settings for failed_login_attempts - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(This addresses both O121-C2-005000 and O121-C2-005200.)
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61607&#39; do
+  title &quot;The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000067-DB-000026&#39;
+  tag &quot;gid&quot;: &#39;V-61607&#39;
+  tag &quot;rid&quot;: &#39;SV-76097r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67523r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for failed_login_attempts - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61613"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61613"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61613</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61613
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61613"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61613"
+            >
+              <!-- Result description -->
+              Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61613</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61613&#39; do
+  title &quot;The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.&quot;
+  desc &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000071-DB-000047&#39;
+  tag &quot;gid&quot;: &#39;V-61613&#39;
+  tag &quot;rid&quot;: &#39;SV-76103r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67529r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61615"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61615"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61615</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61615
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must have allocated audit record storage capacity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001849
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61615"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61615"
+            >
+              <!-- Result description -->
+              Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has allocated audit record storage capacity</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has allocated audit record storage capacity</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has allocated audit record storage capacity</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS has allocated audit record storage capacity</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61615</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must have allocated audit record storage capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61615&#39; do
+  title &#39;The DBMS must have allocated audit record storage capacity.&#39;
+  desc  &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000072-DB-000046&#39;
+  tag &quot;gid&quot;: &#39;V-61615&#39;
+  tag &quot;rid&quot;: &#39;SV-76105r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67531r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61617"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61617"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61617</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61617
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61617"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61617"
+            >
+              <!-- Result description -->
+              Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61617</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61619"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61619"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61619</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61619
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-3 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002165
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61619"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61619"
+            >
+              <!-- Result description -->
+              DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61619</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-3 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61619&#39; do
+  title &quot;A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.&quot;
+  desc &quot;DAC is based on the notion that individual users are \&quot;owners\&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000087-DB-000013&#39;
+  tag &quot;gid&quot;: &#39;V-61619&#39;
+  tag &quot;rid&quot;: &#39;SV-76109r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67535r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)&quot;
+  describe &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39; do
+    skip &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61621"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61621"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61621</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000169
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61621
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000169
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61621"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61621"
+            >
+              <!-- Result description -->
+              Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61621</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61621&#39; do
+  title &quot;The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system. (e.g., network interface, hard disk, modem, etc.). From an
+  application perspective, certain specific application functionalities may be
+  audited as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations define which application components shall provide auditable
+  events.
+
+      The DBMS must provide auditing for the list of events defined by the
+  organization or risk negatively impacting forensic investigations into
+  malicious behavior in the information system. Audit records can be generated
+  from various components within the information system, such as network
+  interfaces, hard disks, modems, etc. From an application perspective, certain
+  specific application functionalities may be audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000089-DB-000064&#39;
+  tag &quot;gid&quot;: &#39;V-61621&#39;
+  tag &quot;rid&quot;: &#39;SV-76111r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67537r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000169&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61623"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61623"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61623</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61623
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000171
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61623"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61623"
+            >
+              <!-- Result description -->
+              The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61623</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61623&#39; do
+  title &quot;The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.&quot;
+  desc  &quot;The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000090-DB-000065&#39;
+  tag &quot;gid&quot;: &#39;V-61623&#39;
+  tag &quot;rid&quot;: &#39;SV-76113r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67539r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000171&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39; do
+    skip &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61625"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61625"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61625</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61625
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-12 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000172
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61625"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61625"
+            >
+              <!-- Result description -->
+              Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61625</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-12 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine if auditing is being performed on the 
+    events on the list of auditable events that lie within the scope of Oracle audit capabilities:
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of 
+    information (e.g., classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system-level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - All account creations, modifications, disabling, and terminations.
+
+    If auditing is not being performed for any of these events, this is a finding.
+
+    Notes on Oracle audit capabilities follow.
+
+    Unified Audit supports named audit policies, which are defined using the CREATE AUDIT POLICY statement. 
+    A policy specifies the actions that should be audited and the objects to which it should apply. 
+    If no specific objects are included in the policy definition, it applies to all objects.
+
+    A named policy is enabled using the AUDIT POLICY statement. It can be enabled for all users, for 
+    specific users only, or for all except a specified list of users. The policy can audit successful actions, 
+    unsuccessful actions, or both.
+
+    Verifying existing audit policy: existing Unified Audit policies are listed in the view AUDIT_UNIFIED_POLICIES. 
+    The AUDIT_OPTION column contains one of the actions specified in a CREATE AUDIT POLICY statement. 
+    The AUDIT_OPTION_TYPE column contains &quot;STANDARD ACTION&quot; for a policy that applies to all objects or 
+    &quot;OBJECT ACTION&quot; for a policy that audits actions on a specific object.
+
+    select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; and 
+    AUDIT_OPTION_TYPE&#x3D;&quot;STANDARD ACTION&quot;;
+
+    To find policies that audit privilege grants on specific objects:
+
+    select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; 
+    and AUDIT_OPTION_TYPE&#x3D;&quot;OBJECT ACTION&quot;;
+
+    The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are enabled. The ENABLED_OPT 
+    and USER_NAME columns show the users for whom the policy is enabled or &quot;ALL USERS&quot;. The SUCCESS and FAILURE 
+    columns indicate if the policy is enabled for successful or unsuccessful actions, respectively.
+
+    select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from SYS.AUDIT_UNIFIED_ENABLED_POLICIES where 
+    POLICY_NAME&#x3D;&quot;POLICY1&quot;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing settings to include auditing of events on the selected list 
+    of auditable events.
+
+    1) Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security 
+    levels, or categories of information (e.g., classification levels)
+
+    To audit granting and revocation of any privilege:
+    create audit policy policy1 actions grant;
+    create audit policy policy2 actions revoke;
+
+    To audit grants of object privileges on a specific object:
+    create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+    If Oracle Label Security is enabled, this will audit all OLS administrative actions:
+    create audit policy policy4 actions component &#x3D; OLS all;
+
+    2) Successful and unsuccessful logon attempts, privileged activities or other system-level access
+ 
+    To audit all user logon attempts:
+    create audit policy policy5 actions logon;
+
+    To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+    audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+    3) Starting and ending time for user access to the system, concurrent logons from different 
+    workstations
+
+    This policy will audit all logon and logoff events. An individual session is identified in the 
+    UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID, SESSIONID) and the start and end time will be 
+    indicated by the EVENT_TIMESTAMP of the logon and logoff events:
+
+    create audit policy policy6 actions logon, logoff;
+
+    4) Successful and unsuccessful accesses to objects
+
+    To audit all accesses to a specific table:
+    create audit policy policy7 actions select, insert, delete, alter on &lt;schema&gt;.&lt;object&gt;; 
+
+    Different actions are defined for other object types. To audit all supported actions on a specific object:
+    create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+    5) All program initiations
+
+    To audit execution of any PL&#x2F;SQL program unit:
+    create audit policy policy9 actions EXECUTE;
+
+    To audit execution of a specific function, procedure, or package:
+    create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+    6) All direct access to the information system
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    7) All account creations, modifications, disabling, and terminations
+
+    To audit all user administration actions:
+    create audit policy policy11 actions create user, alter user, drop user, change password;
+
+    8) All kernel module loads, unloads, and restarts
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    9) All database parameter changes
+
+    To audit any database parameter changes, dynamic or static:
+    create audit policy policy12 actions alter database, alter system, create spfile;
+
+    Applying the Policy
+
+    The following command will enable the policy in all database sessions and audit both 
+    successful and unsuccessful actions: audit policy policy1; 
+
+    To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+    audit policy policy1 whenever not successful;
+
+    Either command above can be limited to only database sessions started by a specific user as 
+    follows:
+    audit policy policy1 by &lt;user&gt;;
+    audit policy policy1 by &lt;user&gt; whenever not successful;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61625&#39; do
+  title &quot;The DBMS must generate audit records for the DoD-selected list of
+  auditable events, to the extent such information is available.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system, such as network interfaces, hard disks, modems, etc. From
+  an application perspective, certain specific application functionalities may be
+  audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000091-DB-000066&#39;
+  tag &quot;gid&quot;: &#39;V-61625&#39;
+  tag &quot;rid&quot;: &#39;SV-76115r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67541r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000172&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if auditing is being performed
+  on the events on the DoD-selected list of auditable events that lie within the
+  scope of Oracle audit capabilities:
+  - Successful and unsuccessful attempts to access, modify, or delete privileges,
+  security objects, security levels, or categories of information (e.g.,
+  classification levels).
+  - Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+  - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+  - Successful and unsuccessful accesses to objects.
+  - All program initiations.
+  - All account creations, modifications, disabling, and terminations.
+
+  If auditing is not being performed for any of these events, this is a finding.
+
+  Notes on Oracle audit capabilities follow.
+
+  Unified Audit supports named audit policies, which are defined using the CREATE
+  AUDIT POLICY statement. A policy specifies the actions that should be audited
+  and the objects to which it should apply. If no specific objects are included
+  in the policy definition, it applies to all objects.
+
+  A named policy is enabled using the AUDIT POLICY statement. It can be enabled
+  for all users, for specific users only, or for all except a specified list of
+  users. The policy can audit successful actions, unsuccessful actions, or both.
+
+  Verifying existing audit policy:  existing Unified Audit policies are listed in
+  the view AUDIT_UNIFIED_POLICIES. The AUDIT_OPTION column contains one of the
+  actions specified in a CREATE AUDIT POLICY statement. The AUDIT_OPTION_TYPE
+  column contains &#39;STANDARD ACTION&#39; for a policy that applies to all objects or
+  &#39;OBJECT ACTION&#39; for a policy that audits actions on a specific object.
+
+  select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&#39;GRANT&#39;
+  and AUDIT_OPTION_TYPE&#x3D;&#39;STANDARD ACTION&#39;;
+
+  To find policies that audit privilege grants on specific objects:
+
+  select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;
+
+  The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are
+  enabled. The ENABLED_OPT and USER_NAME columns show the users for whom the
+  policy is enabled or &#39;ALL USERS&#39;. The SUCCESS and FAILURE columns indicate if
+  the policy is enabled for successful or unsuccessful actions, respectively.
+
+  select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from
+  SYS.AUDIT_UNIFIED_ENABLED_POLICIES where POLICY_NAME&#x3D;&#39;POLICY1&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing settings to include auditing of
+  events on the DoD-selected list of auditable events.
+
+  1) Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g., classification levels)
+
+  To audit granting and revocation of any privilege:
+  create audit policy policy1 actions grant;
+  create audit policy policy2 actions revoke;
+
+  To audit grants of object privileges on a specific object:
+  create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+  If Oracle Label Security is enabled, this will audit all OLS administrative
+  actions:
+  create audit policy policy4 actions component &#x3D; OLS all;
+
+  2) Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+
+  To audit all user logon attempts:
+  create audit policy policy5 actions logon;
+
+  To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+  audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+  3) Starting and ending time for user access to the system, concurrent logons
+  from different workstations
+
+  This policy will audit all logon and logoff events. An individual session is
+  identified in the UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID,
+  SESSIONID) and the start and end time will be indicated by the EVENT_TIMESTAMP
+  of the logon and logoff events:
+  create audit policy policy6 actions logon, logoff;
+
+  4) Successful and unsuccessful accesses to objects
+
+  To audit all accesses to a specific table:
+  create audit policy policy7 actions select, insert, delete, alter on
+  &lt;schema&gt;.&lt;object&gt;;
+
+  Different actions are defined for other object types. To audit all supported
+  actions on a specific object:
+  create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+  5) All program initiations
+
+  To audit execution of any PL&#x2F;SQL program unit:
+  create audit policy policy9 actions EXECUTE;
+
+  To audit execution of a specific function, procedure, or package:
+  create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+  6) All direct access to the information system
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  7) All account creations, modifications, disabling, and terminations
+
+  To audit all user administration actions:
+  create audit policy policy11 actions create user, alter user, drop user, change
+  password;
+
+  8) All kernel module loads, unloads, and restarts
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  9) All database parameter changes
+
+  To audit any database parameter changes, dynamic or static:
+  create audit policy policy12 actions alter database, alter system, create
+  spfile;
+
+  Applying the Policy
+
+  The following command will enable the policy in all database sessions and audit
+  both successful and unsuccessful actions:
+  audit policy policy1;
+
+  To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+  audit policy policy1 whenever not successful;
+
+  Either command above can be limited to only database sessions started by a
+  specific user as follows:
+  audit policy policy1 by &lt;user&gt;;
+  audit policy policy1 by &lt;user&gt; whenever not successful;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_policies_auditing_grant_privileges &#x3D; sql.query(&quot;select DISTINCT POLICY_NAME from AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;&quot;).column(&#39;policy_name&#39;)
+  unified_audit_policies_enabled &#x3D; sql.query(&#39;select POLICY_NAME from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The audit policies that audit privilege grants on specific objects&#39; do
+      subject { audit_policies_auditing_grant_privileges }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The list of unified audit policies enabled&#39; do
+      subject { unified_audit_policies_enabled }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61627"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61627"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61627</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61627
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000130
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61627"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61627"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61627</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61627&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000095-DB-000039&#39;
+  tag &quot;gid&quot;: &#39;V-61627&#39;
+  tag &quot;rid&quot;: &#39;SV-76117r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67543r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000130&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61631"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61631"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61631</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000131
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61631
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000131
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61631"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61631"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61631</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61631&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000096-DB-000040&#39;
+  tag &quot;gid&quot;: &#39;V-61631&#39;
+  tag &quot;rid&quot;: &#39;SV-76121r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67881r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000131&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61633"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61633"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61633</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000132
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61633
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000132
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61633"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61633"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61633</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61633&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000097-DB-000041&#39;
+  tag &quot;gid&quot;: &#39;V-61633&#39;
+  tag &quot;rid&quot;: &#39;SV-76123r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67545r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000132&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61635"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61635"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61635</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61635
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61635"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61635"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61635</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61635&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000098-DB-000042&#39;
+  tag &quot;gid&quot;: &#39;V-61635&#39;
+  tag &quot;rid&quot;: &#39;SV-76125r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67547r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000133&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61637"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61637"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61637</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000134
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61637
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000134
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61637"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61637"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61637</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61637&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000099-DB-000043&#39;
+  tag &quot;gid&quot;: &#39;V-61637&#39;
+  tag &quot;rid&quot;: &#39;SV-76127r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67549r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000134&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61639"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61639"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61639</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001487
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61639
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001487
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61639"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61639"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61639</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61639&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.&quot;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000100-DB-000201&#39;
+  tag &quot;gid&quot;: &#39;V-61639&#39;
+  tag &quot;rid&quot;: &#39;SV-76129r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67551r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001487&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61641"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61641"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61641</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61641
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000135
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61641"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61641"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61641</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &quot;OS&quot;, &quot;DB&quot;, &quot;DB,EXTENDED&quot;, &quot;XML&quot; or
+  &quot;XML,EXTENDED&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61641&#39; do
+  title &quot;The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000101-DB-000044&#39;
+  tag &quot;gid&quot;: &#39;V-61641&#39;
+  tag &quot;rid&quot;: &#39;SV-76131r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67553r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000135&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be \&quot;OS\&quot;, \&quot;DB\&quot;, \&quot;DB,EXTENDED\&quot;, \&quot;XML\&quot; or
+  \&quot;XML,EXTENDED\&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+  fga_audit_events &#x3D; sql.query(&quot; SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;&quot;).column(&#39;TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The oracle database fine grained  auditing events captured&#39; do
+      subject { fga_audit_events }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61643"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61643"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61643</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61643
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001855
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61643"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61643"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61643</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61643&#39; do
+  title &quot;The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000103-DB-000050&#39;
+  tag &quot;gid&quot;: &#39;V-61643&#39;
+  tag &quot;rid&quot;: &#39;SV-76133r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67555r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001855&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1&quot;
+
+  describe &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61645"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61645"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61645</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61645
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide a real-time alert when organization-defined
+  audit failure events occur.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001858
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61645"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61645"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61645</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide a real-time alert when organization-defined
+  audit failure events occur.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61645&#39; do
+  title &quot;The system must provide a real-time alert when organization-defined
+  audit failure events occur.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000104-DB-000051&#39;
+  tag &quot;gid&quot;: &#39;V-61645&#39;
+  tag &quot;rid&quot;: &#39;SV-76135r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67559r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001858&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)&quot;
+  describe &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39; do
+    skip &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61647"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61647"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61647</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000139
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61647
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must alert designated organizational officials in the event
+  of an audit processing failure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-5 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000139
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61647"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61647"
+            >
+              <!-- Result description -->
+              It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61647</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must alert designated organizational officials in the event
+  of an audit processing failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-5 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61647&#39; do
+  title &quot;The system must alert designated organizational officials in the event
+  of an audit processing failure.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000108-DB-000048&#39;
+  tag &quot;gid&quot;: &#39;V-61647&#39;
+  tag &quot;rid&quot;: &#39;SV-76137r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67561r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000139&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.&quot;
+  describe &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39; do
+    skip &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61649"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61649"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61649</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61649
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61649"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61649"
+            >
+              <!-- Result description -->
+              Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61649</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61649&#39; do
+  title &quot;The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.&quot;
+  desc &quot;Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000055&#39;
+  tag &quot;gid&quot;: &#39;V-61649&#39;
+  tag &quot;rid&quot;: &#39;SV-76139r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67563r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.&quot;
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61651"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61651"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61651</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61651
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Attempts to bypass access controls must be audited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000158
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61651"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61651"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61651</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Attempts to bypass access controls must be audited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col &quot;tmp tba&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace &quot;TMP TBS&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61651&#39; do
+  title &#39;Attempts to bypass access controls must be audited.&#39;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000056&#39;
+  tag &quot;gid&quot;: &#39;V-61651&#39;
+  tag &quot;rid&quot;: &#39;SV-76141r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67565r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col \&quot;tmp tba\&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace \&quot;TMP TBS\&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER&quot;
+  tag &quot;fix&quot;: &quot;Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61653"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61653"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61653</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000162
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61653
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from any type of
+  unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000162
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61653"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61653"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61653</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from any type of
+  unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61653&#39; do
+  title &quot;The system must protect audit information from any type of
+  unauthorized access.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000118-DB-000059&#39;
+  tag &quot;gid&quot;: &#39;V-61653&#39;
+  tag &quot;rid&quot;: &#39;SV-76143r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67567r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000162&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61655"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61655"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61655</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000163
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61655
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from unauthorized
+  modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000163
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61655"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61655"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61655</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from unauthorized
+  modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61655&#39; do
+  title &quot;The system must protect audit information from unauthorized
+  modification.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000119-DB-000060&#39;
+  tag &quot;gid&quot;: &#39;V-61655&#39;
+  tag &quot;rid&quot;: &#39;SV-76145r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67569r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000163&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61657"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61657"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61657</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000164
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61657
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit information from unauthorized deletion.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000164
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61657"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61657"
+            >
+              <!-- Result description -->
+              If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61657</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit information from unauthorized deletion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61657&#39; do
+  title &#39;The system must protect audit information from unauthorized deletion.&#39;
+  desc  &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000120-DB-000061&#39;
+  tag &quot;gid&quot;: &#39;V-61657&#39;
+  tag &quot;rid&quot;: &#39;SV-76147r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67571r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000164&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61659"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61659"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61659</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001493
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61659
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001493
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61659"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61659"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61659</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61659&#39; do
+  title &#39;The system must protect audit tools from unauthorized access.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000121-DB-000202&#39;
+  tag &quot;gid&quot;: &#39;V-61659&#39;
+  tag &quot;rid&quot;: &#39;SV-76149r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67573r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001493&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61661"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61661"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61661</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61661
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized modification.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001494
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61661"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61661"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61661</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61661&#39; do
+  title &#39;The system must protect audit tools from unauthorized modification.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000122-DB-000203&#39;
+  tag &quot;gid&quot;: &#39;V-61661&#39;
+  tag &quot;rid&quot;: &#39;SV-76151r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67575r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001494&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61663"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61663"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61663</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61663
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must protect audit tools from unauthorized deletion.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001495
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61663"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61663"
+            >
+              <!-- Result description -->
+              Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61663</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must protect audit tools from unauthorized deletion.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61663&#39; do
+  title &#39;The system must protect audit tools from unauthorized deletion.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000123-DB-000204&#39;
+  tag &quot;gid&quot;: &#39;V-61663&#39;
+  tag &quot;rid&quot;: &#39;SV-76153r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67577r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001495&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61665"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61665"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61665</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001348
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61665
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001348
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61665"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61665"
+            >
+              <!-- Result description -->
+              Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61665</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61665&#39; do
+  title &quot;The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.&quot;
+  desc &quot;Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000125-DB-000170&#39;
+  tag &quot;gid&quot;: &#39;V-61665&#39;
+  tag &quot;rid&quot;: &#39;SV-76155r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67579r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001348&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61667"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61667"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61667</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001350
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61667
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001350
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61667"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61667"
+            >
+              <!-- Result description -->
+              Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61667</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY &quot;password&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61667&#39; do
+  title &quot;The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000126-DB-000171&#39;
+  tag &quot;gid&quot;: &#39;V-61667&#39;
+  tag &quot;rid&quot;: &#39;SV-76157r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67581r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001350&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY \&quot;password\&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE&quot;
+  describe &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61669"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61669"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61669</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001351
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61669
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-9 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001351
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61669"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61669"
+            >
+              <!-- Result description -->
+              Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >There are no oracle users allowed access to audit information, control N&#x2F;A</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61669</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-9 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61669&#39; do
+  title &quot;The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000127-DB-000172&#39;
+  tag &quot;gid&quot;: &#39;V-61669&#39;
+  tag &quot;rid&quot;: &#39;SV-76159r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67583r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-001351&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61671"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61671"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61671</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000345
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61671
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000345
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61671"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61671"
+            >
+              <!-- Result description -->
+              When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61671</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61671&#39; do
+  title &quot;The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.&quot;
+  desc &quot;When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000128-DB-000086&#39;
+  tag &quot;gid&quot;: &#39;V-61671&#39;
+  tag &quot;rid&quot;: &#39;SV-76161r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67585r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000345&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61673"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61673"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61673</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61673
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database objects must be owned by accounts authorized for ownership.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61673"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61673"
+            >
+              <!-- Result description -->
+              Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: PUBLIC is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: OUTLN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: CTXSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: DBSNMP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: APPQOSSYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: XDB is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle datbase object owner: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61673</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database objects must be owned by accounts authorized for ownership.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61673&#39; do
+  title &#39;Database objects must be owned by accounts authorized for ownership.&#39;
+  desc  &quot;Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000200&#39;
+  tag &quot;gid&quot;: &#39;V-61673&#39;
+  tag &quot;rid&quot;: &#39;SV-76163r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67587r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;&quot;
+  tag &quot;fix&quot;: &quot;Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_object_owners &#x3D; sql.query(&#39;select DISTINCT owner from dba_objects;&#39;).column(&#39;owner&#39;).uniq
+  if dba_object_owners .empty?
+    impact 0.0
+    describe &#39;There are no oracle dba object owners, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle dba object owners, control N&#x2F;A&#39;
+    end
+  else
+    dba_object_owners .each do |owner|
+      describe &quot;oracle datbase object owner: #{owner}&quot; do
+        subject { owner }
+        it { should be_in input(&#39;allowed_dbaobject_owners&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61675"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61675"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61675</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61675
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce requirements for remote connections to the
+  information system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61675"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61675"
+            >
+              <!-- Result description -->
+              Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >SSHD Configuration</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be enabled</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Service auditd is expected to be running</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61675</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce requirements for remote connections to the
+  information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review organization&#39;s access control policies and procedures addressing remote 
+    access to the information system.
+
+    If remote connections are not allowed by the organization, this is NA. (Note that &quot;remote&quot; means 
+    &quot;from outside the CMS network&quot; and that connections via approved Virtual Private Networks (VPNs) 
+    are considered to be inside the CMS network.)
+
+    Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify access controls and 
+    auditing settings exist and they enforce the requirements for remote access defined by the organization.
+
+    If access controls and auditing do not exist or do not fully enforce the requirements defined in the 
+    organization&#39;s policies and procedures, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61675&#39; do
+  title &quot;The DBMS must enforce requirements for remote connections to the
+  information system.&quot;
+  desc &quot;Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000140-DB-000033&#39;
+  tag &quot;gid&quot;: &#39;V-61675&#39;
+  tag &quot;rid&quot;: &#39;SV-76165r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67589r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review organization&#39;s access control policies and procedures
+  addressing remote access to the information system.
+
+  If remote connections are not allowed by the organization, this is NA. (Note
+  that \&quot;remote\&quot; means \&quot;from outside the DoD Information Network (DoDIN)\&quot; and
+  that connections via approved Virtual Private Networks (VPNs) are considered to
+  be inside the DoDIN.)
+
+  Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify
+  access controls and auditing settings exist and they enforce the requirements
+  for remote access defined by the organization.
+
+  If access controls and auditing do not exist or do not fully enforce the
+  requirements defined in the organization&#39;s policies and procedures, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61677"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61677"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61677</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(76, 176, 79)" d="M12 2C6.5 2 2 6.5 2 12S6.5 22 12 22 22 17.5 22 12 17.5 2 12 2M10 17L5 12L6.41 10.59L10 14.17L17.59 6.58L19 8L10 17Z"/></svg></span>
+                    <span>Passed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61677
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Default demonstration and sample databases, database objects, and
+  applications must be removed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61677"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61677"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle default sample schema user accounts is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle default sample schema user accounts is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle default sample schema user accounts is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle default sample schema user accounts is expected to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61677</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Default demonstration and sample databases, database objects, and
+  applications must be removed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  </span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61677&#39; do
+  title &quot;Default demonstration and sample databases, database objects, and
+  applications must be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000090&#39;
+  tag &quot;gid&quot;: &#39;V-61677&#39;
+  tag &quot;rid&quot;: &#39;SV-76167r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67591r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sample_schema_user_accounts &#x3D; sql.query(&quot;select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);&quot;).column(&#39;username&#39;)
+
+  describe &#39;The list of oracle default sample schema user accounts&#39; do
+    subject { sample_schema_user_accounts }
+    it { should be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61679"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61679"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61679</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61679
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unused database components, DBMS software, and database objects must
+  be removed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61679"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61679"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components: Oracle Text is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components: Oracle Text is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components: Oracle Text is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components: Oracle Text is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61679</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unused database components, DBMS software, and database objects must
+  be removed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61679&#39; do
+  title &quot;Unused database components, DBMS software, and database objects must
+  be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000091&#39;
+  tag &quot;gid&quot;: &#39;V-61679&#39;
+  tag &quot;rid&quot;: &#39;SV-76169r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67593r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault&quot;
+  tag &quot;fix&quot;: &quot;If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components &#x3D; sql.query(&quot;SELECT comp_id, comp_name, version, status from dba_registry where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);&quot;).column(&#39;comp_name&#39;).uniq
+  if list_of_installed_components.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components installed, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components installed, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components.each do |component|
+      describe &quot;The installed oracle database components: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61681"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61681"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61681</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61681
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61681"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61681"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: OLAP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: OLAP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: OLAP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: OLAP is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61681</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61681&#39; do
+  title &quot;Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000092&#39;
+  tag &quot;gid&quot;: &#39;V-61681&#39;
+  tag &quot;rid&quot;: &#39;SV-76171r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67595r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components_integrated_into_dbms &#x3D; sql.query(&quot;SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );&quot;).column(&#39;parameter&#39;).uniq
+  if list_of_installed_components_integrated_into_dbms.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components integrated into the DBMS, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components integrated into the DBMS, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components_integrated_into_dbms.each do |component|
+      describe &quot;The installed oracle database components integrated into the DBMS: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components_integrated_into_dbms&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61683"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61683"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61683</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61683
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of external executables must be authorized.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61683"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61683"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61683</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of external executables must be authorized.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61683&#39; do
+  title &#39;Use of external executables must be authorized.&#39;
+  desc  &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61683&#39;
+  tag &quot;rid&quot;: &#39;SV-76173r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67597r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;&quot;
+  tag &quot;fix&quot;: &quot;Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;&quot;).column(&#39;owner&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61685"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61685"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61685</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61685
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Access to external executables must be disabled or restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000381
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61685"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61685"
+            >
+              <!-- Result description -->
+              The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61685</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Access to external executables must be disabled or restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference &quot;extproc&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference &quot;extproc&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to &quot;extproc&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61685&#39; do
+  title &#39;Access to external executables must be disabled or restricted.&#39;
+  desc  &quot;The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61685&#39;
+  tag &quot;rid&quot;: &#39;SV-76175r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011810&#39;
+  tag &quot;fix_id&quot;: &#39;F-67599r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference \&quot;extproc\&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference \&quot;extproc\&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to \&quot;extproc\&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;\&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages\&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.&quot;
+  tag &quot;fix&quot;: &quot;If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should_not include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should_not include &#39;run_group &#x3D; nobody&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;hs&#x2F;admin&#x2F;extproc.ora&quot; do
+    it { should exist }
+    its(&#39;content&#39;) { should match &#x2F;^EXTPROC_DLLS&#x3D;ONLY:\s*\w*&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61687"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61687"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61687</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61687
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-7 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000382
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61687"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61687"
+            >
+              <!-- Result description -->
+              Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61687</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-7 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS settings for functions, ports, protocols, and services that are not 
+    approved.
+
+    If any are found, this is a finding.
+
+    - - - - -
+    In the Oracle database, the communications with the database and incoming requests are performed by 
+    the Oracle Listener.  The Oracle Listener listens on a specific port or ports for connections to a 
+    specific database.  The Oracle Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin 
+    directory.  To check the ports and protocols in use, go to that directory and review the SQLNET.ora, 
+    LISTENER.ora, and the TNSNAMES.ora. If protocols or ports are in use that are not authorized, this 
+    is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61687&#39; do
+  title &quot;The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000142-DB-000094&#39;
+  tag &quot;gid&quot;: &#39;V-61687&#39;
+  tag &quot;rid&quot;: &#39;SV-76177r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67601r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000382&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings for functions, ports, protocols, and
+  services that are not approved.
+
+  If any are found, this is a finding.
+
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  - - - - -
+  In the Oracle database, the communications with the database and incoming
+  requests are performed by the Oracle Listener.  The Oracle Listener listens on
+  a specific port or ports for connections to a specific database.  The Oracle
+  Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.  To check the ports and protocols in use, go to  that directory and
+  review the SQLNET.ora, LISTENER.ora, and the TNSNAMES.ora.  If protocols or
+  ports are in use that are not authorized, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61689"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61689"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61689</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-10 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000553
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61689
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-10 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000553
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61689"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61689"
+            >
+              <!-- Result description -->
+              Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61689</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-10 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61689&#39; do
+  title &quot;Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.&quot;
+  desc &quot;Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000144-DB-000101&#39;
+  tag &quot;gid&quot;: &#39;V-61689&#39;
+  tag &quot;rid&quot;: &#39;SV-76179r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67603r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000553&#39;]
+  tag &quot;nist&quot;: [&#39;CP-10 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.&quot;
+  tag &quot;fix&quot;: &quot;Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.&quot;
+  describe &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39; do
+    skip &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61693"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61693"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61693</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61693
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Oracle must back up user-level information per a defined frequency.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61693"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61693"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Oracle backs up user-level information per a defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Oracle backs up user-level information per a defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Oracle backs up user-level information per a defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Oracle backs up user-level information per a defined frequency</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61693</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Oracle must back up user-level information per a defined frequency.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61693&#39; do
+  title &#39;Oracle must back up user-level information per a defined frequency.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Databases that do not backup information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000095&#39;
+  tag &quot;gid&quot;: &#39;V-61693&#39;
+  tag &quot;rid&quot;: &#39;SV-76183r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67609r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)&quot;
+  tag &quot;fix&quot;: &quot;Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.&quot;
+  describe &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39; do
+    skip &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61695"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61695"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61695</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61695
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database backup procedures must be defined, documented, and
+  implemented.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61695"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61695"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61695</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database backup procedures must be defined, documented, and
+  implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file &quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement database backup procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61695&#39; do
+  title &quot;Database backup procedures must be defined, documented, and
+  implemented.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Database backups provide the required means to restore databases after
+  compromise or loss. Backups help reduce the vulnerability to unauthorized
+  access or hardware loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000096&#39;
+  tag &quot;gid&quot;: &#39;V-61695&#39;
+  tag &quot;rid&quot;: &#39;SV-76185r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67611r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file \&quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1\&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3&quot;
+  tag &quot;fix&quot;: &#39;Develop, document, and implement database backup procedures.&#39;
+  describe &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39; do
+    skip &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61697"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61697"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61697</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61697
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61697"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61697"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61697</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61697&#39; do
+  title &quot;Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency.  This includes data stored on file
+  systems, within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Problems with backup procedures or backup media may not be discovered until
+  after a recovery is needed. Testing and verification of procedures provides the
+  opportunity to discover oversights, conflicts, or other issues in the backup
+  procedures or use of media designed to be used.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000097&#39;
+  tag &quot;gid&quot;: &#39;V-61697&#39;
+  tag &quot;rid&quot;: &#39;SV-76187r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67613r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.&quot;
+  describe &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39; do
+    skip &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61699"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61699"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61699</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61699
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS backup and restoration files must be protected from unauthorized
+  access.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000535
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61699"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61699"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61699</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS backup and restoration files must be protected from unauthorized
+  access.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61699&#39; do
+  title &quot;DBMS backup and restoration files must be protected from unauthorized
+  access.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Lost or compromised DBMS backup and restoration files may lead to not only
+  the loss of data, but also the unauthorized access to sensitive data. Backup
+  files need the same protections against unauthorized access when stored on
+  backup media as when online and actively in use by the database system. In
+  addition, the backup media needs to be protected against physical loss. Most
+  DBMS&#39;s maintain online copies of critical control files to provide transparent
+  or easy recovery from hard disk loss or other interruptions to database
+  operation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000098&#39;
+  tag &quot;gid&quot;: &#39;V-61699&#39;
+  tag &quot;rid&quot;: &#39;SV-76189r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67615r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.&quot;
+  tag &quot;fix&quot;: &quot;Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.&quot;
+  describe &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39; do
+    skip &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61701"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61701"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61701</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61701
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61701"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61701"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61701</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61701&#39; do
+  title &quot;DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000099&#39;
+  tag &quot;gid&quot;: &#39;V-61701&#39;
+  tag &quot;rid&quot;: &#39;SV-76191r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67617r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.&quot;
+  describe &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39; do
+    skip &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61703"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61703"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61703</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61703
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for network access to
+  privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000765
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61703"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61703"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61703</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for network access to
+  privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access 
+    mechanism settings to determine whether users logging on to privileged accounts via a network are 
+    required to use multifactor authentication.
+
+    If users logging on to privileged accounts via a network are not required to use multifactor 
+    authentication, this is a finding.
+
+    Use authentication to prove the identities of users who are attempting to log on to the database. 
+    Authenticating user identity is imperative in distributed environments, without which there can be 
+    little confidence in network security. Passwords are the most common means of authentication. Oracle 
+    Database enables strong authentication with Oracle authentication adapters that support various 
+    third-party authentication services, including TLS with digital certificates, as well as Smart Cards (PIV).
+
+    If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the following, TLS is enabled. 
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the 
+    supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or 
+    differently located sqlnet.ora files.)
+
+    SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+    SSL_VERSION &#x3D; 1.2 or 1.1
+    SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+    WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+    (METHOD &#x3D; FILE)
+    (METHOD_DATA &#x3D;
+    (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+    )
+    )
+
+    SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+    ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+    Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for network users logging on to privileged accounts. 
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61703&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000149-DB-000104&#39;
+  tag &quot;gid&quot;: &#39;V-61703&#39;
+  tag &quot;rid&quot;: &#39;SV-76193r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67619r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000765&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts via a network are not required to
+  use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates,
+  as well as Smart Cards (CAC, PIV).
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled. (Note: This assumes that a single sqlnet.ora file,
+  in the default location, is in use. Please see the supplemental file
+  \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or
+  differently located sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+  (SOURCE &#x3D;
+  (METHOD &#x3D; FILE)
+  (METHOD_DATA &#x3D;
+  (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+  )
+  )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61705"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61705"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61705</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61705
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000766
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61705"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61705"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61705</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to 
+    require multifactor authentication for network users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61705&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000150-DB-000105&#39;
+  tag &quot;gid&quot;: &#39;V-61705&#39;
+  tag &quot;rid&quot;: &#39;SV-76195r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67621r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000766&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61707"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61707"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61707</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61707
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for local access to
+  privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (3)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000767
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61707"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61707"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61707</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for local access to
+  privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (3), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61707&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000151-DB-000106&#39;
+  tag &quot;gid&quot;: &#39;V-61707&#39;
+  tag &quot;rid&quot;: &#39;SV-76197r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67623r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000767&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61709"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61709"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61709</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000768
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61709
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000768
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61709"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61709"
+            >
+              <!-- Result description -->
+              Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61709</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to non-privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61709&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000152-DB-000107&#39;
+  tag &quot;gid&quot;: &#39;V-61709&#39;
+  tag &quot;rid&quot;: &#39;SV-76199r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67625r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000768&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE &#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)))&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61711"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61711"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61711</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61711
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (5)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000770
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61711"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61711"
+            >
+              <!-- Result description -->
+              Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61711</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (5), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61711&#39; do
+  title &quot;The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.&quot;
+  desc &quot;To assure individual accountability and prevent unauthorized access,
+  application users (and any processes acting on behalf of users) must be
+  individually identified and authenticated.
+
+      A shared authenticator is a generic account used by multiple individuals.
+  Use of a shared authenticator alone does not uniquely identify individual
+  users. An example of a shared authenticator is the UNIX OS &#39;root&#39; user account,
+  a Windows &#39;administrator&#39; account, an &#39;SA&#39; account, or a &#39;helpdesk&#39; account.
+
+      For example, the UNIX and Windows operating systems offer a &#39;switch user&#39;
+  capability allowing users to authenticate with their individual credentials
+  and, when needed, &#39;switch&#39; to the administrator role. This method provides for
+  unique individual authentication prior to using a shared authenticator.
+
+      Some applications may not have the need to provide a group authenticator;
+  this is considered a matter of application design. In those instances where the
+  application design includes the use of a shared authenticator, this requirement
+  will apply.
+
+      There may also be instances when specific user actions need to be performed
+  on the information system without unique user identification or authentication.
+  An example of this type of access is a web server which contains publicly
+  releasable information. These types of accesses are allowed but must be
+  explicitly identified and documented by the organization.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000153-DB-000108&#39;
+  tag &quot;gid&quot;: &#39;V-61711&#39;
+  tag &quot;rid&quot;: &#39;SV-76201r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67627r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000770&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (5)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.&quot;
+  describe &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39; do
+    skip &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61713"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61713"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61713</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61713
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (8)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001941
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61713"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61713"
+            >
+              <!-- Result description -->
+              An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61713</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (8), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61713&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in unfettered access to the database settings and data. A successful
+  replay attack against a privileged database account could result in a complete
+  compromise of the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000156-DB-000111&#39;
+  tag &quot;gid&quot;: &#39;V-61713&#39;
+  tag &quot;rid&quot;: &#39;SV-76203r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67629r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001941&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (8)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61715"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61715"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61715</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61715
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2 (9)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001942
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61715"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61715"
+            >
+              <!-- Result description -->
+              An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61715</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2 (9), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61715&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in access to database data.  A successful replay attack against a
+  non-privileged database account could result in a compromise of data stored on
+  the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000157-DB-000112&#39;
+  tag &quot;gid&quot;: &#39;V-61715&#39;
+  tag &quot;rid&quot;: &#39;SV-76205r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67631r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001942&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (9)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61717"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61717"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61717</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61717
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must disable user accounts after 60 days of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-4 e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000795
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61717"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61717"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61717</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must disable user accounts after 60 days of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-4 e), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For accounts managed by Oracle, check DBMS settings to determine if accounts can be automatically disabled 
+    by the system after 60 days of inactivity. Also, ask the DBA if an alternative method, such as a stored 
+    procedure run daily, to disable Oracle-managed accounts inactive for more than 60 days, has been deployed.
+
+    If the ability to disable accounts after 60 days of inactivity, by either of these means, does not exist, 
+    this is a finding.
+
+    - - - - -
+
+    Check to see what profile each user is associated with, if any, with this query:
+
+    select username, profile from dba_users order by 1,2;
+
+    Then check the profile to see what the password_life_time is set to in the table dba_profiles; the 
+    password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+    in the RESOURCE_NAME column.
+    SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where upper(resource_name) &#x3D; &quot;PASSWORD_LIFE_TIME&quot;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For accounts managed by Oracle, determine if it is practical and acceptable to require a 
+    password change every 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue the statement:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60;
+    (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for examples.)
+
+    If password changes every 60 days or fewer are unacceptable or impractical, implement an alternative method, 
+    such as a stored procedure run daily, to disable accounts inactive for more than 60 days.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61719"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61719"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61719</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61719
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce minimum
+  password length.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000205
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61719"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61719"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61719</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce minimum
+  password length.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called 
+    DEFAULT, determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+
+    For each password verification function, examine its source code.
+    
+    If it does not enforce the CMS-defined minimum length (15 unless otherwise specified), this is 
+    a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+&lt;   oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61719&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce minimum
+  password length.&quot;
+  desc &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000164-DB-000082&#39;
+  tag &quot;gid&quot;: &#39;V-61719&#39;
+  tag &quot;rid&quot;: &#39;SV-76209r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67635r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000205&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the DoD-defined minimum length (15 unless otherwise
+  specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61721"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61721"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61721</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61721
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (e)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000200
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61721"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61721"
+            >
+              <!-- Result description -->
+              Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61721</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (e), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password reuse rule, if any, that is in effect:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME IN (&quot;PASSWORD_REUSE_MAX&quot;, &quot;PASSWORD_REUSE_TIME&quot;)
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE, RESOURCE_NAME;
+    Bearing in mind that a profile can inherit from another profile, and the root profile is 
+    called DEFAULT, determine the value of the PASSWORD_REUSE_MAX effective for each profile.
+
+    If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the CMS-defined minimum 
+    number of password changes before a password may be repeated (five or greater), this is a finding.
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so if both are 
+    UNLIMITED, this is a finding.&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  For each profile, set the PASSWORD_REUSE_MAX to 
+    enforce the CMS-defined minimum number of password changes before a password may be 
+    repeated (six or greater).
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so ensure also 
+    that it has a meaningful value.  Since the minimum password lifetime is 1 day, the smallest 
+    meaningful value is the same as the PASSWORD_REUSE_MAX value.
+
+    Using PPPPPP as an example, the statement to do this is:
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 6 PASSWORD_REUSE_TIME 6;&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61723"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61723"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61723</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61723
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000192
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61723"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61723"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61723</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification 
+    function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61723&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000166-DB-000070&#39;
+  tag &quot;gid&quot;: &#39;V-61723&#39;
+  tag &quot;rid&quot;: &#39;SV-76213r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67639r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000192&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61725"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61725"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61725</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61725
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000193
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61725"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61725"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61725</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61725&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000167-DB-000071&#39;
+  tag &quot;gid&quot;: &#39;V-61725&#39;
+  tag &quot;rid&quot;: &#39;SV-76215r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67641r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000193&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61727"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61727"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61727</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61727
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000194
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61727"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61727"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61727</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61727&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000168-DB-000072&#39;
+  tag &quot;gid&quot;: &#39;V-61727&#39;
+  tag &quot;rid&quot;: &#39;SV-76217r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67643r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000194&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61729"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61729"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61729</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61729
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001619
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61729"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61729"
+            >
+              <!-- Result description -->
+              Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61729</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >&quot;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61729&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000169-DB-000176&#39;
+  tag &quot;gid&quot;: &#39;V-61729&#39;
+  tag &quot;rid&quot;: &#39;SV-76219r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67645r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001619&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61731"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61731"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61731</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61731
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000195
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61731"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61731"
+            >
+              <!-- Result description -->
+              Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61731</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called DEFAULT, 
+    determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+    
+    For each password verification function, examine its source code.
+
+    If it does not enforce the organization-defined minimum number of characters by which the password must differ 
+    from the previous password (six of the characters unless otherwise specified), this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If any user accounts are managed by Oracle:  Develop, test and implement a password 
+    verification function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61731&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.&quot;
+  desc  &quot;Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000170-DB-000073&#39;
+  tag &quot;gid&quot;: &#39;V-61731&#39;
+  tag &quot;rid&quot;: &#39;SV-76221r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67647r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000195&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of characters by
+  which the password must differ from the previous password (eight of the
+  characters unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If any user accounts are managed by Oracle:  Develop, test and
+  implement a password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the
+  starting point for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61733"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61733"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61733</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61733
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to enforce password
+  encryption for storage.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000196
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61733"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61733"
+            >
+              <!-- Result description -->
+              Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61733</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to enforce password
+  encryption for storage.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME  etwork\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61733&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  encryption for storage.&quot;
+  desc &quot;Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000171-DB-000074&#39;
+  tag &quot;gid&quot;: &#39;V-61733&#39;
+  tag &quot;rid&quot;: &#39;SV-76223r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67649r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000196&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME\
+  etwork\\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61735"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61735"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61735</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61735
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61735"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61735"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61735</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, this is not a finding.
+
+    Where accounts are authenticated using passwords, review procedures and implementation evidence for creation 
+    of temporary passwords.
+
+    If the procedures or evidence do not exist or do not enforce passwords to meet CMS password requirements, this 
+    is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures for assigning temporary passwords to user accounts.
+
+    Procedures should include instructions to meet current CMS password length and complexity requirements and 
+    provide a secure method to relay the temporary password to the user.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61735&#39; do
+  title &quot;Procedures for establishing temporary passwords that meet DoD password
+  requirements for new accounts must be defined, documented, and implemented.&quot;
+  desc &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000077&#39;
+  tag &quot;gid&quot;: &#39;V-61735&#39;
+  tag &quot;rid&quot;: &#39;SV-76225r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67651r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Where accounts are authenticated using passwords, review procedures and
+  implementation evidence for creation of temporary passwords.
+
+  If the procedures or evidence do not exist or do not enforce passwords to meet
+  DoD password requirements, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures for assigning temporary passwords to user
+  accounts.
+
+  Procedures should include instructions to meet current DoD password length and
+  complexity requirements and provide a secure method to relay the temporary
+  password to the user.&quot;
+  describe &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39; do
+    skip &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61737"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61737"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61737</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61737
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61737"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61737"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61737</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61737&#39; do
+  title &quot;DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.&quot;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000079&#39;
+  tag &quot;gid&quot;: &#39;V-61737&#39;
+  tag &quot;rid&quot;: &#39;SV-76227r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67653r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61739"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61739"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61739</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61739
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must enforce password maximum lifetime restrictions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (1) (d)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61739"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61739"
+            >
+              <!-- Result description -->
+              Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61739</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must enforce password maximum lifetime restrictions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (1) (d), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    Review DBMS settings to determine if passwords must be changed periodically. If not, this is a finding:
+
+    SELECT p1.profile,
+    CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit, &#39;DEFAULT&#39;, p4.limit, p2.limit))
+    END
+    END
+    END
+    END effective_life_time
+    FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+    WHERE p1.profile&#x3D;p2.profile
+    AND p3.profile&#x3D;&#39;DEFAULT&#39;
+    AND p4.profile&#x3D;&#39;DEFAULT&#39;
+    AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+    AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+    AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+    AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+    order by 1;
+
+    If the “effective_life_time” is greater than “60” for any profile applied to user accounts, and the 
+    need for this has not been documented and approved by the ISSO, this is a finding.
+
+    If the value is greater than 60 for any profile applied to user accounts, and the DBMS is configured to use 
+    Password Lifetime to disable inactive accounts, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For user accounts managed by Oracle: Modify DBMS settings to force users to periodically change 
+    their passwords. For example, using PPPPPP to stand for a profile name:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60 PASSWORD_GRACE_TIME 0;
+    Do this for each profile applied to user accounts.
+    
+    Where a password lifetime longer than “60” is needed, document the reasons and obtain ISSO approval.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61739&#39; do
+  title &#39;The DBMS must enforce password maximum lifetime restrictions.&#39;
+  desc  &quot;Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000080&#39;
+  tag &quot;gid&quot;: &#39;V-61739&#39;
+  tag &quot;rid&quot;: &#39;SV-76229r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67655r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Review DBMS settings to determine if passwords must be changed periodically. If
+  not, this is a finding:
+
+  SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;
+
+  If the “effective_life_time” is greater than “60” for any profile applied to
+  user accounts, and the need for this has not been documented and approved by
+  the ISSO, this is a finding.
+
+  If the value is greater than 35 for any profile applied to user accounts, and
+  the DBMS is configured to use Password Lifetime to disable inactive accounts,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For user accounts managed by Oracle: Modify DBMS settings to
+  force users to periodically change their passwords. For example, using PPPPPP
+  to stand for a profile name:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35 PASSWORD_GRACE_TIME 0;
+  Do this for each profile applied to user accounts.
+
+  (Note: Although the DoD requirement is for a password change every 60 days,
+  using a value of “35” facilitates the use of “PASSWORD_LIFE_TIME” as a means of
+  locking accounts inactive for 35 days. But if “35” is not a practical or
+  acceptable limit for password lifetime, set it to the standard DoD value of
+  “60”.)
+
+  Where a password lifetime longer than “60” is needed, document the reasons and
+  obtain ISSO approval.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_effective_life_time &#x3D; sql.query(&quot;SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;&quot;).column(&#39;effective_life_time&#39;)
+
+  get_effective_life_time.each do |effective_life_time|
+
+    describe &#39;The oracle database account effective life time limit&#39; do
+      subject { effective_life_time }
+      it { should cmp &gt;&#x3D; 60 }
+    end
+  end
+  describe get_effective_life_time do
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61741"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61741"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61741</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61741
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (a)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000185
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61741"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61741"
+            >
+              <!-- Result description -->
+              A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61741</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (a), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61741&#39; do
+  title &quot;The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.&quot;
+  desc &quot;A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000175-DB-000067&#39;
+  tag &quot;gid&quot;: &#39;V-61741&#39;
+  tag &quot;rid&quot;: &#39;SV-76231r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67657r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000185&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61743"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61743"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61743</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000187
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61743
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-5 (2) (c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000187
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61743"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61743"
+            >
+              <!-- Result description -->
+              The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61743</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-5 (2) (c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61743&#39; do
+  title &quot;The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61743&#39;
+  tag &quot;rid&quot;: &#39;SV-76233r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67659r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000187&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;FALSE)&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61745"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61745"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61745</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61745
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61745"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61745"
+            >
+              <!-- Result description -->
+              Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61745</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review configuration to confirm that accounts used by processes to connect to the DBMS are 
+    authenticated using valid, current CMS-issued PKI certificates.
+
+    If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not certificate-based, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For each such account, use CMS certificate-based authentication.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61745&#39; do
+  title &quot;Processes (services, applications, etc.) that connect to the DBMS
+  independently of individual users, must use valid, current DoD-issued PKI
+  certificates for authentication to the  DBMS.&quot;
+  desc &quot;Just as individual users must be authenticated, and just as they must
+  use PKI-based authentication, so must any processes that connect to the DBMS.
+
+      The DoD standard for authentication of a process or device communicating
+  with another process or device is the presentation of a valid, current,
+  DoD-issued Public Key Infrastructure (PKI) certificate that has previously been
+  verified as Trusted by an administrator of the other process or device.
+
+      This applies both to processes that run on the same server as the DBMS and
+  to processes running on other computers.
+
+      The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are
+  exceptions.  These cannot currently use certificate-based authentication.  For
+  this reason among others, use of these accounts should be restricted to where
+  it is truly needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61745&#39;
+  tag &quot;rid&quot;: &#39;SV-76235r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015501&#39;
+  tag &quot;fix_id&quot;: &#39;F-67661r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review configuration to confirm that accounts used by processes
+  to connect to the DBMS are authenticated using valid, current DoD-issued PKI
+  certificates.
+
+  If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not
+  certificate-based, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;For each such account, use DoD certificate-based authentication.&#39;
+  describe &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39; do
+    skip &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61747"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61747"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61747</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61747
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-7
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000803
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61747"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61747"
+            >
+              <!-- Result description -->
+              Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61747</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-7, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  </span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61747&#39; do
+  title &quot;The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.&quot;
+  desc &quot;Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000179-DB-000114&#39;
+  tag &quot;gid&quot;: &#39;V-61747&#39;
+  tag &quot;rid&quot;: &#39;SV-76237r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67663r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000803&#39;]
+  tag &quot;nist&quot;: [&#39;IA-7&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  &quot;
+  sql &#x3D; oracledb_session(user: &#39;system&#39;, password: &#39;xvIA7zonxGM&#x3D;1&#39;, host: &#39;localhost&#39;, service: &#39;ORCLCDB&#39;, sqlplus_bin: &#39;&#x2F;opt&#x2F;oracle&#x2F;product&#x2F;12.2.0.1&#x2F;dbhome_1&#x2F;bin&#x2F;sqlplus&#39;)
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61749"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61749"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61749</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002890
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61749
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002890
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-003123
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61749"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61749"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61749</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not 
+    mandatory in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >MA-4 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61749&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000184-DB-000119&#39;
+  tag &quot;gid&quot;: &#39;V-61749&#39;
+  tag &quot;rid&quot;: &#39;SV-76239r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67665r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002890&#39;, &#39;CCI-003123&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61751"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61751"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61751</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 c)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000877
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61751
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      MA-4 c)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000877
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61751"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61751"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61751</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >MA-4 c), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61751&#39; do
+  title &quot;The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000185-DB-000116&#39;
+  tag &quot;gid&quot;: &#39;V-61751&#39;
+  tag &quot;rid&quot;: &#39;SV-76241r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67667r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000877&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61753"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61753"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61753</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61753
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61753"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61753"
+            >
+              <!-- Result description -->
+              When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61753</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61753&#39; do
+  title &quot;Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.&quot;
+  desc &quot;When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000187-DB-000120&#39;
+  tag &quot;gid&quot;: &#39;V-61753&#39;
+  tag &quot;rid&quot;: &#39;SV-76243r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67669r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)&quot;
+  tag &quot;fix&quot;: &quot;Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.&quot;
+  describe &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39; do
+    skip &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61755"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61755"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61755</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-16 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002262
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61755
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-16 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002262
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61755"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61755"
+            >
+              <!-- Result description -->
+              When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61755</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not                               
+    mandatory in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-16 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61755&#39; do
+  title &quot;The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.&quot;
+  desc &quot;When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000188-DB-000121&#39;
+  tag &quot;gid&quot;: &#39;V-61755&#39;
+  tag &quot;rid&quot;: &#39;SV-76245r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67671r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002262&#39;]
+  tag &quot;nist&quot;: [&#39;AC-16 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61757"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61757"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61757</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61757
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001133
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61757"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61757"
+            >
+              <!-- Result description -->
+              Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61757</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and vendor documentation to verify network connections 
+    are terminated when a database communications session is ended or after 30 minutes of inactivity.
+
+    If the network connection is not terminated, this is a finding.
+
+    The defined duration for these timeouts 30 minutes, except to fulfill documented and validated mission 
+    requirements.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and&#x2F;or OS settings to disconnect network sessions when database communication 
+    sessions have ended or after the CMS-defined period of inactivity.
+
+    To configure this in Oracle, modify each relevant profile.  The resource name is IDLE_TIME, which is 
+    expressed in minutes.  Using PPPPPP as an example of a profile, set the timeout to 30 minutes with:
+    ALTER PROFILE PPPPPP LIMIT IDLE_TIME 30;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61757&#39; do
+  title &quot;The DBMS must terminate the network connection associated with a
+  communications session at the end of the session or 15 minutes of inactivity.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000190-DB-000137&#39;
+  tag &quot;gid&quot;: &#39;V-61757&#39;
+  tag &quot;rid&quot;: &#39;SV-76247r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67673r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001133&#39;]
+  tag &quot;nist&quot;: [&#39;SC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and vendor documentation to
+  verify network connections are terminated when a database communications
+  session is ended or after 15 minutes of inactivity.
+
+  If the network connection is not terminated, this is a finding.
+
+  The defined duration for these timeouts 15 minutes, except to fulfill
+  documented and validated mission requirements.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or OS settings to disconnect network sessions
+  when database communication sessions have ended or after the DoD-defined period
+  of inactivity.
+
+  To configure this in Oracle, modify each relevant profile.  The resource name
+  is IDLE_TIME, which is expressed in minutes.  Using PPPPPP as an example of a
+  profile, set the timeout to 15 minutes with:
+  ALTER PROFILE PPPPPP LIMIT IDLE_TIME 15;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idele time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61759"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61759"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61759</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61759
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61759"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61759"
+            >
+              <!-- Result description -->
+              Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61759</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-13, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61759&#39; do
+  title &quot;The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.&quot;
+  desc &quot;Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000140&#39;
+  tag &quot;gid&quot;: &#39;V-61759&#39;
+  tag &quot;rid&quot;: &#39;SV-76249r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67675r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61761"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61761"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61761</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61761
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database data files containing sensitive information must be
+  encrypted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-13
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002450
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61761"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61761"
+            >
+              <!-- Result description -->
+              Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle tablespaces that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle table columns that are encrypted is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61761</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database data files containing sensitive information must be
+  encrypted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-13, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61761&#39; do
+  title &quot;Database data files containing sensitive information must be
+  encrypted.&quot;
+  desc &quot;Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000141&#39;
+  tag &quot;gid&quot;: &#39;V-61761&#39;
+  tag &quot;rid&quot;: &#39;SV-76251r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67677r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61763"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61763"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61763</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61763
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect the integrity of publicly available information
+  and applications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61763"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61763"
+            >
+              <!-- Result description -->
+              The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61763</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect the integrity of publicly available information
+  and applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61763&#39; do
+  title &quot;The DBMS must protect the integrity of publicly available information
+  and applications.&quot;
+  desc &quot;The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000201-DB-000145&#39;
+  tag &quot;gid&quot;: &#39;V-61763&#39;
+  tag &quot;rid&quot;: &#39;SV-76253r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67679r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.&quot;
+  describe &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61765"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61765"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61765</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001185
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61765
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-23 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001185
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61765"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61765"
+            >
+              <!-- Result description -->
+              This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61765</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Caveat</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Not applicable for this CMS ARS 3.1 overlay, since the related security control is not selected in CMS ARS 3.1</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-23 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with &quot;alter profile&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   </span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61765&#39; do
+  title &quot;The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.&quot;
+  desc  &quot;This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000220-DB-000149&#39;
+  tag &quot;gid&quot;: &#39;V-61765&#39;
+  tag &quot;rid&quot;: &#39;SV-76255r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67681r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001185&#39;]
+  tag &quot;nist&quot;: [&#39;SC-23 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with \&quot;alter profile\&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   &quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_idle_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  query_sessions_per_user &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;
+  }
+
+  query_connect_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;CONNECT_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query_idle_time, profile: profile)).column(&#39;limit&#39;)
+    sessions_per_user &#x3D; sql.query(format(query_sessions_per_user, profile: profile)).column(&#39;limit&#39;)
+    connect_time &#x3D; sql.query(format(query_connect_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idle time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+
+    describe &quot;The oracle database number of sessions per user for profile: #{profile}&quot; do
+      subject { sessions_per_user }
+      it { should cmp &lt;&#x3D; 3 }
+    end
+
+    describe &quot;The oracle database connect time for profile: #{profile}&quot; do
+      subject { connect_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61769"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61769"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61769</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-24
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001665
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61769
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-24
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001665
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61769"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61769"
+            >
+              <!-- Result description -->
+              Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61769</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-24, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as &quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61769&#39; do
+  title &quot;The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.&quot;
+  desc &quot;Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000226-DB-000147&#39;
+  tag &quot;gid&quot;: &#39;V-61769&#39;
+  tag &quot;rid&quot;: &#39;SV-76259r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67685r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001665&#39;]
+  tag &quot;nist&quot;: [&#39;SC-24&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as \&quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes\&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_mode &#x3D; sql.query(&#39;select log_mode from v$database;&#39;).column(&#39;log_mode&#39;)
+
+  describe &#39;The list of oracle database log mode&#39; do
+    subject { log_mode }
+    it { should cmp &#39;ARCHIVELOG&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61771"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61771"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61771</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61771
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-28
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001199
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61771"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61771"
+            >
+              <!-- Result description -->
+              This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database DBFIPS_140c parameter is expected not to be empty</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;[].empty?&#x60; to return false, got true</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61771</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-28, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name &quot;TSName&quot;,
+  e.encryptionalg &quot;Algorithm&quot;,
+  d.file_name &quot;File Name&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner &quot;Owner&quot;,
+  a.table_name &quot;Table Name&quot;,
+  e.encryptionalg &quot;Algorithm&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61771&#39; do
+  title &quot;The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.&quot;
+  desc &quot;This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000231-DB-000154&#39;
+  tag &quot;gid&quot;: &#39;V-61771&#39;
+  tag &quot;rid&quot;: &#39;SV-76261r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67687r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001199&#39;]
+  tag &quot;nist&quot;: [&#39;SC-28&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name \&quot;TSName\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;,
+  d.file_name \&quot;File Name\&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner \&quot;Owner\&quot;,
+  a.table_name \&quot;Table Name\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61775"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61775"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61775</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61775
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-3
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001084
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61775"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61775"
+            >
+              <!-- Result description -->
+              Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61775</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-3, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61775&#39; do
+  title &quot;The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.&quot;
+  desc  &quot;Security functions are defined as \&quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based\&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000233-DB-000124&#39;
+  tag &quot;gid&quot;: &#39;V-61775&#39;
+  tag &quot;rid&quot;: &#39;SV-76265r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67691r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001084&#39;]
+  tag &quot;nist&quot;: [&#39;SC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.&quot;
+  tag &quot;fix&quot;: &quot;Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.&quot;
+  describe &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39; do
+    skip &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61777"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61777"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61777</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61777
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must automatically terminate emergency accounts after 60 days for each type of account.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001682
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61777"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61777"
+            >
+              <!-- Result description -->
+              Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61777</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+    or temporary accounts, this is not a finding.
+
+    Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+    determine if emergency accounts are being automatically terminated by the system after 60 days. Check also 
+    for custom code (scheduled jobs, procedures, triggers, etc.) for achieving this. 
+
+    If emergency accounts are not being terminated after 60 days, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create a profile specifically for emergency or temporary accounts.  When creating the accounts, 
+    assign them to this profile.  Configure DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, 
+    or implement custom code, to terminate accounts with this profile after 60 days.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61777&#39; do
+  title &quot;The DBMS must automatically terminate emergency accounts after an
+  organization-defined time period for each type of account.&quot;
+  desc &quot;Emergency application accounts are typically created due to an
+  unforeseen operational event or could ostensibly be used in the event of a
+  vendor support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      In the event emergency application accounts are required, the application
+  must ensure accounts that are designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or application data compromised.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      If it is possible for any temporary emergency accounts to be created and
+  managed by Oracle, then the DBMS or application must provide or utilize a
+  mechanism to automatically terminate such accounts after an
+  organization-defined time period.
+
+      Emergency database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being misused.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000234-DB-000157&#39;
+  tag &quot;gid&quot;: &#39;V-61777&#39;
+  tag &quot;rid&quot;: &#39;SV-76267r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67693r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001682&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if emergency accounts are being automatically
+  terminated by the system after an organization-defined time period. Check also
+  for custom code (scheduled jobs, procedures, triggers, etc.) for achieving
+  this.
+
+  If emergency accounts are not being terminated after an organization-defined
+  time period, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create a profile specifically for emergency or temporary
+  accounts.  When creating the accounts, assign them to this profile.  Configure
+  DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, or
+  implement custom code, to terminate accounts with this profile after an
+  organization-defined time period.&quot;
+  describe &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39; do
+    skip &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61779"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61779"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61779</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (12)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001274
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61779
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (12)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001274
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61779"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61779"
+            >
+              <!-- Result description -->
+              Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61779</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-4 (12), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61779&#39; do
+  title &quot;The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.&quot;
+  desc &quot;Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000237-DB-000158&#39;
+  tag &quot;gid&quot;: &#39;V-61779&#39;
+  tag &quot;rid&quot;: &#39;SV-76269r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67695r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001274&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (12)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61781"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61781"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61781</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-4
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001090
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61781
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-4
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001090
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61781"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61781"
+            >
+              <!-- Result description -->
+              The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61781</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-4, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61781&#39; do
+  title &quot;The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.&quot;
+  desc &quot;The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000243-DB-000128&#39;
+  tag &quot;gid&quot;: &#39;V-61781&#39;
+  tag &quot;rid&quot;: &#39;SV-76271r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67697r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001090&#39;]
+  tag &quot;nist&quot;: [&#39;SC-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61783"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61783"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61783</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002385
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61783
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002385
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61783"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61783"
+            >
+              <!-- Result description -->
+              A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61783</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61783&#39; do
+  title &quot;The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.&quot;
+  desc &quot;A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000245-DB-000132&#39;
+  tag &quot;gid&quot;: &#39;V-61783&#39;
+  tag &quot;rid&quot;: &#39;SV-76273r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67699r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002385&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;RATE_LIMIT&#x3D;&#39; }
+    its(&#39;content&#39;) { should match &#x2F;CONNECTION_RATE_LISTENER&#x3D;\d*&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61785"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61785"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61785</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001310
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61785
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must check the validity of data inputs.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001310
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61785"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61785"
+            >
+              <!-- Result description -->
+              Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS checks the validity of data inputs</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS checks the validity of data inputs</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS checks the validity of data inputs</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS checks the validity of data inputs</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61785</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must check the validity of data inputs.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See &quot;Reporting Constraint Exceptions&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61785&#39; do
+  title &#39;The DBMS must check the validity of data inputs.&#39;
+  desc  &quot;Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000251-DB-000160&#39;
+  tag &quot;gid&quot;: &#39;V-61785&#39;
+  tag &quot;rid&quot;: &#39;SV-76275r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67701r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001310&#39;]
+  tag &quot;nist&quot;: [&#39;SI-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See \&quot;Reporting Constraint Exceptions\&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  tag &quot;fix&quot;: &quot;Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  describe &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39; do
+    skip &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61787"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61787"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61787</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-7 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002716
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002718
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61787
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must verify there have not been unauthorized changes to the
+  DBMS software and information.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-7 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002716
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002718
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61787"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61787"
+            >
+              <!-- Result description -->
+              Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61787</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-7 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61787&#39; do
+  title &quot;The system must verify there have not been unauthorized changes to the
+  DBMS software and information.&quot;
+  desc &quot;Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000262-DB-000159&#39;
+  tag &quot;gid&quot;: &#39;V-61787&#39;
+  tag &quot;rid&quot;: &#39;SV-76277r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67703r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002716&#39;, &#39;CCI-002718&#39;]
+  tag &quot;nist&quot;: [&#39;SI-7 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61789"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61789"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61789</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61789
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must identify potentially security-relevant error conditions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61789"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61789"
+            >
+              <!-- Result description -->
+              The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61789</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must identify potentially security-relevant error conditions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61789&#39; do
+  title &#39;The DBMS must identify potentially security-relevant error conditions.&#39;
+  desc  &quot;The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000265-DB-000161&#39;
+  tag &quot;gid&quot;: &#39;V-61789&#39;
+  tag &quot;rid&quot;: &#39;SV-76279r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67705r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.&quot;
+  describe &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61791"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61791"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61791</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001312
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61791
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001312
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61791"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61791"
+            >
+              <!-- Result description -->
+              Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61791</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-11 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61791&#39; do
+  title &quot;The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.&quot;
+  desc &quot;Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000266-DB-000162&#39;
+  tag &quot;gid&quot;: &#39;V-61791&#39;
+  tag &quot;rid&quot;: &#39;SV-76281r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67707r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001312&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.&quot;
+  describe &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61793"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61793"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61793</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001314
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61793
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict error messages so only authorized personnel may
+  view them.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-11 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001314
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61793"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61793"
+            >
+              <!-- Result description -->
+              If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61793</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict error messages so only authorized personnel may
+  view them.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-11 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61793&#39; do
+  title &quot;The DBMS must restrict error messages so only authorized personnel may
+  view them.&quot;
+  desc &quot;If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000267-DB-000163&#39;
+  tag &quot;gid&quot;: &#39;V-61793&#39;
+  tag &quot;rid&quot;: &#39;SV-76283r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67709r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001314&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.&quot;
+  describe &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39; do
+    skip &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61795"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61795"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61795</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (7)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001670
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61795
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SI-4 (7)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001670
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61795"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61795"
+            >
+              <!-- Result description -->
+              System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61795</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SI-4 (7), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61795&#39; do
+  title &quot;The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.&quot;
+  desc &quot;System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000287-DB-000126&#39;
+  tag &quot;gid&quot;: &#39;V-61795&#39;
+  tag &quot;rid&quot;: &#39;SV-76285r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67711r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001670&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (7)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61797"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61797"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61797</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61797
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  created.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001683
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61797"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61797"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61797</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  created.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61797&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  created.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000291-DB-000139&#39;
+  tag &quot;gid&quot;: &#39;V-61797&#39;
+  tag &quot;rid&quot;: &#39;SV-76287r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67713r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001683&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61799"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61799"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61799</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61799
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  modified.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001684
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61799"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61799"
+            >
+              <!-- Result description -->
+              Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61799</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  modified.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61799&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  modified.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000292-DB-000138&#39;
+  tag &quot;gid&quot;: &#39;V-61799&#39;
+  tag &quot;rid&quot;: &#39;SV-76289r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67715r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001684&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61801"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61801"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61801</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61801
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when account disabling
+  actions are taken.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001685
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61801"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61801"
+            >
+              <!-- Result description -->
+              When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61801</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61801&#39; do
+  title &quot;The DBMS must notify appropriate individuals when account disabling
+  actions are taken.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000293-DB-000130&#39;
+  tag &quot;gid&quot;: &#39;V-61801&#39;
+  tag &quot;rid&quot;: &#39;SV-76291r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67717r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001685&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61803"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61803"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61803</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61803
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must notify appropriate individuals when accounts are
+  terminated.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-2 (4)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001686
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61803"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61803"
+            >
+              <!-- Result description -->
+              When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61803</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must notify appropriate individuals when accounts are
+  terminated.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-2 (4), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61803&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  terminated.&quot;
+  desc &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000294-DB-000129&#39;
+  tag &quot;gid&quot;: &#39;V-61803&#39;
+  tag &quot;rid&quot;: &#39;SV-76293r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67719r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001686&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61809"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61809"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61809</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61809
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must implement separation of duties through assigned
+    information access authorizations.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-5 c
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002220
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61809"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61809"
+            >
+              <!-- Result description -->
+              Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61809</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must implement separation of duties through assigned
+    information access authorizations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-5 c, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61809&#39; do
+  title &quot;The DBMS must implement separation of duties through assigned
+    information access authorizations.&quot;
+  desc  &quot;Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000009&#39;
+  tag &quot;gid&quot;: &#39;V-61809&#39;
+  tag &quot;rid&quot;: &#39;SV-76299r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-003300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67725r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)&quot;
+  tag &quot;fix&quot;: &quot;Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.&quot;
+  describe &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39; do
+    skip &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61813"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61813"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61813</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001875
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61813
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide an audit log reduction capability.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001875
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61813"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61813"
+            >
+              <!-- Result description -->
+              Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides an audit log reduction capability</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides an audit log reduction capability</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides an audit log reduction capability</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides an audit log reduction capability</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61813</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide an audit log reduction capability.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Deploy software capable of performing audit data reduction.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61813&#39; do
+  title &#39;The system must provide an audit log reduction capability.&#39;
+  desc  &quot;Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000113-DB-000053&#39;
+  tag &quot;gid&quot;: &#39;V-61813&#39;
+  tag &quot;rid&quot;: &#39;SV-76303r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67729r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001875&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;Deploy software capable of performing audit data reduction.&#39;
+  describe &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39; do
+    skip &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61815"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61815"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61815</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001094
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61815
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001094
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61815"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61815"
+            >
+              <!-- Result description -->
+              When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61815</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to restrict functionality that could be used to initiate DoS attacks.
+
+    Securing the Network Connection:
+    Protecting the network and its traffic from inappropriate access or modification is the essence of network 
+    security. You should consider all paths the data travels, and assess the threats on each path and node. Then, 
+    take steps to lessen or eliminate those threats and the consequences of a security breach. In addition, 
+    monitor and audit to detect either increased threat levels or penetration attempts.
+
+    The following practices improve network security:
+
+    1. Disable the Default Listener.
+    All listeners have a unique name instead of the name LISTENER and have startup protection.
+
+    LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+    
+    This configuration prevents the default listener from starting.
+
+    2. Prevent online administration by requiring the administrator to have the write privilege on the 
+    listener.ora file on the server.
+
+    a. Add or alter this line in the listener.ora file:
+
+    ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+    b. Use RELOAD to reload the configuration.
+
+    3. Set Protection against crafted network packets on database level.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should take when bad packets are 
+    received from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the default)
+
+    NONE: The database server ignores the bad packets and does not generate any trace files or log messages. 
+    (Not recommended)
+
+    TRACE: A detailed trace file is generated when bad packets are received, which can be used to debug any 
+    problems in client&#x2F;server communication.
+
+    LOG: A minimal log message is printed in the alert logfile and in the server trace file. A minimal amount 
+    of disk space is used.
+
+    ALERT: An alert message is sent to a DBA or monitoring console.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad 
+    packets from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) | (DROP,integer) } (DROP,3 is the default)
+
+    CONTINUE: The server process continues execution. The database server may be subject to a Denial of Service (DoS) 
+    if bad packets continue to be sent by a malicious client. (Not recommended)
+
+    (DELAY, integer) :The client experiences a delay of integer seconds before the server process accepts the 
+    next request from the same client connection. Malicious clients are prevented from excessive consumption 
+    of server resources while legitimate clients experience degradation in performance but can continue to function.
+
+    (DROP, integer) : The server forcefully terminates the client connection after integer bad packets. The server 
+    protects itself at the expense of the client (for example, a client transaction may be lost). The client may 
+    reconnect and attempt the same operation.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can be made by a client on a 
+    connection to the server process. After the specified number of failure attempts, the connection will be 
+    automatically dropped by the server process.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to unlimited. (A value of 1 to 3 is 
+    recommended)
+
+    For more information about the parameters in listener.ora, 
+    see https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+    
+    4. When a host computer has multiple IP addresses associated with multiple network interface controller (NIC) 
+    cards, configure the listener to the specific IP address.
+
+    You can restrict the listener to listen on a specific IP address. Oracle recommends that you specify the specific 
+    IP addresses on these types of computers, rather than allowing the listener to listen on all IP addresses. 
+    Restricting the listener to specific IP addresses helps to prevent an intruder from stealing a TCP end point from 
+    under the listener process.
+
+    5. Restrict the privileges of the listener, so that it cannot read or write files in the database or the Oracle 
+    server address space.
+
+    The default configuration for external procedures does not require a network listener to work with Oracle Database 
+    and the extproc agent. The extproc agent is spawned directly by Oracle Database and eliminates the risks that the 
+    extproc agent might be spawned by Oracle Listener unexpectedly. This default configuration is recommended for maximum 
+    security. For more information about securing external procedures see
+    https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+    However, the extproc agent can be configured to be spawned by a listener. In that case (not recommended) the listener 
+    should have restricted privileges.
+
+    6. Use a firewall, IAW CMS network policy and guidance.
+    
+    Appropriately placed and configured firewalls can prevent outside access to your databases.
+
+    7. Prevent unauthorized administration of the Oracle listener.
+
+    Local administration of the listener is secure by default through the local operating system. Therefore configuring 
+    a password is neither required nor recommended for secure local administration. However, a password can be configured 
+    for the listener to provide security for administrative operations, such as starting or stopping the listener, 
+    viewing a list of supported services, or saving changes to the Listener Control configuration.
+
+    By default, Oracle Net Listener permits only local administration for security reasons. As a policy, the listener 
+    can be administered only by the user who started it. This is enforced through local operating system authentication. 
+    For example, if user1 starts the listener, then only user1 can administer it. Any other user trying to administer 
+    the listener gets an error. The super user is the only exception.
+
+    Oracle recommends that you perform listener administration in the default mode (secure by means of local operating 
+    system authentication), and access the system remotely using a remote logon. Oracle Enterprise Manager Cloud 
+    Control can also be used for remote administration.
+
+    8. Encrypt network traffic.  (Mandatory for sensitive data and optional for non-sensitive, as covered in other 
+    STIG requirements.)
+
+    Where applicable, use Oracle network data encryption to encrypt network traffic among clients, databases, 
+    and application servers.
+
+    9. Set Connect Rate to organization defined limit. (Also required by O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+    The connection rate limiter feature in Oracle Net Listener enables a database administrator to limit the number of 
+    new connections handled by the listener. When this feature is enabled, Oracle Net Listener imposes a user-specified 
+    maximum limit on the number of new connections handled by the listener every second.
+
+    CONNECTION_RATE_LISTENER&#x3D;10
+    LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))  
+    )
+
+    10. Setup Valid Node Checking.
+    (See also O121-BP-025600.)
+
+    Valid node checking is a security feature that protects DBMS instances from malevolent or errant Oracle Net 
+    connections over TCP&#x2F;IP, without the need for a firewall or IP address filtering at the operating system-level. 
+    The feature is controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes, and tcp.excluded_nodes.
+
+    Modify the sqlnet.ora file manually
+    TCP.VALIDNODE_CHECKING&#x3D;yes
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the supplemental 
+    file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+    If this parameter is set to yes, then incoming connections are allowed only if they originate from a node that conforms 
+    to the list specified by TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter is 
+    set to yes (no is the default).
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter 
+    is set to yes.
+
+    Modify the listener.ora file manually
+
+    TCP.EXCLUDED_NODES Syntax:
+    TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25, 172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+    TCP.INVITED_NODES Syntax:
+    TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*, 2001:DB8:200C:433B&#x2F;32)
+
+    Usage Notes:
+
+    Use TCP.INVITED_NODES to specify which clients are allowed access to the database. This list takes precedence 
+    over the TCP.EXCLUDED_NODES parameter if both lists are present. These parameters can use wildcards for IPv4 
+    addresses and CIDR notation for IPv4 and IPv6 addresses.
+
+    11. Apply Listener Security Patches.
+    (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+    Critical Patch Updates are cumulative. Therefore, the latest patch will contain all previous security patches 
+    for the Listener.
+
+    12. Ensure that listener logging is turned on.
+
+    Listener logging is on by default. If logging is not on, configure logging for all listeners in order to capture 
+    Listener commands and brute force password attacks.
+
+    13. Monitor the listener logfile.
+
+    The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors, which may signify attacks or 
+    inappropriate activity. Monitor the logfile and generate an alert whenever these errors are encountered.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61815&#39; do
+  title &quot;The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.&quot;
+  desc &quot;When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+    &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000246-DB-000133&#39;
+  tag &quot;gid&quot;: &#39;V-61815&#39;
+  tag &quot;rid&quot;: &#39;SV-76305r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67731r10_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001094&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to restrict functionality that could be
+  used to initiate DoS attacks.
+
+  Securing the Network Connection:
+  Protecting the network and its traffic from inappropriate access or
+  modification is the essence of network security. You should consider all paths
+  the data travels, and assess the threats on each path and node. Then, take
+  steps to lessen or eliminate those threats and the consequences of a security
+  breach. In addition, monitor and audit to detect either increased threat levels
+  or penetration attempts.
+
+  The following practices improve network security:
+
+  1. Disable the Default Listener.
+  All listeners have a unique name instead of the name LISTENER and have startup
+  protection.
+
+  LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+
+  This configuration prevents the default listener from starting.
+
+  2. Prevent online administration by requiring the administrator to have the
+  write privilege on the listener.ora file on the server.
+  a. Add or alter this line in the listener.ora file:
+
+  ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+  b. Use RELOAD to reload the configuration.
+
+  3. Set Protection against crafted network packets on database level.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should
+  take when bad packets are received from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the
+  default)
+
+  NONE: The database server ignores the bad packets and does not generate any
+  trace files or log messages. (Not recommended)
+
+  TRACE: A detailed trace file is generated when bad packets are received, which
+  can be used to debug any problems in client&#x2F;server communication.
+
+  LOG: A minimal log message is printed in the alert logfile and in the server
+  trace file. A minimal amount of disk space is used.
+
+  ALERT: An alert message is sent to a DBA or monitoring console.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server
+  process when receiving bad packets from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) |
+  (DROP,integer) } (DROP,3 is the default)
+
+  CONTINUE: The server process continues execution. The database server may be
+  subject to a Denial of Service (DoS) if bad packets continue to be sent by a
+  malicious client. (Not recommended)
+
+  (DELAY, integer) :The client experiences a delay of integer seconds before the
+  server process accepts the next request from the same client connection.
+  Malicious clients are prevented from excessive consumption of server resources
+  while legitimate clients experience degradation in performance but can continue
+  to function.
+
+  (DROP, integer) : The server forcefully terminates the client connection after
+  integer bad packets. The server protects itself at the expense of the client
+  (for example, a client transaction may be lost). The client may reconnect and
+  attempt the same operation.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts
+  that can be made by a client on a connection to the server process. After the
+  specified number of failure attempts, the connection will be automatically
+  dropped by the server process.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to
+  unlimited. (A value of 1 to 3 is recommended)
+
+  For more information about the parameters in listener.ora, see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+
+  4. When a host computer has multiple IP addresses associated with multiple
+  network interface controller (NIC) cards, configure the listener to the
+  specific IP address.
+
+  You can restrict the listener to listen on a specific IP address. Oracle
+  recommends that you specify the specific IP addresses on these types of
+  computers, rather than allowing the listener to listen on all IP addresses.
+  Restricting the listener to specific IP addresses helps to prevent an intruder
+  from stealing a TCP end point from under the listener process.
+
+  5. Restrict the privileges of the listener, so that it cannot read or write
+  files in the database or the Oracle server address space.
+
+  The default configuration for external procedures does not require a network
+  listener to work with Oracle Database and the extproc agent. The extproc agent
+  is spawned directly by Oracle Database and eliminates the risks that the
+  extproc agent might be spawned by Oracle Listener unexpectedly. This default
+  configuration is recommended for maximum security. For more information about
+  securing external procedures see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+  However, the extproc agent can be configured to be spawned by a listener. In
+  that case (not recommended) the listener should have restricted privileges.
+
+  6. Use a firewall, IAW DoD network policy and guidance.
+
+  Appropriately placed and configured firewalls can prevent outside access to
+  your databases.
+
+  7. Prevent unauthorized administration of the Oracle listener.
+
+  Local administration of the listener is secure by default through the local
+  operating system. Therefore configuring a password is neither required nor
+  recommended for secure local administration. However, a password can be
+  configured for the listener to provide security for administrative operations,
+  such as starting or stopping the listener, viewing a list of supported
+  services, or saving changes to the Listener Control configuration.
+
+  By default, Oracle Net Listener permits only local administration for security
+  reasons. As a policy, the listener can be administered only by the user who
+  started it. This is enforced through local operating system authentication. For
+  example, if user1 starts the listener, then only user1 can administer it. Any
+  other user trying to administer the listener gets an error. The super user is
+  the only exception.
+
+  Oracle recommends that you perform listener administration in the default mode
+  (secure by means of local operating system authentication), and access the
+  system remotely using a remote logon. Oracle Enterprise Manager Cloud Control
+  can also be used for remote administration.
+
+  8. Encrypt network traffic.  (Mandatory for sensitive data and optional for
+  non-sensitive, as covered in other STIG requirements.)
+
+  Where applicable, use Oracle network data encryption to encrypt network traffic
+  among clients, databases, and application servers.
+
+  9. Set Connect Rate to organization defined limit. (Also required by
+  O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+  The connection rate limiter feature in Oracle Net Listener enables a database
+  administrator to limit the number of new connections handled by the listener.
+  When this feature is enabled, Oracle Net Listener imposes a user-specified
+  maximum limit on the number of new connections handled by the listener every
+  second.
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+  LISTENER&#x3D;
+  (ADDRESS_LIST&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+  )
+
+  10. Setup Valid Node Checking.
+  (See also O121-BP-025600.)
+
+  Valid node checking is a security feature that protects DBMS instances from
+  malevolent or errant Oracle Net connections over TCP&#x2F;IP, without the need for a
+  firewall or IP address filtering at the operating system-level. The feature is
+  controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes,
+  and tcp.excluded_nodes.
+
+  Modify the sqlnet.ora file manually
+  TCP.VALIDNODE_CHECKING&#x3D;yes
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  If this parameter is set to yes, then incoming connections are allowed only if
+  they originate from a node that conforms to the list specified by
+  TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes (no is the default).
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes.
+
+  Modify the listener.ora file manually
+
+  TCP.EXCLUDED_NODES Syntax:
+  TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25,
+  172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+  TCP.INVITED_NODES Syntax:
+  TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*,
+  2001:DB8:200C:433B&#x2F;32)
+
+  Usage Notes:
+
+  Use TCP.INVITED_NODES to specify which clients are allowed access to the
+  database. This list takes precedence over the TCP.EXCLUDED_NODES parameter if
+  both lists are present. These parameters can use wildcards for IPv4 addresses
+  and CIDR notation for IPv4 and IPv6 addresses.
+
+  11. Apply Listener Security Patches.
+  (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+  Critical Patch Updates are cumulative. Therefore, the latest patch will contain
+  all previous security patches for the Listener.
+
+  12. Ensure that listener logging is turned on.
+
+  Listener logging is on by default. If logging is not on, configure logging for
+  all listeners in order to capture Listener commands and brute force password
+  attacks.
+
+  13. Monitor the listener logfile.
+
+  The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors,
+  which may signify attacks or inappropriate activity. Monitor the logfile and
+  generate an alert whenever these errors are encountered.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))&#39; }
+    its(&#39;content&#39;) {
+      should include &#39;LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))&#39;
+    }
+    its(&#39;content&#39;) { should include &#39;CONNECTION_RATE_LISTENER&#x3D;10&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_MAX_FAILED_LOGIN_ATTEMPTS&#x3D;3&#39; }
+    its(&#39;content&#39;) { should include &#39;ADMIN_RESTRICTIONS_LISTENER&#x3D;ON&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_PROTOCOL_ERROR_TRACE_ACTION&#x3D;TRACE&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.INVITED_NODES&#x3D;&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.EXCLUDED_NODES&#x3D;&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;TCP.VALIDNODE_CHECKING&#x3D;yes&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61817"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61817"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61817</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61817
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-5 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001095
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61817"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61817"
+            >
+              <!-- Result description -->
+              In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61817</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-5 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61817&#39; do
+  title &quot;The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.&quot;
+  desc &quot;In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000247-DB-000134&#39;
+  tag &quot;gid&quot;: &#39;V-61817&#39;
+  tag &quot;rid&quot;: &#39;SV-76307r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67733r8_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001095&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select DISTINCT b.limit from dba_users a, dba_profiles b where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user profile limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61819"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61819"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61819</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-6
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002394
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61819
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-6
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-002394
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61819"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61819"
+            >
+              <!-- Result description -->
+              Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61819</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-6, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61819&#39; do
+  title &quot;The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.&quot;
+  desc &quot;Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000248-DB-000135&#39;
+  tag &quot;gid&quot;: &#39;V-61819&#39;
+  tag &quot;rid&quot;: &#39;SV-76309r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67735r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002394&#39;]
+  tag &quot;nist&quot;: [&#39;SC-6&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select
+    DISTINCT b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61843"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61843"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61843</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61843
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61843"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61843"
+            >
+              <!-- Result description -->
+              To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61843</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61843&#39; do
+  title &quot;Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.&quot;
+  desc &quot;To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61843&#39;
+  tag &quot;rid&quot;: &#39;SV-76333r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67759r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.&quot;
+  describe &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39; do
+    skip &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61845"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61845"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61845</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61845
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61845"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61845"
+            >
+              <!-- Result description -->
+              The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61845</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\oracle\product\12.1.0\db_1\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61845&#39; do
+  title &quot;When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.&quot;
+  desc &quot;The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61845&#39;
+  tag &quot;rid&quot;: &#39;SV-76335r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015602&#39;
+  tag &quot;fix_id&quot;: &#39;F-67761r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.&quot;
+  describe &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39; do
+    skip &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61849"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61849"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61849</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61849
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  DBMS default accounts must be protected from misuse.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61849"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61849"
+            >
+              <!-- Result description -->
+              The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS default accounts are protected from misuse</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS default accounts are protected from misuse</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS default accounts are protected from misuse</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS default accounts are protected from misuse</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61849</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >DBMS default accounts must be protected from misuse.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61849&#39; do
+  title &#39;DBMS default accounts must be protected from misuse.&#39;
+  desc  &quot;The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000023&#39;
+  tag &quot;gid&quot;: &#39;V-61849&#39;
+  tag &quot;rid&quot;: &#39;SV-76339r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-004701&#39;
+  tag &quot;fix_id&quot;: &#39;F-67765r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.&quot;
+  describe &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39; do
+    skip &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61853"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61853"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61853</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61853
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61853"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61853"
+            >
+              <!-- Result description -->
+              It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61853</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61853&#39; do
+  title &quot;Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.&quot;
+  desc &quot;It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, \&quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.\&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000109-DB-000049&#39;
+  tag &quot;gid&quot;: &#39;V-61853&#39;
+  tag &quot;rid&quot;: &#39;SV-76343r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-008601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67769r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1&quot;
+  describe &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39; do
+    skip &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61865"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61865"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61865</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61865
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Use of the DBMS software installation account must be restricted.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61865"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61865"
+            >
+              <!-- Result description -->
+              This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the use of the DBMS software installation account is restricted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the use of the DBMS software installation account is restricted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the use of the DBMS software installation account is restricted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the use of the DBMS software installation account is restricted</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61865</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use of the DBMS software installation account must be restricted.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61865&#39; do
+  title &#39;Use of the DBMS software installation account must be restricted.&#39;
+  desc  &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000022&#39;
+  tag &quot;gid&quot;: &#39;V-61865&#39;
+  tag &quot;rid&quot;: &#39;SV-76355r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-004600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67781r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.&quot;
+  describe &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39; do
+    skip &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61867"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61867"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61867</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61867
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61867"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61867"
+            >
+              <!-- Result description -->
+              Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61867</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61867&#39; do
+  title &quot;Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-61867&#39;
+  tag &quot;rid&quot;: &#39;SV-76357r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67783r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61869"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61869"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61869</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61869
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61869"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61869"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: RDSADMIN is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: ADMIN1 is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYSTEM is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >oracle DBA&#39;s users: SYS is expected to be in</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61869</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61869&#39; do
+  title &quot;The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000207&#39;
+  tag &quot;gid&quot;: &#39;V-61869&#39;
+  tag &quot;rid&quot;: &#39;SV-76359r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-011200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67785r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot; do
+      skip &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA&#39;s users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;oracle_dbas&#39;) }
+      end
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61871"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61871"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61871</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (2)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001844
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61871
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-3 (2)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001844
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61871"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61871"
+            >
+              <!-- Result description -->
+              Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61871</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-3 (2), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61871&#39; do
+  title &quot;The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000102-DB-000045&#39;
+  tag &quot;gid&quot;: &#39;V-61871&#39;
+  tag &quot;rid&quot;: &#39;SV-76361r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-008100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67787r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001844&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61873"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61873"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61873</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>High</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61873
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 87, 34)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>High</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS software installation account must be restricted to
+  authorized users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61873"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61873"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61873</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software installation account must be restricted to
+  authorized users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >high</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.7</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61873&#39; do
+  title &quot;The DBMS software installation account must be restricted to
+  authorized users.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000198&#39;
+  tag &quot;gid&quot;: &#39;V-61873&#39;
+  tag &quot;rid&quot;: &#39;SV-76363r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67789r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39; do
+
+    skip &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61875"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61875"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61875</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61875
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61875"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61875"
+            >
+              <!-- Result description -->
+              When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61875</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61875&#39; do
+  title &quot;Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000199&#39;
+  tag &quot;gid&quot;: &#39;V-61875&#39;
+  tag &quot;rid&quot;: &#39;SV-76365r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67791r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.&quot;
+  describe &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39; do
+    skip &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61877"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61877"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61877</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61877
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS software libraries must be periodically backed up.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CP-9 (b)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000537
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61877"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61877"
+            >
+              <!-- Result description -->
+              Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software libraries are periodically backed up</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software libraries are periodically backed up</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software libraries are periodically backed up</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS software libraries are periodically backed up</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61877</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS software libraries must be periodically backed up.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CP-9 (b), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure backups to include all DBMS application and third-party
+  database application software libraries.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61877&#39; do
+  title &#39;The DBMS software libraries must be periodically backed up.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000100&#39;
+  tag &quot;gid&quot;: &#39;V-61877&#39;
+  tag &quot;rid&quot;: &#39;SV-76367r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67793r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure backups to include all DBMS application and third-party
+  database application software libraries.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39; do
+    skip &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61879"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61879"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61879</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61879
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000764
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61879"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61879"
+            >
+              <!-- Result description -->
+              To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61879</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-2, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61879&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).&quot;
+  desc &quot;To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000148-DB-000103&#39;
+  tag &quot;gid&quot;: &#39;V-61879&#39;
+  tag &quot;rid&quot;: &#39;SV-76369r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67795r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000764&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61881"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61881"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61881</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61881
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      IA-8
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000804
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61881"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61881"
+            >
+              <!-- Result description -->
+              Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61881</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >IA-8, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61881&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).&quot;
+  desc  &quot;Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000180-DB-000115&#39;
+  tag &quot;gid&quot;: &#39;V-61881&#39;
+  tag &quot;rid&quot;: &#39;SV-76371r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-015800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67797r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000804&#39;]
+  tag &quot;nist&quot;: [&#39;IA-8&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+    users (or processes acting on behalf of non-organizational users).&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61883"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61883"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61883</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61883
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must separate user functionality (including user interface
+  services) from database management functionality.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001082
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61883"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61883"
+            >
+              <!-- Result description -->
+              Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61883</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-2, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61883&#39; do
+  title &quot;The DBMS must separate user functionality (including user interface
+  services) from database management functionality.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000211-DB-000122&#39;
+  tag &quot;gid&quot;: &#39;V-61883&#39;
+  tag &quot;rid&quot;: &#39;SV-76373r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67799r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001082&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39; do
+    skip &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61885"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61885"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61885</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001083
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61885
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      SC-2 (1)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001083
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61885"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61885"
+            >
+              <!-- Result description -->
+              Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61885</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >SC-2 (1), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61885&#39; do
+  title &quot;The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000212-DB-000123&#39;
+  tag &quot;gid&quot;: &#39;V-61885&#39;
+  tag &quot;rid&quot;: &#39;SV-76375r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67801r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001083&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61887"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61887"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61887</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61887
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000166
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61887"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61887"
+            >
+              <!-- Result description -->
+              Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >passed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >Standard auditing is in use for audit purposes is expected to equal true</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61887</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61887&#39; do
+  title &quot;The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.&quot;
+  desc &quot;Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000080-DB-000063&#39;
+  tag &quot;gid&quot;: &#39;V-61887&#39;
+  tag &quot;rid&quot;: &#39;SV-76377r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P3-006200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67803r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000166&#39;]
+  tag &quot;nist&quot;: [&#39;AU-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61963"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61963"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61963</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61963
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61963"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61963"
+            >
+              <!-- Result description -->
+              Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61963</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61963&#39; do
+  title &quot;The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.&quot;
+  desc &quot;Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61963&#39;
+  tag &quot;rid&quot;: &#39;SV-76453r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67883r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.&quot;
+  describe &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39; do
+    skip &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61965"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61965"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61965</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M17,13H7V11H17M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Applicable</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>None</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61965
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(3, 169, 244)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>None</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-6 b
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000366
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61965"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61965"
+            >
+              <!-- Result description -->
+              The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61965</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >none</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-6 b, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\WINDOWS\system32\config\EventLogs\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61965&#39; do
+  title &quot;The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.&quot;
+  desc &quot;The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61965&#39;
+  tag &quot;rid&quot;: &#39;SV-76455r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025101&#39;
+  tag &quot;fix_id&quot;: &#39;F-67885r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\\WINDOWS\\system32\\config\\EventLogs\\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database audit trail&#39; do
+    subject { audit_trail }
+    it { should_not cmp &#39;NONE&#39; }
+  end
+
+  get_audit_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  audit_file_dest &#x3D; get_audit_file_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{audit_file_dest}&#x2F; |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61967"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61967"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61967</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(243, 67, 53)" d="M12,2C17.53,2 22,6.47 22,12C22,17.53 17.53,22 12,22C6.47,22 2,17.53 2,12C2,6.47 6.47,2 12,2M15.59,7L12,10.59L8.41,7L7,8.41L10.59,12L7,15.59L8.41,17L12,13.41L15.59,17L17,15.59L13.41,12L17,8.41L15.59,7Z"/></svg></span>
+                    <span>Failed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61967
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AC-10
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-000054
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61967"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61967"
+            >
+              <!-- Result description -->
+              Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >failed</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61967</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AC-10, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Limit concurrent connections for each system account to a number less than or equal to the 
+    organization-defined number of sessions using the following SQL. Create profiles that conform to the 
+    requirements. Assign users to the appropriate profile.
+
+    The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy the STIG 
+    requirements pertaining to the profile parameters. Oracle recommends that this profile be customized with 
+    any site-specific requirements and assigned to all users where applicable.  Note: It remains necessary to 
+    create a customized replacement for the password validation function, ORA12C_STRONG_VERIFY_FUNCTION, if 
+    relying on this technique to verify password complexity.
+
+    The defaults for ORA_STIG_PROFILE are set as follows:
+    Resource Name                   Limit
+    -------------                   ------
+    COMPOSITE_LIMIT                 DEFAULT
+    SESSIONS_PER_USER               DEFAULT
+    CPU_PER_SESSION                 DEFAULT
+    CPU_PER_CALL                    DEFAULT
+    LOGICAL_READS_PER_SESSION       DEFAULT
+    LOGICAL_READS_PER_CALL          DEFAULT
+    IDLE_TIME                          15
+    CONNECT_TIME                    DEFAULT
+    PRIVATE_SGA                     DEFAULT
+    FAILED_LOGIN_ATTEMPTS               3 
+    PASSWORD_LIFE_TIME                 60
+    PASSWORD_REUSE_TIME               365
+    PASSWORD_REUSE_MAX                 10
+    PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+    PASSWORD_LOCK_TIME              UNLIMITED
+    PASSWORD_GRACE_TIME                 5
+
+    Change the value of SESSIONS_PER_USER (along with the other parameters, where relevant) from UNLIMITED to 
+    CMS-compliant, site-specific requirements and then assign users to the profile.
+    ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+    To assign the user to the profile do the following:
+    ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61967&#39; do
+  title &quot;The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.&quot;
+  desc  &quot;Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000001-DB-000031&#39;
+  tag &quot;gid&quot;: &#39;V-61967&#39;
+  tag &quot;rid&quot;: &#39;SV-76457r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-000100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67887r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000054&#39;]
+  tag &quot;nist&quot;: [&#39;AC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Limit concurrent connections for each system account to a number
+  less than or equal to the organization-defined number of sessions using the
+  following SQL. Create profiles that conform to the requirements. Assign users
+  to the appropriate profile.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  The defaults for ORA_STIG_PROFILE are set as follows:
+  Resource Name                   Limit
+  -------------                   ------
+  COMPOSITE_LIMIT                 DEFAULT
+  SESSIONS_PER_USER               DEFAULT
+  CPU_PER_SESSION                 DEFAULT
+  CPU_PER_CALL                    DEFAULT
+  LOGICAL_READS_PER_SESSION       DEFAULT
+  LOGICAL_READS_PER_CALL          DEFAULT
+  IDLE_TIME                          15
+  CONNECT_TIME                    DEFAULT
+  PRIVATE_SGA                     DEFAULT
+  FAILED_LOGIN_ATTEMPTS               3
+  PASSWORD_LIFE_TIME                 60
+  PASSWORD_REUSE_TIME               365
+  PASSWORD_REUSE_MAX                 10
+  PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME              UNLIMITED
+  PASSWORD_GRACE_TIME                 5
+
+  Change the value of SESSIONS_PER_USER (along with the other parameters, where
+  relevant) from UNLIMITED to DoD-compliant, site-specific requirements and then
+  assign users to the profile.
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+  To assign the user to the profile do the following:
+  ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  concurrent_sessions &#x3D; sql.query(&quot;SELECT limit FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database number of concurrent sessions allowed&#39; do
+    subject { concurrent_sessions }
+    it { should_not include &#39;UNLIMITED&#39; }
+    it { should_not include &#39;DEFAULT&#39; }
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-61969"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-61969"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-61969</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Low</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001878
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-61969
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 235, 59)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Low</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  The system must provide a report generation capability for audit
+  reduction data.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      AU-7 a
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001878
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-61969"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-61969"
+            >
+              <!-- Result description -->
+              In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-61969</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >The system must provide a report generation capability for audit
+  reduction data.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >low</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.3</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >AU-7 a, Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61969&#39; do
+  title &quot;The system must provide a report generation capability for audit
+  reduction data.&quot;
+  desc  &quot;In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000114-DB-000054&#39;
+  tag &quot;gid&quot;: &#39;V-61969&#39;
+  tag &quot;rid&quot;: &#39;SV-76459r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67889r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001878&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.&quot;
+  describe &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39; do
+    skip &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+          <div class="mx-4 rounded-t-xl border border-gray-300">
+            <div class="mb-0">
+              <!-- Button def -->
+              <button
+                class="bg-blue group flex w-full items-center rounded-t-xl px-5 py-4 text-left text-base text-black transition [overflow-anchor:none] hover:z-[2] focus:z-[3] focus:outline-none [&:not([data-te-collapse-collapsed])]:bg-blue-200 [&:not([data-te-collapse-collapsed])]:text-blue-900 [&:not([data-te-collapse-collapsed])]:[box-shadow:inset_0_-1px_0_rgba(229,231,235)]"
+                type="button"
+                data-te-collapse-init
+                data-te-target="#result-accordion-body-V-68863"
+                aria-expanded="true"
+                aria-controls="result-accordion-body-V-68863"
+              >
+                <!-- Result status indicator wrapper -->
+                <!-- All headers eventually collapse under status column -->
+                <div class="grid grid-cols-1 gap-y-2">
+                  <!-- Result ID -->
+                  <div class="w-36 sm:hidden">
+                    <span>V-68863</span>
+                  </div>
+                  <!-- Result status indicator -->
+                  <div
+                    class="grid w-40 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(254, 153, 0)" d="M13,13H11V7H13M13,17H11V15H13M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Not Reviewed</span>
+                  </div>
+                  <!-- Result severity indicator -->
+                  <div
+                    class="grid w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:hidden"
+                  >
+                    <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                    <span>Medium</span>
+                  </div>
+                  <!-- Control tags -->
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24 lg:hidden">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+                <!-- Result ID -->
+                <span
+                  class="hidden w-32 grid-cols-1 gap-y-2 break-all px-6 sm:grid lg:w-36"
+                >
+                  V-68863
+                </span>
+                <!-- Result severity indicator -->
+                <div
+                  class="hidden w-28 grid-flow-col items-center rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black lg:grid"
+                >
+                  <span><svg style="width:24px; height:24px" viewBox="0 0 24 24" role="img" aria-hidden="true"><path fill="rgb(255, 152, 0)" d="M12,2A10,10 0 0,0 2,12A10,10 0 0,0 12,22A10,10 0 0,0 22,12A10,10 0 0,0 12,2Z"/></svg></span>
+                  <span>Medium</span>
+                </div>
+                <!-- Result title -->
+                <span class="w-1/2 break-all px-6 sm:break-words">
+                  Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.
+                </span>
+                <!-- Control tags -->
+                <div
+                  class="hidden grid-cols-1 gap-x-6 gap-y-2 lg:grid xl:grid-cols-2"
+                >
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CM-5 (6)
+                    </span>
+                  </div>
+                  <div class="w-24">
+                    <span
+                      class="rounded border border-gray-300 bg-gray-100 px-2 py-1 text-black"
+                    >
+                      CCI-001499
+                    </span>
+                  </div>
+                </div>
+
+                <span
+                  class="-mr-1 ml-auto h-5 w-5 shrink-0 rotate-[-180deg] fill-[#336dec] transition-transform duration-200 ease-in-out group-[[data-te-collapse-collapsed]]:mr-0 group-[[data-te-collapse-collapsed]]:rotate-0 group-[[data-te-collapse-collapsed]]:fill-[#212529] motion-reduce:transition-none"
+                >
+                  <svg
+                    xmlns="http://www.w3.org/2000/svg"
+                    fill="none"
+                    viewBox="0 0 24 24"
+                    stroke-width="1.5"
+                    stroke="currentColor"
+                    class="h-6 w-6"
+                    role="img"
+                    aria-hidden="true"
+                  >
+                    <path
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                      d="M19.5 8.25l-7.5 7.5-7.5-7.5"
+                    />
+                  </svg>
+                </span>
+              </button>
+            </div>
+
+            <!-- Accordion body def -->
+            <div
+              class="multi-collapse-inner px-5 py-4"
+              id="result-accordion-body-V-68863"
+              data-te-collapse-item
+              data-te-collapse-show
+              aria-labelledby="result-accordion-header-V-68863"
+            >
+              <!-- Result description -->
+              Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+              <hr class="my-3" />
+
+              <!-- Result tables -->
+              <div>
+                <!-- Tests -->
+                <h5 class="text-lg font-bold">Test Results</h5>
+                <hr class="h-1 w-28 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all available test results -->
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Status</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >skipped</span
+                    >
+                  </div>
+                  <div class="grid grid-cols-1 sm:grid-cols-[10%_90%]">
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Test</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      >A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</span
+                    >
+                  </div>
+                  <div
+                    class="bg-gray-100 grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Result</span
+                    >
+                    <span class="whitespace-pre-line break-all lg:break-normal"
+                      ></span
+                    >
+                  </div>
+                </div>
+
+                <!-- Details -->
+                <h5 class="text-lg font-bold mt-3">Result Details</h5>
+                <hr class="h-1 w-32 bg-gray-300 mb-2" />
+                <!-- Sensitive to whitespace, requires awkward tag placement -->
+                <div class="min-w-full border border-gray-300">
+                  <!-- Generate all result details -->
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Control</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >V-68863</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Title</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Desc</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Severity</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >medium</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Impact</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >0.5</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Nist Controls</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >CM-5 (6), Rev_4</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Check Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.</span
+                    >
+                  </div>
+                  <div
+                    class="odd:bg-gray-100 even:bg-white grid grid-cols-1 sm:grid-cols-[10%_90%]"
+                  >
+                    <span
+                      class="border-r border-gray-300 sm:no-underline underline font-bold sm:font-normal"
+                      >Fix Text</span
+                    >
+                    <span
+                      class="whitespace-pre-line break-all sm:break-words lg:break-normal"
+                      >Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.</span
+                    >
+                  </div>
+                </div>
+              </div>
+
+              <!-- Result code block -->
+              <!-- Sensitive to whitespace, requires awkward tag placement -->
+              <hr class="my-3" />
+              <code class="whitespace-pre-wrap break-words text-sm text-red-700"
+                >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-68863&#39; do
+  title &quot;Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-68863&#39;
+  tag &quot;rid&quot;: &#39;SV-83467r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010710&#39;
+  tag &quot;fix_id&quot;: &#39;F-75045r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.&quot;
+  describe &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39; do
+    skip &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39;
+  end
+end</code
+              >
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Result set print report -->
+      <div class="hidden print:block">
+        <!-- File name -->
+        <div class="rounded-t-xl border border-black px-3 py-2">
+          triple_overlay_profile_example.json
+        </div>
+        <!-- Generate a result report for every result -->
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61409</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is retained for at least one year</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61409</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement an audit retention policy and 
+    procedures.
+
+    It is recommended that the most recent ninety days of audit logs remain 
+    available online.
+
+    After thirty ninety days, the audit logs may be maintained off-line.
+
+    Online maintenance provides for a more timely capability and inclination to         
+    investigate suspicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61409&#39; do
+    title &#39;Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.&#39;
+    desc &#39;Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.&#39;
+    desc &#39;check&#39;, &#39;Develop, document and implement an audit retention policy and 
+    procedures.
+
+    It is recommended that the most recent ninety days of audit logs remain 
+    available online.
+
+    After thirty ninety days, the audit logs may be maintained off-line.
+
+    Online maintenance provides for a more timely capability and inclination to         
+    investigate suspicious activity.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61409&#39; do
+  title &#39;Audit trail data must be retained for at least one year.&#39;
+  desc  &quot;Without preservation, a complete discovery of an attack or suspicious
+  activity may not be determined.  DBMS audit data also contributes to the
+  complete investigation of unauthorized activity and needs to be included in
+  audit retention plans and procedures.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61409&#39;
+  tag &quot;rid&quot;: &#39;SV-75899r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67325r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review and verify the implementation of an audit trail
+  retention policy.
+
+  Verify that audit data is maintained for a minimum of one year.
+
+  If audit data is not maintained for a minimum of one year, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61411</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61411</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61411&#39; do
+  title &quot;Access to default accounts used to support replication must be
+  restricted to authorized DBAs.&quot;
+  desc &quot;Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61411&#39;
+  tag &quot;rid&quot;: &#39;SV-75901r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67327r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+  tag &quot;fix&quot;: &quot;Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.&quot;
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61413</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle instance names must not contain Oracle version numbers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61413</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle instance names must not contain Oracle version numbers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61413&#39; do
+  title &#39;Oracle instance names must not contain Oracle version numbers.&#39;
+  desc  &quot;Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61413&#39;
+  tag &quot;rid&quot;: &#39;SV-75903r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67329r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.&quot;
+  tag &quot;fix&quot;: &quot;Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+  db_instance_name &#x3D; sql.query(&#39;select instance_name from v$instance;&#39;).column(&#39;instance_name&#39;)
+
+  describe &#39;The oracle database instance name&#39; do
+    subject { db_instance_name }
+    it { should_not include version.to_s }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61415</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Fixed user and public database links must be authorized for use.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61415</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Fixed user and public database links must be authorized for use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61415&#39; do
+  title &#39;Fixed user and public database links must be authorized for use.&#39;
+  desc  &quot;Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61415&#39;
+  tag &quot;rid&quot;: &#39;SV-75905r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67331r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61417</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61417</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61417&#39; do
+  title &quot;A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.&quot;
+  desc &quot;Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.&quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61417&#39;
+  tag &quot;rid&quot;: &#39;SV-75907r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67333r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.&quot;
+  tag &quot;fix&quot;: &quot;To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  controlfiles &#x3D; sql.query(&#39;select name from v$controlfile;&#39;).column(&#39;name&#39;)
+  partitions &#x3D; []
+
+  controlfiles.each do |files|
+    file &#x3D; files[1..-1]
+    get_pos_slash &#x3D; file.index(&#39;&#x2F;&#39;)
+    partition &#x3D; file[0..get_pos_slash]
+    partitions.push(partition)
+  end
+
+  control_file1_partition &#x3D; partitions[0]
+  control_file2_partition &#x3D; partitions[1]
+
+  describe &quot;The oracable control file permission: #{control_file1_partition}&quot; do
+    subject { control_file1_partition }
+    it { should_not cmp control_file2_partition }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61419</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61419</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61419&#39; do
+  title &quot;A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.&quot;
+  desc &quot;The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61419&#39;
+  tag &quot;rid&quot;: &#39;SV-75909r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67335r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&#39;select count(*) from V$LOG;&#39;).column(&#39;count(*)&#39;) do
+    it { should cmp &gt;&#x3D; 2 }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61421</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61421</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61421&#39; do
+  title &quot;The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.&quot;
+  desc &quot;An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61421&#39;
+  tag &quot;rid&quot;: &#39;SV-75911r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67337r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;&quot;).row(0).column(&quot;grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name&quot;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61425</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61425</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61425&#39; do
+  title &#39;The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.&#39;
+  desc  &quot;Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61425&#39;
+  tag &quot;rid&quot;: &#39;SV-75915r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67341r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_AUTHENT parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61427</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61427</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61427&#39; do
+  title &#39;The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.&#39;
+  desc  &quot;Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61427&#39;
+  tag &quot;rid&quot;: &#39;SV-75917r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67343r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_ROLES parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61429</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle SQL92_SECURITY parameter must be set to TRUE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61429</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle SQL92_SECURITY parameter must be set to TRUE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61429&#39; do
+  title &#39;The Oracle SQL92_SECURITY parameter must be set to TRUE.&#39;
+  desc  &quot;The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61429&#39;
+  tag &quot;rid&quot;: &#39;SV-75919r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67345r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database SQL92_SECURITY parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;TRUE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61431</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61431</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61431&#39; do
+  title &quot;The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.&quot;
+  desc &quot;The REMOTE_LOGIN_PASSWORDFILE setting of \&quot;NONE\&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  \&quot;EXCLUSIVE\&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to \&quot;EXCLUSIVE\&quot;, remote connections to the database as \&quot;internal\&quot;
+  or \&quot;as SYSDBA\&quot; are not logged to an individual account.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61431&#39;
+  tag &quot;rid&quot;: &#39;SV-75921r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67347r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;&quot;).column(&#39;value&#39;)
+
+  describe.one do
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;EXCLUSIVE&#39; }
+    end
+
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;NONE&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61433</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61433</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61433&#39; do
+  title &quot;System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61433&#39;
+  tag &quot;rid&quot;: &#39;SV-75923r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67349r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61435</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>System Privileges must not be granted to PUBLIC.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61435</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">System Privileges must not be granted to PUBLIC.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61435&#39; do
+  title &#39;System Privileges must not be granted to PUBLIC.&#39;
+  desc  &quot;System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61435&#39;
+  tag &quot;rid&quot;: &#39;SV-75925r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67351r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;privilege&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61437</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61437</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61437&#39; do
+  title &quot;Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61437&#39;
+  tag &quot;rid&quot;: &#39;SV-75927r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67353r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_option &#x3D; sql.query(&quot;select grantee from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_admin_option.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_option.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61439</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Object permissions granted to PUBLIC must be restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: CTXSYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: XDB with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61439</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Object permissions granted to PUBLIC must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61439&#39; do
+  title &#39;Object permissions granted to PUBLIC must be restricted.&#39;
+  desc  &quot;Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61439&#39;
+  tag &quot;rid&quot;: &#39;SV-75929r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67355r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_public_access &#x3D; sql.query(&quot;select DISTINCT owner from dba_tab_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).column(&#39;owner&#39;).uniq
+
+  if users_with_public_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with access to PUBLIC, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with access to PUBLIC&#39;
+    end
+  else
+    users_with_public_access.each do |user|
+      describe &quot;oracle user: #{user} with access to PUBLIC&quot; do
+        subject { user }
+        it { should be_in input(&#39;users_allowed_access_to_public&#39;)}
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61441</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle Listener must be configured to require administration
+  authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61441</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle Listener must be configured to require administration
+  authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If &quot;Security &#x3D; OFF&quot; is displayed, this is a finding.
+
+  If &quot;Security &#x3D; ON: Local OS Authentication&quot; is displayed, this is not a
+  finding.
+
+  If &quot;Security &#x3D; ON: Password or Local OS Authentication&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61441&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+         skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61441&#39; do
+  title &quot;The Oracle Listener must be configured to require administration
+  authentication.&quot;
+  desc &quot;Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61441&#39;
+  tag &quot;rid&quot;: &#39;SV-75931r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67357r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If \&quot;Security &#x3D; OFF\&quot; is displayed, this is a finding.
+
+  If \&quot;Security &#x3D; ON: Local OS Authentication\&quot; is displayed, this is not a
+  finding.
+
+  If \&quot;Security &#x3D; ON: Password or Local OS Authentication\&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.&quot;
+  tag &quot;fix&quot;: &quot;By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.&quot;
+
+  listener_name &#x3D; command(&quot;ps -ef | grep tnslsnr | grep -v grep|awk &#39;{ print $9; }&#39;&quot;).stdout.strip
+
+  listener_status &#x3D; command(&quot;lsnrctl status #{listener_name}&quot;).stdout.strip
+
+  describe &#39;The Oracle Listener status&#39; do
+    subject { listener_status }
+    it { should_not include &#39;Security                  OFF&#39; }
+    it { should_not include &#39;Security                  ON: Password or Local OS Authentication&#39; }
+  end
+  describe listener_status do
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61443</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61443</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61443&#39; do
+  title &quot;Application role permissions must not be assigned to the Oracle PUBLIC
+  role.&quot;
+  desc &quot;Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61443&#39;
+  tag &quot;rid&quot;: &#39;SV-75933r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67359r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;granted_role&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61445</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle application administration roles must be disabled if not
+  required and authorized.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61445</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle application administration roles must be disabled if not
+  required and authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61445&#39; do
+  title &quot;Oracle application administration roles must be disabled if not
+  required and authorized.&quot;
+  desc &quot;Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61445&#39;
+  tag &quot;rid&quot;: &#39;SV-75935r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67361r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dba_role &#x3D; sql.query(&quot;select grantee from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dba_role.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_dba_role.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_dba_role&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61447</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61447</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure communications between the DBMS and remote 
+       applications&#x2F;application servers to use CMS-approved encryption.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61447&#39; do
+  desc &#39;Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.&#39;
+  desc &#39;fix&#39;, &#39;Configure communications between the DBMS and remote 
+       applications&#x2F;application servers to use CMS-approved encryption.&#39;	
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61447&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61447&#39; do
+  title &quot;Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  &quot;
+  desc &quot;Multi-tier systems may be configured with the database and connecting
+  middle-tier system located on an internal network, with the database located on
+  an internal network behind a firewall and the middle-tier system located in a
+  DMZ. In cases where either or both systems are located in the DMZ (or on
+  networks external to DoD), network communications between the systems must be
+  encrypted.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61447&#39;
+  tag &quot;rid&quot;: &#39;SV-75937r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67363r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure communications between the DBMS and remote
+  applications&#x2F;application servers to use DoD-approved encryption.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61449</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61449</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61449&#39; do
+  title &quot;Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.&quot;
+  desc &quot;Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61449&#39;
+  tag &quot;rid&quot;: &#39;SV-75939r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67365r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_jobs &#x3D; sql.query(&quot;select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;).column(&#39;job_name&#39;)
+
+  describe &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot; do
+    skip &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61451</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unauthorized database links must not be defined and active.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61451</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unauthorized database links must not be defined and active.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61451&#39; do
+  title &#39;Unauthorized database links must not be defined and active.&#39;
+  desc  &quot;DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61451&#39;
+  tag &quot;rid&quot;: &#39;SV-75941r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67367r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61453</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Sensitive information from production database exports must be
+  modified before import to a development database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61453</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Sensitive information from production database exports must be
+  modified before import to a development database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61453&#39; do
+    desc &#39;Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61453&#39; do
+  title &quot;Sensitive information from production database exports must be
+  modified before import to a development database.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers do not have a need to know to sensitive data. Any access
+  they may have to production data would be considered unauthorized access and
+  subject the sensitive data to unlawful or unauthorized disclosure. See DODD
+  8500.1 for a definition of Sensitive Information.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61453&#39;
+  tag &quot;rid&quot;: &#39;SV-75943r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67369r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.&quot;
+  describe &#39;A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database&#39; do
+    skip &#39;A manual review is required to ensure sensitive information from production database exports are
+    modified before import to a development database&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61455</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61455</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61455&#39; do
+    title &#39;Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.&#39;
+    desc &#39;Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61455&#39; do
+  title &quot;Application user privilege assignment must be reviewed monthly or more
+  frequently to ensure compliance with least privilege and documented policy.&quot;
+  desc &quot;Users granted privileges not required to perform their assigned
+  functions are able to make unauthorized modifications to the production data or
+  database. Monthly or more frequent periodic review of privilege assignments
+  assures that organizational and&#x2F;or functional changes are reflected
+  appropriately.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61455&#39;
+  tag &quot;rid&quot;: &#39;SV-75945r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67371r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61457</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Audit trail data must be reviewed daily or more frequently.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is reviewed daily or more frequently</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61457</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Audit trail data must be reviewed daily or more frequently.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures to monitor
+  audit trail data daily.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61457&#39; do
+  title &#39;Audit trail data must be reviewed daily or more frequently.&#39;
+  desc  &quot;Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61457&#39;
+  tag &quot;rid&quot;: &#39;SV-75947r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67373r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  audit trail data daily.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61459</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_name is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_value is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSBACKUP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSDG is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61459</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the &quot;alter user&quot; for each affected user account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61459&#39; do
+  title &quot;Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.&quot;
+  desc  &quot;The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61459&#39;
+  tag &quot;rid&quot;: &#39;SV-75949r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67375r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the \&quot;alter user\&quot; for each affected user account.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  property_name &#x3D; sql.query(&quot;select property_name
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_name&#39;)
+
+  describe &#39;The oracle database property_name&#39; do
+    subject { property_name }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  property_value &#x3D; sql.query(&quot;select property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_value&#39;)
+
+  describe &#39;The oracle database property_value&#39; do
+    subject { property_value }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  users_with_system_tablespace &#x3D; sql.query(&quot;select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);&quot;).column(&#39;username&#39;).uniq
+  if users_with_system_tablespace.empty?
+    impact 0.0
+    describe &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_system_tablespace.each do |user|
+      describe &quot;oracle users with system tablespace: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_system_tablespace&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61461</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application owner accounts must have a dedicated application
+  tablespace.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61461</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application owner accounts must have a dedicated application
+  tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61461&#39; do
+  title &quot;Application owner accounts must have a dedicated application
+  tablespace.&quot;
+  desc &quot;Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61461&#39;
+  tag &quot;rid&quot;: &#39;SV-75951r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67377r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  application_owners &#x3D; sql.query(&quot;select distinct owner
+  from dba_SEGMENTS;&quot;).column(&#39;owner&#39;).uniq
+  if application_owners.empty?
+    impact 0.0
+    describe &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39;
+    end
+  else
+    application_owners.each do |user|
+      describe &quot;oracle db application owners: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_application_owners&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61463</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61463</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61463&#39; do
+  title &quot;The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.&quot;
+  desc  &quot;The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61463&#39;
+  tag &quot;rid&quot;: &#39;SV-75953r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67379r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_archive_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database log_archive_dest parameter&#39; do
+    subject { log_archive_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  parameter &#x3D; sql.query(&quot;select DISTINCT value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database value for log_archive_dest parameter&#39; do
+    subject { parameter }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  db_recovery_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;&quot;).column(&#39;value&#39;).uniq
+
+  describe &#39;The oracle database db_recovery_file_dest parameter&#39; do
+    subject { db_recovery_file_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61465</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61465</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61465&#39; do
+  title &quot;The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.&quot;
+  desc  &quot;The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61465&#39;
+  tag &quot;rid&quot;: &#39;SV-75955r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67381r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database _TRACE_FILES_PUBLIC parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;TRUE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61467</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61467</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61467&#39; do
+  title &quot;Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.&quot;
+  desc &quot;Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61467&#39;
+  tag &quot;rid&quot;: &#39;SV-75957r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67383r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+
+  unlocked_accounts &#x3D; sql.query(&quot;select distinct o.owner from dba_objects o, dba_users u
+  where
+   o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;&quot;).column(&#39;owner&#39;).uniq
+  if unlocked_accounts.empty?
+    impact 0.0
+    describe &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39; do
+      skip &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39;
+    end
+  else
+    unlocked_accounts.each do |user|
+      describe &quot;oracle user: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_unlocked_oracledb_accounts&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61487</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61487</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61487&#39; do
+  title &quot;DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.&quot;
+  desc &quot;Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61487&#39;
+  tag &quot;rid&quot;: &#39;SV-75977r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67403r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.&quot;
+  tag &quot;fix&quot;: &quot;Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.&#39; do
+    skip &#39;A manual review is required to ensure DBMS production application and data directories are protected
+  from developers on shared production&#x2F;development DBMS host systems.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61489</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of the DBMS installation account must be logged.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61489</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of the DBMS installation account must be logged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61489&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61489&#39; do
+  title &#39;Use of the DBMS installation account must be logged.&#39;
+  desc  &quot;The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61489&#39;
+  tag &quot;rid&quot;: &#39;SV-75979r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67405r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.&quot;
+  describe command(&quot;grep -ie &#39;^[^#]*NOPASSWD&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe command(&quot;grep -ie &#39;^[^#]*!authenticate&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;sudoers\s+\-p\s+wa\s+\-k\s+[-\w]+\s*$&#x2F;) }
+  end
+  describe sshd_config do
+    its(&#39;PrintLastLog&#39;) { should be_nil.or eq &#39;yes&#39; }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;group\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;passwd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;gshadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;shadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;security\&#x2F;opasswd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61491</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61491</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure all related application components and the DBMS host platform 
+         in accordance with the applicable CMS ARS.
+
+         Regularly audit the security configuration of related applications and the host 
+         platform to confirm continued compliance with security requirements.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61491&#39; do
+    title &#39;The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.&#39;
+    desc &#39;fix&#39;, &#39;Configure all related application components and the DBMS host platform 
+         in accordance with the applicable CMS ARS.
+
+         Regularly audit the security configuration of related applications and the host 
+         platform to confirm continued compliance with security requirements.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61491&#39; do
+  title &quot;The DBMS host platform and other dependent applications must be
+  configured in compliance with applicable STIG requirements.&quot;
+  desc &quot;The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61491&#39;
+  tag &quot;rid&quot;: &#39;SV-75981r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67407r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure all related application components and the DBMS host
+  platform in accordance with the applicable DoD STIG.
+
+  Regularly audit the security configuration of related applications and the host
+  platform to confirm continued compliance with security requirements.&quot;
+  describe &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39; do
+    skip &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61493</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61493</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61493&#39; do
+  title &quot;Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.&quot;
+  desc &quot;Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61493&#39;
+  tag &quot;rid&quot;: &#39;SV-75983r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67409r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61495</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The database must not be directly accessible from public or
+  unauthorized networks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61495</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The database must not be directly accessible from public or
+  unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61495&#39; do
+  title &quot;The database must not be directly accessible from public or
+  unauthorized networks.&quot;
+  desc &quot;Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61495&#39;
+  tag &quot;rid&quot;: &#39;SV-75985r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67411r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.&quot;
+  describe &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39; do
+    skip &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61497</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ISSM must review changes to DBA role assignments.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61497</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ISSM must review changes to DBA role assignments.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61497&#39; do
+  title &#39;The ISSM must review changes to DBA role assignments.&#39;
+  desc  &quot;Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61497&#39;
+  tag &quot;rid&quot;: &#39;SV-75987r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67413r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61499</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61499</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61499&#39; do
+  title &quot;Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.&quot;
+  desc &quot;Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61499&#39;
+  tag &quot;rid&quot;: &#39;SV-75989r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67415r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.&quot;
+  describe &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39; do
+    skip &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61501</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61501</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61501&#39; do
+  title &quot;Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61501&#39;
+  tag &quot;rid&quot;: &#39;SV-75991r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67417r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.&quot;
+  describe &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39; do
+    skip &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61503</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61503</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled &quot;SSN&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61503&#39; do
+  title &quot;Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.&quot;
+  desc &quot;A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61503&#39;
+  tag &quot;rid&quot;: &#39;SV-75993r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67419r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled \&quot;SSN\&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.&quot;
+  describe &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39; do
+    skip &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61507</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61507</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61507&#39; do
+  title &quot;Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.&quot;
+  desc &quot;Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61507&#39;
+  tag &quot;rid&quot;: &#39;SV-75997r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67423r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61509</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must not share a host supporting an independent security
+  service.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61509</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must not share a host supporting an independent security
+  service.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61509&#39; do
+  title &quot;The DBMS must not share a host supporting an independent security
+  service.&quot;
+  desc &quot;The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61509&#39;
+  tag &quot;rid&quot;: &#39;SV-75999r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67425r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.&quot;
+  tag &quot;fix&quot;: &quot;Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service&#39; do
+    skip &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+   service&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61511</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to DBMS software files and directories must not be granted to
+  unauthorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61511</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to DBMS software files and directories must not be granted to
+  unauthorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \Program Files\Oracle\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61511&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61511&#39; do
+  title &quot;Access to DBMS software files and directories must not be granted to
+  unauthorized users.&quot;
+  desc &quot;The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61511&#39;
+  tag &quot;rid&quot;: &#39;SV-76001r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67427r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \\Program Files\\Oracle\\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61513</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Replication accounts must not be granted DBA privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61513</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Replication accounts must not be granted DBA privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61513&#39; do
+  title &#39;Replication accounts must not be granted DBA privileges.&#39;
+  desc  &quot;Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61513&#39;
+  tag &quot;rid&quot;: &#39;SV-76003r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67429r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61515</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Network access to the DBMS must be restricted to authorized personnel.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61515</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Network access to the DBMS must be restricted to authorized personnel.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (&quot;&#x2F;32&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a &quot;&#x2F;&quot; indicates acceptance by subnet mask where the
+  number after the &quot;&#x2F;&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61515&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61515&#39; do
+  title &#39;Network access to the DBMS must be restricted to authorized personnel.&#39;
+  desc  &quot;Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61515&#39;
+  tag &quot;rid&quot;: &#39;SV-76005r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67431r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (\&quot;&#x2F;32\&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a \&quot;&#x2F;\&quot; indicates acceptance by subnet mask where the
+  number after the \&quot;&#x2F;\&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.&quot;
+  tag &quot;fix&quot;: &quot;Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;tcp.validnode_checking&#x3D;YES&#39; }
+    its(&#39;content&#39;) { should match &#x2F;tcp.invited_nodes&#x3D;(\W*)&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61519</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Changes to configuration options must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61519</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Changes to configuration options must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61519&#39; do
+  title &#39;Changes to configuration options must be audited.&#39;
+  desc  &quot;The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61519&#39;
+  tag &quot;rid&quot;: &#39;SV-76009r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67435r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database AUDIT_SYS_OPERATIONS parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61523</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote DBMS administration must be documented and authorized or
+  disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61523</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote DBMS administration must be documented and authorized or
+  disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan for authorization, assignments and usage 
+         procedures for remote DBMS administration.
+
+         If remote administration of the DBMS is not documented or poorly documented, this 
+         is a finding.
+
+         If remote administration of the DBMS is not authorized and not disabled, this is 
+         a finding.
+         
+         If remote administration is to be performed from outside the CMS network, but is not 
+         done via an approved and properly configured VPN, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61523&#39; do
+    desc &#39;Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.&#39;
+
+    desc &#39;check&#39;, &#39;Review the System Security Plan for authorization, assignments and usage 
+         procedures for remote DBMS administration.
+
+         If remote administration of the DBMS is not documented or poorly documented, this 
+         is a finding.
+
+         If remote administration of the DBMS is not authorized and not disabled, this is 
+         a finding.
+         
+         If remote administration is to be performed from outside the CMS network, but is not 
+         done via an approved and properly configured VPN, this is a finding.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61523&#39; do
+  title &quot;Remote DBMS administration must be documented and authorized or
+  disabled.&quot;
+  desc &quot;Remote administration may expose configuration and sensitive data to
+  unauthorized viewing during transit across the network or allow unauthorized
+  administrative access to the DBMS to remote users.
+
+      For the purposes of this STIG, \&quot;Remote\&quot; means \&quot;outside the DoDIN.\&quot;
+  However, use of an approved and properly configured VPN counts as inside the
+  DoDIN.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61523&#39;
+  tag &quot;rid&quot;: &#39;SV-76013r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67439r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for authorization, assignments
+  and usage procedures for remote DBMS administration.
+
+  If remote administration of the DBMS is not documented or poorly documented,
+  this is a finding.
+
+  If remote administration of the DBMS is not authorized and not disabled, this
+  is a finding.
+
+  If remote administration is to be performed from outside the DoDIN, but is not
+  done via an approved and properly configured VPN, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61525</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61525</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61525&#39; do
+  title &quot;DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.&quot;
+  desc &quot;Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61525&#39;
+  tag &quot;rid&quot;: &#39;SV-76015r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67441r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.&quot;
+  tag &quot;fix&quot;: &quot;Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.&quot;
+  describe &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61527</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Changes to DBMS security labels must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61527</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Changes to DBMS security labels must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61527&#39; do
+  title &#39;Changes to DBMS security labels must be audited.&#39;
+  desc  &quot;Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61527&#39;
+  tag &quot;rid&quot;: &#39;SV-76017r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67443r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39;Changes to security label assignment is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Changes to security label assignment is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61529</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote database or other external access must use fully-qualified
+  names.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61529</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote database or other external access must use fully-qualified
+  names.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61529&#39; do
+  title &quot;Remote database or other external access must use fully-qualified
+  names.&quot;
+  desc  &quot;The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61529&#39;
+  tag &quot;rid&quot;: &#39;SV-76019r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67445r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;global_names&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database GLOBAL_NAMES parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61531</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61531</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append &quot;&#x2F;diag&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61531&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61531&#39; do
+  title &quot;The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.&quot;
+  desc &#39;&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.&#39;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61531&#39;
+  tag &quot;rid&quot;: &#39;SV-76021r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67447r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append \&quot;&#x2F;diag\&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \\diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.&quot;
+  tag &quot;fix&quot;: &quot;Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_diagnostic_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;diagnostic_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  diagnostic_dest &#x3D; get_diagnostic_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{diagnostic_dest}&#x2F;diag |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61533</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote administration must be disabled for the Oracle connection
+  manager.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61533</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote administration must be disabled for the Oracle connection
+  manager.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61533&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61533&#39; do
+  title &quot;Remote administration must be disabled for the Oracle connection
+  manager.&quot;
+  desc  &quot;Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61533&#39;
+  tag &quot;rid&quot;: &#39;SV-76023r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67449r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;cman.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;REMOTE_ADMIN &#x3D; NO&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61535</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Network client connections must be restricted to supported versions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61535</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Network client connections must be restricted to supported versions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  &quot;Database Net Services Reference&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61535&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61535&#39; do
+  title &#39;Network client connections must be restricted to supported versions.&#39;
+  desc  &quot;Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61535&#39;
+  tag &quot;rid&quot;: &#39;SV-76025r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67451r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied&quot;
+  tag &quot;fix&quot;: &quot;Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  \&quot;Database Net Services Reference\&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;11&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;11&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12a&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12a&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61537</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no dba users, therefore this control is NA</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61537</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If &quot;root&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61537&#39; do
+  title &quot;DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000021&#39;
+  tag &quot;gid&quot;: &#39;V-61537&#39;
+  tag &quot;rid&quot;: &#39;SV-76027r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-004500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67453r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If \&quot;root\&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.&quot;
+
+  get_dba_users &#x3D; command(&#39;cat &#x2F;etc&#x2F;group | grep -i dba&#39;).stdout.strip.split(&quot;\n&quot;)
+  get_members_root_group &#x3D; command(&#39;groups root&#39;).stdout.strip.split(&quot;\n&quot;)
+
+  get_dba_users.each do |user|
+    describe &quot;The dba user: #{user} in &#x2F;etc&#x2F;group&quot; do
+      subject { user }
+      it { should_not cmp &#39;root&#39; }
+    end
+
+    get_members_root_group.each do |member|
+      describe &quot;The user: #{member} in the root group&quot; do
+        subject { member }
+        it { should_not cmp user.to_s }
+      end
+    end
+  end
+  if get_dba_users.empty?
+    describe &#39;There are no dba users, therefore this control is NA&#39; do
+      skip &#39;There are no dba users, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61539</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61539</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61539&#39; do
+  title &quot;Oracle software must be evaluated and patched against newly found
+  vulnerabilities.&quot;
+  desc &quot;Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000205&#39;
+  tag &quot;gid&quot;: &#39;V-61539&#39;
+  tag &quot;rid&quot;: &#39;SV-76029r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-011100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67455r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  patches &#x3D; sql.query(&#39;SELECT patch_id from dba_registry_sqlpatch;&#39;).column(&#39;patch_id&#39;)
+
+  describe &#39;The oracle database installed patches&#39; do
+    subject { patches }
+    it { should_not cmp nil }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61541</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS default accounts must be assigned custom passwords.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61541</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS default accounts must be assigned custom passwords.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61541&#39; do
+  title &#39;DBMS default accounts must be assigned custom passwords.&#39;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000078&#39;
+  tag &quot;gid&quot;: &#39;V-61541&#39;
+  tag &quot;rid&quot;: &#39;SV-76031r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67457r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)&quot;
+  tag &quot;fix&quot;: &quot;Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sys_dba_users_with_defpwd &#x3D; sql.query(&#39; SELECT username FROM SYS.DBA_USERS_WITH_DEFPWD;&#39;).column(&#39;username&#39;).uniq
+
+  describe.one do
+    sys_dba_users_with_defpwd.each do |user|
+      describe &quot;The oracle system database user: #{user} with a default password&quot; do
+        subject { user }
+        it { should cmp &#39;XS$NULL&#39; }
+      end
+    end
+    
+    describe sys_dba_users_with_defpwd do
+      it { should be_empty }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61543</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000186
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61543</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61543&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61543&#39; do
+  title &quot;The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000176-DB-000068&#39;
+  tag &quot;gid&quot;: &#39;V-61543&#39;
+  tag &quot;rid&quot;: &#39;SV-76033r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67459r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000186&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61545</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002421
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61545</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61545&#39; do
+    desc &#39;Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it\&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61545&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61545&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.&quot;
+  desc &quot;Preventing the disclosure of transmitted information requires that
+  applications take measures to employ some form of cryptographic mechanism in
+  order to protect the information during transmission. This is usually achieved
+  through the use of Transport Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+      Alternative physical protection measures include Protected Distribution
+  Systems (PDS). PDS are used to transmit unencrypted classified NSI through an
+  area of lesser classification or control. Inasmuch as the classified NSI is
+  unencrypted, the PDS must provide adequate electrical, electromagnetic, and
+  physical safeguards to deter exploitation. Refer to NSTSSI No. 7003 for
+  additional details on a PDS.
+
+      Information in transmission is particularly vulnerable to attack. If the
+  DBMS does not employ cryptographic mechanisms preventing unauthorized
+  disclosure of information during transit, the information may be compromised.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000264-DB-000136&#39;
+  tag &quot;gid&quot;: &#39;V-61545&#39;
+  tag &quot;rid&quot;: &#39;SV-76035r5_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-019700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67461r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002421&#39;]
+  tag &quot;nist&quot;: [&#39;SC-8 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61553</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (10)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002186
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61553</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (10), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61553&#39; do
+  title &quot;The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.&quot;
+  desc &quot;Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000019-DB-000197&#39;
+  tag &quot;gid&quot;: &#39;V-61553&#39;
+  tag &quot;rid&quot;: &#39;SV-76043r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67469r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002186&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (10)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61555</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61555</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine if the database is utilizing any network 
+         protocols deemed nonsecure.  If the DBMS is not using any network protocols deemed nonsecure, 
+         this is not a finding.
+
+         If the database is utilizing protocols specified as nonsecure, verify the protocols are 
+         explicitly identified in the System Security Plan and that they are in support of specific 
+         operational requirements. If they are not identified in the SSP or are not supporting specific 
+         operational requirements, this is a finding.
+
+         If nonsecure network protocols are not being used but are not disabled in the DBMS&#39;s 
+         configuration, this is a finding.
+
+         After determining the site-specific operational requirements and which protocols are explicitly 
+         defined in the System Security Plan, check the $TNS_ADMIN setting for the location of the Oracle 
+         listener.ora file.  The listener.ora file is a configuration file for Oracle Net Listener that 
+         identifies the following:
+
+         A unique name for the listener, typically LISTENER
+         A protocol address that it is accepting connection requests on, and
+         A service it is listening for.
+         
+         If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed nonsecure, 
+         that is a finding.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+             (ADDRESS_LIST&#x3D;
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+         Protocol Parameters
+
+         The Oracle Listener and the Oracle Connection Manager are identified by protocol addresses. 
+         The information below contains the &quot;Protocol-Specific Parameters&quot; used by the Oracle protocol 
+         support.
+
+         Protocol-Specific Parameters
+         Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+         Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the service. Oracle 
+                                                       recommends using the service name or SID of the 
+                                                       service.
+         Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+         Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+         Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the Oracle server.
+         Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used to connect to the 
+                                                     database server.
+                                                     This is the same PIPE keyword specified on the server 
+                                                     with Named Pipes.  This name can be any name.
+
+         Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+            
+         Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+         Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+
+         Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+         Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+         Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+         Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+ 
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the value.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening port number.
+                                                        Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+                                                                (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable any network protocol listed as nonsecure in the PPSM documentation.
+
+         To disable the protocol deemed not secure, stop the listener by issuing the following command as the 
+         Oracle Software owner, typically Oracle.
+          $ lsnrctl stop
+         This will stop the listener.  Edit the LISTENER.ORA file and remove the protocols deemed not secure 
+         and restart the listener.
+
+         For example, if TCP was deemed as not secure, the listener.ora would need to be changed and the tcp 
+         entry would need to be removed.  That would only allow the listener to listen for an IPC connection.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+           (ADDRESS_LIST&#x3D;
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line and properly balance the parentheses -
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+          Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL portion of the connect 
+          string.  For example, if TCP was deemed as not secure and the listener.ora was changed to listen for an 
+          IPC connection the code below would be required:
+
+          net_service_name&#x3D;
+          (DESCRIPTION&#x3D;
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+          (CONNECT_DATA&#x3D;
+          (SERVICE_NAME&#x3D;sales.us.example.com)))</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61555&#39; do
+    desc &#39;This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.&#39;
+
+    desc &#39;check&#39;, &#39;Review DBMS settings to determine if the database is utilizing any network 
+         protocols deemed nonsecure.  If the DBMS is not using any network protocols deemed nonsecure, 
+         this is not a finding.
+
+         If the database is utilizing protocols specified as nonsecure, verify the protocols are 
+         explicitly identified in the System Security Plan and that they are in support of specific 
+         operational requirements. If they are not identified in the SSP or are not supporting specific 
+         operational requirements, this is a finding.
+
+         If nonsecure network protocols are not being used but are not disabled in the DBMS\&#39;s 
+         configuration, this is a finding.
+
+         After determining the site-specific operational requirements and which protocols are explicitly 
+         defined in the System Security Plan, check the $TNS_ADMIN setting for the location of the Oracle 
+         listener.ora file.  The listener.ora file is a configuration file for Oracle Net Listener that 
+         identifies the following:
+
+         A unique name for the listener, typically LISTENER
+         A protocol address that it is accepting connection requests on, and
+         A service it is listening for.
+         
+         If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed nonsecure, 
+         that is a finding.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+             (ADDRESS_LIST&#x3D;
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+         Protocol Parameters
+
+         The Oracle Listener and the Oracle Connection Manager are identified by protocol addresses. 
+         The information below contains the &quot;Protocol-Specific Parameters&quot; used by the Oracle protocol 
+         support.
+
+         Protocol-Specific Parameters
+         Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+         Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the service. Oracle 
+                                                       recommends using the service name or SID of the 
+                                                       service.
+         Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+         Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+         Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the Oracle server.
+         Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used to connect to the 
+                                                     database server.
+                                                     This is the same PIPE keyword specified on the server 
+                                                     with Named Pipes.  This name can be any name.
+
+         Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+            
+         Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+         Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+
+         Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+         Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+         Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+         Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+ 
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the value.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening port number.
+                                                        Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+                                                                (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)&#39;
+    desc &#39;fix&#39;, &#39;Disable any network protocol listed as nonsecure in the PPSM documentation.
+
+         To disable the protocol deemed not secure, stop the listener by issuing the following command as the 
+         Oracle Software owner, typically Oracle.
+          $ lsnrctl stop
+         This will stop the listener.  Edit the LISTENER.ORA file and remove the protocols deemed not secure 
+         and restart the listener.
+
+         For example, if TCP was deemed as not secure, the listener.ora would need to be changed and the tcp 
+         entry would need to be removed.  That would only allow the listener to listen for an IPC connection.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+           (ADDRESS_LIST&#x3D;
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line and properly balance the parentheses -
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+          Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL portion of the connect 
+          string.  For example, if TCP was deemed as not secure and the listener.ora was changed to listen for an 
+          IPC connection the code below would be required:
+
+          net_service_name&#x3D;
+          (DESCRIPTION&#x3D;
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+          (CONNECT_DATA&#x3D;
+          (SERVICE_NAME&#x3D;sales.us.example.com)))&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61555&#39; do
+  title &quot;The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.&quot;
+  desc &quot;This requirement is related to remote access, but more specifically to
+  the networking protocols allowing systems to communicate. Remote access is any
+  access to an organizational information system by a user (or an information
+  system) communicating through an external, non-organization  controlled network
+  (e.g., the Internet). Examples of remote access methods include dial-up,
+  broadband, and wireless.
+
+      Some networking protocols allowing remote access may not meet security
+  requirements to protect data and components. Bluetooth and peer-to-peer
+  networking are examples of less than secure networking protocols.
+
+      The DoD Ports, Protocols, and Services Management (PPSM) program provides
+  implementation guidance on the use of IP protocols and application and data
+  services traversing the DoD Networks in a manner supporting net-centric
+  operations.
+
+      Applications implementing or utilizing remote access network protocols need
+  to ensure the application is developed and implemented in accordance with the
+  PPSM requirements. In situations where it has been determined that specific
+  operational requirements outweigh the risks of enabling an insecure network
+  protocol, the organization may pursue a risk acceptance.
+
+      Using protocols deemed nonsecure would compromise the ability of the DBMS
+  to operate in a secure fashion. The database must be able to disable network
+  protocols deemed nonsecure.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000020-DB-000194&#39;
+  tag &quot;gid&quot;: &#39;V-61555&#39;
+  tag &quot;rid&quot;: &#39;SV-76045r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67471r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the PPSM Technical Assurance List to acquire an
+  up-to-date list of network protocols deemed nonsecure.
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  Review DBMS settings to determine if the database is utilizing any network
+  protocols deemed nonsecure.  If the DBMS is not using any network protocols
+  deemed nonsecure, this is not a finding.
+
+  If the database is utilizing protocols specified as nonsecure in the PPSM,
+  verify the protocols are explicitly identified in the System Security Plan and
+  that they are in support of specific operational requirements. If they are not
+  identified in the SSP or are not supporting specific operational requirements,
+  this is a finding.
+
+  If nonsecure network protocols are not being used but are not disabled in the
+  DBMS&#39;s configuration, this is a finding.
+
+  After determining the site-specific operational requirements and which
+  protocols are explicitly defined in the System Security Plan, check the
+  $TNS_ADMIN setting for the location of the Oracle listener.ora file.  The
+  listener.ora file is a configuration file for Oracle Net Listener that
+  identifies the following:
+
+  A unique name for the listener, typically LISTENER
+  A protocol address that it is accepting connection requests on, and
+  A service it is listening for.
+
+  If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed
+  nonsecure, that is a finding.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Protocol Parameters
+
+  The Oracle Listener and the Oracle Connection Manager are identified by
+  protocol addresses. The information below contains the \&quot;Protocol-Specific
+  Parameters\&quot; used by the Oracle protocol support.
+
+  Protocol-Specific Parameters
+
+  Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+  Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the
+  service. Oracle recommends using the service name or SID of the service.
+  Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+  Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+  Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the
+  Oracle server.
+  Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used
+  to connect to the database server.
+  This is the same PIPE keyword specified on the server with Named Pipes.  This
+  name can be any name.
+  Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+
+  Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+  Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+  Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the
+  value.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or
+  IP address of the computer.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening
+  port number.
+
+  Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+          (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)&quot;
+  tag &quot;fix&quot;: &quot;Disable any network protocol listed as nonsecure in the PPSM
+  documentation.
+
+  To disable the protocol deemed not secure, stop the listener by issuing the
+  following command as the Oracle Software owner, typically Oracle.
+            $ lsnrctl stop
+  This will stop the listener.  Edit the LISTENER.ORA file and remove the
+  protocols deemed not secure and restart the listener.
+
+  For example, if TCP was deemed as not secure, the listener.ora would need to be
+  changed and the tcp entry would need to be removed.  That would only allow the
+  listener to listen for an IPC connection.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line
+  and properly balance the parentheses -
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL
+  portion of the connect string.  For example, if TCP was deemed as not secure
+  and the listener.ora was changed to listen for an IPC connection the code below
+  would be required:
+
+  net_service_name&#x3D;
+  (DESCRIPTION&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+  (CONNECT_DATA&#x3D;
+  (SERVICE_NAME&#x3D;sales.us.example.com)))&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61557</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must employ automated mechanisms for supporting Oracle user
+  account management.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000015
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61557</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must employ automated mechanisms for supporting Oracle user
+  account management.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61557&#39; do
+  title &quot;The system must employ automated mechanisms for supporting Oracle user
+  account management.&quot;
+  desc &quot;A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000023-DB-000001&#39;
+  tag &quot;gid&quot;: &#39;V-61557&#39;
+  tag &quot;rid&quot;: &#39;SV-76047r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67473r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000015&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.&quot;
+  describe &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39; do
+    skip &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61559</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000016
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61559</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61559&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.&quot;
+  desc &quot;Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000002&#39;
+  tag &quot;gid&quot;: &#39;V-61559&#39;
+  tag &quot;rid&quot;: &#39;SV-76049r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67475r6_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61561</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000016
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61561</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+         or temporary accounts, this is not a finding.
+
+         If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access mechanism, 
+         and not by Oracle, this is not a finding.
+
+         Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+         determine if the site utilizes a mechanism whereby temporary or emergency accounts can be terminated after 
+         an organization-defined time period. If not, this is a finding.
+
+         Check the profiles to see what the password_life_time is set to in the table dba_profiles. 
+         The password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+         in the RESOURCE_NAME column.
+
+         SQL&gt;select
+         profile,
+         resource_name,
+         resource_type,
+         limit
+         from dba_profiles
+         where upper(resource_name) like &quot;PASSWORD_LIFE_TIME&quot;;
+
+         Verify that the user in question is assigned to a profile with the PASSWORD_LIFE_TIME set to 60 days.  
+         If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If using database mechanisms to satisfy this requirement, use a profile with a distinctive name 
+         (for example, TEMPORARY_USERS), so that temporary users can be easily identified.  Whenever a temporary user 
+         account is created, assign it to this profile.
+
+         Create a job to lock accounts under this profile that are more than 60 days old, where n is the 
+         organization-defined time period.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61561&#39; do
+    desc &#39;check&#39;, &#39;If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+         or temporary accounts, this is not a finding.
+
+         If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access mechanism, 
+         and not by Oracle, this is not a finding.
+
+         Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+         determine if the site utilizes a mechanism whereby temporary or emergency accounts can be terminated after 
+         an organization-defined time period. If not, this is a finding.
+
+         Check the profiles to see what the password_life_time is set to in the table dba_profiles. 
+         The password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+         in the RESOURCE_NAME column.
+
+         SQL&gt;select
+         profile,
+         resource_name,
+         resource_type,
+         limit
+         from dba_profiles
+         where upper(resource_name) like &quot;PASSWORD_LIFE_TIME&quot;;
+
+         Verify that the user in question is assigned to a profile with the PASSWORD_LIFE_TIME set to 60 days.  
+         If not, this is a finding.&#39;
+    desc &#39;fix&#39;, &#39;If using database mechanisms to satisfy this requirement, use a profile with a distinctive name 
+         (for example, TEMPORARY_USERS), so that temporary users can be easily identified.  Whenever a temporary user 
+         account is created, assign it to this profile.
+
+         Create a job to lock accounts under this profile that are more than 60 days old, where n is the 
+         organization-defined time period.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61561&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.&quot;
+  desc &quot;Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000003&#39;
+  tag &quot;gid&quot;: &#39;V-61561&#39;
+  tag &quot;rid&quot;: &#39;SV-76051r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67477r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if the site utilizes a mechanism whereby
+  temporary or emergency accounts can be terminated after an organization-defined
+  time period. If not, this is a finding.
+
+  Check the profiles to see what the password_life_time is set to in the table
+  dba_profiles. The password_life_time is a value stored in the LIMIT column, and
+  identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME column.
+
+  SQL&gt;select
+  profile,
+  resource_name,
+  resource_type,
+  limit
+  from dba_profiles
+  where upper(resource_name) like &#39;PASSWORD_LIFE_TIME&#39;;
+
+  Verify that the user in question is assigned to a profile with the
+  PASSWORD_LIFE_TIME set to the amount of time the user is expected to be using
+  the password.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If using database mechanisms to satisfy this requirement, use a
+  profile with a distinctive name (for example, TEMPORARY_USERS), so that
+  temporary users can be easily identified.  Whenever a temporary user account is
+  created, assign it to this profile.
+
+  Create a job to lock accounts under this profile that are more than n days old,
+  where n is the organization-defined time period.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  if user_profiles.empty?
+    describe &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39; do
+      skip &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39;
+    end
+  end
+
+  if !user_profiles.empty?
+    user_profiles.each do |profile|
+      unless input(&#39;emergency_profile_list&#39;).include?(profile)
+      	describe &quot;The profile #{profile} &quot; do
+	  subject { profile }
+	  it &quot;should not be in the org-defined list of profiles for emergency or temporary account management&quot; do
+	    expect(subject).should_not be_in(input(&#39;emergency_profile_list&#39;)) 
+	  end
+        end
+	next
+      end
+      password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+      describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+        subject { password_life_time }
+        it { should cmp &lt;&#x3D; input(&#39;password_life_time&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61565</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account creation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000018
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61565</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account creation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61565&#39; do
+  title &#39;The DBMS must automatically audit account creation.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000026-DB-000005&#39;
+  tag &quot;gid&quot;: &#39;V-61565&#39;
+  tag &quot;rid&quot;: &#39;SV-76055r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67481r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000018&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account creation is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account creation is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61569</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must  automatically audit account modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001403
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61569</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must  automatically audit account modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61569&#39; do
+  title &#39;The DBMS must  automatically audit account modification.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000027-DB-000186&#39;
+  tag &quot;gid&quot;: &#39;V-61569&#39;
+  tag &quot;rid&quot;: &#39;SV-76059r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67485r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001403&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account modification is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account modification is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account modification&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61571</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001404
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61571</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61571&#39; do
+  title &quot;The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000028-DB-000187&#39;
+  tag &quot;gid&quot;: &#39;V-61571&#39;
+  tag &quot;rid&quot;: &#39;SV-76061r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67487r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001404&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account disabling is not being audited. &#39;
+    FROM dual
+    WHERE (SELECT Count(*)
+    FROM (select policy_name , audit_option from audit_unified_policies
+    WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+    and policy_name in (select policy_name from audit_unified_enabled_policies
+    where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+    OR (SELECT value
+    FROM v$option
+    WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account disabling is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account disabling actions&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61573</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account termination.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001405
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61573</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account termination.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61573&#39; do
+  title &#39;The DBMS must automatically audit account termination.&#39;
+  desc  &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000029-DB-000188&#39;
+  tag &quot;gid&quot;: &#39;V-61573&#39;
+  tag &quot;rid&quot;: &#39;SV-76063r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67489r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001405&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account termination is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account termination is not being audited&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account termination&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61575</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000213
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61575</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role &quot;User roles and privileges&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61575&#39; do
+  title &quot;The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.&quot;
+  desc &quot;Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000033-DB-000084&#39;
+  tag &quot;gid&quot;: &#39;V-61575&#39;
+  tag &quot;rid&quot;: &#39;SV-76065r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67491r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000213&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role \&quot;User roles and privileges\&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61577</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61577</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61577&#39; do
+  title &quot;The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&quot;
+  desc &quot;Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000036-DB-000174&#39;
+  tag &quot;gid&quot;: &#39;V-61577&#39;
+  tag &quot;rid&quot;: &#39;SV-76067r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67493r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+    allowing users to specify and control sharing by named individuals, groups of
+    individuals, or by both, limiting propagation of access rights and including or
+    excluding access to the granularity of a single user.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61579</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS processes or services must run under custom, dedicated OS
+  accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61579</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS processes or services must run under custom, dedicated OS
+  accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61579&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61579&#39; do
+  title &quot;DBMS processes or services must run under custom, dedicated OS
+  accounts.&quot;
+  desc &quot;Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000010&#39;
+  tag &quot;gid&quot;: &#39;V-61579&#39;
+  tag &quot;rid&quot;: &#39;SV-76069r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67495r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_&quot;
+  tag &quot;fix&quot;: &quot;Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.&quot;
+
+  oracle_file_owners &#x3D; command(&quot;ls -l  $ORACLE_HOME|awk &#39;{ print $3; }&#39; | sort -u&quot;).stdout.strip.split(&quot;\n&quot;)
+
+  oracle_file_owners.each do |owner|
+    describe &#39;The file and directory inside the Oracle Home directory&#39; do
+      subject { owner }
+      it { should cmp &#39;oracle&#39; }
+    end
+  end
+  if oracle_file_owners.empty?
+    describe &#39;There are no oracle file owners, therefore this control is NA&#39; do
+      skip &#39;There are no oracle file owners, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61581</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict grants to sensitive information to authorized
+  user roles.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61581</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict grants to sensitive information to authorized
+  user roles.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61581&#39; do
+  title &quot;The DBMS must restrict grants to sensitive information to authorized
+  user roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000011&#39;
+  tag &quot;gid&quot;: &#39;V-61581&#39;
+  tag &quot;rid&quot;: &#39;SV-76071r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67497r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61583</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A single database connection configuration file must not be used to
+  configure all database clients.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61583</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A single database connection configuration file must not be used to
+  configure all database clients.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to supply database connection information to
+  only those databases authorized for the user.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61583&#39; do
+  title &quot;A single database connection configuration file must not be used to
+  configure all database clients.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000012&#39;
+  tag &quot;gid&quot;: &#39;V-61583&#39;
+  tag &quot;rid&quot;: &#39;SV-76073r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67499r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to supply database connection information to
+  only those databases authorized for the user.&quot;
+  describe &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39; do
+    skip &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61585</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must be protected from unauthorized access by developers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61585</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must be protected from unauthorized access by developers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61585&#39; do
+  title &#39;The DBMS must be protected from unauthorized access by developers.&#39;
+  desc  &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000014&#39;
+  tag &quot;gid&quot;: &#39;V-61585&#39;
+  tag &quot;rid&quot;: &#39;SV-76075r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67501r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61587</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61587</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61587&#39; do
+  title &quot;The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000015&#39;
+  tag &quot;gid&quot;: &#39;V-61587&#39;
+  tag &quot;rid&quot;: &#39;SV-76077r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67503r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61589</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADMIN1 with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: APPQOSSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CTXSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: DBA with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: PUBLIC with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: RDSADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSDG with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSKM with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDB with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDBADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61589</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61589&#39; do
+  title &quot;The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000016&#39;
+  tag &quot;gid&quot;: &#39;V-61589&#39;
+  tag &quot;rid&quot;: &#39;SV-76079r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67505r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dictionary_table_access &#x3D; sql.query(&quot;SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dictionary_table_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39;
+    end
+  else
+    users_with_dictionary_table_access.each do |user|
+      describe &quot;oracle users: #{user} with access to the dictionary table&quot; do
+        subject { user }
+        it { should be_in USERS_ALLOWED_ACCESS_TO_DICTIONARY_TABLE }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61591</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Administrative privileges must be assigned to database accounts via
+  database roles.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Database accounts with administrative privileges is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61591</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Administrative privileges must be assigned to database accounts via
+  database roles.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61591&#39; do
+  title &quot;Administrative privileges must be assigned to database accounts via
+  database roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000034&#39;
+  tag &quot;gid&quot;: &#39;V-61591&#39;
+  tag &quot;rid&quot;: &#39;SV-76081r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67507r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)&quot;
+  tag &quot;fix&quot;: &quot;Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_accounts_with_administrative_privs &#x3D; sql.query(&quot;SELECT grantee
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  );&quot;).column(&#39;grantee&#39;).uniq
+
+  describe &#39;Database accounts with administrative privileges&#39; do
+    subject { database_accounts_with_administrative_privs }
+    it { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61593</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61593</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61593&#39; do
+  title &quot;Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000017&#39;
+  tag &quot;gid&quot;: &#39;V-61593&#39;
+  tag &quot;rid&quot;: &#39;SV-76083r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67509r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  &quot;
+  tag &quot;fix&quot;: &quot;Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.&quot;
+  describe &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39; do
+    skip &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61595</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>All use of privileged accounts must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of unified auditing policies defined is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of users being audited is expected to include &quot;ALL USERS&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61595</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">All use of privileged accounts must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61595&#39; do
+  title &#39;All use of privileged accounts must be audited.&#39;
+  desc  &quot;This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61595&#39;
+  tag &quot;rid&quot;: &#39;SV-76085r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67511r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  unified_auditing_policies_defined &#x3D; sql.query(&#39;SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  describe &#39;The list of unified auditing policies defined&#39; do
+    subject { unified_auditing_policies_defined }
+    it { should_not be_empty }
+  end
+
+  users_being_audited &#x3D; sql.query(&#39;SELECT unique user_name from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;user_name&#39;)
+
+  describe &#39;The list of users being audited&#39; do
+    subject { users_being_audited }
+    it { should include &#39;ALL USERS&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61597</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61597</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61597&#39; do
+  title &quot;Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.&quot;
+  desc &quot;Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61597&#39;
+  tag &quot;rid&quot;: &#39;SV-76087r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004210&#39;
+  tag &quot;fix_id&quot;: &#39;F-67513r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.&quot;
+  describe &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39; do
+    skip &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61599</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBA role must not be assigned excessive or unauthorized
+  privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: ADMIN1 with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: RDSADMIN with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61599</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBA role must not be assigned excessive or unauthorized
+  privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role &quot;USER PRIVS&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61599&#39; do
+  title &quot;The DBA role must not be assigned excessive or unauthorized
+  privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000019&#39;
+  tag &quot;gid&quot;: &#39;V-61599&#39;
+  tag &quot;rid&quot;: &#39;SV-76089r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67515r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role \&quot;USER PRIVS\&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map&quot;
+  tag &quot;fix&quot;: &quot;Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_privs &#x3D; sql.query(&quot;SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;&quot;).column(&#39;username&#39;).uniq
+  if users_with_admin_privs.empty?
+    impact 0.0
+    describe &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_privs.each do |user|
+      describe &quot;oracle database users: #{user} with administative privileges&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_with_admin_privs&#39;)}
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61601</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61601</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61601&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61601&#39; do
+  title &quot;OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000020&#39;
+  tag &quot;gid&quot;: &#39;V-61601&#39;
+  tag &quot;rid&quot;: &#39;SV-76091r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67517r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS&quot;
+  tag &quot;fix&quot;: &quot;Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should include &#39;run_group &#x3D; nobody&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61603</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must verify account lockouts persist until reset by an
+      administrator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002236
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61603</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must verify account lockouts persist until reset by an
+      administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61603&#39; do
+      title &quot;The DBMS must verify account lockouts persist until reset by an
+      administrator.&quot;
+      desc &quot;Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+      &quot;
+      impact 0.5
+      tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+      tag &quot;gid&quot;: &#39;V-61603&#39;
+      tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+      tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+      tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+      tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+      tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+      tag &quot;false_negatives&quot;: nil
+      tag &quot;false_positives&quot;: nil
+      tag &quot;documentable&quot;: false
+      tag &quot;mitigations&quot;: nil
+      tag &quot;severity_override_guidance&quot;: false
+      tag &quot;potential_impacts&quot;: nil
+      tag &quot;third_party_tools&quot;: nil
+      tag &quot;mitigation_controls&quot;: nil
+      tag &quot;responsibility&quot;: nil
+      tag &quot;ia_controls&quot;: nil
+      tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.&quot;
+      tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+    
+      sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+    
+      query &#x3D; %{
+        SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+      }
+    
+      user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+    
+      user_profiles.each do |profile|
+        next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+        password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+    
+        describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+          subject { password_lock_time }
+          it { should cmp &#39;UNLIMITED&#39; }
+        end
+      end
+      if user_profiles.empty?
+        describe &#39;There are no user profiles, therefore this control is NA&#39; do
+          skip &#39;There are no user profiles, therefore this control is NA&#39;
+        end
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61603&#39; do
+  title &quot;The DBMS must verify account lockouts persist until reset by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed, to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+  tag &quot;gid&quot;: &#39;V-61603&#39;
+  tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+  to a user.
+
+  To see what profile is assigned to a user, enter the query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for password_lock_time - this specifies how long to lock the
+  account after the number of consecutive failed logon attempts reaches the
+  limit. If the value is not UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+  duration:
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61605</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the number of consecutive failed logon attempts to 5.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000044
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61605</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the number of consecutive failed logon attempts to 5.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&amp;USERNAME&quot;
+         This will return the profile name assigned to that user.
+
+         Now check the values assigned to the profile returned from the query above:
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE &quot;&amp;PROFILE_NAME&quot;
+
+         Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;
+
+         (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.  Note: It remains 
+         necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61605&#39; do
+    title &#39;The DBMS must limit the number of consecutive failed logon attempts to 5.&#39;
+    desc &#39;check&#39;, &#39;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&amp;USERNAME&quot;
+         This will return the profile name assigned to that user.
+
+         Now check the values assigned to the profile returned from the query above:
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE &quot;&amp;PROFILE_NAME&quot;
+
+         Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.&#39;
+    desc &#39;fix&#39;, &#39;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;
+
+         (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.  Note: It remains 
+         necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.)&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61605&#39; do
+  title &quot;The DBMS must limit the number of consecutive failed logon attempts to
+  3.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000025&#39;
+  tag &quot;gid&quot;: &#39;V-61605&#39;
+  tag &quot;rid&quot;: &#39;SV-76095r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67521r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000044&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&amp;USERNAME&#39;
+  This will return the profile name assigned to that user.
+
+  Now check the values assigned to the profile returned from the query above:
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE
+  &#39;&amp;PROFILE_NAME&#39;
+
+  Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;
+
+  (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.
+  Note: It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time.first }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61607</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61607</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&lt;username&gt;&quot;
+
+         This will return the profile name assigned to that user.
+
+         The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy 
+         the STIG requirements pertaining to the profile parameters. Oracle recommends that this profile be 
+         customized with any site-specific requirements and assigned to all users where applicable.  
+         Note: It remains necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.
+
+         Now check the values assigned to the profile returned from the query above:
+
+         column profile format a20
+         column limit format a20
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D; &quot;ORA_STIG_PROFILE&quot;;
+
+         Check the settings for failed_login_attempts - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61607&#39; do
+    desc &#39;check&#39;, &#39;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&lt;username&gt;&quot;
+
+         This will return the profile name assigned to that user.
+
+         The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy 
+         the STIG requirements pertaining to the profile parameters. Oracle recommends that this profile be 
+         customized with any site-specific requirements and assigned to all users where applicable.  
+         Note: It remains necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.
+
+         Now check the values assigned to the profile returned from the query above:
+
+         column profile format a20
+         column limit format a20
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D; &quot;ORA_STIG_PROFILE&quot;;
+
+         Check the settings for failed_login_attempts - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;(This addresses both O121-C2-005000 and O121-C2-005200.)
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61607&#39; do
+      sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+    
+      query &#x3D; %{
+        SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+      }
+    
+      user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+    
+      user_profiles.each do |profile|
+        next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+        password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+    
+        describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+          subject { password_lock_time }
+          it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+        end
+      end
+      if user_profiles.empty?
+        describe &#39;There are no user profiles, therefore this control is NA&#39; do
+          skip &#39;There are no user profiles, therefore this control is NA&#39;
+        end
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61607&#39; do
+  title &quot;The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000067-DB-000026&#39;
+  tag &quot;gid&quot;: &#39;V-61607&#39;
+  tag &quot;rid&quot;: &#39;SV-76097r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67523r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for failed_login_attempts - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61613</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61613</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61613&#39; do
+  title &quot;The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.&quot;
+  desc &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000071-DB-000047&#39;
+  tag &quot;gid&quot;: &#39;V-61613&#39;
+  tag &quot;rid&quot;: &#39;SV-76103r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67529r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61615</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must have allocated audit record storage capacity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has allocated audit record storage capacity</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61615</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must have allocated audit record storage capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61615&#39; do
+  title &#39;The DBMS must have allocated audit record storage capacity.&#39;
+  desc  &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000072-DB-000046&#39;
+  tag &quot;gid&quot;: &#39;V-61615&#39;
+  tag &quot;rid&quot;: &#39;SV-76105r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67531r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61617</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61617</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61619</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61619</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61619&#39; do
+  title &quot;A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.&quot;
+  desc &quot;DAC is based on the notion that individual users are \&quot;owners\&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000087-DB-000013&#39;
+  tag &quot;gid&quot;: &#39;V-61619&#39;
+  tag &quot;rid&quot;: &#39;SV-76109r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67535r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)&quot;
+  describe &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39; do
+    skip &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61621</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000169
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61621</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61621&#39; do
+    desc &#39;Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61621&#39; do
+  title &quot;The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system. (e.g., network interface, hard disk, modem, etc.). From an
+  application perspective, certain specific application functionalities may be
+  audited as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations define which application components shall provide auditable
+  events.
+
+      The DBMS must provide auditing for the list of events defined by the
+  organization or risk negatively impacting forensic investigations into
+  malicious behavior in the information system. Audit records can be generated
+  from various components within the information system, such as network
+  interfaces, hard disks, modems, etc. From an application perspective, certain
+  specific application functionalities may be audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000089-DB-000064&#39;
+  tag &quot;gid&quot;: &#39;V-61621&#39;
+  tag &quot;rid&quot;: &#39;SV-76111r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67537r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000169&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61623</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000171
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61623</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61623&#39; do
+  title &quot;The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.&quot;
+  desc  &quot;The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000090-DB-000065&#39;
+  tag &quot;gid&quot;: &#39;V-61623&#39;
+  tag &quot;rid&quot;: &#39;SV-76113r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67539r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000171&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39; do
+    skip &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61625</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61625</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine if auditing is being performed on the 
+    events on the list of auditable events that lie within the scope of Oracle audit capabilities:
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of 
+    information (e.g., classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system-level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - All account creations, modifications, disabling, and terminations.
+
+    If auditing is not being performed for any of these events, this is a finding.
+
+    Notes on Oracle audit capabilities follow.
+
+    Unified Audit supports named audit policies, which are defined using the CREATE AUDIT POLICY statement. 
+    A policy specifies the actions that should be audited and the objects to which it should apply. 
+    If no specific objects are included in the policy definition, it applies to all objects.
+
+    A named policy is enabled using the AUDIT POLICY statement. It can be enabled for all users, for 
+    specific users only, or for all except a specified list of users. The policy can audit successful actions, 
+    unsuccessful actions, or both.
+
+    Verifying existing audit policy: existing Unified Audit policies are listed in the view AUDIT_UNIFIED_POLICIES. 
+    The AUDIT_OPTION column contains one of the actions specified in a CREATE AUDIT POLICY statement. 
+    The AUDIT_OPTION_TYPE column contains &quot;STANDARD ACTION&quot; for a policy that applies to all objects or 
+    &quot;OBJECT ACTION&quot; for a policy that audits actions on a specific object.
+
+    select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; and 
+    AUDIT_OPTION_TYPE&#x3D;&quot;STANDARD ACTION&quot;;
+
+    To find policies that audit privilege grants on specific objects:
+
+    select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; 
+    and AUDIT_OPTION_TYPE&#x3D;&quot;OBJECT ACTION&quot;;
+
+    The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are enabled. The ENABLED_OPT 
+    and USER_NAME columns show the users for whom the policy is enabled or &quot;ALL USERS&quot;. The SUCCESS and FAILURE 
+    columns indicate if the policy is enabled for successful or unsuccessful actions, respectively.
+
+    select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from SYS.AUDIT_UNIFIED_ENABLED_POLICIES where 
+    POLICY_NAME&#x3D;&quot;POLICY1&quot;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing settings to include auditing of events on the selected list 
+    of auditable events.
+
+    1) Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security 
+    levels, or categories of information (e.g., classification levels)
+
+    To audit granting and revocation of any privilege:
+    create audit policy policy1 actions grant;
+    create audit policy policy2 actions revoke;
+
+    To audit grants of object privileges on a specific object:
+    create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+    If Oracle Label Security is enabled, this will audit all OLS administrative actions:
+    create audit policy policy4 actions component &#x3D; OLS all;
+
+    2) Successful and unsuccessful logon attempts, privileged activities or other system-level access
+ 
+    To audit all user logon attempts:
+    create audit policy policy5 actions logon;
+
+    To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+    audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+    3) Starting and ending time for user access to the system, concurrent logons from different 
+    workstations
+
+    This policy will audit all logon and logoff events. An individual session is identified in the 
+    UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID, SESSIONID) and the start and end time will be 
+    indicated by the EVENT_TIMESTAMP of the logon and logoff events:
+
+    create audit policy policy6 actions logon, logoff;
+
+    4) Successful and unsuccessful accesses to objects
+
+    To audit all accesses to a specific table:
+    create audit policy policy7 actions select, insert, delete, alter on &lt;schema&gt;.&lt;object&gt;; 
+
+    Different actions are defined for other object types. To audit all supported actions on a specific object:
+    create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+    5) All program initiations
+
+    To audit execution of any PL&#x2F;SQL program unit:
+    create audit policy policy9 actions EXECUTE;
+
+    To audit execution of a specific function, procedure, or package:
+    create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+    6) All direct access to the information system
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    7) All account creations, modifications, disabling, and terminations
+
+    To audit all user administration actions:
+    create audit policy policy11 actions create user, alter user, drop user, change password;
+
+    8) All kernel module loads, unloads, and restarts
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    9) All database parameter changes
+
+    To audit any database parameter changes, dynamic or static:
+    create audit policy policy12 actions alter database, alter system, create spfile;
+
+    Applying the Policy
+
+    The following command will enable the policy in all database sessions and audit both 
+    successful and unsuccessful actions: audit policy policy1; 
+
+    To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+    audit policy policy1 whenever not successful;
+
+    Either command above can be limited to only database sessions started by a specific user as 
+    follows:
+    audit policy policy1 by &lt;user&gt;;
+    audit policy policy1 by &lt;user&gt; whenever not successful;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61625&#39; do
+    title &#39;The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.&#39;
+
+    desc &#39;Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.&#39;
+    
+    desc &#39;check&#39;, &#39;Check DBMS settings to determine if auditing is being performed on the 
+    events on the list of auditable events that lie within the scope of Oracle audit capabilities:
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of 
+    information (e.g., classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system-level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - All account creations, modifications, disabling, and terminations.
+
+    If auditing is not being performed for any of these events, this is a finding.
+
+    Notes on Oracle audit capabilities follow.
+
+    Unified Audit supports named audit policies, which are defined using the CREATE AUDIT POLICY statement. 
+    A policy specifies the actions that should be audited and the objects to which it should apply. 
+    If no specific objects are included in the policy definition, it applies to all objects.
+
+    A named policy is enabled using the AUDIT POLICY statement. It can be enabled for all users, for 
+    specific users only, or for all except a specified list of users. The policy can audit successful actions, 
+    unsuccessful actions, or both.
+
+    Verifying existing audit policy: existing Unified Audit policies are listed in the view AUDIT_UNIFIED_POLICIES. 
+    The AUDIT_OPTION column contains one of the actions specified in a CREATE AUDIT POLICY statement. 
+    The AUDIT_OPTION_TYPE column contains &quot;STANDARD ACTION&quot; for a policy that applies to all objects or 
+    &quot;OBJECT ACTION&quot; for a policy that audits actions on a specific object.
+
+    select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; and 
+    AUDIT_OPTION_TYPE&#x3D;&quot;STANDARD ACTION&quot;;
+
+    To find policies that audit privilege grants on specific objects:
+
+    select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; 
+    and AUDIT_OPTION_TYPE&#x3D;&quot;OBJECT ACTION&quot;;
+
+    The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are enabled. The ENABLED_OPT 
+    and USER_NAME columns show the users for whom the policy is enabled or &quot;ALL USERS&quot;. The SUCCESS and FAILURE 
+    columns indicate if the policy is enabled for successful or unsuccessful actions, respectively.
+
+    select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from SYS.AUDIT_UNIFIED_ENABLED_POLICIES where 
+    POLICY_NAME&#x3D;&quot;POLICY1&quot;;&#39;
+
+    desc &#39;fix&#39;, &#39;Configure the DBMS\&#39;s auditing settings to include auditing of events on the selected list 
+    of auditable events.
+
+    1) Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security 
+    levels, or categories of information (e.g., classification levels)
+
+    To audit granting and revocation of any privilege:
+    create audit policy policy1 actions grant;
+    create audit policy policy2 actions revoke;
+
+    To audit grants of object privileges on a specific object:
+    create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+    If Oracle Label Security is enabled, this will audit all OLS administrative actions:
+    create audit policy policy4 actions component &#x3D; OLS all;
+
+    2) Successful and unsuccessful logon attempts, privileged activities or other system-level access
+ 
+    To audit all user logon attempts:
+    create audit policy policy5 actions logon;
+
+    To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+    audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+    3) Starting and ending time for user access to the system, concurrent logons from different 
+    workstations
+
+    This policy will audit all logon and logoff events. An individual session is identified in the 
+    UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID, SESSIONID) and the start and end time will be 
+    indicated by the EVENT_TIMESTAMP of the logon and logoff events:
+
+    create audit policy policy6 actions logon, logoff;
+
+    4) Successful and unsuccessful accesses to objects
+
+    To audit all accesses to a specific table:
+    create audit policy policy7 actions select, insert, delete, alter on &lt;schema&gt;.&lt;object&gt;; 
+
+    Different actions are defined for other object types. To audit all supported actions on a specific object:
+    create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+    5) All program initiations
+
+    To audit execution of any PL&#x2F;SQL program unit:
+    create audit policy policy9 actions EXECUTE;
+
+    To audit execution of a specific function, procedure, or package:
+    create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+    6) All direct access to the information system
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    7) All account creations, modifications, disabling, and terminations
+
+    To audit all user administration actions:
+    create audit policy policy11 actions create user, alter user, drop user, change password;
+
+    8) All kernel module loads, unloads, and restarts
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    9) All database parameter changes
+
+    To audit any database parameter changes, dynamic or static:
+    create audit policy policy12 actions alter database, alter system, create spfile;
+
+    Applying the Policy
+
+    The following command will enable the policy in all database sessions and audit both 
+    successful and unsuccessful actions: audit policy policy1; 
+
+    To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+    audit policy policy1 whenever not successful;
+
+    Either command above can be limited to only database sessions started by a specific user as 
+    follows:
+    audit policy policy1 by &lt;user&gt;;
+    audit policy policy1 by &lt;user&gt; whenever not successful;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61625&#39; do
+  title &quot;The DBMS must generate audit records for the DoD-selected list of
+  auditable events, to the extent such information is available.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system, such as network interfaces, hard disks, modems, etc. From
+  an application perspective, certain specific application functionalities may be
+  audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000091-DB-000066&#39;
+  tag &quot;gid&quot;: &#39;V-61625&#39;
+  tag &quot;rid&quot;: &#39;SV-76115r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67541r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000172&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if auditing is being performed
+  on the events on the DoD-selected list of auditable events that lie within the
+  scope of Oracle audit capabilities:
+  - Successful and unsuccessful attempts to access, modify, or delete privileges,
+  security objects, security levels, or categories of information (e.g.,
+  classification levels).
+  - Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+  - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+  - Successful and unsuccessful accesses to objects.
+  - All program initiations.
+  - All account creations, modifications, disabling, and terminations.
+
+  If auditing is not being performed for any of these events, this is a finding.
+
+  Notes on Oracle audit capabilities follow.
+
+  Unified Audit supports named audit policies, which are defined using the CREATE
+  AUDIT POLICY statement. A policy specifies the actions that should be audited
+  and the objects to which it should apply. If no specific objects are included
+  in the policy definition, it applies to all objects.
+
+  A named policy is enabled using the AUDIT POLICY statement. It can be enabled
+  for all users, for specific users only, or for all except a specified list of
+  users. The policy can audit successful actions, unsuccessful actions, or both.
+
+  Verifying existing audit policy:  existing Unified Audit policies are listed in
+  the view AUDIT_UNIFIED_POLICIES. The AUDIT_OPTION column contains one of the
+  actions specified in a CREATE AUDIT POLICY statement. The AUDIT_OPTION_TYPE
+  column contains &#39;STANDARD ACTION&#39; for a policy that applies to all objects or
+  &#39;OBJECT ACTION&#39; for a policy that audits actions on a specific object.
+
+  select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&#39;GRANT&#39;
+  and AUDIT_OPTION_TYPE&#x3D;&#39;STANDARD ACTION&#39;;
+
+  To find policies that audit privilege grants on specific objects:
+
+  select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;
+
+  The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are
+  enabled. The ENABLED_OPT and USER_NAME columns show the users for whom the
+  policy is enabled or &#39;ALL USERS&#39;. The SUCCESS and FAILURE columns indicate if
+  the policy is enabled for successful or unsuccessful actions, respectively.
+
+  select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from
+  SYS.AUDIT_UNIFIED_ENABLED_POLICIES where POLICY_NAME&#x3D;&#39;POLICY1&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing settings to include auditing of
+  events on the DoD-selected list of auditable events.
+
+  1) Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g., classification levels)
+
+  To audit granting and revocation of any privilege:
+  create audit policy policy1 actions grant;
+  create audit policy policy2 actions revoke;
+
+  To audit grants of object privileges on a specific object:
+  create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+  If Oracle Label Security is enabled, this will audit all OLS administrative
+  actions:
+  create audit policy policy4 actions component &#x3D; OLS all;
+
+  2) Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+
+  To audit all user logon attempts:
+  create audit policy policy5 actions logon;
+
+  To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+  audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+  3) Starting and ending time for user access to the system, concurrent logons
+  from different workstations
+
+  This policy will audit all logon and logoff events. An individual session is
+  identified in the UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID,
+  SESSIONID) and the start and end time will be indicated by the EVENT_TIMESTAMP
+  of the logon and logoff events:
+  create audit policy policy6 actions logon, logoff;
+
+  4) Successful and unsuccessful accesses to objects
+
+  To audit all accesses to a specific table:
+  create audit policy policy7 actions select, insert, delete, alter on
+  &lt;schema&gt;.&lt;object&gt;;
+
+  Different actions are defined for other object types. To audit all supported
+  actions on a specific object:
+  create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+  5) All program initiations
+
+  To audit execution of any PL&#x2F;SQL program unit:
+  create audit policy policy9 actions EXECUTE;
+
+  To audit execution of a specific function, procedure, or package:
+  create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+  6) All direct access to the information system
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  7) All account creations, modifications, disabling, and terminations
+
+  To audit all user administration actions:
+  create audit policy policy11 actions create user, alter user, drop user, change
+  password;
+
+  8) All kernel module loads, unloads, and restarts
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  9) All database parameter changes
+
+  To audit any database parameter changes, dynamic or static:
+  create audit policy policy12 actions alter database, alter system, create
+  spfile;
+
+  Applying the Policy
+
+  The following command will enable the policy in all database sessions and audit
+  both successful and unsuccessful actions:
+  audit policy policy1;
+
+  To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+  audit policy policy1 whenever not successful;
+
+  Either command above can be limited to only database sessions started by a
+  specific user as follows:
+  audit policy policy1 by &lt;user&gt;;
+  audit policy policy1 by &lt;user&gt; whenever not successful;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_policies_auditing_grant_privileges &#x3D; sql.query(&quot;select DISTINCT POLICY_NAME from AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;&quot;).column(&#39;policy_name&#39;)
+  unified_audit_policies_enabled &#x3D; sql.query(&#39;select POLICY_NAME from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The audit policies that audit privilege grants on specific objects&#39; do
+      subject { audit_policies_auditing_grant_privileges }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The list of unified audit policies enabled&#39; do
+      subject { unified_audit_policies_enabled }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61627</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61627</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61627&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000095-DB-000039&#39;
+  tag &quot;gid&quot;: &#39;V-61627&#39;
+  tag &quot;rid&quot;: &#39;SV-76117r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67543r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000130&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61631</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000131
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61631</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61631&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000096-DB-000040&#39;
+  tag &quot;gid&quot;: &#39;V-61631&#39;
+  tag &quot;rid&quot;: &#39;SV-76121r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67881r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000131&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61633</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000132
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61633</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61633&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000097-DB-000041&#39;
+  tag &quot;gid&quot;: &#39;V-61633&#39;
+  tag &quot;rid&quot;: &#39;SV-76123r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67545r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000132&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61635</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61635</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61635&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000098-DB-000042&#39;
+  tag &quot;gid&quot;: &#39;V-61635&#39;
+  tag &quot;rid&quot;: &#39;SV-76125r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67547r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000133&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61637</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000134
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61637</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61637&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000099-DB-000043&#39;
+  tag &quot;gid&quot;: &#39;V-61637&#39;
+  tag &quot;rid&quot;: &#39;SV-76127r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67549r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000134&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61639</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001487
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61639</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61639&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.&quot;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000100-DB-000201&#39;
+  tag &quot;gid&quot;: &#39;V-61639&#39;
+  tag &quot;rid&quot;: &#39;SV-76129r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67551r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001487&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61641</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61641</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &quot;OS&quot;, &quot;DB&quot;, &quot;DB,EXTENDED&quot;, &quot;XML&quot; or
+  &quot;XML,EXTENDED&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61641&#39; do
+  title &quot;The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000101-DB-000044&#39;
+  tag &quot;gid&quot;: &#39;V-61641&#39;
+  tag &quot;rid&quot;: &#39;SV-76131r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67553r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000135&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be \&quot;OS\&quot;, \&quot;DB\&quot;, \&quot;DB,EXTENDED\&quot;, \&quot;XML\&quot; or
+  \&quot;XML,EXTENDED\&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+  fga_audit_events &#x3D; sql.query(&quot; SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;&quot;).column(&#39;TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The oracle database fine grained  auditing events captured&#39; do
+      subject { fga_audit_events }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61643</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001855
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61643</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61643&#39; do
+  title &quot;The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000103-DB-000050&#39;
+  tag &quot;gid&quot;: &#39;V-61643&#39;
+  tag &quot;rid&quot;: &#39;SV-76133r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67555r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001855&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1&quot;
+
+  describe &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61645</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide a real-time alert when organization-defined
+  audit failure events occur.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001858
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61645</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide a real-time alert when organization-defined
+  audit failure events occur.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61645&#39; do
+  title &quot;The system must provide a real-time alert when organization-defined
+  audit failure events occur.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000104-DB-000051&#39;
+  tag &quot;gid&quot;: &#39;V-61645&#39;
+  tag &quot;rid&quot;: &#39;SV-76135r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67559r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001858&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)&quot;
+  describe &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39; do
+    skip &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61647</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must alert designated organizational officials in the event
+  of an audit processing failure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000139
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61647</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must alert designated organizational officials in the event
+  of an audit processing failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61647&#39; do
+  title &quot;The system must alert designated organizational officials in the event
+  of an audit processing failure.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000108-DB-000048&#39;
+  tag &quot;gid&quot;: &#39;V-61647&#39;
+  tag &quot;rid&quot;: &#39;SV-76137r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67561r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000139&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.&quot;
+  describe &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39; do
+    skip &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61649</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000158
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61649</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61649&#39; do
+  title &quot;The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.&quot;
+  desc &quot;Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000055&#39;
+  tag &quot;gid&quot;: &#39;V-61649&#39;
+  tag &quot;rid&quot;: &#39;SV-76139r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67563r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.&quot;
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61651</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Attempts to bypass access controls must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000158
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61651</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Attempts to bypass access controls must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col &quot;tmp tba&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace &quot;TMP TBS&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61651&#39; do
+  title &#39;Attempts to bypass access controls must be audited.&#39;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000056&#39;
+  tag &quot;gid&quot;: &#39;V-61651&#39;
+  tag &quot;rid&quot;: &#39;SV-76141r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67565r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col \&quot;tmp tba\&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace \&quot;TMP TBS\&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER&quot;
+  tag &quot;fix&quot;: &quot;Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61653</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from any type of
+  unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000162
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61653</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from any type of
+  unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61653&#39; do
+  title &quot;The system must protect audit information from any type of
+  unauthorized access.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000118-DB-000059&#39;
+  tag &quot;gid&quot;: &#39;V-61653&#39;
+  tag &quot;rid&quot;: &#39;SV-76143r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67567r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000162&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61655</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from unauthorized
+  modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000163
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61655</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from unauthorized
+  modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61655&#39; do
+  title &quot;The system must protect audit information from unauthorized
+  modification.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000119-DB-000060&#39;
+  tag &quot;gid&quot;: &#39;V-61655&#39;
+  tag &quot;rid&quot;: &#39;SV-76145r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67569r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000163&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61657</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from unauthorized deletion.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000164
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61657</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from unauthorized deletion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61657&#39; do
+  title &#39;The system must protect audit information from unauthorized deletion.&#39;
+  desc  &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000120-DB-000061&#39;
+  tag &quot;gid&quot;: &#39;V-61657&#39;
+  tag &quot;rid&quot;: &#39;SV-76147r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67571r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000164&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61659</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001493
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61659</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61659&#39; do
+  title &#39;The system must protect audit tools from unauthorized access.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000121-DB-000202&#39;
+  tag &quot;gid&quot;: &#39;V-61659&#39;
+  tag &quot;rid&quot;: &#39;SV-76149r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67573r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001493&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61661</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001494
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61661</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61661&#39; do
+  title &#39;The system must protect audit tools from unauthorized modification.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000122-DB-000203&#39;
+  tag &quot;gid&quot;: &#39;V-61661&#39;
+  tag &quot;rid&quot;: &#39;SV-76151r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67575r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001494&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61663</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized deletion.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001495
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61663</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized deletion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61663&#39; do
+  title &#39;The system must protect audit tools from unauthorized deletion.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000123-DB-000204&#39;
+  tag &quot;gid&quot;: &#39;V-61663&#39;
+  tag &quot;rid&quot;: &#39;SV-76153r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67577r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001495&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61665</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001348
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61665</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61665&#39; do
+  title &quot;The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.&quot;
+  desc &quot;Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000125-DB-000170&#39;
+  tag &quot;gid&quot;: &#39;V-61665&#39;
+  tag &quot;rid&quot;: &#39;SV-76155r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67579r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001348&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61667</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001350
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61667</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY &quot;password&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61667&#39; do
+  title &quot;The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000126-DB-000171&#39;
+  tag &quot;gid&quot;: &#39;V-61667&#39;
+  tag &quot;rid&quot;: &#39;SV-76157r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67581r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001350&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY \&quot;password\&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE&quot;
+  describe &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61669</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001351
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61669</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61669&#39; do
+  title &quot;The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000127-DB-000172&#39;
+  tag &quot;gid&quot;: &#39;V-61669&#39;
+  tag &quot;rid&quot;: &#39;SV-76159r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67583r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-001351&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61671</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000345
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61671</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61671&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61671&#39; do
+  title &quot;The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.&quot;
+  desc &quot;When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000128-DB-000086&#39;
+  tag &quot;gid&quot;: &#39;V-61671&#39;
+  tag &quot;rid&quot;: &#39;SV-76161r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67585r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000345&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61673</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database objects must be owned by accounts authorized for ownership.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61673</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database objects must be owned by accounts authorized for ownership.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61673&#39; do
+  title &#39;Database objects must be owned by accounts authorized for ownership.&#39;
+  desc  &quot;Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000200&#39;
+  tag &quot;gid&quot;: &#39;V-61673&#39;
+  tag &quot;rid&quot;: &#39;SV-76163r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67587r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;&quot;
+  tag &quot;fix&quot;: &quot;Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_object_owners &#x3D; sql.query(&#39;select DISTINCT owner from dba_objects;&#39;).column(&#39;owner&#39;).uniq
+  if dba_object_owners .empty?
+    impact 0.0
+    describe &#39;There are no oracle dba object owners, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle dba object owners, control N&#x2F;A&#39;
+    end
+  else
+    dba_object_owners .each do |owner|
+      describe &quot;oracle datbase object owner: #{owner}&quot; do
+        subject { owner }
+        it { should be_in input(&#39;allowed_dbaobject_owners&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61675</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce requirements for remote connections to the
+  information system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61675</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce requirements for remote connections to the
+  information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review organization&#39;s access control policies and procedures addressing remote 
+    access to the information system.
+
+    If remote connections are not allowed by the organization, this is NA. (Note that &quot;remote&quot; means 
+    &quot;from outside the CMS network&quot; and that connections via approved Virtual Private Networks (VPNs) 
+    are considered to be inside the CMS network.)
+
+    Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify access controls and 
+    auditing settings exist and they enforce the requirements for remote access defined by the organization.
+
+    If access controls and auditing do not exist or do not fully enforce the requirements defined in the 
+    organization&#39;s policies and procedures, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61675&#39; do
+    desc &#39;check&#39;, &#39;Review organization\&#39;s access control policies and procedures addressing remote 
+    access to the information system.
+
+    If remote connections are not allowed by the organization, this is NA. (Note that &quot;remote&quot; means 
+    &quot;from outside the CMS network&quot; and that connections via approved Virtual Private Networks (VPNs) 
+    are considered to be inside the CMS network.)
+
+    Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify access controls and 
+    auditing settings exist and they enforce the requirements for remote access defined by the organization.
+
+    If access controls and auditing do not exist or do not fully enforce the requirements defined in the 
+    organization\&#39;s policies and procedures, this is a finding.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61675&#39; do
+  title &quot;The DBMS must enforce requirements for remote connections to the
+  information system.&quot;
+  desc &quot;Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000140-DB-000033&#39;
+  tag &quot;gid&quot;: &#39;V-61675&#39;
+  tag &quot;rid&quot;: &#39;SV-76165r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67589r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review organization&#39;s access control policies and procedures
+  addressing remote access to the information system.
+
+  If remote connections are not allowed by the organization, this is NA. (Note
+  that \&quot;remote\&quot; means \&quot;from outside the DoD Information Network (DoDIN)\&quot; and
+  that connections via approved Virtual Private Networks (VPNs) are considered to
+  be inside the DoDIN.)
+
+  Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify
+  access controls and auditing settings exist and they enforce the requirements
+  for remote access defined by the organization.
+
+  If access controls and auditing do not exist or do not fully enforce the
+  requirements defined in the organization&#39;s policies and procedures, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61677</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Default demonstration and sample databases, database objects, and
+  applications must be removed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle default sample schema user accounts is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61677</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Default demonstration and sample databases, database objects, and
+  applications must be removed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61677&#39; do
+  title &quot;Default demonstration and sample databases, database objects, and
+  applications must be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000090&#39;
+  tag &quot;gid&quot;: &#39;V-61677&#39;
+  tag &quot;rid&quot;: &#39;SV-76167r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67591r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sample_schema_user_accounts &#x3D; sql.query(&quot;select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);&quot;).column(&#39;username&#39;)
+
+  describe &#39;The list of oracle default sample schema user accounts&#39; do
+    subject { sample_schema_user_accounts }
+    it { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61679</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unused database components, DBMS software, and database objects must
+  be removed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components: Oracle Text is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61679</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unused database components, DBMS software, and database objects must
+  be removed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61679&#39; do
+  title &quot;Unused database components, DBMS software, and database objects must
+  be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000091&#39;
+  tag &quot;gid&quot;: &#39;V-61679&#39;
+  tag &quot;rid&quot;: &#39;SV-76169r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67593r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault&quot;
+  tag &quot;fix&quot;: &quot;If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components &#x3D; sql.query(&quot;SELECT comp_id, comp_name, version, status from dba_registry where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);&quot;).column(&#39;comp_name&#39;).uniq
+  if list_of_installed_components.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components installed, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components installed, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components.each do |component|
+      describe &quot;The installed oracle database components: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61681</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: OLAP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61681</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61681&#39; do
+  title &quot;Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000092&#39;
+  tag &quot;gid&quot;: &#39;V-61681&#39;
+  tag &quot;rid&quot;: &#39;SV-76171r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67595r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components_integrated_into_dbms &#x3D; sql.query(&quot;SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );&quot;).column(&#39;parameter&#39;).uniq
+  if list_of_installed_components_integrated_into_dbms.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components integrated into the DBMS, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components integrated into the DBMS, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components_integrated_into_dbms.each do |component|
+      describe &quot;The installed oracle database components integrated into the DBMS: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components_integrated_into_dbms&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61683</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of external executables must be authorized.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61683</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of external executables must be authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61683&#39; do
+  title &#39;Use of external executables must be authorized.&#39;
+  desc  &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61683&#39;
+  tag &quot;rid&quot;: &#39;SV-76173r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67597r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;&quot;
+  tag &quot;fix&quot;: &quot;Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;&quot;).column(&#39;owner&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61685</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to external executables must be disabled or restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61685</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to external executables must be disabled or restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference &quot;extproc&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference &quot;extproc&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to &quot;extproc&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61685&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61685&#39; do
+  title &#39;Access to external executables must be disabled or restricted.&#39;
+  desc  &quot;The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61685&#39;
+  tag &quot;rid&quot;: &#39;SV-76175r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011810&#39;
+  tag &quot;fix_id&quot;: &#39;F-67599r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference \&quot;extproc\&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference \&quot;extproc\&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to \&quot;extproc\&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;\&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages\&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.&quot;
+  tag &quot;fix&quot;: &quot;If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should_not include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should_not include &#39;run_group &#x3D; nobody&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;hs&#x2F;admin&#x2F;extproc.ora&quot; do
+    it { should exist }
+    its(&#39;content&#39;) { should match &#x2F;^EXTPROC_DLLS&#x3D;ONLY:\s*\w*&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61687</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000382
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61687</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings for functions, ports, protocols, and services that are not 
+    approved.
+
+    If any are found, this is a finding.
+
+    - - - - -
+    In the Oracle database, the communications with the database and incoming requests are performed by 
+    the Oracle Listener.  The Oracle Listener listens on a specific port or ports for connections to a 
+    specific database.  The Oracle Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin 
+    directory.  To check the ports and protocols in use, go to that directory and review the SQLNET.ora, 
+    LISTENER.ora, and the TNSNAMES.ora. If protocols or ports are in use that are not authorized, this 
+    is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61687&#39; do
+    desc &#39;check&#39;, &#39;Review the DBMS settings for functions, ports, protocols, and services that are not 
+    approved.
+
+    If any are found, this is a finding.
+
+    - - - - -
+    In the Oracle database, the communications with the database and incoming requests are performed by 
+    the Oracle Listener.  The Oracle Listener listens on a specific port or ports for connections to a 
+    specific database.  The Oracle Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin 
+    directory.  To check the ports and protocols in use, go to that directory and review the SQLNET.ora, 
+    LISTENER.ora, and the TNSNAMES.ora. If protocols or ports are in use that are not authorized, this 
+    is a finding.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61687&#39; do
+  title &quot;The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000142-DB-000094&#39;
+  tag &quot;gid&quot;: &#39;V-61687&#39;
+  tag &quot;rid&quot;: &#39;SV-76177r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67601r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000382&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings for functions, ports, protocols, and
+  services that are not approved.
+
+  If any are found, this is a finding.
+
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  - - - - -
+  In the Oracle database, the communications with the database and incoming
+  requests are performed by the Oracle Listener.  The Oracle Listener listens on
+  a specific port or ports for connections to a specific database.  The Oracle
+  Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.  To check the ports and protocols in use, go to  that directory and
+  review the SQLNET.ora, LISTENER.ora, and the TNSNAMES.ora.  If protocols or
+  ports are in use that are not authorized, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61689</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-10 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000553
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61689</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-10 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61689&#39; do
+  title &quot;Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.&quot;
+  desc &quot;Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000144-DB-000101&#39;
+  tag &quot;gid&quot;: &#39;V-61689&#39;
+  tag &quot;rid&quot;: &#39;SV-76179r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67603r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000553&#39;]
+  tag &quot;nist&quot;: [&#39;CP-10 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.&quot;
+  tag &quot;fix&quot;: &quot;Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.&quot;
+  describe &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39; do
+    skip &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61693</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle must back up user-level information per a defined frequency.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Oracle backs up user-level information per a defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61693</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle must back up user-level information per a defined frequency.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61693&#39; do
+    desc &#39;Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61693&#39; do
+  title &#39;Oracle must back up user-level information per a defined frequency.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Databases that do not backup information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000095&#39;
+  tag &quot;gid&quot;: &#39;V-61693&#39;
+  tag &quot;rid&quot;: &#39;SV-76183r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67609r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)&quot;
+  tag &quot;fix&quot;: &quot;Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.&quot;
+  describe &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39; do
+    skip &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61695</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database backup procedures must be defined, documented, and
+  implemented.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61695</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database backup procedures must be defined, documented, and
+  implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file &quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement database backup procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61695&#39; do
+    desc &#39;Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61695&#39; do
+  title &quot;Database backup procedures must be defined, documented, and
+  implemented.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Database backups provide the required means to restore databases after
+  compromise or loss. Backups help reduce the vulnerability to unauthorized
+  access or hardware loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000096&#39;
+  tag &quot;gid&quot;: &#39;V-61695&#39;
+  tag &quot;rid&quot;: &#39;SV-76185r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67611r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file \&quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1\&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3&quot;
+  tag &quot;fix&quot;: &#39;Develop, document, and implement database backup procedures.&#39;
+  describe &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39; do
+    skip &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61697</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61697</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61697&#39; do
+    desc &#39;Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61697&#39; do
+  title &quot;Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency.  This includes data stored on file
+  systems, within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Problems with backup procedures or backup media may not be discovered until
+  after a recovery is needed. Testing and verification of procedures provides the
+  opportunity to discover oversights, conflicts, or other issues in the backup
+  procedures or use of media designed to be used.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000097&#39;
+  tag &quot;gid&quot;: &#39;V-61697&#39;
+  tag &quot;rid&quot;: &#39;SV-76187r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67613r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.&quot;
+  describe &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39; do
+    skip &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61699</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS backup and restoration files must be protected from unauthorized
+  access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61699</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS backup and restoration files must be protected from unauthorized
+  access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61699&#39; do
+    desc &#39;Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS\&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61699&#39; do
+  title &quot;DBMS backup and restoration files must be protected from unauthorized
+  access.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Lost or compromised DBMS backup and restoration files may lead to not only
+  the loss of data, but also the unauthorized access to sensitive data. Backup
+  files need the same protections against unauthorized access when stored on
+  backup media as when online and actively in use by the database system. In
+  addition, the backup media needs to be protected against physical loss. Most
+  DBMS&#39;s maintain online copies of critical control files to provide transparent
+  or easy recovery from hard disk loss or other interruptions to database
+  operation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000098&#39;
+  tag &quot;gid&quot;: &#39;V-61699&#39;
+  tag &quot;rid&quot;: &#39;SV-76189r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67615r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.&quot;
+  tag &quot;fix&quot;: &quot;Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.&quot;
+  describe &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39; do
+    skip &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61701</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000537
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61701</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61701&#39; do
+  title &quot;DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000099&#39;
+  tag &quot;gid&quot;: &#39;V-61701&#39;
+  tag &quot;rid&quot;: &#39;SV-76191r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67617r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.&quot;
+  describe &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39; do
+    skip &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61703</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for network access to
+  privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000765
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61703</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for network access to
+  privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access 
+    mechanism settings to determine whether users logging on to privileged accounts via a network are 
+    required to use multifactor authentication.
+
+    If users logging on to privileged accounts via a network are not required to use multifactor 
+    authentication, this is a finding.
+
+    Use authentication to prove the identities of users who are attempting to log on to the database. 
+    Authenticating user identity is imperative in distributed environments, without which there can be 
+    little confidence in network security. Passwords are the most common means of authentication. Oracle 
+    Database enables strong authentication with Oracle authentication adapters that support various 
+    third-party authentication services, including TLS with digital certificates, as well as Smart Cards (PIV).
+
+    If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the following, TLS is enabled. 
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the 
+    supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or 
+    differently located sqlnet.ora files.)
+
+    SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+    SSL_VERSION &#x3D; 1.2 or 1.1
+    SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+    WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+    (METHOD &#x3D; FILE)
+    (METHOD_DATA &#x3D;
+    (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+    )
+    )
+
+    SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+    ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+    Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for network users logging on to privileged accounts. 
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61703&#39; do
+    desc &#39;check&#39;, &#39;Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access 
+    mechanism settings to determine whether users logging on to privileged accounts via a network are 
+    required to use multifactor authentication.
+
+    If users logging on to privileged accounts via a network are not required to use multifactor 
+    authentication, this is a finding.
+
+    Use authentication to prove the identities of users who are attempting to log on to the database. 
+    Authenticating user identity is imperative in distributed environments, without which there can be 
+    little confidence in network security. Passwords are the most common means of authentication. Oracle 
+    Database enables strong authentication with Oracle authentication adapters that support various 
+    third-party authentication services, including TLS with digital certificates, as well as Smart Cards (PIV).
+
+    If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the following, TLS is enabled. 
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the 
+    supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or 
+    differently located sqlnet.ora files.)
+
+    SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+    SSL_VERSION &#x3D; 1.2 or 1.1
+    SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+    WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+    (METHOD &#x3D; FILE)
+    (METHOD_DATA &#x3D;
+    (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+    )
+    )
+
+    SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+    ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+    Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use one or the other.&#39;
+  
+    desc &#39;fix&#39;, &#39;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for network users logging on to privileged accounts. 
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61703&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61703&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000149-DB-000104&#39;
+  tag &quot;gid&quot;: &#39;V-61703&#39;
+  tag &quot;rid&quot;: &#39;SV-76193r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67619r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000765&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts via a network are not required to
+  use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates,
+  as well as Smart Cards (CAC, PIV).
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled. (Note: This assumes that a single sqlnet.ora file,
+  in the default location, is in use. Please see the supplemental file
+  \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or
+  differently located sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+  (SOURCE &#x3D;
+  (METHOD &#x3D; FILE)
+  (METHOD_DATA &#x3D;
+  (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+  )
+  )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61705</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000766
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61705</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to 
+    require multifactor authentication for network users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61705&#39; do
+    desc &#39;fix&#39;, &#39;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to 
+    require multifactor authentication for network users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61705&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61705&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000150-DB-000105&#39;
+  tag &quot;gid&quot;: &#39;V-61705&#39;
+  tag &quot;rid&quot;: &#39;SV-76195r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67621r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000766&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61707</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for local access to
+  privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000767
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61707</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for local access to
+  privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61707&#39; do
+    desc &#39;fix&#39;, &#39;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61707&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61707&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000151-DB-000106&#39;
+  tag &quot;gid&quot;: &#39;V-61707&#39;
+  tag &quot;rid&quot;: &#39;SV-76197r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67623r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000767&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61709</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000768
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61709</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to non-privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61709&#39; do
+    desc &#39;fix&#39;, &#39;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to non-privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61709&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61709&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000152-DB-000107&#39;
+  tag &quot;gid&quot;: &#39;V-61709&#39;
+  tag &quot;rid&quot;: &#39;SV-76199r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67625r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000768&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE &#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)))&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61711</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000770
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61711</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (5), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61711&#39; do
+  desc &#39;Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61711&#39; do
+  title &quot;The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.&quot;
+  desc &quot;To assure individual accountability and prevent unauthorized access,
+  application users (and any processes acting on behalf of users) must be
+  individually identified and authenticated.
+
+      A shared authenticator is a generic account used by multiple individuals.
+  Use of a shared authenticator alone does not uniquely identify individual
+  users. An example of a shared authenticator is the UNIX OS &#39;root&#39; user account,
+  a Windows &#39;administrator&#39; account, an &#39;SA&#39; account, or a &#39;helpdesk&#39; account.
+
+      For example, the UNIX and Windows operating systems offer a &#39;switch user&#39;
+  capability allowing users to authenticate with their individual credentials
+  and, when needed, &#39;switch&#39; to the administrator role. This method provides for
+  unique individual authentication prior to using a shared authenticator.
+
+      Some applications may not have the need to provide a group authenticator;
+  this is considered a matter of application design. In those instances where the
+  application design includes the use of a shared authenticator, this requirement
+  will apply.
+
+      There may also be instances when specific user actions need to be performed
+  on the information system without unique user identification or authentication.
+  An example of this type of access is a web server which contains publicly
+  releasable information. These types of accesses are allowed but must be
+  explicitly identified and documented by the organization.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000153-DB-000108&#39;
+  tag &quot;gid&quot;: &#39;V-61711&#39;
+  tag &quot;rid&quot;: &#39;SV-76201r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67627r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000770&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (5)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.&quot;
+  describe &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39; do
+    skip &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61713</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (8)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001941
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61713</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (8), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61713&#39; do
+    desc &#39;An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it\&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61713&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61713&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in unfettered access to the database settings and data. A successful
+  replay attack against a privileged database account could result in a complete
+  compromise of the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000156-DB-000111&#39;
+  tag &quot;gid&quot;: &#39;V-61713&#39;
+  tag &quot;rid&quot;: &#39;SV-76203r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67629r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001941&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (8)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61715</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001942
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61715</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (9), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61715&#39; do
+    desc &#39;An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it\&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.&#39;  
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61715&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61715&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in access to database data.  A successful replay attack against a
+  non-privileged database account could result in a compromise of data stored on
+  the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000157-DB-000112&#39;
+  tag &quot;gid&quot;: &#39;V-61715&#39;
+  tag &quot;rid&quot;: &#39;SV-76205r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67631r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001942&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (9)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61717</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must disable user accounts after 60 days of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-4 e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000795
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61717</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must disable user accounts after 60 days of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-4 e), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For accounts managed by Oracle, check DBMS settings to determine if accounts can be automatically disabled 
+    by the system after 60 days of inactivity. Also, ask the DBA if an alternative method, such as a stored 
+    procedure run daily, to disable Oracle-managed accounts inactive for more than 60 days, has been deployed.
+
+    If the ability to disable accounts after 60 days of inactivity, by either of these means, does not exist, 
+    this is a finding.
+
+    - - - - -
+
+    Check to see what profile each user is associated with, if any, with this query:
+
+    select username, profile from dba_users order by 1,2;
+
+    Then check the profile to see what the password_life_time is set to in the table dba_profiles; the 
+    password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+    in the RESOURCE_NAME column.
+    SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where upper(resource_name) &#x3D; &quot;PASSWORD_LIFE_TIME&quot;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For accounts managed by Oracle, determine if it is practical and acceptable to require a 
+    password change every 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue the statement:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60;
+    (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for examples.)
+
+    If password changes every 60 days or fewer are unacceptable or impractical, implement an alternative method, 
+    such as a stored procedure run daily, to disable accounts inactive for more than 60 days.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61717&#39; do
+    title &#39;The DBMS must disable user accounts after 60 days of inactivity.&#39;
+    desc &#39;check&#39;, &#39;If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For accounts managed by Oracle, check DBMS settings to determine if accounts can be automatically disabled 
+    by the system after 60 days of inactivity. Also, ask the DBA if an alternative method, such as a stored 
+    procedure run daily, to disable Oracle-managed accounts inactive for more than 60 days, has been deployed.
+
+    If the ability to disable accounts after 60 days of inactivity, by either of these means, does not exist, 
+    this is a finding.
+
+    - - - - -
+
+    Check to see what profile each user is associated with, if any, with this query:
+
+    select username, profile from dba_users order by 1,2;
+
+    Then check the profile to see what the password_life_time is set to in the table dba_profiles; the 
+    password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+    in the RESOURCE_NAME column.
+    SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where upper(resource_name) &#x3D; &quot;PASSWORD_LIFE_TIME&quot;;&#39;
+
+    desc &#39;fix&#39;, &#39;For accounts managed by Oracle, determine if it is practical and acceptable to require a 
+    password change every 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue the statement:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60;
+    (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for examples.)
+
+    If password changes every 60 days or fewer are unacceptable or impractical, implement an alternative method, 
+    such as a stored procedure run daily, to disable accounts inactive for more than 60 days.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61719</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce minimum
+  password length.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000205
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61719</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce minimum
+  password length.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called 
+    DEFAULT, determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+
+    For each password verification function, examine its source code.
+    
+    If it does not enforce the CMS-defined minimum length (15 unless otherwise specified), this is 
+    a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+&lt;   oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61719&#39; do
+    desc &#39;check&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle\&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called 
+    DEFAULT, determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+
+    For each password verification function, examine its source code.
+    
+    If it does not enforce the CMS-defined minimum length (15 unless otherwise specified), this is 
+    a finding.&#39;
+    desc &#39;fix&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+&lt;   oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61719&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce minimum
+  password length.&quot;
+  desc &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000164-DB-000082&#39;
+  tag &quot;gid&quot;: &#39;V-61719&#39;
+  tag &quot;rid&quot;: &#39;SV-76209r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67635r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000205&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the DoD-defined minimum length (15 unless otherwise
+  specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61721</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000200
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61721</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (e), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password reuse rule, if any, that is in effect:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME IN (&quot;PASSWORD_REUSE_MAX&quot;, &quot;PASSWORD_REUSE_TIME&quot;)
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE, RESOURCE_NAME;
+    Bearing in mind that a profile can inherit from another profile, and the root profile is 
+    called DEFAULT, determine the value of the PASSWORD_REUSE_MAX effective for each profile.
+
+    If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the CMS-defined minimum 
+    number of password changes before a password may be repeated (five or greater), this is a finding.
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so if both are 
+    UNLIMITED, this is a finding.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  For each profile, set the PASSWORD_REUSE_MAX to 
+    enforce the CMS-defined minimum number of password changes before a password may be 
+    repeated (six or greater).
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so ensure also 
+    that it has a meaningful value.  Since the minimum password lifetime is 1 day, the smallest 
+    meaningful value is the same as the PASSWORD_REUSE_MAX value.
+
+    Using PPPPPP as an example, the statement to do this is:
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 6 PASSWORD_REUSE_TIME 6;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61721&#39; do
+    desc &#39;check&#39;, &#39;&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle\&#39;s control, 
+    determine the password reuse rule, if any, that is in effect:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME IN (&quot;PASSWORD_REUSE_MAX&quot;, &quot;PASSWORD_REUSE_TIME&quot;)
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE, RESOURCE_NAME;
+    Bearing in mind that a profile can inherit from another profile, and the root profile is 
+    called DEFAULT, determine the value of the PASSWORD_REUSE_MAX effective for each profile.
+
+    If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the CMS-defined minimum 
+    number of password changes before a password may be repeated (five or greater), this is a finding.
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so if both are 
+    UNLIMITED, this is a finding.&quot;&#39;
+    desc &#39;fix&#39;, &#39;&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  For each profile, set the PASSWORD_REUSE_MAX to 
+    enforce the CMS-defined minimum number of password changes before a password may be 
+    repeated (six or greater).
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so ensure also 
+    that it has a meaningful value.  Since the minimum password lifetime is 1 day, the smallest 
+    meaningful value is the same as the PASSWORD_REUSE_MAX value.
+
+    Using PPPPPP as an example, the statement to do this is:
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 6 PASSWORD_REUSE_TIME 6;&quot;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61723</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61723</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification 
+    function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61723&#39; do
+    desc &#39;fix&#39;, &#39;&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification 
+    function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61723&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000166-DB-000070&#39;
+  tag &quot;gid&quot;: &#39;V-61723&#39;
+  tag &quot;rid&quot;: &#39;SV-76213r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67639r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000192&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61725</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000193
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61725</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61725&#39; do
+    desc &#39;fix&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61725&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000167-DB-000071&#39;
+  tag &quot;gid&quot;: &#39;V-61725&#39;
+  tag &quot;rid&quot;: &#39;SV-76215r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67641r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000193&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61727</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000194
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61727</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61727&#39; do
+    desc &#39;fix&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61727&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000168-DB-000072&#39;
+  tag &quot;gid&quot;: &#39;V-61727&#39;
+  tag &quot;rid&quot;: &#39;SV-76217r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67643r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000194&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61729</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001619
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61729</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61729&#39; do
+    desc &#39;fix&#39;, &#39;&quot;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61729&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000169-DB-000176&#39;
+  tag &quot;gid&quot;: &#39;V-61729&#39;
+  tag &quot;rid&quot;: &#39;SV-76219r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67645r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001619&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61731</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61731</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called DEFAULT, 
+    determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+    
+    For each password verification function, examine its source code.
+
+    If it does not enforce the organization-defined minimum number of characters by which the password must differ 
+    from the previous password (six of the characters unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If any user accounts are managed by Oracle:  Develop, test and implement a password 
+    verification function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61731&#39; do
+    desc &#39;check&#39;, &#39;If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle\&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called DEFAULT, 
+    determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+    
+    For each password verification function, examine its source code.
+
+    If it does not enforce the organization-defined minimum number of characters by which the password must differ 
+    from the previous password (six of the characters unless otherwise specified), this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;If any user accounts are managed by Oracle:  Develop, test and implement a password 
+    verification function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61731&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.&quot;
+  desc  &quot;Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000170-DB-000073&#39;
+  tag &quot;gid&quot;: &#39;V-61731&#39;
+  tag &quot;rid&quot;: &#39;SV-76221r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67647r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000195&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of characters by
+  which the password must differ from the previous password (eight of the
+  characters unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If any user accounts are managed by Oracle:  Develop, test and
+  implement a password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the
+  starting point for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61733</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  encryption for storage.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000196
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61733</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  encryption for storage.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME  etwork\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61733&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61733&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  encryption for storage.&quot;
+  desc &quot;Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000171-DB-000074&#39;
+  tag &quot;gid&quot;: &#39;V-61733&#39;
+  tag &quot;rid&quot;: &#39;SV-76223r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67649r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000196&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME\
+  etwork\\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61735</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61735</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, this is not a finding.
+
+    Where accounts are authenticated using passwords, review procedures and implementation evidence for creation 
+    of temporary passwords.
+
+    If the procedures or evidence do not exist or do not enforce passwords to meet CMS password requirements, this 
+    is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures for assigning temporary passwords to user accounts.
+
+    Procedures should include instructions to meet current CMS password length and complexity requirements and 
+    provide a secure method to relay the temporary password to the user.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61735&#39; do
+    title &#39;Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.&#39;
+
+    desc &#39;check&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, this is not a finding.
+
+    Where accounts are authenticated using passwords, review procedures and implementation evidence for creation 
+    of temporary passwords.
+
+    If the procedures or evidence do not exist or do not enforce passwords to meet CMS password requirements, this 
+    is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;Implement procedures for assigning temporary passwords to user accounts.
+
+    Procedures should include instructions to meet current CMS password length and complexity requirements and 
+    provide a secure method to relay the temporary password to the user.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61735&#39; do
+  title &quot;Procedures for establishing temporary passwords that meet DoD password
+  requirements for new accounts must be defined, documented, and implemented.&quot;
+  desc &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000077&#39;
+  tag &quot;gid&quot;: &#39;V-61735&#39;
+  tag &quot;rid&quot;: &#39;SV-76225r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67651r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Where accounts are authenticated using passwords, review procedures and
+  implementation evidence for creation of temporary passwords.
+
+  If the procedures or evidence do not exist or do not enforce passwords to meet
+  DoD password requirements, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures for assigning temporary passwords to user
+  accounts.
+
+  Procedures should include instructions to meet current DoD password length and
+  complexity requirements and provide a secure method to relay the temporary
+  password to the user.&quot;
+  describe &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39; do
+    skip &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61737</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61737</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61737&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61737&#39; do
+  title &quot;DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.&quot;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000079&#39;
+  tag &quot;gid&quot;: &#39;V-61737&#39;
+  tag &quot;rid&quot;: &#39;SV-76227r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67653r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61739</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce password maximum lifetime restrictions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61739</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce password maximum lifetime restrictions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    Review DBMS settings to determine if passwords must be changed periodically. If not, this is a finding:
+
+    SELECT p1.profile,
+    CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit, &#39;DEFAULT&#39;, p4.limit, p2.limit))
+    END
+    END
+    END
+    END effective_life_time
+    FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+    WHERE p1.profile&#x3D;p2.profile
+    AND p3.profile&#x3D;&#39;DEFAULT&#39;
+    AND p4.profile&#x3D;&#39;DEFAULT&#39;
+    AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+    AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+    AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+    AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+    order by 1;
+
+    If the “effective_life_time” is greater than “60” for any profile applied to user accounts, and the 
+    need for this has not been documented and approved by the ISSO, this is a finding.
+
+    If the value is greater than 60 for any profile applied to user accounts, and the DBMS is configured to use 
+    Password Lifetime to disable inactive accounts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For user accounts managed by Oracle: Modify DBMS settings to force users to periodically change 
+    their passwords. For example, using PPPPPP to stand for a profile name:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60 PASSWORD_GRACE_TIME 0;
+    Do this for each profile applied to user accounts.
+    
+    Where a password lifetime longer than “60” is needed, document the reasons and obtain ISSO approval.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61739&#39; do
+    desc &#39;check&#39;, &#39;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    Review DBMS settings to determine if passwords must be changed periodically. If not, this is a finding:
+
+    SELECT p1.profile,
+    CASE p1.limit WHEN \&#39;UNLIMITED\&#39; THEN \&#39;UNLIMITED\&#39; ELSE
+    CASE p2.limit WHEN \&#39;UNLIMITED\&#39; THEN \&#39;UNLIMITED\&#39; ELSE
+    CASE p3.limit WHEN \&#39;UNLIMITED\&#39; THEN \&#39;UNLIMITED\&#39; ELSE
+    CASE p4.limit WHEN \&#39;UNLIMITED\&#39; THEN \&#39;UNLIMITED\&#39; ELSE
+    TO_CHAR(DECODE(p1.limit, \&#39;DEFAULT\&#39;, p3.limit, p1.limit) + DECODE(p2.limit, \&#39;DEFAULT\&#39;, p4.limit, p2.limit))
+    END
+    END
+    END
+    END effective_life_time
+    FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+    WHERE p1.profile&#x3D;p2.profile
+    AND p3.profile&#x3D;\&#39;DEFAULT\&#39;
+    AND p4.profile&#x3D;\&#39;DEFAULT\&#39;
+    AND p1.resource_name&#x3D;\&#39;PASSWORD_LIFE_TIME\&#39;
+    AND p2.resource_name&#x3D;\&#39;PASSWORD_GRACE_TIME\&#39;
+    AND p3.resource_name&#x3D;\&#39;PASSWORD_LIFE_TIME\&#39; -- from DEFAULT profile
+    AND p4.resource_name&#x3D;\&#39;PASSWORD_GRACE_TIME\&#39; -- from DEFAULT profile
+    order by 1;
+
+    If the “effective_life_time” is greater than “60” for any profile applied to user accounts, and the 
+    need for this has not been documented and approved by the ISSO, this is a finding.
+
+    If the value is greater than 60 for any profile applied to user accounts, and the DBMS is configured to use 
+    Password Lifetime to disable inactive accounts, this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;For user accounts managed by Oracle: Modify DBMS settings to force users to periodically change 
+    their passwords. For example, using PPPPPP to stand for a profile name:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60 PASSWORD_GRACE_TIME 0;
+    Do this for each profile applied to user accounts.
+    
+    Where a password lifetime longer than “60” is needed, document the reasons and obtain ISSO approval.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61739&#39; do
+  title &#39;The DBMS must enforce password maximum lifetime restrictions.&#39;
+  desc  &quot;Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000080&#39;
+  tag &quot;gid&quot;: &#39;V-61739&#39;
+  tag &quot;rid&quot;: &#39;SV-76229r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67655r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Review DBMS settings to determine if passwords must be changed periodically. If
+  not, this is a finding:
+
+  SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;
+
+  If the “effective_life_time” is greater than “60” for any profile applied to
+  user accounts, and the need for this has not been documented and approved by
+  the ISSO, this is a finding.
+
+  If the value is greater than 35 for any profile applied to user accounts, and
+  the DBMS is configured to use Password Lifetime to disable inactive accounts,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For user accounts managed by Oracle: Modify DBMS settings to
+  force users to periodically change their passwords. For example, using PPPPPP
+  to stand for a profile name:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35 PASSWORD_GRACE_TIME 0;
+  Do this for each profile applied to user accounts.
+
+  (Note: Although the DoD requirement is for a password change every 60 days,
+  using a value of “35” facilitates the use of “PASSWORD_LIFE_TIME” as a means of
+  locking accounts inactive for 35 days. But if “35” is not a practical or
+  acceptable limit for password lifetime, set it to the standard DoD value of
+  “60”.)
+
+  Where a password lifetime longer than “60” is needed, document the reasons and
+  obtain ISSO approval.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_effective_life_time &#x3D; sql.query(&quot;SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;&quot;).column(&#39;effective_life_time&#39;)
+
+  get_effective_life_time.each do |effective_life_time|
+
+    describe &#39;The oracle database account effective life time limit&#39; do
+      subject { effective_life_time }
+      it { should cmp &gt;&#x3D; 60 }
+    end
+  end
+  describe get_effective_life_time do
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61741</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000185
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61741</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61741&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61741&#39; do
+  title &quot;The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.&quot;
+  desc &quot;A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000175-DB-000067&#39;
+  tag &quot;gid&quot;: &#39;V-61741&#39;
+  tag &quot;rid&quot;: &#39;SV-76231r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67657r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000185&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61743</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000187
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61743</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61743&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61743&#39; do
+  title &quot;The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61743&#39;
+  tag &quot;rid&quot;: &#39;SV-76233r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67659r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000187&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;FALSE)&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61745</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61745</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review configuration to confirm that accounts used by processes to connect to the DBMS are 
+    authenticated using valid, current CMS-issued PKI certificates.
+
+    If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not certificate-based, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each such account, use CMS certificate-based authentication.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61745&#39; do
+    title &#39;Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.&#39;
+
+    desc &#39;Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.&#39;
+
+    desc &#39;check&#39;, &#39;Review configuration to confirm that accounts used by processes to connect to the DBMS are 
+    authenticated using valid, current CMS-issued PKI certificates.
+
+    If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not certificate-based, this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;For each such account, use CMS certificate-based authentication.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61745&#39; do
+  title &quot;Processes (services, applications, etc.) that connect to the DBMS
+  independently of individual users, must use valid, current DoD-issued PKI
+  certificates for authentication to the  DBMS.&quot;
+  desc &quot;Just as individual users must be authenticated, and just as they must
+  use PKI-based authentication, so must any processes that connect to the DBMS.
+
+      The DoD standard for authentication of a process or device communicating
+  with another process or device is the presentation of a valid, current,
+  DoD-issued Public Key Infrastructure (PKI) certificate that has previously been
+  verified as Trusted by an administrator of the other process or device.
+
+      This applies both to processes that run on the same server as the DBMS and
+  to processes running on other computers.
+
+      The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are
+  exceptions.  These cannot currently use certificate-based authentication.  For
+  this reason among others, use of these accounts should be restricted to where
+  it is truly needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61745&#39;
+  tag &quot;rid&quot;: &#39;SV-76235r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015501&#39;
+  tag &quot;fix_id&quot;: &#39;F-67661r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review configuration to confirm that accounts used by processes
+  to connect to the DBMS are authenticated using valid, current DoD-issued PKI
+  certificates.
+
+  If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not
+  certificate-based, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;For each such account, use DoD certificate-based authentication.&#39;
+  describe &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39; do
+    skip &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61747</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-7
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000803
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61747</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-7, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  </td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61747&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61747&#39; do
+  title &quot;The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.&quot;
+  desc &quot;Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000179-DB-000114&#39;
+  tag &quot;gid&quot;: &#39;V-61747&#39;
+  tag &quot;rid&quot;: &#39;SV-76237r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67663r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000803&#39;]
+  tag &quot;nist&quot;: [&#39;IA-7&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  &quot;
+  sql &#x3D; oracledb_session(user: &#39;system&#39;, password: &#39;xvIA7zonxGM&#x3D;1&#39;, host: &#39;localhost&#39;, service: &#39;ORCLCDB&#39;, sqlplus_bin: &#39;&#x2F;opt&#x2F;oracle&#x2F;product&#x2F;12.2.0.1&#x2F;dbhome_1&#x2F;bin&#x2F;sqlplus&#39;)
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61749</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002890
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-003123
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61749</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not 
+    mandatory in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">MA-4 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61749&#39; do
+    impact 0.0
+    desc &#39;caveat&#39;, &#39;Not applicable for this CMS ARS 3.1 overlay, since the related security control is not 
+    mandatory in CMS ARS 3.1&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61749&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61749&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000184-DB-000119&#39;
+  tag &quot;gid&quot;: &#39;V-61749&#39;
+  tag &quot;rid&quot;: &#39;SV-76239r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67665r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002890&#39;, &#39;CCI-003123&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61751</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000877
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61751</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">MA-4 c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61751&#39; do
+  title &quot;The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000185-DB-000116&#39;
+  tag &quot;gid&quot;: &#39;V-61751&#39;
+  tag &quot;rid&quot;: &#39;SV-76241r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67667r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000877&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61753</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61753</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61753&#39; do
+  title &quot;Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.&quot;
+  desc &quot;When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000187-DB-000120&#39;
+  tag &quot;gid&quot;: &#39;V-61753&#39;
+  tag &quot;rid&quot;: &#39;SV-76243r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67669r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)&quot;
+  tag &quot;fix&quot;: &quot;Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.&quot;
+  describe &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39; do
+    skip &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61755</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-16 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002262
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61755</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not                               
+    mandatory in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-16 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61755&#39; do
+    impact 0.0
+    desc &#39;caveat&#39;, &#39;Not applicable for this CMS ARS 3.1 overlay, since the related security control is not                               
+    mandatory in CMS ARS 3.1&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61755&#39; do
+  title &quot;The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.&quot;
+  desc &quot;When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000188-DB-000121&#39;
+  tag &quot;gid&quot;: &#39;V-61755&#39;
+  tag &quot;rid&quot;: &#39;SV-76245r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67671r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002262&#39;]
+  tag &quot;nist&quot;: [&#39;AC-16 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61757</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61757</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and vendor documentation to verify network connections 
+    are terminated when a database communications session is ended or after 30 minutes of inactivity.
+
+    If the network connection is not terminated, this is a finding.
+
+    The defined duration for these timeouts 30 minutes, except to fulfill documented and validated mission 
+    requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and&#x2F;or OS settings to disconnect network sessions when database communication 
+    sessions have ended or after the CMS-defined period of inactivity.
+
+    To configure this in Oracle, modify each relevant profile.  The resource name is IDLE_TIME, which is 
+    expressed in minutes.  Using PPPPPP as an example of a profile, set the timeout to 30 minutes with:
+    ALTER PROFILE PPPPPP LIMIT IDLE_TIME 30;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61757&#39; do
+    title &#39;The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.&#39;
+
+    desc &#39;check&#39;, &#39;Review DBMS settings, OS settings, and vendor documentation to verify network connections 
+    are terminated when a database communications session is ended or after 30 minutes of inactivity.
+
+    If the network connection is not terminated, this is a finding.
+
+    The defined duration for these timeouts 30 minutes, except to fulfill documented and validated mission 
+    requirements.&#39;
+
+    desc &#39;fix&#39;, &#39;Configure DBMS and&#x2F;or OS settings to disconnect network sessions when database communication 
+    sessions have ended or after the CMS-defined period of inactivity.
+
+    To configure this in Oracle, modify each relevant profile.  The resource name is IDLE_TIME, which is 
+    expressed in minutes.  Using PPPPPP as an example of a profile, set the timeout to 30 minutes with:
+    ALTER PROFILE PPPPPP LIMIT IDLE_TIME 30;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61757&#39; do
+  title &quot;The DBMS must terminate the network connection associated with a
+  communications session at the end of the session or 15 minutes of inactivity.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000190-DB-000137&#39;
+  tag &quot;gid&quot;: &#39;V-61757&#39;
+  tag &quot;rid&quot;: &#39;SV-76247r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67673r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001133&#39;]
+  tag &quot;nist&quot;: [&#39;SC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and vendor documentation to
+  verify network connections are terminated when a database communications
+  session is ended or after 15 minutes of inactivity.
+
+  If the network connection is not terminated, this is a finding.
+
+  The defined duration for these timeouts 15 minutes, except to fulfill
+  documented and validated mission requirements.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or OS settings to disconnect network sessions
+  when database communication sessions have ended or after the DoD-defined period
+  of inactivity.
+
+  To configure this in Oracle, modify each relevant profile.  The resource name
+  is IDLE_TIME, which is expressed in minutes.  Using PPPPPP as an example of a
+  profile, set the timeout to 15 minutes with:
+  ALTER PROFILE PPPPPP LIMIT IDLE_TIME 15;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idele time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61759</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61759</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-13, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61759&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61759&#39; do
+  title &quot;The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.&quot;
+  desc &quot;Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000140&#39;
+  tag &quot;gid&quot;: &#39;V-61759&#39;
+  tag &quot;rid&quot;: &#39;SV-76249r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67675r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61761</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database data files containing sensitive information must be
+  encrypted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61761</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database data files containing sensitive information must be
+  encrypted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-13, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61761&#39; do
+  title &quot;Database data files containing sensitive information must be
+  encrypted.&quot;
+  desc &quot;Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000141&#39;
+  tag &quot;gid&quot;: &#39;V-61761&#39;
+  tag &quot;rid&quot;: &#39;SV-76251r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67677r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61763</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect the integrity of publicly available information
+  and applications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61763</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect the integrity of publicly available information
+  and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61763&#39; do
+  title &quot;The DBMS must protect the integrity of publicly available information
+  and applications.&quot;
+  desc &quot;The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000201-DB-000145&#39;
+  tag &quot;gid&quot;: &#39;V-61763&#39;
+  tag &quot;rid&quot;: &#39;SV-76253r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67679r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.&quot;
+  describe &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61765</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001185
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61765</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not selected in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-23 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with &quot;alter profile&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   </td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61765&#39; do
+    impact 0.0
+    desc &#39;caveat&#39;, &#39;Not applicable for this CMS ARS 3.1 overlay, since the related security control is not selected in CMS ARS 3.1&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61765&#39; do
+  title &quot;The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.&quot;
+  desc  &quot;This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000220-DB-000149&#39;
+  tag &quot;gid&quot;: &#39;V-61765&#39;
+  tag &quot;rid&quot;: &#39;SV-76255r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67681r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001185&#39;]
+  tag &quot;nist&quot;: [&#39;SC-23 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with \&quot;alter profile\&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   &quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_idle_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  query_sessions_per_user &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;
+  }
+
+  query_connect_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;CONNECT_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query_idle_time, profile: profile)).column(&#39;limit&#39;)
+    sessions_per_user &#x3D; sql.query(format(query_sessions_per_user, profile: profile)).column(&#39;limit&#39;)
+    connect_time &#x3D; sql.query(format(query_connect_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idle time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+
+    describe &quot;The oracle database number of sessions per user for profile: #{profile}&quot; do
+      subject { sessions_per_user }
+      it { should cmp &lt;&#x3D; 3 }
+    end
+
+    describe &quot;The oracle database connect time for profile: #{profile}&quot; do
+      subject { connect_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61769</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-24
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001665
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61769</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-24, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as &quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61769&#39; do
+  title &quot;The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.&quot;
+  desc &quot;Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000226-DB-000147&#39;
+  tag &quot;gid&quot;: &#39;V-61769&#39;
+  tag &quot;rid&quot;: &#39;SV-76259r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67685r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001665&#39;]
+  tag &quot;nist&quot;: [&#39;SC-24&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as \&quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes\&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_mode &#x3D; sql.query(&#39;select log_mode from v$database;&#39;).column(&#39;log_mode&#39;)
+
+  describe &#39;The list of oracle database log mode&#39; do
+    subject { log_mode }
+    it { should cmp &#39;ARCHIVELOG&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61771</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61771</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-28, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name &quot;TSName&quot;,
+  e.encryptionalg &quot;Algorithm&quot;,
+  d.file_name &quot;File Name&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner &quot;Owner&quot;,
+  a.table_name &quot;Table Name&quot;,
+  e.encryptionalg &quot;Algorithm&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61771&#39; do
+  title &quot;The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.&quot;
+  desc &quot;This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000231-DB-000154&#39;
+  tag &quot;gid&quot;: &#39;V-61771&#39;
+  tag &quot;rid&quot;: &#39;SV-76261r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67687r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001199&#39;]
+  tag &quot;nist&quot;: [&#39;SC-28&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name \&quot;TSName\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;,
+  d.file_name \&quot;File Name\&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner \&quot;Owner\&quot;,
+  a.table_name \&quot;Table Name\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61775</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001084
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61775</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61775&#39; do
+  title &quot;The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.&quot;
+  desc  &quot;Security functions are defined as \&quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based\&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000233-DB-000124&#39;
+  tag &quot;gid&quot;: &#39;V-61775&#39;
+  tag &quot;rid&quot;: &#39;SV-76265r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67691r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001084&#39;]
+  tag &quot;nist&quot;: [&#39;SC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.&quot;
+  tag &quot;fix&quot;: &quot;Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.&quot;
+  describe &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39; do
+    skip &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61777</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001682
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61777</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+    or temporary accounts, this is not a finding.
+
+    Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+    determine if emergency accounts are being automatically terminated by the system after 60 days. Check also 
+    for custom code (scheduled jobs, procedures, triggers, etc.) for achieving this. 
+
+    If emergency accounts are not being terminated after 60 days, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create a profile specifically for emergency or temporary accounts.  When creating the accounts, 
+    assign them to this profile.  Configure DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, 
+    or implement custom code, to terminate accounts with this profile after 60 days.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61777&#39; do
+    title &#39;The DBMS must automatically terminate emergency accounts after 60 days for each type of account.&#39;
+
+    desc &#39;Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.&#39;
+
+    desc &#39;check&#39;, &#39;If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+    or temporary accounts, this is not a finding.
+
+    Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+    determine if emergency accounts are being automatically terminated by the system after 60 days. Check also 
+    for custom code (scheduled jobs, procedures, triggers, etc.) for achieving this. 
+
+    If emergency accounts are not being terminated after 60 days, this is a finding.&#39;
+
+    desc &#39;fix&#39;, &#39;Create a profile specifically for emergency or temporary accounts.  When creating the accounts, 
+    assign them to this profile.  Configure DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, 
+    or implement custom code, to terminate accounts with this profile after 60 days.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61777&#39; do
+  title &quot;The DBMS must automatically terminate emergency accounts after an
+  organization-defined time period for each type of account.&quot;
+  desc &quot;Emergency application accounts are typically created due to an
+  unforeseen operational event or could ostensibly be used in the event of a
+  vendor support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      In the event emergency application accounts are required, the application
+  must ensure accounts that are designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or application data compromised.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      If it is possible for any temporary emergency accounts to be created and
+  managed by Oracle, then the DBMS or application must provide or utilize a
+  mechanism to automatically terminate such accounts after an
+  organization-defined time period.
+
+      Emergency database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being misused.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000234-DB-000157&#39;
+  tag &quot;gid&quot;: &#39;V-61777&#39;
+  tag &quot;rid&quot;: &#39;SV-76267r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67693r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001682&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if emergency accounts are being automatically
+  terminated by the system after an organization-defined time period. Check also
+  for custom code (scheduled jobs, procedures, triggers, etc.) for achieving
+  this.
+
+  If emergency accounts are not being terminated after an organization-defined
+  time period, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create a profile specifically for emergency or temporary
+  accounts.  When creating the accounts, assign them to this profile.  Configure
+  DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, or
+  implement custom code, to terminate accounts with this profile after an
+  organization-defined time period.&quot;
+  describe &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39; do
+    skip &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61779</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-4 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001274
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61779</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-4 (12), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61779&#39; do
+  title &quot;The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.&quot;
+  desc &quot;Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000237-DB-000158&#39;
+  tag &quot;gid&quot;: &#39;V-61779&#39;
+  tag &quot;rid&quot;: &#39;SV-76269r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67695r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001274&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (12)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61781</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001090
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61781</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61781&#39; do
+  title &quot;The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.&quot;
+  desc &quot;The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000243-DB-000128&#39;
+  tag &quot;gid&quot;: &#39;V-61781&#39;
+  tag &quot;rid&quot;: &#39;SV-76271r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67697r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001090&#39;]
+  tag &quot;nist&quot;: [&#39;SC-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61783</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002385
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61783</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61783&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61783&#39; do
+  title &quot;The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.&quot;
+  desc &quot;A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000245-DB-000132&#39;
+  tag &quot;gid&quot;: &#39;V-61783&#39;
+  tag &quot;rid&quot;: &#39;SV-76273r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67699r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002385&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;RATE_LIMIT&#x3D;&#39; }
+    its(&#39;content&#39;) { should match &#x2F;CONNECTION_RATE_LISTENER&#x3D;\d*&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61785</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must check the validity of data inputs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001310
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS checks the validity of data inputs</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61785</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must check the validity of data inputs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See &quot;Reporting Constraint Exceptions&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61785&#39; do
+  title &#39;The DBMS must check the validity of data inputs.&#39;
+  desc  &quot;Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000251-DB-000160&#39;
+  tag &quot;gid&quot;: &#39;V-61785&#39;
+  tag &quot;rid&quot;: &#39;SV-76275r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67701r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001310&#39;]
+  tag &quot;nist&quot;: [&#39;SI-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See \&quot;Reporting Constraint Exceptions\&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  tag &quot;fix&quot;: &quot;Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  describe &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39; do
+    skip &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61787</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-7 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002716
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002718
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61787</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-7 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61787&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61787&#39; do
+  title &quot;The system must verify there have not been unauthorized changes to the
+  DBMS software and information.&quot;
+  desc &quot;Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000262-DB-000159&#39;
+  tag &quot;gid&quot;: &#39;V-61787&#39;
+  tag &quot;rid&quot;: &#39;SV-76277r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67703r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002716&#39;, &#39;CCI-002718&#39;]
+  tag &quot;nist&quot;: [&#39;SI-7 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61789</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must identify potentially security-relevant error conditions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61789</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must identify potentially security-relevant error conditions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61789&#39; do
+  title &#39;The DBMS must identify potentially security-relevant error conditions.&#39;
+  desc  &quot;The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000265-DB-000161&#39;
+  tag &quot;gid&quot;: &#39;V-61789&#39;
+  tag &quot;rid&quot;: &#39;SV-76279r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67705r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.&quot;
+  describe &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61791</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001312
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61791</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61791&#39; do
+  title &quot;The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.&quot;
+  desc &quot;Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000266-DB-000162&#39;
+  tag &quot;gid&quot;: &#39;V-61791&#39;
+  tag &quot;rid&quot;: &#39;SV-76281r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67707r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001312&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.&quot;
+  describe &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61793</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict error messages so only authorized personnel may
+  view them.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-11 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001314
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61793</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict error messages so only authorized personnel may
+  view them.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-11 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61793&#39; do
+  title &quot;The DBMS must restrict error messages so only authorized personnel may
+  view them.&quot;
+  desc &quot;If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000267-DB-000163&#39;
+  tag &quot;gid&quot;: &#39;V-61793&#39;
+  tag &quot;rid&quot;: &#39;SV-76283r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67709r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001314&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.&quot;
+  describe &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39; do
+    skip &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61795</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-4 (7)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001670
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61795</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-4 (7), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61795&#39; do
+  title &quot;The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.&quot;
+  desc &quot;System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000287-DB-000126&#39;
+  tag &quot;gid&quot;: &#39;V-61795&#39;
+  tag &quot;rid&quot;: &#39;SV-76285r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67711r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001670&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (7)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61797</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  created.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001683
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61797</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  created.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61797&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  created.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000291-DB-000139&#39;
+  tag &quot;gid&quot;: &#39;V-61797&#39;
+  tag &quot;rid&quot;: &#39;SV-76287r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67713r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001683&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61799</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  modified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001684
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61799</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  modified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61799&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  modified.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000292-DB-000138&#39;
+  tag &quot;gid&quot;: &#39;V-61799&#39;
+  tag &quot;rid&quot;: &#39;SV-76289r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67715r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001684&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61801</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001685
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61801</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61801&#39; do
+  title &quot;The DBMS must notify appropriate individuals when account disabling
+  actions are taken.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000293-DB-000130&#39;
+  tag &quot;gid&quot;: &#39;V-61801&#39;
+  tag &quot;rid&quot;: &#39;SV-76291r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67717r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001685&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61803</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  terminated.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001686
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61803</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  terminated.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61803&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  terminated.&quot;
+  desc &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000294-DB-000129&#39;
+  tag &quot;gid&quot;: &#39;V-61803&#39;
+  tag &quot;rid&quot;: &#39;SV-76293r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67719r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001686&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61809</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must implement separation of duties through assigned
+    information access authorizations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61809</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must implement separation of duties through assigned
+    information access authorizations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61809&#39; do
+  title &quot;The DBMS must implement separation of duties through assigned
+    information access authorizations.&quot;
+  desc  &quot;Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000009&#39;
+  tag &quot;gid&quot;: &#39;V-61809&#39;
+  tag &quot;rid&quot;: &#39;SV-76299r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-003300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67725r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)&quot;
+  tag &quot;fix&quot;: &quot;Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.&quot;
+  describe &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39; do
+    skip &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61813</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide an audit log reduction capability.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001875
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides an audit log reduction capability</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61813</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide an audit log reduction capability.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Deploy software capable of performing audit data reduction.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61813&#39; do
+  title &#39;The system must provide an audit log reduction capability.&#39;
+  desc  &quot;Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000113-DB-000053&#39;
+  tag &quot;gid&quot;: &#39;V-61813&#39;
+  tag &quot;rid&quot;: &#39;SV-76303r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67729r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001875&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;Deploy software capable of performing audit data reduction.&#39;
+  describe &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39; do
+    skip &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61815</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001094
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61815</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to restrict functionality that could be used to initiate DoS attacks.
+
+    Securing the Network Connection:
+    Protecting the network and its traffic from inappropriate access or modification is the essence of network 
+    security. You should consider all paths the data travels, and assess the threats on each path and node. Then, 
+    take steps to lessen or eliminate those threats and the consequences of a security breach. In addition, 
+    monitor and audit to detect either increased threat levels or penetration attempts.
+
+    The following practices improve network security:
+
+    1. Disable the Default Listener.
+    All listeners have a unique name instead of the name LISTENER and have startup protection.
+
+    LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+    
+    This configuration prevents the default listener from starting.
+
+    2. Prevent online administration by requiring the administrator to have the write privilege on the 
+    listener.ora file on the server.
+
+    a. Add or alter this line in the listener.ora file:
+
+    ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+    b. Use RELOAD to reload the configuration.
+
+    3. Set Protection against crafted network packets on database level.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should take when bad packets are 
+    received from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the default)
+
+    NONE: The database server ignores the bad packets and does not generate any trace files or log messages. 
+    (Not recommended)
+
+    TRACE: A detailed trace file is generated when bad packets are received, which can be used to debug any 
+    problems in client&#x2F;server communication.
+
+    LOG: A minimal log message is printed in the alert logfile and in the server trace file. A minimal amount 
+    of disk space is used.
+
+    ALERT: An alert message is sent to a DBA or monitoring console.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad 
+    packets from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) | (DROP,integer) } (DROP,3 is the default)
+
+    CONTINUE: The server process continues execution. The database server may be subject to a Denial of Service (DoS) 
+    if bad packets continue to be sent by a malicious client. (Not recommended)
+
+    (DELAY, integer) :The client experiences a delay of integer seconds before the server process accepts the 
+    next request from the same client connection. Malicious clients are prevented from excessive consumption 
+    of server resources while legitimate clients experience degradation in performance but can continue to function.
+
+    (DROP, integer) : The server forcefully terminates the client connection after integer bad packets. The server 
+    protects itself at the expense of the client (for example, a client transaction may be lost). The client may 
+    reconnect and attempt the same operation.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can be made by a client on a 
+    connection to the server process. After the specified number of failure attempts, the connection will be 
+    automatically dropped by the server process.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to unlimited. (A value of 1 to 3 is 
+    recommended)
+
+    For more information about the parameters in listener.ora, 
+    see https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+    
+    4. When a host computer has multiple IP addresses associated with multiple network interface controller (NIC) 
+    cards, configure the listener to the specific IP address.
+
+    You can restrict the listener to listen on a specific IP address. Oracle recommends that you specify the specific 
+    IP addresses on these types of computers, rather than allowing the listener to listen on all IP addresses. 
+    Restricting the listener to specific IP addresses helps to prevent an intruder from stealing a TCP end point from 
+    under the listener process.
+
+    5. Restrict the privileges of the listener, so that it cannot read or write files in the database or the Oracle 
+    server address space.
+
+    The default configuration for external procedures does not require a network listener to work with Oracle Database 
+    and the extproc agent. The extproc agent is spawned directly by Oracle Database and eliminates the risks that the 
+    extproc agent might be spawned by Oracle Listener unexpectedly. This default configuration is recommended for maximum 
+    security. For more information about securing external procedures see
+    https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+    However, the extproc agent can be configured to be spawned by a listener. In that case (not recommended) the listener 
+    should have restricted privileges.
+
+    6. Use a firewall, IAW CMS network policy and guidance.
+    
+    Appropriately placed and configured firewalls can prevent outside access to your databases.
+
+    7. Prevent unauthorized administration of the Oracle listener.
+
+    Local administration of the listener is secure by default through the local operating system. Therefore configuring 
+    a password is neither required nor recommended for secure local administration. However, a password can be configured 
+    for the listener to provide security for administrative operations, such as starting or stopping the listener, 
+    viewing a list of supported services, or saving changes to the Listener Control configuration.
+
+    By default, Oracle Net Listener permits only local administration for security reasons. As a policy, the listener 
+    can be administered only by the user who started it. This is enforced through local operating system authentication. 
+    For example, if user1 starts the listener, then only user1 can administer it. Any other user trying to administer 
+    the listener gets an error. The super user is the only exception.
+
+    Oracle recommends that you perform listener administration in the default mode (secure by means of local operating 
+    system authentication), and access the system remotely using a remote logon. Oracle Enterprise Manager Cloud 
+    Control can also be used for remote administration.
+
+    8. Encrypt network traffic.  (Mandatory for sensitive data and optional for non-sensitive, as covered in other 
+    STIG requirements.)
+
+    Where applicable, use Oracle network data encryption to encrypt network traffic among clients, databases, 
+    and application servers.
+
+    9. Set Connect Rate to organization defined limit. (Also required by O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+    The connection rate limiter feature in Oracle Net Listener enables a database administrator to limit the number of 
+    new connections handled by the listener. When this feature is enabled, Oracle Net Listener imposes a user-specified 
+    maximum limit on the number of new connections handled by the listener every second.
+
+    CONNECTION_RATE_LISTENER&#x3D;10
+    LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))  
+    )
+
+    10. Setup Valid Node Checking.
+    (See also O121-BP-025600.)
+
+    Valid node checking is a security feature that protects DBMS instances from malevolent or errant Oracle Net 
+    connections over TCP&#x2F;IP, without the need for a firewall or IP address filtering at the operating system-level. 
+    The feature is controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes, and tcp.excluded_nodes.
+
+    Modify the sqlnet.ora file manually
+    TCP.VALIDNODE_CHECKING&#x3D;yes
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the supplemental 
+    file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+    If this parameter is set to yes, then incoming connections are allowed only if they originate from a node that conforms 
+    to the list specified by TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter is 
+    set to yes (no is the default).
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter 
+    is set to yes.
+
+    Modify the listener.ora file manually
+
+    TCP.EXCLUDED_NODES Syntax:
+    TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25, 172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+    TCP.INVITED_NODES Syntax:
+    TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*, 2001:DB8:200C:433B&#x2F;32)
+
+    Usage Notes:
+
+    Use TCP.INVITED_NODES to specify which clients are allowed access to the database. This list takes precedence 
+    over the TCP.EXCLUDED_NODES parameter if both lists are present. These parameters can use wildcards for IPv4 
+    addresses and CIDR notation for IPv4 and IPv6 addresses.
+
+    11. Apply Listener Security Patches.
+    (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+    Critical Patch Updates are cumulative. Therefore, the latest patch will contain all previous security patches 
+    for the Listener.
+
+    12. Ensure that listener logging is turned on.
+
+    Listener logging is on by default. If logging is not on, configure logging for all listeners in order to capture 
+    Listener commands and brute force password attacks.
+
+    13. Monitor the listener logfile.
+
+    The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors, which may signify attacks or 
+    inappropriate activity. Monitor the logfile and generate an alert whenever these errors are encountered.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61815&#39; do
+    desc &#39;fix&#39;, &#39;Configure DBMS settings to restrict functionality that could be used to initiate DoS attacks.
+
+    Securing the Network Connection:
+    Protecting the network and its traffic from inappropriate access or modification is the essence of network 
+    security. You should consider all paths the data travels, and assess the threats on each path and node. Then, 
+    take steps to lessen or eliminate those threats and the consequences of a security breach. In addition, 
+    monitor and audit to detect either increased threat levels or penetration attempts.
+
+    The following practices improve network security:
+
+    1. Disable the Default Listener.
+    All listeners have a unique name instead of the name LISTENER and have startup protection.
+
+    LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+    
+    This configuration prevents the default listener from starting.
+
+    2. Prevent online administration by requiring the administrator to have the write privilege on the 
+    listener.ora file on the server.
+
+    a. Add or alter this line in the listener.ora file:
+
+    ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+    b. Use RELOAD to reload the configuration.
+
+    3. Set Protection against crafted network packets on database level.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should take when bad packets are 
+    received from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the default)
+
+    NONE: The database server ignores the bad packets and does not generate any trace files or log messages. 
+    (Not recommended)
+
+    TRACE: A detailed trace file is generated when bad packets are received, which can be used to debug any 
+    problems in client&#x2F;server communication.
+
+    LOG: A minimal log message is printed in the alert logfile and in the server trace file. A minimal amount 
+    of disk space is used.
+
+    ALERT: An alert message is sent to a DBA or monitoring console.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad 
+    packets from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) | (DROP,integer) } (DROP,3 is the default)
+
+    CONTINUE: The server process continues execution. The database server may be subject to a Denial of Service (DoS) 
+    if bad packets continue to be sent by a malicious client. (Not recommended)
+
+    (DELAY, integer) :The client experiences a delay of integer seconds before the server process accepts the 
+    next request from the same client connection. Malicious clients are prevented from excessive consumption 
+    of server resources while legitimate clients experience degradation in performance but can continue to function.
+
+    (DROP, integer) : The server forcefully terminates the client connection after integer bad packets. The server 
+    protects itself at the expense of the client (for example, a client transaction may be lost). The client may 
+    reconnect and attempt the same operation.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can be made by a client on a 
+    connection to the server process. After the specified number of failure attempts, the connection will be 
+    automatically dropped by the server process.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to unlimited. (A value of 1 to 3 is 
+    recommended)
+
+    For more information about the parameters in listener.ora, 
+    see https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+    
+    4. When a host computer has multiple IP addresses associated with multiple network interface controller (NIC) 
+    cards, configure the listener to the specific IP address.
+
+    You can restrict the listener to listen on a specific IP address. Oracle recommends that you specify the specific 
+    IP addresses on these types of computers, rather than allowing the listener to listen on all IP addresses. 
+    Restricting the listener to specific IP addresses helps to prevent an intruder from stealing a TCP end point from 
+    under the listener process.
+
+    5. Restrict the privileges of the listener, so that it cannot read or write files in the database or the Oracle 
+    server address space.
+
+    The default configuration for external procedures does not require a network listener to work with Oracle Database 
+    and the extproc agent. The extproc agent is spawned directly by Oracle Database and eliminates the risks that the 
+    extproc agent might be spawned by Oracle Listener unexpectedly. This default configuration is recommended for maximum 
+    security. For more information about securing external procedures see
+    https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+    However, the extproc agent can be configured to be spawned by a listener. In that case (not recommended) the listener 
+    should have restricted privileges.
+
+    6. Use a firewall, IAW CMS network policy and guidance.
+    
+    Appropriately placed and configured firewalls can prevent outside access to your databases.
+
+    7. Prevent unauthorized administration of the Oracle listener.
+
+    Local administration of the listener is secure by default through the local operating system. Therefore configuring 
+    a password is neither required nor recommended for secure local administration. However, a password can be configured 
+    for the listener to provide security for administrative operations, such as starting or stopping the listener, 
+    viewing a list of supported services, or saving changes to the Listener Control configuration.
+
+    By default, Oracle Net Listener permits only local administration for security reasons. As a policy, the listener 
+    can be administered only by the user who started it. This is enforced through local operating system authentication. 
+    For example, if user1 starts the listener, then only user1 can administer it. Any other user trying to administer 
+    the listener gets an error. The super user is the only exception.
+
+    Oracle recommends that you perform listener administration in the default mode (secure by means of local operating 
+    system authentication), and access the system remotely using a remote logon. Oracle Enterprise Manager Cloud 
+    Control can also be used for remote administration.
+
+    8. Encrypt network traffic.  (Mandatory for sensitive data and optional for non-sensitive, as covered in other 
+    STIG requirements.)
+
+    Where applicable, use Oracle network data encryption to encrypt network traffic among clients, databases, 
+    and application servers.
+
+    9. Set Connect Rate to organization defined limit. (Also required by O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+    The connection rate limiter feature in Oracle Net Listener enables a database administrator to limit the number of 
+    new connections handled by the listener. When this feature is enabled, Oracle Net Listener imposes a user-specified 
+    maximum limit on the number of new connections handled by the listener every second.
+
+    CONNECTION_RATE_LISTENER&#x3D;10
+    LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))  
+    )
+
+    10. Setup Valid Node Checking.
+    (See also O121-BP-025600.)
+
+    Valid node checking is a security feature that protects DBMS instances from malevolent or errant Oracle Net 
+    connections over TCP&#x2F;IP, without the need for a firewall or IP address filtering at the operating system-level. 
+    The feature is controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes, and tcp.excluded_nodes.
+
+    Modify the sqlnet.ora file manually
+    TCP.VALIDNODE_CHECKING&#x3D;yes
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the supplemental 
+    file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+    If this parameter is set to yes, then incoming connections are allowed only if they originate from a node that conforms 
+    to the list specified by TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter is 
+    set to yes (no is the default).
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter 
+    is set to yes.
+
+    Modify the listener.ora file manually
+
+    TCP.EXCLUDED_NODES Syntax:
+    TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25, 172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+    TCP.INVITED_NODES Syntax:
+    TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*, 2001:DB8:200C:433B&#x2F;32)
+
+    Usage Notes:
+
+    Use TCP.INVITED_NODES to specify which clients are allowed access to the database. This list takes precedence 
+    over the TCP.EXCLUDED_NODES parameter if both lists are present. These parameters can use wildcards for IPv4 
+    addresses and CIDR notation for IPv4 and IPv6 addresses.
+
+    11. Apply Listener Security Patches.
+    (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+    Critical Patch Updates are cumulative. Therefore, the latest patch will contain all previous security patches 
+    for the Listener.
+
+    12. Ensure that listener logging is turned on.
+
+    Listener logging is on by default. If logging is not on, configure logging for all listeners in order to capture 
+    Listener commands and brute force password attacks.
+
+    13. Monitor the listener logfile.
+
+    The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors, which may signify attacks or 
+    inappropriate activity. Monitor the logfile and generate an alert whenever these errors are encountered.&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61815&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61815&#39; do
+  title &quot;The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.&quot;
+  desc &quot;When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+    &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000246-DB-000133&#39;
+  tag &quot;gid&quot;: &#39;V-61815&#39;
+  tag &quot;rid&quot;: &#39;SV-76305r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67731r10_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001094&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to restrict functionality that could be
+  used to initiate DoS attacks.
+
+  Securing the Network Connection:
+  Protecting the network and its traffic from inappropriate access or
+  modification is the essence of network security. You should consider all paths
+  the data travels, and assess the threats on each path and node. Then, take
+  steps to lessen or eliminate those threats and the consequences of a security
+  breach. In addition, monitor and audit to detect either increased threat levels
+  or penetration attempts.
+
+  The following practices improve network security:
+
+  1. Disable the Default Listener.
+  All listeners have a unique name instead of the name LISTENER and have startup
+  protection.
+
+  LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+
+  This configuration prevents the default listener from starting.
+
+  2. Prevent online administration by requiring the administrator to have the
+  write privilege on the listener.ora file on the server.
+  a. Add or alter this line in the listener.ora file:
+
+  ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+  b. Use RELOAD to reload the configuration.
+
+  3. Set Protection against crafted network packets on database level.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should
+  take when bad packets are received from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the
+  default)
+
+  NONE: The database server ignores the bad packets and does not generate any
+  trace files or log messages. (Not recommended)
+
+  TRACE: A detailed trace file is generated when bad packets are received, which
+  can be used to debug any problems in client&#x2F;server communication.
+
+  LOG: A minimal log message is printed in the alert logfile and in the server
+  trace file. A minimal amount of disk space is used.
+
+  ALERT: An alert message is sent to a DBA or monitoring console.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server
+  process when receiving bad packets from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) |
+  (DROP,integer) } (DROP,3 is the default)
+
+  CONTINUE: The server process continues execution. The database server may be
+  subject to a Denial of Service (DoS) if bad packets continue to be sent by a
+  malicious client. (Not recommended)
+
+  (DELAY, integer) :The client experiences a delay of integer seconds before the
+  server process accepts the next request from the same client connection.
+  Malicious clients are prevented from excessive consumption of server resources
+  while legitimate clients experience degradation in performance but can continue
+  to function.
+
+  (DROP, integer) : The server forcefully terminates the client connection after
+  integer bad packets. The server protects itself at the expense of the client
+  (for example, a client transaction may be lost). The client may reconnect and
+  attempt the same operation.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts
+  that can be made by a client on a connection to the server process. After the
+  specified number of failure attempts, the connection will be automatically
+  dropped by the server process.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to
+  unlimited. (A value of 1 to 3 is recommended)
+
+  For more information about the parameters in listener.ora, see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+
+  4. When a host computer has multiple IP addresses associated with multiple
+  network interface controller (NIC) cards, configure the listener to the
+  specific IP address.
+
+  You can restrict the listener to listen on a specific IP address. Oracle
+  recommends that you specify the specific IP addresses on these types of
+  computers, rather than allowing the listener to listen on all IP addresses.
+  Restricting the listener to specific IP addresses helps to prevent an intruder
+  from stealing a TCP end point from under the listener process.
+
+  5. Restrict the privileges of the listener, so that it cannot read or write
+  files in the database or the Oracle server address space.
+
+  The default configuration for external procedures does not require a network
+  listener to work with Oracle Database and the extproc agent. The extproc agent
+  is spawned directly by Oracle Database and eliminates the risks that the
+  extproc agent might be spawned by Oracle Listener unexpectedly. This default
+  configuration is recommended for maximum security. For more information about
+  securing external procedures see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+  However, the extproc agent can be configured to be spawned by a listener. In
+  that case (not recommended) the listener should have restricted privileges.
+
+  6. Use a firewall, IAW DoD network policy and guidance.
+
+  Appropriately placed and configured firewalls can prevent outside access to
+  your databases.
+
+  7. Prevent unauthorized administration of the Oracle listener.
+
+  Local administration of the listener is secure by default through the local
+  operating system. Therefore configuring a password is neither required nor
+  recommended for secure local administration. However, a password can be
+  configured for the listener to provide security for administrative operations,
+  such as starting or stopping the listener, viewing a list of supported
+  services, or saving changes to the Listener Control configuration.
+
+  By default, Oracle Net Listener permits only local administration for security
+  reasons. As a policy, the listener can be administered only by the user who
+  started it. This is enforced through local operating system authentication. For
+  example, if user1 starts the listener, then only user1 can administer it. Any
+  other user trying to administer the listener gets an error. The super user is
+  the only exception.
+
+  Oracle recommends that you perform listener administration in the default mode
+  (secure by means of local operating system authentication), and access the
+  system remotely using a remote logon. Oracle Enterprise Manager Cloud Control
+  can also be used for remote administration.
+
+  8. Encrypt network traffic.  (Mandatory for sensitive data and optional for
+  non-sensitive, as covered in other STIG requirements.)
+
+  Where applicable, use Oracle network data encryption to encrypt network traffic
+  among clients, databases, and application servers.
+
+  9. Set Connect Rate to organization defined limit. (Also required by
+  O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+  The connection rate limiter feature in Oracle Net Listener enables a database
+  administrator to limit the number of new connections handled by the listener.
+  When this feature is enabled, Oracle Net Listener imposes a user-specified
+  maximum limit on the number of new connections handled by the listener every
+  second.
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+  LISTENER&#x3D;
+  (ADDRESS_LIST&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+  )
+
+  10. Setup Valid Node Checking.
+  (See also O121-BP-025600.)
+
+  Valid node checking is a security feature that protects DBMS instances from
+  malevolent or errant Oracle Net connections over TCP&#x2F;IP, without the need for a
+  firewall or IP address filtering at the operating system-level. The feature is
+  controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes,
+  and tcp.excluded_nodes.
+
+  Modify the sqlnet.ora file manually
+  TCP.VALIDNODE_CHECKING&#x3D;yes
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  If this parameter is set to yes, then incoming connections are allowed only if
+  they originate from a node that conforms to the list specified by
+  TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes (no is the default).
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes.
+
+  Modify the listener.ora file manually
+
+  TCP.EXCLUDED_NODES Syntax:
+  TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25,
+  172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+  TCP.INVITED_NODES Syntax:
+  TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*,
+  2001:DB8:200C:433B&#x2F;32)
+
+  Usage Notes:
+
+  Use TCP.INVITED_NODES to specify which clients are allowed access to the
+  database. This list takes precedence over the TCP.EXCLUDED_NODES parameter if
+  both lists are present. These parameters can use wildcards for IPv4 addresses
+  and CIDR notation for IPv4 and IPv6 addresses.
+
+  11. Apply Listener Security Patches.
+  (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+  Critical Patch Updates are cumulative. Therefore, the latest patch will contain
+  all previous security patches for the Listener.
+
+  12. Ensure that listener logging is turned on.
+
+  Listener logging is on by default. If logging is not on, configure logging for
+  all listeners in order to capture Listener commands and brute force password
+  attacks.
+
+  13. Monitor the listener logfile.
+
+  The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors,
+  which may signify attacks or inappropriate activity. Monitor the logfile and
+  generate an alert whenever these errors are encountered.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))&#39; }
+    its(&#39;content&#39;) {
+      should include &#39;LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))&#39;
+    }
+    its(&#39;content&#39;) { should include &#39;CONNECTION_RATE_LISTENER&#x3D;10&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_MAX_FAILED_LOGIN_ATTEMPTS&#x3D;3&#39; }
+    its(&#39;content&#39;) { should include &#39;ADMIN_RESTRICTIONS_LISTENER&#x3D;ON&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_PROTOCOL_ERROR_TRACE_ACTION&#x3D;TRACE&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.INVITED_NODES&#x3D;&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.EXCLUDED_NODES&#x3D;&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;TCP.VALIDNODE_CHECKING&#x3D;yes&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61817</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001095
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61817</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61817&#39; do
+  title &quot;The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.&quot;
+  desc &quot;In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000247-DB-000134&#39;
+  tag &quot;gid&quot;: &#39;V-61817&#39;
+  tag &quot;rid&quot;: &#39;SV-76307r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67733r8_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001095&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select DISTINCT b.limit from dba_users a, dba_profiles b where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user profile limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61819</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-6
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002394
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61819</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-6, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61819&#39; do
+  title &quot;The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.&quot;
+  desc &quot;Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000248-DB-000135&#39;
+  tag &quot;gid&quot;: &#39;V-61819&#39;
+  tag &quot;rid&quot;: &#39;SV-76309r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67735r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002394&#39;]
+  tag &quot;nist&quot;: [&#39;SC-6&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select
+    DISTINCT b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61843</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61843</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61843&#39; do
+  title &quot;Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.&quot;
+  desc &quot;To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61843&#39;
+  tag &quot;rid&quot;: &#39;SV-76333r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67759r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.&quot;
+  describe &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39; do
+    skip &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61845</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61845</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\oracle\product\12.1.0\db_1\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61845&#39; do
+  title &quot;When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.&quot;
+  desc &quot;The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61845&#39;
+  tag &quot;rid&quot;: &#39;SV-76335r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015602&#39;
+  tag &quot;fix_id&quot;: &#39;F-67761r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.&quot;
+  describe &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39; do
+    skip &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61849</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS default accounts must be protected from misuse.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS default accounts are protected from misuse</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61849</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS default accounts must be protected from misuse.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61849&#39; do
+  title &#39;DBMS default accounts must be protected from misuse.&#39;
+  desc  &quot;The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000023&#39;
+  tag &quot;gid&quot;: &#39;V-61849&#39;
+  tag &quot;rid&quot;: &#39;SV-76339r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-004701&#39;
+  tag &quot;fix_id&quot;: &#39;F-67765r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.&quot;
+  describe &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39; do
+    skip &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61853</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61853</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61853&#39; do
+  title &quot;Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.&quot;
+  desc &quot;It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, \&quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.\&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000109-DB-000049&#39;
+  tag &quot;gid&quot;: &#39;V-61853&#39;
+  tag &quot;rid&quot;: &#39;SV-76343r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-008601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67769r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1&quot;
+  describe &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39; do
+    skip &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61865</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of the DBMS software installation account must be restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the use of the DBMS software installation account is restricted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61865</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of the DBMS software installation account must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61865&#39; do
+  title &#39;Use of the DBMS software installation account must be restricted.&#39;
+  desc  &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000022&#39;
+  tag &quot;gid&quot;: &#39;V-61865&#39;
+  tag &quot;rid&quot;: &#39;SV-76355r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-004600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67781r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.&quot;
+  describe &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39; do
+    skip &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61867</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61867</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61867&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+          skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61867&#39; do
+  title &quot;Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-61867&#39;
+  tag &quot;rid&quot;: &#39;SV-76357r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67783r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61869</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61869</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61869&#39; do
+  title &quot;The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000207&#39;
+  tag &quot;gid&quot;: &#39;V-61869&#39;
+  tag &quot;rid&quot;: &#39;SV-76359r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-011200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67785r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot; do
+      skip &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA&#39;s users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;oracle_dbas&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61871</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001844
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61871</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61871&#39; do
+  title &quot;The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000102-DB-000045&#39;
+  tag &quot;gid&quot;: &#39;V-61871&#39;
+  tag &quot;rid&quot;: &#39;SV-76361r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-008100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67787r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001844&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61873</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS software installation account must be restricted to
+  authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61873</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS software installation account must be restricted to
+  authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61873&#39; do
+  title &quot;The DBMS software installation account must be restricted to
+  authorized users.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000198&#39;
+  tag &quot;gid&quot;: &#39;V-61873&#39;
+  tag &quot;rid&quot;: &#39;SV-76363r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67789r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39; do
+
+    skip &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61875</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61875</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61875&#39; do
+  title &quot;Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000199&#39;
+  tag &quot;gid&quot;: &#39;V-61875&#39;
+  tag &quot;rid&quot;: &#39;SV-76365r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67791r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.&quot;
+  describe &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39; do
+    skip &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61877</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS software libraries must be periodically backed up.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000537
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software libraries are periodically backed up</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61877</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS software libraries must be periodically backed up.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure backups to include all DBMS application and third-party
+  database application software libraries.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61877&#39; do
+  title &#39;The DBMS software libraries must be periodically backed up.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000100&#39;
+  tag &quot;gid&quot;: &#39;V-61877&#39;
+  tag &quot;rid&quot;: &#39;SV-76367r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67793r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure backups to include all DBMS application and third-party
+  database application software libraries.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39; do
+    skip &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61879</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000764
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61879</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61879&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).&quot;
+  desc &quot;To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000148-DB-000103&#39;
+  tag &quot;gid&quot;: &#39;V-61879&#39;
+  tag &quot;rid&quot;: &#39;SV-76369r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67795r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000764&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61881</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000804
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61881</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-8, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61881&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).&quot;
+  desc  &quot;Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000180-DB-000115&#39;
+  tag &quot;gid&quot;: &#39;V-61881&#39;
+  tag &quot;rid&quot;: &#39;SV-76371r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-015800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67797r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000804&#39;]
+  tag &quot;nist&quot;: [&#39;IA-8&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+    users (or processes acting on behalf of non-organizational users).&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61883</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001082
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61883</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-2, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61883&#39; do
+  title &quot;The DBMS must separate user functionality (including user interface
+  services) from database management functionality.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000211-DB-000122&#39;
+  tag &quot;gid&quot;: &#39;V-61883&#39;
+  tag &quot;rid&quot;: &#39;SV-76373r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67799r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001082&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39; do
+    skip &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61885</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001083
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61885</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61885&#39; do
+  title &quot;The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000212-DB-000123&#39;
+  tag &quot;gid&quot;: &#39;V-61885&#39;
+  tag &quot;rid&quot;: &#39;SV-76375r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67801r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001083&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61887</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000166
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61887</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61887&#39; do
+  title &quot;The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.&quot;
+  desc &quot;Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000080-DB-000063&#39;
+  tag &quot;gid&quot;: &#39;V-61887&#39;
+  tag &quot;rid&quot;: &#39;SV-76377r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P3-006200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67803r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000166&#39;]
+  tag &quot;nist&quot;: [&#39;AU-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61963</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61963</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61963&#39; do
+  title &quot;The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.&quot;
+  desc &quot;Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61963&#39;
+  tag &quot;rid&quot;: &#39;SV-76453r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67883r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.&quot;
+  describe &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39; do
+    skip &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61965</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61965</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\WINDOWS\system32\config\EventLogs\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61965&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61965&#39; do
+  title &quot;The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.&quot;
+  desc &quot;The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61965&#39;
+  tag &quot;rid&quot;: &#39;SV-76455r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025101&#39;
+  tag &quot;fix_id&quot;: &#39;F-67885r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\\WINDOWS\\system32\\config\\EventLogs\\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database audit trail&#39; do
+    subject { audit_trail }
+    it { should_not cmp &#39;NONE&#39; }
+  end
+
+  get_audit_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  audit_file_dest &#x3D; get_audit_file_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{audit_file_dest}&#x2F; |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61967</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000054
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61967</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Limit concurrent connections for each system account to a number less than or equal to the 
+    organization-defined number of sessions using the following SQL. Create profiles that conform to the 
+    requirements. Assign users to the appropriate profile.
+
+    The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy the STIG 
+    requirements pertaining to the profile parameters. Oracle recommends that this profile be customized with 
+    any site-specific requirements and assigned to all users where applicable.  Note: It remains necessary to 
+    create a customized replacement for the password validation function, ORA12C_STRONG_VERIFY_FUNCTION, if 
+    relying on this technique to verify password complexity.
+
+    The defaults for ORA_STIG_PROFILE are set as follows:
+    Resource Name                   Limit
+    -------------                   ------
+    COMPOSITE_LIMIT                 DEFAULT
+    SESSIONS_PER_USER               DEFAULT
+    CPU_PER_SESSION                 DEFAULT
+    CPU_PER_CALL                    DEFAULT
+    LOGICAL_READS_PER_SESSION       DEFAULT
+    LOGICAL_READS_PER_CALL          DEFAULT
+    IDLE_TIME                          15
+    CONNECT_TIME                    DEFAULT
+    PRIVATE_SGA                     DEFAULT
+    FAILED_LOGIN_ATTEMPTS               3 
+    PASSWORD_LIFE_TIME                 60
+    PASSWORD_REUSE_TIME               365
+    PASSWORD_REUSE_MAX                 10
+    PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+    PASSWORD_LOCK_TIME              UNLIMITED
+    PASSWORD_GRACE_TIME                 5
+
+    Change the value of SESSIONS_PER_USER (along with the other parameters, where relevant) from UNLIMITED to 
+    CMS-compliant, site-specific requirements and then assign users to the profile.
+    ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+    To assign the user to the profile do the following:
+    ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: cms-ars-3.1-moderate-aws-rds-oracle-database-12c-stig-overlay
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+  control &#39;V-61967&#39; do
+    desc &#39;fix&#39;, &#39;Limit concurrent connections for each system account to a number less than or equal to the 
+    organization-defined number of sessions using the following SQL. Create profiles that conform to the 
+    requirements. Assign users to the appropriate profile.
+
+    The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy the STIG 
+    requirements pertaining to the profile parameters. Oracle recommends that this profile be customized with 
+    any site-specific requirements and assigned to all users where applicable.  Note: It remains necessary to 
+    create a customized replacement for the password validation function, ORA12C_STRONG_VERIFY_FUNCTION, if 
+    relying on this technique to verify password complexity.
+
+    The defaults for ORA_STIG_PROFILE are set as follows:
+    Resource Name                   Limit
+    -------------                   ------
+    COMPOSITE_LIMIT                 DEFAULT
+    SESSIONS_PER_USER               DEFAULT
+    CPU_PER_SESSION                 DEFAULT
+    CPU_PER_CALL                    DEFAULT
+    LOGICAL_READS_PER_SESSION       DEFAULT
+    LOGICAL_READS_PER_CALL          DEFAULT
+    IDLE_TIME                          15
+    CONNECT_TIME                    DEFAULT
+    PRIVATE_SGA                     DEFAULT
+    FAILED_LOGIN_ATTEMPTS               3 
+    PASSWORD_LIFE_TIME                 60
+    PASSWORD_REUSE_TIME               365
+    PASSWORD_REUSE_MAX                 10
+    PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+    PASSWORD_LOCK_TIME              UNLIMITED
+    PASSWORD_GRACE_TIME                 5
+
+    Change the value of SESSIONS_PER_USER (along with the other parameters, where relevant) from UNLIMITED to 
+    CMS-compliant, site-specific requirements and then assign users to the profile.
+    ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+    To assign the user to the profile do the following:
+    ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;&#39;
+  end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61967&#39; do
+  title &quot;The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.&quot;
+  desc  &quot;Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000001-DB-000031&#39;
+  tag &quot;gid&quot;: &#39;V-61967&#39;
+  tag &quot;rid&quot;: &#39;SV-76457r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-000100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67887r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000054&#39;]
+  tag &quot;nist&quot;: [&#39;AC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Limit concurrent connections for each system account to a number
+  less than or equal to the organization-defined number of sessions using the
+  following SQL. Create profiles that conform to the requirements. Assign users
+  to the appropriate profile.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  The defaults for ORA_STIG_PROFILE are set as follows:
+  Resource Name                   Limit
+  -------------                   ------
+  COMPOSITE_LIMIT                 DEFAULT
+  SESSIONS_PER_USER               DEFAULT
+  CPU_PER_SESSION                 DEFAULT
+  CPU_PER_CALL                    DEFAULT
+  LOGICAL_READS_PER_SESSION       DEFAULT
+  LOGICAL_READS_PER_CALL          DEFAULT
+  IDLE_TIME                          15
+  CONNECT_TIME                    DEFAULT
+  PRIVATE_SGA                     DEFAULT
+  FAILED_LOGIN_ATTEMPTS               3
+  PASSWORD_LIFE_TIME                 60
+  PASSWORD_REUSE_TIME               365
+  PASSWORD_REUSE_MAX                 10
+  PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME              UNLIMITED
+  PASSWORD_GRACE_TIME                 5
+
+  Change the value of SESSIONS_PER_USER (along with the other parameters, where
+  relevant) from UNLIMITED to DoD-compliant, site-specific requirements and then
+  assign users to the profile.
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+  To assign the user to the profile do the following:
+  ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  concurrent_sessions &#x3D; sql.query(&quot;SELECT limit FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database number of concurrent sessions allowed&#39; do
+    subject { concurrent_sessions }
+    it { should_not include &#39;UNLIMITED&#39; }
+    it { should_not include &#39;DEFAULT&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61969</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide a report generation capability for audit
+  reduction data.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001878
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61969</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide a report generation capability for audit
+  reduction data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61969&#39; do
+  title &quot;The system must provide a report generation capability for audit
+  reduction data.&quot;
+  desc  &quot;In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000114-DB-000054&#39;
+  tag &quot;gid&quot;: &#39;V-61969&#39;
+  tag &quot;rid&quot;: &#39;SV-76459r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67889r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001878&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.&quot;
+  describe &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39; do
+    skip &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-68863</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-68863</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-68863&#39; do
+  title &quot;Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-68863&#39;
+  tag &quot;rid&quot;: &#39;SV-83467r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010710&#39;
+  tag &quot;fix_id&quot;: &#39;F-75045r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.&quot;
+  describe &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39; do
+    skip &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61409</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is retained for at least one year</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is retained for at least one year</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61409</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement an audit retention policy and 
+    procedures.
+
+    It is recommended that the most recent ninety days of audit logs remain 
+    available online.
+
+    After thirty ninety days, the audit logs may be maintained off-line.
+
+    Online maintenance provides for a more timely capability and inclination to         
+    investigate suspicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61409&#39; do
+  title &#39;Audit trail data must be retained for at least one year.&#39;
+  desc  &quot;Without preservation, a complete discovery of an attack or suspicious
+  activity may not be determined.  DBMS audit data also contributes to the
+  complete investigation of unauthorized activity and needs to be included in
+  audit retention plans and procedures.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61409&#39;
+  tag &quot;rid&quot;: &#39;SV-75899r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67325r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review and verify the implementation of an audit trail
+  retention policy.
+
+  Verify that audit data is maintained for a minimum of one year.
+
+  If audit data is not maintained for a minimum of one year, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61411</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61411</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61411&#39; do
+  title &quot;Access to default accounts used to support replication must be
+  restricted to authorized DBAs.&quot;
+  desc &quot;Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61411&#39;
+  tag &quot;rid&quot;: &#39;SV-75901r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67327r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+  tag &quot;fix&quot;: &quot;Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.&quot;
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61413</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle instance names must not contain Oracle version numbers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61413</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle instance names must not contain Oracle version numbers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61413&#39; do
+  title &#39;Oracle instance names must not contain Oracle version numbers.&#39;
+  desc  &quot;Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61413&#39;
+  tag &quot;rid&quot;: &#39;SV-75903r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67329r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.&quot;
+  tag &quot;fix&quot;: &quot;Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+  db_instance_name &#x3D; sql.query(&#39;select instance_name from v$instance;&#39;).column(&#39;instance_name&#39;)
+
+  describe &#39;The oracle database instance name&#39; do
+    subject { db_instance_name }
+    it { should_not include version.to_s }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61415</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Fixed user and public database links must be authorized for use.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61415</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Fixed user and public database links must be authorized for use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61415&#39; do
+  title &#39;Fixed user and public database links must be authorized for use.&#39;
+  desc  &quot;Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61415&#39;
+  tag &quot;rid&quot;: &#39;SV-75905r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67331r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61417</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61417</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61417&#39; do
+  title &quot;A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.&quot;
+  desc &quot;Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.&quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61417&#39;
+  tag &quot;rid&quot;: &#39;SV-75907r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67333r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.&quot;
+  tag &quot;fix&quot;: &quot;To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  controlfiles &#x3D; sql.query(&#39;select name from v$controlfile;&#39;).column(&#39;name&#39;)
+  partitions &#x3D; []
+
+  controlfiles.each do |files|
+    file &#x3D; files[1..-1]
+    get_pos_slash &#x3D; file.index(&#39;&#x2F;&#39;)
+    partition &#x3D; file[0..get_pos_slash]
+    partitions.push(partition)
+  end
+
+  control_file1_partition &#x3D; partitions[0]
+  control_file2_partition &#x3D; partitions[1]
+
+  describe &quot;The oracable control file permission: #{control_file1_partition}&quot; do
+    subject { control_file1_partition }
+    it { should_not cmp control_file2_partition }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61419</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61419</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61419&#39; do
+  title &quot;A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.&quot;
+  desc &quot;The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61419&#39;
+  tag &quot;rid&quot;: &#39;SV-75909r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67335r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&#39;select count(*) from V$LOG;&#39;).column(&#39;count(*)&#39;) do
+    it { should cmp &gt;&#x3D; 2 }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61421</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61421</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61421&#39; do
+  title &quot;The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.&quot;
+  desc &quot;An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61421&#39;
+  tag &quot;rid&quot;: &#39;SV-75911r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67337r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;&quot;).row(0).column(&quot;grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name&quot;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61425</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61425</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61425&#39; do
+  title &#39;The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.&#39;
+  desc  &quot;Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61425&#39;
+  tag &quot;rid&quot;: &#39;SV-75915r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67341r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_AUTHENT parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61427</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61427</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61427&#39; do
+  title &#39;The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.&#39;
+  desc  &quot;Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61427&#39;
+  tag &quot;rid&quot;: &#39;SV-75917r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67343r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_ROLES parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61429</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle SQL92_SECURITY parameter must be set to TRUE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61429</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle SQL92_SECURITY parameter must be set to TRUE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61429&#39; do
+  title &#39;The Oracle SQL92_SECURITY parameter must be set to TRUE.&#39;
+  desc  &quot;The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61429&#39;
+  tag &quot;rid&quot;: &#39;SV-75919r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67345r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database SQL92_SECURITY parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;TRUE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61431</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61431</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61431&#39; do
+  title &quot;The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.&quot;
+  desc &quot;The REMOTE_LOGIN_PASSWORDFILE setting of \&quot;NONE\&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  \&quot;EXCLUSIVE\&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to \&quot;EXCLUSIVE\&quot;, remote connections to the database as \&quot;internal\&quot;
+  or \&quot;as SYSDBA\&quot; are not logged to an individual account.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61431&#39;
+  tag &quot;rid&quot;: &#39;SV-75921r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67347r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;&quot;).column(&#39;value&#39;)
+
+  describe.one do
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;EXCLUSIVE&#39; }
+    end
+
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;NONE&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61433</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61433</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61433&#39; do
+  title &quot;System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61433&#39;
+  tag &quot;rid&quot;: &#39;SV-75923r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67349r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61435</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>System Privileges must not be granted to PUBLIC.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61435</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">System Privileges must not be granted to PUBLIC.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61435&#39; do
+  title &#39;System Privileges must not be granted to PUBLIC.&#39;
+  desc  &quot;System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61435&#39;
+  tag &quot;rid&quot;: &#39;SV-75925r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67351r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;privilege&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61437</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61437</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61437&#39; do
+  title &quot;Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61437&#39;
+  tag &quot;rid&quot;: &#39;SV-75927r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67353r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_option &#x3D; sql.query(&quot;select grantee from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_admin_option.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_option.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61439</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Object permissions granted to PUBLIC must be restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: CTXSYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: XDB with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: CTXSYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: XDB with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61439</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Object permissions granted to PUBLIC must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61439&#39; do
+  title &#39;Object permissions granted to PUBLIC must be restricted.&#39;
+  desc  &quot;Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61439&#39;
+  tag &quot;rid&quot;: &#39;SV-75929r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67355r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_public_access &#x3D; sql.query(&quot;select DISTINCT owner from dba_tab_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).column(&#39;owner&#39;).uniq
+
+  if users_with_public_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with access to PUBLIC, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with access to PUBLIC&#39;
+    end
+  else
+    users_with_public_access.each do |user|
+      describe &quot;oracle user: #{user} with access to PUBLIC&quot; do
+        subject { user }
+        it { should be_in input(&#39;users_allowed_access_to_public&#39;)}
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61441</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle Listener must be configured to require administration
+  authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61441</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle Listener must be configured to require administration
+  authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If &quot;Security &#x3D; OFF&quot; is displayed, this is a finding.
+
+  If &quot;Security &#x3D; ON: Local OS Authentication&quot; is displayed, this is not a
+  finding.
+
+  If &quot;Security &#x3D; ON: Password or Local OS Authentication&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61441&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+         skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61441&#39; do
+  title &quot;The Oracle Listener must be configured to require administration
+  authentication.&quot;
+  desc &quot;Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61441&#39;
+  tag &quot;rid&quot;: &#39;SV-75931r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67357r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If \&quot;Security &#x3D; OFF\&quot; is displayed, this is a finding.
+
+  If \&quot;Security &#x3D; ON: Local OS Authentication\&quot; is displayed, this is not a
+  finding.
+
+  If \&quot;Security &#x3D; ON: Password or Local OS Authentication\&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.&quot;
+  tag &quot;fix&quot;: &quot;By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.&quot;
+
+  listener_name &#x3D; command(&quot;ps -ef | grep tnslsnr | grep -v grep|awk &#39;{ print $9; }&#39;&quot;).stdout.strip
+
+  listener_status &#x3D; command(&quot;lsnrctl status #{listener_name}&quot;).stdout.strip
+
+  describe &#39;The Oracle Listener status&#39; do
+    subject { listener_status }
+    it { should_not include &#39;Security                  OFF&#39; }
+    it { should_not include &#39;Security                  ON: Password or Local OS Authentication&#39; }
+  end
+  describe listener_status do
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61443</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61443</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61443&#39; do
+  title &quot;Application role permissions must not be assigned to the Oracle PUBLIC
+  role.&quot;
+  desc &quot;Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61443&#39;
+  tag &quot;rid&quot;: &#39;SV-75933r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67359r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;granted_role&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61445</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle application administration roles must be disabled if not
+  required and authorized.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61445</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle application administration roles must be disabled if not
+  required and authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61445&#39; do
+  title &quot;Oracle application administration roles must be disabled if not
+  required and authorized.&quot;
+  desc &quot;Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61445&#39;
+  tag &quot;rid&quot;: &#39;SV-75935r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67361r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dba_role &#x3D; sql.query(&quot;select grantee from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dba_role.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_dba_role.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_dba_role&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61447</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61447</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure communications between the DBMS and remote 
+       applications&#x2F;application servers to use CMS-approved encryption.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61447&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61447&#39; do
+  title &quot;Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  &quot;
+  desc &quot;Multi-tier systems may be configured with the database and connecting
+  middle-tier system located on an internal network, with the database located on
+  an internal network behind a firewall and the middle-tier system located in a
+  DMZ. In cases where either or both systems are located in the DMZ (or on
+  networks external to DoD), network communications between the systems must be
+  encrypted.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61447&#39;
+  tag &quot;rid&quot;: &#39;SV-75937r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67363r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure communications between the DBMS and remote
+  applications&#x2F;application servers to use DoD-approved encryption.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61449</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61449</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61449&#39; do
+  title &quot;Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.&quot;
+  desc &quot;Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61449&#39;
+  tag &quot;rid&quot;: &#39;SV-75939r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67365r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_jobs &#x3D; sql.query(&quot;select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;).column(&#39;job_name&#39;)
+
+  describe &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot; do
+    skip &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61451</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unauthorized database links must not be defined and active.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61451</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unauthorized database links must not be defined and active.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61451&#39; do
+  title &#39;Unauthorized database links must not be defined and active.&#39;
+  desc  &quot;DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61451&#39;
+  tag &quot;rid&quot;: &#39;SV-75941r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67367r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61453</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Sensitive information from production database exports must be
+  modified before import to a development database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61453</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Sensitive information from production database exports must be
+  modified before import to a development database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61453&#39; do
+  title &quot;Sensitive information from production database exports must be
+  modified before import to a development database.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers do not have a need to know to sensitive data. Any access
+  they may have to production data would be considered unauthorized access and
+  subject the sensitive data to unlawful or unauthorized disclosure. See DODD
+  8500.1 for a definition of Sensitive Information.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61453&#39;
+  tag &quot;rid&quot;: &#39;SV-75943r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67369r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.&quot;
+  describe &#39;A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database&#39; do
+    skip &#39;A manual review is required to ensure sensitive information from production database exports are
+    modified before import to a development database&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61455</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61455</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61455&#39; do
+  title &quot;Application user privilege assignment must be reviewed monthly or more
+  frequently to ensure compliance with least privilege and documented policy.&quot;
+  desc &quot;Users granted privileges not required to perform their assigned
+  functions are able to make unauthorized modifications to the production data or
+  database. Monthly or more frequent periodic review of privilege assignments
+  assures that organizational and&#x2F;or functional changes are reflected
+  appropriately.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61455&#39;
+  tag &quot;rid&quot;: &#39;SV-75945r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67371r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61457</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Audit trail data must be reviewed daily or more frequently.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is reviewed daily or more frequently</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is reviewed daily or more frequently</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61457</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Audit trail data must be reviewed daily or more frequently.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures to monitor
+  audit trail data daily.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61457&#39; do
+  title &#39;Audit trail data must be reviewed daily or more frequently.&#39;
+  desc  &quot;Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61457&#39;
+  tag &quot;rid&quot;: &#39;SV-75947r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67373r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  audit trail data daily.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61459</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_name is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_value is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSBACKUP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSDG is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_name is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_value is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSBACKUP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSDG is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61459</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the &quot;alter user&quot; for each affected user account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61459&#39; do
+  title &quot;Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.&quot;
+  desc  &quot;The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61459&#39;
+  tag &quot;rid&quot;: &#39;SV-75949r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67375r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the \&quot;alter user\&quot; for each affected user account.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  property_name &#x3D; sql.query(&quot;select property_name
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_name&#39;)
+
+  describe &#39;The oracle database property_name&#39; do
+    subject { property_name }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  property_value &#x3D; sql.query(&quot;select property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_value&#39;)
+
+  describe &#39;The oracle database property_value&#39; do
+    subject { property_value }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  users_with_system_tablespace &#x3D; sql.query(&quot;select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);&quot;).column(&#39;username&#39;).uniq
+  if users_with_system_tablespace.empty?
+    impact 0.0
+    describe &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_system_tablespace.each do |user|
+      describe &quot;oracle users with system tablespace: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_system_tablespace&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61461</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application owner accounts must have a dedicated application
+  tablespace.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61461</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application owner accounts must have a dedicated application
+  tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61461&#39; do
+  title &quot;Application owner accounts must have a dedicated application
+  tablespace.&quot;
+  desc &quot;Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61461&#39;
+  tag &quot;rid&quot;: &#39;SV-75951r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67377r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  application_owners &#x3D; sql.query(&quot;select distinct owner
+  from dba_SEGMENTS;&quot;).column(&#39;owner&#39;).uniq
+  if application_owners.empty?
+    impact 0.0
+    describe &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39;
+    end
+  else
+    application_owners.each do |user|
+      describe &quot;oracle db application owners: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_application_owners&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61463</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61463</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61463&#39; do
+  title &quot;The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.&quot;
+  desc  &quot;The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61463&#39;
+  tag &quot;rid&quot;: &#39;SV-75953r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67379r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_archive_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database log_archive_dest parameter&#39; do
+    subject { log_archive_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  parameter &#x3D; sql.query(&quot;select DISTINCT value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database value for log_archive_dest parameter&#39; do
+    subject { parameter }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  db_recovery_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;&quot;).column(&#39;value&#39;).uniq
+
+  describe &#39;The oracle database db_recovery_file_dest parameter&#39; do
+    subject { db_recovery_file_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61465</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61465</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61465&#39; do
+  title &quot;The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.&quot;
+  desc  &quot;The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61465&#39;
+  tag &quot;rid&quot;: &#39;SV-75955r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67381r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database _TRACE_FILES_PUBLIC parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;TRUE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61467</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61467</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61467&#39; do
+  title &quot;Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.&quot;
+  desc &quot;Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61467&#39;
+  tag &quot;rid&quot;: &#39;SV-75957r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67383r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+
+  unlocked_accounts &#x3D; sql.query(&quot;select distinct o.owner from dba_objects o, dba_users u
+  where
+   o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;&quot;).column(&#39;owner&#39;).uniq
+  if unlocked_accounts.empty?
+    impact 0.0
+    describe &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39; do
+      skip &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39;
+    end
+  else
+    unlocked_accounts.each do |user|
+      describe &quot;oracle user: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_unlocked_oracledb_accounts&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61487</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61487</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61487&#39; do
+  title &quot;DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.&quot;
+  desc &quot;Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61487&#39;
+  tag &quot;rid&quot;: &#39;SV-75977r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67403r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.&quot;
+  tag &quot;fix&quot;: &quot;Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.&#39; do
+    skip &#39;A manual review is required to ensure DBMS production application and data directories are protected
+  from developers on shared production&#x2F;development DBMS host systems.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61489</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of the DBMS installation account must be logged.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61489</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of the DBMS installation account must be logged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61489&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61489&#39; do
+  title &#39;Use of the DBMS installation account must be logged.&#39;
+  desc  &quot;The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61489&#39;
+  tag &quot;rid&quot;: &#39;SV-75979r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67405r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.&quot;
+  describe command(&quot;grep -ie &#39;^[^#]*NOPASSWD&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe command(&quot;grep -ie &#39;^[^#]*!authenticate&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;sudoers\s+\-p\s+wa\s+\-k\s+[-\w]+\s*$&#x2F;) }
+  end
+  describe sshd_config do
+    its(&#39;PrintLastLog&#39;) { should be_nil.or eq &#39;yes&#39; }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;group\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;passwd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;gshadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;shadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;security\&#x2F;opasswd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61491</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61491</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure all related application components and the DBMS host platform 
+         in accordance with the applicable CMS ARS.
+
+         Regularly audit the security configuration of related applications and the host 
+         platform to confirm continued compliance with security requirements.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61491&#39; do
+  title &quot;The DBMS host platform and other dependent applications must be
+  configured in compliance with applicable STIG requirements.&quot;
+  desc &quot;The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61491&#39;
+  tag &quot;rid&quot;: &#39;SV-75981r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67407r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure all related application components and the DBMS host
+  platform in accordance with the applicable DoD STIG.
+
+  Regularly audit the security configuration of related applications and the host
+  platform to confirm continued compliance with security requirements.&quot;
+  describe &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39; do
+    skip &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61493</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61493</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61493&#39; do
+  title &quot;Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.&quot;
+  desc &quot;Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61493&#39;
+  tag &quot;rid&quot;: &#39;SV-75983r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67409r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61495</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The database must not be directly accessible from public or
+  unauthorized networks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61495</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The database must not be directly accessible from public or
+  unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61495&#39; do
+  title &quot;The database must not be directly accessible from public or
+  unauthorized networks.&quot;
+  desc &quot;Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61495&#39;
+  tag &quot;rid&quot;: &#39;SV-75985r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67411r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.&quot;
+  describe &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39; do
+    skip &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61497</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ISSM must review changes to DBA role assignments.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61497</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ISSM must review changes to DBA role assignments.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61497&#39; do
+  title &#39;The ISSM must review changes to DBA role assignments.&#39;
+  desc  &quot;Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61497&#39;
+  tag &quot;rid&quot;: &#39;SV-75987r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67413r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61499</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61499</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61499&#39; do
+  title &quot;Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.&quot;
+  desc &quot;Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61499&#39;
+  tag &quot;rid&quot;: &#39;SV-75989r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67415r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.&quot;
+  describe &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39; do
+    skip &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61501</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61501</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61501&#39; do
+  title &quot;Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61501&#39;
+  tag &quot;rid&quot;: &#39;SV-75991r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67417r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.&quot;
+  describe &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39; do
+    skip &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61503</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61503</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled &quot;SSN&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61503&#39; do
+  title &quot;Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.&quot;
+  desc &quot;A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61503&#39;
+  tag &quot;rid&quot;: &#39;SV-75993r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67419r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled \&quot;SSN\&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.&quot;
+  describe &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39; do
+    skip &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61507</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61507</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61507&#39; do
+  title &quot;Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.&quot;
+  desc &quot;Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61507&#39;
+  tag &quot;rid&quot;: &#39;SV-75997r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67423r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61509</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must not share a host supporting an independent security
+  service.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61509</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must not share a host supporting an independent security
+  service.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61509&#39; do
+  title &quot;The DBMS must not share a host supporting an independent security
+  service.&quot;
+  desc &quot;The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61509&#39;
+  tag &quot;rid&quot;: &#39;SV-75999r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67425r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.&quot;
+  tag &quot;fix&quot;: &quot;Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service&#39; do
+    skip &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+   service&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61511</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to DBMS software files and directories must not be granted to
+  unauthorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61511</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to DBMS software files and directories must not be granted to
+  unauthorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \Program Files\Oracle\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61511&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61511&#39; do
+  title &quot;Access to DBMS software files and directories must not be granted to
+  unauthorized users.&quot;
+  desc &quot;The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61511&#39;
+  tag &quot;rid&quot;: &#39;SV-76001r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67427r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \\Program Files\\Oracle\\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61513</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Replication accounts must not be granted DBA privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61513</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Replication accounts must not be granted DBA privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61513&#39; do
+  title &#39;Replication accounts must not be granted DBA privileges.&#39;
+  desc  &quot;Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61513&#39;
+  tag &quot;rid&quot;: &#39;SV-76003r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67429r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61515</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Network access to the DBMS must be restricted to authorized personnel.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61515</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Network access to the DBMS must be restricted to authorized personnel.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (&quot;&#x2F;32&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a &quot;&#x2F;&quot; indicates acceptance by subnet mask where the
+  number after the &quot;&#x2F;&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61515&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61515&#39; do
+  title &#39;Network access to the DBMS must be restricted to authorized personnel.&#39;
+  desc  &quot;Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61515&#39;
+  tag &quot;rid&quot;: &#39;SV-76005r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67431r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (\&quot;&#x2F;32\&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a \&quot;&#x2F;\&quot; indicates acceptance by subnet mask where the
+  number after the \&quot;&#x2F;\&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.&quot;
+  tag &quot;fix&quot;: &quot;Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;tcp.validnode_checking&#x3D;YES&#39; }
+    its(&#39;content&#39;) { should match &#x2F;tcp.invited_nodes&#x3D;(\W*)&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61519</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Changes to configuration options must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61519</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Changes to configuration options must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61519&#39; do
+  title &#39;Changes to configuration options must be audited.&#39;
+  desc  &quot;The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61519&#39;
+  tag &quot;rid&quot;: &#39;SV-76009r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67435r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database AUDIT_SYS_OPERATIONS parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61523</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote DBMS administration must be documented and authorized or
+  disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61523</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote DBMS administration must be documented and authorized or
+  disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan for authorization, assignments and usage 
+         procedures for remote DBMS administration.
+
+         If remote administration of the DBMS is not documented or poorly documented, this 
+         is a finding.
+
+         If remote administration of the DBMS is not authorized and not disabled, this is 
+         a finding.
+         
+         If remote administration is to be performed from outside the CMS network, but is not 
+         done via an approved and properly configured VPN, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61523&#39; do
+  title &quot;Remote DBMS administration must be documented and authorized or
+  disabled.&quot;
+  desc &quot;Remote administration may expose configuration and sensitive data to
+  unauthorized viewing during transit across the network or allow unauthorized
+  administrative access to the DBMS to remote users.
+
+      For the purposes of this STIG, \&quot;Remote\&quot; means \&quot;outside the DoDIN.\&quot;
+  However, use of an approved and properly configured VPN counts as inside the
+  DoDIN.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61523&#39;
+  tag &quot;rid&quot;: &#39;SV-76013r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67439r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for authorization, assignments
+  and usage procedures for remote DBMS administration.
+
+  If remote administration of the DBMS is not documented or poorly documented,
+  this is a finding.
+
+  If remote administration of the DBMS is not authorized and not disabled, this
+  is a finding.
+
+  If remote administration is to be performed from outside the DoDIN, but is not
+  done via an approved and properly configured VPN, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61525</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61525</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61525&#39; do
+  title &quot;DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.&quot;
+  desc &quot;Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61525&#39;
+  tag &quot;rid&quot;: &#39;SV-76015r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67441r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.&quot;
+  tag &quot;fix&quot;: &quot;Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.&quot;
+  describe &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61527</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Changes to DBMS security labels must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61527</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Changes to DBMS security labels must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61527&#39; do
+  title &#39;Changes to DBMS security labels must be audited.&#39;
+  desc  &quot;Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61527&#39;
+  tag &quot;rid&quot;: &#39;SV-76017r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67443r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39;Changes to security label assignment is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Changes to security label assignment is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61529</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote database or other external access must use fully-qualified
+  names.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61529</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote database or other external access must use fully-qualified
+  names.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61529&#39; do
+  title &quot;Remote database or other external access must use fully-qualified
+  names.&quot;
+  desc  &quot;The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61529&#39;
+  tag &quot;rid&quot;: &#39;SV-76019r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67445r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;global_names&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database GLOBAL_NAMES parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61531</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61531</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append &quot;&#x2F;diag&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61531&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61531&#39; do
+  title &quot;The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.&quot;
+  desc &#39;&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.&#39;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61531&#39;
+  tag &quot;rid&quot;: &#39;SV-76021r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67447r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append \&quot;&#x2F;diag\&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \\diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.&quot;
+  tag &quot;fix&quot;: &quot;Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_diagnostic_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;diagnostic_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  diagnostic_dest &#x3D; get_diagnostic_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{diagnostic_dest}&#x2F;diag |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61533</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote administration must be disabled for the Oracle connection
+  manager.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61533</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote administration must be disabled for the Oracle connection
+  manager.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61533&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61533&#39; do
+  title &quot;Remote administration must be disabled for the Oracle connection
+  manager.&quot;
+  desc  &quot;Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61533&#39;
+  tag &quot;rid&quot;: &#39;SV-76023r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67449r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;cman.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;REMOTE_ADMIN &#x3D; NO&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61535</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Network client connections must be restricted to supported versions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61535</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Network client connections must be restricted to supported versions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  &quot;Database Net Services Reference&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61535&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61535&#39; do
+  title &#39;Network client connections must be restricted to supported versions.&#39;
+  desc  &quot;Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61535&#39;
+  tag &quot;rid&quot;: &#39;SV-76025r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67451r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied&quot;
+  tag &quot;fix&quot;: &quot;Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  \&quot;Database Net Services Reference\&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;11&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;11&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12a&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12a&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61537</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no dba users, therefore this control is NA</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no dba users, therefore this control is NA</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61537</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If &quot;root&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61537&#39; do
+  title &quot;DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000021&#39;
+  tag &quot;gid&quot;: &#39;V-61537&#39;
+  tag &quot;rid&quot;: &#39;SV-76027r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-004500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67453r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If \&quot;root\&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.&quot;
+
+  get_dba_users &#x3D; command(&#39;cat &#x2F;etc&#x2F;group | grep -i dba&#39;).stdout.strip.split(&quot;\n&quot;)
+  get_members_root_group &#x3D; command(&#39;groups root&#39;).stdout.strip.split(&quot;\n&quot;)
+
+  get_dba_users.each do |user|
+    describe &quot;The dba user: #{user} in &#x2F;etc&#x2F;group&quot; do
+      subject { user }
+      it { should_not cmp &#39;root&#39; }
+    end
+
+    get_members_root_group.each do |member|
+      describe &quot;The user: #{member} in the root group&quot; do
+        subject { member }
+        it { should_not cmp user.to_s }
+      end
+    end
+  end
+  if get_dba_users.empty?
+    describe &#39;There are no dba users, therefore this control is NA&#39; do
+      skip &#39;There are no dba users, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61539</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61539</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61539&#39; do
+  title &quot;Oracle software must be evaluated and patched against newly found
+  vulnerabilities.&quot;
+  desc &quot;Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000205&#39;
+  tag &quot;gid&quot;: &#39;V-61539&#39;
+  tag &quot;rid&quot;: &#39;SV-76029r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-011100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67455r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  patches &#x3D; sql.query(&#39;SELECT patch_id from dba_registry_sqlpatch;&#39;).column(&#39;patch_id&#39;)
+
+  describe &#39;The oracle database installed patches&#39; do
+    subject { patches }
+    it { should_not cmp nil }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61541</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS default accounts must be assigned custom passwords.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61541</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS default accounts must be assigned custom passwords.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61541&#39; do
+  title &#39;DBMS default accounts must be assigned custom passwords.&#39;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000078&#39;
+  tag &quot;gid&quot;: &#39;V-61541&#39;
+  tag &quot;rid&quot;: &#39;SV-76031r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67457r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)&quot;
+  tag &quot;fix&quot;: &quot;Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sys_dba_users_with_defpwd &#x3D; sql.query(&#39; SELECT username FROM SYS.DBA_USERS_WITH_DEFPWD;&#39;).column(&#39;username&#39;).uniq
+
+  describe.one do
+    sys_dba_users_with_defpwd.each do |user|
+      describe &quot;The oracle system database user: #{user} with a default password&quot; do
+        subject { user }
+        it { should cmp &#39;XS$NULL&#39; }
+      end
+    end
+    
+    describe sys_dba_users_with_defpwd do
+      it { should be_empty }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61543</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000186
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61543</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61543&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61543&#39; do
+  title &quot;The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000176-DB-000068&#39;
+  tag &quot;gid&quot;: &#39;V-61543&#39;
+  tag &quot;rid&quot;: &#39;SV-76033r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67459r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000186&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61545</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002421
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61545</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61545&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61545&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.&quot;
+  desc &quot;Preventing the disclosure of transmitted information requires that
+  applications take measures to employ some form of cryptographic mechanism in
+  order to protect the information during transmission. This is usually achieved
+  through the use of Transport Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+      Alternative physical protection measures include Protected Distribution
+  Systems (PDS). PDS are used to transmit unencrypted classified NSI through an
+  area of lesser classification or control. Inasmuch as the classified NSI is
+  unencrypted, the PDS must provide adequate electrical, electromagnetic, and
+  physical safeguards to deter exploitation. Refer to NSTSSI No. 7003 for
+  additional details on a PDS.
+
+      Information in transmission is particularly vulnerable to attack. If the
+  DBMS does not employ cryptographic mechanisms preventing unauthorized
+  disclosure of information during transit, the information may be compromised.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000264-DB-000136&#39;
+  tag &quot;gid&quot;: &#39;V-61545&#39;
+  tag &quot;rid&quot;: &#39;SV-76035r5_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-019700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67461r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002421&#39;]
+  tag &quot;nist&quot;: [&#39;SC-8 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61553</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (10)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002186
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61553</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (10), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61553&#39; do
+  title &quot;The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.&quot;
+  desc &quot;Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000019-DB-000197&#39;
+  tag &quot;gid&quot;: &#39;V-61553&#39;
+  tag &quot;rid&quot;: &#39;SV-76043r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67469r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002186&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (10)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61555</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61555</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine if the database is utilizing any network 
+         protocols deemed nonsecure.  If the DBMS is not using any network protocols deemed nonsecure, 
+         this is not a finding.
+
+         If the database is utilizing protocols specified as nonsecure, verify the protocols are 
+         explicitly identified in the System Security Plan and that they are in support of specific 
+         operational requirements. If they are not identified in the SSP or are not supporting specific 
+         operational requirements, this is a finding.
+
+         If nonsecure network protocols are not being used but are not disabled in the DBMS&#39;s 
+         configuration, this is a finding.
+
+         After determining the site-specific operational requirements and which protocols are explicitly 
+         defined in the System Security Plan, check the $TNS_ADMIN setting for the location of the Oracle 
+         listener.ora file.  The listener.ora file is a configuration file for Oracle Net Listener that 
+         identifies the following:
+
+         A unique name for the listener, typically LISTENER
+         A protocol address that it is accepting connection requests on, and
+         A service it is listening for.
+         
+         If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed nonsecure, 
+         that is a finding.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+             (ADDRESS_LIST&#x3D;
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+         Protocol Parameters
+
+         The Oracle Listener and the Oracle Connection Manager are identified by protocol addresses. 
+         The information below contains the &quot;Protocol-Specific Parameters&quot; used by the Oracle protocol 
+         support.
+
+         Protocol-Specific Parameters
+         Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+         Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the service. Oracle 
+                                                       recommends using the service name or SID of the 
+                                                       service.
+         Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+         Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+         Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the Oracle server.
+         Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used to connect to the 
+                                                     database server.
+                                                     This is the same PIPE keyword specified on the server 
+                                                     with Named Pipes.  This name can be any name.
+
+         Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+            
+         Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+         Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+
+         Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+         Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+         Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+         Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+ 
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the value.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening port number.
+                                                        Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+                                                                (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable any network protocol listed as nonsecure in the PPSM documentation.
+
+         To disable the protocol deemed not secure, stop the listener by issuing the following command as the 
+         Oracle Software owner, typically Oracle.
+          $ lsnrctl stop
+         This will stop the listener.  Edit the LISTENER.ORA file and remove the protocols deemed not secure 
+         and restart the listener.
+
+         For example, if TCP was deemed as not secure, the listener.ora would need to be changed and the tcp 
+         entry would need to be removed.  That would only allow the listener to listen for an IPC connection.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+           (ADDRESS_LIST&#x3D;
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line and properly balance the parentheses -
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+          Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL portion of the connect 
+          string.  For example, if TCP was deemed as not secure and the listener.ora was changed to listen for an 
+          IPC connection the code below would be required:
+
+          net_service_name&#x3D;
+          (DESCRIPTION&#x3D;
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+          (CONNECT_DATA&#x3D;
+          (SERVICE_NAME&#x3D;sales.us.example.com)))</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61555&#39; do
+  title &quot;The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.&quot;
+  desc &quot;This requirement is related to remote access, but more specifically to
+  the networking protocols allowing systems to communicate. Remote access is any
+  access to an organizational information system by a user (or an information
+  system) communicating through an external, non-organization  controlled network
+  (e.g., the Internet). Examples of remote access methods include dial-up,
+  broadband, and wireless.
+
+      Some networking protocols allowing remote access may not meet security
+  requirements to protect data and components. Bluetooth and peer-to-peer
+  networking are examples of less than secure networking protocols.
+
+      The DoD Ports, Protocols, and Services Management (PPSM) program provides
+  implementation guidance on the use of IP protocols and application and data
+  services traversing the DoD Networks in a manner supporting net-centric
+  operations.
+
+      Applications implementing or utilizing remote access network protocols need
+  to ensure the application is developed and implemented in accordance with the
+  PPSM requirements. In situations where it has been determined that specific
+  operational requirements outweigh the risks of enabling an insecure network
+  protocol, the organization may pursue a risk acceptance.
+
+      Using protocols deemed nonsecure would compromise the ability of the DBMS
+  to operate in a secure fashion. The database must be able to disable network
+  protocols deemed nonsecure.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000020-DB-000194&#39;
+  tag &quot;gid&quot;: &#39;V-61555&#39;
+  tag &quot;rid&quot;: &#39;SV-76045r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67471r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the PPSM Technical Assurance List to acquire an
+  up-to-date list of network protocols deemed nonsecure.
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  Review DBMS settings to determine if the database is utilizing any network
+  protocols deemed nonsecure.  If the DBMS is not using any network protocols
+  deemed nonsecure, this is not a finding.
+
+  If the database is utilizing protocols specified as nonsecure in the PPSM,
+  verify the protocols are explicitly identified in the System Security Plan and
+  that they are in support of specific operational requirements. If they are not
+  identified in the SSP or are not supporting specific operational requirements,
+  this is a finding.
+
+  If nonsecure network protocols are not being used but are not disabled in the
+  DBMS&#39;s configuration, this is a finding.
+
+  After determining the site-specific operational requirements and which
+  protocols are explicitly defined in the System Security Plan, check the
+  $TNS_ADMIN setting for the location of the Oracle listener.ora file.  The
+  listener.ora file is a configuration file for Oracle Net Listener that
+  identifies the following:
+
+  A unique name for the listener, typically LISTENER
+  A protocol address that it is accepting connection requests on, and
+  A service it is listening for.
+
+  If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed
+  nonsecure, that is a finding.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Protocol Parameters
+
+  The Oracle Listener and the Oracle Connection Manager are identified by
+  protocol addresses. The information below contains the \&quot;Protocol-Specific
+  Parameters\&quot; used by the Oracle protocol support.
+
+  Protocol-Specific Parameters
+
+  Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+  Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the
+  service. Oracle recommends using the service name or SID of the service.
+  Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+  Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+  Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the
+  Oracle server.
+  Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used
+  to connect to the database server.
+  This is the same PIPE keyword specified on the server with Named Pipes.  This
+  name can be any name.
+  Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+
+  Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+  Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+  Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the
+  value.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or
+  IP address of the computer.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening
+  port number.
+
+  Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+          (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)&quot;
+  tag &quot;fix&quot;: &quot;Disable any network protocol listed as nonsecure in the PPSM
+  documentation.
+
+  To disable the protocol deemed not secure, stop the listener by issuing the
+  following command as the Oracle Software owner, typically Oracle.
+            $ lsnrctl stop
+  This will stop the listener.  Edit the LISTENER.ORA file and remove the
+  protocols deemed not secure and restart the listener.
+
+  For example, if TCP was deemed as not secure, the listener.ora would need to be
+  changed and the tcp entry would need to be removed.  That would only allow the
+  listener to listen for an IPC connection.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line
+  and properly balance the parentheses -
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL
+  portion of the connect string.  For example, if TCP was deemed as not secure
+  and the listener.ora was changed to listen for an IPC connection the code below
+  would be required:
+
+  net_service_name&#x3D;
+  (DESCRIPTION&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+  (CONNECT_DATA&#x3D;
+  (SERVICE_NAME&#x3D;sales.us.example.com)))&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61557</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must employ automated mechanisms for supporting Oracle user
+  account management.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000015
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61557</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must employ automated mechanisms for supporting Oracle user
+  account management.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61557&#39; do
+  title &quot;The system must employ automated mechanisms for supporting Oracle user
+  account management.&quot;
+  desc &quot;A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000023-DB-000001&#39;
+  tag &quot;gid&quot;: &#39;V-61557&#39;
+  tag &quot;rid&quot;: &#39;SV-76047r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67473r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000015&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.&quot;
+  describe &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39; do
+    skip &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61559</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000016
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61559</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61559&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.&quot;
+  desc &quot;Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000002&#39;
+  tag &quot;gid&quot;: &#39;V-61559&#39;
+  tag &quot;rid&quot;: &#39;SV-76049r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67475r6_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61561</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000016
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61561</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+         or temporary accounts, this is not a finding.
+
+         If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access mechanism, 
+         and not by Oracle, this is not a finding.
+
+         Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+         determine if the site utilizes a mechanism whereby temporary or emergency accounts can be terminated after 
+         an organization-defined time period. If not, this is a finding.
+
+         Check the profiles to see what the password_life_time is set to in the table dba_profiles. 
+         The password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+         in the RESOURCE_NAME column.
+
+         SQL&gt;select
+         profile,
+         resource_name,
+         resource_type,
+         limit
+         from dba_profiles
+         where upper(resource_name) like &quot;PASSWORD_LIFE_TIME&quot;;
+
+         Verify that the user in question is assigned to a profile with the PASSWORD_LIFE_TIME set to 60 days.  
+         If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If using database mechanisms to satisfy this requirement, use a profile with a distinctive name 
+         (for example, TEMPORARY_USERS), so that temporary users can be easily identified.  Whenever a temporary user 
+         account is created, assign it to this profile.
+
+         Create a job to lock accounts under this profile that are more than 60 days old, where n is the 
+         organization-defined time period.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61561&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.&quot;
+  desc &quot;Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000003&#39;
+  tag &quot;gid&quot;: &#39;V-61561&#39;
+  tag &quot;rid&quot;: &#39;SV-76051r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67477r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if the site utilizes a mechanism whereby
+  temporary or emergency accounts can be terminated after an organization-defined
+  time period. If not, this is a finding.
+
+  Check the profiles to see what the password_life_time is set to in the table
+  dba_profiles. The password_life_time is a value stored in the LIMIT column, and
+  identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME column.
+
+  SQL&gt;select
+  profile,
+  resource_name,
+  resource_type,
+  limit
+  from dba_profiles
+  where upper(resource_name) like &#39;PASSWORD_LIFE_TIME&#39;;
+
+  Verify that the user in question is assigned to a profile with the
+  PASSWORD_LIFE_TIME set to the amount of time the user is expected to be using
+  the password.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If using database mechanisms to satisfy this requirement, use a
+  profile with a distinctive name (for example, TEMPORARY_USERS), so that
+  temporary users can be easily identified.  Whenever a temporary user account is
+  created, assign it to this profile.
+
+  Create a job to lock accounts under this profile that are more than n days old,
+  where n is the organization-defined time period.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  if user_profiles.empty?
+    describe &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39; do
+      skip &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39;
+    end
+  end
+
+  if !user_profiles.empty?
+    user_profiles.each do |profile|
+      unless input(&#39;emergency_profile_list&#39;).include?(profile)
+      	describe &quot;The profile #{profile} &quot; do
+	  subject { profile }
+	  it &quot;should not be in the org-defined list of profiles for emergency or temporary account management&quot; do
+	    expect(subject).should_not be_in(input(&#39;emergency_profile_list&#39;)) 
+	  end
+        end
+	next
+      end
+      password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+      describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+        subject { password_life_time }
+        it { should cmp &lt;&#x3D; input(&#39;password_life_time&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61565</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account creation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000018
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61565</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account creation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61565&#39; do
+  title &#39;The DBMS must automatically audit account creation.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000026-DB-000005&#39;
+  tag &quot;gid&quot;: &#39;V-61565&#39;
+  tag &quot;rid&quot;: &#39;SV-76055r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67481r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000018&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account creation is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account creation is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61569</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must  automatically audit account modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001403
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61569</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must  automatically audit account modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61569&#39; do
+  title &#39;The DBMS must  automatically audit account modification.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000027-DB-000186&#39;
+  tag &quot;gid&quot;: &#39;V-61569&#39;
+  tag &quot;rid&quot;: &#39;SV-76059r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67485r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001403&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account modification is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account modification is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account modification&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61571</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001404
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61571</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61571&#39; do
+  title &quot;The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000028-DB-000187&#39;
+  tag &quot;gid&quot;: &#39;V-61571&#39;
+  tag &quot;rid&quot;: &#39;SV-76061r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67487r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001404&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account disabling is not being audited. &#39;
+    FROM dual
+    WHERE (SELECT Count(*)
+    FROM (select policy_name , audit_option from audit_unified_policies
+    WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+    and policy_name in (select policy_name from audit_unified_enabled_policies
+    where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+    OR (SELECT value
+    FROM v$option
+    WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account disabling is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account disabling actions&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61573</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account termination.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001405
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61573</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account termination.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61573&#39; do
+  title &#39;The DBMS must automatically audit account termination.&#39;
+  desc  &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000029-DB-000188&#39;
+  tag &quot;gid&quot;: &#39;V-61573&#39;
+  tag &quot;rid&quot;: &#39;SV-76063r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67489r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001405&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account termination is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account termination is not being audited&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account termination&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61575</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000213
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61575</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role &quot;User roles and privileges&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61575&#39; do
+  title &quot;The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.&quot;
+  desc &quot;Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000033-DB-000084&#39;
+  tag &quot;gid&quot;: &#39;V-61575&#39;
+  tag &quot;rid&quot;: &#39;SV-76065r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67491r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000213&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role \&quot;User roles and privileges\&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61577</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61577</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61577&#39; do
+  title &quot;The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&quot;
+  desc &quot;Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000036-DB-000174&#39;
+  tag &quot;gid&quot;: &#39;V-61577&#39;
+  tag &quot;rid&quot;: &#39;SV-76067r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67493r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+    allowing users to specify and control sharing by named individuals, groups of
+    individuals, or by both, limiting propagation of access rights and including or
+    excluding access to the granularity of a single user.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61579</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS processes or services must run under custom, dedicated OS
+  accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61579</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS processes or services must run under custom, dedicated OS
+  accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61579&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61579&#39; do
+  title &quot;DBMS processes or services must run under custom, dedicated OS
+  accounts.&quot;
+  desc &quot;Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000010&#39;
+  tag &quot;gid&quot;: &#39;V-61579&#39;
+  tag &quot;rid&quot;: &#39;SV-76069r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67495r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_&quot;
+  tag &quot;fix&quot;: &quot;Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.&quot;
+
+  oracle_file_owners &#x3D; command(&quot;ls -l  $ORACLE_HOME|awk &#39;{ print $3; }&#39; | sort -u&quot;).stdout.strip.split(&quot;\n&quot;)
+
+  oracle_file_owners.each do |owner|
+    describe &#39;The file and directory inside the Oracle Home directory&#39; do
+      subject { owner }
+      it { should cmp &#39;oracle&#39; }
+    end
+  end
+  if oracle_file_owners.empty?
+    describe &#39;There are no oracle file owners, therefore this control is NA&#39; do
+      skip &#39;There are no oracle file owners, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61581</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict grants to sensitive information to authorized
+  user roles.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61581</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict grants to sensitive information to authorized
+  user roles.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61581&#39; do
+  title &quot;The DBMS must restrict grants to sensitive information to authorized
+  user roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000011&#39;
+  tag &quot;gid&quot;: &#39;V-61581&#39;
+  tag &quot;rid&quot;: &#39;SV-76071r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67497r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61583</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A single database connection configuration file must not be used to
+  configure all database clients.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61583</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A single database connection configuration file must not be used to
+  configure all database clients.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to supply database connection information to
+  only those databases authorized for the user.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61583&#39; do
+  title &quot;A single database connection configuration file must not be used to
+  configure all database clients.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000012&#39;
+  tag &quot;gid&quot;: &#39;V-61583&#39;
+  tag &quot;rid&quot;: &#39;SV-76073r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67499r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to supply database connection information to
+  only those databases authorized for the user.&quot;
+  describe &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39; do
+    skip &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61585</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must be protected from unauthorized access by developers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61585</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must be protected from unauthorized access by developers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61585&#39; do
+  title &#39;The DBMS must be protected from unauthorized access by developers.&#39;
+  desc  &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000014&#39;
+  tag &quot;gid&quot;: &#39;V-61585&#39;
+  tag &quot;rid&quot;: &#39;SV-76075r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67501r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61587</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61587</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61587&#39; do
+  title &quot;The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000015&#39;
+  tag &quot;gid&quot;: &#39;V-61587&#39;
+  tag &quot;rid&quot;: &#39;SV-76077r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67503r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61589</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADMIN1 with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: APPQOSSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CTXSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: DBA with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: PUBLIC with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: RDSADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSDG with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSKM with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDB with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDBADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADMIN1 with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: APPQOSSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CTXSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: DBA with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: PUBLIC with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: RDSADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSDG with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSKM with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDB with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDBADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61589</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61589&#39; do
+  title &quot;The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000016&#39;
+  tag &quot;gid&quot;: &#39;V-61589&#39;
+  tag &quot;rid&quot;: &#39;SV-76079r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67505r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dictionary_table_access &#x3D; sql.query(&quot;SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dictionary_table_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39;
+    end
+  else
+    users_with_dictionary_table_access.each do |user|
+      describe &quot;oracle users: #{user} with access to the dictionary table&quot; do
+        subject { user }
+        it { should be_in USERS_ALLOWED_ACCESS_TO_DICTIONARY_TABLE }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61591</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Administrative privileges must be assigned to database accounts via
+  database roles.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Database accounts with administrative privileges is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Database accounts with administrative privileges is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61591</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Administrative privileges must be assigned to database accounts via
+  database roles.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61591&#39; do
+  title &quot;Administrative privileges must be assigned to database accounts via
+  database roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000034&#39;
+  tag &quot;gid&quot;: &#39;V-61591&#39;
+  tag &quot;rid&quot;: &#39;SV-76081r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67507r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)&quot;
+  tag &quot;fix&quot;: &quot;Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_accounts_with_administrative_privs &#x3D; sql.query(&quot;SELECT grantee
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  );&quot;).column(&#39;grantee&#39;).uniq
+
+  describe &#39;Database accounts with administrative privileges&#39; do
+    subject { database_accounts_with_administrative_privs }
+    it { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61593</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61593</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61593&#39; do
+  title &quot;Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000017&#39;
+  tag &quot;gid&quot;: &#39;V-61593&#39;
+  tag &quot;rid&quot;: &#39;SV-76083r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67509r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  &quot;
+  tag &quot;fix&quot;: &quot;Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.&quot;
+  describe &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39; do
+    skip &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61595</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>All use of privileged accounts must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of unified auditing policies defined is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of users being audited is expected to include &quot;ALL USERS&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of unified auditing policies defined is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of users being audited is expected to include &quot;ALL USERS&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61595</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">All use of privileged accounts must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61595&#39; do
+  title &#39;All use of privileged accounts must be audited.&#39;
+  desc  &quot;This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61595&#39;
+  tag &quot;rid&quot;: &#39;SV-76085r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67511r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  unified_auditing_policies_defined &#x3D; sql.query(&#39;SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  describe &#39;The list of unified auditing policies defined&#39; do
+    subject { unified_auditing_policies_defined }
+    it { should_not be_empty }
+  end
+
+  users_being_audited &#x3D; sql.query(&#39;SELECT unique user_name from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;user_name&#39;)
+
+  describe &#39;The list of users being audited&#39; do
+    subject { users_being_audited }
+    it { should include &#39;ALL USERS&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61597</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61597</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61597&#39; do
+  title &quot;Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.&quot;
+  desc &quot;Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61597&#39;
+  tag &quot;rid&quot;: &#39;SV-76087r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004210&#39;
+  tag &quot;fix_id&quot;: &#39;F-67513r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.&quot;
+  describe &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39; do
+    skip &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61599</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBA role must not be assigned excessive or unauthorized
+  privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: ADMIN1 with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: RDSADMIN with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: ADMIN1 with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: RDSADMIN with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61599</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBA role must not be assigned excessive or unauthorized
+  privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role &quot;USER PRIVS&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61599&#39; do
+  title &quot;The DBA role must not be assigned excessive or unauthorized
+  privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000019&#39;
+  tag &quot;gid&quot;: &#39;V-61599&#39;
+  tag &quot;rid&quot;: &#39;SV-76089r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67515r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role \&quot;USER PRIVS\&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map&quot;
+  tag &quot;fix&quot;: &quot;Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_privs &#x3D; sql.query(&quot;SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;&quot;).column(&#39;username&#39;).uniq
+  if users_with_admin_privs.empty?
+    impact 0.0
+    describe &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_privs.each do |user|
+      describe &quot;oracle database users: #{user} with administative privileges&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_with_admin_privs&#39;)}
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61601</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61601</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61601&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61601&#39; do
+  title &quot;OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000020&#39;
+  tag &quot;gid&quot;: &#39;V-61601&#39;
+  tag &quot;rid&quot;: &#39;SV-76091r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67517r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS&quot;
+  tag &quot;fix&quot;: &quot;Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should include &#39;run_group &#x3D; nobody&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61603</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must verify account lockouts persist until reset by an
+      administrator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002236
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61603</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must verify account lockouts persist until reset by an
+      administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61603&#39; do
+      title &quot;The DBMS must verify account lockouts persist until reset by an
+      administrator.&quot;
+      desc &quot;Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+      &quot;
+      impact 0.5
+      tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+      tag &quot;gid&quot;: &#39;V-61603&#39;
+      tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+      tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+      tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+      tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+      tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+      tag &quot;false_negatives&quot;: nil
+      tag &quot;false_positives&quot;: nil
+      tag &quot;documentable&quot;: false
+      tag &quot;mitigations&quot;: nil
+      tag &quot;severity_override_guidance&quot;: false
+      tag &quot;potential_impacts&quot;: nil
+      tag &quot;third_party_tools&quot;: nil
+      tag &quot;mitigation_controls&quot;: nil
+      tag &quot;responsibility&quot;: nil
+      tag &quot;ia_controls&quot;: nil
+      tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.&quot;
+      tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+    
+      sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+    
+      query &#x3D; %{
+        SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+      }
+    
+      user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+    
+      user_profiles.each do |profile|
+        next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+        password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+    
+        describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+          subject { password_lock_time }
+          it { should cmp &#39;UNLIMITED&#39; }
+        end
+      end
+      if user_profiles.empty?
+        describe &#39;There are no user profiles, therefore this control is NA&#39; do
+          skip &#39;There are no user profiles, therefore this control is NA&#39;
+        end
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61603&#39; do
+  title &quot;The DBMS must verify account lockouts persist until reset by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed, to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+  tag &quot;gid&quot;: &#39;V-61603&#39;
+  tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+  to a user.
+
+  To see what profile is assigned to a user, enter the query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for password_lock_time - this specifies how long to lock the
+  account after the number of consecutive failed logon attempts reaches the
+  limit. If the value is not UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+  duration:
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61605</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the number of consecutive failed logon attempts to 5.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000044
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61605</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the number of consecutive failed logon attempts to 5.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&amp;USERNAME&quot;
+         This will return the profile name assigned to that user.
+
+         Now check the values assigned to the profile returned from the query above:
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE &quot;&amp;PROFILE_NAME&quot;
+
+         Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;
+
+         (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.  Note: It remains 
+         necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61605&#39; do
+  title &quot;The DBMS must limit the number of consecutive failed logon attempts to
+  3.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000025&#39;
+  tag &quot;gid&quot;: &#39;V-61605&#39;
+  tag &quot;rid&quot;: &#39;SV-76095r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67521r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000044&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&amp;USERNAME&#39;
+  This will return the profile name assigned to that user.
+
+  Now check the values assigned to the profile returned from the query above:
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE
+  &#39;&amp;PROFILE_NAME&#39;
+
+  Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;
+
+  (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.
+  Note: It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time.first }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61607</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61607</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&lt;username&gt;&quot;
+
+         This will return the profile name assigned to that user.
+
+         The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy 
+         the STIG requirements pertaining to the profile parameters. Oracle recommends that this profile be 
+         customized with any site-specific requirements and assigned to all users where applicable.  
+         Note: It remains necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.
+
+         Now check the values assigned to the profile returned from the query above:
+
+         column profile format a20
+         column limit format a20
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D; &quot;ORA_STIG_PROFILE&quot;;
+
+         Check the settings for failed_login_attempts - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61607&#39; do
+      sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+    
+      query &#x3D; %{
+        SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+      }
+    
+      user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+    
+      user_profiles.each do |profile|
+        next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+        password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+    
+        describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+          subject { password_lock_time }
+          it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+        end
+      end
+      if user_profiles.empty?
+        describe &#39;There are no user profiles, therefore this control is NA&#39; do
+          skip &#39;There are no user profiles, therefore this control is NA&#39;
+        end
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61607&#39; do
+  title &quot;The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000067-DB-000026&#39;
+  tag &quot;gid&quot;: &#39;V-61607&#39;
+  tag &quot;rid&quot;: &#39;SV-76097r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67523r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for failed_login_attempts - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61613</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61613</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61613&#39; do
+  title &quot;The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.&quot;
+  desc &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000071-DB-000047&#39;
+  tag &quot;gid&quot;: &#39;V-61613&#39;
+  tag &quot;rid&quot;: &#39;SV-76103r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67529r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61615</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must have allocated audit record storage capacity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has allocated audit record storage capacity</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has allocated audit record storage capacity</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61615</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must have allocated audit record storage capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61615&#39; do
+  title &#39;The DBMS must have allocated audit record storage capacity.&#39;
+  desc  &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000072-DB-000046&#39;
+  tag &quot;gid&quot;: &#39;V-61615&#39;
+  tag &quot;rid&quot;: &#39;SV-76105r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67531r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61617</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61617</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61619</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61619</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61619&#39; do
+  title &quot;A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.&quot;
+  desc &quot;DAC is based on the notion that individual users are \&quot;owners\&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000087-DB-000013&#39;
+  tag &quot;gid&quot;: &#39;V-61619&#39;
+  tag &quot;rid&quot;: &#39;SV-76109r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67535r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)&quot;
+  describe &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39; do
+    skip &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61621</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000169
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61621</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61621&#39; do
+  title &quot;The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system. (e.g., network interface, hard disk, modem, etc.). From an
+  application perspective, certain specific application functionalities may be
+  audited as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations define which application components shall provide auditable
+  events.
+
+      The DBMS must provide auditing for the list of events defined by the
+  organization or risk negatively impacting forensic investigations into
+  malicious behavior in the information system. Audit records can be generated
+  from various components within the information system, such as network
+  interfaces, hard disks, modems, etc. From an application perspective, certain
+  specific application functionalities may be audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000089-DB-000064&#39;
+  tag &quot;gid&quot;: &#39;V-61621&#39;
+  tag &quot;rid&quot;: &#39;SV-76111r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67537r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000169&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61623</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000171
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61623</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61623&#39; do
+  title &quot;The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.&quot;
+  desc  &quot;The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000090-DB-000065&#39;
+  tag &quot;gid&quot;: &#39;V-61623&#39;
+  tag &quot;rid&quot;: &#39;SV-76113r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67539r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000171&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39; do
+    skip &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61625</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61625</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine if auditing is being performed on the 
+    events on the list of auditable events that lie within the scope of Oracle audit capabilities:
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of 
+    information (e.g., classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system-level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - All account creations, modifications, disabling, and terminations.
+
+    If auditing is not being performed for any of these events, this is a finding.
+
+    Notes on Oracle audit capabilities follow.
+
+    Unified Audit supports named audit policies, which are defined using the CREATE AUDIT POLICY statement. 
+    A policy specifies the actions that should be audited and the objects to which it should apply. 
+    If no specific objects are included in the policy definition, it applies to all objects.
+
+    A named policy is enabled using the AUDIT POLICY statement. It can be enabled for all users, for 
+    specific users only, or for all except a specified list of users. The policy can audit successful actions, 
+    unsuccessful actions, or both.
+
+    Verifying existing audit policy: existing Unified Audit policies are listed in the view AUDIT_UNIFIED_POLICIES. 
+    The AUDIT_OPTION column contains one of the actions specified in a CREATE AUDIT POLICY statement. 
+    The AUDIT_OPTION_TYPE column contains &quot;STANDARD ACTION&quot; for a policy that applies to all objects or 
+    &quot;OBJECT ACTION&quot; for a policy that audits actions on a specific object.
+
+    select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; and 
+    AUDIT_OPTION_TYPE&#x3D;&quot;STANDARD ACTION&quot;;
+
+    To find policies that audit privilege grants on specific objects:
+
+    select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; 
+    and AUDIT_OPTION_TYPE&#x3D;&quot;OBJECT ACTION&quot;;
+
+    The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are enabled. The ENABLED_OPT 
+    and USER_NAME columns show the users for whom the policy is enabled or &quot;ALL USERS&quot;. The SUCCESS and FAILURE 
+    columns indicate if the policy is enabled for successful or unsuccessful actions, respectively.
+
+    select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from SYS.AUDIT_UNIFIED_ENABLED_POLICIES where 
+    POLICY_NAME&#x3D;&quot;POLICY1&quot;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing settings to include auditing of events on the selected list 
+    of auditable events.
+
+    1) Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security 
+    levels, or categories of information (e.g., classification levels)
+
+    To audit granting and revocation of any privilege:
+    create audit policy policy1 actions grant;
+    create audit policy policy2 actions revoke;
+
+    To audit grants of object privileges on a specific object:
+    create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+    If Oracle Label Security is enabled, this will audit all OLS administrative actions:
+    create audit policy policy4 actions component &#x3D; OLS all;
+
+    2) Successful and unsuccessful logon attempts, privileged activities or other system-level access
+ 
+    To audit all user logon attempts:
+    create audit policy policy5 actions logon;
+
+    To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+    audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+    3) Starting and ending time for user access to the system, concurrent logons from different 
+    workstations
+
+    This policy will audit all logon and logoff events. An individual session is identified in the 
+    UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID, SESSIONID) and the start and end time will be 
+    indicated by the EVENT_TIMESTAMP of the logon and logoff events:
+
+    create audit policy policy6 actions logon, logoff;
+
+    4) Successful and unsuccessful accesses to objects
+
+    To audit all accesses to a specific table:
+    create audit policy policy7 actions select, insert, delete, alter on &lt;schema&gt;.&lt;object&gt;; 
+
+    Different actions are defined for other object types. To audit all supported actions on a specific object:
+    create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+    5) All program initiations
+
+    To audit execution of any PL&#x2F;SQL program unit:
+    create audit policy policy9 actions EXECUTE;
+
+    To audit execution of a specific function, procedure, or package:
+    create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+    6) All direct access to the information system
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    7) All account creations, modifications, disabling, and terminations
+
+    To audit all user administration actions:
+    create audit policy policy11 actions create user, alter user, drop user, change password;
+
+    8) All kernel module loads, unloads, and restarts
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    9) All database parameter changes
+
+    To audit any database parameter changes, dynamic or static:
+    create audit policy policy12 actions alter database, alter system, create spfile;
+
+    Applying the Policy
+
+    The following command will enable the policy in all database sessions and audit both 
+    successful and unsuccessful actions: audit policy policy1; 
+
+    To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+    audit policy policy1 whenever not successful;
+
+    Either command above can be limited to only database sessions started by a specific user as 
+    follows:
+    audit policy policy1 by &lt;user&gt;;
+    audit policy policy1 by &lt;user&gt; whenever not successful;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61625&#39; do
+  title &quot;The DBMS must generate audit records for the DoD-selected list of
+  auditable events, to the extent such information is available.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system, such as network interfaces, hard disks, modems, etc. From
+  an application perspective, certain specific application functionalities may be
+  audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000091-DB-000066&#39;
+  tag &quot;gid&quot;: &#39;V-61625&#39;
+  tag &quot;rid&quot;: &#39;SV-76115r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67541r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000172&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if auditing is being performed
+  on the events on the DoD-selected list of auditable events that lie within the
+  scope of Oracle audit capabilities:
+  - Successful and unsuccessful attempts to access, modify, or delete privileges,
+  security objects, security levels, or categories of information (e.g.,
+  classification levels).
+  - Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+  - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+  - Successful and unsuccessful accesses to objects.
+  - All program initiations.
+  - All account creations, modifications, disabling, and terminations.
+
+  If auditing is not being performed for any of these events, this is a finding.
+
+  Notes on Oracle audit capabilities follow.
+
+  Unified Audit supports named audit policies, which are defined using the CREATE
+  AUDIT POLICY statement. A policy specifies the actions that should be audited
+  and the objects to which it should apply. If no specific objects are included
+  in the policy definition, it applies to all objects.
+
+  A named policy is enabled using the AUDIT POLICY statement. It can be enabled
+  for all users, for specific users only, or for all except a specified list of
+  users. The policy can audit successful actions, unsuccessful actions, or both.
+
+  Verifying existing audit policy:  existing Unified Audit policies are listed in
+  the view AUDIT_UNIFIED_POLICIES. The AUDIT_OPTION column contains one of the
+  actions specified in a CREATE AUDIT POLICY statement. The AUDIT_OPTION_TYPE
+  column contains &#39;STANDARD ACTION&#39; for a policy that applies to all objects or
+  &#39;OBJECT ACTION&#39; for a policy that audits actions on a specific object.
+
+  select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&#39;GRANT&#39;
+  and AUDIT_OPTION_TYPE&#x3D;&#39;STANDARD ACTION&#39;;
+
+  To find policies that audit privilege grants on specific objects:
+
+  select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;
+
+  The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are
+  enabled. The ENABLED_OPT and USER_NAME columns show the users for whom the
+  policy is enabled or &#39;ALL USERS&#39;. The SUCCESS and FAILURE columns indicate if
+  the policy is enabled for successful or unsuccessful actions, respectively.
+
+  select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from
+  SYS.AUDIT_UNIFIED_ENABLED_POLICIES where POLICY_NAME&#x3D;&#39;POLICY1&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing settings to include auditing of
+  events on the DoD-selected list of auditable events.
+
+  1) Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g., classification levels)
+
+  To audit granting and revocation of any privilege:
+  create audit policy policy1 actions grant;
+  create audit policy policy2 actions revoke;
+
+  To audit grants of object privileges on a specific object:
+  create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+  If Oracle Label Security is enabled, this will audit all OLS administrative
+  actions:
+  create audit policy policy4 actions component &#x3D; OLS all;
+
+  2) Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+
+  To audit all user logon attempts:
+  create audit policy policy5 actions logon;
+
+  To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+  audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+  3) Starting and ending time for user access to the system, concurrent logons
+  from different workstations
+
+  This policy will audit all logon and logoff events. An individual session is
+  identified in the UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID,
+  SESSIONID) and the start and end time will be indicated by the EVENT_TIMESTAMP
+  of the logon and logoff events:
+  create audit policy policy6 actions logon, logoff;
+
+  4) Successful and unsuccessful accesses to objects
+
+  To audit all accesses to a specific table:
+  create audit policy policy7 actions select, insert, delete, alter on
+  &lt;schema&gt;.&lt;object&gt;;
+
+  Different actions are defined for other object types. To audit all supported
+  actions on a specific object:
+  create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+  5) All program initiations
+
+  To audit execution of any PL&#x2F;SQL program unit:
+  create audit policy policy9 actions EXECUTE;
+
+  To audit execution of a specific function, procedure, or package:
+  create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+  6) All direct access to the information system
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  7) All account creations, modifications, disabling, and terminations
+
+  To audit all user administration actions:
+  create audit policy policy11 actions create user, alter user, drop user, change
+  password;
+
+  8) All kernel module loads, unloads, and restarts
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  9) All database parameter changes
+
+  To audit any database parameter changes, dynamic or static:
+  create audit policy policy12 actions alter database, alter system, create
+  spfile;
+
+  Applying the Policy
+
+  The following command will enable the policy in all database sessions and audit
+  both successful and unsuccessful actions:
+  audit policy policy1;
+
+  To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+  audit policy policy1 whenever not successful;
+
+  Either command above can be limited to only database sessions started by a
+  specific user as follows:
+  audit policy policy1 by &lt;user&gt;;
+  audit policy policy1 by &lt;user&gt; whenever not successful;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_policies_auditing_grant_privileges &#x3D; sql.query(&quot;select DISTINCT POLICY_NAME from AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;&quot;).column(&#39;policy_name&#39;)
+  unified_audit_policies_enabled &#x3D; sql.query(&#39;select POLICY_NAME from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The audit policies that audit privilege grants on specific objects&#39; do
+      subject { audit_policies_auditing_grant_privileges }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The list of unified audit policies enabled&#39; do
+      subject { unified_audit_policies_enabled }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61627</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61627</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61627&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000095-DB-000039&#39;
+  tag &quot;gid&quot;: &#39;V-61627&#39;
+  tag &quot;rid&quot;: &#39;SV-76117r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67543r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000130&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61631</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000131
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61631</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61631&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000096-DB-000040&#39;
+  tag &quot;gid&quot;: &#39;V-61631&#39;
+  tag &quot;rid&quot;: &#39;SV-76121r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67881r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000131&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61633</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000132
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61633</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61633&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000097-DB-000041&#39;
+  tag &quot;gid&quot;: &#39;V-61633&#39;
+  tag &quot;rid&quot;: &#39;SV-76123r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67545r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000132&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61635</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61635</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61635&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000098-DB-000042&#39;
+  tag &quot;gid&quot;: &#39;V-61635&#39;
+  tag &quot;rid&quot;: &#39;SV-76125r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67547r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000133&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61637</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000134
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61637</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61637&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000099-DB-000043&#39;
+  tag &quot;gid&quot;: &#39;V-61637&#39;
+  tag &quot;rid&quot;: &#39;SV-76127r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67549r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000134&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61639</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001487
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61639</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61639&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.&quot;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000100-DB-000201&#39;
+  tag &quot;gid&quot;: &#39;V-61639&#39;
+  tag &quot;rid&quot;: &#39;SV-76129r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67551r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001487&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61641</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61641</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &quot;OS&quot;, &quot;DB&quot;, &quot;DB,EXTENDED&quot;, &quot;XML&quot; or
+  &quot;XML,EXTENDED&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61641&#39; do
+  title &quot;The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000101-DB-000044&#39;
+  tag &quot;gid&quot;: &#39;V-61641&#39;
+  tag &quot;rid&quot;: &#39;SV-76131r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67553r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000135&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be \&quot;OS\&quot;, \&quot;DB\&quot;, \&quot;DB,EXTENDED\&quot;, \&quot;XML\&quot; or
+  \&quot;XML,EXTENDED\&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+  fga_audit_events &#x3D; sql.query(&quot; SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;&quot;).column(&#39;TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The oracle database fine grained  auditing events captured&#39; do
+      subject { fga_audit_events }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61643</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001855
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61643</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61643&#39; do
+  title &quot;The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000103-DB-000050&#39;
+  tag &quot;gid&quot;: &#39;V-61643&#39;
+  tag &quot;rid&quot;: &#39;SV-76133r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67555r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001855&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1&quot;
+
+  describe &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61645</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide a real-time alert when organization-defined
+  audit failure events occur.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001858
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61645</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide a real-time alert when organization-defined
+  audit failure events occur.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61645&#39; do
+  title &quot;The system must provide a real-time alert when organization-defined
+  audit failure events occur.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000104-DB-000051&#39;
+  tag &quot;gid&quot;: &#39;V-61645&#39;
+  tag &quot;rid&quot;: &#39;SV-76135r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67559r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001858&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)&quot;
+  describe &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39; do
+    skip &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61647</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must alert designated organizational officials in the event
+  of an audit processing failure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000139
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61647</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must alert designated organizational officials in the event
+  of an audit processing failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61647&#39; do
+  title &quot;The system must alert designated organizational officials in the event
+  of an audit processing failure.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000108-DB-000048&#39;
+  tag &quot;gid&quot;: &#39;V-61647&#39;
+  tag &quot;rid&quot;: &#39;SV-76137r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67561r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000139&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.&quot;
+  describe &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39; do
+    skip &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61649</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000158
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61649</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61649&#39; do
+  title &quot;The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.&quot;
+  desc &quot;Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000055&#39;
+  tag &quot;gid&quot;: &#39;V-61649&#39;
+  tag &quot;rid&quot;: &#39;SV-76139r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67563r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.&quot;
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61651</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Attempts to bypass access controls must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000158
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61651</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Attempts to bypass access controls must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col &quot;tmp tba&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace &quot;TMP TBS&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61651&#39; do
+  title &#39;Attempts to bypass access controls must be audited.&#39;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000056&#39;
+  tag &quot;gid&quot;: &#39;V-61651&#39;
+  tag &quot;rid&quot;: &#39;SV-76141r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67565r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col \&quot;tmp tba\&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace \&quot;TMP TBS\&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER&quot;
+  tag &quot;fix&quot;: &quot;Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61653</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from any type of
+  unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000162
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61653</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from any type of
+  unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61653&#39; do
+  title &quot;The system must protect audit information from any type of
+  unauthorized access.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000118-DB-000059&#39;
+  tag &quot;gid&quot;: &#39;V-61653&#39;
+  tag &quot;rid&quot;: &#39;SV-76143r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67567r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000162&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61655</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from unauthorized
+  modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000163
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61655</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from unauthorized
+  modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61655&#39; do
+  title &quot;The system must protect audit information from unauthorized
+  modification.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000119-DB-000060&#39;
+  tag &quot;gid&quot;: &#39;V-61655&#39;
+  tag &quot;rid&quot;: &#39;SV-76145r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67569r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000163&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61657</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from unauthorized deletion.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000164
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61657</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from unauthorized deletion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61657&#39; do
+  title &#39;The system must protect audit information from unauthorized deletion.&#39;
+  desc  &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000120-DB-000061&#39;
+  tag &quot;gid&quot;: &#39;V-61657&#39;
+  tag &quot;rid&quot;: &#39;SV-76147r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67571r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000164&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61659</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001493
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61659</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61659&#39; do
+  title &#39;The system must protect audit tools from unauthorized access.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000121-DB-000202&#39;
+  tag &quot;gid&quot;: &#39;V-61659&#39;
+  tag &quot;rid&quot;: &#39;SV-76149r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67573r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001493&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61661</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001494
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61661</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61661&#39; do
+  title &#39;The system must protect audit tools from unauthorized modification.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000122-DB-000203&#39;
+  tag &quot;gid&quot;: &#39;V-61661&#39;
+  tag &quot;rid&quot;: &#39;SV-76151r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67575r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001494&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61663</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized deletion.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001495
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61663</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized deletion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61663&#39; do
+  title &#39;The system must protect audit tools from unauthorized deletion.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000123-DB-000204&#39;
+  tag &quot;gid&quot;: &#39;V-61663&#39;
+  tag &quot;rid&quot;: &#39;SV-76153r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67577r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001495&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61665</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001348
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61665</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61665&#39; do
+  title &quot;The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.&quot;
+  desc &quot;Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000125-DB-000170&#39;
+  tag &quot;gid&quot;: &#39;V-61665&#39;
+  tag &quot;rid&quot;: &#39;SV-76155r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67579r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001348&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61667</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001350
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61667</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY &quot;password&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61667&#39; do
+  title &quot;The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000126-DB-000171&#39;
+  tag &quot;gid&quot;: &#39;V-61667&#39;
+  tag &quot;rid&quot;: &#39;SV-76157r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67581r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001350&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY \&quot;password\&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE&quot;
+  describe &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61669</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001351
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61669</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61669&#39; do
+  title &quot;The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000127-DB-000172&#39;
+  tag &quot;gid&quot;: &#39;V-61669&#39;
+  tag &quot;rid&quot;: &#39;SV-76159r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67583r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-001351&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61671</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000345
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61671</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61671&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61671&#39; do
+  title &quot;The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.&quot;
+  desc &quot;When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000128-DB-000086&#39;
+  tag &quot;gid&quot;: &#39;V-61671&#39;
+  tag &quot;rid&quot;: &#39;SV-76161r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67585r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000345&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61673</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database objects must be owned by accounts authorized for ownership.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61673</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database objects must be owned by accounts authorized for ownership.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61673&#39; do
+  title &#39;Database objects must be owned by accounts authorized for ownership.&#39;
+  desc  &quot;Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000200&#39;
+  tag &quot;gid&quot;: &#39;V-61673&#39;
+  tag &quot;rid&quot;: &#39;SV-76163r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67587r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;&quot;
+  tag &quot;fix&quot;: &quot;Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_object_owners &#x3D; sql.query(&#39;select DISTINCT owner from dba_objects;&#39;).column(&#39;owner&#39;).uniq
+  if dba_object_owners .empty?
+    impact 0.0
+    describe &#39;There are no oracle dba object owners, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle dba object owners, control N&#x2F;A&#39;
+    end
+  else
+    dba_object_owners .each do |owner|
+      describe &quot;oracle datbase object owner: #{owner}&quot; do
+        subject { owner }
+        it { should be_in input(&#39;allowed_dbaobject_owners&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61675</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce requirements for remote connections to the
+  information system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61675</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce requirements for remote connections to the
+  information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review organization&#39;s access control policies and procedures addressing remote 
+    access to the information system.
+
+    If remote connections are not allowed by the organization, this is NA. (Note that &quot;remote&quot; means 
+    &quot;from outside the CMS network&quot; and that connections via approved Virtual Private Networks (VPNs) 
+    are considered to be inside the CMS network.)
+
+    Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify access controls and 
+    auditing settings exist and they enforce the requirements for remote access defined by the organization.
+
+    If access controls and auditing do not exist or do not fully enforce the requirements defined in the 
+    organization&#39;s policies and procedures, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61675&#39; do
+  title &quot;The DBMS must enforce requirements for remote connections to the
+  information system.&quot;
+  desc &quot;Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000140-DB-000033&#39;
+  tag &quot;gid&quot;: &#39;V-61675&#39;
+  tag &quot;rid&quot;: &#39;SV-76165r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67589r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review organization&#39;s access control policies and procedures
+  addressing remote access to the information system.
+
+  If remote connections are not allowed by the organization, this is NA. (Note
+  that \&quot;remote\&quot; means \&quot;from outside the DoD Information Network (DoDIN)\&quot; and
+  that connections via approved Virtual Private Networks (VPNs) are considered to
+  be inside the DoDIN.)
+
+  Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify
+  access controls and auditing settings exist and they enforce the requirements
+  for remote access defined by the organization.
+
+  If access controls and auditing do not exist or do not fully enforce the
+  requirements defined in the organization&#39;s policies and procedures, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61677</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Default demonstration and sample databases, database objects, and
+  applications must be removed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle default sample schema user accounts is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle default sample schema user accounts is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61677</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Default demonstration and sample databases, database objects, and
+  applications must be removed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61677&#39; do
+  title &quot;Default demonstration and sample databases, database objects, and
+  applications must be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000090&#39;
+  tag &quot;gid&quot;: &#39;V-61677&#39;
+  tag &quot;rid&quot;: &#39;SV-76167r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67591r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sample_schema_user_accounts &#x3D; sql.query(&quot;select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);&quot;).column(&#39;username&#39;)
+
+  describe &#39;The list of oracle default sample schema user accounts&#39; do
+    subject { sample_schema_user_accounts }
+    it { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61679</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unused database components, DBMS software, and database objects must
+  be removed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components: Oracle Text is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components: Oracle Text is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61679</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unused database components, DBMS software, and database objects must
+  be removed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61679&#39; do
+  title &quot;Unused database components, DBMS software, and database objects must
+  be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000091&#39;
+  tag &quot;gid&quot;: &#39;V-61679&#39;
+  tag &quot;rid&quot;: &#39;SV-76169r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67593r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault&quot;
+  tag &quot;fix&quot;: &quot;If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components &#x3D; sql.query(&quot;SELECT comp_id, comp_name, version, status from dba_registry where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);&quot;).column(&#39;comp_name&#39;).uniq
+  if list_of_installed_components.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components installed, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components installed, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components.each do |component|
+      describe &quot;The installed oracle database components: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61681</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: OLAP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: OLAP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61681</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61681&#39; do
+  title &quot;Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000092&#39;
+  tag &quot;gid&quot;: &#39;V-61681&#39;
+  tag &quot;rid&quot;: &#39;SV-76171r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67595r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components_integrated_into_dbms &#x3D; sql.query(&quot;SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );&quot;).column(&#39;parameter&#39;).uniq
+  if list_of_installed_components_integrated_into_dbms.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components integrated into the DBMS, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components integrated into the DBMS, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components_integrated_into_dbms.each do |component|
+      describe &quot;The installed oracle database components integrated into the DBMS: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components_integrated_into_dbms&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61683</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of external executables must be authorized.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61683</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of external executables must be authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61683&#39; do
+  title &#39;Use of external executables must be authorized.&#39;
+  desc  &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61683&#39;
+  tag &quot;rid&quot;: &#39;SV-76173r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67597r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;&quot;
+  tag &quot;fix&quot;: &quot;Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;&quot;).column(&#39;owner&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61685</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to external executables must be disabled or restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61685</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to external executables must be disabled or restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference &quot;extproc&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference &quot;extproc&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to &quot;extproc&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61685&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61685&#39; do
+  title &#39;Access to external executables must be disabled or restricted.&#39;
+  desc  &quot;The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61685&#39;
+  tag &quot;rid&quot;: &#39;SV-76175r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011810&#39;
+  tag &quot;fix_id&quot;: &#39;F-67599r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference \&quot;extproc\&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference \&quot;extproc\&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to \&quot;extproc\&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;\&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages\&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.&quot;
+  tag &quot;fix&quot;: &quot;If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should_not include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should_not include &#39;run_group &#x3D; nobody&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;hs&#x2F;admin&#x2F;extproc.ora&quot; do
+    it { should exist }
+    its(&#39;content&#39;) { should match &#x2F;^EXTPROC_DLLS&#x3D;ONLY:\s*\w*&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61687</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000382
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61687</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings for functions, ports, protocols, and services that are not 
+    approved.
+
+    If any are found, this is a finding.
+
+    - - - - -
+    In the Oracle database, the communications with the database and incoming requests are performed by 
+    the Oracle Listener.  The Oracle Listener listens on a specific port or ports for connections to a 
+    specific database.  The Oracle Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin 
+    directory.  To check the ports and protocols in use, go to that directory and review the SQLNET.ora, 
+    LISTENER.ora, and the TNSNAMES.ora. If protocols or ports are in use that are not authorized, this 
+    is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61687&#39; do
+  title &quot;The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000142-DB-000094&#39;
+  tag &quot;gid&quot;: &#39;V-61687&#39;
+  tag &quot;rid&quot;: &#39;SV-76177r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67601r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000382&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings for functions, ports, protocols, and
+  services that are not approved.
+
+  If any are found, this is a finding.
+
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  - - - - -
+  In the Oracle database, the communications with the database and incoming
+  requests are performed by the Oracle Listener.  The Oracle Listener listens on
+  a specific port or ports for connections to a specific database.  The Oracle
+  Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.  To check the ports and protocols in use, go to  that directory and
+  review the SQLNET.ora, LISTENER.ora, and the TNSNAMES.ora.  If protocols or
+  ports are in use that are not authorized, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61689</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-10 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000553
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61689</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-10 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61689&#39; do
+  title &quot;Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.&quot;
+  desc &quot;Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000144-DB-000101&#39;
+  tag &quot;gid&quot;: &#39;V-61689&#39;
+  tag &quot;rid&quot;: &#39;SV-76179r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67603r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000553&#39;]
+  tag &quot;nist&quot;: [&#39;CP-10 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.&quot;
+  tag &quot;fix&quot;: &quot;Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.&quot;
+  describe &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39; do
+    skip &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61693</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle must back up user-level information per a defined frequency.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Oracle backs up user-level information per a defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Oracle backs up user-level information per a defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61693</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle must back up user-level information per a defined frequency.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61693&#39; do
+  title &#39;Oracle must back up user-level information per a defined frequency.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Databases that do not backup information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000095&#39;
+  tag &quot;gid&quot;: &#39;V-61693&#39;
+  tag &quot;rid&quot;: &#39;SV-76183r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67609r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)&quot;
+  tag &quot;fix&quot;: &quot;Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.&quot;
+  describe &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39; do
+    skip &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61695</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database backup procedures must be defined, documented, and
+  implemented.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61695</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database backup procedures must be defined, documented, and
+  implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file &quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement database backup procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61695&#39; do
+  title &quot;Database backup procedures must be defined, documented, and
+  implemented.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Database backups provide the required means to restore databases after
+  compromise or loss. Backups help reduce the vulnerability to unauthorized
+  access or hardware loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000096&#39;
+  tag &quot;gid&quot;: &#39;V-61695&#39;
+  tag &quot;rid&quot;: &#39;SV-76185r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67611r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file \&quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1\&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3&quot;
+  tag &quot;fix&quot;: &#39;Develop, document, and implement database backup procedures.&#39;
+  describe &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39; do
+    skip &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61697</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61697</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61697&#39; do
+  title &quot;Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency.  This includes data stored on file
+  systems, within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Problems with backup procedures or backup media may not be discovered until
+  after a recovery is needed. Testing and verification of procedures provides the
+  opportunity to discover oversights, conflicts, or other issues in the backup
+  procedures or use of media designed to be used.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000097&#39;
+  tag &quot;gid&quot;: &#39;V-61697&#39;
+  tag &quot;rid&quot;: &#39;SV-76187r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67613r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.&quot;
+  describe &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39; do
+    skip &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61699</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS backup and restoration files must be protected from unauthorized
+  access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61699</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS backup and restoration files must be protected from unauthorized
+  access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61699&#39; do
+  title &quot;DBMS backup and restoration files must be protected from unauthorized
+  access.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Lost or compromised DBMS backup and restoration files may lead to not only
+  the loss of data, but also the unauthorized access to sensitive data. Backup
+  files need the same protections against unauthorized access when stored on
+  backup media as when online and actively in use by the database system. In
+  addition, the backup media needs to be protected against physical loss. Most
+  DBMS&#39;s maintain online copies of critical control files to provide transparent
+  or easy recovery from hard disk loss or other interruptions to database
+  operation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000098&#39;
+  tag &quot;gid&quot;: &#39;V-61699&#39;
+  tag &quot;rid&quot;: &#39;SV-76189r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67615r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.&quot;
+  tag &quot;fix&quot;: &quot;Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.&quot;
+  describe &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39; do
+    skip &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61701</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000537
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61701</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61701&#39; do
+  title &quot;DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000099&#39;
+  tag &quot;gid&quot;: &#39;V-61701&#39;
+  tag &quot;rid&quot;: &#39;SV-76191r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67617r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.&quot;
+  describe &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39; do
+    skip &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61703</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for network access to
+  privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000765
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61703</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for network access to
+  privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access 
+    mechanism settings to determine whether users logging on to privileged accounts via a network are 
+    required to use multifactor authentication.
+
+    If users logging on to privileged accounts via a network are not required to use multifactor 
+    authentication, this is a finding.
+
+    Use authentication to prove the identities of users who are attempting to log on to the database. 
+    Authenticating user identity is imperative in distributed environments, without which there can be 
+    little confidence in network security. Passwords are the most common means of authentication. Oracle 
+    Database enables strong authentication with Oracle authentication adapters that support various 
+    third-party authentication services, including TLS with digital certificates, as well as Smart Cards (PIV).
+
+    If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the following, TLS is enabled. 
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the 
+    supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or 
+    differently located sqlnet.ora files.)
+
+    SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+    SSL_VERSION &#x3D; 1.2 or 1.1
+    SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+    WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+    (METHOD &#x3D; FILE)
+    (METHOD_DATA &#x3D;
+    (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+    )
+    )
+
+    SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+    ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+    Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for network users logging on to privileged accounts. 
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61703&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61703&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000149-DB-000104&#39;
+  tag &quot;gid&quot;: &#39;V-61703&#39;
+  tag &quot;rid&quot;: &#39;SV-76193r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67619r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000765&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts via a network are not required to
+  use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates,
+  as well as Smart Cards (CAC, PIV).
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled. (Note: This assumes that a single sqlnet.ora file,
+  in the default location, is in use. Please see the supplemental file
+  \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or
+  differently located sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+  (SOURCE &#x3D;
+  (METHOD &#x3D; FILE)
+  (METHOD_DATA &#x3D;
+  (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+  )
+  )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61705</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000766
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61705</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to 
+    require multifactor authentication for network users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61705&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61705&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000150-DB-000105&#39;
+  tag &quot;gid&quot;: &#39;V-61705&#39;
+  tag &quot;rid&quot;: &#39;SV-76195r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67621r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000766&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61707</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for local access to
+  privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000767
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61707</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for local access to
+  privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61707&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61707&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000151-DB-000106&#39;
+  tag &quot;gid&quot;: &#39;V-61707&#39;
+  tag &quot;rid&quot;: &#39;SV-76197r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67623r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000767&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61709</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000768
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61709</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to non-privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61709&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61709&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000152-DB-000107&#39;
+  tag &quot;gid&quot;: &#39;V-61709&#39;
+  tag &quot;rid&quot;: &#39;SV-76199r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67625r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000768&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE &#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)))&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61711</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000770
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61711</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (5), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61711&#39; do
+  title &quot;The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.&quot;
+  desc &quot;To assure individual accountability and prevent unauthorized access,
+  application users (and any processes acting on behalf of users) must be
+  individually identified and authenticated.
+
+      A shared authenticator is a generic account used by multiple individuals.
+  Use of a shared authenticator alone does not uniquely identify individual
+  users. An example of a shared authenticator is the UNIX OS &#39;root&#39; user account,
+  a Windows &#39;administrator&#39; account, an &#39;SA&#39; account, or a &#39;helpdesk&#39; account.
+
+      For example, the UNIX and Windows operating systems offer a &#39;switch user&#39;
+  capability allowing users to authenticate with their individual credentials
+  and, when needed, &#39;switch&#39; to the administrator role. This method provides for
+  unique individual authentication prior to using a shared authenticator.
+
+      Some applications may not have the need to provide a group authenticator;
+  this is considered a matter of application design. In those instances where the
+  application design includes the use of a shared authenticator, this requirement
+  will apply.
+
+      There may also be instances when specific user actions need to be performed
+  on the information system without unique user identification or authentication.
+  An example of this type of access is a web server which contains publicly
+  releasable information. These types of accesses are allowed but must be
+  explicitly identified and documented by the organization.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000153-DB-000108&#39;
+  tag &quot;gid&quot;: &#39;V-61711&#39;
+  tag &quot;rid&quot;: &#39;SV-76201r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67627r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000770&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (5)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.&quot;
+  describe &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39; do
+    skip &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61713</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (8)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001941
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61713</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (8), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61713&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61713&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in unfettered access to the database settings and data. A successful
+  replay attack against a privileged database account could result in a complete
+  compromise of the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000156-DB-000111&#39;
+  tag &quot;gid&quot;: &#39;V-61713&#39;
+  tag &quot;rid&quot;: &#39;SV-76203r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67629r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001941&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (8)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61715</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001942
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61715</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (9), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61715&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61715&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in access to database data.  A successful replay attack against a
+  non-privileged database account could result in a compromise of data stored on
+  the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000157-DB-000112&#39;
+  tag &quot;gid&quot;: &#39;V-61715&#39;
+  tag &quot;rid&quot;: &#39;SV-76205r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67631r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001942&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (9)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61717</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must disable user accounts after 60 days of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-4 e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000795
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61717</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must disable user accounts after 60 days of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-4 e), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For accounts managed by Oracle, check DBMS settings to determine if accounts can be automatically disabled 
+    by the system after 60 days of inactivity. Also, ask the DBA if an alternative method, such as a stored 
+    procedure run daily, to disable Oracle-managed accounts inactive for more than 60 days, has been deployed.
+
+    If the ability to disable accounts after 60 days of inactivity, by either of these means, does not exist, 
+    this is a finding.
+
+    - - - - -
+
+    Check to see what profile each user is associated with, if any, with this query:
+
+    select username, profile from dba_users order by 1,2;
+
+    Then check the profile to see what the password_life_time is set to in the table dba_profiles; the 
+    password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+    in the RESOURCE_NAME column.
+    SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where upper(resource_name) &#x3D; &quot;PASSWORD_LIFE_TIME&quot;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For accounts managed by Oracle, determine if it is practical and acceptable to require a 
+    password change every 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue the statement:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60;
+    (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for examples.)
+
+    If password changes every 60 days or fewer are unacceptable or impractical, implement an alternative method, 
+    such as a stored procedure run daily, to disable accounts inactive for more than 60 days.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61719</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce minimum
+  password length.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000205
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61719</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce minimum
+  password length.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called 
+    DEFAULT, determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+
+    For each password verification function, examine its source code.
+    
+    If it does not enforce the CMS-defined minimum length (15 unless otherwise specified), this is 
+    a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+&lt;   oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61719&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce minimum
+  password length.&quot;
+  desc &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000164-DB-000082&#39;
+  tag &quot;gid&quot;: &#39;V-61719&#39;
+  tag &quot;rid&quot;: &#39;SV-76209r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67635r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000205&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the DoD-defined minimum length (15 unless otherwise
+  specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61721</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000200
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61721</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (e), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password reuse rule, if any, that is in effect:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME IN (&quot;PASSWORD_REUSE_MAX&quot;, &quot;PASSWORD_REUSE_TIME&quot;)
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE, RESOURCE_NAME;
+    Bearing in mind that a profile can inherit from another profile, and the root profile is 
+    called DEFAULT, determine the value of the PASSWORD_REUSE_MAX effective for each profile.
+
+    If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the CMS-defined minimum 
+    number of password changes before a password may be repeated (five or greater), this is a finding.
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so if both are 
+    UNLIMITED, this is a finding.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  For each profile, set the PASSWORD_REUSE_MAX to 
+    enforce the CMS-defined minimum number of password changes before a password may be 
+    repeated (six or greater).
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so ensure also 
+    that it has a meaningful value.  Since the minimum password lifetime is 1 day, the smallest 
+    meaningful value is the same as the PASSWORD_REUSE_MAX value.
+
+    Using PPPPPP as an example, the statement to do this is:
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 6 PASSWORD_REUSE_TIME 6;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    next if profile &#x3D;&#x3D; &quot;RDSADMIN&quot;
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61723</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61723</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification 
+    function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61723&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000166-DB-000070&#39;
+  tag &quot;gid&quot;: &#39;V-61723&#39;
+  tag &quot;rid&quot;: &#39;SV-76213r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67639r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000192&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61725</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000193
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61725</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61725&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000167-DB-000071&#39;
+  tag &quot;gid&quot;: &#39;V-61725&#39;
+  tag &quot;rid&quot;: &#39;SV-76215r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67641r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000193&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61727</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000194
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61727</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61727&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000168-DB-000072&#39;
+  tag &quot;gid&quot;: &#39;V-61727&#39;
+  tag &quot;rid&quot;: &#39;SV-76217r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67643r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000194&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61729</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001619
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61729</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61729&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000169-DB-000176&#39;
+  tag &quot;gid&quot;: &#39;V-61729&#39;
+  tag &quot;rid&quot;: &#39;SV-76219r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67645r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001619&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61731</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61731</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called DEFAULT, 
+    determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+    
+    For each password verification function, examine its source code.
+
+    If it does not enforce the organization-defined minimum number of characters by which the password must differ 
+    from the previous password (six of the characters unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If any user accounts are managed by Oracle:  Develop, test and implement a password 
+    verification function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61731&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.&quot;
+  desc  &quot;Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000170-DB-000073&#39;
+  tag &quot;gid&quot;: &#39;V-61731&#39;
+  tag &quot;rid&quot;: &#39;SV-76221r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67647r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000195&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of characters by
+  which the password must differ from the previous password (eight of the
+  characters unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If any user accounts are managed by Oracle:  Develop, test and
+  implement a password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the
+  starting point for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61733</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  encryption for storage.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000196
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61733</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  encryption for storage.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME  etwork\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61733&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61733&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  encryption for storage.&quot;
+  desc &quot;Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000171-DB-000074&#39;
+  tag &quot;gid&quot;: &#39;V-61733&#39;
+  tag &quot;rid&quot;: &#39;SV-76223r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67649r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000196&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME\
+  etwork\\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61735</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61735</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, this is not a finding.
+
+    Where accounts are authenticated using passwords, review procedures and implementation evidence for creation 
+    of temporary passwords.
+
+    If the procedures or evidence do not exist or do not enforce passwords to meet CMS password requirements, this 
+    is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures for assigning temporary passwords to user accounts.
+
+    Procedures should include instructions to meet current CMS password length and complexity requirements and 
+    provide a secure method to relay the temporary password to the user.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61735&#39; do
+  title &quot;Procedures for establishing temporary passwords that meet DoD password
+  requirements for new accounts must be defined, documented, and implemented.&quot;
+  desc &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000077&#39;
+  tag &quot;gid&quot;: &#39;V-61735&#39;
+  tag &quot;rid&quot;: &#39;SV-76225r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67651r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Where accounts are authenticated using passwords, review procedures and
+  implementation evidence for creation of temporary passwords.
+
+  If the procedures or evidence do not exist or do not enforce passwords to meet
+  DoD password requirements, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures for assigning temporary passwords to user
+  accounts.
+
+  Procedures should include instructions to meet current DoD password length and
+  complexity requirements and provide a secure method to relay the temporary
+  password to the user.&quot;
+  describe &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39; do
+    skip &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61737</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61737</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61737&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61737&#39; do
+  title &quot;DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.&quot;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000079&#39;
+  tag &quot;gid&quot;: &#39;V-61737&#39;
+  tag &quot;rid&quot;: &#39;SV-76227r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67653r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61739</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce password maximum lifetime restrictions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61739</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce password maximum lifetime restrictions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    Review DBMS settings to determine if passwords must be changed periodically. If not, this is a finding:
+
+    SELECT p1.profile,
+    CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit, &#39;DEFAULT&#39;, p4.limit, p2.limit))
+    END
+    END
+    END
+    END effective_life_time
+    FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+    WHERE p1.profile&#x3D;p2.profile
+    AND p3.profile&#x3D;&#39;DEFAULT&#39;
+    AND p4.profile&#x3D;&#39;DEFAULT&#39;
+    AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+    AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+    AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+    AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+    order by 1;
+
+    If the “effective_life_time” is greater than “60” for any profile applied to user accounts, and the 
+    need for this has not been documented and approved by the ISSO, this is a finding.
+
+    If the value is greater than 60 for any profile applied to user accounts, and the DBMS is configured to use 
+    Password Lifetime to disable inactive accounts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For user accounts managed by Oracle: Modify DBMS settings to force users to periodically change 
+    their passwords. For example, using PPPPPP to stand for a profile name:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60 PASSWORD_GRACE_TIME 0;
+    Do this for each profile applied to user accounts.
+    
+    Where a password lifetime longer than “60” is needed, document the reasons and obtain ISSO approval.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61739&#39; do
+  title &#39;The DBMS must enforce password maximum lifetime restrictions.&#39;
+  desc  &quot;Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000080&#39;
+  tag &quot;gid&quot;: &#39;V-61739&#39;
+  tag &quot;rid&quot;: &#39;SV-76229r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67655r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Review DBMS settings to determine if passwords must be changed periodically. If
+  not, this is a finding:
+
+  SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;
+
+  If the “effective_life_time” is greater than “60” for any profile applied to
+  user accounts, and the need for this has not been documented and approved by
+  the ISSO, this is a finding.
+
+  If the value is greater than 35 for any profile applied to user accounts, and
+  the DBMS is configured to use Password Lifetime to disable inactive accounts,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For user accounts managed by Oracle: Modify DBMS settings to
+  force users to periodically change their passwords. For example, using PPPPPP
+  to stand for a profile name:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35 PASSWORD_GRACE_TIME 0;
+  Do this for each profile applied to user accounts.
+
+  (Note: Although the DoD requirement is for a password change every 60 days,
+  using a value of “35” facilitates the use of “PASSWORD_LIFE_TIME” as a means of
+  locking accounts inactive for 35 days. But if “35” is not a practical or
+  acceptable limit for password lifetime, set it to the standard DoD value of
+  “60”.)
+
+  Where a password lifetime longer than “60” is needed, document the reasons and
+  obtain ISSO approval.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_effective_life_time &#x3D; sql.query(&quot;SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;&quot;).column(&#39;effective_life_time&#39;)
+
+  get_effective_life_time.each do |effective_life_time|
+
+    describe &#39;The oracle database account effective life time limit&#39; do
+      subject { effective_life_time }
+      it { should cmp &gt;&#x3D; 60 }
+    end
+  end
+  describe get_effective_life_time do
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61741</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000185
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61741</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61741&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61741&#39; do
+  title &quot;The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.&quot;
+  desc &quot;A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000175-DB-000067&#39;
+  tag &quot;gid&quot;: &#39;V-61741&#39;
+  tag &quot;rid&quot;: &#39;SV-76231r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67657r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000185&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61743</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000187
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61743</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61743&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61743&#39; do
+  title &quot;The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61743&#39;
+  tag &quot;rid&quot;: &#39;SV-76233r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67659r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000187&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;FALSE)&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61745</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61745</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review configuration to confirm that accounts used by processes to connect to the DBMS are 
+    authenticated using valid, current CMS-issued PKI certificates.
+
+    If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not certificate-based, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each such account, use CMS certificate-based authentication.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61745&#39; do
+  title &quot;Processes (services, applications, etc.) that connect to the DBMS
+  independently of individual users, must use valid, current DoD-issued PKI
+  certificates for authentication to the  DBMS.&quot;
+  desc &quot;Just as individual users must be authenticated, and just as they must
+  use PKI-based authentication, so must any processes that connect to the DBMS.
+
+      The DoD standard for authentication of a process or device communicating
+  with another process or device is the presentation of a valid, current,
+  DoD-issued Public Key Infrastructure (PKI) certificate that has previously been
+  verified as Trusted by an administrator of the other process or device.
+
+      This applies both to processes that run on the same server as the DBMS and
+  to processes running on other computers.
+
+      The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are
+  exceptions.  These cannot currently use certificate-based authentication.  For
+  this reason among others, use of these accounts should be restricted to where
+  it is truly needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61745&#39;
+  tag &quot;rid&quot;: &#39;SV-76235r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015501&#39;
+  tag &quot;fix_id&quot;: &#39;F-67661r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review configuration to confirm that accounts used by processes
+  to connect to the DBMS are authenticated using valid, current DoD-issued PKI
+  certificates.
+
+  If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not
+  certificate-based, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;For each such account, use DoD certificate-based authentication.&#39;
+  describe &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39; do
+    skip &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61747</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-7
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000803
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61747</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-7, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  </td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61747&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61747&#39; do
+  title &quot;The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.&quot;
+  desc &quot;Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000179-DB-000114&#39;
+  tag &quot;gid&quot;: &#39;V-61747&#39;
+  tag &quot;rid&quot;: &#39;SV-76237r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67663r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000803&#39;]
+  tag &quot;nist&quot;: [&#39;IA-7&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  &quot;
+  sql &#x3D; oracledb_session(user: &#39;system&#39;, password: &#39;xvIA7zonxGM&#x3D;1&#39;, host: &#39;localhost&#39;, service: &#39;ORCLCDB&#39;, sqlplus_bin: &#39;&#x2F;opt&#x2F;oracle&#x2F;product&#x2F;12.2.0.1&#x2F;dbhome_1&#x2F;bin&#x2F;sqlplus&#39;)
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61749</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002890
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-003123
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61749</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not 
+    mandatory in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">MA-4 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61749&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61749&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000184-DB-000119&#39;
+  tag &quot;gid&quot;: &#39;V-61749&#39;
+  tag &quot;rid&quot;: &#39;SV-76239r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67665r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002890&#39;, &#39;CCI-003123&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61751</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000877
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61751</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">MA-4 c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61751&#39; do
+  title &quot;The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000185-DB-000116&#39;
+  tag &quot;gid&quot;: &#39;V-61751&#39;
+  tag &quot;rid&quot;: &#39;SV-76241r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67667r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000877&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61753</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61753</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61753&#39; do
+  title &quot;Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.&quot;
+  desc &quot;When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000187-DB-000120&#39;
+  tag &quot;gid&quot;: &#39;V-61753&#39;
+  tag &quot;rid&quot;: &#39;SV-76243r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67669r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)&quot;
+  tag &quot;fix&quot;: &quot;Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.&quot;
+  describe &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39; do
+    skip &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61755</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-16 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002262
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61755</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not                               
+    mandatory in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-16 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61755&#39; do
+  title &quot;The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.&quot;
+  desc &quot;When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000188-DB-000121&#39;
+  tag &quot;gid&quot;: &#39;V-61755&#39;
+  tag &quot;rid&quot;: &#39;SV-76245r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67671r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002262&#39;]
+  tag &quot;nist&quot;: [&#39;AC-16 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61757</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61757</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and vendor documentation to verify network connections 
+    are terminated when a database communications session is ended or after 30 minutes of inactivity.
+
+    If the network connection is not terminated, this is a finding.
+
+    The defined duration for these timeouts 30 minutes, except to fulfill documented and validated mission 
+    requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and&#x2F;or OS settings to disconnect network sessions when database communication 
+    sessions have ended or after the CMS-defined period of inactivity.
+
+    To configure this in Oracle, modify each relevant profile.  The resource name is IDLE_TIME, which is 
+    expressed in minutes.  Using PPPPPP as an example of a profile, set the timeout to 30 minutes with:
+    ALTER PROFILE PPPPPP LIMIT IDLE_TIME 30;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61757&#39; do
+  title &quot;The DBMS must terminate the network connection associated with a
+  communications session at the end of the session or 15 minutes of inactivity.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000190-DB-000137&#39;
+  tag &quot;gid&quot;: &#39;V-61757&#39;
+  tag &quot;rid&quot;: &#39;SV-76247r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67673r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001133&#39;]
+  tag &quot;nist&quot;: [&#39;SC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and vendor documentation to
+  verify network connections are terminated when a database communications
+  session is ended or after 15 minutes of inactivity.
+
+  If the network connection is not terminated, this is a finding.
+
+  The defined duration for these timeouts 15 minutes, except to fulfill
+  documented and validated mission requirements.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or OS settings to disconnect network sessions
+  when database communication sessions have ended or after the DoD-defined period
+  of inactivity.
+
+  To configure this in Oracle, modify each relevant profile.  The resource name
+  is IDLE_TIME, which is expressed in minutes.  Using PPPPPP as an example of a
+  profile, set the timeout to 15 minutes with:
+  ALTER PROFILE PPPPPP LIMIT IDLE_TIME 15;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idele time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61759</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61759</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-13, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61759&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61759&#39; do
+  title &quot;The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.&quot;
+  desc &quot;Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000140&#39;
+  tag &quot;gid&quot;: &#39;V-61759&#39;
+  tag &quot;rid&quot;: &#39;SV-76249r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67675r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61761</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database data files containing sensitive information must be
+  encrypted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61761</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database data files containing sensitive information must be
+  encrypted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-13, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61761&#39; do
+  title &quot;Database data files containing sensitive information must be
+  encrypted.&quot;
+  desc &quot;Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000141&#39;
+  tag &quot;gid&quot;: &#39;V-61761&#39;
+  tag &quot;rid&quot;: &#39;SV-76251r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67677r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61763</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect the integrity of publicly available information
+  and applications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61763</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect the integrity of publicly available information
+  and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61763&#39; do
+  title &quot;The DBMS must protect the integrity of publicly available information
+  and applications.&quot;
+  desc &quot;The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000201-DB-000145&#39;
+  tag &quot;gid&quot;: &#39;V-61763&#39;
+  tag &quot;rid&quot;: &#39;SV-76253r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67679r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.&quot;
+  describe &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61765</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001185
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61765</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not selected in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-23 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with &quot;alter profile&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   </td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61765&#39; do
+  title &quot;The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.&quot;
+  desc  &quot;This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000220-DB-000149&#39;
+  tag &quot;gid&quot;: &#39;V-61765&#39;
+  tag &quot;rid&quot;: &#39;SV-76255r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67681r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001185&#39;]
+  tag &quot;nist&quot;: [&#39;SC-23 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with \&quot;alter profile\&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   &quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_idle_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  query_sessions_per_user &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;
+  }
+
+  query_connect_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;CONNECT_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query_idle_time, profile: profile)).column(&#39;limit&#39;)
+    sessions_per_user &#x3D; sql.query(format(query_sessions_per_user, profile: profile)).column(&#39;limit&#39;)
+    connect_time &#x3D; sql.query(format(query_connect_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idle time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+
+    describe &quot;The oracle database number of sessions per user for profile: #{profile}&quot; do
+      subject { sessions_per_user }
+      it { should cmp &lt;&#x3D; 3 }
+    end
+
+    describe &quot;The oracle database connect time for profile: #{profile}&quot; do
+      subject { connect_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61769</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-24
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001665
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61769</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-24, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as &quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61769&#39; do
+  title &quot;The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.&quot;
+  desc &quot;Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000226-DB-000147&#39;
+  tag &quot;gid&quot;: &#39;V-61769&#39;
+  tag &quot;rid&quot;: &#39;SV-76259r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67685r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001665&#39;]
+  tag &quot;nist&quot;: [&#39;SC-24&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as \&quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes\&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_mode &#x3D; sql.query(&#39;select log_mode from v$database;&#39;).column(&#39;log_mode&#39;)
+
+  describe &#39;The list of oracle database log mode&#39; do
+    subject { log_mode }
+    it { should cmp &#39;ARCHIVELOG&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61771</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61771</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-28, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name &quot;TSName&quot;,
+  e.encryptionalg &quot;Algorithm&quot;,
+  d.file_name &quot;File Name&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner &quot;Owner&quot;,
+  a.table_name &quot;Table Name&quot;,
+  e.encryptionalg &quot;Algorithm&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61771&#39; do
+  title &quot;The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.&quot;
+  desc &quot;This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000231-DB-000154&#39;
+  tag &quot;gid&quot;: &#39;V-61771&#39;
+  tag &quot;rid&quot;: &#39;SV-76261r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67687r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001199&#39;]
+  tag &quot;nist&quot;: [&#39;SC-28&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name \&quot;TSName\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;,
+  d.file_name \&quot;File Name\&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner \&quot;Owner\&quot;,
+  a.table_name \&quot;Table Name\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61775</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001084
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61775</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61775&#39; do
+  title &quot;The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.&quot;
+  desc  &quot;Security functions are defined as \&quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based\&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000233-DB-000124&#39;
+  tag &quot;gid&quot;: &#39;V-61775&#39;
+  tag &quot;rid&quot;: &#39;SV-76265r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67691r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001084&#39;]
+  tag &quot;nist&quot;: [&#39;SC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.&quot;
+  tag &quot;fix&quot;: &quot;Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.&quot;
+  describe &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39; do
+    skip &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61777</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001682
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61777</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+    or temporary accounts, this is not a finding.
+
+    Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+    determine if emergency accounts are being automatically terminated by the system after 60 days. Check also 
+    for custom code (scheduled jobs, procedures, triggers, etc.) for achieving this. 
+
+    If emergency accounts are not being terminated after 60 days, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create a profile specifically for emergency or temporary accounts.  When creating the accounts, 
+    assign them to this profile.  Configure DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, 
+    or implement custom code, to terminate accounts with this profile after 60 days.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61777&#39; do
+  title &quot;The DBMS must automatically terminate emergency accounts after an
+  organization-defined time period for each type of account.&quot;
+  desc &quot;Emergency application accounts are typically created due to an
+  unforeseen operational event or could ostensibly be used in the event of a
+  vendor support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      In the event emergency application accounts are required, the application
+  must ensure accounts that are designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or application data compromised.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      If it is possible for any temporary emergency accounts to be created and
+  managed by Oracle, then the DBMS or application must provide or utilize a
+  mechanism to automatically terminate such accounts after an
+  organization-defined time period.
+
+      Emergency database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being misused.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000234-DB-000157&#39;
+  tag &quot;gid&quot;: &#39;V-61777&#39;
+  tag &quot;rid&quot;: &#39;SV-76267r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67693r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001682&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if emergency accounts are being automatically
+  terminated by the system after an organization-defined time period. Check also
+  for custom code (scheduled jobs, procedures, triggers, etc.) for achieving
+  this.
+
+  If emergency accounts are not being terminated after an organization-defined
+  time period, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create a profile specifically for emergency or temporary
+  accounts.  When creating the accounts, assign them to this profile.  Configure
+  DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, or
+  implement custom code, to terminate accounts with this profile after an
+  organization-defined time period.&quot;
+  describe &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39; do
+    skip &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61779</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-4 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001274
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61779</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-4 (12), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61779&#39; do
+  title &quot;The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.&quot;
+  desc &quot;Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000237-DB-000158&#39;
+  tag &quot;gid&quot;: &#39;V-61779&#39;
+  tag &quot;rid&quot;: &#39;SV-76269r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67695r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001274&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (12)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61781</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001090
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61781</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61781&#39; do
+  title &quot;The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.&quot;
+  desc &quot;The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000243-DB-000128&#39;
+  tag &quot;gid&quot;: &#39;V-61781&#39;
+  tag &quot;rid&quot;: &#39;SV-76271r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67697r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001090&#39;]
+  tag &quot;nist&quot;: [&#39;SC-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61783</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002385
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61783</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61783&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61783&#39; do
+  title &quot;The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.&quot;
+  desc &quot;A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000245-DB-000132&#39;
+  tag &quot;gid&quot;: &#39;V-61783&#39;
+  tag &quot;rid&quot;: &#39;SV-76273r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67699r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002385&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;RATE_LIMIT&#x3D;&#39; }
+    its(&#39;content&#39;) { should match &#x2F;CONNECTION_RATE_LISTENER&#x3D;\d*&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61785</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must check the validity of data inputs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001310
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS checks the validity of data inputs</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS checks the validity of data inputs</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61785</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must check the validity of data inputs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See &quot;Reporting Constraint Exceptions&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61785&#39; do
+  title &#39;The DBMS must check the validity of data inputs.&#39;
+  desc  &quot;Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000251-DB-000160&#39;
+  tag &quot;gid&quot;: &#39;V-61785&#39;
+  tag &quot;rid&quot;: &#39;SV-76275r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67701r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001310&#39;]
+  tag &quot;nist&quot;: [&#39;SI-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See \&quot;Reporting Constraint Exceptions\&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  tag &quot;fix&quot;: &quot;Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  describe &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39; do
+    skip &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61787</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-7 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002716
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002718
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61787</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-7 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61787&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61787&#39; do
+  title &quot;The system must verify there have not been unauthorized changes to the
+  DBMS software and information.&quot;
+  desc &quot;Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000262-DB-000159&#39;
+  tag &quot;gid&quot;: &#39;V-61787&#39;
+  tag &quot;rid&quot;: &#39;SV-76277r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67703r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002716&#39;, &#39;CCI-002718&#39;]
+  tag &quot;nist&quot;: [&#39;SI-7 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61789</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must identify potentially security-relevant error conditions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61789</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must identify potentially security-relevant error conditions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61789&#39; do
+  title &#39;The DBMS must identify potentially security-relevant error conditions.&#39;
+  desc  &quot;The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000265-DB-000161&#39;
+  tag &quot;gid&quot;: &#39;V-61789&#39;
+  tag &quot;rid&quot;: &#39;SV-76279r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67705r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.&quot;
+  describe &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61791</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001312
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61791</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61791&#39; do
+  title &quot;The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.&quot;
+  desc &quot;Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000266-DB-000162&#39;
+  tag &quot;gid&quot;: &#39;V-61791&#39;
+  tag &quot;rid&quot;: &#39;SV-76281r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67707r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001312&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.&quot;
+  describe &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61793</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict error messages so only authorized personnel may
+  view them.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-11 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001314
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61793</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict error messages so only authorized personnel may
+  view them.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-11 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61793&#39; do
+  title &quot;The DBMS must restrict error messages so only authorized personnel may
+  view them.&quot;
+  desc &quot;If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000267-DB-000163&#39;
+  tag &quot;gid&quot;: &#39;V-61793&#39;
+  tag &quot;rid&quot;: &#39;SV-76283r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67709r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001314&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.&quot;
+  describe &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39; do
+    skip &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61795</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-4 (7)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001670
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61795</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-4 (7), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61795&#39; do
+  title &quot;The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.&quot;
+  desc &quot;System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000287-DB-000126&#39;
+  tag &quot;gid&quot;: &#39;V-61795&#39;
+  tag &quot;rid&quot;: &#39;SV-76285r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67711r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001670&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (7)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61797</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  created.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001683
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61797</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  created.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61797&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  created.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000291-DB-000139&#39;
+  tag &quot;gid&quot;: &#39;V-61797&#39;
+  tag &quot;rid&quot;: &#39;SV-76287r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67713r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001683&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61799</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  modified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001684
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61799</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  modified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61799&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  modified.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000292-DB-000138&#39;
+  tag &quot;gid&quot;: &#39;V-61799&#39;
+  tag &quot;rid&quot;: &#39;SV-76289r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67715r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001684&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61801</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001685
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61801</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61801&#39; do
+  title &quot;The DBMS must notify appropriate individuals when account disabling
+  actions are taken.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000293-DB-000130&#39;
+  tag &quot;gid&quot;: &#39;V-61801&#39;
+  tag &quot;rid&quot;: &#39;SV-76291r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67717r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001685&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61803</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  terminated.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001686
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61803</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  terminated.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61803&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  terminated.&quot;
+  desc &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000294-DB-000129&#39;
+  tag &quot;gid&quot;: &#39;V-61803&#39;
+  tag &quot;rid&quot;: &#39;SV-76293r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67719r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001686&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61809</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must implement separation of duties through assigned
+    information access authorizations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61809</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must implement separation of duties through assigned
+    information access authorizations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61809&#39; do
+  title &quot;The DBMS must implement separation of duties through assigned
+    information access authorizations.&quot;
+  desc  &quot;Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000009&#39;
+  tag &quot;gid&quot;: &#39;V-61809&#39;
+  tag &quot;rid&quot;: &#39;SV-76299r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-003300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67725r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)&quot;
+  tag &quot;fix&quot;: &quot;Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.&quot;
+  describe &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39; do
+    skip &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61813</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide an audit log reduction capability.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001875
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides an audit log reduction capability</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides an audit log reduction capability</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61813</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide an audit log reduction capability.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Deploy software capable of performing audit data reduction.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61813&#39; do
+  title &#39;The system must provide an audit log reduction capability.&#39;
+  desc  &quot;Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000113-DB-000053&#39;
+  tag &quot;gid&quot;: &#39;V-61813&#39;
+  tag &quot;rid&quot;: &#39;SV-76303r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67729r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001875&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;Deploy software capable of performing audit data reduction.&#39;
+  describe &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39; do
+    skip &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61815</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001094
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61815</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to restrict functionality that could be used to initiate DoS attacks.
+
+    Securing the Network Connection:
+    Protecting the network and its traffic from inappropriate access or modification is the essence of network 
+    security. You should consider all paths the data travels, and assess the threats on each path and node. Then, 
+    take steps to lessen or eliminate those threats and the consequences of a security breach. In addition, 
+    monitor and audit to detect either increased threat levels or penetration attempts.
+
+    The following practices improve network security:
+
+    1. Disable the Default Listener.
+    All listeners have a unique name instead of the name LISTENER and have startup protection.
+
+    LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+    
+    This configuration prevents the default listener from starting.
+
+    2. Prevent online administration by requiring the administrator to have the write privilege on the 
+    listener.ora file on the server.
+
+    a. Add or alter this line in the listener.ora file:
+
+    ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+    b. Use RELOAD to reload the configuration.
+
+    3. Set Protection against crafted network packets on database level.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should take when bad packets are 
+    received from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the default)
+
+    NONE: The database server ignores the bad packets and does not generate any trace files or log messages. 
+    (Not recommended)
+
+    TRACE: A detailed trace file is generated when bad packets are received, which can be used to debug any 
+    problems in client&#x2F;server communication.
+
+    LOG: A minimal log message is printed in the alert logfile and in the server trace file. A minimal amount 
+    of disk space is used.
+
+    ALERT: An alert message is sent to a DBA or monitoring console.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad 
+    packets from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) | (DROP,integer) } (DROP,3 is the default)
+
+    CONTINUE: The server process continues execution. The database server may be subject to a Denial of Service (DoS) 
+    if bad packets continue to be sent by a malicious client. (Not recommended)
+
+    (DELAY, integer) :The client experiences a delay of integer seconds before the server process accepts the 
+    next request from the same client connection. Malicious clients are prevented from excessive consumption 
+    of server resources while legitimate clients experience degradation in performance but can continue to function.
+
+    (DROP, integer) : The server forcefully terminates the client connection after integer bad packets. The server 
+    protects itself at the expense of the client (for example, a client transaction may be lost). The client may 
+    reconnect and attempt the same operation.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can be made by a client on a 
+    connection to the server process. After the specified number of failure attempts, the connection will be 
+    automatically dropped by the server process.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to unlimited. (A value of 1 to 3 is 
+    recommended)
+
+    For more information about the parameters in listener.ora, 
+    see https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+    
+    4. When a host computer has multiple IP addresses associated with multiple network interface controller (NIC) 
+    cards, configure the listener to the specific IP address.
+
+    You can restrict the listener to listen on a specific IP address. Oracle recommends that you specify the specific 
+    IP addresses on these types of computers, rather than allowing the listener to listen on all IP addresses. 
+    Restricting the listener to specific IP addresses helps to prevent an intruder from stealing a TCP end point from 
+    under the listener process.
+
+    5. Restrict the privileges of the listener, so that it cannot read or write files in the database or the Oracle 
+    server address space.
+
+    The default configuration for external procedures does not require a network listener to work with Oracle Database 
+    and the extproc agent. The extproc agent is spawned directly by Oracle Database and eliminates the risks that the 
+    extproc agent might be spawned by Oracle Listener unexpectedly. This default configuration is recommended for maximum 
+    security. For more information about securing external procedures see
+    https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+    However, the extproc agent can be configured to be spawned by a listener. In that case (not recommended) the listener 
+    should have restricted privileges.
+
+    6. Use a firewall, IAW CMS network policy and guidance.
+    
+    Appropriately placed and configured firewalls can prevent outside access to your databases.
+
+    7. Prevent unauthorized administration of the Oracle listener.
+
+    Local administration of the listener is secure by default through the local operating system. Therefore configuring 
+    a password is neither required nor recommended for secure local administration. However, a password can be configured 
+    for the listener to provide security for administrative operations, such as starting or stopping the listener, 
+    viewing a list of supported services, or saving changes to the Listener Control configuration.
+
+    By default, Oracle Net Listener permits only local administration for security reasons. As a policy, the listener 
+    can be administered only by the user who started it. This is enforced through local operating system authentication. 
+    For example, if user1 starts the listener, then only user1 can administer it. Any other user trying to administer 
+    the listener gets an error. The super user is the only exception.
+
+    Oracle recommends that you perform listener administration in the default mode (secure by means of local operating 
+    system authentication), and access the system remotely using a remote logon. Oracle Enterprise Manager Cloud 
+    Control can also be used for remote administration.
+
+    8. Encrypt network traffic.  (Mandatory for sensitive data and optional for non-sensitive, as covered in other 
+    STIG requirements.)
+
+    Where applicable, use Oracle network data encryption to encrypt network traffic among clients, databases, 
+    and application servers.
+
+    9. Set Connect Rate to organization defined limit. (Also required by O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+    The connection rate limiter feature in Oracle Net Listener enables a database administrator to limit the number of 
+    new connections handled by the listener. When this feature is enabled, Oracle Net Listener imposes a user-specified 
+    maximum limit on the number of new connections handled by the listener every second.
+
+    CONNECTION_RATE_LISTENER&#x3D;10
+    LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))  
+    )
+
+    10. Setup Valid Node Checking.
+    (See also O121-BP-025600.)
+
+    Valid node checking is a security feature that protects DBMS instances from malevolent or errant Oracle Net 
+    connections over TCP&#x2F;IP, without the need for a firewall or IP address filtering at the operating system-level. 
+    The feature is controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes, and tcp.excluded_nodes.
+
+    Modify the sqlnet.ora file manually
+    TCP.VALIDNODE_CHECKING&#x3D;yes
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the supplemental 
+    file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+    If this parameter is set to yes, then incoming connections are allowed only if they originate from a node that conforms 
+    to the list specified by TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter is 
+    set to yes (no is the default).
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter 
+    is set to yes.
+
+    Modify the listener.ora file manually
+
+    TCP.EXCLUDED_NODES Syntax:
+    TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25, 172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+    TCP.INVITED_NODES Syntax:
+    TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*, 2001:DB8:200C:433B&#x2F;32)
+
+    Usage Notes:
+
+    Use TCP.INVITED_NODES to specify which clients are allowed access to the database. This list takes precedence 
+    over the TCP.EXCLUDED_NODES parameter if both lists are present. These parameters can use wildcards for IPv4 
+    addresses and CIDR notation for IPv4 and IPv6 addresses.
+
+    11. Apply Listener Security Patches.
+    (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+    Critical Patch Updates are cumulative. Therefore, the latest patch will contain all previous security patches 
+    for the Listener.
+
+    12. Ensure that listener logging is turned on.
+
+    Listener logging is on by default. If logging is not on, configure logging for all listeners in order to capture 
+    Listener commands and brute force password attacks.
+
+    13. Monitor the listener logfile.
+
+    The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors, which may signify attacks or 
+    inappropriate activity. Monitor the logfile and generate an alert whenever these errors are encountered.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61815&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61815&#39; do
+  title &quot;The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.&quot;
+  desc &quot;When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+    &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000246-DB-000133&#39;
+  tag &quot;gid&quot;: &#39;V-61815&#39;
+  tag &quot;rid&quot;: &#39;SV-76305r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67731r10_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001094&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to restrict functionality that could be
+  used to initiate DoS attacks.
+
+  Securing the Network Connection:
+  Protecting the network and its traffic from inappropriate access or
+  modification is the essence of network security. You should consider all paths
+  the data travels, and assess the threats on each path and node. Then, take
+  steps to lessen or eliminate those threats and the consequences of a security
+  breach. In addition, monitor and audit to detect either increased threat levels
+  or penetration attempts.
+
+  The following practices improve network security:
+
+  1. Disable the Default Listener.
+  All listeners have a unique name instead of the name LISTENER and have startup
+  protection.
+
+  LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+
+  This configuration prevents the default listener from starting.
+
+  2. Prevent online administration by requiring the administrator to have the
+  write privilege on the listener.ora file on the server.
+  a. Add or alter this line in the listener.ora file:
+
+  ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+  b. Use RELOAD to reload the configuration.
+
+  3. Set Protection against crafted network packets on database level.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should
+  take when bad packets are received from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the
+  default)
+
+  NONE: The database server ignores the bad packets and does not generate any
+  trace files or log messages. (Not recommended)
+
+  TRACE: A detailed trace file is generated when bad packets are received, which
+  can be used to debug any problems in client&#x2F;server communication.
+
+  LOG: A minimal log message is printed in the alert logfile and in the server
+  trace file. A minimal amount of disk space is used.
+
+  ALERT: An alert message is sent to a DBA or monitoring console.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server
+  process when receiving bad packets from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) |
+  (DROP,integer) } (DROP,3 is the default)
+
+  CONTINUE: The server process continues execution. The database server may be
+  subject to a Denial of Service (DoS) if bad packets continue to be sent by a
+  malicious client. (Not recommended)
+
+  (DELAY, integer) :The client experiences a delay of integer seconds before the
+  server process accepts the next request from the same client connection.
+  Malicious clients are prevented from excessive consumption of server resources
+  while legitimate clients experience degradation in performance but can continue
+  to function.
+
+  (DROP, integer) : The server forcefully terminates the client connection after
+  integer bad packets. The server protects itself at the expense of the client
+  (for example, a client transaction may be lost). The client may reconnect and
+  attempt the same operation.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts
+  that can be made by a client on a connection to the server process. After the
+  specified number of failure attempts, the connection will be automatically
+  dropped by the server process.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to
+  unlimited. (A value of 1 to 3 is recommended)
+
+  For more information about the parameters in listener.ora, see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+
+  4. When a host computer has multiple IP addresses associated with multiple
+  network interface controller (NIC) cards, configure the listener to the
+  specific IP address.
+
+  You can restrict the listener to listen on a specific IP address. Oracle
+  recommends that you specify the specific IP addresses on these types of
+  computers, rather than allowing the listener to listen on all IP addresses.
+  Restricting the listener to specific IP addresses helps to prevent an intruder
+  from stealing a TCP end point from under the listener process.
+
+  5. Restrict the privileges of the listener, so that it cannot read or write
+  files in the database or the Oracle server address space.
+
+  The default configuration for external procedures does not require a network
+  listener to work with Oracle Database and the extproc agent. The extproc agent
+  is spawned directly by Oracle Database and eliminates the risks that the
+  extproc agent might be spawned by Oracle Listener unexpectedly. This default
+  configuration is recommended for maximum security. For more information about
+  securing external procedures see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+  However, the extproc agent can be configured to be spawned by a listener. In
+  that case (not recommended) the listener should have restricted privileges.
+
+  6. Use a firewall, IAW DoD network policy and guidance.
+
+  Appropriately placed and configured firewalls can prevent outside access to
+  your databases.
+
+  7. Prevent unauthorized administration of the Oracle listener.
+
+  Local administration of the listener is secure by default through the local
+  operating system. Therefore configuring a password is neither required nor
+  recommended for secure local administration. However, a password can be
+  configured for the listener to provide security for administrative operations,
+  such as starting or stopping the listener, viewing a list of supported
+  services, or saving changes to the Listener Control configuration.
+
+  By default, Oracle Net Listener permits only local administration for security
+  reasons. As a policy, the listener can be administered only by the user who
+  started it. This is enforced through local operating system authentication. For
+  example, if user1 starts the listener, then only user1 can administer it. Any
+  other user trying to administer the listener gets an error. The super user is
+  the only exception.
+
+  Oracle recommends that you perform listener administration in the default mode
+  (secure by means of local operating system authentication), and access the
+  system remotely using a remote logon. Oracle Enterprise Manager Cloud Control
+  can also be used for remote administration.
+
+  8. Encrypt network traffic.  (Mandatory for sensitive data and optional for
+  non-sensitive, as covered in other STIG requirements.)
+
+  Where applicable, use Oracle network data encryption to encrypt network traffic
+  among clients, databases, and application servers.
+
+  9. Set Connect Rate to organization defined limit. (Also required by
+  O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+  The connection rate limiter feature in Oracle Net Listener enables a database
+  administrator to limit the number of new connections handled by the listener.
+  When this feature is enabled, Oracle Net Listener imposes a user-specified
+  maximum limit on the number of new connections handled by the listener every
+  second.
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+  LISTENER&#x3D;
+  (ADDRESS_LIST&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+  )
+
+  10. Setup Valid Node Checking.
+  (See also O121-BP-025600.)
+
+  Valid node checking is a security feature that protects DBMS instances from
+  malevolent or errant Oracle Net connections over TCP&#x2F;IP, without the need for a
+  firewall or IP address filtering at the operating system-level. The feature is
+  controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes,
+  and tcp.excluded_nodes.
+
+  Modify the sqlnet.ora file manually
+  TCP.VALIDNODE_CHECKING&#x3D;yes
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  If this parameter is set to yes, then incoming connections are allowed only if
+  they originate from a node that conforms to the list specified by
+  TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes (no is the default).
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes.
+
+  Modify the listener.ora file manually
+
+  TCP.EXCLUDED_NODES Syntax:
+  TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25,
+  172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+  TCP.INVITED_NODES Syntax:
+  TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*,
+  2001:DB8:200C:433B&#x2F;32)
+
+  Usage Notes:
+
+  Use TCP.INVITED_NODES to specify which clients are allowed access to the
+  database. This list takes precedence over the TCP.EXCLUDED_NODES parameter if
+  both lists are present. These parameters can use wildcards for IPv4 addresses
+  and CIDR notation for IPv4 and IPv6 addresses.
+
+  11. Apply Listener Security Patches.
+  (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+  Critical Patch Updates are cumulative. Therefore, the latest patch will contain
+  all previous security patches for the Listener.
+
+  12. Ensure that listener logging is turned on.
+
+  Listener logging is on by default. If logging is not on, configure logging for
+  all listeners in order to capture Listener commands and brute force password
+  attacks.
+
+  13. Monitor the listener logfile.
+
+  The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors,
+  which may signify attacks or inappropriate activity. Monitor the logfile and
+  generate an alert whenever these errors are encountered.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))&#39; }
+    its(&#39;content&#39;) {
+      should include &#39;LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))&#39;
+    }
+    its(&#39;content&#39;) { should include &#39;CONNECTION_RATE_LISTENER&#x3D;10&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_MAX_FAILED_LOGIN_ATTEMPTS&#x3D;3&#39; }
+    its(&#39;content&#39;) { should include &#39;ADMIN_RESTRICTIONS_LISTENER&#x3D;ON&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_PROTOCOL_ERROR_TRACE_ACTION&#x3D;TRACE&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.INVITED_NODES&#x3D;&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.EXCLUDED_NODES&#x3D;&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;TCP.VALIDNODE_CHECKING&#x3D;yes&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61817</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001095
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61817</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61817&#39; do
+  title &quot;The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.&quot;
+  desc &quot;In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000247-DB-000134&#39;
+  tag &quot;gid&quot;: &#39;V-61817&#39;
+  tag &quot;rid&quot;: &#39;SV-76307r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67733r8_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001095&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select DISTINCT b.limit from dba_users a, dba_profiles b where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user profile limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61819</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-6
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002394
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61819</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-6, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61819&#39; do
+  title &quot;The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.&quot;
+  desc &quot;Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000248-DB-000135&#39;
+  tag &quot;gid&quot;: &#39;V-61819&#39;
+  tag &quot;rid&quot;: &#39;SV-76309r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67735r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002394&#39;]
+  tag &quot;nist&quot;: [&#39;SC-6&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select
+    DISTINCT b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61843</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61843</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61843&#39; do
+  title &quot;Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.&quot;
+  desc &quot;To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61843&#39;
+  tag &quot;rid&quot;: &#39;SV-76333r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67759r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.&quot;
+  describe &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39; do
+    skip &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61845</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61845</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\oracle\product\12.1.0\db_1\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61845&#39; do
+  title &quot;When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.&quot;
+  desc &quot;The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61845&#39;
+  tag &quot;rid&quot;: &#39;SV-76335r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015602&#39;
+  tag &quot;fix_id&quot;: &#39;F-67761r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.&quot;
+  describe &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39; do
+    skip &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61849</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS default accounts must be protected from misuse.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS default accounts are protected from misuse</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS default accounts are protected from misuse</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61849</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS default accounts must be protected from misuse.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61849&#39; do
+  title &#39;DBMS default accounts must be protected from misuse.&#39;
+  desc  &quot;The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000023&#39;
+  tag &quot;gid&quot;: &#39;V-61849&#39;
+  tag &quot;rid&quot;: &#39;SV-76339r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-004701&#39;
+  tag &quot;fix_id&quot;: &#39;F-67765r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.&quot;
+  describe &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39; do
+    skip &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61853</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61853</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61853&#39; do
+  title &quot;Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.&quot;
+  desc &quot;It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, \&quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.\&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000109-DB-000049&#39;
+  tag &quot;gid&quot;: &#39;V-61853&#39;
+  tag &quot;rid&quot;: &#39;SV-76343r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-008601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67769r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1&quot;
+  describe &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39; do
+    skip &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61865</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of the DBMS software installation account must be restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the use of the DBMS software installation account is restricted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the use of the DBMS software installation account is restricted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61865</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of the DBMS software installation account must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61865&#39; do
+  title &#39;Use of the DBMS software installation account must be restricted.&#39;
+  desc  &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000022&#39;
+  tag &quot;gid&quot;: &#39;V-61865&#39;
+  tag &quot;rid&quot;: &#39;SV-76355r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-004600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67781r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.&quot;
+  describe &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39; do
+    skip &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61867</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61867</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61867&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+          skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61867&#39; do
+  title &quot;Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-61867&#39;
+  tag &quot;rid&quot;: &#39;SV-76357r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67783r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61869</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61869</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61869&#39; do
+  title &quot;The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000207&#39;
+  tag &quot;gid&quot;: &#39;V-61869&#39;
+  tag &quot;rid&quot;: &#39;SV-76359r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-011200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67785r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot; do
+      skip &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA&#39;s users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;oracle_dbas&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61871</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001844
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61871</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61871&#39; do
+  title &quot;The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000102-DB-000045&#39;
+  tag &quot;gid&quot;: &#39;V-61871&#39;
+  tag &quot;rid&quot;: &#39;SV-76361r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-008100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67787r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001844&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61873</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS software installation account must be restricted to
+  authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61873</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS software installation account must be restricted to
+  authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61873&#39; do
+  title &quot;The DBMS software installation account must be restricted to
+  authorized users.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000198&#39;
+  tag &quot;gid&quot;: &#39;V-61873&#39;
+  tag &quot;rid&quot;: &#39;SV-76363r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67789r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39; do
+
+    skip &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61875</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61875</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61875&#39; do
+  title &quot;Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000199&#39;
+  tag &quot;gid&quot;: &#39;V-61875&#39;
+  tag &quot;rid&quot;: &#39;SV-76365r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67791r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.&quot;
+  describe &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39; do
+    skip &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61877</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS software libraries must be periodically backed up.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000537
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software libraries are periodically backed up</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software libraries are periodically backed up</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61877</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS software libraries must be periodically backed up.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure backups to include all DBMS application and third-party
+  database application software libraries.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61877&#39; do
+  title &#39;The DBMS software libraries must be periodically backed up.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000100&#39;
+  tag &quot;gid&quot;: &#39;V-61877&#39;
+  tag &quot;rid&quot;: &#39;SV-76367r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67793r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure backups to include all DBMS application and third-party
+  database application software libraries.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39; do
+    skip &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61879</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000764
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61879</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61879&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).&quot;
+  desc &quot;To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000148-DB-000103&#39;
+  tag &quot;gid&quot;: &#39;V-61879&#39;
+  tag &quot;rid&quot;: &#39;SV-76369r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67795r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000764&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61881</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000804
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61881</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-8, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61881&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).&quot;
+  desc  &quot;Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000180-DB-000115&#39;
+  tag &quot;gid&quot;: &#39;V-61881&#39;
+  tag &quot;rid&quot;: &#39;SV-76371r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-015800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67797r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000804&#39;]
+  tag &quot;nist&quot;: [&#39;IA-8&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+    users (or processes acting on behalf of non-organizational users).&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61883</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001082
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61883</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-2, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61883&#39; do
+  title &quot;The DBMS must separate user functionality (including user interface
+  services) from database management functionality.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000211-DB-000122&#39;
+  tag &quot;gid&quot;: &#39;V-61883&#39;
+  tag &quot;rid&quot;: &#39;SV-76373r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67799r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001082&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39; do
+    skip &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61885</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001083
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61885</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61885&#39; do
+  title &quot;The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000212-DB-000123&#39;
+  tag &quot;gid&quot;: &#39;V-61885&#39;
+  tag &quot;rid&quot;: &#39;SV-76375r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67801r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001083&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61887</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000166
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61887</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61887&#39; do
+  title &quot;The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.&quot;
+  desc &quot;Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000080-DB-000063&#39;
+  tag &quot;gid&quot;: &#39;V-61887&#39;
+  tag &quot;rid&quot;: &#39;SV-76377r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P3-006200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67803r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000166&#39;]
+  tag &quot;nist&quot;: [&#39;AU-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61963</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61963</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61963&#39; do
+  title &quot;The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.&quot;
+  desc &quot;Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61963&#39;
+  tag &quot;rid&quot;: &#39;SV-76453r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67883r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.&quot;
+  describe &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39; do
+    skip &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61965</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61965</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\WINDOWS\system32\config\EventLogs\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: aws-rds-oracle-database-12c-stig-baseline
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+    control &#39;V-61965&#39; do
+      impact 0.0
+      describe &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39; do
+        skip &#39;This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on&#39;
+      end
+    end
+
+
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61965&#39; do
+  title &quot;The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.&quot;
+  desc &quot;The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61965&#39;
+  tag &quot;rid&quot;: &#39;SV-76455r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025101&#39;
+  tag &quot;fix_id&quot;: &#39;F-67885r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\\WINDOWS\\system32\\config\\EventLogs\\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database audit trail&#39; do
+    subject { audit_trail }
+    it { should_not cmp &#39;NONE&#39; }
+  end
+
+  get_audit_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  audit_file_dest &#x3D; get_audit_file_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{audit_file_dest}&#x2F; |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61967</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000054
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61967</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Limit concurrent connections for each system account to a number less than or equal to the 
+    organization-defined number of sessions using the following SQL. Create profiles that conform to the 
+    requirements. Assign users to the appropriate profile.
+
+    The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy the STIG 
+    requirements pertaining to the profile parameters. Oracle recommends that this profile be customized with 
+    any site-specific requirements and assigned to all users where applicable.  Note: It remains necessary to 
+    create a customized replacement for the password validation function, ORA12C_STRONG_VERIFY_FUNCTION, if 
+    relying on this technique to verify password complexity.
+
+    The defaults for ORA_STIG_PROFILE are set as follows:
+    Resource Name                   Limit
+    -------------                   ------
+    COMPOSITE_LIMIT                 DEFAULT
+    SESSIONS_PER_USER               DEFAULT
+    CPU_PER_SESSION                 DEFAULT
+    CPU_PER_CALL                    DEFAULT
+    LOGICAL_READS_PER_SESSION       DEFAULT
+    LOGICAL_READS_PER_CALL          DEFAULT
+    IDLE_TIME                          15
+    CONNECT_TIME                    DEFAULT
+    PRIVATE_SGA                     DEFAULT
+    FAILED_LOGIN_ATTEMPTS               3 
+    PASSWORD_LIFE_TIME                 60
+    PASSWORD_REUSE_TIME               365
+    PASSWORD_REUSE_MAX                 10
+    PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+    PASSWORD_LOCK_TIME              UNLIMITED
+    PASSWORD_GRACE_TIME                 5
+
+    Change the value of SESSIONS_PER_USER (along with the other parameters, where relevant) from UNLIMITED to 
+    CMS-compliant, site-specific requirements and then assign users to the profile.
+    ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+    To assign the user to the profile do the following:
+    ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61967&#39; do
+  title &quot;The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.&quot;
+  desc  &quot;Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000001-DB-000031&#39;
+  tag &quot;gid&quot;: &#39;V-61967&#39;
+  tag &quot;rid&quot;: &#39;SV-76457r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-000100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67887r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000054&#39;]
+  tag &quot;nist&quot;: [&#39;AC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Limit concurrent connections for each system account to a number
+  less than or equal to the organization-defined number of sessions using the
+  following SQL. Create profiles that conform to the requirements. Assign users
+  to the appropriate profile.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  The defaults for ORA_STIG_PROFILE are set as follows:
+  Resource Name                   Limit
+  -------------                   ------
+  COMPOSITE_LIMIT                 DEFAULT
+  SESSIONS_PER_USER               DEFAULT
+  CPU_PER_SESSION                 DEFAULT
+  CPU_PER_CALL                    DEFAULT
+  LOGICAL_READS_PER_SESSION       DEFAULT
+  LOGICAL_READS_PER_CALL          DEFAULT
+  IDLE_TIME                          15
+  CONNECT_TIME                    DEFAULT
+  PRIVATE_SGA                     DEFAULT
+  FAILED_LOGIN_ATTEMPTS               3
+  PASSWORD_LIFE_TIME                 60
+  PASSWORD_REUSE_TIME               365
+  PASSWORD_REUSE_MAX                 10
+  PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME              UNLIMITED
+  PASSWORD_GRACE_TIME                 5
+
+  Change the value of SESSIONS_PER_USER (along with the other parameters, where
+  relevant) from UNLIMITED to DoD-compliant, site-specific requirements and then
+  assign users to the profile.
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+  To assign the user to the profile do the following:
+  ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  concurrent_sessions &#x3D; sql.query(&quot;SELECT limit FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database number of concurrent sessions allowed&#39; do
+    subject { concurrent_sessions }
+    it { should_not include &#39;UNLIMITED&#39; }
+    it { should_not include &#39;DEFAULT&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61969</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide a report generation capability for audit
+  reduction data.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001878
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61969</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide a report generation capability for audit
+  reduction data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61969&#39; do
+  title &quot;The system must provide a report generation capability for audit
+  reduction data.&quot;
+  desc  &quot;In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000114-DB-000054&#39;
+  tag &quot;gid&quot;: &#39;V-61969&#39;
+  tag &quot;rid&quot;: &#39;SV-76459r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67889r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001878&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.&quot;
+  describe &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39; do
+    skip &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-68863</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-68863</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-68863&#39; do
+  title &quot;Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-68863&#39;
+  tag &quot;rid&quot;: &#39;SV-83467r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010710&#39;
+  tag &quot;fix_id&quot;: &#39;F-75045r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.&quot;
+  describe &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39; do
+    skip &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61409</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is retained for at least one year</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is retained for at least one year</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is retained for at least one year</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is retained for at least one year</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61409</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Audit trail data must be retained online for ninety (90) days and archived 
+    for old records for one (1) year.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review and verify the implementation of an audit trail retention policy.
+    
+    Verify that audit data is maintained online for ninety (90) days and archived for 
+    old records for one (1) year to provide support for after-the-fact investigations 
+    of security incidents.
+
+    If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement an audit retention policy and 
+    procedures.
+
+    It is recommended that the most recent ninety days of audit logs remain 
+    available online.
+
+    After thirty ninety days, the audit logs may be maintained off-line.
+
+    Online maintenance provides for a more timely capability and inclination to         
+    investigate suspicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61409&#39; do
+  title &#39;Audit trail data must be retained for at least one year.&#39;
+  desc  &quot;Without preservation, a complete discovery of an attack or suspicious
+  activity may not be determined.  DBMS audit data also contributes to the
+  complete investigation of unauthorized activity and needs to be included in
+  audit retention plans and procedures.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61409&#39;
+  tag &quot;rid&quot;: &#39;SV-75899r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67325r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review and verify the implementation of an audit trail
+  retention policy.
+
+  Verify that audit data is maintained for a minimum of one year.
+
+  If audit data is not maintained for a minimum of one year, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement an audit retention policy and
+  procedures.
+
+  It is recommended that the most recent thirty days of audit logs remain
+  available online.
+
+  After thirty days, the audit logs may be maintained off-line.
+
+  Online maintenance provides for a more timely capability and inclination to
+  investigate suspicious activity.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is retained for at least one year&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61411</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61411</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to default accounts used to support replication must be
+  restricted to authorized DBAs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61411&#39; do
+  title &quot;Access to default accounts used to support replication must be
+  restricted to authorized DBAs.&quot;
+  desc &quot;Replication database accounts are used for database connections
+  between databases. Replication requires the configuration of these accounts
+  using the same username and password on all databases participating in the
+  replication. Replication connections use fixed user database links. This means
+  that access to the replication account on one server provides access to the
+  other servers participating in the replication. Granting unauthorized access to
+  the replication account provides unauthorized and privileged access to all
+  databases participating in the replication group.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61411&#39;
+  tag &quot;rid&quot;: &#39;SV-75901r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67327r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select &#39;The number of replication objects defined is: &#39;||
+  count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;
+
+  If the count returned is 0, then Oracle Replication is not installed and this
+  check is not a finding.
+
+  Otherwise:
+
+  From SQL*Plus:
+
+    select count(*) from sys.dba_repcatlog;
+
+  If the count returned is 0, then Oracle Replication is not in use and this
+  check is not a finding.
+
+  If any results are returned, ask the ISSO or DBA if the replication account
+  (the default is REPADMIN, but may be customized) is restricted to
+  ISSO-authorized personnel only.
+
+  If it is not, this is a finding.
+
+  If there are multiple replication accounts, confirm that all are justified and
+  documented with the ISSO.
+
+  If they are not, this is a finding.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+  tag &quot;fix&quot;: &quot;Change the password for default and custom replication accounts
+  and provide the password to ISSO-authorized users only.&quot;
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61413</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle instance names must not contain Oracle version numbers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database instance name is expected not to include &quot;[\&quot;12.1.0.2.0\&quot;]&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61413</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle instance names must not contain Oracle version numbers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61413&#39; do
+  title &#39;Oracle instance names must not contain Oracle version numbers.&#39;
+  desc  &quot;Service names may be discovered by unauthenticated users. If the
+  service name includes version numbers or other database product information, a
+  malicious user may use that information to develop a targeted attack.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61413&#39;
+  tag &quot;rid&quot;: &#39;SV-75903r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67329r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select instance_name from v$instance;
+  select version from v$instance;
+
+  If the instance name returned references the Oracle release number, this is a
+  finding.
+
+  Numbers used that include version numbers by coincidence are not a finding.
+
+  The DBA should be able to relate the significance of the presence of a digit in
+  the SID.&quot;
+  tag &quot;fix&quot;: &quot;Follow the instructions in Oracle MetaLink Note 15390.1 (and
+  related documents) to change the SID for the database without re-creating the
+  database to a value that does not identify the Oracle version.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+  db_instance_name &#x3D; sql.query(&#39;select instance_name from v$instance;&#39;).column(&#39;instance_name&#39;)
+
+  describe &#39;The oracle database instance name&#39; do
+    subject { db_instance_name }
+    it { should_not include version.to_s }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61415</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Fixed user and public database links must be authorized for use.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61415</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Fixed user and public database links must be authorized for use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61415&#39; do
+  title &#39;Fixed user and public database links must be authorized for use.&#39;
+  desc  &quot;Database links define connections that may be used by the local
+  database to access remote Oracle databases. These links provide a means for a
+  compromise to the local database to spread to remote databases in the
+  distributed database environment. Limiting or eliminating use of database links
+  where they are not required to support the operational system can help isolate
+  compromises to the local or a limited number of databases.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61415&#39;
+  tag &quot;rid&quot;: &#39;SV-75905r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67331r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select owner||&#39;: &#39;||db_link from dba_db_links;
+
+  If no records are returned from the first SQL statement, this check is not a
+  finding.
+
+  Confirm the public and fixed user database links listed are documented in the
+  System Security Plan, are authorized by the ISSO, and are used for replication
+  or operational system requirements.
+
+  If any are not, this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Document all authorized connections from the database to remote
+  databases in the System Security Plan.
+
+  Remove all unauthorized remote database connection definitions from the
+  database.
+
+  From SQL*Plus:
+
+    drop database link [link name];
+  OR
+    drop public database link [link name];
+
+  Review remote database connection definitions periodically and confirm their
+  use is still required and authorized.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61417</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracable control file permission: rdsdbdata&#x2F; is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61417</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61417&#39; do
+  title &quot;A minimum of two Oracle control files must be defined and configured
+  to be stored on separate, archived disks (physical or virtual) or archived
+  partitions on a RAID device.&quot;
+  desc &quot;Oracle control files are used to store information critical to Oracle
+database integrity. Oracle uses these files to maintain time synchronization of
+database files as well as at system startup to verify the validity of system
+data and log files. Loss of access to the control files can affect database
+availability, integrity and recovery.&quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61417&#39;
+  tag &quot;rid&quot;: &#39;SV-75907r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67333r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select name from v$controlfile;
+
+  DoD guidance recommends:
+
+  2a. Each control file is to be located on separate, archived physical or
+  virtual storage devices.
+
+  OR
+
+  2b. Each control file is to be located on separate, archived directories within
+  one or more RAID devices.
+
+  3. The Logical Paths for each control file should differ at the highest level
+  supported by the configuration, for example:
+
+  UNIX
+  &#x2F;ora03&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  &#x2F;ora04&#x2F;app&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  Windows
+  D:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control01.ctl
+  E:&#x2F;oracle&#x2F;{SID}&#x2F;control&#x2F;control02.ctl
+
+  If the minimum listed above is not met, this is a finding.
+
+  Consult with the SA or DBA to determine that the mount points or partitions
+  referenced in the file paths indicate separate physical disks or directories on
+  RAID devices.
+
+  Note: Distinct does not equal dedicated. May share directory space with other
+  Oracle database instances if present.&quot;
+  tag &quot;fix&quot;: &quot;To prevent loss of service during disk failure, multiple copies
+  of Oracle control files must be maintained on separate disks in archived
+  directories or on separate, archived directories within one or more RAID
+  devices.
+
+  Adding or moving a control file requires careful planning and execution.
+
+  Consult and follow the instructions for creating control files in the Oracle
+  Database Administrator&#39;s Guide, under Steps for Creating New Control Files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  controlfiles &#x3D; sql.query(&#39;select name from v$controlfile;&#39;).column(&#39;name&#39;)
+  partitions &#x3D; []
+
+  controlfiles.each do |files|
+    file &#x3D; files[1..-1]
+    get_pos_slash &#x3D; file.index(&#39;&#x2F;&#39;)
+    partition &#x3D; file[0..get_pos_slash]
+    partitions.push(partition)
+  end
+
+  control_file1_partition &#x3D; partitions[0]
+  control_file2_partition &#x3D; partitions[1]
+
+  describe &quot;The oracable control file permission: #{control_file1_partition}&quot; do
+    subject { control_file1_partition }
+    it { should_not cmp control_file2_partition }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61419</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;4&quot;] is expected to cmp &gt;&#x3D; 2</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61419</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61419&#39; do
+  title &quot;A minimum of two Oracle redo log groups&#x2F;files must be defined and
+  configured to be stored on separate, archived physical disks or archived
+  directories on a RAID device.&quot;
+  desc &quot;The Oracle redo log files store the detailed information on changes
+  made to the database. This information is critical to database recovery in case
+  of a database failure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61419&#39;
+  tag &quot;rid&quot;: &#39;SV-75909r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67335r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select count(*) from V$LOG;
+
+  If the value of the count returned is less than 2, this is a finding.
+
+  From SQL*Plus:
+
+    select count(*) from V$LOG where members &gt; 1;
+
+  If the value of the count returned is less than 2 and a RAID storage device is
+  not being used, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;To define additional redo log file groups:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile group 2
+      (&#39;diska:log2.log&#39; ,
+       &#39;diskb:log2.log&#39;) size 50K;
+
+  To add additional redo log file [members] to an existing redo log file group:
+
+  From SQL*Plus (Example):
+
+    alter database add logfile member &#39;diskc:log2.log&#39;
+    to group 2;
+
+  Replace diska, diskb, diskc with valid, different disk drive specifications.
+
+  Replace log#.log file with valid or custom names for the log files.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&#39;select count(*) from V$LOG;&#39;).column(&#39;count(*)&#39;) do
+    it { should cmp &gt;&#x3D; 2 }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61421</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61421</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61421&#39; do
+  title &quot;The Oracle WITH GRANT OPTION privilege must not be granted to non-DBA
+  or non-Application administrator user accounts.&quot;
+  desc &quot;An account permission to grant privileges within the database is an
+  administrative function. Minimizing the number and privileges of administrative
+  accounts reduces the chances of privileged account exploitation. Application
+  user accounts must never require WITH GRANT OPTION privileges since, by
+  definition, they require only privileges to execute procedures or view &#x2F; edit
+  data.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61421&#39;
+  tag &quot;rid&quot;: &#39;SV-75911r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67337r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Execute the query:
+
+  select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;
+
+  If any accounts are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke privileges granted the WITH GRANT OPTION from non-DBA and
+  accounts that do not own application objects.
+
+  Re-grant privileges without specifying WITH GRANT OPTION.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name
+  from dba_tab_privs
+  where grantable &#x3D; &#39;YES&#39;
+  and grantee not in (select distinct owner from dba_objects)
+  and grantee not in (select grantee from dba_role_privs where granted_role &#x3D;
+  &#39;DBA&#39;)
+  order by grantee;&quot;).row(0).column(&quot;grantee||&#39;: &#39;||owner||&#39;.&#39;||table_name&quot;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61425</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_AUTHENT parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61425</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61425&#39; do
+  title &#39;The Oracle REMOTE_OS_AUTHENT parameter must be set to FALSE.&#39;
+  desc  &quot;Setting this value to TRUE allows operating system authentication over
+  an unsecured connection. Trusting remote operating systems can allow a user to
+  impersonate another operating system user and connect to the database without
+  having to supply a password. If REMOTE_OS_AUTHENT is set to true, the only
+  information a remote user needs to connect to the database is the name of any
+  user whose account is setup to be authenticated by the operating system.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61425&#39;
+  tag &quot;rid&quot;: &#39;SV-75915r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-021900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67341r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;
+
+  If the value returned does not equal FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS authentication in the System Security Plan.
+
+  If not required or not mitigated to an acceptable level, disable remote OS
+  authentication.
+
+  From SQL*Plus:
+
+    alter system set remote_os_authent &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_authent&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_AUTHENT parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61427</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_OS_ROLES parameter is expected to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61427</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61427&#39; do
+  title &#39;The Oracle REMOTE_OS_ROLES parameter must be set to FALSE.&#39;
+  desc  &quot;Setting REMOTE_OS_ROLES to TRUE allows operating system groups to
+  control Oracle roles. The default value of FALSE causes roles to be identified
+  and managed by the database. If REMOTE_OS_ROLES is set to TRUE, a remote user
+  could impersonate another operating system user over a network connection.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61427&#39;
+  tag &quot;rid&quot;: &#39;SV-75917r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67343r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;
+
+  If the returned value is not FALSE or not documented in the System Security
+  Plan as required, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Document remote OS roles in the System Security Plan.
+
+  If not required, disable use of remote OS roles.
+
+  From SQL*Plus:
+
+    alter system set remote_os_roles &#x3D; FALSE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;remote_os_roles&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database REMOTE_OS_ROLES parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61429</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle SQL92_SECURITY parameter must be set to TRUE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database SQL92_SECURITY parameter is expected to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: TRUE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61429</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle SQL92_SECURITY parameter must be set to TRUE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61429&#39; do
+  title &#39;The Oracle SQL92_SECURITY parameter must be set to TRUE.&#39;
+  desc  &quot;The configuration option SQL92_SECURITY specifies whether table-level
+  SELECT privileges are required to execute an update or delete that references
+  table column values. If this option is disabled (set to FALSE), the UPDATE
+  privilege can be used to determine values that should require SELECT privileges.
+
+      The SQL92_SECURITY setting of TRUE prevents the exploitation of user
+  credentials with only DELETE or UPDATE privileges on a table from being able to
+  derive column values in that table by performing a series of update&#x2F;delete
+  statements using a where clause, and rolling back the change. In the following
+  example, with SQL92_SECURITY set to FALSE, a user with only delete privilege on
+  the scott.emp table is able to derive that there is one employee with a salary
+  greater than 3000. With SQL92_SECURITY set to TRUE, that user is prevented from
+  attempting to derive a value.
+
+      SQL92_SECURITY &#x3D; FALSE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      1 row deleted
+      SQL&gt; rollback;
+      Rollback complete
+
+      SQL92_SECURITY &#x3D; TRUE
+      SQL&gt; delete from scott.emp where sal &gt; 3000;
+      delete from scott.emp where sal &gt; 3000
+                        *
+      ERROR at line 1:
+      ORA-01031: insufficient privileges
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61429&#39;
+  tag &quot;rid&quot;: &#39;SV-75919r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67345r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;
+
+  If the value returned is set to FALSE, this is a finding.
+
+  If the parameter is set to TRUE or does not exist, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Enable SQL92 security.
+
+  From SQL*Plus:
+
+  alter system set sql92_security &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;sql92_security&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database SQL92_SECURITY parameter&#39; do
+    subject { parameter }
+    it { should cmp &#39;TRUE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61431</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database REMOTE_LOGIN_PASSWORDFILE parameter is expected to cmp &#x3D;&#x3D; &quot;EXCLUSIVE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61431</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The REMOTE_LOGIN_PASSWORDFILE setting of &quot;NONE&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  &quot;EXCLUSIVE&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to &quot;EXCLUSIVE&quot;, remote connections to the database as &quot;internal&quot;
+  or &quot;as SYSDBA&quot; are not logged to an individual account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61431&#39; do
+  title &quot;The Oracle REMOTE_LOGIN_PASSWORDFILE parameter must be set to
+  EXCLUSIVE or NONE.&quot;
+  desc &quot;The REMOTE_LOGIN_PASSWORDFILE setting of \&quot;NONE\&quot; disallows remote
+  administration of the database. The REMOTE_LOGIN_PASSWORDFILE setting of
+  \&quot;EXCLUSIVE\&quot; allows for auditing of individual DBA logons to the SYS account.
+  If not set to \&quot;EXCLUSIVE\&quot;, remote connections to the database as \&quot;internal\&quot;
+  or \&quot;as SYSDBA\&quot; are not logged to an individual account.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61431&#39;
+  tag &quot;rid&quot;: &#39;SV-75921r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67347r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;
+
+  If the value returned does not equal &#39;EXCLUSIVE&#39; or &#39;NONE&#39;, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable use of the REMOTE_LOGIN_PASSWORDFILE where remote
+  administration is not authorized by specifying a value of NONE.
+
+  If authorized, restrict use of a password file to exclusive use by each
+  database by specifying a value of EXCLUSIVE.
+
+  From SQL*Plus:
+
+   alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;EXCLUSIVE&#39; scope &#x3D; spfile;
+
+    OR
+
+  alter system set REMOTE_LOGIN_PASSWORDFILE &#x3D; &#39;NONE&#39; scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where upper(name) &#x3D; &#39;REMOTE_LOGIN_PASSWORDFILE&#39;;&quot;).column(&#39;value&#39;)
+
+  describe.one do
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;EXCLUSIVE&#39; }
+    end
+
+    describe &#39;The oracle database REMOTE_LOGIN_PASSWORDFILE parameter&#39; do
+      subject { parameter }
+      it { should cmp &#39;NONE&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61433</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61433</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61433&#39; do
+  title &quot;System privileges granted using the WITH ADMIN OPTION must not be
+  granted to unauthorized user accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a privilege to
+  another database account. Best security practice restricts the privilege of
+  assigning privileges to authorized personnel. Authorized personnel include
+  DBAs, object owners, and, where designed and included in the application&#39;s
+  functions, application administrators. Restricting privilege-granting functions
+  to authorized accounts can help decrease mismanagement of privileges and
+  wrongful assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61433&#39;
+  tag &quot;rid&quot;: &#39;SV-75923r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67349r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM, SYSKM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  From SQL*Plus:
+  select grantee, privilege from dba_sys_privs
+  where grantee not in (&lt;list of non-applicable accounts&gt;)
+  and admin_option &#x3D; &#39;YES&#39;
+  and grantee not in
+  (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If any accounts that are not authorized to have the ADMIN OPTION are listed,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of privileges with the WITH ADMIN OPTION from
+  unauthorized users and re-grant them without the option.
+
+  From SQL*Plus:
+
+    revoke [privilege name] from user [username];
+
+  Replace [privilege name] with the named privilege and [username] with the named
+  user.
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized privilege assignments with the WITH ADMIN OPTION in the
+  System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61435</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>System Privileges must not be granted to PUBLIC.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61435</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">System Privileges must not be granted to PUBLIC.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61435&#39; do
+  title &#39;System Privileges must not be granted to PUBLIC.&#39;
+  desc  &quot;System privileges can be granted to users and roles and to the user
+  group PUBLIC. All privileges granted to PUBLIC are accessible to every user in
+  the database. Many of these privileges convey considerable authority over the
+  database and should be granted only to those persons responsible for
+  administering the database. In general, these privileges should be granted to
+  roles and then the appropriate roles should be granted to users. System
+  privileges must never be granted to PUBLIC as this could allow users to
+  compromise the database.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61435&#39;
+  tag &quot;rid&quot;: &#39;SV-75925r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67351r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any system privileges assigned to PUBLIC:
+
+  From SQL*Plus:
+
+  revoke [system privilege] from PUBLIC;
+
+  Replace [system privilege] with the named system privilege.
+
+  Note:  System privileges are not granted to PUBLIC by default and would
+  indicate a custom action.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select privilege from dba_sys_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;privilege&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61437</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: RECOVERY_CATALOG_OWNER is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RECOVERY_CATALOG_OWNER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61437</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61437&#39; do
+  title &quot;Oracle roles granted using the WITH ADMIN OPTION must not be granted
+  to unauthorized accounts.&quot;
+  desc &quot;The WITH ADMIN OPTION allows the grantee to grant a role to another
+  database account. Best security practice restricts the privilege of assigning
+  privileges to authorized personnel. Authorized personnel include DBAs, object
+  owners, and, where designed and included in the application&#39;s functions,
+  application administrators. Restricting privilege-granting functions to
+  authorized accounts can help decrease mismanagement of privileges and wrongful
+  assignments to unauthorized accounts.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61437&#39;
+  tag &quot;rid&quot;: &#39;SV-75927r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67353r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE
+  privileges on packages owned by the SYS schema. The default tablespace for
+  administrative accounts is either SYSTEM or SYSAUX. Non-administrative user
+  accounts only have the minimum privileges needed to perform their jobs. Their
+  default tablespace is USERS.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL statement:
+
+    select grantee||&#39;: &#39;||granted_role from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the System Security Plan to confirm any grantees listed are
+  ISSO-authorized DBA accounts or application administration roles.
+
+  If any grantees listed are not authorized and documented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke assignment of roles with the WITH ADMIN OPTION from
+  unauthorized grantees and re-grant them without the option if required.
+
+  SQL statements to remove the admin option from an unauthorized grantee:
+    revoke &lt;role name&gt; from &lt;grantee&gt;;
+    grant &lt;role name&gt; to &lt;grantee&gt;;
+
+  Restrict use of the WITH ADMIN OPTION to authorized administrators.
+
+  Document authorized role assignments with the WITH ADMIN OPTION in the System
+  Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_option &#x3D; sql.query(&quot;select grantee from dba_role_privs
+    where admin_option &#x3D; &#39;YES&#39; and grantee not in
+    (select distinct owner from dba_objects)
+    and grantee not in
+    (select grantee from dba_role_privs
+     where granted_role &#x3D; &#39;DBA&#39;)
+    order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_admin_option.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the admin option, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_option.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61439</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Object permissions granted to PUBLIC must be restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: CTXSYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: XDB with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: CTXSYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: XDB with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: CTXSYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: XDB with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: CTXSYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: GSMADMIN_INTERNAL with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: XDB with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS with access to PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61439</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Object permissions granted to PUBLIC must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61439&#39; do
+  title &#39;Object permissions granted to PUBLIC must be restricted.&#39;
+  desc  &quot;Permissions on objects may be granted to the user group PUBLIC.
+  Because every database user is a member of the PUBLIC group, granting object
+  permissions to PUBLIC gives all users in the database access to that object. In
+  a secure environment, granting object permissions to PUBLIC must be restricted
+  to those objects that all users are allowed to access. The policy does not
+  require object permissions assigned to PUBLIC by the installation of Oracle
+  Database server components be revoked.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61439&#39;
+  tag &quot;rid&quot;: &#39;SV-75929r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67355r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;A default Oracle Database installation provides a set of
+  predefined administrative accounts and non-administrative accounts. These are
+  accounts that have special privileges required to administer areas of the
+  database, such as the “CREATE ANY TABLE” or “ALTER SESSION” privilege, or
+  “EXECUTE” privileges on packages owned by the SYS schema. The default
+  tablespace for administrative accounts is either “SYSTEM” or “SYSAUX”.
+  Non-administrative user accounts only have the minimum privileges needed to
+  perform their jobs. Their default tablespace is “USERS”.
+
+  To protect these accounts from unauthorized access, the installation process
+  expires and locks most of these accounts, except where noted below. The
+  database administrator is responsible for unlocking and resetting these
+  accounts, as required.
+
+  Non-Administrative Accounts - Expired and locked:
+  APEX_PUBLIC_USER, DIP, FLOWS_040100*, FLOWS_FILES, MDDATA, ORACLE_OCM,
+  SPATIAL_CSW_ADMIN_USR, SPATIAL_WFS_ADMIN_USR, XS$NULL
+
+  Administrative Accounts - Expired and Locked:
+  ANONYMOUS, CTXSTS, EXFSYS, LBACSYS, MDSYS, OLAPSYS, OEDDATA, OWBSYS,
+  ORDPLUGINS, ORDSYS, OUTLN, SI_INFORMTN_SCHEMA, WK_TEST, WK_SYS, WKPROXY, WMSYS,
+  XDB
+
+  Administrative Accounts - Open:
+  DBSNMP, MGMT_VIEW, SYS, SYSMAN, SYSTEM
+
+  * Subject to change based on version installed
+
+  Run the SQL query:
+
+  select owner ||&#39;.&#39;|| table_name ||&#39;:&#39;|| privilege from dba_tab_privs
+  where grantee &#x3D; &#39;PUBLIC&#39;;
+  and owner not in
+  (&lt;list of non-applicable accounts&gt;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  If there are any records returned that are not Oracle product accounts, and are
+  not documented and authorized, this is a finding.
+
+  Note: This check may return false positives where other Oracle product accounts
+  are not included in the exclusion list.&quot;
+  tag &quot;fix&quot;: &quot;Revoke any privileges granted to PUBLIC for objects that are not
+  owned by Oracle product accounts.
+
+  From SQL*Plus:
+
+  revoke [privilege name] from [user name] on [object name];
+
+  Assign permissions to custom application user roles based on job functions:
+
+  From SQL*Plus:
+
+  grant [privilege name] to [user role] on [object name];&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_public_access &#x3D; sql.query(&quot;select DISTINCT owner from dba_tab_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).column(&#39;owner&#39;).uniq
+
+  if users_with_public_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with access to PUBLIC, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with access to PUBLIC&#39;
+    end
+  else
+    users_with_public_access.each do |user|
+      describe &quot;oracle user: #{user} with access to PUBLIC&quot; do
+        subject { user }
+        it { should be_in input(&#39;users_allowed_access_to_public&#39;)}
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61441</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle Listener must be configured to require administration
+  authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61441</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle Listener must be configured to require administration
+  authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If &quot;Security &#x3D; OFF&quot; is displayed, this is a finding.
+
+  If &quot;Security &#x3D; ON: Local OS Authentication&quot; is displayed, this is not a
+  finding.
+
+  If &quot;Security &#x3D; ON: Password or Local OS Authentication&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61441&#39; do
+  title &quot;The Oracle Listener must be configured to require administration
+  authentication.&quot;
+  desc &quot;Oracle listener authentication helps prevent unauthorized
+  administration of the Oracle listener. Unauthorized administration of the
+  listener could lead to DoS exploits; loss of connection audit data,
+  unauthorized reconfiguration or other unauthorized access. This is a Category I
+  finding because privileged access to the listener is not restricted to
+  authorized users. Unauthorized access can result in stopping of the listener
+  (DoS) and overwriting of listener audit logs.&quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61441&#39;
+  tag &quot;rid&quot;: &#39;SV-75931r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67357r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a listener is not running on the local database host server,
+  this check is not a finding.
+
+  Note:  This check needs to be done only once per host system and once per
+  listener. Multiple listeners may be defined on a single host system. They must
+  all be reviewed, but only once per database home review.
+
+  For subsequent database home reviews on the same host system, this check is not
+  a finding.
+
+  Determine all Listeners running on the host.
+
+  For Windows hosts, view all Windows services with TNSListener embedded in the
+  service name
+    - The service name format is:
+        Oracle[ORACLE_HOME_NAME]TNSListener
+
+  For UNIX hosts, the Oracle Listener process will indicate the TNSLSNR
+  executable.
+
+  At a command prompt, issue the command:
+    ps -ef | grep tnslsnr | grep -v grep
+
+  The alias for the listener follows tnslsnr in the command output.
+
+  Must be logged on the host system using the account that owns the tnslsnr
+  executable (UNIX). If the account is denied local logon, have the system SA
+  assist in this task by adding &#39;su&#39; to the listener account from the root
+  account. On Windows platforms, log on using an account with administrator
+  privileges to complete the check.
+
+  From a system command prompt, execute the listener control utility:
+
+    lsnrctl status [LISTENER NAME]
+
+  Review the results for the value of Security.
+
+  If \&quot;Security &#x3D; OFF\&quot; is displayed, this is a finding.
+
+  If \&quot;Security &#x3D; ON: Local OS Authentication\&quot; is displayed, this is not a
+  finding.
+
+  If \&quot;Security &#x3D; ON: Password or Local OS Authentication\&quot;, this is a finding
+  (do not set a password on Oracle versions 10.1 and higher. Instead, use Local
+  OS Authentication).
+
+  Repeat the execution of the lsnrctl utility for all active listeners.&quot;
+  tag &quot;fix&quot;: &quot;By default, Oracle Net Listener permits only local administration
+  for security reasons. As a policy, the listener can be administered only by the
+  user who started it. This is enforced through local operating system
+  authentication. For example, if user1 starts the listener, then only user1 can
+  administer it. Any other user trying to administer the listener gets an error.
+  The super user is the only exception.
+
+  Remote administration of the listener must not be permitted. If listener
+  administration from a remote system is required, granting secure remote access
+  to the Oracle DBMS server and performing local administration is preferred.
+  Authorize and document this requirement in the System Security Plan.
+
+  Note: In Oracle Database 12c Release 1 (12.1), the listener password feature is
+  no longer supported. This does not cause a loss of security because
+  authentication is enforced through local operating system authentication. Refer
+  to Oracle Database Net Services Reference for additional information.&quot;
+
+  listener_name &#x3D; command(&quot;ps -ef | grep tnslsnr | grep -v grep|awk &#39;{ print $9; }&#39;&quot;).stdout.strip
+
+  listener_status &#x3D; command(&quot;lsnrctl status #{listener_name}&quot;).stdout.strip
+
+  describe &#39;The Oracle Listener status&#39; do
+    subject { listener_status }
+    it { should_not include &#39;Security                  OFF&#39; }
+    it { should_not include &#39;Security                  ON: Password or Local OS Authentication&#39; }
+  end
+  describe listener_status do
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61443</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SQL Column value is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61443</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application role permissions must not be assigned to the Oracle PUBLIC
+  role.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61443&#39; do
+  title &quot;Application role permissions must not be assigned to the Oracle PUBLIC
+  role.&quot;
+  desc &quot;Permissions granted to PUBLIC are granted to all users of the
+  database. Custom roles must be used to assign application permissions to
+  functional groups of application users. The installation of Oracle does not
+  assign role permissions to PUBLIC.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61443&#39;
+  tag &quot;rid&quot;: &#39;SV-75933r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67359r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;
+
+  If any roles are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke role grants from PUBLIC.
+
+  Do not assign role privileges to PUBLIC.
+
+  From SQL*Plus:
+
+  revoke [role name] from PUBLIC;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  describe sql.query(&quot;select granted_role from dba_role_privs where grantee &#x3D; &#39;PUBLIC&#39;;&quot;).row(0).column(&#39;granted_role&#39;) do
+    its(&#39;value&#39;) { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61445</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle application administration roles must be disabled if not
+  required and authorized.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DATAPUMP_IMP_FULL_DATABASE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DATAPUMP_IMP_FULL_DATABASE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with admin option: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61445</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle application administration roles must be disabled if not
+  required and authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61445&#39; do
+  title &quot;Oracle application administration roles must be disabled if not
+  required and authorized.&quot;
+  desc &quot;Application administration roles, which are assigned system or
+  elevated application object privileges, must be protected from default
+  activation. Application administration roles are determined by system privilege
+  assignment (create &#x2F; alter &#x2F; drop user) and application user role ADMIN OPTION
+  privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61445&#39;
+  tag &quot;rid&quot;: &#39;SV-75935r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-022900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67361r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select grantee, granted_role from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in
+  (&lt;list of non-applicable accounts&gt;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of accounts reported for this check and ensures that they are
+  authorized application administration roles.
+
+  If any are not authorized application administration roles, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For each role assignment returned, issue:
+
+  From SQL*Plus:
+
+  alter user [username] default role all except [role];
+
+  If the user has more than one application administration role assigned, then
+  remove assigned roles from default assignment and assign individually the
+  appropriate default roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dba_role &#x3D; sql.query(&quot;select grantee from dba_role_privs
+  where default_role&#x3D;&#39;YES&#39;
+  and granted_role in
+  (select grantee from dba_sys_privs where upper(privilege) like &#39;%USER%&#39;)
+  and grantee not in (select distinct owner from dba_tables)
+  and grantee not in
+  (select distinct username from dba_users where upper(account_status) like
+   &#39;%LOCKED%&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dba_role.empty?
+    impact 0.0
+    describe &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users with the dba role, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_dba_role.each do |user|
+      describe &quot;oracle users with admin option: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_dba_role&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61447</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61447</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multi-tier systems may be configured with the database and connecting 
+        middle-tier system located on an internal network, with the database 
+        located on an internal network behind a firewall and the middle-tier 
+        system located in a DMZ. In cases where either or both systems are located 
+        in the DMZ (or on networks external to CMS), network communications between 
+        the systems must be encrypted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure communications between the DBMS and remote 
+       applications&#x2F;application servers to use CMS-approved encryption.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61447&#39; do
+  title &quot;Connections by mid-tier web and application systems to the Oracle DBMS
+  from a DMZ or external network must be encrypted.
+  &quot;
+  desc &quot;Multi-tier systems may be configured with the database and connecting
+  middle-tier system located on an internal network, with the database located on
+  an internal network behind a firewall and the middle-tier system located in a
+  DMZ. In cases where either or both systems are located in the DMZ (or on
+  networks external to DoD), network communications between the systems must be
+  encrypted.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61447&#39;
+  tag &quot;rid&quot;: &#39;SV-75937r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67363r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for remote applications that
+  access and use the database.
+
+  For each remote application or application server, determine whether
+  communications between it and the DBMS are encrypted. If any are not encrypted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure communications between the DBMS and remote
+  applications&#x2F;application servers to use DoD-approved encryption.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61449</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: [&quot;XMLDB_NFS_CLEANUP_JOB&quot;, &quot;LOAD_OPATCH_INVENTORY&quot;, &quot;SM$CLEAN_AUTO_SPLIT_MERGE&quot;, &quot;RSE$CLEAN_RECOVERABLE_SCRIPT&quot;, &quot;FGR$AUTOPURGE_JOB&quot;, &quot;BSLN_MAINTAIN_STATS_JOB&quot;, &quot;DRA_REEVALUATE_OPEN_FAILURES&quot;, &quot;HM_CREATE_OFFLINE_DICTIONARY&quot;, &quot;ORA$AUTOTASK_CLEAN&quot;, &quot;FILE_SIZE_UPD&quot;, &quot;CLEANUP_ONLINE_PMO&quot;, &quot;CLEANUP_TRANSIENT_PKG&quot;, &quot;CLEANUP_TRANSIENT_TYPE&quot;, &quot;CLEANUP_TAB_IOT_PMO&quot;, &quot;CLEANUP_ONLINE_IND_BUILD&quot;, &quot;CLEANUP_NON_EXIST_OBJ&quot;, &quot;PMO_DEFERRED_GIDX_MAINT_JOB&quot;, &quot;FILE_WATCHER&quot;, &quot;PURGE_LOG&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61449</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61449&#39; do
+  title &quot;Database job&#x2F;batch queues must be reviewed regularly to detect
+  unauthorized database job submissions.&quot;
+  desc &quot;Unauthorized users may bypass security mechanisms by submitting jobs
+  to job queues managed by the database to be run under a more privileged
+  security context of the database or host system. These queues must be monitored
+  regularly to detect any such unauthorized job submissions.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61449&#39;
+  tag &quot;rid&quot;: &#39;SV-75939r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67365r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The DBMS_JOB PL&#x2F;SQL package has been replaced by DBMS_SCHEDULER
+  in Oracle versions 10.1 and higher, though it continues to be supported for
+  backward compatibility.
+
+  Run this query:
+    select value from v$parameter where name &#x3D; &#39;job_queue_processes&#39;;
+
+  Run this query:
+    select value from all_scheduler_global_attribute
+    where ATTRIBUTE_NAME &#x3D; &#39;MAX_JOB_SLAVE_PROCESSES&#39;;
+
+  To understand the relationship between these settings, review:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ADMIN&#x2F;appendix_a.htm#ADMIN11002
+
+  Review documented and implemented procedures for monitoring the Oracle DBMS
+  job&#x2F;batch queues for unauthorized submissions. If procedures for job queue
+  review are not defined, documented or evidence of implementation does not
+  exist, this is a finding.
+
+  Job queue information is available from the DBA_JOBS view. The following
+  command lists jobs submitted to the queue. DBMS_JOB does not generate a
+  &#39;history&#39; of previous job executions.
+
+  Run this query:
+    select job, next_date, next_sec, failures, broken from dba_jobs;
+
+  Scheduler queue information is available from the DBA_SCHEDULER_JOBS view. The
+  following command lists jobs submitted to the queue.
+
+  Run this query:
+  select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor the
+  database job queues for unauthorized job submissions.
+
+  Develop, document and implement a formal migration plan to convert jobs using
+  DBMS_JOB to use DBMS_SCHEDULER instead for Oracle versions 10.1 and higher.
+  (This does not apply to DBMS_JOB jobs generated by Oracle itself, such as those
+  for refreshing materialized views.)
+
+  Set the value of the job_queue_processes parameter to a low value to restrict
+  concurrent DBMS_JOB executions.
+
+  Use auditing to capture use of the DBMS_JOB package in the audit trail. Review
+  the audit trail for unauthorized use of the DBMS_JOB package.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_jobs &#x3D; sql.query(&quot;select owner, job_name, state, job_class, job_type, job_action
+  from dba_scheduler_jobs;&quot;).column(&#39;job_name&#39;)
+
+  describe &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot; do
+    skip &quot;You must manually review the database jobs to detect unauthorized database job submissions. The jobs to review are: #{database_jobs}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61451</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unauthorized database links must not be defined and active.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61451</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unauthorized database links must not be defined and active.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61451&#39; do
+  title &#39;Unauthorized database links must not be defined and active.&#39;
+  desc  &quot;DBMS links provide a communication and data transfer path definition
+  between two databases that may be used by malicious users to discover and
+  obtain unauthorized access to remote systems. Database links between production
+  and development DBMSs provide a means for developers to access production data
+  not authorized for their access or to introduce untested or unauthorized
+  applications to the production database. Only protected, controlled, and
+  authorized downloads of any production data to use for development may be
+  allowed. Only applications that have completed the configuration management
+  process may be introduced by the application object owner account to the
+  production system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61451&#39;
+  tag &quot;rid&quot;: &#39;SV-75941r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67367r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+  select db_link||&#39;: &#39;||host from dba_db_links;
+
+  If no links are returned, this check is not a finding.
+
+  Review documentation for definitions of authorized database links to external
+  interfaces.
+
+  The documentation should include:
+
+  - Any remote access to the database
+  - The purpose or function of the remote connection
+  - Any access to data or procedures stored externally to the local DBMS
+  - Any network ports or protocols used by remote connections, whether the remote
+  connection is to a production, test, or development system
+  - Any security accounts used by DBMS to access remote resources or objects
+
+  If any unauthorized database links are defined or the definitions do not match
+  the documentation, this is a finding.
+
+  Note: findings for production-development links under this check are assigned
+  to the production database only.
+
+  If any database links are defined between the production database and any test
+  or development databases, this is a finding.
+
+  If remote interface documentation does not exist or is incomplete, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Document all remote or external interfaces used by the DBMS to
+  connect to or allow connections from remote or external sources.
+
+  Include with the documentation as appropriate, any network ports or protocols,
+  security accounts, and the sensitivity of any data exchanged.
+
+  Do not define or configure database links between production databases and test
+  or development databases.
+
+  Note: Oracle Database Advanced Replication is deprecated in Oracle Database
+  12c. Use Oracle GoldenGate to replace all features of Advanced Replication,
+  including multimaster replication, updatable materialized views, hierarchical
+  materialized views, and deployment templates.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61453</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Sensitive information from production database exports must be
+  modified before import to a development database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61453</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Sensitive information from production database exports must be
+  modified before import to a development database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Data export from production databases may include sensitive data. Application 
+         developers do not have a need to know to sensitive data. Any access they may 
+         have to production data would be considered unauthorized access and subject 
+         the sensitive data to unlawful or unauthorized disclosure. See CMS ARS 3.1 
+         for a definition of Sensitive Information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61453&#39; do
+  title &quot;Sensitive information from production database exports must be
+  modified before import to a development database.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers do not have a need to know to sensitive data. Any access
+  they may have to production data would be considered unauthorized access and
+  subject the sensitive data to unlawful or unauthorized disclosure. See DODD
+  8500.1 for a definition of Sensitive Information.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61453&#39;
+  tag &quot;rid&quot;: &#39;SV-75943r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67369r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is a production database, this
+  check is not a finding.
+
+  Review policy, procedures and restrictions for data imports of production data
+  containing sensitive information into development databases.
+
+  If data imports of production data are allowed, review procedures for
+  protecting any sensitive data included in production exports.
+
+  If sensitive data is included in the exports and no procedures are in place to
+  remove or modify the data to render it not sensitive prior to import into a
+  development database or policy and procedures are not in place to ensure
+  authorization of development personnel to access sensitive information
+  contained in production data, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy, procedures and
+  restrictions for production data import.
+
+  Require any users assigned privileges that allow the export of production data
+  from the database to acknowledge understanding of import policies, procedures
+  and restrictions.
+
+  Restrict permissions of development personnel requiring use or access to
+  production data imported into development databases containing sensitive
+  information to authorized users.
+
+  Implement policy and procedures to modify or remove sensitive information in
+  production exports prior to import into development databases.&quot;
+  describe &#39;A manual review is required to ensure sensitive information from production database exports are
+  modified before import to a development database&#39; do
+    skip &#39;A manual review is required to ensure sensitive information from production database exports are
+    modified before import to a development database&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61455</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61455</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application user privilege assignment must be reviewed every 90 days or more 
+          frequently to ensure compliance with least privilege and documented policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Users granted privileges not required to perform their assigned functions are 
+         able to make unauthorized modifications to the production data or database. 
+         Every 90 days or more frequent periodic review of privilege assignments assures 
+         that organizational and&#x2F;or functional changes are reflected appropriately.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61455&#39; do
+  title &quot;Application user privilege assignment must be reviewed monthly or more
+  frequently to ensure compliance with least privilege and documented policy.&quot;
+  desc &quot;Users granted privileges not required to perform their assigned
+  functions are able to make unauthorized modifications to the production data or
+  database. Monthly or more frequent periodic review of privilege assignments
+  assures that organizational and&#x2F;or functional changes are reflected
+  appropriately.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61455&#39;
+  tag &quot;rid&quot;: &#39;SV-75945r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67371r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy, procedures and implementation evidence to
+  determine if periodic reviews of user privileges by the ISSO are being
+  performed.
+
+  Evidence may consist of email or other correspondence that acknowledges receipt
+  of periodic reports and notification of review between the DBA and ISSO or
+  other auditors as assigned.
+
+  If policy and procedures are incomplete or no evidence of implementation
+  exists, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures for
+  periodic review of database user accounts and privilege assignments.
+
+  Include methods to provide evidence of review in the procedures to verify
+  reviews occur in accordance with the procedures.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure application user privilege assignment are reviewed monthly or more frequently to ensure compliance with least privilege and documented policy. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61457</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Audit trail data must be reviewed daily or more frequently.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is reviewed daily or more frequently</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is reviewed daily or more frequently</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is reviewed daily or more frequently</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure audit trail data is reviewed daily or more frequently</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61457</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Audit trail data must be reviewed daily or more frequently.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures to monitor
+  audit trail data daily.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61457&#39; do
+  title &#39;Audit trail data must be reviewed daily or more frequently.&#39;
+  desc  &quot;Review of audit trail data provides a means for detection of
+  unauthorized access or attempted access. Frequent and regularly scheduled
+  reviews ensure that such access is discovered in a timely manner.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61457&#39;
+  tag &quot;rid&quot;: &#39;SV-75947r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67373r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database,
+  this check is not a finding.
+
+  Review policy and procedures documented or noted in the System Security plan as
+  well as evidence of implementation for daily audit trail monitoring.
+
+  If policy and procedures are not documented or evidence of implementation is
+  not available, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  audit trail data daily.&quot;
+  describe &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39; do
+    skip &#39;A manual review is required to ensure audit trail data is reviewed daily or more frequently&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61459</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_name is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_value is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSBACKUP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSDG is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_name is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_value is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSBACKUP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSDG is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_name is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_value is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSBACKUP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSDG is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_name is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database property_value is expected not to include &quot;SYSTEM&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSBACKUP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSBACKUP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSDG is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users with system tablespace: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61459</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the &quot;alter user&quot; for each affected user account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61459&#39; do
+  title &quot;Only authorized system accounts must have the SYSTEM tablespace
+ specified as the default tablespace.&quot;
+  desc  &quot;The Oracle SYSTEM tablespace is used by the database to store all DBMS
+  system objects. Other use of the system tablespace may compromise system
+  availability and the effectiveness of host system access controls to the
+  tablespace files.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61459&#39;
+  tag &quot;rid&quot;: &#39;SV-75949r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67375r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the query:
+
+  select property_name, property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);
+
+  If either value is set to SYSTEM, this is a finding.
+
+  Run the query:
+
+  select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);
+
+  If any non-default account records are returned, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and dedicate tablespaces to support only one application.
+
+  Do not share tablespaces between applications.
+
+  Do not grant quotas to application object owners on tablespaces not dedicated
+  to their associated application.
+
+  Run the queries:
+
+  alter database default tablespace &lt;tablespace_name&gt;;
+  alter database default temporary tablespace &lt;temporary_tablespace_name&gt;;
+
+  alter user &lt;username&gt; default tablespace &lt;tablespace_name&gt; temporary tablespace
+  &lt;temporary_tablespace_name&gt;;
+
+  Replace &lt;username&gt; with the named user account.
+  Replace &lt;tablespace_name&gt; with the new default tablespace name.
+  Replace &lt;temporary_tablespace_name&gt; with the new default temporary tablespace
+  name (typically TEMP).
+  Repeat the \&quot;alter user\&quot; for each affected user account.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  property_name &#x3D; sql.query(&quot;select property_name
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_name&#39;)
+
+  describe &#39;The oracle database property_name&#39; do
+    subject { property_name }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  property_value &#x3D; sql.query(&quot;select property_value
+  from database_properties
+  where property_name in
+  (&#39;DEFAULT_PERMANENT_TABLESPACE&#39;,&#39;DEFAULT_TEMP_TABLESPACE&#39;);&quot;).column(&#39;property_value&#39;)
+
+  describe &#39;The oracle database property_value&#39; do
+    subject { property_value }
+    it { should_not include &#39;SYSTEM&#39; }
+  end
+
+  users_with_system_tablespace &#x3D; sql.query(&quot;select username from dba_users
+  where (default_tablespace &#x3D; &#39;SYSTEM&#39; or temporary_tablespace &#x3D; &#39;SYSTEM&#39;)
+  and username not in
+  (&#39;LBACSYS&#39;,&#39;OUTLN&#39;,&#39;SYS&#39;,&#39;SYSTEM&#39;);&quot;).column(&#39;username&#39;).uniq
+  if users_with_system_tablespace.empty?
+    impact 0.0
+    describe &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users granted system tablespace, therefore control N&#x2F;A&#39;
+    end
+  else
+    users_with_system_tablespace.each do |user|
+      describe &quot;oracle users with system tablespace: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_system_tablespace&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61461</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application owner accounts must have a dedicated application
+  tablespace.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle db application owners: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61461</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application owner accounts must have a dedicated application
+  tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61461&#39; do
+  title &quot;Application owner accounts must have a dedicated application
+  tablespace.&quot;
+  desc &quot;Separation of tablespaces by application helps to protect the
+  application from resource contention and unauthorized access that could result
+  from storage space reuses or host system access controls. Application data must
+  be stored separately from system and custom user-defined objects to facilitate
+  administration and management of its data storage. The SYSTEM tablespace must
+  never be used for application data storage in order to prevent resource
+  contention and performance degradation.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61461&#39;
+  tag &quot;rid&quot;: &#39;SV-75951r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67377r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct owner, tablespace_name
+  from dba_SEGMENTS
+  where owner not in
+  (&lt;list of non-applicable accounts&gt;)
+  order by tablespace_name;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  Review the list of returned table owners with the tablespace used.
+
+  If any of the owners listed are not default Oracle accounts and use the SYSTEM
+  or any other tablespace not dedicated for the application’s use, this is a
+  finding.
+
+  Look for multiple applications that may share a tablespace.
+
+  If no records were returned, ask the DBA if any applications use this database.
+
+  If no applications use the database, this is not a finding.
+
+  If there are applications that do use the database or if the application uses
+  the SYS or other default account and SYSTEM tablespace to store its objects,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and assign dedicated tablespaces for the storage of data
+  by each application using the CREATE TABLESPACE command.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  application_owners &#x3D; sql.query(&quot;select distinct owner
+  from dba_SEGMENTS;&quot;).column(&#39;owner&#39;).uniq
+  if application_owners.empty?
+    impact 0.0
+    describe &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39; do
+      skip &#39;There are no oracle db application owners, therefore control N&#x2F;A&#39;
+    end
+  else
+    application_owners.each do |user|
+      describe &quot;oracle db application owners: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_application_owners&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61463</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database value for log_archive_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database db_recovery_file_dest parameter is expected not to cmp &#x3D;&#x3D; [&quot; &quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61463</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61463&#39; do
+  title &quot;The directories assigned to the LOG_ARCHIVE_DEST* parameters must be
+  protected from unauthorized access.&quot;
+  desc  &quot;The LOG_ARCHIVE_DEST parameter is used to specify the directory to
+  which Oracle archive logs are written. Where the DBMS availability and recovery
+  to a specific point in time is critical, the protection of archive log files is
+  critical. Archive log files may also contain unencrypted sensitive data. If
+  written to an inadequately protected or invalidated directory, the archive log
+  files may be accessed by unauthorized persons or processes.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61463&#39;
+  tag &quot;rid&quot;: &#39;SV-75953r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67379r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select log_mode from v$database;
+  select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;
+  select value from v$parameter where name &#x3D; &#39;log_archive_duplex_dest&#39;;
+  select name, value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;
+  select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;
+
+  If the value returned for LOG_MODE is NOARCHIVELOG, this check is not a finding.
+
+  If a value is not returned for LOG_ARCHIVE_DEST and no values are returned for
+  any of the LOG_ARCHIVE_DEST_[1-10] parameters, and no value is returned for
+  DB_RECOVERY_FILE_DEST, this is a finding.
+
+  Note: LOG_ARCHIVE_DEST and LOG_ARCHIVE_DUPLEX_DEST are incompatible with the
+  LOG_ARCHIVE_DEST_n parameters, and must be defined as the null string (&#39; &#39;)
+  when any LOG_ARCHIVE_DEST_n parameter has a value other than a null string.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Substitute [pathname] with the directory paths listed from the above SQL
+  statements for log_archive_dest and log_archive_duplex_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Specify a valid and protected directory for archive log files.
+
+  Restrict access to the Oracle process and software owner accounts, DBAs, and
+  backup operator accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_archive_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;log_archive_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database log_archive_dest parameter&#39; do
+    subject { log_archive_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  parameter &#x3D; sql.query(&quot;select DISTINCT value from v$parameter where name LIKE &#39;log_archive_dest_%&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database value for log_archive_dest parameter&#39; do
+    subject { parameter }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+  db_recovery_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;db_recovery_file_dest&#39;;&quot;).column(&#39;value&#39;).uniq
+
+  describe &#39;The oracle database db_recovery_file_dest parameter&#39; do
+    subject { db_recovery_file_dest }
+    it { should_not cmp [&#39; &#39;] }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61465</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database _TRACE_FILES_PUBLIC parameter is expected not to cmp &#x3D;&#x3D; &quot;TRUE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61465</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61465&#39; do
+  title &quot;The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to
+  FALSE.&quot;
+  desc  &quot;The _TRACE_FILES_PUBLIC parameter is used to make trace files used for
+  debugging database applications and events available to all database users. Use
+  of this capability precludes the discrete assignment of privileges based on job
+  function. Additionally, its use may provide access to external files and data
+  to unauthorized users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61465&#39;
+  tag &quot;rid&quot;: &#39;SV-75955r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-023900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67381r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;
+
+  If the value returned is TRUE, this is a finding.
+
+  If the parameter does not exist or is set to FALSE, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus (shutdown database instance):
+
+  shutdown immediate
+
+  From SQL*Plus (create a pfile from spfile):
+
+  create pfile&#x3D;&#39;[PATH]init[SID].ora&#39; from spfile;
+
+  Edit the init[SID].ora file and remove the following line:
+
+  *._trace_files_public&#x3D;TRUE
+
+  From SQL*Plus (update the spfile using the pfile):
+
+  create spfile from pfile&#x3D;&#39;[PATH]init[SID].ora&#39;;
+
+  From SQL*Plus (start the database instance):
+
+  startup
+
+  Note: [PATH] depends on the platform (Windows or UNIX).
+
+  Ensure the file is directed to a writable location.
+
+  [SID] is equal to the oracle SID or database instance ID.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;_trace_files_public&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database _TRACE_FILES_PUBLIC parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;TRUE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61467</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYSKM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SCHEDULER_ADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SCHEDULER_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: AQ_ADMINISTRATOR_ROLE is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: DBA is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle user: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61467</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61467&#39; do
+  title &quot;Application object owner accounts must be disabled when not performing
+  installation or maintenance actions.&quot;
+  desc &quot;Object ownership provides all database object permissions to the owned
+  object. Access to the application object owner accounts requires special
+  protection to prevent unauthorized access and use of the object ownership
+  privileges. In addition to the high privileges to application objects assigned
+  to this account, it is also an account that, by definition, is not accessed
+  interactively except for application installation and maintenance. This reduced
+  access to the account means that unauthorized access to the account could go
+  undetected. To help protect the account, it must be enabled only when access is
+  required.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61467&#39;
+  tag &quot;rid&quot;: &#39;SV-75957r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67383r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run the SQL query:
+
+  select distinct o.owner from dba_objects o, dba_users u
+   where o.owner not in
+  (
+   &lt;list of non-applicable accounts&gt;
+  )
+   and o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;
+
+  (With respect to the list of special accounts that are excluded from this
+  requirement, it is expected that the DBA will maintain the list to suit local
+  circumstances, adding special accounts as necessary and removing any that are
+  not supposed to be in use in the Oracle deployment that is under review.)
+
+  To obtain a list of users assigned DBA privileges, run the query:
+
+    select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;
+
+  If any records are returned, then verify the account is an authorized
+  application object owner account or a default account installed to support an
+  Oracle product.
+
+  Verify that any objects owned by custom DBA accounts are for the personal use
+  of that DBA.
+
+  If any objects are used to support applications or any functions other than DBA
+  functions, this is a finding.
+
+  Any unauthorized object owner accounts are not a finding under this check as
+  they are noted as findings under check O121-C2-011000.
+
+  Any other accounts listed are a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable any application object owner accounts.
+
+  From SQL*Plus:
+    alter user [username] account lock;
+
+  Enable application object owner accounts only for installation and maintenance.
+
+  DBAs are special purpose accounts and do not require disabling although they
+  may own objects.
+
+  For application objects that require routine maintenance, e.g. index objects,
+  to maintain performance, consider allowing a special purpose account to own the
+  index or enable the application owner account for the duration of the routine
+  maintenance function only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select grantee from dba_sys_privs
+  where admin_option &#x3D; &#39;YES&#39; and grantee not in (select grantee from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;);&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+
+  unlocked_accounts &#x3D; sql.query(&quot;select distinct o.owner from dba_objects o, dba_users u
+  where
+   o.object_type &lt;&gt; &#39;SYNONYM&#39;
+   and o.owner &#x3D; username
+   and upper(account_status) not like &#39;%LOCKED%&#39;;&quot;).column(&#39;owner&#39;).uniq
+  if unlocked_accounts.empty?
+    impact 0.0
+    describe &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39; do
+      skip &#39;There are no unlocked oracle accounts, control N&#x2F;A&#39;
+    end
+  else
+    unlocked_accounts.each do |user|
+      describe &quot;oracle user: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_unlocked_oracledb_accounts&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61487</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61487</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61487&#39; do
+  title &quot;DBMS production application and data directories must be protected
+  from developers on shared production&#x2F;development DBMS host systems.&quot;
+  desc &quot;Developer roles must not be assigned DBMS administrative privileges to
+  production DBMS application and data directories. The separation of production
+  DBA and developer roles helps protect the production system from unauthorized,
+  malicious or unintentional interruption due to development activities.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61487&#39;
+  tag &quot;rid&quot;: &#39;SV-75977r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67403r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS or DBMS host is not shared by production and
+  development activities, this check is not a finding.
+
+  Review OS DBA group membership.
+
+  If any developer accounts, as identified in the System Security Plan, have been
+  assigned DBA privileges, this is a finding.
+
+  Note: Though shared production&#x2F;non-production DBMS installations was allowed
+  under previous database STIG guidance, doing so may place it in violation of
+  OS, Application, Network or Enclave STIG guidance. Ensure that any shared
+  production&#x2F;non-production DBMS installation meets STIG guidance requirements at
+  all levels or mitigate any conflicts in STIG guidance with the AO.&quot;
+  tag &quot;fix&quot;: &quot;Create separate DBMS host OS groups for developer and production
+  DBAs.
+
+  Do not assign production DBA OS group membership to accounts used for
+  development.
+
+  Remove development accounts from production DBA OS group membership.
+
+  Recommend establishing a dedicated DBMS host for production DBMS installations.
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum. The operating system may reside on a virtual host machine
+  where supported by the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure DBMS production application and data directories are protected
+    from developers on shared production&#x2F;development DBMS host systems.&#39; do
+    skip &#39;A manual review is required to ensure DBMS production application and data directories are protected
+  from developers on shared production&#x2F;development DBMS host systems.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61489</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of the DBMS installation account must be logged.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61489</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of the DBMS installation account must be logged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61489&#39; do
+  title &#39;Use of the DBMS installation account must be logged.&#39;
+  desc  &quot;The DBMS installation account may be used by any authorized user to
+  perform DBMS installation or maintenance. Without logging, accountability for
+  actions attributed to the account is lost.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61489&#39;
+  tag &quot;rid&quot;: &#39;SV-75979r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67405r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review documented and implemented procedures for monitoring the
+  use of the DBMS software installation account in the System Security Plan.
+
+  If use of this account is not monitored or procedures for monitoring its use do
+  not exist or are incomplete, this is a finding.
+
+  Note: On Windows systems, The Oracle DBMS software is installed using an
+  account with administrator privileges. Ownership should be reassigned to a
+  dedicated OS account used to operate the DBMS software. If monitoring does not
+  include all accounts with administrator privileges on the DBMS host, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement a logging procedure for use of
+  the DBMS software installation account that provides accountability to
+  individuals for any actions taken by the account.
+
+  Host system audit logs should be included in the DBMS account usage log along
+  with an indication of the person who accessed the account and an explanation
+  for the access.
+
+  Ensure all accounts with administrator privileges are monitored for DBMS host
+  on Windows OS platforms.&quot;
+  describe command(&quot;grep -ie &#39;^[^#]*NOPASSWD&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe command(&quot;grep -ie &#39;^[^#]*!authenticate&#39; &#x2F;etc&#x2F;sudoers &#x2F;etc&#x2F;sudoers.d&#x2F;*&quot;) do
+    its(&#39;stdout&#39;) { should be_empty }
+  end
+
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;sudoers\s+\-p\s+wa\s+\-k\s+[-\w]+\s*$&#x2F;) }
+  end
+  describe sshd_config do
+    its(&#39;PrintLastLog&#39;) { should be_nil.or eq &#39;yes&#39; }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;group\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;passwd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;gshadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;shadow\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+  describe file(&#39;&#x2F;etc&#x2F;audit&#x2F;audit.rules&#39;) do
+    its(&#39;content&#39;) { should match(&#x2F;^\-w\s+\&#x2F;etc\&#x2F;security\&#x2F;opasswd\s+\-p\s+wa\s+\-k\s+\w+\s*$&#x2F;) }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61491</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61491</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS host platform and other dependent applications must be configured in 
+          compliance with applicable CMS ARS requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure all related application components and the DBMS host platform 
+         in accordance with the applicable CMS ARS.
+
+         Regularly audit the security configuration of related applications and the host 
+         platform to confirm continued compliance with security requirements.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61491&#39; do
+  title &quot;The DBMS host platform and other dependent applications must be
+  configured in compliance with applicable STIG requirements.&quot;
+  desc &quot;The security of the data stored in the DBMS is also vulnerable to
+  attacks against the host platform, calling applications, and other application
+  or optional components.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61491&#39;
+  tag &quot;rid&quot;: &#39;SV-75981r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67407r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the DBMS host being reviewed is not a production DBMS host,
+  this check is not a finding.
+
+  Review evidence of security hardening and auditing of the DBMS host platform
+  with the ISSO.
+
+  If the DBMS host platform has not been hardened and received a security audit,
+  this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s) that
+  store data in the database and all other separately configured components that
+  access the database including web servers, application servers, report servers,
+  etc.
+
+  If any have not been hardened and received a security audit, this is a finding.
+
+  Review evidence of security hardening and auditing for all application(s)
+  installed on the local DBMS host where security hardening and auditing guidance
+  exists.
+
+  If any have not been hardened and received a security audit, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure all related application components and the DBMS host
+  platform in accordance with the applicable DoD STIG.
+
+  Regularly audit the security configuration of related applications and the host
+  platform to confirm continued compliance with security requirements.&quot;
+  describe &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39; do
+    skip &#39;A manual review is required to ensure the DBMS host platform and other dependent applications are
+    configured in compliance with applicable STIG requirements&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61493</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61493</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61493&#39; do
+  title &quot;Remote administrative access to the database must be monitored by the
+  ISSO or ISSM.&quot;
+  desc &quot;Remote administrative access to systems provides a path for access to
+  and exploit of DBA privileges. Where the risk has been accepted to allow remote
+  administrative access, it is imperative to instate increased monitoring of this
+  access to detect any abuse or compromise.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61493&#39;
+  tag &quot;rid&quot;: &#39;SV-75983r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67409r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If remote administrative access to the database is prohibited
+  and is disabled, this check is not a finding.
+
+  Review policy, procedure and evidence of implementation for monitoring of
+  remote administrative access to the database.
+
+  If monitoring procedures for remote administrative access are not documented or
+  implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures to monitor
+  remote administrative access to the DBMS.
+
+  The automated generation of a log report with automatic dissemination to the
+  ISSO&#x2F;ISSM may be used.
+
+  Require and store an acknowledgement of receipt and confirmation of review for
+  the log report.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61495</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The database must not be directly accessible from public or
+  unauthorized networks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61495</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The database must not be directly accessible from public or
+  unauthorized networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61495&#39; do
+  title &quot;The database must not be directly accessible from public or
+  unauthorized networks.&quot;
+  desc &quot;Databases often store critical and&#x2F;or sensitive information used by
+  the organization. For this reason, databases are targeted for attacks by
+  malicious users. Additional protections provided by network defenses that limit
+  accessibility help protect the database and its data from unnecessary exposure
+  and risk.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61495&#39;
+  tag &quot;rid&quot;: &#39;SV-75985r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67411r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the DBMS serves
+  data to users or applications outside the local enclave.
+
+  If the DBMS is not accessed outside of the local enclave, this check is not a
+  finding.
+
+  If the DBMS serves applications available from a public network (e.g. the
+  Internet), then confirm that the application servers are located in a DMZ.
+
+  If the DBMS is located inside the local enclave and is directly accessible to
+  public users, this is a finding.
+
+  If the DBMS serves public-facing applications and is not protected from direct
+  client connections and unauthorized networks, this is a finding.
+
+  If the DBMS serves public-facing applications and contains sensitive or
+  classified information, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Do not allow direct connections from users originating from the
+  Internet or other public network to the DBMS.
+
+  Include in the System Security Plan for the system whether the DBMS serves
+  public-facing applications or applications serving users from other untrusted
+  networks.
+
+  Do not store sensitive or classified data on a DBMS server that serves
+  public-facing applications.&quot;
+  describe &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39; do
+    skip &#39;A manual review is required to ensure the database is not directly accessible from public or
+    unauthorized networks.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61497</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The ISSM must review changes to DBA role assignments.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61497</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The ISSM must review changes to DBA role assignments.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61497&#39; do
+  title &#39;The ISSM must review changes to DBA role assignments.&#39;
+  desc  &quot;Unauthorized assignment of DBA privileges can lead to a compromise of
+  DBMS integrity. Providing oversight to the authorization and assignment of
+  privileges provides the separation of duty to support sufficient oversight.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61497&#39;
+  tag &quot;rid&quot;: &#39;SV-75987r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67413r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan as well as evidence of implementation for monitoring changes to
+  DBA role assignments and procedures for notifying the ISSM of the changes for
+  review.
+
+  If policy, procedures or implementation evidence do not exist, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures to monitor changes to
+  DBA role assignments.
+
+  Develop, document and implement procedures to notify the ISSM of changes to DBA
+  role assignments.
+
+  Include in the procedures methods that provide evidence of monitoring and
+  notification.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the ISSM reviews changes to DBA role assignments. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61499</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61499</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61499&#39; do
+  title &quot;Plans and procedures for testing DBMS installations, upgrades and
+  patches must be defined and followed prior to production implementation.&quot;
+  desc &quot;Updates and patches to existing software have the intention of
+  improving the security or enhancing or adding features to the product. However,
+  it is unfortunately common that updates or patches can render production
+  systems inoperable or even introduce serious vulnerabilities. Some updates also
+  set security configurations back to unacceptable settings that do not meet
+  security requirements. For these reasons, it is a good practice to test updates
+  and patches offline before introducing them in a production environment.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61499&#39;
+  tag &quot;rid&quot;: &#39;SV-75989r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67415r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review policy and procedures documented or noted in the System
+  Security Plan and evidence of implementation for testing DBMS installations,
+  upgrades and patches prior to production deployment.
+
+  If policy and procedures do not exist or evidence of implementation does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement procedures for testing DBMS
+  installations, upgrades and patches prior to deployment on production systems.&quot;
+  describe &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39; do
+    skip &#39;A manual review is required to ensure plans and procedures for testing DBMS installations, upgrades and
+    patches are defined and followed prior to production implementation&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61501</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61501</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61501&#39; do
+  title &quot;Procedures and restrictions for import of production data to
+  development databases must be documented, implemented and followed.&quot;
+  desc &quot;Data export from production databases may include sensitive data.
+  Application developers may not be cleared for or have need-to-know to sensitive
+  data. Any access they may have to production data would be considered
+  unauthorized access and subject the sensitive data to unlawful or unauthorized
+  disclosure.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61501&#39;
+  tag &quot;rid&quot;: &#39;SV-75991r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67417r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database being reviewed is not a production database or
+  does not contain sensitive data, this check is not a finding.
+
+  Review documented policy, procedures and proof of implementation for
+  restrictions placed on data exports from the production database.
+
+  Policy and procedures should include that only authorized users have access to
+  DBMS export utilities and that export data is properly sanitized prior to
+  import to a development database.
+
+  Policy and procedures may also include that developers be granted the necessary
+  clearance and need-to-know prior to import of production data.
+
+  If documented policy, procedures and proof of implementation are not present or
+  complete, this is a finding.
+
+  If methods to sanitize sensitive data are required and not documented or
+  followed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document and implement policy and procedures that
+  provide restrictions for production data export.
+
+  Require users and administrators assigned privileges that allow the export of
+  production data from a production database to acknowledge understanding of
+  export restrictions.
+
+  Restrict permissions allowing use or access to database export procedures or
+  functions to authorized users.
+
+  Ensure sensitive data from production is sanitized prior to import to a
+  development database (See check O121-BP-023300.)
+
+  Grant access and need-to-know to developers where allowed by policy.&quot;
+  describe &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39; do
+    skip &#39;A manual review is required to ensure procedures and restrictions for import of production data to
+    development databases are documented, implemented and followed&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61503</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61503</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled &quot;SSN&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61503&#39; do
+  title &quot;Sensitive data stored in the database must be identified in the System
+  Security Plan and AIS Functional Architecture documentation.&quot;
+  desc &quot;A DBMS that does not have the correct confidentiality level identified
+  or any confidentiality level assigned is not being secured at a level
+  appropriate to the risk it poses.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61503&#39;
+  tag &quot;rid&quot;: &#39;SV-75993r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-024900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67419r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no sensitive or classified data is stored in the database,
+  listed in the System Security Plan and listed in the AIS Functional
+  Architecture documentation, this check is not a finding.
+
+  Review AIS Functional Architecture documentation for the DBMS and note any
+  sensitive data that is identified.
+
+  Review database table column data or descriptions that indicate sensitive data.
+
+  For example, a data column labeled \&quot;SSN\&quot; could indicate social security
+  numbers are stored in the column.
+
+  Question the ISSO or DBA where any questions arise.
+
+  General categories of sensitive data requiring identification include any
+  personal data (health, financial, social security number and date of birth),
+  proprietary or financially sensitive business data or data that might be
+  classified.
+
+  If any data is considered sensitive and is not documented in the AISFA, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Include identification of any sensitive data in the AIS
+  Functional Architecture and the System Security Plan.
+
+  Include data that appear to be sensitive with a discussion as to why it is not
+  marked as such.&quot;
+  describe &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39; do
+    skip &#39;A manual review is required to ensure sensitive data stored in the database is identified in the System
+    Security Plan and AIS Functional Architecture documentation&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61507</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle database links defined, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61507</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61507&#39; do
+  title &quot;Credentials stored and used by the DBMS to access remote databases or
+  applications must be authorized and restricted to authorized users.&quot;
+  desc &quot;Credentials defined for access to remote databases or applications may
+  provide unauthorized access to additional databases and applications to
+  unauthorized or malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61507&#39;
+  tag &quot;rid&quot;: &#39;SV-75997r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67423r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the list of defined database links generated from the
+  DBMS.
+
+  Compare to the list in the System Security Plan with the DBA.
+
+  If no database links are listed in the database and in the System Security
+  Plan, this check is not a finding.
+
+  If any database links are defined in the DBMS, verify the authorization for the
+  definition in the System Security Plan.
+
+  If any database links exist that are not authorized or not listed in the System
+  Security Plan, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Grant access to database links to authorized users or
+  applications only.
+
+  Document all database links access authorizations in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  db_links &#x3D; sql.query(&#39;SELECT DB_LINK FROM DBA_DB_LINKS;&#39;).column(&#39;db_link&#39;).uniq
+  if db_links.empty?
+    impact 0.0
+    describe &#39;There are no oracle database links defined, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database links defined, control N&#x2F;A&#39;
+    end
+  else
+    db_links.each do |link|
+      describe &quot;The defined oracle database link: #{link}&quot; do
+        subject { link }
+        it { should be_in input(&#39;allowed_db_links&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61509</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must not share a host supporting an independent security
+  service.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61509</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must not share a host supporting an independent security
+  service.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61509&#39; do
+  title &quot;The DBMS must not share a host supporting an independent security
+  service.&quot;
+  desc &quot;The Security Support Structure is a security control function or
+  service provided by an external system or application. An example of this would
+  be a Windows domain controller that provides identification and authentication
+  that can be used by other systems to control access. The associated risk of a
+  DBMS installed on a system that provides security support is significantly
+  higher than when installed on separate systems. In cases where the DBMS is
+  dedicated to local support of a security support function (e.g. a directory
+  service), separation may not be possible.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61509&#39;
+  tag &quot;rid&quot;: &#39;SV-75999r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67425r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the services and processes active on the DBMS host
+  system.
+
+  If the host system is a Windows domain controller, this is a finding.
+
+  If the host system is supporting any other security or directory services that
+  do not use the DBMS to store information, this is a finding.
+
+  Note: This does not include client security applications like firewall and
+  antivirus software.&quot;
+  tag &quot;fix&quot;: &quot;Either move the DBMS installation to a dedicated host system or
+  move the directory or security services to another host system.
+
+  A dedicated host system in this case refers to an instance of the operating
+  system at a minimum.
+
+  The operating system may reside on a virtual host machine where supported by
+  the DBMS vendor.&quot;
+  describe &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+  service&#39; do
+    skip &#39;A manual review is required to ensure the DBMS does not share a host supporting an independent security
+   service&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61511</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to DBMS software files and directories must not be granted to
+  unauthorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61511</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to DBMS software files and directories must not be granted to
+  unauthorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \Program Files\Oracle\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61511&#39; do
+  title &quot;Access to DBMS software files and directories must not be granted to
+  unauthorized users.&quot;
+  desc &quot;The DBMS software libraries contain the executables used by the DBMS
+  to operate. Unauthorized access to the libraries can result in malicious
+  alteration or planting of operational executables. This may in turn jeopardize
+  data stored in the DBMS and&#x2F;or operation of the host system.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61511&#39;
+  tag &quot;rid&quot;: &#39;SV-76001r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67427r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For UNIX Systems:
+
+  log on using the Oracle software owner account and enter the command:
+
+    umask
+
+  If the value returned is 022 or more restrictive, this is not a finding.
+
+  If the value returned is less restrictive than 022, this is a finding.
+
+  The first number sets the mask for user&#x2F;owner file permissions. The second
+  number sets the mask for group file permissions. The third number sets file
+  permission mask for other users. The list below shows the available settings:
+
+  0 &#x3D; read&#x2F;write&#x2F;execute
+  1 &#x3D; read&#x2F;write
+  2 &#x3D; read&#x2F;execute
+  3 &#x3D; read
+  4 &#x3D; write&#x2F;execute
+  5 &#x3D; write
+  6 &#x3D; execute
+  7 &#x3D; no permissions
+
+  Setting the umask to 022 effectively sets files for user&#x2F;owner to read&#x2F;write,
+  group to read and other to read. Directories are set for user&#x2F;owner to
+  read&#x2F;write&#x2F;execute, group to read&#x2F;execute and other to read&#x2F;execute.
+
+  For Windows Systems:
+  Review the permissions that control access to the Oracle installation software
+  directories (e.g. \\Program Files\\Oracle\\).
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts if access by them is required for
+  some operational level of support such as backups, and the host system itself
+  require access.
+
+  Compare the access control employed with that documented in the System Security
+  Plan.
+
+  If access controls do not match the documented requirement, this is a finding.
+
+  If access controls appear excessive without justification, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For UNIX Systems:
+
+  Set the umask of the Oracle software owner account to 022. Determine the shell
+  being used for the Oracle software owner account:
+
+    env | grep -i shell
+
+  Startup files for each shell are as follows (located in users $HOME directory):
+
+    C-Shell (CSH) &#x3D; .cshrc
+    Bourne Shell (SH) &#x3D; .profile
+    Korn Shell (KSH) &#x3D; .kshrc
+    TC Shell (TCS) &#x3D; .tcshrc
+    BASH Shell &#x3D; .bash_profile or .bashrc
+
+  Edit the shell startup file for the account and add or modify the line:
+
+    umask 022
+
+  Log off and logon, then enter the umask command to confirm the setting.
+
+  Note: To effect this change for all Oracle processes, a reboot of the DBMS
+  server may be required.
+
+  For Windows Systems:
+  Restrict access to the DBMS software libraries to the fewest accounts that
+  clearly require access based on job function.
+
+  Document authorized access controls and justify any access grants that do not
+  fall under DBA, DBMS process, ownership, or SA accounts.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61513</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Replication accounts must not be granted DBA privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: []</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61513</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Replication accounts must not be granted DBA privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61513&#39; do
+  title &#39;Replication accounts must not be granted DBA privileges.&#39;
+  desc  &quot;Replication accounts may be used to access databases defined for the
+  replication architecture. An exploit of a replication on one database could
+  lead to the compromise of any database participating in the replication that
+  uses the same account name and credentials. If the replication account is
+  compromised and it has DBA privileges, the database is at additional risk to
+  unauthorized or malicious action.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61513&#39;
+  tag &quot;rid&quot;: &#39;SV-76003r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67429r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If a review of the System Security Plan confirms the use of
+  replication is not required, not permitted and the database is not configured
+  for replication, this check is not a finding.
+
+  If any replication accounts are assigned DBA roles or roles with DBA
+  privileges, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict privileges assigned to replication accounts to the
+  fewest possible privileges.
+
+  Remove DBA roles from replication accounts.
+
+  Create and use custom replication accounts assigned least privileges for
+  supporting replication operations.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  is_oracle_replication_used &#x3D; sql.query(&quot;select count(*) from all_tables
+  where table_name like &#39;REPCAT%&#39;;&quot;).column(&#39;count(*)&#39;)
+
+  oracle_replication_accounts &#x3D; sql.query(&#39;select * from sys.dba_repcatlog;&#39;).column(&#39;gname&#39;)
+
+  if !is_oracle_replication_used.include?(&#39;0&#39;)
+    describe &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot; do
+      skip &quot;The ISSO or DBA must manually ensure the following replication accounts are justified and are not granted DBA privileges: #{oracle_replication_accounts}&quot;
+    end
+  else
+    describe &#39;The number of replication accounts defined&#39; do
+      subject { is_oracle_replication_used }
+      it { should cmp 0 }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61515</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Network access to the DBMS must be restricted to authorized personnel.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61515</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Network access to the DBMS must be restricted to authorized personnel.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (&quot;&#x2F;32&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a &quot;&#x2F;&quot; indicates acceptance by subnet mask where the
+  number after the &quot;&#x2F;&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61515&#39; do
+  title &#39;Network access to the DBMS must be restricted to authorized personnel.&#39;
+  desc  &quot;Restricting remote access to specific, trusted systems helps prevent
+  access by unauthorized and potentially malicious users.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61515&#39;
+  tag &quot;rid&quot;: &#39;SV-76005r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67431r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;IP address restriction may be defined for the database
+  listener, by use of the Oracle Connection Manager or by an external network
+  device.
+
+  Identify the method used to enforce address restriction (interview or System
+  Security Plan review).
+
+  If enforced by the database listener, then review the SQLNET.ORA file located
+  in the ORACLE_HOME&#x2F;network&#x2F;admin directory (note: this assumes that a single
+  sqlnet.ora file, in the default location, is in use; please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files) or the directory
+  indicated by the TNS_ADMIN environment variable or registry setting.
+
+  If the following entries do not exist, then restriction by IP address is not
+  configured and is a finding.
+
+  tcp.validnode_checking&#x3D;YES
+  tcp.invited_nodes&#x3D;(IP1, IP2, IP3)
+
+  If enforced by an Oracle Connection Manager, then review the CMAN.ORA file for
+  the Connection Manager (located in the TNS_ADMIN or ORACLE_HOME&#x2F;network&#x2F;admin
+  directory for the connection manager).
+
+  If a RULE entry allows all addresses (\&quot;&#x2F;32\&quot;) or does not match the address
+  range specified in the System Security Plan, this is a finding.
+
+  (rule&#x3D;(src&#x3D;[IP]&#x2F;27)(dst&#x3D;[IP])(srv&#x3D;*)(act&#x3D;accept))
+
+  Note: an IP address with a \&quot;&#x2F;\&quot; indicates acceptance by subnet mask where the
+  number after the \&quot;&#x2F;\&quot; is the left most number of bits in the address that must
+  match for the rule to apply.
+
+  If this rule is database-specific, then determine if the SERVICE_NAMES
+  parameter is set:
+
+  From SQL*PLUS:
+
+  select value from v$parameter where name &#x3D; &#39;service_names&#39;;
+
+  If SERVICE_NAMES is set in the initialization file for the database instance,
+  use (srv&#x3D;[service name]), else, use (srv&#x3D;*) if not set or rule applies to all
+  databases on the DBMS server.
+
+  If network access restriction is performed by an external device, validate ACLs
+  are in place to prohibit unauthorized access to the DBMS.  To do this, find the
+  IP address of the database server (destination address) and source address
+  (authorized IPs) in the System Security Plan.  Confirm only authorized IPs from
+  the System Security Plan are allowed access to the DBMS.&quot;
+  tag &quot;fix&quot;: &quot;Configure the database listener to restrict access by IP address
+  or set up an external device to restrict network access to the DBMS.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;tcp.validnode_checking&#x3D;YES&#39; }
+    its(&#39;content&#39;) { should match &#x2F;tcp.invited_nodes&#x3D;(\W*)&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61519</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Changes to configuration options must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database AUDIT_SYS_OPERATIONS parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61519</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Changes to configuration options must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61519&#39; do
+  title &#39;Changes to configuration options must be audited.&#39;
+  desc  &quot;The AUDIT_SYS_OPERATIONS parameter is used to enable auditing of
+  actions taken by the user SYS. The SYS user account is a shared account by
+  definition and holds all privileges in the Oracle database. It is the account
+  accessed by users connecting to the database with SYSDBA or SYSOPER privileges.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61519&#39;
+  tag &quot;rid&quot;: &#39;SV-76009r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67435r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set audit_sys_operations &#x3D; TRUE scope &#x3D; spfile;
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_sys_operations&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database AUDIT_SYS_OPERATIONS parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61523</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote DBMS administration must be documented and authorized or
+  disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61523</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote DBMS administration must be documented and authorized or
+  disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administration may expose configuration and sensitive data to unauthorized 
+         viewing during transit across the network or allow unauthorized administrative 
+         access to the DBMS to remote users.
+
+         For the purposes of this STIG, &quot;Remote&quot; means &quot;outside the CMS network.&quot; However, 
+         use of an approved and properly configured VPN counts as inside the CMS network.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan for authorization, assignments and usage 
+         procedures for remote DBMS administration.
+
+         If remote administration of the DBMS is not documented or poorly documented, this 
+         is a finding.
+
+         If remote administration of the DBMS is not authorized and not disabled, this is 
+         a finding.
+         
+         If remote administration is to be performed from outside the CMS network, but is not 
+         done via an approved and properly configured VPN, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61523&#39; do
+  title &quot;Remote DBMS administration must be documented and authorized or
+  disabled.&quot;
+  desc &quot;Remote administration may expose configuration and sensitive data to
+  unauthorized viewing during transit across the network or allow unauthorized
+  administrative access to the DBMS to remote users.
+
+      For the purposes of this STIG, \&quot;Remote\&quot; means \&quot;outside the DoDIN.\&quot;
+  However, use of an approved and properly configured VPN counts as inside the
+  DoDIN.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61523&#39;
+  tag &quot;rid&quot;: &#39;SV-76013r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67439r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan for authorization, assignments
+  and usage procedures for remote DBMS administration.
+
+  If remote administration of the DBMS is not documented or poorly documented,
+  this is a finding.
+
+  If remote administration of the DBMS is not authorized and not disabled, this
+  is a finding.
+
+  If remote administration is to be performed from outside the DoDIN, but is not
+  done via an approved and properly configured VPN, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable remote administration of the DBMS where not required.
+
+  Where remote administration of the DBMS is required, develop, document and
+  implement policy and procedures on its use.
+
+  Assign remote administration privileges to ISSO-authorized personnel only.
+
+  Document assignments in the System Security Plan.
+
+  Where remote administration is to be performed from outside the DoDIN,
+  configure an approved VPN client for this purpose.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61525</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61525</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61525&#39; do
+  title &quot;DBMS symmetric keys must be protected in accordance with NSA or
+  NIST-approved key management technology or processes.&quot;
+  desc &quot;Symmetric keys used for encryption protect data from unauthorized
+  access. However, if not protected in accordance with acceptable standards, the
+  keys themselves may be compromised and used for unauthorized data access.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61525&#39;
+  tag &quot;rid&quot;: &#39;SV-76015r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67441r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the symmetric key management procedures and configuration
+  settings for the DBMS are not specified in the System Security Plan, this is a
+  finding.
+
+  If the procedures are not followed, with evidence for audit, this is a finding.
+
+  Note:  This check does not include a review of the key management procedures
+  for validity. Specific key management requirements may be covered under
+  separate checks.&quot;
+  tag &quot;fix&quot;: &quot;Implement the following for symmetric and other encryption keys:
+  -  protection from unauthorized access in transit and in storage
+  -  utilization of accepted algorithms
+  -  generation in accordance with required standards for the key&#39;s use
+  -  expiration date
+  -  continuity - key backup and recovery
+  -  key change
+  -  archival key storage (as necessary)
+
+  Details for key management requirements are provided by FIPS 140-2 key
+  management standards available from NIST.&quot;
+  describe &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS symmetric keys are protected in accordance with NSA or
+    NIST-approved key management technology or processes.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61527</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Changes to DBMS security labels must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61527</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Changes to DBMS security labels must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61527&#39; do
+  title &#39;Changes to DBMS security labels must be audited.&#39;
+  desc  &quot;Some DBMS systems provide the feature to assign security labels to
+  data elements. If labeling is required, implementation options include the
+  Oracle Label Security package, or a third-party product, or custom-developed
+  functionality.  The confidentiality and integrity of the data depends upon the
+  security label assignment where this feature is in use. Changes to security
+  label assignment may indicate suspicious activity.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61527&#39;
+  tag &quot;rid&quot;: &#39;SV-76017r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67443r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If no data is identified as being sensitive or classified by
+  the Information Owner, in the System Security Plan or in the AIS Functional
+  Architecture documentation, this is not a finding.
+
+  If security labeling is not required, this is not a finding.
+
+  If Standard Auditing is used, run the SQL query:
+
+  select * from dba_sa_audit_options;
+
+  If no records are returned or if output from the SQL statement above does not
+  show classification labels being audited as required in the System Security
+  Plan, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including changes to
+  security label assignment, enter the following SQL*Plus command:
+  SELECT &#39;Changes to security label assignment is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  that changes to classification labels are being audited, perform a successful
+  auditable action and an auditable action that results in an SQL error, and then
+  view the results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define the policy for auditing changes to security labels defined
+  for the data.
+
+  Document the audit requirements in the System Security Plan and configure
+  database auditing in accordance with the policy.
+
+  If using Standard Auditing:
+  If there is no Unified Auditing policy deployed to audit changes to security
+  labels, the create one using the following syntax:
+  SA_AUDIT_ADMIN.AUDIT (
+       policy_name     IN VARCHAR2,
+       users           IN VARCHAR2 DEFAULT NULL,
+       audit_option    IN VARCHAR2 DEFAULT NULL,
+       audit_type      IN VARCHAR2 DEFAULT NULL,
+       success         IN VARCHAR2 DEFAULT NULL);
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;OLSAG&#x2F;packages.htm#i1011868
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+  Reference V-61625 for information on how to configure a policy to audit changes
+  to security label assignments.
+
+  For additional information on creating audit policies, refer to the Oracle
+  Database Security Guide
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;audit_config.htm#CHDGBAAC&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39;Changes to security label assignment is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALL&#39;
+    AND audit_option_type &#x3D; &#39;OLS ACTION&#39;
+          AND policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Changes to security label assignment is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61529</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote database or other external access must use fully-qualified
+  names.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database GLOBAL_NAMES parameter is expected not to cmp &#x3D;&#x3D; &quot;FALSE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: FALSE
+     got: [&quot;FALSE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61529</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote database or other external access must use fully-qualified
+  names.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61529&#39; do
+  title &quot;Remote database or other external access must use fully-qualified
+  names.&quot;
+  desc  &quot;The Oracle GLOBAL_NAMES parameter is used to set the requirement for
+  database link names to be the same name as the remote database whose connection
+  they define. By using the same name for both, ambiguity is avoided and
+  unauthorized or unintended connections to remote databases are less likely.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61529&#39;
+  tag &quot;rid&quot;: &#39;SV-76019r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67445r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;global_names&#39;;
+
+  If the value returned is FALSE, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;From SQL*Plus:
+
+  alter system set global_names &#x3D; TRUE scope &#x3D; spfile;
+
+  Note: This parameter, if changed, will affect all currently defined Oracle
+  database links.
+
+  The above SQL*Plus command will set the parameter to take effect at next system
+  startup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;global_names&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database GLOBAL_NAMES parameter&#39; do
+    subject { parameter }
+    it { should_not cmp &#39;FALSE&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61531</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61531</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append &quot;&#x2F;diag&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61531&#39; do
+  title &quot;The &#x2F;diag subdirectory under the directory assigned to the
+  DIAGNOSTIC_DEST parameter must be protected from unauthorized access.&quot;
+  desc &#39;&lt;DIAGNOSTIC_DEST&gt;&#x2F;diag indicates the directory where trace, alert, core and incident directories and files are located. The files may contain sensitive data or information that could prove useful to potential attackers.&#39;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61531&#39;
+  tag &quot;rid&quot;: &#39;SV-76021r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67447r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;From SQL*Plus:
+
+  select value from v$parameter where name&#x3D;&#39;diagnostic_dest&#39;;
+
+  On UNIX Systems:
+
+  ls -ld [pathname]&#x2F;diag
+
+  Substitute [pathname] with the directory path listed from the above SQL
+  command, and append \&quot;&#x2F;diag\&quot; to it, as shown.
+
+  If permissions are granted for world access, this is a Finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  Finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the \\diag directory under the directory specified.
+
+  Select and right-click on the directory, select Properties, select the Security
+  tab.
+
+  If permissions are granted to everyone, this is a Finding.
+
+  If any account other than the Oracle process and software owner accounts,
+  Administrators, DBAs, System group or developers authorized to write and debug
+  applications on this database are listed, this is a Finding.&quot;
+  tag &quot;fix&quot;: &quot;Alter host system permissions to the &lt;DIAGNOSTIC_DEST&gt;&#x2F;diag
+  directory to the Oracle process and software owner accounts, DBAs, SAs (if
+  required) and developers or other users that may specifically require access
+  for debugging or other purposes.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA and SA account list.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_diagnostic_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;diagnostic_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  diagnostic_dest &#x3D; get_diagnostic_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{diagnostic_dest}&#x2F;diag |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61533</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Remote administration must be disabled for the Oracle connection
+  manager.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61533</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Remote administration must be disabled for the Oracle connection
+  manager.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61533&#39; do
+  title &quot;Remote administration must be disabled for the Oracle connection
+  manager.&quot;
+  desc  &quot;Remote administration provides a potential opportunity for malicious
+  users to make unauthorized changes to the Connection Manager configuration or
+  interrupt its service.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61533&#39;
+  tag &quot;rid&quot;: &#39;SV-76023r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67449r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.
+
+  If the file does not exist, the database is not accessed via Oracle Connection
+  Manager and this check is not a finding.
+
+  If the entry and value for REMOTE_ADMIN is not listed or is not set to a value
+  of NO (REMOTE_ADMIN &#x3D; NO), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;View the cman.ora file in the ORACLE_HOME&#x2F;network&#x2F;admin directory
+  of the Connection Manager.
+
+  Include the following line in the file:
+
+  REMOTE_ADMIN &#x3D; NO&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;cman.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;REMOTE_ADMIN &#x3D; NO&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61535</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Network client connections must be restricted to supported versions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61535</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Network client connections must be restricted to supported versions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  &quot;Database Net Services Reference&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61535&#39; do
+  title &#39;Network client connections must be restricted to supported versions.&#39;
+  desc  &quot;Unsupported Oracle network client installations may introduce
+  vulnerabilities to the database. Restriction to use of supported versions helps
+  to protect the database and helps to enforce newer, more robust security
+  controls.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61535&#39;
+  tag &quot;rid&quot;: &#39;SV-76025r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-026600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67451r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Note: The SQLNET.ALLOWED_LOGON_VERSION parameter is deprecated
+  in Oracle Database 12c. This parameter has been replaced with two new Oracle
+  Net Services parameters:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT
+
+  View the SQLNET.ORA file in the ORACLE_HOME&#x2F;network&#x2F;admin directory or the
+  directory specified in the TNS_ADMIN environment variable.  (Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Locate the following entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  If the parameters do not exist, this is a finding.
+
+  If the parameters are not set to a value of 11 or higher, this is a finding.
+
+  Note: Attempting to connect with a client version lower than specified in these
+  parameters may result in a misleading error:
+  ORA-01017: invalid username&#x2F;password: logon denied&quot;
+  tag &quot;fix&quot;: &quot;Edit the SQLNET.ORA file to add or edit the entries:
+
+  SQLNET.ALLOWED_LOGON_VERSION_SERVER &#x3D; 11
+  SQLNET.ALLOWED_LOGON_VERSION_CLIENT&#x3D;11
+
+  Set the value to 11 or higher.
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_SERVER are:  8,9,10,11,12 and 12a
+
+  Valid values for SQLNET.ALLOWED_LOGON_VERSION_CLIENT are:   8,10,11,12 and 12a
+
+  For more information on sqlnet.ora parameters refer to the following document:
+  \&quot;Database Net Services Reference\&quot;
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;sqlnet.htm#NETRF006&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;11&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;11&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12&#39; }
+    end
+
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_server&#x3D;12a&#39; }
+      its(&#39;content&#39;) { should include &#39;sqlnet.allowed_logon_version_client&#x3D;12a&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61537</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no dba users, therefore this control is NA</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no dba users, therefore this control is NA</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no dba users, therefore this control is NA</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no dba users, therefore this control is NA</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61537</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If &quot;root&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61537&#39; do
+  title &quot;DBA OS accounts must be granted only those host system privileges
+  necessary for the administration of the DBMS.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      DBAs, if assigned excessive OS privileges, could perform actions that could
+  endanger the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000021&#39;
+  tag &quot;gid&quot;: &#39;V-61537&#39;
+  tag &quot;rid&quot;: &#39;SV-76027r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-004500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67453r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review host system privileges assigned to the Oracle DBA group
+  and all individual Oracle DBA accounts.
+
+  Note: do not include the Oracle software installation account in any results
+  for this check.
+
+  For UNIX systems (as root):
+  cat &#x2F;etc&#x2F;group | grep -i dba
+  groups root
+
+  If \&quot;root\&quot; is returned in the first list, this is a finding.
+
+  If any accounts listed in the first list are also listed in the second list,
+  this is a finding.
+
+  Investigate any user account group memberships other than DBA or root groups
+  that are returned by the following command (also as root):
+
+  groups [dba user account]
+
+  Replace [dba user account] with the user account name of each DBA account.
+
+  If individual DBA accounts are assigned to groups that grant access or
+  privileges for purposes other than DBA responsibilities, this is a finding.
+
+  For Windows Systems (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_DBA
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Groups &#x2F; ORA_[SID]_DBA (if present)
+
+  Note: Users assigned DBA privileges on a Windows host are granted membership in
+  the ORA_DBA and&#x2F;or ORA_[SID]_DBA groups. The ORA_DBA group grants DBA
+  privileges to any database on the system. The ORA_[SID]_DBA groups grant DBA
+  privileges to specific Oracle instances only.
+
+  Make a note of each user listed. For each user (click or select):
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Computer Management &#x2F;
+  Local Users and Groups &#x2F; Users &#x2F; [DBA user name] &#x2F; Member of
+
+  If DBA users belong to any groups other than DBA groups and the Windows Users
+  group, this is a finding.
+
+  Examine User Rights assigned to DBA groups or group members:
+  Start &#x2F; Settings &#x2F; Control Panel &#x2F; Administrative Tools &#x2F; Local Security Policy
+  &#x2F; Security Settings &#x2F; Local Policies &#x2F; User Rights Assignments
+
+  If any User Rights are assigned directly to the DBA group(s) or DBA user
+  accounts, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Revoke all host system privileges from the DBA group accounts and
+  DBA user accounts not required for DBMS administration.
+
+  Revoke all OS group memberships that assign excessive privileges to the DBA
+  group accounts and DBA user accounts.
+
+  Remove any directly applied permissions or user rights from the DBA group
+  accounts and DBA user accounts.
+
+  Document all DBA group accounts and individual DBA account-assigned privileges
+  in the System Security Plan.&quot;
+
+  get_dba_users &#x3D; command(&#39;cat &#x2F;etc&#x2F;group | grep -i dba&#39;).stdout.strip.split(&quot;\n&quot;)
+  get_members_root_group &#x3D; command(&#39;groups root&#39;).stdout.strip.split(&quot;\n&quot;)
+
+  get_dba_users.each do |user|
+    describe &quot;The dba user: #{user} in &#x2F;etc&#x2F;group&quot; do
+      subject { user }
+      it { should_not cmp &#39;root&#39; }
+    end
+
+    get_members_root_group.each do |member|
+      describe &quot;The user: #{member} in the root group&quot; do
+        subject { member }
+        it { should_not cmp user.to_s }
+      end
+    end
+  end
+  if get_dba_users.empty?
+    describe &#39;There are no dba users, therefore this control is NA&#39; do
+      skip &#39;There are no dba users, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61539</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database installed patches is expected not to cmp &#x3D;&#x3D; nil</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61539</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle software must be evaluated and patched against newly found
+  vulnerabilities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61539&#39; do
+  title &quot;Oracle software must be evaluated and patched against newly found
+  vulnerabilities.&quot;
+  desc &quot;Security faults with software applications and operating systems are
+  discovered daily. Vendors are constantly updating and patching their products
+  to address newly discovered security vulnerabilities. Organizations (including
+  any contractor to the organization) are required to promptly install
+  security-relevant software updates (e.g., patches, service packs, and hot
+  fixes). Flaws discovered during security assessments, continuous monitoring,
+  incident response activities, or information system error handling, must also
+  be  addressed expeditiously.
+
+      Anytime new software code is introduced to a system there is the potential
+  for unintended consequences. There have been documented instances where the
+  application of a patch has caused problems with system integrity or
+  availability.  Due to information system integrity and availability concerns,
+  organizations must give careful consideration to the methodology used to carry
+  out automatic updates.
+
+      Unsupported software versions are not patched by vendors to address newly
+  discovered security versions. An unpatched version is vulnerable to attack.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000205&#39;
+  tag &quot;gid&quot;: &#39;V-61539&#39;
+  tag &quot;rid&quot;: &#39;SV-76029r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-011100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67455r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;When the Quarterly CPU is released, check the CPU Notice and
+  note the specific patch number for the system.
+
+  Then, issue the following command:
+
+  SELECT patch_id, version, action, status, description from
+  dba_registry_sqlpatch;
+
+  This will generate the patch levels for the home and any specific patches that
+  have been applied to it.
+
+  If the currently installed patch levels are lower than the latest, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Follow the process below to apply the security patch.
+
+  Log on to My Oracle Support.
+
+  Select patches and download the specific patch number and corresponding MD5
+  checksum. Once the patch is downloaded to the server, check the MD5 checksum to
+  make sure the patch is valid.
+
+  To check the MD5 Checksum in Linux&#x2F;UNIX, the command is:
+  $md5sum absolute_path_of_file_name - file_name is the complete location of the
+  downloaded file.
+  $md5sum &#x2F;home&#x2F;oracle&#x2F;test.zip
+  a34d8cd98f00cf24e9800998ecf823e4 &#x2F;home&#x2F;oracle&#x2F;test.zip
+
+  Once the checksum is validated, apply the patch:
+  $ cd $ORACLE_HOME
+  $ opatch apply
+
+  Check that the patch was applied and the inventory was updated with the
+  following command (UNIX&#x2F;Linux):
+  $ opatch lsinventory -detail
+
+  Windows:
+  opatch lsinventory –detail&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  patches &#x3D; sql.query(&#39;SELECT patch_id from dba_registry_sqlpatch;&#39;).column(&#39;patch_id&#39;)
+
+  describe &#39;The oracle database installed patches&#39; do
+    subject { patches }
+    it { should_not cmp nil }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61541</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS default accounts must be assigned custom passwords.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSDG with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSDG
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: APPQOSSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: APPQOSSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMCATUSER with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMCATUSER
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: XDB with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: XDB
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DBSNMP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DBSNMP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSKM with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSKM
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: DIP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: DIP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: ANONYMOUS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: ANONYMOUS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: AUDSYS with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: AUDSYS
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: GSMADMIN_INTERNAL with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: GSMADMIN_INTERNAL
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: SYSBACKUP with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: SYSBACKUP
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle system database user: OUTLN with a default password is expected to cmp &#x3D;&#x3D; &quot;XS$NULL&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: XS$NULL
+     got: OUTLN
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;] is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;GSMUSER&quot;, &quot;SYSDG&quot;, &quot;APPQOSSYS&quot;, &quot;GSMCATUSER&quot;, &quot;XDB&quot;, &quot;DBSNMP&quot;, &quot;SYSKM&quot;, &quot;DIP&quot;, &quot;ANONYMOUS&quot;, &quot;AUDSYS&quot;, &quot;GSMADMIN_INTERNAL&quot;, &quot;SYSBACKUP&quot;, &quot;OUTLN&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61541</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS default accounts must be assigned custom passwords.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61541&#39; do
+  title &#39;DBMS default accounts must be assigned custom passwords.&#39;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+in days) a user&#39;s password may be in effect before the user is forced to change
+it.
+
+    Passwords need to be changed at specific policy-based intervals as per
+policy. Any password, no matter how complex, can eventually be cracked.
+
+    One method of minimizing this risk is to use complex passwords and
+periodically change them. If the application does not limit the lifetime of
+passwords and force users to change their passwords, there is the risk that the
+system and&#x2F;or application passwords could be compromised.
+
+    DBMS default passwords provide a commonly known and exploited means for
+unauthorized access to database installations.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000078&#39;
+  tag &quot;gid&quot;: &#39;V-61541&#39;
+  tag &quot;rid&quot;: &#39;SV-76031r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67457r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Use this query to identify the Oracle-supplied accounts that
+  still have their default passwords:
+  SELECT * FROM SYS.DBA_USERS_WITH_DEFPWD;
+
+  If any accounts other than XS$NULL are listed, this is a finding.
+
+  (XS$NULL is an internal account that represents the absence of a user in a
+  session. Because XS$NULL is not a user, this account can only be accessed by
+  the Oracle Database instance. XS$NULL has no privileges and no one can
+  authenticate as XS$NULL, nor can authentication credentials ever be assigned to
+  XS$NULL.)&quot;
+  tag &quot;fix&quot;: &quot;Change passwords for DBMS accounts to non-default values. Where
+  necessary, unlock or enable accounts to change the password, and then return
+  the account to disabled or locked status.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sys_dba_users_with_defpwd &#x3D; sql.query(&#39; SELECT username FROM SYS.DBA_USERS_WITH_DEFPWD;&#39;).column(&#39;username&#39;).uniq
+
+  describe.one do
+    sys_dba_users_with_defpwd.each do |user|
+      describe &quot;The oracle system database user: #{user} with a default password&quot; do
+        subject { user }
+        it { should cmp &#39;XS$NULL&#39; }
+      end
+    end
+    
+    describe sys_dba_users_with_defpwd do
+      it { should be_empty }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61543</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000186
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61543</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61543&#39; do
+  title &quot;The DBMS, when using PKI-based authentication, must enforce authorized
+  access to the corresponding private key.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information.
+
+      If the private key is stolen, this will lead to the compromise of the
+  authentication and non-repudiation gained through PKI because the attacker can
+  use the private key to digitally sign documents and can pretend to be the
+  authorized user.
+
+      Both the holders of a digital certificate and the issuing authority must
+  protect the computers, storage devices, or whatever they use to keep the
+  private keys.
+
+      All access to the private key of the DBMS must be restricted to authorized
+  and authenticated users. If unauthorized users have access to the DBMS’s
+  private key, an attacker could gain access to the primary key and use it to
+  impersonate the database on the network.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000176-DB-000068&#39;
+  tag &quot;gid&quot;: &#39;V-61543&#39;
+  tag &quot;rid&quot;: &#39;SV-76033r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-015400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67459r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000186&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in Oracle Database, this is not a finding.
+
+  Review DBMS configuration to determine whether appropriate access controls
+  exist to protect the DBMS’s private key. If strong access controls do not exist
+  to enforce authorized access to the private key, this is a finding.
+
+  - - - - -
+  The database supports authentication by using digital certificates over TLS in
+  addition to the native encryption and data integrity capabilities of these
+  protocols.
+
+  An Oracle Wallet is a container that is used to store authentication and
+  signing credentials, including private keys, certificates, and trusted
+  certificates needed by TLS. In an Oracle environment, every entity that
+  communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates, with the exception
+  of Diffie-Hellman.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Implement strong access and authentication controls to protect
+  the database’s private key.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61545</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-8 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002421
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61545</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Preventing the disclosure of transmitted information requires that applications take 
+         measures to employ some form of cryptographic mechanism in order to protect the 
+         information during transmission. This is usually achieved through the use of Transport 
+         Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+         Alternative physical protection measures include Protected Distribution Systems (PDS). 
+         PDS are used to transmit unencrypted classified NSI through an area of lesser 
+         classification or control. Inasmuch as the classified NSI is unencrypted, the PDS must 
+         provide adequate electrical, electromagnetic, and physical safeguards to deter 
+         exploitation. Refer to NSTSSI No. 7003 for additional details on a PDS.
+
+         Information in transmission is particularly vulnerable to attack. If the DBMS does not 
+         employ cryptographic mechanisms preventing unauthorized disclosure of information 
+         during transit, the information may be compromised.
+
+         SHA-1 is in the process of being removed from service it&#39;s use is to be limited during 
+         the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+         Allowable uses during the transition include CHECKSUM usage and verification of legacy 
+         certificate signatures.  SHA-1 is considered a temporary solution during legacy 
+         application transitionary periods and should not be engineered into new applications. 
+         SHA-2 is the path forward.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-8 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61545&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms preventing the
+  unauthorized disclosure of information during transmission unless the
+  transmitted data is otherwise protected by alternative physical measures.&quot;
+  desc &quot;Preventing the disclosure of transmitted information requires that
+  applications take measures to employ some form of cryptographic mechanism in
+  order to protect the information during transmission. This is usually achieved
+  through the use of Transport Layer Security (TLS), SSL VPN, or IPSEC tunnel.
+
+      Alternative physical protection measures include Protected Distribution
+  Systems (PDS). PDS are used to transmit unencrypted classified NSI through an
+  area of lesser classification or control. Inasmuch as the classified NSI is
+  unencrypted, the PDS must provide adequate electrical, electromagnetic, and
+  physical safeguards to deter exploitation. Refer to NSTSSI No. 7003 for
+  additional details on a PDS.
+
+      Information in transmission is particularly vulnerable to attack. If the
+  DBMS does not employ cryptographic mechanisms preventing unauthorized
+  disclosure of information during transit, the information may be compromised.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000264-DB-000136&#39;
+  tag &quot;gid&quot;: &#39;V-61545&#39;
+  tag &quot;rid&quot;: &#39;SV-76035r5_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C1-019700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67461r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002421&#39;]
+  tag &quot;nist&quot;: [&#39;SC-8 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether cryptographic
+  mechanisms are used to prevent the unauthorized disclosure of information
+  during transmission. Determine whether physical measures are being used instead
+  of cryptographic mechanisms. If neither cryptographic nor physical measures are
+  being utilized, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or operating system to use cryptographic
+  mechanisms to prevent unauthorized disclosure of information during
+  transmission where physical measures are not being utilized.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61553</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (10)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002186
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61553</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (10), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61553&#39; do
+  title &quot;The DBMS must ensure remote sessions that access an
+  organization-defined list of security functions and security-relevant
+  information are audited.&quot;
+  desc &quot;Remote access is any access to an organizational information system by
+  a user (or an information system) communicating through an external,
+  non-organization-controlled network (e.g., the Internet). Examples of remote
+  access methods include dial-up, broadband, and wireless.
+
+      Remote network and system access is accomplished by leveraging common
+  communication protocols to establish a remote connection. These connections
+  will typically originate over either the public Internet or the Public Switched
+  Telephone Network (PSTN). Neither of these internetworking mechanisms is
+  private or secure and they do not by default restrict access to networked
+  resources once connectivity is established.
+
+      Numerous best practices are employed to protect remote connections, such as
+  utilizing encryption to protect data sessions and firewalls to restrict and
+  control network connectivity. In addition to these protections, auditing must
+  also be utilized in order to track system activity, assist in diagnosing system
+  issues, and provide evidence needed for forensic investigations after a
+  security incident.
+
+      When organizations define security-related application functions or
+  security-related application information, it is incumbent upon the application
+  providing access to that data to ensure auditing of remote connectivity to
+  those resources occurs in support of organizational requirements
+
+      Remote access to security functions (e.g., user management, audit log
+  management, etc.) and security-relevant information requires the activity be
+  audited by the organization. Any application providing remote access must
+  support organizational requirements to audit access or organization-defined
+  security functions and security-relevant information.
+
+      Database security features accessed through remote methods must be audited
+  to ensure the access is authorized and appropriate.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000019-DB-000197&#39;
+  tag &quot;gid&quot;: &#39;V-61553&#39;
+  tag &quot;rid&quot;: &#39;SV-76043r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67469r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002186&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (10)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name&#x3D;&#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61555</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61555</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is related to remote access, but more specifically to the networking 
+         protocols allowing systems to communicate. Remote access is any access to an organizational 
+         information system by a user (or an information system) communicating through an external, 
+         non-organization  controlled network (e.g., the Internet). Examples of remote access methods 
+         include dial-up, broadband, and wireless.
+         
+         Some networking protocols allowing remote access may not meet security requirements to 
+         protect data and components. Bluetooth and peer-to-peer networking are examples of less than 
+         secure networking protocols.
+
+         Applications implementing or utilizing remote access network protocols need to ensure the 
+         application is developed and implemented in accordance with CMS requirements. In situations 
+         where it has been determined that specific operational requirements outweigh the risks of 
+         enabling an insecure network protocol, the organization may pursue a risk acceptance.
+
+         Using protocols deemed nonsecure would compromise the ability of the DBMS to operate in a 
+         secure fashion. The database must be able to disable network protocols deemed nonsecure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine if the database is utilizing any network 
+         protocols deemed nonsecure.  If the DBMS is not using any network protocols deemed nonsecure, 
+         this is not a finding.
+
+         If the database is utilizing protocols specified as nonsecure, verify the protocols are 
+         explicitly identified in the System Security Plan and that they are in support of specific 
+         operational requirements. If they are not identified in the SSP or are not supporting specific 
+         operational requirements, this is a finding.
+
+         If nonsecure network protocols are not being used but are not disabled in the DBMS&#39;s 
+         configuration, this is a finding.
+
+         After determining the site-specific operational requirements and which protocols are explicitly 
+         defined in the System Security Plan, check the $TNS_ADMIN setting for the location of the Oracle 
+         listener.ora file.  The listener.ora file is a configuration file for Oracle Net Listener that 
+         identifies the following:
+
+         A unique name for the listener, typically LISTENER
+         A protocol address that it is accepting connection requests on, and
+         A service it is listening for.
+         
+         If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed nonsecure, 
+         that is a finding.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+             (ADDRESS_LIST&#x3D;
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+               (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+         Protocol Parameters
+
+         The Oracle Listener and the Oracle Connection Manager are identified by protocol addresses. 
+         The information below contains the &quot;Protocol-Specific Parameters&quot; used by the Oracle protocol 
+         support.
+
+         Protocol-Specific Parameters
+         Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+         Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the service. Oracle 
+                                                       recommends using the service name or SID of the 
+                                                       service.
+         Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+         Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+         Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the Oracle server.
+         Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used to connect to the 
+                                                     database server.
+                                                     This is the same PIPE keyword specified on the server 
+                                                     with Named Pipes.  This name can be any name.
+
+         Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+            
+         Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+         Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+
+         Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+         Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+         Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+         Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+         Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+                  (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+ 
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the value.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or IP address of the computer.
+        Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening port number.
+                                                        Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+                                                                (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable any network protocol listed as nonsecure in the PPSM documentation.
+
+         To disable the protocol deemed not secure, stop the listener by issuing the following command as the 
+         Oracle Software owner, typically Oracle.
+          $ lsnrctl stop
+         This will stop the listener.  Edit the LISTENER.ORA file and remove the protocols deemed not secure 
+         and restart the listener.
+
+         For example, if TCP was deemed as not secure, the listener.ora would need to be changed and the tcp 
+         entry would need to be removed.  That would only allow the listener to listen for an IPC connection.
+
+         LISTENER&#x3D;
+           (DESCRIPTION&#x3D;
+           (ADDRESS_LIST&#x3D;
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line and properly balance the parentheses -
+             (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+         SID_LIST_LISTENER&#x3D;
+           (SID_LIST&#x3D;
+             (SID_DESC&#x3D;
+               (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (SID_NAME&#x3D;sales))
+             (SID_DESC&#x3D;
+               (SID_NAME&#x3D;plsextproc)
+               (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+               (PROGRAM&#x3D;extproc)))
+
+          Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL portion of the connect 
+          string.  For example, if TCP was deemed as not secure and the listener.ora was changed to listen for an 
+          IPC connection the code below would be required:
+
+          net_service_name&#x3D;
+          (DESCRIPTION&#x3D;
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+          (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+          (CONNECT_DATA&#x3D;
+          (SERVICE_NAME&#x3D;sales.us.example.com)))</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61555&#39; do
+  title &quot;The DBMS must support the disabling of network protocols deemed by the
+  organization to be nonsecure.&quot;
+  desc &quot;This requirement is related to remote access, but more specifically to
+  the networking protocols allowing systems to communicate. Remote access is any
+  access to an organizational information system by a user (or an information
+  system) communicating through an external, non-organization  controlled network
+  (e.g., the Internet). Examples of remote access methods include dial-up,
+  broadband, and wireless.
+
+      Some networking protocols allowing remote access may not meet security
+  requirements to protect data and components. Bluetooth and peer-to-peer
+  networking are examples of less than secure networking protocols.
+
+      The DoD Ports, Protocols, and Services Management (PPSM) program provides
+  implementation guidance on the use of IP protocols and application and data
+  services traversing the DoD Networks in a manner supporting net-centric
+  operations.
+
+      Applications implementing or utilizing remote access network protocols need
+  to ensure the application is developed and implemented in accordance with the
+  PPSM requirements. In situations where it has been determined that specific
+  operational requirements outweigh the risks of enabling an insecure network
+  protocol, the organization may pursue a risk acceptance.
+
+      Using protocols deemed nonsecure would compromise the ability of the DBMS
+  to operate in a secure fashion. The database must be able to disable network
+  protocols deemed nonsecure.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000020-DB-000194&#39;
+  tag &quot;gid&quot;: &#39;V-61555&#39;
+  tag &quot;rid&quot;: &#39;SV-76045r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67471r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the PPSM Technical Assurance List to acquire an
+  up-to-date list of network protocols deemed nonsecure.
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  Review DBMS settings to determine if the database is utilizing any network
+  protocols deemed nonsecure.  If the DBMS is not using any network protocols
+  deemed nonsecure, this is not a finding.
+
+  If the database is utilizing protocols specified as nonsecure in the PPSM,
+  verify the protocols are explicitly identified in the System Security Plan and
+  that they are in support of specific operational requirements. If they are not
+  identified in the SSP or are not supporting specific operational requirements,
+  this is a finding.
+
+  If nonsecure network protocols are not being used but are not disabled in the
+  DBMS&#39;s configuration, this is a finding.
+
+  After determining the site-specific operational requirements and which
+  protocols are explicitly defined in the System Security Plan, check the
+  $TNS_ADMIN setting for the location of the Oracle listener.ora file.  The
+  listener.ora file is a configuration file for Oracle Net Listener that
+  identifies the following:
+
+  A unique name for the listener, typically LISTENER
+  A protocol address that it is accepting connection requests on, and
+  A service it is listening for.
+
+  If the listener.ora file shows a PROTOCOL&#x3D; statement and the PROTOCOL is deemed
+  nonsecure, that is a finding.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521))
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Protocol Parameters
+
+  The Oracle Listener and the Oracle Connection Manager are identified by
+  protocol addresses. The information below contains the \&quot;Protocol-Specific
+  Parameters\&quot; used by the Oracle protocol support.
+
+  Protocol-Specific Parameters
+
+  Protocol: IPC     Parameter: PROTOCOL  Notes: Specify ipc as the value.
+  Protocol: IPC     Parameter: KEY       Notes: Specify a unique name for the
+  service. Oracle recommends using the service name or SID of the service.
+  Example: (PROTOCOL&#x3D;ipc)(KEY&#x3D;sales)
+
+  Protocol: Named Pipes  Parameter: PROTOCOL  Notes: Specify nmp as the value.
+  Protocol: Named Pipes  Parameter: SERVER    Notes: Specify the name of the
+  Oracle server.
+  Protocol: Named Pipes  Parameter: PIPE      Notes: Specify the pipe name used
+  to connect to the database server.
+  This is the same PIPE keyword specified on the server with Named Pipes.  This
+  name can be any name.
+  Example: (Protocol&#x3D;nmp) (SERVER&#x3D;USDOD) (PIPE&#x3D;dbpipe01)
+
+  Protocol: SDP     Parameter: PROTOCOL  Notes: Specify sdp as the value.
+  Protocol: SDP     Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: SDP     Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;sdp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;sdp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP  Parameter: PROTOCOL  Notes: Specify TCP as the value.
+  Protocol: TCP&#x2F;IP  Parameter: HOST      Notes: Specify the host name or IP
+  address of the computer.
+  Protocol: TCP&#x2F;IP  Parameter: PORT      Notes: Specify the listening port number.
+  Example: (PROTOCOL&#x3D;tcp)(HOST&#x3D;sales-server)(PORT&#x3D;1521)
+           (PROTOCOL&#x3D;tcp)(HOST&#x3D;192.168.2.204)(PORT&#x3D;1521)
+
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PROTOCOL  Notes: Specify tcps as the
+  value.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: HOST      Notes: Specify the host name or
+  IP address of the computer.
+  Protocol: TCP&#x2F;IP with TLS  Parameter: PORT      Notes: Specify the listening
+  port number.
+
+  Example:(PROTOCOL&#x3D;tcps)(HOST&#x3D;sales-server) (PORT&#x3D;2484)
+          (PROTOCOL&#x3D;tcps)(HOST&#x3D;192.168.2.204)(PORT&#x3D;2484)&quot;
+  tag &quot;fix&quot;: &quot;Disable any network protocol listed as nonsecure in the PPSM
+  documentation.
+
+  To disable the protocol deemed not secure, stop the listener by issuing the
+  following command as the Oracle Software owner, typically Oracle.
+            $ lsnrctl stop
+  This will stop the listener.  Edit the LISTENER.ORA file and remove the
+  protocols deemed not secure and restart the listener.
+
+  For example, if TCP was deemed as not secure, the listener.ora would need to be
+  changed and the tcp entry would need to be removed.  That would only allow the
+  listener to listen for an IPC connection.
+
+  LISTENER&#x3D;
+    (DESCRIPTION&#x3D;
+      (ADDRESS_LIST&#x3D;
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sale-server)(PORT&#x3D;1521)) - remove this line
+  and properly balance the parentheses -
+        (ADDRESS&#x3D;(PROTOCOL&#x3D;ipc)(KEY&#x3D;extproc))))
+  SID_LIST_LISTENER&#x3D;
+    (SID_LIST&#x3D;
+      (SID_DESC&#x3D;
+        (GLOBAL_DBNAME&#x3D;sales.us.example.com)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (SID_NAME&#x3D;sales))
+      (SID_DESC&#x3D;
+        (SID_NAME&#x3D;plsextproc)
+        (ORACLE_HOME&#x3D;&#x2F;oracle12c)
+        (PROGRAM&#x3D;extproc)))
+
+  Revise the client side TNSNAMES.ORA to align the PROTOCOL value in the PROTOCOL
+  portion of the connect string.  For example, if TCP was deemed as not secure
+  and the listener.ora was changed to listen for an IPC connection the code below
+  would be required:
+
+  net_service_name&#x3D;
+  (DESCRIPTION&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales1-svr)(PORT&#x3D;1521))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;sales2-svr)(PORT&#x3D;1521))
+  (CONNECT_DATA&#x3D;
+  (SERVICE_NAME&#x3D;sales.us.example.com)))&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the disabling of network protocols deemed by the
+    organization to be nonsecure&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61557</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must employ automated mechanisms for supporting Oracle user
+  account management.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000015
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61557</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must employ automated mechanisms for supporting Oracle user
+  account management.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61557&#39; do
+  title &quot;The system must employ automated mechanisms for supporting Oracle user
+  account management.&quot;
+  desc &quot;A comprehensive application account management process that includes
+  automation helps to ensure accounts designated as requiring attention are
+  consistently and promptly addressed. Examples include, but are not limited to,
+  using automation to take action on multiple accounts designated as inactive,
+  suspended, or terminated, or by disabling accounts located in non-centralized
+  account stores, such as multiple servers.
+
+      Enterprise environments make application user account management
+  challenging and complex.  A user management process requiring administrators to
+  manually address account management functions adds risk of potential oversight.
+
+      Automated mechanisms may be comprised of differing technologies that when
+  placed together contain an overall automated mechanism supporting an
+  organization&#39;s automated account management requirements.
+
+      Databases can have large numbers of users in disparate locations and job
+  functions.  Automatic account management can help mitigate the risk of human
+  error found in manually managing database access.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000023-DB-000001&#39;
+  tag &quot;gid&quot;: &#39;V-61557&#39;
+  tag &quot;rid&quot;: &#39;SV-76047r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67473r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000015&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  If an Oracle feature&#x2F;product, an OS feature, a third-party product, or custom
+  code is used to automate account management, this is not a finding.
+
+  Determine what the site-defined definition of an acceptably small level of
+  manual account-management activity is.  If the site has established the
+  definition, documented it, and obtained ISSO-ISSM-AO approval, use that
+  definition.  If not, use the following rule of thumb as the definition:  no
+  more than 12 such accounts exist or are expected to exist; no more than 100
+  manual account-management actions (account creation, modification, locking,
+  unlocking, removal and the like) are expected to occur in the course of a year.
+
+  If the amount of account management activity is small, as defined in the
+  preceding paragraph, this is not a finding.
+
+  Otherwise, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize an Oracle feature&#x2F;product, an OS feature, a third-party
+  product, or custom code to automate some or all account maintenance
+  functionality.
+
+  - - - - -
+
+  Roles and Profiles are two Oracle features that should be employed in account
+  management. (Indeed, other requirements mandate the use of Roles.) Following
+  are some notes from Oracle on the use of Profiles.
+
+  A profile is a named set of resource limits and password parameters that
+  restrict database usage and instance resources for a user. You can assign a
+  profile to each user, and a default profile to all others. Each user can have
+  only one profile, and creating a new one supersedes any earlier one.
+
+  Profile resource limits are enforced only when you enable resource limitation
+  for the associated database. Enabling such limitation can occur either before
+  starting up the database (the RESOURCE_LIMIT initialization parameter) or while
+  it is open (using an ALTER SYSTEM statement).
+
+  While password parameters reside in profiles, they are unaffected by
+  RESOURCE_LIMIT or ALTER SYSTEM and password management is always enabled.&quot;
+  describe &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39; do
+    skip &#39;A manual review is required to ensure the system must employs automated mechanisms for supporting Oracle user
+    account management&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61559</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000016
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61559</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61559&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically identify accounts
+  designated as temporary or emergency accounts.&quot;
+  desc &quot;Temporary application accounts could be used in the event of a vendor
+  support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be identified in order for the system to
+  recognize and terminate them after a given time period. The DBMS and any
+  administrators must have a means to recognize any temporary accounts for
+  special handling.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000002&#39;
+  tag &quot;gid&quot;: &#39;V-61559&#39;
+  tag &quot;rid&quot;: &#39;SV-76049r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-001900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67475r6_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  If using database mechanisms to satisfy this requirement, look for a profile
+  for use with temporary accounts. To obtain a list of profiles:
+  SELECT PROFILE#, NAME FROM SYS.PROFNAME$;
+
+  To obtain a list of users assigned a given profile (TEMPORARY_USERS, in this
+  example):
+  SELECT USERNAME, PROFILE FROM SYS.DBA_USERS
+  WHERE PROFILE &#x3D; &#39;TEMPORARY_USERS&#39;
+  ORDER BY USERNAME;
+
+  If no profile for temporary accounts can be identified, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use a profile with a distinctive name (for example,
+  TEMPORARY_USERS), so that temporary users can be easily identified. Whenever a
+  temporary user account is created, assign it to this profile.
+
+  To enable resource limiting via profiles, use the SQL statement:
+  ALTER SYSTEM SET RESOURCE_LIMIT &#x3D; TRUE;
+
+  Set values in the profile as needed for temporary users - see below for further
+  information. The values here are examples; set them to values appropriate to
+  the situation:
+
+  CREATE PROFILE TEMPORARY_USERS
+  LIMIT
+  SESSIONS_PER_USER &lt;limit&gt;
+  CPU_PER_SESSION &lt;limit&gt;
+  CPU_PER_CALL &lt;limit&gt;
+  CONNECT_TIME &lt;limit&gt;
+  LOGICAL_READS_PER_SESSION DEFAULT
+  LOGICAL_READS_PER_CALL &lt;limit&gt;
+  PRIVATE_SGA &lt;limit&gt;
+  COMPOSITE_LIMIT &lt;limit&gt;
+  FAILED_LOGIN_ATTEMPTS 3
+  PASSWORD_LIFE_TIME 7
+  PASSWORD_REUSE_TIME 60
+  PASSWORD_REUSE_MAX 5
+  PASSWORD_VERIFY_FUNCTION ORA12c_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME UNLIMITED
+  PASSWORD_GRACE_TIME 3;
+  CREATE USER &lt;username&gt; IDENTIFIED BY &lt;password&gt; PROFILE TEMPORARY_USERS;
+
+  Resource Parameters:
+
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units. Oracle Database calculates the total service units as a weighted
+  sum of CPU_PER_SESSION, CONNECT_TIME,
+  LOGICAL_READS_PER_SESSION, and PRIVATE_SGA.
+
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to limit the user
+  to.
+
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA). Refer to size_clause for
+  information on that clause.
+
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+
+  COMPOSITE_LIMIT - See Oracle documentation for more details.
+
+
+  Password Parameters
+
+  Use the following clauses to set password parameters. Parameters that set
+  lengths of time are interpreted in number of days. For testing purposes,
+  specify minutes (n&#x2F;1440) or even seconds (n&#x2F;86400).
+
+  FAILED_LOGIN_ATTEMPTS - Specify the number of failed attempts to log on to the
+  user account before the account is locked. If omitting this clause, then the
+  default is 10 times.
+
+  PASSWORD_LIFE_TIME - Specify the number of days the same password can be used
+  for authentication. If setting a value for PASSWORD_GRACE_TIME, then the
+  password expires if it is not changed within the grace period, and further
+  connections are rejected. If omitting this clause, then the default is 180 days.
+
+  PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX - These two parameters must be set
+  in conjunction with each other. PASSWORD_REUSE_TIME specifies the number of
+  days before which a password cannot be reused. PASSWORD_REUSE_MAX specifies the
+  number of password changes required before the current password can be reused.
+  For these parameters to have any effect, specify an integer for both of them.
+
+  If specifying a value for both of these parameters, then the user cannot reuse
+  a password until the password has been changed the number of times specified
+  for PASSWORD_REUSE_MAX during the number of days specified for
+  PASSWORD_REUSE_TIME.
+
+  For example, if specifying PASSWORD_REUSE_TIME to 30 and PASSWORD_REUSE_MAX to
+  10, then the user can reuse the password after 30 days if the password has
+  already been changed 10 times.
+
+  If specifying a value for either of these parameters and specify UNLIMITED for
+  the other, then the user can never reuse a password.
+
+  If specifying DEFAULT for either parameter, then Oracle Database uses the value
+  defined in the DEFAULT profile. By default, all parameters are set to UNLIMITED
+  in the DEFAULT profile. If the default setting of UNLIMITED in the DEFAULT
+  profile has not changed, then the database treats the value for that parameter
+  as UNLIMITED.
+
+  If setting both of these parameters to UNLIMITED, then the database ignores
+  both of them. This is the default if omitting both parameters.
+
+  PASSWORD_LOCK_TIME - Specify the number of days an account will be locked after
+  the specified number of consecutive failed logon attempts. If omitting this
+  clause, then the default is 1 day.
+
+  PASSWORD_GRACE_TIME - Specify the number of days after the grace period begins
+  during which a warning is issued and logon is allowed. If omitting this clause,
+  then the default is 7 days.
+
+  PASSWORD_VERIFY_FUNCTION - The PASSWORD_VERIFY_FUNCTION clause lets a PL&#x2F;SQL
+  password complexity verification script be passed as an argument to the CREATE
+  PROFILE statement. Oracle Database provides a default script, but can create
+  your own routine or use third-party software instead.&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides a mechanism to automatically identify accounts
+    designated as temporary or emergency accounts&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61561</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000016
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The profile DEFAULT  should not be in the org-defined list of profiles for emergency or temporary account management</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61561</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+         or temporary accounts, this is not a finding.
+
+         If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access mechanism, 
+         and not by Oracle, this is not a finding.
+
+         Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+         determine if the site utilizes a mechanism whereby temporary or emergency accounts can be terminated after 
+         an organization-defined time period. If not, this is a finding.
+
+         Check the profiles to see what the password_life_time is set to in the table dba_profiles. 
+         The password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+         in the RESOURCE_NAME column.
+
+         SQL&gt;select
+         profile,
+         resource_name,
+         resource_type,
+         limit
+         from dba_profiles
+         where upper(resource_name) like &quot;PASSWORD_LIFE_TIME&quot;;
+
+         Verify that the user in question is assigned to a profile with the PASSWORD_LIFE_TIME set to 60 days.  
+         If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If using database mechanisms to satisfy this requirement, use a profile with a distinctive name 
+         (for example, TEMPORARY_USERS), so that temporary users can be easily identified.  Whenever a temporary user 
+         account is created, assign it to this profile.
+
+         Create a job to lock accounts under this profile that are more than 60 days old, where n is the 
+         organization-defined time period.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61561&#39; do
+  title &quot;The DBMS must provide a mechanism to automatically terminate accounts
+  designated as temporary or emergency accounts after an organization-defined
+  time period.&quot;
+  desc &quot;Temporary application accounts could ostensibly be used in the event
+  of a vendor support visit where a support representative requires a temporary
+  unique account in order to perform diagnostic testing or conduct some other
+  support related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      To address this, in the event temporary application accounts are required,
+  the application must ensure accounts designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period. Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or data compromised.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Temporary database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being used beyond its original purpose or timeframe.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000024-DB-000003&#39;
+  tag &quot;gid&quot;: &#39;V-61561&#39;
+  tag &quot;rid&quot;: &#39;SV-76051r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67477r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000016&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  If all user accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if the site utilizes a mechanism whereby
+  temporary or emergency accounts can be terminated after an organization-defined
+  time period. If not, this is a finding.
+
+  Check the profiles to see what the password_life_time is set to in the table
+  dba_profiles. The password_life_time is a value stored in the LIMIT column, and
+  identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME column.
+
+  SQL&gt;select
+  profile,
+  resource_name,
+  resource_type,
+  limit
+  from dba_profiles
+  where upper(resource_name) like &#39;PASSWORD_LIFE_TIME&#39;;
+
+  Verify that the user in question is assigned to a profile with the
+  PASSWORD_LIFE_TIME set to the amount of time the user is expected to be using
+  the password.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If using database mechanisms to satisfy this requirement, use a
+  profile with a distinctive name (for example, TEMPORARY_USERS), so that
+  temporary users can be easily identified.  Whenever a temporary user account is
+  created, assign it to this profile.
+
+  Create a job to lock accounts under this profile that are more than n days old,
+  where n is the organization-defined time period.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  if user_profiles.empty?
+    describe &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39; do
+      skip &#39;There are no oracle user profiles, therefore this control is N&#x2F;A&#39;
+    end
+  end
+
+  if !user_profiles.empty?
+    user_profiles.each do |profile|
+      unless input(&#39;emergency_profile_list&#39;).include?(profile)
+      	describe &quot;The profile #{profile} &quot; do
+	  subject { profile }
+	  it &quot;should not be in the org-defined list of profiles for emergency or temporary account management&quot; do
+	    expect(subject).should_not be_in(input(&#39;emergency_profile_list&#39;)) 
+	  end
+        end
+	next
+      end
+      password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+      describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+        subject { password_life_time }
+        it { should cmp &lt;&#x3D; input(&#39;password_life_time&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61565</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account creation.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000018
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61565</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account creation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61565&#39; do
+  title &#39;The DBMS must automatically audit account creation.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Auditing of account creation is one method and best practice for mitigating
+  this risk. A comprehensive account management process will ensure an audit
+  trail documents the creation of application user accounts and, as required,
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account creation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000026-DB-000005&#39;
+  tag &quot;gid&quot;: &#39;V-61565&#39;
+  tag &quot;rid&quot;: &#39;SV-76055r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67481r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000018&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account creation is being audited. If account creation is not being audited by
+  Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  creation, enter the following SQL*Plus command:
+  SELECT &#39; Account creation is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account creation activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account creation.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account creation is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;CREATE USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account creation is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account creation&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61569</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must  automatically audit account modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001403
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61569</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must  automatically audit account modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61569&#39; do
+  title &#39;The DBMS must  automatically audit account modification.&#39;
+  desc  &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply modify an existing account.
+
+      Auditing of account modification is one method and best practice for
+  mitigating this risk. A comprehensive application account management process
+  ensures an audit trail automatically documents the modification of application
+  user accounts and, as required, notifies administrators, application owners,
+  and&#x2F;or appropriate individuals. Applications must provide this capability
+  directly, leveraging complementary technology providing this capability or a
+  combination thereof.
+
+      Automated account auditing processes greatly reduces the risk that accounts
+  will be surreptitiously modified and provides logging that can be used for
+  forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000027-DB-000186&#39;
+  tag &quot;gid&quot;: &#39;V-61569&#39;
+  tag &quot;rid&quot;: &#39;SV-76059r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67485r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001403&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account modification is being audited. If account modification is not being
+  audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  modification, enter the following SQL*Plus command:
+  SELECT &#39; Account modification is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account modifications activities.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  modification.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account modification is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;ALTER USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account modification is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account modification&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61571</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001404
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61571</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61571&#39; do
+  title &quot;The DBMS must automatically audit account disabling actions, to the
+  extent such information is available.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event.
+
+      Such a capability greatly reduces the risk that application accessibility
+  will be negatively affected for extended periods of time and provides logging
+  that can be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing must
+  always be configured to capture account-disabling actions, to the extent such
+  information is available.
+
+      Note that some Oracle architectural details limit the ability to capture
+  this information.  There is a difference between actions taken by a user that
+  generate an audit record and actions by the database itself, which do not
+  generate an audit record.  If an account is locked because of an expiration
+  event, it is done by the database without involving the action of a user.
+  Failed logins are logged user interactions, but the subsequent locking of the
+  account, although initiated by user actions, is a function of the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000028-DB-000187&#39;
+  tag &quot;gid&quot;: &#39;V-61571&#39;
+  tag &quot;rid&quot;: &#39;SV-76061r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67487r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001404&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account disabling actions are being audited. If account disabling actions are
+  not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  disabling, enter the following SQL*Plus command:
+  SELECT &#39; Account disabling is not being audited. &#39;
+  FROM dual
+  WHERE (SELECT Count(*)
+  FROM (select policy_name , audit_option from audit_unified_policies
+  WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+  and policy_name in (select policy_name from audit_unified_enabled_policies
+  where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+  OR (SELECT value
+  FROM v$option
+  WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account disabling actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account disabling.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account disabling is not being audited. &#39;
+    FROM dual
+    WHERE (SELECT Count(*)
+    FROM (select policy_name , audit_option from audit_unified_policies
+    WHERE audit_option &#x3D; &#39;ALTER USER&#39;
+    and policy_name in (select policy_name from audit_unified_enabled_policies
+    where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+    OR (SELECT value
+    FROM v$option
+    WHERE parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account disabling is not being audited.&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account disabling actions&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61573</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically audit account termination.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001405
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61573</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically audit account termination.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns &quot;no rows selected&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61573&#39; do
+  title &#39;The DBMS must automatically audit account termination.&#39;
+  desc  &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events affecting user accessibility and
+  application processing, applications must audit account terminating actions and
+  notify the appropriate individuals so they can investigate the event.  Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management should be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.
+
+      However, notwithstanding how accounts are managed, Oracle auditing should
+  always be configured to capture account termination.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000029-DB-000188&#39;
+  tag &quot;gid&quot;: &#39;V-61573&#39;
+  tag &quot;rid&quot;: &#39;SV-76063r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67489r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001405&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check Oracle settings (and also OS settings and&#x2F;or
+  enterprise-level authentication&#x2F;access mechanisms settings) to determine if
+  account termination actions are being audited. If account termination actions
+  are not being audited by Oracle, this is a finding.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data including account
+  termination, enter the following SQL*Plus command:
+  SELECT &#39; Account termination is not being audited. &#39;
+  FROM   dual
+  WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+  audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;
+
+  If Oracle returns \&quot;no rows selected\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle to audit account termination actions.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.  Reference
+  V-61625 for information on how to configure a policy to audit account
+  termination.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    unified_auditing_events &#x3D; sql.query(&quot;SELECT &#39; Account termination is not being audited. &#39;
+    FROM   dual
+    WHERE  (SELECT Count(*)
+          FROM   (select policy_name , audit_option from audit_unified_policies
+          WHERE  audit_option &#x3D; &#39;DROP USER&#39;
+          and policy_name in (select policy_name from
+    audit_unified_enabled_policies where user_name&#x3D;&#39;ALL USERS&#39;))) &#x3D; 0
+          OR (SELECT value
+              FROM   v$option
+              WHERE  parameter &#x3D; &#39;Unified Auditing&#39;) !&#x3D; &#39;TRUE&#39;;&quot;).column(&#39;Account termination is not being audited&#39;).uniq
+
+    describe &#39;The unified auditing data capture for account termination&#39; do
+      subject { unified_auditing_events.to_s }
+      it { should_not cmp &#39;[nil]&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61575</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000213
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61575</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role &quot;User roles and privileges&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61575&#39; do
+  title &quot;The DBMS must enforce approved authorizations for logical access to
+  the system in accordance with applicable policy.&quot;
+  desc &quot;Strong access controls are critical to securing application data.
+  Access control policies (e.g., identity-based policies, role-based policies,
+  attribute-based policies) and access enforcement mechanisms (e.g., access
+  control lists, access control matrices, cryptography) must be employed by
+  applications, when applicable, to control access between users (or processes
+  acting on behalf of users) and objects (e.g., devices, files, records,
+  processes, programs, domains) in the information system.
+
+      Consideration should be given to the implementation of an audited, explicit
+  override of automated mechanisms in the event of emergencies or other serious
+  events.
+
+      If the DBMS does not follow applicable policy when approving access it may
+  be in conflict with networks or other applications in the information system.
+  This may result in users either gaining or being denied access inappropriately
+  and may be in conflict with applicable policy.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000033-DB-000084&#39;
+  tag &quot;gid&quot;: &#39;V-61575&#39;
+  tag &quot;rid&quot;: &#39;SV-76065r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-002700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67491r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000213&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether users are restricted
+  from accessing objects and data they are not authorized to access. If
+  appropriate access controls are not implemented to restrict access to
+  authorized users and to restrict the access of those users to objects and data
+  they are authorized to see, this is a finding.
+
+  The easiest way to isolate access is by using the Oracle Database Vault.  To
+  check to see if the Oracle Database Vault is installed, issue the following
+  query:
+
+  SQL&gt; SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Oracle Database Vault&#39;;
+
+  If Oracle Database Vault is installed, review its settings for appropriateness
+  and completeness of the access it permits and denies to each type of user.  If
+  appropriate and complete, this is not a finding.
+
+  If Oracle Database Vault is not installed, review the roles and profiles in the
+  database and the assignment of users to these for appropriateness and
+  completeness of the access permitted and denied each type of user. If
+  appropriate and complete, this is not a finding.
+
+  If the access permitted and denied each type of user is inappropriate or
+  incomplete, this is a finding.
+
+  Following are code examples for reviewing roles, profiles, etc.
+
+  Find out what role the users have:
+  select * from dba_role_privs where granted_role &#x3D; &#39;&lt;role&gt;&#39;
+
+  List all roles given to a user:
+  select * from dba_role_privs where grantee &#x3D; &#39;&lt;username&gt;&#39;;
+
+  List all roles for all users:
+    column grantee format a32
+    column granted_role format a32
+    break on grantee
+    select grantee, granted_role from dba_role_privs;
+
+  Use the following query to list all privileges given to a user:
+          select
+            lpad(&#39; &#39;, 2*level) || granted_role \&quot;User roles and privileges\&quot;
+          from
+            (
+            &#x2F;* THE USERS *&#x2F;
+              select
+                null     grantee,
+                username granted_role
+              from
+                dba_users
+              where
+                username like upper(&#39;&lt;enter_username&gt;&#39;)
+            &#x2F;* THE ROLES TO ROLES RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                granted_role
+              from
+                dba_role_privs
+            &#x2F;* THE ROLES TO PRIVILEGE RELATIONS *&#x2F;
+            union
+              select
+                grantee,
+                privilege
+              from
+                dba_sys_privs
+            )
+          start with grantee is null
+          connect by grantee &#x3D; prior granted_role;
+
+  List which tables a certain role gives SELECT access to using the query:
+  select * from role_tab_privs where role&#x3D;&#39;&lt;role&gt;&#39; and privilege &#x3D; &#39;SELECT&#39;;
+
+  List all tables a user can SELECT from using the query:
+  select * from dba_tab_privs where GRANTEE &#x3D;&#39;&lt;username&gt;&#39; and privilege &#x3D;
+  &#39;SELECT&#39;;
+
+  List all users who can SELECT on a particular table (either through being given
+  a relevant role or through a direct grant - e.g., grant select on a table to
+  Joe). The result of this query should also show through which role the user has
+  this access or whether it was a direct grant.
+
+          select
+            Grantee,&#39;Granted Through Role&#39; as Grant_Type,
+            role,
+            table_name
+          from role_tab_privs rtp, dba_role_privs drp
+          where rtp.role &#x3D; drp.granted_role
+          and table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;
+          union
+          select
+             Grantee,
+             &#39;Direct Grant&#39; as Grant_type,
+             null as role,
+             table_name
+          from dba_tab_privs
+          where table_name &#x3D; &#39;&lt;TABLENAME&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;If Oracle Database Vault is in use, use it to configure the
+  correct access privileges for each type of user.
+
+  If Oracle Database Vault is not in use, configure the correct access privileges
+  for each type of user using Roles and Profiles.
+
+  For more information on the configuration of Database Vault, refer to the
+  following documents:
+  Database Vault Administrator&#39;s  Guide:
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DVADM&#x2F;toc.htm&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces approved authorizations for logical access to
+    the system in accordance with applicable policy&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61577</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61577</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61577&#39; do
+  title &quot;The DBMS must enforce Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&quot;
+  desc &quot;Access control policies (e.g., identity-based policies, role-based
+  policies, attribute-based policies) and access enforcement mechanisms (e.g.,
+  access control lists, access control matrices, cryptography) are employed by
+  organizations to control access between users (or processes acting on behalf of
+  users) and objects (e.g., devices, files, records, processes, programs,
+  domains).
+
+      DAC is a type of access control methodology serving as a means of
+  restricting access to objects and data based on the identity of subjects and&#x2F;or
+  groups to which they belong. It is discretionary in the sense that application
+  users with the appropriate permissions to access an application resource or
+  data have the discretion to pass that permission on to another user either
+  directly or indirectly.
+
+      Data protection requirements may result in a DAC policy being specified as
+  part of the application design. Discretionary access controls would be employed
+  at the application level to restrict and control access to application objects
+  and data thereby providing increased information security for the organization.
+
+      When DAC controls are employed, those controls must limit sharing to named
+  application users, groups of users, or both. The application DAC controls must
+  also limit the propagation of access rights and have the ability to exclude
+  access to data down to the granularity of a single user.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000036-DB-000174&#39;
+  tag &quot;gid&quot;: &#39;V-61577&#39;
+  tag &quot;rid&quot;: &#39;SV-76067r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67493r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if users are able to assign
+  and revoke rights to the objects and information that they own. If users cannot
+  assign or revoke rights to the objects and information that they own to groups,
+  roles, or individual users, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (Note:  In most cases, no fix will be necessary.  This is default functionality
+  for Oracle.)&quot;
+  describe &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+  allowing users to specify and control sharing by named individuals, groups of
+  individuals, or by both, limiting propagation of access rights and including or
+  excluding access to the granularity of a single user.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS enforces Discretionary Access Control (DAC) policy
+    allowing users to specify and control sharing by named individuals, groups of
+    individuals, or by both, limiting propagation of access rights and including or
+    excluding access to the granularity of a single user.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61579</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS processes or services must run under custom, dedicated OS
+  accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61579</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS processes or services must run under custom, dedicated OS
+  accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61579&#39; do
+  title &quot;DBMS processes or services must run under custom, dedicated OS
+  accounts.&quot;
+  desc &quot;Separation of duties is a prevalent Information Technology control
+  that is implemented at different layers of the information system, including
+  the operating system and in applications. It serves to eliminate or reduce the
+  possibility that a single user may carry out a prohibited action. Separation of
+  duties requires that the person accountable for approving an action is not the
+  same person who is tasked with implementing or carrying out that action.
+
+      The DBMS must run under a custom dedicated OS account. When the DBMS is
+  running under a shared account, users with access to that account could
+  inadvertently or maliciously make changes to the DBMS&#39;s settings, files, or
+  permissions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000010&#39;
+  tag &quot;gid&quot;: &#39;V-61579&#39;
+  tag &quot;rid&quot;: &#39;SV-76069r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67495r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check OS settings to determine whether DBMS processes are
+  running under a dedicated OS account. If the DBMS processes are running under
+  shared accounts, this is a finding.
+
+  This is done by the default installation.  The installation documentation
+  recommends that a user account named ORACLE is created and is identified as the
+  software owner.
+
+  Log on to the system as the software owner, typically ORACLE, the $ORACLE_HOME
+  environment variable will point to the Oracle software.  Enter the following
+  commands to see if ORACLE is the software owner:
+
+  $ cd $ORACLE_HOME
+  $ ls -l (shows the directories - oracle is the owner and oinstall is the group.
+  The example list below has been truncated)
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 addnode
+  drwxr-xr-x  8 oracle oinstall  4096 Nov 21 08:41 apex
+  drwxr-xr-x  9 oracle oinstall  4096 Nov 21 08:39 assistants
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 09:17 bin
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:42 ccr
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:42 cdata
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 09:04 cfgtoollogs
+  drwxr-xr-x  4 oracle oinstall  4096 Nov 21 08:42 clone
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:39 crs
+  drwxr-xr-x  6 oracle oinstall  4096 Nov 21 08:42 css
+  drwxr-xr-x 11 oracle oinstall  4096 Nov 21 08:42 ctx
+  drwxr-xr-x  7 oracle oinstall  4096 Nov 21 08:39 cv
+  drwxr-xr-x  2 oracle oinstall  4096 Dec 16 13:11 dbs
+  drwxr-xr-x  2 oracle oinstall  4096 Nov 21 08:42 dc_ocm
+  drwxr-xr-x  5 oracle oinstall  4096 Nov 21 08:45 deinstall
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 demo
+  drwxr-xr-x  3 oracle oinstall  4096 Nov 21 08:39 diagnostics
+
+  $ ps -ef | grep ora_ (shows all of the oracle processes owned by the oracle
+  user. The example list below has been truncated)
+
+  oracle    1786     1  0 13:11 ?        00:00:00 ora_pmon_stig
+  oracle    1788     1  0 13:11 ?        00:00:00 ora_psp0_stig
+  oracle    1790     1  1 13:11 ?        00:00:08 ora_vktm_stig
+  oracle    1794     1  0 13:11 ?        00:00:00 ora_gen0_stig
+  oracle    1796     1  0 13:11 ?        00:00:00 ora_mman_stig
+  oracle    1800     1  0 13:11 ?        00:00:00 ora_diag_stig
+  oracle    1802     1  0 13:11 ?        00:00:00 ora_dbrm_stig
+  oracle    1804     1  0 13:11 ?        00:00:00 ora_vkrm_stig
+  oracle    1806     1  0 13:11 ?        00:00:00 ora_dia0_stig
+  oracle    1808     1  0 13:11 ?        00:00:00 ora_dbw0_stig
+  oracle    1810     1  0 13:11 ?        00:00:00 ora_lgwr_stig
+  oracle    1812     1  0 13:11 ?        00:00:00 ora_ckpt_stig
+  oracle    1814     1  0 13:11 ?        00:00:00 ora_lg00_stig
+  oracle    1816     1  0 13:11 ?        00:00:00 ora_smon_stig
+  oracle    1818     1  0 13:11 ?        00:00:00 ora_lg01_stig
+  oracle    1820     1  0 13:11 ?        00:00:00 ora_reco_stig
+  oracle    1822     1  0 13:11 ?        00:00:00 ora_lreg_stig
+  oracle    1824     1  0 13:11 ?        00:00:00 ora_pxmn_stig
+  oracle    2137  2125  0 13:25 pts&#x2F;1    00:00:00 grep ora_&quot;
+  tag &quot;fix&quot;: &quot;Create an OS account dedicated to Oracle DBMS processes, and
+  allow only Oracle DBMS processes to run under the account.&quot;
+
+  oracle_file_owners &#x3D; command(&quot;ls -l  $ORACLE_HOME|awk &#39;{ print $3; }&#39; | sort -u&quot;).stdout.strip.split(&quot;\n&quot;)
+
+  oracle_file_owners.each do |owner|
+    describe &#39;The file and directory inside the Oracle Home directory&#39; do
+      subject { owner }
+      it { should cmp &#39;oracle&#39; }
+    end
+  end
+  if oracle_file_owners.empty?
+    describe &#39;There are no oracle file owners, therefore this control is NA&#39; do
+      skip &#39;There are no oracle file owners, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61581</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict grants to sensitive information to authorized
+  user roles.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: [&quot;CONNECT&quot;, &quot;RESOURCE&quot;, &quot;DBA&quot;, &quot;AUDIT_ADMIN&quot;, &quot;AUDIT_VIEWER&quot;, &quot;SELECT_CATALOG_ROLE&quot;, &quot;EXECUTE_CATALOG_ROLE&quot;, &quot;DELETE_CATALOG_ROLE&quot;, &quot;CAPTURE_ADMIN&quot;, &quot;EXP_FULL_DATABASE&quot;, &quot;IMP_FULL_DATABASE&quot;, &quot;CDB_DBA&quot;, &quot;PDB_DBA&quot;, &quot;RECOVERY_CATALOG_OWNER&quot;, &quot;LOGSTDBY_ADMINISTRATOR&quot;, &quot;DBFS_ROLE&quot;, &quot;GSMUSER_ROLE&quot;, &quot;AQ_ADMINISTRATOR_ROLE&quot;, &quot;AQ_USER_ROLE&quot;, &quot;DATAPUMP_EXP_FULL_DATABASE&quot;, &quot;DATAPUMP_IMP_FULL_DATABASE&quot;, &quot;ADM_PARALLEL_EXECUTE_TASK&quot;, &quot;PROVISIONER&quot;, &quot;XS_RESOURCE&quot;, &quot;XS_SESSION_ADMIN&quot;, &quot;XS_NAMESPACE_ADMIN&quot;, &quot;XS_CACHE_ADMIN&quot;, &quot;GATHER_SYSTEM_STATISTICS&quot;, &quot;OPTIMIZER_PROCESSING_RATE&quot;, &quot;GSM_POOLADMIN_ROLE&quot;, &quot;RECOVERY_CATALOG_USER&quot;, &quot;EM_EXPRESS_BASIC&quot;, &quot;EM_EXPRESS_ALL&quot;, &quot;SCHEDULER_ADMIN&quot;, &quot;HS_ADMIN_SELECT_ROLE&quot;, &quot;HS_ADMIN_EXECUTE_ROLE&quot;, &quot;HS_ADMIN_ROLE&quot;, &quot;OEM_ADVISOR&quot;, &quot;OEM_MONITOR&quot;, &quot;XDBADMIN&quot;, &quot;XDB_SET_INVOKER&quot;, &quot;AUTHENTICATEDUSER&quot;, &quot;XDB_WEBSERVICES&quot;, &quot;XDB_WEBSERVICES_WITH_PUBLIC&quot;, &quot;XDB_WEBSERVICES_OVER_HTTP&quot;, &quot;GSMADMIN_ROLE&quot;, &quot;GDS_CATALOG_SELECT&quot;, &quot;CTXAPP&quot;, &quot;RDS_MASTER_ROLE&quot;, &quot;SODA_APP&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61581</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict grants to sensitive information to authorized
+  user roles.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61581&#39; do
+  title &quot;The DBMS must restrict grants to sensitive information to authorized
+  user roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Unauthorized access to sensitive data may compromise the confidentiality of
+  personnel privacy, threaten national security, or compromise a variety of other
+  sensitive operations. Access controls are best managed by defining requirements
+  based on distinct job functions and assigning access based on the job function
+  assigned to the individual user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000011&#39;
+  tag &quot;gid&quot;: &#39;V-61581&#39;
+  tag &quot;rid&quot;: &#39;SV-76071r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67497r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to user accounts. If
+  access to sensitive information is granted to roles not authorized to access
+  sensitive information, this is a finding.
+
+  If access to sensitive information is granted to individual accounts rather
+  than to a role, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Define application user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role and assign the role to authorized
+  application user accounts.
+
+  Revoke any privileges to sensitive information directly assigned to application
+  user accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_roles &#x3D; sql.query(&#39;select * from dba_roles;&#39;).column(&#39;role&#39;)
+
+  describe &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot; do
+    skip &quot;A manual review is required to ensure the DBMS estricts grants to sensitive information to authorized user roles. The database roles to review are: #{database_roles}&quot;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61583</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A single database connection configuration file must not be used to
+  configure all database clients.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61583</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A single database connection configuration file must not be used to
+  configure all database clients.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to supply database connection information to
+  only those databases authorized for the user.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61583&#39; do
+  title &quot;A single database connection configuration file must not be used to
+  configure all database clients.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+    Many sites distribute a single client database connection configuration
+  file to all site database users that contains network access information for
+  all databases on the site. Such a file provides information to access databases
+  not required by all users that may assist in unauthorized access attempts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000012&#39;
+  tag &quot;gid&quot;: &#39;V-61583&#39;
+  tag &quot;rid&quot;: &#39;SV-76073r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67499r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for providing database connection information
+  to users&#x2F;user workstations. If procedures do not indicate or implement
+  restrictions to connections required by the particular user, this is a finding.
+
+  Note: This check is specific for the DBMS host system and not directed at
+  client systems (client systems are included in the Application STIG&#x2F;Checklist);
+  however, detection of unauthorized client connections to the DBMS host system
+  obtained through log files should be performed regularly and documented where
+  authorized.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to supply database connection information to
+  only those databases authorized for the user.&quot;
+  describe &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39; do
+    skip &#39;A manual review is required to ensure a single database connection configuration file is not used to
+    configure all database clients&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61585</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must be protected from unauthorized access by developers.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61585</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must be protected from unauthorized access by developers.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61585&#39; do
+  title &#39;The DBMS must be protected from unauthorized access by developers.&#39;
+  desc  &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  production databases can affect the operation and&#x2F;or security of the database
+  system. Operating system and database privileges assigned to developers on
+  production systems must not be allowed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000014&#39;
+  tag &quot;gid&quot;: &#39;V-61585&#39;
+  tag &quot;rid&quot;: &#39;SV-76075r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67501r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the production system to ensure no developer accounts
+  have rights to modify the production database structure or alter production
+  data.
+
+  If developer accounts with these rights exist, ask for documentation that shows
+  these accounts have formal approval and risk acceptance. If this documentation
+  does not exist, this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61587</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61587</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61587&#39; do
+  title &quot;The DBMS must be protected from unauthorized access by developers on
+  shared production&#x2F;development host systems.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Developers granted elevated database and&#x2F;or operating system privileges on
+  systems that support both development and production databases can affect the
+  operation and&#x2F;or security of the production database system. Operating system
+  and database privileges assigned to developers on shared development and
+  production systems must be restricted.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000015&#39;
+  tag &quot;gid&quot;: &#39;V-61587&#39;
+  tag &quot;rid&quot;: &#39;SV-76077r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67503r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Identify whether any hosts contain both development and
+  production databases. If no hosts contain both production and development
+  databases, this is NA.
+
+  For any host containing both a development and a production database, determine
+  if developers have been granted elevated privileges on the production database
+  or on the OS.  If they have, ask for documentation that shows these accounts
+  have formal approval and risk acceptance. If this documentation does not exist,
+  this is a finding.
+
+  If developer accounts exist with the right to create and maintain tables (or
+  other database objects) in production tablespaces, this is a finding.
+
+  (Where applicable, to check the number of instances on the host machine, check
+  the &#x2F;etc&#x2F;oratab.  The &#x2F;etc&#x2F;oratab file is updated by the Oracle Installer when
+  the database is installed when the root.sh file is executed.  Each line in the
+  represents an ORACLE_SID:ORACLE_HOME:Y or N.  The ORACLE_SID and ORACLE_HOME
+  are self-explanatory.  The Y or N signals the DBSTART program to automatically
+  start or not start that specific instance when the machine is restarted.  Check
+  with the system owner and application development team to see what each entry
+  represents.  If a system is deemed to be a production system, review the system
+  for development users.)&quot;
+  tag &quot;fix&quot;: &quot;Restrict developer privileges to production objects to only
+  objects and data where those privileges are required and authorized.  Document
+  the approval and risk acceptance.
+
+  Consider using separate accounts for a person&#39;s developer duties and production
+  duties.  At a minimum, use separate roles for developer privileges and
+  production privileges.
+
+  If developers need the ability to create and maintain tables (or other database
+  objects) as part of their development activities, provide dedicated
+  tablespaces, and revoke any rights that allowed them to use production
+  tablespaces for this purpose.&quot;
+  describe &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS is protected from unauthorized access by developers on
+   shared production&#x2F;development host systems.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61589</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADMIN1 with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: APPQOSSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CTXSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: DBA with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: PUBLIC with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: RDSADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSDG with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSKM with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDB with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDBADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADMIN1 with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: APPQOSSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CTXSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: DBA with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: PUBLIC with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: RDSADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSDG with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSKM with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDB with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDBADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADMIN1 with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: APPQOSSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CTXSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: DBA with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: PUBLIC with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: RDSADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSDG with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSKM with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDB with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDBADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADMIN1 with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: ADM_PARALLEL_EXECUTE_TASK with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADM_PARALLEL_EXECUTE_TASK&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: APPQOSSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AQ_ADMINISTRATOR_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AQ_ADMINISTRATOR_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: AUDIT_VIEWER with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;AUDIT_VIEWER&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CAPTURE_ADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CAPTURE_ADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: CTXSYS with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: DBA with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBA&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: GSMADMIN_INTERNAL with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: PUBLIC with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: RDSADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SELECT_CATALOG_ROLE with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SELECT_CATALOG_ROLE&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSDG with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSDG&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: SYSKM with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSKM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDB with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle users: XDBADMIN with access to the dictionary table is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDBADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61589</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61589&#39; do
+  title &quot;The DBMS must restrict access to system tables and other configuration
+  information or metadata to DBAs or other authorized users.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Administrative data includes DBMS metadata and other configuration and
+  management data.  Unauthorized access to this data could result in unauthorized
+  changes to database objects, access controls, or DBMS configuration.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000016&#39;
+  tag &quot;gid&quot;: &#39;V-61589&#39;
+  tag &quot;rid&quot;: &#39;SV-76079r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-003900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67505r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review user privileges to system tables and configuration data
+  stored in the Oracle database.
+
+  If non-DBA users are assigned privileges to access system tables and tables
+  containing configuration data, this is a finding.
+
+  To obtain a list of users and roles that have been granted access to any
+  dictionary table, run the query:
+  SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;
+
+  To obtain a list of dictionary tables and assigned privileges granted to a
+  specific user or role, run the query:
+  SELECT grantee, table_name, privilege from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  and grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict accessibility of Oracle system tables and other
+  configuration information or metadata to DBAs or other authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_dictionary_table_access &#x3D; sql.query(&quot;SELECT unique grantee from dba_tab_privs where table_name in
+  (select table_name from dictionary)
+  order by grantee;&quot;).column(&#39;grantee&#39;).uniq
+  if users_with_dictionary_table_access.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to the dictionary table, control N&#x2F;A&#39;
+    end
+  else
+    users_with_dictionary_table_access.each do |user|
+      describe &quot;oracle users: #{user} with access to the dictionary table&quot; do
+        subject { user }
+        it { should be_in USERS_ALLOWED_ACCESS_TO_DICTIONARY_TABLE }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61591</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Administrative privileges must be assigned to database accounts via
+  database roles.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Database accounts with administrative privileges is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Database accounts with administrative privileges is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Database accounts with administrative privileges is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Database accounts with administrative privileges is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[&quot;RDSADMIN&quot;, &quot;ADMIN1&quot;].empty?&#x60; to return true, got false</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61591</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Administrative privileges must be assigned to database accounts via
+  database roles.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61591&#39; do
+  title &quot;Administrative privileges must be assigned to database accounts via
+  database roles.&quot;
+  desc &quot;Applications employ the concept of least privilege for specific duties
+  and information systems (including specific functions, ports, protocols, and
+  services). The concept of least privilege is also applied to information system
+  processes, ensuring that the processes operate at privilege levels no higher
+  than necessary to accomplish required organizational missions and&#x2F;or functions.
+  Organizations consider the creation of additional processes, roles, and
+  information system accounts as necessary to achieve least privilege.
+  Organizations also apply least privilege concepts to the design, development,
+  implementation, and operations of information systems.
+
+      Privileges granted outside the context of the application user job function
+  are more likely to go unmanaged or without oversight for authorization.
+  Maintenance of privileges using roles defined for discrete job functions offers
+  improved oversight of application user privilege assignments and helps to
+  protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000034&#39;
+  tag &quot;gid&quot;: &#39;V-61591&#39;
+  tag &quot;rid&quot;: &#39;SV-76081r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67507r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review accounts for direct assignment of administrative
+  privileges.  Connected as SYSDBA, run the query:
+
+  SELECT grantee, privilege
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  )
+  ORDER  BY 1, 2;
+
+  If any administrative privileges have been assigned directly to a database
+  account, this is a finding.
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete.  It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review.)&quot;
+  tag &quot;fix&quot;: &quot;Create roles for administrative function assignments. Assign the
+  necessary privileges for the administrative functions to a role.  Do not assign
+  administrative privileges directly to users, except for those that Oracle does
+  not permit to be assigned via roles.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  database_accounts_with_administrative_privs &#x3D; sql.query(&quot;SELECT grantee
+  FROM   dba_sys_privs
+  WHERE  grantee IN
+  (
+  SELECT username
+  FROM   dba_users
+  WHERE  username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;,
+  &#39;SYSMAN_BIPLATFORM&#39;, &#39;SYSMAN_MDS&#39;,
+  &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+  &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;, &#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;,
+  &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;,
+  &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+  &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;, &#39;FLOWS_FILES&#39;,
+  &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;,
+  &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;,
+  &#39;EUS_ENGINE_USER&#39;, &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;
+  )
+  )
+  AND privilege NOT IN (&#39;UNLIMITED TABLESPACE&#39;
+                   , &#39;REFERENCES&#39;, &#39;INDEX&#39;, &#39;SYSDBA&#39;, &#39;SYSOPER&#39;
+  );&quot;).column(&#39;grantee&#39;).uniq
+
+  describe &#39;Database accounts with administrative privileges&#39; do
+    subject { database_accounts_with_administrative_privs }
+    it { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61593</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61593</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61593&#39; do
+  title &quot;Administrators must utilize a separate, distinct administrative
+  account when performing administrative activities, accessing database security
+  functions, or accessing security-relevant information.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      When privileged activities are not separated from non-privileged
+  activities, the database can be subject to unauthorized changes to settings and
+  data that a standard user would not normally have access to, outside of an
+  authorized maintenance session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000017&#39;
+  tag &quot;gid&quot;: &#39;V-61593&#39;
+  tag &quot;rid&quot;: &#39;SV-76083r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67509r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions for objects owned by DBA or other
+  administrative accounts.
+
+  If any objects owned by administrative accounts can be accessed by
+  non-DBA&#x2F;non-administrative users, either directly or indirectly, this is a
+  finding.
+
+  Verify DBAs have separate administrative accounts.
+
+  If DBAs do not have a separate account for database administration purposes,
+  this is a finding.
+
+  To list all objects owned by an administrative account that have had access
+  granted to another account, run the query:
+
+  SELECT grantee, table_name, grantor, privilege, type from dba_tab_privs where
+  owner&#x3D; &#39;&lt;applicable account&gt;&#39;;
+  &quot;
+  tag &quot;fix&quot;: &quot;Revoke DBA privileges, and privileges to administer DBA-owned
+  objects, from non-DBA accounts.
+
+  Provide separate accounts to DBA for database administration.&quot;
+  describe &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39; do
+    skip &#39;A manual review is required to ensure administrators must utilize a separate, distinct administrative
+    account when performing administrative activities, accessing database security
+    functions, or accessing security-relevant information&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61595</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>All use of privileged accounts must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of unified auditing policies defined is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of users being audited is expected to include &quot;ALL USERS&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of unified auditing policies defined is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of users being audited is expected to include &quot;ALL USERS&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of unified auditing policies defined is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of users being audited is expected to include &quot;ALL USERS&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of unified auditing policies defined is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of users being audited is expected to include &quot;ALL USERS&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61595</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">All use of privileged accounts must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61595&#39; do
+  title &#39;All use of privileged accounts must be audited.&#39;
+  desc  &quot;This is intended to limit exposure, by making it possible to trace any
+  unauthorized access, by a privileged user account or role that has permissions
+  on security functions or security-relevant information, to other data or
+  functionality.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61595&#39;
+  tag &quot;rid&quot;: &#39;SV-76085r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67511r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review auditing configuration.
+
+  If it is possible for a privileged user&#x2F;role to access non-security functions
+  or information without having the action recorded in the audit log, this is a
+  finding.
+
+  To obtain a list of unified auditing policies that have been defined, run the
+  query:
+  SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;
+
+  To obtain a list of unified auditing policies that have been enabled and the
+  users for which it has been enabled, run the query:
+  SELECT unique policy_name, user_name from AUDIT_UNIFIED_ENABLED_POLICIES;
+
+  Unless otherwise required, verify that user_name is set to &#39;ALL USERS&#39; to
+  insure that the activity of administrative users is being logged.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS auditing so that all use of privileged accounts is
+  recorded in the audit log.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  unified_auditing_policies_defined &#x3D; sql.query(&#39;SELECT unique policy_name from AUDIT_UNIFIED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  describe &#39;The list of unified auditing policies defined&#39; do
+    subject { unified_auditing_policies_defined }
+    it { should_not be_empty }
+  end
+
+  users_being_audited &#x3D; sql.query(&#39;SELECT unique user_name from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;user_name&#39;)
+
+  describe &#39;The list of users being audited&#39; do
+    subject { users_being_audited }
+    it { should include &#39;ALL USERS&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61597</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61597</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61597&#39; do
+  title &quot;Owners of privileged accounts must use non-privileged accounts for
+  non-administrative activities.&quot;
+  desc &quot;Use of privileged accounts for non-administrative purposes puts data
+  at risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts, if used for non-administration application
+  development or application maintenance, can lead to excessive privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000018&#39;
+  tag &quot;gid&quot;: &#39;V-61597&#39;
+  tag &quot;rid&quot;: &#39;SV-76087r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004210&#39;
+  tag &quot;fix_id&quot;: &#39;F-67513r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures and practices.  If there is not a policy
+  requiring owners of privileged accounts to use non-privileged accounts for
+  non-administrative activities, this is a finding.  If there is evidence that
+  owners of privileged accounts do not adhere to this policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Require that DBAs and other privileged users use non-privileged
+  accounts for non-administrative activities.&quot;
+  describe &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39; do
+    skip &#39;A manual review is required to ensure owners of privileged accounts use non-privileged accounts for
+    non-administrative activities&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61599</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBA role must not be assigned excessive or unauthorized
+  privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: ADMIN1 with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: RDSADMIN with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: ADMIN1 with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: RDSADMIN with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: ADMIN1 with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: RDSADMIN with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: ADMIN1 with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle database users: RDSADMIN with administative privileges is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61599</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBA role must not be assigned excessive or unauthorized
+  privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role &quot;USER PRIVS&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61599&#39; do
+  title &quot;The DBA role must not be assigned excessive or unauthorized
+  privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      Audit of privileged activity may require physical separation employing
+  information systems on which the user does not have privileged access.
+
+      To limit exposure and provide forensic history of activity when operating
+  from within a privileged account or role, the application must support
+  organizational requirements that users of information system accounts, or
+  roles, with access to organization-defined lists of security functions or
+  security-relevant information, use non-privileged accounts, or roles, when
+  accessing other (non-security) system functions.
+
+      If feasible, applications must provide access logging that ensures users
+  who are granted a privileged role (or roles) have their privileged activity
+  logged.
+
+      DBAs, if assigned excessive privileges, could perform actions that endanger
+  the information system or hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000019&#39;
+  tag &quot;gid&quot;: &#39;V-61599&#39;
+  tag &quot;rid&quot;: &#39;SV-76089r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67515r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions for objects owned by application
+  owners or other non-administrative users.
+
+  If DBA or administrative accounts have unauthorized application roles or
+  permissions beyond those needed for administration, this is a finding.
+
+  To obtain a list of privileges assigned to the DBMS user accounts, run the
+  query:
+  SELECT * from dba_sys_privs where grantee&#x3D;&#39;DBA&#39; order by privilege;
+
+  To check to see what roles are assigned to a user, run the query:
+  SELECT * from dba_role_privs where grantee &#x3D; &#39;&lt;applicable account&gt;&#39;;
+
+  To check to see what privileges are assigned to a role, run the query:
+  SELECT * from role_sys_privs;
+
+  To show privileges by object, run the query:
+  SELECT table_name, grantee,
+  MAX(DECODE(privilege, &#39;SELECT&#39;, &#39;SELECT&#39;)) AS select_priv,
+  MAX(DECODE(privilege, &#39;DELETE&#39;, &#39;DELETE&#39;)) AS delete_priv,
+  MAX(DECODE(privilege, &#39;UPDATE&#39;, &#39;UPDATE&#39;)) AS update_priv,
+  MAX(DECODE(privilege, &#39;INSERT&#39;, &#39;INSERT&#39;)) AS insert_priv
+  FROM dba_tab_privs
+  WHERE grantee IN (SELECT role FROM dba_roles)
+  GROUP BY table_name, grantee
+  ORDER BY table_name, grantee;
+
+  This query will list the system privileges assigned to a specific user:
+  SELECT LPAD(&#39; &#39;, 2*level) || granted_role \&quot;USER PRIVS\&quot;
+  FROM
+  (
+  SELECT NULL grantee, username granted_role
+  FROM dba_users
+  WHERE username LIKE UPPER(&#39;%&amp;uname%&#39;)
+  UNION
+  SELECT grantee, granted_role
+  FROM dba_role_privs
+  UNION
+  SELECT grantee, privilege
+  FROM dba_sys_privs
+  )
+  START WITH grantee IS NULL
+  CONNECT BY grantee &#x3D; prior granted_role;
+
+  To list all administrative privileges granted to users via roles, run the query:
+  SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;
+
+  (The list of special accounts that are excluded from this requirement may not
+  be complete. It is expected that the DBA will edit the list to suit local
+  circumstances, adding other special accounts as necessary, and removing any
+  that are not supposed to be in use in the Oracle deployment that is under
+  review. Similarly, the list of privileges excluded from the list may be
+  modified according to circumstances.)
+
+  Data Dictionary Objects Related To System Privileges:
+  all_sys_privs
+  session_privs
+  user_sys_privs
+  dba_sys_privs
+  system_privilege_map&quot;
+  tag &quot;fix&quot;: &quot;Remove permissions from DBAs and other administrative users
+  beyond those required for administrative functions.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_with_admin_privs &#x3D; sql.query(&quot;SELECT
+  username,
+  rp.granted_role,
+  privilege
+  FROM
+  dba_users u,
+  dba_role_privs rp,
+  dba_sys_privs sp
+  WHERE username &#x3D; rp.grantee
+  AND rp.granted_role &#x3D; sp.grantee
+  AND privilege NOT IN
+  (
+  &#39;CREATE SEQUENCE&#39;, &#39;CREATE TRIGGER&#39;,
+  &#39;SET CONTAINER&#39;, &#39;CREATE CLUSTER&#39;,
+  &#39;CREATE PROCEDURE&#39;, &#39;CREATE TYPE&#39;,
+  &#39;CREATE SESSION&#39;, &#39;CREATE OPERATOR&#39;,
+  &#39;CREATE TABLE&#39;, &#39;CREATE INDEXTYPE&#39;
+  )
+  AND username NOT IN
+  (
+  &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+  &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+  &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+  &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+  &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+  &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+  &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+  &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+  &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+  &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+  &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+  &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;,
+  &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+  &#39;EXFSYS&#39;, &#39;SYSMAN_APM&#39;,&#39;IX&#39;,&#39;OWBSYS&#39;
+  )
+  ORDER by 1, 2, 3;&quot;).column(&#39;username&#39;).uniq
+  if users_with_admin_privs.empty?
+    impact 0.0
+    describe &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle database users with administative privileges, control N&#x2F;A&#39;
+    end
+  else
+    users_with_admin_privs.each do |user|
+      describe &quot;oracle database users: #{user} with administative privileges&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_users_with_admin_privs&#39;)}
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61601</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61601</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61601&#39; do
+  title &quot;OS accounts utilized to run external procedures called by the DBMS
+  must have limited privileges.&quot;
+  desc &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC) is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      External applications called or spawned by the DBMS process may be executed
+  under OS accounts with unnecessary privileges. This can lead to unauthorized
+  access to OS resources and compromise of the OS, the DBMS or any other services
+  provided by the host platform.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000020&#39;
+  tag &quot;gid&quot;: &#39;V-61601&#39;
+  tag &quot;rid&quot;: &#39;SV-76091r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67517r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine which OS accounts are used by the DBMS to run
+  external procedures.
+
+  Validate that these OS accounts have only the privileges necessary to perform
+  the required functionality.
+
+  If any OS accounts, utilized by the database for running external procedures,
+  have privileges beyond those required for running the external procedures, this
+  is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  System views providing privilege information are:
+  DBA_SYS_PRIVS
+  DBA_TAB_PRIVS
+  DBA_ROLE_PRIVS&quot;
+  tag &quot;fix&quot;: &quot;Limit privileges to DBMS-related OS accounts to those required to
+  perform their DBMS specific functionality.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should include &#39;run_group &#x3D; nobody&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61603</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must verify account lockouts persist until reset by an
+      administrator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002236
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password lock time for profile: DEFAULT is expected to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;1&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61603</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must verify account lockouts persist until reset by an
+      administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed, to allow for the
+      utilization of an application, there is a risk that attempts will be made to
+      obtain unauthorized access.
+    
+          To defeat these attempts, organizations define the number of times a user
+      account may consecutively fail a logon attempt. The organization also defines
+      the period of time in which these consecutive failed attempts may occur.
+    
+          By limiting the number of failed logon attempts, the risk of unauthorized
+      system access via user password guessing, otherwise known as brute forcing, is
+      reduced. Limits are imposed by locking the account.
+    
+          Note that user authentication and account management must be done via an
+      enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+      authentication&#x2F;access mechanisms include, but are not limited to, Active
+      Directory and LDAP. This requirement applies to cases where it is necessary to
+      have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">The account lockout duration is defined in the profile assigned
+      to a user.
+    
+      To see what profile is assigned to a user, enter the query:
+    
+      SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+    
+      This will return the profile name assigned to that user.
+    
+      The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+      12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+      parameters. Oracle recommends that this profile be customized with any
+      site-specific requirements and assigned to all users where applicable.  Note:
+      It remains necessary to create a customized replacement for the password
+      validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+      technique to verify password complexity.
+    
+      Now check the values assigned to the profile returned from the query above:
+    
+      column profile format a20
+      column limit format a20
+      SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+      &#39;ORA_STIG_PROFILE&#39;;
+    
+      Check the settings for password_lock_time - this specifies how long to lock the
+      account after the number of consecutive failed logon attempts reaches the
+      limit. If the value is not UNLIMITED, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS settings to specify indefinite lockout
+      duration:
+      ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61603&#39; do
+  title &quot;The DBMS must verify account lockouts persist until reset by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed, to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000024&#39;
+  tag &quot;gid&quot;: &#39;V-61603&#39;
+  tag &quot;rid&quot;: &#39;SV-76093r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-004900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67519r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002236&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;The account lockout duration is defined in the profile assigned
+  to a user.
+
+  To see what profile is assigned to a user, enter the query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for password_lock_time - this specifies how long to lock the
+  account after the number of consecutive failed logon attempts reaches the
+  limit. If the value is not UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS settings to specify indefinite lockout
+  duration:
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT PASSWORD_LOCK_TIME UNLIMITED;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LOCK_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password lock time for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61605</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the number of consecutive failed logon attempts to 5.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000044
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: RDSADMIN is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: 10
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61605</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the number of consecutive failed logon attempts to 5.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&amp;USERNAME&quot;
+         This will return the profile name assigned to that user.
+
+         Now check the values assigned to the profile returned from the query above:
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE &quot;&amp;PROFILE_NAME&quot;
+
+         Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;
+
+         (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.  Note: It remains 
+         necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61605&#39; do
+  title &quot;The DBMS must limit the number of consecutive failed logon attempts to
+  3.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      More recent brute force attacks make attempts over long periods of time to
+  circumvent intrusion detection systems and system account lockouts based
+  entirely on the number of failed logons that are typically reset after a
+  successful logon.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      Note also that a policy that places no limit on the length of the timeframe
+  (for counting consecutive invalid attempts) does satisfy this requirement.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000065-DB-000025&#39;
+  tag &quot;gid&quot;: &#39;V-61605&#39;
+  tag &quot;rid&quot;: &#39;SV-76095r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67521r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000044&#39;]
+  tag &quot;nist&quot;: [&#39;AC-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&amp;USERNAME&#39;
+  This will return the profile name assigned to that user.
+
+  Now check the values assigned to the profile returned from the query above:
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE LIKE
+  &#39;&amp;PROFILE_NAME&#39;
+
+  Check the settings for FAILED_LOGIN_ATTEMPTS - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;
+
+  (ORA_STIG_PROFILE is available in DBA_PROFILES, starting with Oracle 12.1.0.2.
+  Note: It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time.first }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61607</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database limit for failed login attempts for profile: DEFAULT is expected to cmp &lt;&#x3D; 5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 5
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61607</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+         The limit on the number of consecutive failed logon attempts is defined in the profile 
+         assigned to a user.
+
+         To see what profile is assigned to a user, enter the following query:
+
+         SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &quot;&lt;username&gt;&quot;
+
+         This will return the profile name assigned to that user.
+
+         The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy 
+         the STIG requirements pertaining to the profile parameters. Oracle recommends that this profile be 
+         customized with any site-specific requirements and assigned to all users where applicable.  
+         Note: It remains necessary to create a customized replacement for the password validation function, 
+         ORA12C_STRONG_VERIFY_FUNCTION, if relying on this technique to verify password complexity.
+
+         Now check the values assigned to the profile returned from the query above:
+
+         column profile format a20
+         column limit format a20
+         SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D; &quot;ORA_STIG_PROFILE&quot;;
+
+         Check the settings for failed_login_attempts - this is the number of consecutive failed logon 
+         attempts before locking the Oracle user account. If the value is greater than 5, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">(This addresses both O121-C2-005000 and O121-C2-005200.)
+         Configure the DBMS settings to specify the maximum number of consecutive failed logon 
+         attempts to 5 (or less):
+         ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 5;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61607&#39; do
+  title &quot;The DBMS, when the maximum number of unsuccessful logon attempts is
+  exceeded, must automatically lock the account&#x2F;node until released by an
+  administrator.&quot;
+  desc &quot;Anytime an authentication method is exposed,  to allow for the
+  utilization of an application, there is a risk that attempts will be made to
+  obtain unauthorized access.
+
+      To defeat these attempts, organizations define the number of times a user
+  account may consecutively fail a logon attempt. The organization also defines
+  the period of time in which these consecutive failed attempts may occur.
+
+      By limiting the number of failed logon attempts, the risk of unauthorized
+  system access via user password guessing, otherwise known as brute forcing, is
+  reduced. Limits are imposed by locking the account.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000067-DB-000026&#39;
+  tag &quot;gid&quot;: &#39;V-61607&#39;
+  tag &quot;rid&quot;: &#39;SV-76097r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67523r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  The limit on the number of consecutive failed logon attempts is defined in the
+  profile assigned to a user.
+
+  To see what profile is assigned to a user, enter the following query:
+
+  SQL&gt;SELECT profile FROM dba_users WHERE username &#x3D; &#39;&lt;username&gt;&#39;
+
+  This will return the profile name assigned to that user.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Now check the values assigned to the profile returned from the query above:
+
+  column profile format a20
+  column limit format a20
+  SQL&gt;SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;ORA_STIG_PROFILE&#39;;
+
+  Check the settings for failed_login_attempts - this is the number of
+  consecutive failed logon attempts before locking the Oracle user account. If
+  the value is greater than 3, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;(This addresses both O121-C2-005000 and O121-C2-005200.)
+
+  Configure the DBMS settings to specify the maximum number of consecutive failed
+  logon attempts to 3 (or less):
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT FAILED_LOGIN_ATTEMPTS 3;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;FAILED_LOGIN_ATTEMPTS&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_lock_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database limit for failed login attempts for profile: #{profile}&quot; do
+      subject { password_lock_time }
+      it { should cmp &lt;&#x3D; input(&#39;failed_logon_attempts&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61613</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61613</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61613&#39; do
+  title &quot;The DBMS must have its auditing configured to reduce the likelihood of
+  storage capacity being exceeded.&quot;
+  desc &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      Logging must be configured appropriately. If the logs generated outstrip
+  the amount of space reserved for those logs, the system may shut down or take
+  other measures to stop processing in order to protect transactions from
+  continuing unlogged.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000071-DB-000047&#39;
+  tag &quot;gid&quot;: &#39;V-61613&#39;
+  tag &quot;rid&quot;: &#39;SV-76103r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67529r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s). If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                        TABLESPACE_NAME
+    --------------                    ------------------
+      AUD$                                  SYSTEM
+      FGA_LOG$                              SYSTEM
+
+  If the tablespace_name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has its auditing configured to reduce the likelihood of
+    storage capacity being exceeded&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61615</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must have allocated audit record storage capacity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001849
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has allocated audit record storage capacity</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has allocated audit record storage capacity</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has allocated audit record storage capacity</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS has allocated audit record storage capacity</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61615</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must have allocated audit record storage capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61615&#39; do
+  title &#39;The DBMS must have allocated audit record storage capacity.&#39;
+  desc  &quot;Applications need to be cognizant of potential audit log storage
+  capacity issues. During the installation and&#x2F;or configuration process,
+  applications should detect and determine if adequate storage capacity has been
+  allocated for audit logs.
+
+      During the installation process, a notification may be provided to the
+  installer indicating, based on the auditing configuration chosen and the amount
+  of storage space allocated for audit logs, the amount of storage capacity
+  available is not sufficient to meet storage requirements.
+
+      When insufficient space in directories is allocated for audit records,
+  database audit logs can fill up and begin to overwrite earlier logs, database
+  activity can stop altogether, or auditing could fail and crucial tracking data
+  could be lost.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000072-DB-000046&#39;
+  tag &quot;gid&quot;: &#39;V-61615&#39;
+  tag &quot;rid&quot;: &#39;SV-76105r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-005700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67531r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001849&#39;]
+  tag &quot;nist&quot;: [&#39;AU-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging. If auditing will generate excessive logs so that they may outgrow the
+  space reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that sufficient space is available to
+  support the file(s).  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;Allocate sufficient disk space for file-based audit.
+
+  Ensure that audit tables are in their own tablespaces and that the tablespaces
+  have enough room for the volume of log data that will be produced.&quot;
+  describe &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39; do
+    skip &#39;A manual review is required to ensure the DBMS has allocated audit record storage capacity&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61617</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61617</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61617&#39; do
+  title &quot;Databases utilizing Discretionary Access Control (DAC) must enforce a
+  policy that limits propagation of access rights.&quot;
+  desc &quot;Discretionary Access Control (DAC) is based on the premise that
+  individual users are owners of objects and therefore have discretion over
+  who should be authorized to access the object and in which mode (e.g., read or
+  write). Ownership is usually acquired as a consequence of creating the object
+  or via specified ownership assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions. DAC
+  models have the potential for the access controls to propagate without limit,
+  resulting in unauthorized access to said objects.
+
+      When applications provide a discretionary access control mechanism, the
+  application must be able to limit the propagation of those access rights.
+
+      The DBMS must ensure the recipient of permissions possesses only the access
+  intended. The database must enforce the ability to limit rights propagation if
+  that is the intent of the grantor. If the propagation of access rights is not
+  limited, users with rights to objects they do not own can continue to grant
+  rights to those objects to other users without limit.
+
+      This is default behavior for Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000085-DB-000038&#39;
+  tag &quot;gid&quot;: &#39;V-61617&#39;
+  tag &quot;rid&quot;: &#39;SV-76107r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67533r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS has the ability to grant permissions without
+  the grantee receiving the right to grant those same permissions to another user.
+
+  Review organization policies regarding access propagation. If an access
+  propagation policy limiting the propagation of rights does not exist, this is a
+  finding.
+
+  Review DBMS configuration to verify access propagation policies are enforced by
+  the DBMS as configured. If the DBMS does not enforce the access propagation
+  policy, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document an access propagation policy that limits the
+  propagation of rights.
+
+  Configure the DBMS to enforce the access propagation policy.
+
+  When a user is granted access to an object, they have access to the object.
+  When a user is granted access to an object with the GRANT option, then they can
+  provide permissions to others.  Without the GRANT option, a user cannot grant
+  access to an object.  No configuration is required.&quot;
+  describe &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39; do
+    skip &#39;A manaul review is required to ensure the Databases utilizing Discretionary Access Control (DAC) enforce a
+    policy that limits propagation of access rights&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61619</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-3 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002165
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61619</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">DAC is based on the notion that individual users are &quot;owners&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-3 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61619&#39; do
+  title &quot;A DBMS utilizing Discretionary Access Control (DAC) must enforce a
+  policy that includes or excludes access to the granularity of a single user.&quot;
+  desc &quot;DAC is based on the notion that individual users are \&quot;owners\&quot; of
+  objects and therefore have discretion over who should be authorized to access
+  the object and in which mode (e.g., read or write). Ownership is usually
+  acquired as a consequence of creating the object or via specified ownership
+  assignment.
+
+      DAC allows the owner to determine who will have access to objects they
+  control. An example of DAC includes user-controlled file permissions.
+
+      Including or excluding access to the granularity of a single user means
+  providing the capability to either allow or deny access to objects (e.g.,
+  files, folders) on a per single user basis.
+
+      Databases using DAC must have the ability for the owner of an object or
+  information to assign or revoke rights to view or modify the object or
+  information.  If the owner of an object or information does not have rights to
+  exclude access to an object or information at a user level, users may gain
+  access to objects and information they are not authorized to view&#x2F;modify.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000087-DB-000013&#39;
+  tag &quot;gid&quot;: &#39;V-61619&#39;
+  tag &quot;rid&quot;: &#39;SV-76109r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67535r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002165&#39;]
+  tag &quot;nist&quot;: [&#39;AC-3 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine if users are
+  able to assign and revoke rights to the objects and information they own. If
+  users cannot assign or revoke rights to the objects and information they own to
+  the granularity of a single user, this is a finding.
+
+  (This is default Oracle behavior.)&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS settings to allow users to assign or revoke access
+  rights to objects and information owned by the user. The ability to grant or
+  revoke rights must include the ability to grant or revoke those rights down to
+  the granularity of a single user.
+
+  (This is default Oracle behavior.)&quot;
+  describe &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39; do
+    skip &#39;A manual review is required to ensure a DBMS utilizing Discretionary Access Control (DAC) enforces a
+    policy that includes or excludes access to the granularity of a single user&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61621</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000169
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61621</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit records can be generated from various components within the information system. (e.g., 
+         network interface, hard disk, modem, etc.). From an application perspective, certain specific 
+         application functionalities may be audited as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+
+         Organizations define which application components shall provide auditable events.
+         
+         The DBMS must provide auditing for the list of events defined by the organization or risk 
+         negatively impacting forensic investigations into malicious behavior in the information system. 
+         Audit records can be generated from various components within the information system, such as 
+         network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+         application functionalities may be audited, as well.
+
+         The list of audited events is the set of events for which audits are to be generated. This set 
+         of events is typically a subset of the list of all events for which the system is capable of 
+         generating audit records (i.e., auditable events, timestamps, source and destination addresses, 
+         user&#x2F;process identifiers, event descriptions, success&#x2F;fail indications, file names involved, 
+         and access control or flow control rules invoked).
+         
+         Organizations may define the organizational personnel accountable for determining which 
+         application components shall provide auditable events.
+
+         Auditing provides accountability for changes made to the DBMS configuration or its objects 
+         and data. It provides a means to discover suspicious activity and unauthorized changes. Without 
+         auditing, a compromise may go undetected and without a means to determine accountability.
+
+         The following defines the minimum set of auditable events. Most can be audited via Oracle 
+         settings; some - marked here with an asterisk - cannot, and may require OS settings.
+         - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+         security levels, or categories of information (e.g. classification levels).
+         - Successful and unsuccessful logon attempts, privileged activities or other system level access
+         - Starting and ending time for user access to the system, concurrent logons from different 
+         workstations.
+         - Successful and unsuccessful accesses to objects.
+         - All program initiations.
+         - *All direct access to the information system.
+         - All account creations, modifications, disabling, and terminations.
+         - *All kernel module loads, unloads, and restarts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61621&#39; do
+  title &quot;The DBMS must provide audit record generation capability for
+  organization-defined auditable events within the database.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system. (e.g., network interface, hard disk, modem, etc.). From an
+  application perspective, certain specific application functionalities may be
+  audited as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations define which application components shall provide auditable
+  events.
+
+      The DBMS must provide auditing for the list of events defined by the
+  organization or risk negatively impacting forensic investigations into
+  malicious behavior in the information system. Audit records can be generated
+  from various components within the information system, such as network
+  interfaces, hard disks, modems, etc. From an application perspective, certain
+  specific application functionalities may be audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000089-DB-000064&#39;
+  tag &quot;gid&quot;: &#39;V-61621&#39;
+  tag &quot;rid&quot;: &#39;SV-76111r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67537r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000169&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.AUD$ table or the audit file, whichever is in
+  use. If auditable events are not listed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &#39;TRUE&#39;, this is not a finding.
+
+  To confirm that Oracle audit is capturing information on the required events,
+  review the contents of the SYS.UNIFIED_AUDIT_TRAIL view. If auditable events
+  are not listed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit organization-defined
+  auditable events. If preferred, use a third-party tool. The tool must provide
+  the minimum capability to audit the required events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61623</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000171
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61623</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61623&#39; do
+  title &quot;The DBMS must allow designated organizational personnel to select
+  which auditable events are to be audited by the database.&quot;
+  desc  &quot;The list of audited events is the set of events for which audits are
+  to be generated. This set of events is typically a subset of the list of all
+  events for which the system is capable of generating audit records (i.e.,
+  auditable events, timestamps, source and destination addresses, user&#x2F;process
+  identifiers, event descriptions, success&#x2F;fail indications, file names involved,
+  and access control or flow control rules invoked).
+
+      If the list of auditable events is not configurable, events that should be
+  caught by auditing may be missed.  This may allow malicious activity to be
+  overlooked.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000090-DB-000065&#39;
+  tag &quot;gid&quot;: &#39;V-61623&#39;
+  tag &quot;rid&quot;: &#39;SV-76113r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-006900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67539r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000171&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and documentation to determine whether
+  designated personnel are able to select which auditable events are being
+  audited.  If designated personnel are not able to configure auditable events,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s settings to allow designated personnel to
+  select which auditable events are audited.
+
+  Note the following:
+  In Oracle, any user can configure auditing for the objects in his or her own
+  schema by using the AUDIT statement. To undo the audit configuration for an
+  object, the user can use the NOAUDIT statement. No additional privileges are
+  needed to perform this task.
+
+  To audit objects in another schema, the user must have the AUDIT ANY system
+  privilege.
+  To audit system privileges, the user must have the AUDIT SYSTEM privilege.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39; do
+    skip &#39;A manual review is required to ensure the DBMS allows designated organizational personnel to select
+    which auditable events are to be audited by the database&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61625</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-12 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000172
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61625</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must generate audit records for the selected list of auditable events, to the extent 
+    such information is available.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit records can be generated from various components within the information system, such as 
+    network interfaces, hard disks, modems, etc. From an application perspective, certain specific 
+    application functionalities may be audited, as well.
+
+    The list of audited events is the set of events for which audits are to be generated. This set of 
+    events is typically a subset of the list of all events for which the system is capable of generating 
+    audit records (i.e., auditable events, timestamps, source and destination addresses, user&#x2F;process 
+    identifiers, event descriptions, success&#x2F;fail indications, file names involved, and access control 
+    or flow control rules invoked).
+
+    Organizations may define the organizational personnel accountable for determining which application 
+    components shall provide auditable events.
+
+    Auditing provides accountability for changes made to the DBMS configuration or its objects and data. 
+    It provides a means to discover suspicious activity and unauthorized changes. Without auditing, a 
+    compromise may go undetected and without a means to determine accountability.
+
+    The following is the minimum set of auditable events. Most can be audited via Oracle settings; 
+    some - marked here with an asterisk - cannot, and may require OS settings.
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of information (e.g. classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - *All direct access to the information system.
+    - All account creations, modifications, disabling, and terminations.
+    - *All kernel module loads, unloads, and restarts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-12 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine if auditing is being performed on the 
+    events on the list of auditable events that lie within the scope of Oracle audit capabilities:
+    - Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, 
+    security levels, or categories of 
+    information (e.g., classification levels).
+    - Successful and unsuccessful logon attempts, privileged activities or other system-level access
+    - Starting and ending time for user access to the system, concurrent logons from different workstations.
+    - Successful and unsuccessful accesses to objects.
+    - All program initiations.
+    - All account creations, modifications, disabling, and terminations.
+
+    If auditing is not being performed for any of these events, this is a finding.
+
+    Notes on Oracle audit capabilities follow.
+
+    Unified Audit supports named audit policies, which are defined using the CREATE AUDIT POLICY statement. 
+    A policy specifies the actions that should be audited and the objects to which it should apply. 
+    If no specific objects are included in the policy definition, it applies to all objects.
+
+    A named policy is enabled using the AUDIT POLICY statement. It can be enabled for all users, for 
+    specific users only, or for all except a specified list of users. The policy can audit successful actions, 
+    unsuccessful actions, or both.
+
+    Verifying existing audit policy: existing Unified Audit policies are listed in the view AUDIT_UNIFIED_POLICIES. 
+    The AUDIT_OPTION column contains one of the actions specified in a CREATE AUDIT POLICY statement. 
+    The AUDIT_OPTION_TYPE column contains &quot;STANDARD ACTION&quot; for a policy that applies to all objects or 
+    &quot;OBJECT ACTION&quot; for a policy that audits actions on a specific object.
+
+    select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; and 
+    AUDIT_OPTION_TYPE&#x3D;&quot;STANDARD ACTION&quot;;
+
+    To find policies that audit privilege grants on specific objects:
+
+    select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&quot;GRANT&quot; 
+    and AUDIT_OPTION_TYPE&#x3D;&quot;OBJECT ACTION&quot;;
+
+    The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are enabled. The ENABLED_OPT 
+    and USER_NAME columns show the users for whom the policy is enabled or &quot;ALL USERS&quot;. The SUCCESS and FAILURE 
+    columns indicate if the policy is enabled for successful or unsuccessful actions, respectively.
+
+    select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from SYS.AUDIT_UNIFIED_ENABLED_POLICIES where 
+    POLICY_NAME&#x3D;&quot;POLICY1&quot;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing settings to include auditing of events on the selected list 
+    of auditable events.
+
+    1) Successful and unsuccessful attempts to access, modify, or delete privileges, security objects, security 
+    levels, or categories of information (e.g., classification levels)
+
+    To audit granting and revocation of any privilege:
+    create audit policy policy1 actions grant;
+    create audit policy policy2 actions revoke;
+
+    To audit grants of object privileges on a specific object:
+    create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+    If Oracle Label Security is enabled, this will audit all OLS administrative actions:
+    create audit policy policy4 actions component &#x3D; OLS all;
+
+    2) Successful and unsuccessful logon attempts, privileged activities or other system-level access
+ 
+    To audit all user logon attempts:
+    create audit policy policy5 actions logon;
+
+    To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+    audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+    3) Starting and ending time for user access to the system, concurrent logons from different 
+    workstations
+
+    This policy will audit all logon and logoff events. An individual session is identified in the 
+    UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID, SESSIONID) and the start and end time will be 
+    indicated by the EVENT_TIMESTAMP of the logon and logoff events:
+
+    create audit policy policy6 actions logon, logoff;
+
+    4) Successful and unsuccessful accesses to objects
+
+    To audit all accesses to a specific table:
+    create audit policy policy7 actions select, insert, delete, alter on &lt;schema&gt;.&lt;object&gt;; 
+
+    Different actions are defined for other object types. To audit all supported actions on a specific object:
+    create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+    5) All program initiations
+
+    To audit execution of any PL&#x2F;SQL program unit:
+    create audit policy policy9 actions EXECUTE;
+
+    To audit execution of a specific function, procedure, or package:
+    create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+    6) All direct access to the information system
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    7) All account creations, modifications, disabling, and terminations
+
+    To audit all user administration actions:
+    create audit policy policy11 actions create user, alter user, drop user, change password;
+
+    8) All kernel module loads, unloads, and restarts
+
+    [Not applicable to Database audit. Monitor using OS auditing.]
+
+    9) All database parameter changes
+
+    To audit any database parameter changes, dynamic or static:
+    create audit policy policy12 actions alter database, alter system, create spfile;
+
+    Applying the Policy
+
+    The following command will enable the policy in all database sessions and audit both 
+    successful and unsuccessful actions: audit policy policy1; 
+
+    To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+    audit policy policy1 whenever not successful;
+
+    Either command above can be limited to only database sessions started by a specific user as 
+    follows:
+    audit policy policy1 by &lt;user&gt;;
+    audit policy policy1 by &lt;user&gt; whenever not successful;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61625&#39; do
+  title &quot;The DBMS must generate audit records for the DoD-selected list of
+  auditable events, to the extent such information is available.&quot;
+  desc &quot;Audit records can be generated from various components within the
+  information system, such as network interfaces, hard disks, modems, etc. From
+  an application perspective, certain specific application functionalities may be
+  audited, as well.
+
+      The list of audited events is the set of events for which audits are to be
+  generated. This set of events is typically a subset of the list of all events
+  for which the system is capable of generating audit records (i.e., auditable
+  events, timestamps, source and destination addresses, user&#x2F;process identifiers,
+  event descriptions, success&#x2F;fail indications, file names involved, and access
+  control or flow control rules invoked).
+
+      Organizations may define the organizational personnel accountable for
+  determining which application components shall provide auditable events.
+
+      Auditing provides accountability for changes made to the DBMS configuration
+  or its objects and data. It provides a means to discover suspicious activity
+  and unauthorized changes. Without auditing, a compromise may go undetected and
+  without a means to determine accountability.
+
+      The Department of Defense has established the following as the minimum set
+  of auditable events. Most can be audited via Oracle settings; some - marked
+  here with an asterisk - cannot, and may require OS settings.
+      - Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g. classification levels).
+      - Successful and unsuccessful logon attempts, privileged activities or
+  other system level access
+      - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+      - Successful and unsuccessful accesses to objects.
+      - All program initiations.
+      - *All direct access to the information system.
+      - All account creations, modifications, disabling, and terminations.
+      - *All kernel module loads, unloads, and restarts.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000091-DB-000066&#39;
+  tag &quot;gid&quot;: &#39;V-61625&#39;
+  tag &quot;rid&quot;: &#39;SV-76115r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67541r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000172&#39;]
+  tag &quot;nist&quot;: [&#39;AU-12 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine if auditing is being performed
+  on the events on the DoD-selected list of auditable events that lie within the
+  scope of Oracle audit capabilities:
+  - Successful and unsuccessful attempts to access, modify, or delete privileges,
+  security objects, security levels, or categories of information (e.g.,
+  classification levels).
+  - Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+  - Starting and ending time for user access to the system, concurrent logons
+  from different workstations.
+  - Successful and unsuccessful accesses to objects.
+  - All program initiations.
+  - All account creations, modifications, disabling, and terminations.
+
+  If auditing is not being performed for any of these events, this is a finding.
+
+  Notes on Oracle audit capabilities follow.
+
+  Unified Audit supports named audit policies, which are defined using the CREATE
+  AUDIT POLICY statement. A policy specifies the actions that should be audited
+  and the objects to which it should apply. If no specific objects are included
+  in the policy definition, it applies to all objects.
+
+  A named policy is enabled using the AUDIT POLICY statement. It can be enabled
+  for all users, for specific users only, or for all except a specified list of
+  users. The policy can audit successful actions, unsuccessful actions, or both.
+
+  Verifying existing audit policy:  existing Unified Audit policies are listed in
+  the view AUDIT_UNIFIED_POLICIES. The AUDIT_OPTION column contains one of the
+  actions specified in a CREATE AUDIT POLICY statement. The AUDIT_OPTION_TYPE
+  column contains &#39;STANDARD ACTION&#39; for a policy that applies to all objects or
+  &#39;OBJECT ACTION&#39; for a policy that audits actions on a specific object.
+
+  select POLICY_NAME from SYS.AUDIT_UNIFIED_POLICIES where AUDIT_OPTION&#x3D;&#39;GRANT&#39;
+  and AUDIT_OPTION_TYPE&#x3D;&#39;STANDARD ACTION&#39;;
+
+  To find policies that audit privilege grants on specific objects:
+
+  select POLICY_NAME,OBJECT_SCHEMA,OBJECT_NAME from SYS.AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;
+
+  The view AUDIT_UNIFIED_ENABLED_POLICIES shows which Unified Audit policies are
+  enabled. The ENABLED_OPT and USER_NAME columns show the users for whom the
+  policy is enabled or &#39;ALL USERS&#39;. The SUCCESS and FAILURE columns indicate if
+  the policy is enabled for successful or unsuccessful actions, respectively.
+
+  select POLICY_NAME,ENABLED_OPT,USER_NAME,SUCCESS,FAILURE from
+  SYS.AUDIT_UNIFIED_ENABLED_POLICIES where POLICY_NAME&#x3D;&#39;POLICY1&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing settings to include auditing of
+  events on the DoD-selected list of auditable events.
+
+  1) Successful and unsuccessful attempts to access, modify, or delete
+  privileges, security objects, security levels, or categories of information
+  (e.g., classification levels)
+
+  To audit granting and revocation of any privilege:
+  create audit policy policy1 actions grant;
+  create audit policy policy2 actions revoke;
+
+  To audit grants of object privileges on a specific object:
+  create audit policy policy3 actions grant on &lt;schema&gt;.&lt;object&gt;;
+
+  If Oracle Label Security is enabled, this will audit all OLS administrative
+  actions:
+  create audit policy policy4 actions component &#x3D; OLS all;
+
+  2) Successful and unsuccessful logon attempts, privileged activities or other
+  system-level access
+
+  To audit all user logon attempts:
+  create audit policy policy5 actions logon;
+
+  To audit only logon attempts using administrative privileges (e.g. AS SYSDBA):
+  audit policy policy5 by SYS, SYSOPER, SYSBACKUP, SYSDG, SYSKM;
+
+  3) Starting and ending time for user access to the system, concurrent logons
+  from different workstations
+
+  This policy will audit all logon and logoff events. An individual session is
+  identified in the UNIFIED_AUDIT_TRAIL by the tuple (DBID, INSTANCE_ID,
+  SESSIONID) and the start and end time will be indicated by the EVENT_TIMESTAMP
+  of the logon and logoff events:
+  create audit policy policy6 actions logon, logoff;
+
+  4) Successful and unsuccessful accesses to objects
+
+  To audit all accesses to a specific table:
+  create audit policy policy7 actions select, insert, delete, alter on
+  &lt;schema&gt;.&lt;object&gt;;
+
+  Different actions are defined for other object types. To audit all supported
+  actions on a specific object:
+  create audit policy policy8 actions all on &lt;schema&gt;.&lt;object&gt;;
+
+  5) All program initiations
+
+  To audit execution of any PL&#x2F;SQL program unit:
+  create audit policy policy9 actions EXECUTE;
+
+  To audit execution of a specific function, procedure, or package:
+  create audit policy policy10 actions EXECUTE on &lt;schema&gt;.&lt;object&gt;;
+
+  6) All direct access to the information system
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  7) All account creations, modifications, disabling, and terminations
+
+  To audit all user administration actions:
+  create audit policy policy11 actions create user, alter user, drop user, change
+  password;
+
+  8) All kernel module loads, unloads, and restarts
+
+  [Not applicable to Database audit. Monitor using OS auditing.]
+
+  9) All database parameter changes
+
+  To audit any database parameter changes, dynamic or static:
+  create audit policy policy12 actions alter database, alter system, create
+  spfile;
+
+  Applying the Policy
+
+  The following command will enable the policy in all database sessions and audit
+  both successful and unsuccessful actions:
+  audit policy policy1;
+
+  To audit only unsuccessful actions, add the WHENEVER NOT SUCCESSFUL modifier:
+  audit policy policy1 whenever not successful;
+
+  Either command above can be limited to only database sessions started by a
+  specific user as follows:
+  audit policy policy1 by &lt;user&gt;;
+  audit policy policy1 by &lt;user&gt; whenever not successful;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_policies_auditing_grant_privileges &#x3D; sql.query(&quot;select DISTINCT POLICY_NAME from AUDIT_UNIFIED_POLICIES
+  where AUDIT_OPTION&#x3D;&#39;GRANT&#39; and AUDIT_OPTION_TYPE&#x3D;&#39;OBJECT ACTION&#39;;&quot;).column(&#39;policy_name&#39;)
+  unified_audit_policies_enabled &#x3D; sql.query(&#39;select POLICY_NAME from AUDIT_UNIFIED_ENABLED_POLICIES;&#39;).column(&#39;policy_name&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The audit policies that audit privilege grants on specific objects&#39; do
+      subject { audit_policies_auditing_grant_privileges }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The list of unified audit policies enabled&#39; do
+      subject { unified_audit_policies_enabled }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61627</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000130
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61627</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61627&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish what type of events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  what actions were performed. This requires specific information regarding the
+  event type an audit record is referring to. If event type information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000095-DB-000039&#39;
+  tag &quot;gid&quot;: &#39;V-61627&#39;
+  tag &quot;rid&quot;: &#39;SV-76117r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67543r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000130&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no ACTION#, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include what type of
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61631</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000131
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61631</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61631&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish when (date and time) the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It&#39;s important, for accurate forensic analysis, to know exactly
+  when specific actions were performed. This requires the date and time an audit
+  record is referring to. If date and time information is not recorded and stored
+  with the audit record, the record itself is of very limited use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000096-DB-000040&#39;
+  tag &quot;gid&quot;: &#39;V-61631&#39;
+  tag &quot;rid&quot;: &#39;SV-76121r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67881r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000131&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  when events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no timestamp, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the date and
+  time of any user&#x2F;subject or process associated with the event. If preferred,
+  use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61633</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000132
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61633</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61633&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish where the events occurred.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Without sufficient information establishing where the audit events
+  occurred, investigation into the cause of events is severely hindered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000097-DB-000041&#39;
+  tag &quot;gid&quot;: &#39;V-61633&#39;
+  tag &quot;rid&quot;: &#39;SV-76123r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67545r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000132&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values, are returned for the auditable actions
+  just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  where events occurred, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no DB ID or Object Creator (standard audit) or Object Schema (unified audit)
+  or Object Name, or the wrong values,
+  are returned for the auditable actions just performed, this is a finding.
+
+  If correct values for User Host and Terminal are not returned when applicable,
+  this is a finding.
+
+  If Unified Auditing is used, the following view can be useful for reviewing its
+  output:
+
+  CREATE OR REPLACE FORCE VIEW SYS.UNIFIED_AUDIT_TRAIL
+  (
+      AUDIT_TYPE,
+      SESSIONID,
+      PROXY_SESSIONID,
+      OS_USERNAME,
+      USERHOST,
+      TERMINAL,
+      INSTANCE_ID,
+      DBID,
+      AUTHENTICATION_TYPE,
+      DBUSERNAME,
+      DBPROXY_USERNAME,
+      EXTERNAL_USERID,
+      GLOBAL_USERID,
+      CLIENT_PROGRAM_NAME,
+      DBLINK_INFO,
+      XS_USER_NAME,
+      XS_SESSIONID,
+      ENTRY_ID,
+      STATEMENT_ID,
+      EVENT_TIMESTAMP,
+      ACTION_NAME,
+      RETURN_CODE,
+      OS_PROCESS,
+      TRANSACTION_ID,
+      SCN,
+      EXECUTION_ID,
+      OBJECT_SCHEMA,
+      OBJECT_NAME,
+      SQL_TEXT,
+      SQL_BINDS,
+      APPLICATION_CONTEXTS,
+      CLIENT_IDENTIFIER,
+      NEW_SCHEMA,
+      NEW_NAME,
+      OBJECT_EDITION,
+      SYSTEM_PRIVILEGE_USED,
+      SYSTEM_PRIVILEGE,
+      AUDIT_OPTION,
+      OBJECT_PRIVILEGES,
+      ROLE,
+      TARGET_USER,
+      EXCLUDED_USER,
+      EXCLUDED_SCHEMA,
+      EXCLUDED_OBJECT,
+      ADDITIONAL_INFO,
+      UNIFIED_AUDIT_POLICIES,
+      FGA_POLICY_NAME,
+      XS_INACTIVITY_TIMEOUT,
+      XS_ENTITY_TYPE,
+      XS_TARGET_PRINCIPAL_NAME,
+      XS_PROXY_USER_NAME,
+      XS_DATASEC_POLICY_NAME,
+      XS_SCHEMA_NAME,
+      XS_CALLBACK_EVENT_TYPE,
+      XS_PACKAGE_NAME,
+      XS_PROCEDURE_NAME,
+      XS_ENABLED_ROLE,
+      XS_COOKIE,
+      XS_NS_NAME,
+      XS_NS_ATTRIBUTE,
+      XS_NS_ATTRIBUTE_OLD_VAL,
+      XS_NS_ATTRIBUTE_NEW_VAL,
+      DV_ACTION_CODE,
+      DV_ACTION_NAME,
+      DV_EXTENDED_ACTION_CODE,
+      DV_GRANTEE,
+      DV_RETURN_CODE,
+      DV_ACTION_OBJECT_NAME,
+      DV_RULE_SET_NAME,
+      DV_COMMENT,
+      DV_FACTOR_CONTEXT,
+      DV_OBJECT_STATUS,
+      OLS_POLICY_NAME,
+      OLS_GRANTEE,
+      OLS_MAX_READ_LABEL,
+      OLS_MAX_WRITE_LABEL,
+      OLS_MIN_WRITE_LABEL,
+      OLS_PRIVILEGES_GRANTED,
+      OLS_PROGRAM_UNIT_NAME,
+      OLS_PRIVILEGES_USED,
+      OLS_STRING_LABEL,
+      OLS_LABEL_COMPONENT_TYPE,
+      OLS_LABEL_COMPONENT_NAME,
+      OLS_PARENT_GROUP_NAME,
+      OLS_OLD_VALUE,
+      OLS_NEW_VALUE,
+      RMAN_SESSION_RECID,
+      RMAN_SESSION_STAMP,
+      RMAN_OPERATION,
+      RMAN_OBJECT_TYPE,
+      RMAN_DEVICE_TYPE,
+      DP_TEXT_PARAMETERS1,
+      DP_BOOLEAN_PARAMETERS1,
+      DIRECT_PATH_NUM_COLUMNS_LOADED
+  )
+  AS
+      SELECT act.component,
+             sessionid,
+             proxy_sessionid,
+             os_user,
+             host_name,
+             terminal,
+             instance_id,
+             dbid,
+             authentication_type,
+             userid,
+             proxy_userid,
+             external_userid,
+             global_userid,
+             client_program_name,
+             dblink_info,
+             xs_user_name,
+             xs_sessionid,
+             entry_id,
+             statement_id,
+             CAST (event_timestamp AS TIMESTAMP WITH LOCAL TIME ZONE),
+             act.name,
+             return_code,
+             os_process,
+             transaction_id,
+             scn,
+             execution_id,
+             obj_owner,
+             obj_name,
+             sql_text,
+             sql_binds,
+             application_contexts,
+             client_identifier,
+             new_owner,
+             new_name,
+             object_edition,
+             system_privilege_used,
+             spx.name,
+             aom.name,
+             object_privileges,
+             role,
+             target_user,
+             excluded_user,
+             excluded_schema,
+             excluded_object,
+             additional_info,
+             unified_audit_policies,
+             fga_policy_name,
+             xs_inactivity_timeout,
+             xs_entity_type,
+             xs_target_principal_name,
+             xs_proxy_user_name,
+             xs_datasec_policy_name,
+             xs_schema_name,
+             xs_callback_event_type,
+             xs_package_name,
+             xs_procedure_name,
+             xs_enabled_role,
+             xs_cookie,
+             xs_ns_name,
+             xs_ns_attribute,
+             xs_ns_attribute_old_val,
+             xs_ns_attribute_new_val,
+             dv_action_code,
+             dv_action_name,
+             dv_extended_action_code,
+             dv_grantee,
+             dv_return_code,
+             dv_action_object_name,
+             dv_rule_set_name,
+             dv_comment,
+             dv_factor_context,
+             dv_object_status,
+             ols_policy_name,
+             ols_grantee,
+             ols_max_read_label,
+             ols_max_write_label,
+             ols_min_write_label,
+             ols_privileges_granted,
+             ols_program_unit_name,
+             ols_privileges_used,
+             ols_string_label,
+             ols_label_component_type,
+             ols_label_component_name,
+             ols_parent_group_name,
+             ols_old_value,
+             ols_new_value,
+             rman_session_recid,
+             rman_session_stamp,
+             rman_operation,
+             rman_object_type,
+             rman_device_type,
+             dp_text_parameters1,
+             dp_boolean_parameters1,
+             direct_path_num_columns_loaded
+        FROM gv$unified_audit_trail     uview,
+             all_unified_audit_actions  act,
+             system_privilege_map       spx,
+             stmt_audit_option_map      aom
+       WHERE     uview.action &#x3D; act.action(+)
+             AND -uview.system_privilege &#x3D; spx.privilege(+)
+             AND uview.audit_option &#x3D; aom.option#(+)
+             AND uview.audit_type &#x3D; act.TYPE;&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include where the
+  event occurred. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+   Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61635</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61635</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61635&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the sources (origins) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control, includes, but is not limited to:  timestamps,
+  source and destination IP addresses, user&#x2F;process identifiers, event
+  descriptions, application specific events, success&#x2F;fail indications, file names
+  involved, access control or flow control rules invoked.
+
+      Without information establishing the source of activity, the value of audit
+  records from a forensics perspective is questionable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000098-DB-000042&#39;
+  tag &quot;gid&quot;: &#39;V-61635&#39;
+  tag &quot;rid&quot;: &#39;SV-76125r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67547r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000133&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the SYS.AUD$
+  table or the audit file, whichever is in use.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the source of events, perform a successful auditable action and an auditable
+  action that results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If correct values for User ID, User Host, and Terminal are not returned when
+  applicable, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the source
+  of the event. If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61637</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000134
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61637</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61637&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the outcome (success or failure) of the events.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes, but is not limited to: timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control, or flow control rules invoked.
+
+      Success and failure indicators ascertain the outcome of a particular event.
+  As such, they also provide a means to measure the impact of an event and help
+  authorized personnel to determine the appropriate response. Without knowing the
+  outcome of audit events, it is very difficult to accurately recreate the series
+  of events during forensic analysis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000099-DB-000043&#39;
+  tag &quot;gid&quot;: &#39;V-61637&#39;
+  tag &quot;rid&quot;: &#39;SV-76127r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67549r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000134&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the SYS.AUD$ table or the
+  audit file, whichever is in use.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding. If no error
+  is indicated for the unsuccessful action, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  outcomes, perform a successful auditable action and an auditable action that
+  results in an SQL error, and then view the results in the
+  SYS.UNIFIED_AUDIT_TRAIL view.
+
+  If no return code or other outcome information is returned for the auditable
+  action just performed, this is a finding.
+
+  If error is indicated for the successful action, this is a finding.
+
+  If no error is indicated for the unsuccessful action, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the outcome.
+  If preferred, use a third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61639</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001487
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61639</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61639&#39; do
+  title &quot;The DBMS must produce audit records containing sufficient information
+  to establish the identity of any user&#x2F;subject or process associated with the
+  event.&quot;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Database software is capable of a range of actions on data stored within
+  the database. It is important, for accurate forensic analysis, to know exactly
+  who performed a given action.  If user identification information is not
+  recorded and stored with the audit record, the record itself is of very limited
+  use.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000100-DB-000201&#39;
+  tag &quot;gid&quot;: &#39;V-61639&#39;
+  tag &quot;rid&quot;: &#39;SV-76129r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-007900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67551r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001487&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.AUD$ table or the audit file, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  To confirm that Oracle audit is capturing sufficient information to establish
+  the identity of the user&#x2F;subject or process, perform a successful auditable
+  action and an auditable action that results in an SQL error, and then view the
+  results in the SYS.UNIFIED_AUDIT_TRAIL view, whichever is in use.
+
+  If no user ID, or the wrong value, is returned for the auditable actions just
+  performed, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS&#39;s auditing to audit standard and
+  organization-defined auditable events, the audit record to include the identity
+  of any user&#x2F;subject or process associated with the event. If preferred, use a
+  third-party or custom tool.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If unified Auditing is used:
+  To ensure auditable events are captured:
+  Link the oracle binary with uniaud_on, and then restart the database.
+
+
+
+  Oracle Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61641</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000135
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61641</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value &quot;NONE&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be &quot;OS&quot;, &quot;DB&quot;, &quot;DB,EXTENDED&quot;, &quot;XML&quot; or
+  &quot;XML,EXTENDED&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61641&#39; do
+  title &quot;The DBMS must include organization-defined additional, more detailed
+  information in the audit records for audit events identified by type, location,
+  or subject.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      In addition, the application must have the capability to include
+  organization-defined additional, more detailed information in the audit records
+  for audit events. These events may be identified by type, location, or subject.
+
+      An example of detailed information the organization may require in audit
+  records is full-text recording of privileged commands or the individual
+  identities of shared account users.
+
+      Some organizations may determine that more detailed information is required
+  for specific database event types.  If this information is not available, it
+  could negatively impact forensic investigations into user actions or other
+  malicious events.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000101-DB-000044&#39;
+  tag &quot;gid&quot;: &#39;V-61641&#39;
+  tag &quot;rid&quot;: &#39;SV-76131r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67553r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000135&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify, using vendor and system documentation if necessary,
+  that the DBMS is configured to use Oracle&#39;s auditing features, or that a
+  third-party product or custom code is deployed and configured to satisfy this
+  requirement.
+
+  If a third-party product or custom code is used, compare its current
+  configuration with the audit requirements. If any of the requirements is not
+  covered by the configuration, this is a finding.
+
+  The remainder of this Check is applicable specifically where Oracle auditing is
+  in use.
+
+  If Standard Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SHOW PARAMETER AUDIT_TRAIL
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+
+  If Oracle returns the value \&quot;NONE\&quot;, this is a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.DBA_FGA_AUDIT_TRAIL;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.
+
+  If Unified Auditing is used:
+  To see if Oracle is configured to capture audit data, enter the following
+  SQL*Plus command:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Compare the organization-defined auditable events with the Oracle documentation
+  to determine whether standard auditing covers all the requirements.
+
+  If it does, this is not a finding.
+
+  Compare those organization-defined auditable events that are not covered by the
+  standard auditing, with the existing Fine-Grained Auditing (FGA) specifications
+  returned by the following query:
+
+  SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;
+
+  If any such auditable event is not covered by the existing FGA specifications,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Either configure the DBMS&#39;s auditing to audit
+  organization-defined auditable events, or, if preferred, use a third-party or
+  custom tool. The tool must provide the minimum capability to audit the required
+  events.
+
+  If using a third-party product, proceed in accordance with the product
+  documentation. If using Oracle&#39;s capabilities, proceed as follows.
+
+  If Standard Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+
+  Audit trail type can be \&quot;OS\&quot;, \&quot;DB\&quot;, \&quot;DB,EXTENDED\&quot;, \&quot;XML\&quot; or
+  \&quot;XML,EXTENDED\&quot;.
+
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation, at the location below.
+
+  If Unified Auditing is used:
+  Use this process to ensure auditable events are captured:
+
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.
+
+  Otherwise,
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  If the organization-defined additional audit requirements are not covered by
+  the default audit options, deploy and configure Fine-Grained Auditing. For
+  details, refer to Oracle documentation at the location below.
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing. For details, refer to
+  Oracle documentation, at the location below.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+  fga_audit_events &#x3D; sql.query(&quot; SELECT * FROM SYS.UNIFIED_AUDIT_TRAIL WHERE AUDIT_TYPE &#x3D; &#39;FineGrainedAudit&#39;;&quot;).column(&#39;TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+    describe &#39;The oracle database fine grained  auditing events captured&#39; do
+      subject { fga_audit_events }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61643</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001855
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61643</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61643&#39; do
+  title &quot;The DBMS itself, or the logging or alerting mechanism the application
+  utilizes, must provide a warning when allocated audit record storage volume
+  reaches an organization-defined percentage of maximum audit record storage
+  capacity.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000103-DB-000050&#39;
+  tag &quot;gid&quot;: &#39;V-61643&#39;
+  tag &quot;rid&quot;: &#39;SV-76133r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67555r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001855&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS, OS, or third-party logging application settings to
+  determine whether a warning will be provided when a specific percentage of log
+  storage capacity is reached.
+
+  If no warning will be provided, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME     TOT_SIZE     TOT_FREE     PCT_FREE     MAX_FREE
+  CHUNKS_FREE
+   ------------------------      ------------   ------------    ------------
+  ------------       ------------
+  DES2                                 41,943,040   30,935,040       74
+         30,935,040        1
+  DES2_I                              31,457,280   23,396,352       74
+       23,396,352        1
+  RBS                                    60,817,408   57,085,952       94
+          52,426,752       16
+  SYSTEM                            94,371,840     5,386,240          6
+          5,013,504        3
+  TEMP                                      563,200         561,152      100
+                  133,120        5
+  TOOLS                             120,586,240   89,407,488       74
+     78,190,592       12
+  USERS                                   1,048,576          26,624          3
+                      26,624        1&quot;
+
+  describe &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS itself, or the logging or alerting mechanism the application
+    utilizes, provides a warning when allocated audit record storage volume
+    reaches an organization-defined percentage of maximum audit record storage
+    capacity.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61645</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide a real-time alert when organization-defined
+  audit failure events occur.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001858
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61645</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide a real-time alert when organization-defined
+  audit failure events occur.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61645&#39; do
+  title &quot;The system must provide a real-time alert when organization-defined
+  audit failure events occur.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include:  software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      If audit log capacity were to be exceeded, then events subsequently
+  occurring would not be recorded. Organizations shall define a maximum allowable
+  percentage of storage capacity serving as an alarming threshold (e.g.,
+  application has exceeded 80% of log storage capacity allocated) at which time
+  the application or the logging mechanism the application utilizes will provide
+  a warning to the appropriate personnel.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.  This can be
+  an alert provided by the database, a log repository, or the OS when a
+  designated log directory is nearing capacity.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000104-DB-000051&#39;
+  tag &quot;gid&quot;: &#39;V-61645&#39;
+  tag &quot;rid&quot;: &#39;SV-76135r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67559r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001858&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle Corp., OS, or third-party logging software
+  settings to determine whether a real-time alert will be sent to the appropriate
+  personnel when auditing fails for any reason.
+
+  If real-time alerts are not sent upon auditing failure, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure logging software to send a real-time alert to
+  appropriate personnel when auditing fails for any reason.
+
+  (Oracle recommends the use of Oracle Enterprise Manager.)&quot;
+  describe &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39; do
+    skip &#39;A manual review is required to ensure the system provides a real-time alert when organization-defined
+    audit failure events occur&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61647</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must alert designated organizational officials in the event
+  of an audit processing failure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-5 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000139
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61647</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must alert designated organizational officials in the event
+  of an audit processing failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-5 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61647&#39; do
+  title &quot;The system must alert designated organizational officials in the event
+  of an audit processing failure.&quot;
+  desc  &quot;It is critical for the appropriate personnel to be aware if a system
+  is at risk of failing to process audit logs as required. Audit processing
+  failures include: software&#x2F;hardware errors, failures in the audit capturing
+  mechanisms, and audit storage capacity being reached or exceeded.
+
+      A failure of database auditing will result in either the database
+  continuing to function without auditing or in a complete halt to database
+  operations. When audit processing fails, appropriate personnel must be alerted
+  immediately to avoid further downtime or unaudited transactions.
+
+      If Oracle Enterprise Manager is in use, the capability to issue such an
+  alert is built in and configurable via the console so an alert can be sent to a
+  designated administrator.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000108-DB-000048&#39;
+  tag &quot;gid&quot;: &#39;V-61647&#39;
+  tag &quot;rid&quot;: &#39;SV-76137r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67561r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000139&#39;]
+  tag &quot;nist&quot;: [&#39;AU-5 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review OS or third-party logging application settings to
+  determine whether an alert will be sent to the designated organizational
+  personnel when auditing fails for any reason.
+
+  If no alert will be sent, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify OS or third-party logging application settings to alert
+  designated organizational personnel when auditing fails for any reason.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an alert can be sent to a
+  designated administrator.&quot;
+  describe &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39; do
+    skip &#39;A manual review is required to ensure the system alerts designated organizational officials in the event
+    of an audit processing failure&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61649</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000158
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61649</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61649&#39; do
+  title &quot;The system must provide the capability to automatically process audit
+  records for events of interest based upon selectable event criteria.&quot;
+  desc &quot;Before a security review, information systems and&#x2F;or applications with
+  an audit reduction capability may remove many audit records known to have
+  little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis based on policy requirements regarding what must be audited
+  on the system and after-the-fact investigations of security incidents. It is
+  important to recognize audit reduction does not alter original audit records.
+
+      Audit reduction and reporting tools do not alter original audit records.
+
+      To leverage the complete capability of audit reduction, the application
+  must possess the ability to specify and automatically process certain event
+  criteria that are selectable in nature. In other words, a system administrator
+  (SA) may be performing a manual review of audit data to identify a particular
+  problem. The SA has determined that backup activity and network connections
+  from a particular host comprise the bulk of the events. However, these events
+  are not related to the activity being investigated. The application must be
+  able to automatically process these audit records for audit reduction purposes
+  rather than making the administrator manually process them.
+
+      The lack of audit reduction and reporting in a database can require the
+  DBA, or others responsible for reviewing audit logs, to sort through large
+  amounts of data in order to find relevant records. This can cause important
+  audit records to be missed.
+
+      Oracle offers the choice of storing audit data internally in database
+  tables, or in external files.  The WHERE clause in the SELECT statement
+  provides the necessary functionality for a table-based audit.  For an audit
+  based on external files (or for a table-based audit trail archived to external
+  files) Oracle Database does not provide tools for retrieving and managing the
+  data once written.  Therefore, an external tool is needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000055&#39;
+  tag &quot;gid&quot;: &#39;V-61649&#39;
+  tag &quot;rid&quot;: &#39;SV-76139r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-008900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67563r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the system (OS, applications external to Oracle, and&#x2F;or
+  a separate log aggregation and query server) to determine whether it provides
+  the ability to automatically process audit records for events based on
+  selectable event criteria. If the system does not provide these abilities, they
+  may be handled by a separate application.
+
+  If the ability to automatically process audit records for events based on
+  selectable event criteria does not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize a tool, application or service that provides the ability
+  to automatically process audit records for events based on selectable event
+  criteria.&quot;
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61651</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Attempts to bypass access controls must be audited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000158
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61651</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Attempts to bypass access controls must be audited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col &quot;tmp tba&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace &quot;TMP TBS&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61651&#39; do
+  title &#39;Attempts to bypass access controls must be audited.&#39;
+  desc  &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes:  timestamps, source and destination
+  addresses, user&#x2F;process identifiers, event descriptions, success&#x2F;fail
+  indications, file names involved, and access control or flow control rules
+  invoked.
+
+      Detection of suspicious activity, including access attempts and successful
+  access from unexpected places, during unexpected times, or other unusual
+  indicators can support decisions to apply countermeasures to deter an attack.
+  Without detection, malicious activity may proceed without hindrance.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000115-DB-000056&#39;
+  tag &quot;gid&quot;: &#39;V-61651&#39;
+  tag &quot;rid&quot;: &#39;SV-76141r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67565r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000158&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review any audit settings for:
+  - Unsuccessful logon attempts;
+  - Account locking events;
+  - Account disabling from a specific source location;
+  - Failed database object attempts or attempts to access objects that do not
+  exist; and
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions.
+
+  If any of the above events as applicable to the DBMS are not audited, this is a
+  finding.
+
+  - - - - - -
+  Check the current users in the database to see what profile they are assigned.
+  The logon attempts past a site-defined allowable number, along with account
+  locking, is best performed using a profile that defines the limits on these
+  activities as designed by the DBA at a specific site.  Failed database object
+  access or attempt to access objects is monitored by auditing.  Checking other
+  activities that may produce unexpected failures or trigger database lockdown
+  procedures is possible, but the check for the existence of those procedures is
+  not possible unless they are defined.
+
+  Check to see what profiles exist for the different users of the database.
+
+  SQL&gt;col name format a20
+      col username format a21
+      col profile format a10
+      col \&quot;tmp tba\&quot; format a10
+      select u.username,
+       u.default_tablespace,
+       u.temporary_tablespace \&quot;TMP TBS\&quot;,
+       u.profile,
+       r.granted_role,
+       r.admin_option,
+       r.default_role
+   from sys.dba_users u,
+        sys.dba_role_privs r
+   where  u.username &#x3D; r.grantee (+)
+   group by u.username,
+            u.default_tablespace,
+            u.temporary_tablespace,
+            u.profile,
+            r.granted_role,
+            r.admin_option,
+            r.default_role;
+
+  View existing profiles and see what their settings are.
+
+  SQL&gt; select profile, resource_name, limit
+       from dba_profiles
+       order by profile, resource_name;
+
+  This is the audit table.  Specific actions are logged in this table.
+
+  If Standard Auditing is used:
+  SQL&gt; desc aud$;
+   Name                           Null?         Type
+   -----------------             -------       ------
+   SESSIONID                     NOT NULL      NUMBER
+   ENTRYID                       NOT NULL      NUMBER
+   STATEMENT                     NOT NULL      NUMBER
+   TIMESTAMP#                                   DATE
+   USERID                                      VARCHAR2(30)
+   USERHOST                                    VARCHAR2(128)
+   TERMINAL                                    VARCHAR2(255)
+   ACTION#                       NOT NULL      NUMBER
+   RETURNCODE                    NOT NULL      NUMBER
+   OBJ$CREATOR                                 VARCHAR2(30)
+   OBJ$NAME                                    VARCHAR2(128)
+   AUTH$PRIVILEGES                             VARCHAR2(16)
+   AUTH$GRANTEE                                VARCHAR2(30)
+   NEW$OWNER                                   VARCHAR2(30)
+   NEW$NAME                                    VARCHAR2(128)
+   SES$ACTIONS                                 VARCHAR2(19)
+   SES$TID                                     NUMBER
+   LOGOFF$LREAD                                NUMBER
+   LOGOFF$PREAD                                NUMBER
+   LOGOFF$LWRITE                               NUMBER
+   LOGOFF$DEAD                                 NUMBER
+   LOGOFF$TIME                                 DATE
+   COMMENT$TEXT                                VARCHAR2(4000)
+   CLIENTID                                    VARCHAR2(64)
+   SPARE1                                      VARCHAR2(255)
+   SPARE2                                      NUMBER
+   OBJ$LABEL                                   RAW(255)
+   SES$LABEL                                   RAW(255)
+   PRIV$USED                                   NUMBER
+   SESSIONCPU                                  NUMBER
+   NTIMESTAMP#                                 TIMESTAMP(6)
+   PROXY$SID                                   NUMBER
+   USER$GUID                                   VARCHAR2(32)
+   INSTANCE#                                   NUMBER
+   PROCESS#                                    VARCHAR2(16)
+   XID                                         RAW(8)
+   AUDITID                                     VARCHAR2(64)
+   SCN                                         NUMBER
+   DBID                                        NUMBER
+   SQLBIND                                     CLOB
+   SQLTEXT                                     CLOB
+   OBJ$EDITION                                 VARCHAR2(30)
+
+  If Unified Auditing is used:
+  SQL&gt; desc unified_audit_trail;
+  Name              Null     Type
+  --------------   ------   ------
+  AUDIT_TYPE                VARCHAR2(64)
+  SESSIONID                 NUMBER
+  PROXY_SESSIONID           NUMBER
+  OS_USERNAME               VARCHAR2(30)
+  USERHOST                  VARCHAR2(128)
+  TERMINAL                  VARCHAR2(30)
+  INSTANCE_ID               NUMBER
+  DBID                      NUMBER
+  AUTHENTICATION_TYPE       VARCHAR2(1024)
+  DBUSERNAME                VARCHAR2(30)
+  DBPROXY_USERNAME          VARCHAR2(30)
+  EXTERNAL_USERID           VARCHAR2(1024)
+  GLOBAL_USERID             VARCHAR2(32)
+  CLIENT_PROGRAM_NAME       VARCHAR2(48)
+  DBLINK_INFO               VARCHAR2(4000)
+  XS_USER_NAME              VARCHAR2(128)
+  XS_SESSIONID              RAW(33 BYTE)
+  ENTRY_ID                  NUMBER
+  STATEMENT_ID              NUMBER
+  EVENT_TIMESTAMP           TIMESTAMP(6) WITH LOCAL TIME ZONE
+  ACTION_NAME               VARCHAR2(64)
+  RETURN_CODE               NUMBER
+  OS_PROCESS                VARCHAR2(16)
+  TRANSACTION_ID            RAW(8 BYTE)
+  SCN                       NUMBER
+  EXECUTION_ID              VARCHAR2(64)
+  OBJECT_SCHEMA             VARCHAR2(30)
+  OBJECT_NAME               VARCHAR2(128)
+  SQL_TEXT                  CLOB
+  SQL_BINDS                 CLOB
+  APPLICATION_CONTEXTS      VARCHAR2(4000)
+  CLIENT_IDENTIFIER         VARCHAR2(64)
+  NEW_SCHEMA                VARCHAR2(30)
+  NEW_NAME                  VARCHAR2(128)
+  OBJECT_EDITION            VARCHAR2(30)
+  SYSTEM_PRIVILEGE_USED     VARCHAR2(1024)
+  SYSTEM_PRIVILEGE          VARCHAR2(40)
+  AUDIT_OPTION              VARCHAR2(40)
+  OBJECT_PRIVILEGES         VARCHAR2(19)
+  ROLE                      VARCHAR2(30)
+  TARGET_USER               VARCHAR2(30)
+  EXCLUDED_USER             VARCHAR2(30)
+  EXCLUDED_SCHEMA           VARCHAR2(30)
+  EXCLUDED_OBJECT           VARCHAR2(128)
+  ADDITIONAL_INFO           VARCHAR2(4000)
+  UNIFIED_AUDIT_POLICIES    VARCHAR2(4000)
+  FGA_POLICY_NAME           VARCHAR2(30)
+  XS_INACTIVITY_TIMEOUT     NUMBER
+  XS_ENTITY_TYPE            VARCHAR2(32)
+  XS_TARGET_PRINCIPAL_NAME  VARCHAR2(30)
+  XS_PROXY_USER_NAME        VARCHAR2(30)
+  XS_DATASEC_POLICY_NAME    VARCHAR2(30)
+  XS_SCHEMA_NAME            VARCHAR2(30)
+  XS_CALLBACK_EVENT_TYPE    VARCHAR2(32)
+  XS_PACKAGE_NAME           VARCHAR2(30)
+  XS_PROCEDURE_NAME         VARCHAR2(30)
+  XS_ENABLED_ROLE           VARCHAR2(30)
+  XS_COOKIE                 VARCHAR2(1024)
+  XS_NS_NAME                VARCHAR2(30)
+  XS_NS_ATTRIBUTE           VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_OLD_VAL   VARCHAR2(4000)
+  XS_NS_ATTRIBUTE_NEW_VAL   VARCHAR2(4000)
+  DV_ACTION_CODE            NUMBER
+  DV_ACTION_NAME            VARCHAR2(30)
+  DV_EXTENDED_ACTION_CODE   NUMBER
+  DV_GRANTEE                VARCHAR2(30)
+  DV_RETURN_CODE            NUMBER
+  DV_ACTION_OBJECT_NAME     VARCHAR2(128)
+  DV_RULE_SET_NAME          VARCHAR2(90)
+  DV_COMMENT                VARCHAR2(4000)
+  DV_FACTOR_CONTEXT         VARCHAR2(4000)
+  DV_OBJECT_STATUS          VARCHAR2(1)
+  OLS_POLICY_NAME           VARCHAR2(30)
+  OLS_GRANTEE               VARCHAR2(30)
+  OLS_MAX_READ_LABEL        VARCHAR2(4000)
+  OLS_MAX_WRITE_LABEL       VARCHAR2(4000)
+  OLS_MIN_WRITE_LABEL       VARCHAR2(4000)
+  OLS_PRIVILEGES_GRANTED    VARCHAR2(30)
+  OLS_PROGRAM_UNIT_NAME     VARCHAR2(30)
+  OLS_PRIVILEGES_USED       VARCHAR2(128)
+  OLS_STRING_LABEL          VARCHAR2(4000)
+  OLS_LABEL_COMPONENT_TYPE  VARCHAR2(12)
+  OLS_LABEL_COMPONENT_NAME  VARCHAR2(30)
+  OLS_PARENT_GROUP_NAME     VARCHAR2(30)
+  OLS_OLD_VALUE             VARCHAR2(4000)
+  OLS_NEW_VALUE             VARCHAR2(4000)
+  RMAN_SESSION_RECID        NUMBER
+  RMAN_SESSION_STAMP        NUMBER
+  RMAN_OPERATION            VARCHAR2(20)
+  RMAN_OBJECT_TYPE          VARCHAR2(20)
+  RMAN_DEVICE_TYPE          VARCHAR2(5)
+  DP_TEXT_PARAMETERS1       VARCHAR2(512)
+  DP_BOOLEAN_PARAMETERS1    VARCHAR2(512)
+  DIRECT_PATH_NUM_COLUMNS_LOADED NUMBER&quot;
+  tag &quot;fix&quot;: &quot;Configure auditing to capture the events listed below where
+  available in the DBMS:
+  - Unsuccessful logon attempts
+  - Account locking events
+  - Account disabling from a specific source location
+  - Failed database object attempts or attempts to access objects that do not
+  exist
+  - Other activities that may produce unexpected failures or trigger DBMS
+  lockdown actions&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+  audit_info_captured &#x3D; sql.query(&#39;SELECT * FROM UNIFIED_AUDIT_TRAIL;&#39;).column(&#39;EVENT_TIMESTAMP&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+
+    describe &#39;The oracle database unified auditing events captured&#39; do
+      subject { audit_info_captured }
+      it { should_not be_empty }
+    end
+
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61653</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from any type of
+  unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000162
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61653</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from any type of
+  unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61653&#39; do
+  title &quot;The system must protect audit information from any type of
+  unauthorized access.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is difficult, if not impossible, to achieve. In addition, access to
+  audit records provides information an attacker could potentially use to his or
+  her advantage.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from any and all unauthorized
+  access. This includes read, write, copy, etc.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions utilizing file
+  system protections and limiting log data location.
+
+      Additionally, applications with user interfaces to audit records must not
+  allow for the unfettered manipulation of or access to those records via the
+  application. If the application provides access to the audit data, the
+  application becomes accountable for ensuring that audit information is
+  protected from unauthorized access.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000118-DB-000059&#39;
+  tag &quot;gid&quot;: &#39;V-61653&#39;
+  tag &quot;rid&quot;: &#39;SV-76143r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67567r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000162&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized access.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL        Description
+  GRANTEE     VARCHAR2(30)  NOT NULL   Name of the user to whom access was granted
+  OWNER       VARCHAR2(30)  NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)  NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)  NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)  NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)   Indicates whether the privilege was granted with the
+  HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype        NULL       Description
+  GRANTEE     VARCHAR2(30)    NOT NULL   Name of the user to whom access was
+  granted
+  OWNER       VARCHAR2(30)    NOT NULL   Owner of the object
+  TABLE_NAME  VARCHAR2(30)    NOT NULL   Name of the object
+  GRANTOR     VARCHAR2(30)    NOT NULL   Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40)    NOT NULL   Privilege on the object
+  GRANTABLE   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)     Indicates whether the privilege was granted with
+  the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized access, whether stored in the database itself or at the
+  OS level.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61655</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from unauthorized
+  modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000163
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61655</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from unauthorized
+  modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61655&#39; do
+  title &quot;The system must protect audit information from unauthorized
+  modification.&quot;
+  desc &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data, the information system and&#x2F;or the
+  application must protect audit information from unauthorized modification.
+
+      This requirement can be achieved through multiple methods which will depend
+  upon system architecture and design. Some commonly employed methods include
+  ensuring log files enjoy the proper file system permissions and limiting log
+  data locations.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights that the user enjoys in order to make access decisions
+  regarding the modification of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Modification of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000119-DB-000060&#39;
+  tag &quot;gid&quot;: &#39;V-61655&#39;
+  tag &quot;rid&quot;: &#39;SV-76145r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67569r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000163&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized modification.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+              VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NA    VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized modification, whether stored in the database itself or
+  at the OS level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61657</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit information from unauthorized deletion.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000164
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61657</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit information from unauthorized deletion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see &quot;SQL standard authorization&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61657&#39; do
+  title &#39;The system must protect audit information from unauthorized deletion.&#39;
+  desc  &quot;If audit data were to become compromised, then competent forensic
+  analysis and discovery of the true source of potentially malicious system
+  activity is impossible to achieve.
+
+      To ensure the veracity of audit data the information system and&#x2F;or the
+  application must protect audit information from unauthorized deletion. This
+  requirement can be achieved through multiple methods which will depend upon
+  system architecture and design.
+
+      Some commonly employed methods include:  ensuring log files enjoy the
+  proper file system permissions utilizing file system protections; restricting
+  access; and backing up log data to ensure log data is retained.
+
+      Applications providing a user interface to audit data will leverage user
+  permissions and roles identifying the user accessing the data and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the deletion of audit data.
+
+      Audit information includes all information (e.g., audit records, audit
+  settings, and audit reports) needed to successfully audit information system
+  activity.
+
+      Deletion of database audit data could mask the theft of, or the
+  unauthorized modification of, sensitive data stored in the database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000120-DB-000061&#39;
+  tag &quot;gid&quot;: &#39;V-61657&#39;
+  tag &quot;rid&quot;: &#39;SV-76147r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67571r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000164&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review locations of audit logs, both internal to the database
+  and database audit logs located at the operating system-level. Verify there are
+  appropriate controls and permissions to protect the audit information from
+  unauthorized deletion.
+
+  If appropriate controls and permissions do not exist, this is a finding.
+
+  - - - - -
+  If Standard Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUD$ table.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where table_name &#x3D; &#39;AUD$&#39;;
+
+  If Unified Auditing is used:
+  DBA_TAB_PRIVS describes all object grants in the database.  Check to see who
+  has permissions on the AUDSYS tables.
+
+  Related View
+
+  DBA_TAB_PRIVS describes the object grants for which the current user is the
+  object owner, grantor, or grantee.
+
+  Column      Datatype     NULL      Description
+  GRANTEE     VARCHAR2(30) NOT NULL  Name of the user to whom access was granted
+  OWNER       VARCHAR2(30) NOT NULL  Owner of the object
+  TABLE_NAME  VARCHAR2(30) NOT NULL  Name of the object
+  GRANTOR     VARCHAR2(30) NOT NULL  Name of the user who performed the grant
+  PRIVILEGE   VARCHAR2(40) NOT NULL  Privilege on the object
+  GRANTABLE   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the GRANT OPTION (YES) or not (NO)
+  HIERARCHY   VARCHAR2(3)            Indicates whether the privilege was granted
+  with the HIERARCHY OPTION (YES) or not (NO)
+  COMMON      VARCHAR2(3)
+  TYPE        VARCHAR2(24)
+
+  sqlplus connect as sysdba;
+
+  SQL&gt;  SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+        FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Add controls and modify permissions to protect database audit log
+  data from unauthorized deletion, whether stored in the database itself or at
+  the OS-level.
+
+  - - - - -
+  If Standard Auditing is used:
+  Revoke access to the AUD$ table to anyone who should not have access to it.
+
+  In the check we looked for all users who had access to the AUD$ table. To fix
+  this, use the REVOKE command to revoke access to users who should not have
+  access to the audit data.
+
+  REVOKE statement
+
+  Use the REVOKE statement to remove permissions from a specific user or from all
+  users to perform actions on database objects.
+  The following types of permissions can be revoked:
+
+      Delete data from a specific table.
+      Insert data into a specific table.
+      Create a foreign key reference to the named table or to a subset of columns
+  from a table.
+      Select data from a table, view, or a subset of columns in a table.
+      Create a trigger on a table.
+      Update data in a table or in a subset of columns in a table.
+      Run a specified routine (function or procedure).
+
+  If a user named FRED had access to the AUD$ table and wanting to revoke that
+  access, use the following command. The syntax that would be used for the REVOKE
+  statement for tables is as follows:
+
+  REVOKE privilege-type ON [ TABLE ] { table-Name | view-Name } FROM grantees
+
+  SQL&gt;REVOKE SELECT ON TABLE AUD$ FROM FRED;
+
+  Revoking a privilege without specifying a column list revokes the privilege for
+  all of the columns in the table.
+  Syntax for routines
+
+  table-privileges include
+
+    DELETE |
+    INSERT |
+    REFERENCES [column list] |
+    SELECT [column list] |
+    TRIGGER |
+    UPDATE [column list]
+
+  column list
+
+    ( column-identifier {, column-identifier}* )
+
+  Use the ALL PRIVILEGES privilege type to revoke all of the permissions from the
+  user for the specified table. Can also revoke one or more table privileges by
+  specifying a privilege-list.
+
+  Use the DELETE privilege type to revoke permission to delete rows from the
+  specified table.
+
+  Use the INSERT privilege type to revoke permission to insert rows into the
+  specified table.
+
+  Use the REFERENCES privilege type to revoke permission to create a foreign key
+  reference to the specified table. If a column list is specified with the
+  REFERENCES privilege, the permission is revoked on only the foreign key
+  reference to the specified columns.
+
+  Use the SELECT privilege type to revoke permission to perform SELECT statements
+  on a table or view. If a column list is specified with the SELECT privilege,
+  the permission is revoked on only those columns. If no column list is
+  specified, then the privilege is valid on all of the columns in the table.
+
+  Use the TRIGGER privilege type to revoke permission to create a trigger on the
+  specified table.
+
+  Use the UPDATE privilege type to revoke permission to use the UPDATE statement
+  on the specified table. If a column list is specified, the permission is
+  revoked only on the specified columns.
+  grantees
+
+    { authorization ID | PUBLIC } [,{ authorization ID | PUBLIC } ] *
+
+  Can revoke the privileges from specific users or from all users. Use the
+  keyword PUBLIC to specify all users. The privileges revoked from PUBLIC and
+  from individual users are independent privileges. For example, a SELECT
+  privilege on table t is granted to both PUBLIC and to the authorization ID
+  harry. The SELECT privilege is later revoked from the authorization ID &#39;Harry&#39;,
+  but the authorization ID &#39;Harry&#39; can access the table through the PUBLIC
+  privilege.
+
+  Restriction: Cannot revoke the privileges of the owner of an object.
+  routine-designator
+
+    {
+     qualified-name [ signature ]
+    }
+
+  Cascading object dependencies
+
+  For views, triggers, and constraints, if the privilege on which the object
+  depends is revoked, the object is automatically dropped. Derby does not try to
+  determine if there are  other privileges that can replace the privileges that
+  are being revoked. For more information, see \&quot;SQL standard authorization\&quot; in
+  the Java DB Developer&#39;s Guide.
+  Limitations
+
+  The following limitations apply to the REVOKE statement:
+
+  Table-level privileges:
+
+  All of the table-level privilege types for a specified grantee and table ID are
+  stored in one row in the SYSTABLEPERMS system table. For example, when user2 is
+  granted the SELECT and DELETE privileges on table user1.t1, a row is added to
+  the SYSTABLEPERMS table. The GRANTEE field contains user2 and the TABLEID
+  contains user1.t1. The SELECTPRIV and DELETEPRIV fields are set to Y. The
+  remaining privilege type fields are set to N.
+
+  When a grantee creates an object that relies on one of the privilege types, the
+  Derby engine tracks the dependency of the object on the specific row in the
+  SYSTABLEPERMS table. For example, user2 creates the view v1 by using the
+  statement SELECT * FROM user1.t1; the dependency manager tracks the dependency
+  of view v1 on the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1).
+  The dependency manager knows only that the view is dependent on a privilege
+  type in that specific row but does not track exactly which privilege type the
+  view is dependent on.
+
+  When a REVOKE statement for a table-level privilege is issued for a grantee and
+  table ID, all of the objects that are dependent on the grantee and table ID are
+  dropped. For example, if user1 revokes the DELETE privilege on table t1 from
+  user2, the row in SYSTABLEPERMS for GRANTEE(user2), TABLEID(user1.t1) is
+  modified by the REVOKE statement. The dependency manager sends a revoke
+  invalidation message to the view user2.v1, and the view is dropped, even though
+  the view is not dependent on the DELETE privilege for GRANTEE(user2),
+  TABLEID(user1.t1).
+
+  Column-level privileges:
+
+  Only one type of privilege for a specified grantee and table ID are stored in
+  one row in the SYSCOLPERMS system table. For example, when user2 is granted the
+  SELECT privilege on table user1.t1 for columns c12 and c13, a row is added to
+  the SYSCOLPERMS. The GRANTEE field contains user2, the TABLEID contains
+  user1.t1, the TYPE field contains S, and the COLUMNS field contains c12, c13.
+
+  When a grantee creates an object that relies on the privilege type and the
+  subset of columns in a table ID, the Derby engine tracks the dependency of the
+  object on the specific row in the SYSCOLPERMS table. For example, user2 creates
+  the view v1 by using the statement SELECT c11 FROM user1.t1; the dependency
+  manager tracks the dependency of view v1 on the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S). The dependency manager knows that
+  the view is dependent on the SELECT privilege type but does not track exactly
+  which columns the view is dependent on.
+
+  When a REVOKE statement for a column-level privilege is issued for a grantee,
+  table ID, and type, all of the objects that are dependent on the grantee, table
+  ID, and type are dropped. For example, if user1 revokes the SELECT privilege on
+  column c12 on table user1.t1 from user2, the row in SYSCOLPERMS for
+  GRANTEE(user2), TABLEID(user1.t1), TYPE(S) is modified by the REVOKE statement.
+  The dependency manager sends a revoke invalidation message to the view
+  user2.v1, and the view is dropped, even though the view is not dependent on the
+  column c12 for GRANTEE(user2), TABLEID(user1.t1), TYPE(S).
+
+  If Unified Auditing is used:
+
+  Apply the same process used in standard auditing to the tables with AUDSYS as
+  the owner.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61659</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001493
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61659</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61659&#39; do
+  title &#39;The system must protect audit tools from unauthorized access.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data. It is, therefore, imperative that access to audit tools be
+  controlled and protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000121-DB-000202&#39;
+  tag &quot;gid&quot;: &#39;V-61659&#39;
+  tag &quot;rid&quot;: &#39;SV-76149r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67573r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001493&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls to prevent unauthorized access
+  are not applied to these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be accessible by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61661</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized modification.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001494
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61661</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61661&#39; do
+  title &#39;The system must protect audit tools from unauthorized modification.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      If the tools are compromised it could provide attackers with the capability
+  to manipulate log data. It is, therefore, imperative that audit tools be
+  controlled and protected from unauthorized modification.
+
+      Audit tools include, but are not limited to, OS provided audit tools,
+  vendor provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself. An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000122-DB-000203&#39;
+  tag &quot;gid&quot;: &#39;V-61661&#39;
+  tag &quot;rid&quot;: &#39;SV-76151r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67575r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001494&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized modification of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Tools must be modifiable by authorized personnel
+  only.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61663</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must protect audit tools from unauthorized deletion.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001495
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61663</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must protect audit tools from unauthorized deletion.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61663&#39; do
+  title &#39;The system must protect audit tools from unauthorized deletion.&#39;
+  desc  &quot;Protecting audit data also includes identifying and protecting the
+  tools used to view and manipulate log data.
+
+      Depending upon the log format and application, system and application log
+  tools may provide the only means to manipulate and manage application and
+  system log data.
+
+      It is, therefore, imperative that access to audit tools be controlled and
+  protected from unauthorized access.
+
+      Applications providing tools to interface with audit data will leverage
+  user permissions and roles identifying the user accessing the tools and the
+  corresponding rights the user enjoys in order make access decisions regarding
+  the access to audit tools.
+
+      Audit tools include, but are not limited to, OS-provided audit tools,
+  vendor-provided audit tools, and open source audit tools needed to successfully
+  view and manipulate audit information system activity and records.
+
+      If an attacker were to gain access to audit tools, he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000123-DB-000204&#39;
+  tag &quot;gid&quot;: &#39;V-61663&#39;
+  tag &quot;rid&quot;: &#39;SV-76153r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-009800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67577r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001495&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review access permissions to tools used to view or modify audit
+  log data. These tools may include the DBMS itself or tools external to the
+  database.
+
+  If appropriate permissions and access controls are not applied to prevent
+  unauthorized deletion of these tools, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Add or modify access controls and permissions to tools used to
+  view or modify audit log data. Only authorized personnel must be able to delete
+  these tools.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61665</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001348
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61665</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61665&#39; do
+  title &quot;The DBMS must support the requirement to back up audit data and
+  records onto a different system or media than the system being audited on an
+  organization-defined frequency.&quot;
+  desc &quot;Protection of log data includes assuring log data is not accidentally
+  lost or deleted. Backing up audit records to a different system or onto media
+  separate from the system being audited on an organizational-defined frequency
+  helps to assure, in the event of a catastrophic system failure, the audit
+  records will be retained.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000125-DB-000170&#39;
+  tag &quot;gid&quot;: &#39;V-61665&#39;
+  tag &quot;rid&quot;: &#39;SV-76155r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67579r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001348&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check with the database administrator, storage administrator or
+  system administrator, as applicable at the site, to verify that Oracle is
+  configured EITHER to perform backups of the audit data specifically, OR, with
+  appropriate permissions granted, to permit a third-party tool to do so.  Test
+  the backup process.  Test the restore process (using a non-production system as
+  the target).
+
+  If Oracle is not so configured, this is a finding.
+
+  If the test run of the backup and restore fails, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS features or other software that supports the ability
+  to back up audit data and records onto a system or media different from the
+  system being audited on an organization-defined frequency.
+
+  EITHER use Oracle features (such as Backup or Data Pump) to perform backups of
+  the audit data specifically, OR grant appropriate permissions to permit a
+  third-party tool to do so.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the requirement to back up audit data and
+    records onto a different system or media than the system being audited on an
+    organization-defined frequency&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61667</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001350
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61667</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY &quot;password&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61667&#39; do
+  title &quot;The DBMS must protect audit data records and integrity by using
+  cryptographic mechanisms.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Cryptographic mechanisms are the industry-established standard used to protect
+  the integrity of audit data. An example of a cryptographic mechanism is the
+  computation and application of a cryptographic-signed hash using asymmetric
+  cryptography.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having performed a particular action, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000126-DB-000171&#39;
+  tag &quot;gid&quot;: &#39;V-61667&#39;
+  tag &quot;rid&quot;: &#39;SV-76157r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67581r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001350&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings to determine whether audit logging is
+  configured to produce logs consistent with the amount of space allocated for
+  logging.
+
+  If auditing will generate excessive logs so that they may outgrow the space
+  reserved for logging, this is a finding.
+
+  If file-based auditing is in use, check that the file(s) is&#x2F;are encrypted by
+  the operating system&#x2F;file system.
+
+  If not, this is a finding
+
+  If standard, table-based auditing is used:  The audit logs are written to a
+  table called AUD$, and if a Virtual Private Database is deployed, we also
+  create a table called FGA_LOG$.  First check the current location of the audit
+  trail tables.
+
+      CONN &#x2F; AS SYSDBA
+
+      SELECT table_name, tablespace_name
+      FROM   dba_tables
+      WHERE  table_name IN (&#39;AUD$&#39;, &#39;FGA_LOG$&#39;)
+      ORDER BY table_name;
+
+      TABLE_NAME                     TABLESPACE_NAME
+      ------------------------------ ------------------------------
+      AUD$                           SYSTEM
+      FGA_LOG$                       SYSTEM
+
+  If the tablespace name is SYSTEM, the table needs to be relocated to its own
+  tablespace. Ensure that adequate space is allocated to that tablespace.
+
+  If Unified Auditing is used:
+  Audit logs are written to tables in the AUDSYS schema. The default tablespace
+  for AUDSYS is USERS. A separate tablespace should be created to contain audit
+  data. Ensure that adequate space is allocated to that tablespace.&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing (OS, XML, or XML,EXTENDED), implement
+  operating system&#x2F;file system encryption for the audit file.
+
+  For table-based auditing, deploy the audit tables in an encrypted tablespace.
+
+  - - - - -
+  If auditing is not enabled, use the following steps to enable auditing.
+
+  sqlplus connect as sysdba
+
+  Turn on Oracle audit
+
+  a. If the database uses an spfile
+
+  SQL&gt; alter system set audit_trail&#x3D;DB,EXTENDED scope&#x3D;spfile ;
+  System altered.
+
+  b. if database uses pfile, modify init&lt;Sid&gt;.ora directly.
+  For these changes to take place, the database must be restarted.
+
+  Next we create an encrypted tablespace. Before tablespaces can be encrypted or
+  decrypted, a master encryption key must be generated or set. The tablespace
+  master encryption key is stored in an external security module and is used to
+  encrypt the TDE tablespace encryption keys.
+
+  - - - - -
+
+  Caution: Do not attempt to encrypt Oracle internal objects such as the SYSTEM,
+  SYSAUX, UNDO, or TEMP tablespaces.  Oracle does not support this with TDE.
+  When moving AUD$ to a new tablespace, be aware that associated LOB objects will
+  also need to be moved. Finally, when upgrading, the AUD$ table and LOBs will
+  need to be moved back to the SYSTEM tablespace or the upgrade will fail.
+
+  - - - - -
+
+  Check to ensure that the ENCRYPTION_WALLET_LOCATION (or WALLET_LOCATION)
+  parameter in the sqlnet.ora file points to the correct software wallet
+  location. (Note: This assumes that a single sqlnet.ora file, in the default
+  location, is in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.) For example:
+
+  ENCRYPTION_WALLET_LOCATION&#x3D;
+  (SOURCE&#x3D;(METHOD&#x3D;FILE)(METHOD_DATA&#x3D;
+  (DIRECTORY&#x3D;&#x2F;app&#x2F;wallet)))
+
+  If the ENCRYPTION_WALLET_LOCATION parameter is not set, then it attempts to use
+  the keystore in the location that is specified by the parameter WALLET_LOCATION.
+
+  If the WALLET_LOCATION parameter is also not set, then Oracle Database looks
+  for a keystore at the default database location, which is
+  ORACLE_BASE&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet or
+  ORACLE_HOME&#x2F;admin&#x2F;DB_UNIQUE_NAME&#x2F;wallet. (DB_UNIQUE_NAME is the unique name of
+  the database specified in the initialization parameter file.) When the keystore
+  location is not set in the sqlnet.ora file, then the V$ENCRYPTION_WALLET view
+  displays the default location. Can check the location and status of the
+  keystore in the V$ENCRYPTION_WALLET view.
+
+  Oracle Database 12c Release 1 (12.1) uses the same master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When issuing the
+  ALTER SYSTEM SET ENCRYPTION KEY command, a unified master encryption key is
+  created for both TDE column encryption and TDE tablespace encryption.
+
+  Resetting the Tablespace Master Encryption Key
+
+  Oracle Database 12c Release 1 (12.1) uses a unified master encryption key for
+  both TDE column encryption and TDE tablespace encryption. When resetting
+  (rekeying) the master encryption key for TDE column encryption, the master
+  encryption key for TDE tablespace encryption also gets reset. The ALTER SYSTEM
+  SET ENCRYPTION KEY command resets the tablespace master encryption key. Before
+  creating an encrypted tablespace, the Oracle wallet containing the tablespace
+  master encryption key must be open. The wallet must also be open before
+  accessing data in an encrypted tablespace. The security administrator needs to
+  open the Oracle wallet after starting the Oracle instance. A restart of the
+  Oracle instance requires the security administrator to open the wallet again.
+  The security administrator also needs to open the wallet before performing
+  database recovery operations. This is because background processes may require
+  access to encrypted redo and undo logs. When performing database recovery, the
+  wallet must be opened before opening the database. This is illustrated in the
+  following statements:
+
+  SQL&gt; STARTUP MOUNT;
+  SQL&gt; ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY \&quot;password\&quot;;
+  SQL&gt; ALTER DATABASE OPEN;
+
+  Can also choose to use auto logon wallets if the environment does not require
+  the extra security provided by a wallet that needs to be explicitly opened;
+  however, this is not the recommended practice.
+
+  Creating the wallet&#x2F;keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT CREATE KEYSTORE &#39;&#x2F;app&#x2F;wallet&#39; IDENTIFIED BY
+  password;
+
+  keystore altered.
+
+  Set the TDE Master Encryption Key in the Software Keystore
+
+  SQL&gt; ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY password WITH BACKUP USING
+  &#39;backup_identifier&#39;;
+
+  keystore altered.
+
+  Creating an Encrypted Tablespace
+
+  The CREATE TABLESPACE command enables the creation of an encrypted tablespace.
+  The permanent_tablespace_clause enables choosing the encryption algorithm and
+  the key length for encryption. The ENCRYPT keyword in the storage_clause
+  encrypts the tablespace. The following syntax illustrates this:
+
+  CREATE
+  [ BIGFILE | SMALLFILE ]
+  { permanent_tablespace_clause
+  | temporary_tablespace_clause
+  | undo_tablespace_clause
+  } ;
+
+  Where, permanent_tablespace_clause&#x3D;TABLESPACE , ENCRYPTION [USING algorithm]
+  storage_clause
+  Where, storage_clause&#x3D;[ENCRYPT] where:
+
+  The encryption algorithm can have one of the following values:
+
+  3DES168
+  AES128
+  AES192
+  AES256
+
+  The key lengths are included in the names of the algorithms themselves. If no
+  encryption algorithm is specified, the default encryption algorithm is used.
+  The default encryption algorithm is AES128.
+
+  Note: The ENCRYPTION keyword in the permanent_tablespace_clause is used to
+  specify the encryption algorithm. The ENCRYPT keyword in the storage_clause
+  actually encrypts the tablespace. For security reasons, a tablespace cannot be
+  encrypted with the NO SALT option.
+
+  Commands to create Encrypted Tablespace
+
+  CREATE TABLESPACE securespace
+  DATAFILE &#39;&#x2F;home&#x2F;user&#x2F;oradata&#x2F;secure01.dbf&#39;
+  SIZE 150M
+  ENCRYPTION USING &#39;3DES168&#39;
+  DEFAULT STORAGE(ENCRYPT);
+
+  This creates a tablespace called securespace2 using an algorithm of 3DES168.
+
+  Cannot encrypt an existing tablespace. However, can import data into an
+  encrypted tablespace using the Oracle Data Pump utility. Can also use SQL
+  commands like CREATE TABLE...AS SELECT...or ALTER TABLE...MOVE... to move data
+  into an encrypted tablespace. The CREATE TABLE...AS SELECT... command enables
+  the creation of a table from an existing table. The ALTER TABLE...MOVE...
+  command enables the move of a table into the encrypted tablespace.
+
+  Then we move the sys.aud$ from system tablespace to securespace tablespace.
+
+  SQL&gt; exec DBMS_AUDIT_MGMT.SET_AUDIT_TRAIL_LOCATION(audit_trail_type &#x3D;&gt;
+  DBMS_AUDIT_MGMT.AUDIT_TRAIL_AUD_STD, audit_trail_location_value &#x3D;&gt;
+  &#39;securespace&#39;);
+
+  PL&#x2F;SQL procedure successfully completed.
+
+  Then check the tablespace the table is stored in.
+
+  SQL&gt; SELECT table_name, tablespace_name FROM dba_tables WHERE table_name
+  &#x3D;&#39;AUD$&#39;;
+
+  TABLE_NAME TABLESPACE_NAME
+  ---------------------------- ------------------------
+  AUD$ SECURESPACE&quot;
+  describe &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must protect audit data records and integrity by using
+    cryptographic mechanisms&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61669</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-9 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001351
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">There are no oracle users allowed access to audit information, control N&#x2F;A</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61669</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-9 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61669&#39; do
+  title &quot;The DBMS must protect the audit records generated, as a result of
+  remote access to privileged accounts, and the execution of privileged
+  functions.&quot;
+  desc &quot;Protection of audit records and audit data is of critical importance.
+  Care must be taken to ensure privileged users cannot circumvent audit
+  protections put in place.
+
+      Auditing might not be reliable when performed by an information system
+  which the user being audited has privileged access to.
+
+      The privileged user could inhibit auditing or directly modify audit
+  records. To prevent this from occurring, privileged access shall be further
+  defined between audit-related privileges and other privileges, thus limiting
+  the users with audit-related privileges.
+
+      Reducing the risk of audit compromises by privileged users can also be
+  achieved, for example, by performing audit activity on a separate information
+  system where the user in question has limited access or by using storage media
+  that cannot be modified (e.g., write-once recording devices).
+
+      If an attacker were to gain access to audit tools he could analyze audit
+  logs for system weaknesses or weaknesses in the auditing itself.  An attacker
+  could also manipulate logs to hide evidence of malicious activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000127-DB-000172&#39;
+  tag &quot;gid&quot;: &#39;V-61669&#39;
+  tag &quot;rid&quot;: &#39;SV-76159r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67583r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-001351&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AU-9 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+  For table-based auditing (DB or DB,EXTENDED), review the DBMS permissions on
+  the views and base tables holding the audit data.
+
+  For file-based auditing (OS, XML, or XML,EXTENDED), review the operating
+  system&#x2F;file system permissions on the audit file(s).
+
+  If permissions exist that enable unauthorized users to view audit data, this is
+  a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_ADMIN role. This role enables the creation of unified and fine-grained
+  audit policies, use the AUDIT and NOAUDIT SQL statements, view audit data, and
+  manage the audit trail administration. Grant this role only to trusted users.
+
+
+
+
+  AUDIT_VIEWER role. This role enables users to view and analyze audit data. The
+  kind of user who needs this role is typically an external auditor.
+
+  Check to ensure the authorized users have the correct roles. If permissions
+  exist that enable unauthorized users to view audit data, this is a finding.
+
+  If permissions exist that enable any user (other than an account created
+  specifically to manage log space and off-load audit records to a log management
+  system) to modify or delete audit records, or create spurious audit records,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If Standard Auditing is used:
+  Add controls and modify permissions to protect database audit log records from
+  modification, deletion, spurious creation, or unauthorized viewing.
+
+  If Unified Auditing is used:
+  Grant the correct Audit roles to authorized users.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  users_allowed_access_to_audit_info &#x3D; sql.query(&quot;SELECT GRANTEE, TABLE_NAME, PRIVILEGE
+      FROM DBA_TAB_PRIVS where owner&#x3D;&#39;AUDSYS&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if users_allowed_access_to_audit_info.empty?
+    impact 0.0
+    describe &#39;There are no oracle users allowed access to audit information, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle users allowed access to audit information&#39;
+    end
+  else
+    users_allowed_access_to_audit_info.each do |user|
+      describe &quot;oracle users: #{user} allowed access to audit information&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_audit_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61671</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000345
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61671</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61671&#39; do
+  title &quot;The DBMS must support enforcement of logical access restrictions
+  associated with changes to the DBMS configuration and to the database itself.&quot;
+  desc &quot;When dealing with access restrictions pertaining to change control, it
+  should be noted any changes to the hardware, software, and&#x2F;or firmware
+  components of the information system and&#x2F;or application can have significant
+  effects on the overall security of the system.
+
+      Accordingly, only qualified and authorized individuals must be allowed to
+  obtain access to application components for the purposes of initiating changes,
+  including upgrades and modifications.
+
+      Modifications to the DBMS settings, the database files, database
+  configuration files, or the underlying database application files themselves
+  could have catastrophic consequences to the database.  Modification to DBMS
+  settings could include turning off access controls to the database, the halting
+  of archiving, the halting of auditing, and any number of other malicious
+  actions.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000128-DB-000086&#39;
+  tag &quot;gid&quot;: &#39;V-61671&#39;
+  tag &quot;rid&quot;: &#39;SV-76161r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-010300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67585r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000345&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to ensure the
+  database supports and does not interfere with enforcement of logical access
+  restrictions associated with changes to the DBMS configuration and to the
+  database itself.
+
+  If the DBMS software in any way restricts the implementation of logical access
+  controls implemented to protect its integrity or availability, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to allow implementation of logical access
+  restrictions aimed at protecting the DBMS from unauthorized changes to its
+  configuration and to the database itself.
+
+  - - - - -
+  When the Oracle Database is installed on a Unix-like operating system, the
+  required umask is 022, and the file permissions are set so that any
+  modifications to the startup files can only be performed by the owner of the
+  software, a member of the group DBA, or the root user. Changing the umask has
+  caused problems when patching the environment.  If changes are to be made, they
+  should be reverted to the status they were in before the modification for
+  patching and upgrades.&quot;
+  umask &#x3D; command(&#39;umask&#39;).stdout.strip
+
+  describe &#39;The system umask&#39; do
+    subject { umask }
+    it { should be &gt;&#x3D; &#39;0022&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61673</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database objects must be owned by accounts authorized for ownership.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: PUBLIC is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;PUBLIC&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: OUTLN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OUTLN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: CTXSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;CTXSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: GSMADMIN_INTERNAL is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;GSMADMIN_INTERNAL&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: DBSNMP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;DBSNMP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: APPQOSSYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;APPQOSSYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: XDB is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;XDB&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle datbase object owner: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61673</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database objects must be owned by accounts authorized for ownership.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61673&#39; do
+  title &#39;Database objects must be owned by accounts authorized for ownership.&#39;
+  desc  &quot;Within the database, object ownership implies full privileges to the
+  owned object including the privilege to assign access to the owned objects to
+  other subjects. Unmanaged or uncontrolled ownership of objects can lead to
+  unauthorized object grants and alterations, and unauthorized modifications to
+  data.
+
+      If critical tables or other objects rely on unauthorized owner accounts,
+  these objects can be lost when an account is removed.
+
+      It may be the case that there are accounts that are authorized to own
+  synonyms, but no other objects. If this is so, it should be documented.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000200&#39;
+  tag &quot;gid&quot;: &#39;V-61673&#39;
+  tag &quot;rid&quot;: &#39;SV-76163r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67587r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify accounts authorized to
+  own database objects. Review accounts in DBMS that own objects.
+
+  If any database objects are found to be owned by users not authorized to own
+  database objects, this is a finding.
+
+  - - - - -
+  Query the object DBA_OBJECTS to show the users who own objects in the database.
+   The query below will return all of the users who own objects.
+
+  sqlplus connect as sysdba
+
+  SQL&gt;select owner, object_type, count(*) from dba_objects
+  group by owner, object_type
+  order by owner, object_type;
+
+  If these owners are not authorized owners, select all of the objects these
+  owners have generated and decide who they should belong to.  To make a list of
+  all of the objects, the unauthorized owner has to perform the following query.
+
+  SQL&gt;select * from dba_objects where owner &#x3D;&amp;unauthorized_owner;&quot;
+  tag &quot;fix&quot;: &quot;Update system documentation to include list of accounts
+  authorized for object ownership.
+
+  Re-assign ownership of authorized objects to authorized object owner accounts.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_object_owners &#x3D; sql.query(&#39;select DISTINCT owner from dba_objects;&#39;).column(&#39;owner&#39;).uniq
+  if dba_object_owners .empty?
+    impact 0.0
+    describe &#39;There are no oracle dba object owners, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle dba object owners, control N&#x2F;A&#39;
+    end
+  else
+    dba_object_owners .each do |owner|
+      describe &quot;oracle datbase object owner: #{owner}&quot; do
+        subject { owner }
+        it { should be_in input(&#39;allowed_dbaobject_owners&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61675</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce requirements for remote connections to the
+  information system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">SSHD Configuration</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be enabled</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Service auditd is expected to be running</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61675</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce requirements for remote connections to the
+  information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review organization&#39;s access control policies and procedures addressing remote 
+    access to the information system.
+
+    If remote connections are not allowed by the organization, this is NA. (Note that &quot;remote&quot; means 
+    &quot;from outside the CMS network&quot; and that connections via approved Virtual Private Networks (VPNs) 
+    are considered to be inside the CMS network.)
+
+    Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify access controls and 
+    auditing settings exist and they enforce the requirements for remote access defined by the organization.
+
+    If access controls and auditing do not exist or do not fully enforce the requirements defined in the 
+    organization&#39;s policies and procedures, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61675&#39; do
+  title &quot;The DBMS must enforce requirements for remote connections to the
+  information system.&quot;
+  desc &quot;Applications that provide remote access to information systems must be
+  able to enforce remote access policy requirements or work in conjunction with
+  enterprise tools designed to enforce policy requirements. Examples of policy
+  requirements include, but are not limited to, authorizing remote access to the
+  information system, limiting access based on authentication credentials, and
+  monitoring for unauthorized access.
+
+      If databases allowing remote connections do not enforce requirements for
+  remote access, an attacker may gain access to the database and may, through the
+  database, gain access to other components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000140-DB-000033&#39;
+  tag &quot;gid&quot;: &#39;V-61675&#39;
+  tag &quot;rid&quot;: &#39;SV-76165r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67589r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review organization&#39;s access control policies and procedures
+  addressing remote access to the information system.
+
+  If remote connections are not allowed by the organization, this is NA. (Note
+  that \&quot;remote\&quot; means \&quot;from outside the DoD Information Network (DoDIN)\&quot; and
+  that connections via approved Virtual Private Networks (VPNs) are considered to
+  be inside the DoDIN.)
+
+  Review the DBMS, OS, and&#x2F;or enterprise account management settings to verify
+  access controls and auditing settings exist and they enforce the requirements
+  for remote access defined by the organization.
+
+  If access controls and auditing do not exist or do not fully enforce the
+  requirements defined in the organization&#39;s policies and procedures, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to ensure access control and auditing
+  requirements for remote connections are enforced by the DBMS.&quot;
+  describe sshd_config do
+    its(&#39;PermitRootLogin&#39;) { should eq &#39;no&#39; }
+  end
+  describe service(&#39;auditd&#39;) do
+    it { should be_enabled }
+    it { should be_running }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Passed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61677</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Default demonstration and sample databases, database objects, and
+  applications must be removed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle default sample schema user accounts is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle default sample schema user accounts is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle default sample schema user accounts is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle default sample schema user accounts is expected to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61677</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Default demonstration and sample databases, database objects, and
+  applications must be removed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  </td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61677&#39; do
+  title &quot;Default demonstration and sample databases, database objects, and
+  applications must be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000090&#39;
+  tag &quot;gid&quot;: &#39;V-61677&#39;
+  tag &quot;rid&quot;: &#39;SV-76167r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67591r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Oracle is hosted on a server that does not support
+  production systems, and is designated for the deployment of samples and
+  demonstrations, this is not applicable (NA).
+
+  Review documentation and websites from Oracle and any other relevant vendors
+  for vendor-provided demonstration or sample databases, database applications,
+  schemas, objects, and files.
+
+  Review the Oracle DBMS to determine if any of the demonstration and sample
+  databases, schemas, database applications, or files are installed in the
+  database or are included with the DBMS application. If any are present in the
+  database or are included with the DBMS application, this is a finding.
+
+  The Oracle Default Sample Schema User Accounts are:
+
+  BI
+  Owns the Business Intelligence schema included in the Oracle Sample Schemas.
+
+  HR
+  Manages the Human Resources schema. Schema stores information about the
+  employees and the facilities of the company.
+
+  OE
+  Manages the Order Entry schema. Schema stores product inventories and sales of
+  the company&#39;s products through various channels.
+
+  PM
+  Manages the Product Media schema. Schema contains descriptions and detailed
+  information about each product sold by the company.
+
+  IX
+  Manages the Information Exchange schema. Schema manages shipping through
+  business-to-business (B2B) applications database.
+
+  SH
+  Manages the Sales schema. Schema stores statistics to facilitate business
+  decisions.
+
+  SCOTT
+  A demonstration account with a simple schema.
+
+  Connect to Oracle as SYSDBA; run the following SQL to check for presence of
+  Oracle Default Sample Schema User Accounts:
+  select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);
+
+  If any of the users listed above is returned it means that there are demo
+  programs installed, so this is a finding.
+  &quot;
+  tag &quot;fix&quot;: &quot;Remove any demonstration and sample databases, database
+  applications, objects, and files from the DBMS.
+
+  To remove an account and all objects owned by that account (using BI as an
+  example):
+  DROP USER BI CASCADE;
+
+  To remove objects without removing their owner, use the appropriate DROP
+  statement (DROP TABLE, DROP VIEW, etc.).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  sample_schema_user_accounts &#x3D; sql.query(&quot;select distinct(username) from dba_users where username in
+  (&#39;BI&#39;,&#39;HR&#39;,&#39;OE&#39;,&#39;PM&#39;,&#39;IX&#39;,&#39;SH&#39;,&#39;SCOTT&#39;);&quot;).column(&#39;username&#39;)
+
+  describe &#39;The list of oracle default sample schema user accounts&#39; do
+    subject { sample_schema_user_accounts }
+    it { should be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61679</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unused database components, DBMS software, and database objects must
+  be removed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components: Oracle Text is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components: Oracle Text is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components: Oracle Text is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components: Oracle Text is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Oracle Text&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61679</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unused database components, DBMS software, and database objects must
+  be removed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61679&#39; do
+  title &quot;Unused database components, DBMS software, and database objects must
+  be removed.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Demonstration and sample database objects and applications present publicly
+  known attack points for malicious users. These demonstration and sample objects
+  are meant to provide simple examples of coding specific functions and are not
+  developed to prevent vulnerabilities from being introduced to the DBMS and host
+  system.
+
+      Unused and unnecessary DBMS components increase the attack vector for the
+  DBMS by introducing additional targets for attack. By minimizing the services
+  and applications installed on the system, the number of potential
+  vulnerabilities is reduced.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000091&#39;
+  tag &quot;gid&quot;: &#39;V-61679&#39;
+  tag &quot;rid&quot;: &#39;SV-76169r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67593r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to produce a list of components and features
+  installed with the database:
+
+  SELECT comp_id, comp_name, version, status from dba_registry
+  where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);
+
+  Review the list.  If unused components are installed and are not documented and
+  authorized, this is a finding.
+
+  Starting with releases 11.1.0.7.x and above, all products are installed by
+  default and the option to customize the product&#x2F;component selection is no
+  longer possible with the exception of those listed here:
+
+  Oracle JVM,
+  Oracle Text,
+  Oracle Multimedia,
+  Oracle OLAP,
+  Oracle Spatial,
+  Oracle Label Security,
+  Oracle Application Express,
+  Oracle Database Vault&quot;
+  tag &quot;fix&quot;: &quot;If any components are required for operation of applications that
+  will be accessing the DBMS, include them in the system documentation.
+
+  One cannot remove components, either via Database Configuration Assistant
+  (DBCA) or manually once the database has been created, either from a container
+  or a non-container database.
+
+  One can, however, use DBCA to create a non-container database and remove
+  components during the creation process, before the database is created.
+
+  When using DBCA to create a custom non-container database, select
+  creation mode &#x3D; advanced
+  Database Template &#x3D; Custom
+  Database Options..Database Component.
+
+  Components that can be selected or de-selected are:
+  Oracle JVM, Oracle Text, Oracle Multimedia, Oracle OLAP, Oracle Spatial, Oracle
+  Label Security, Oracle Application Express, Oracle Database Vault
+
+  For a container database (CDB), the CDB$ROOT must have all possible database
+  components available.  This is because, when a pluggable database (PDB) is
+  plugged into the CDB, the CDB must have the same components installed as the
+  PDB.  Since we do not know what components the PDBS may have, the CDB must be
+  able to support all possible PDB configurations.
+
+  Components installed in the CDB$ROOT do not need to be licensed.  Components
+  are only considered to be used if they are installed in the PDB.
+
+  To configure a PDB to only use specific components, do the following:
+
+  1) Create a non-CDB 12.1 database and configure that database with the
+  components desired.
+
+  2) Plug the non-CDB database into a CDB database, creating a new PDB.  If
+  wanted, can then create additional clones from the new PDB.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components &#x3D; sql.query(&quot;SELECT comp_id, comp_name, version, status from dba_registry where comp_id not in (&#39;CATALOG&#39;,&#39;CATPROC&#39;,&#39;XDB&#39;);&quot;).column(&#39;comp_name&#39;).uniq
+  if list_of_installed_components.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components installed, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components installed, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components.each do |component|
+      describe &quot;The installed oracle database components: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61681</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: OLAP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: OLAP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: OLAP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Partitioning is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Partitioning&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: OLAP is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;OLAP&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Real Application Testing is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Real Application Testing&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The installed oracle database components integrated into the DBMS: Data Mining is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;Data Mining&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61681</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61681&#39; do
+  title &quot;Unused database components that are integrated in the DBMS and cannot
+  be uninstalled must be disabled.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plug-ins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      Unused, unnecessary DBMS components increase the attack vector for the DBMS
+  by introducing additional targets for attack. By minimizing the services and
+  applications installed on the system, the number of potential vulnerabilities
+  is reduced. Components of the system that are unused and cannot be uninstalled
+  must be disabled.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000092&#39;
+  tag &quot;gid&quot;: &#39;V-61681&#39;
+  tag &quot;rid&quot;: &#39;SV-76171r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67595r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Run this query to check to see what integrated components are
+  installed in the database:
+
+  SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );
+
+  This will return all of the relevant database options and their status. TRUE
+  means that the option is installed. If the option is not installed, the option
+  will be set to FALSE.
+
+  Review the options and check the system documentation to see what is required.
+  If all listed components are authorized to be in use, this is not a finding.
+
+  If any unused components or features are listed by the query as TRUE, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;In the system documentation list the integrated components
+  required for operation of applications that will be accessing the DBMS.
+
+  For Oracle Database 12.1, only the following components can be enabled&#x2F;disabled:
+
+  Oracle Data Mining (dm)
+  Oracle Database Extensions for .NET (ode_net)
+  Oracle OLAP (olap)
+  Oracle Partitioning (partitioning)
+  Real Application Testing (rat)
+
+  Use the chopt utility (an Oracle-supplied operating system command that resides
+  in the &lt;Oracle Home path&gt;&#x2F;bin directory) to disable each option that should not
+  be available.  The command format is
+
+              chopt &lt;enable|disable&gt; &lt;option&gt;
+  where &lt;option&gt; is any of the abbreviations in parentheses in the list above.
+  For example, to disable Real Application Testing, issue the following command
+  at an OS prompt:
+
+              chopt disable rat
+
+  Restart the Oracle service.
+
+  (See My Oracle Support Document 948061.1 for more on the chopt command.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  list_of_installed_components_integrated_into_dbms &#x3D; sql.query(&quot;SELECT parameter, value
+  from v$option
+  where parameter in
+  (
+  &#39;Data Mining&#39;,
+  &#39;Oracle Database Extensions for .NET&#39;,
+  &#39;OLAP&#39;,
+  &#39;Partitioning&#39;,
+  &#39;Real Application Testing&#39;
+  );&quot;).column(&#39;parameter&#39;).uniq
+  if list_of_installed_components_integrated_into_dbms.empty?
+    impact 0.0
+    describe &#39;There are no oracle database components integrated into the DBMS, control N&#x2F;A&#39; do
+      skip &#39;TThere are no oracle database components integrated into the DBMS, control N&#x2F;A&#39;
+    end
+  else
+    list_of_installed_components_integrated_into_dbms.each do |component|
+      describe &quot;The installed oracle database components integrated into the DBMS: #{component}&quot; do
+        subject { component }
+        it { should be_in input(&#39;allowed_oracledb_components_integrated_into_dbms&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61683</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of external executables must be authorized.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61683</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of external executables must be authorized.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61683&#39; do
+  title &#39;Use of external executables must be authorized.&#39;
+  desc  &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      It is detrimental for applications to provide, or install by default,
+  functionality exceeding requirements or mission objectives. Examples include,
+  but are not limited to, installing advertising software, demonstrations, or
+  browser plugins not related to requirements or providing a wide array of
+  functionality not required for the mission.
+
+      Applications must adhere to the principles of least functionality by
+  providing only essential capabilities.
+
+      DBMS&#39;s may spawn additional external processes to execute procedures that
+  are defined in the DBMS, but stored in external host files (external
+  procedures). The spawned process used to execute the external procedure may
+  operate within a different OS security context than the DBMS and provide
+  unauthorized access to the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61683&#39;
+  tag &quot;rid&quot;: &#39;SV-76173r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67597r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database for definitions of application executable
+  objects stored external to the database.
+
+  Determine if there are methods to disable use or access, or to remove
+  definitions for external executable objects.
+
+  Verify any application executable objects listed are authorized by the ISSO.
+
+  If any are not, this is a finding.
+
+  - - - - -
+  To check for external procedures, execute the following query which will
+  provide the libraries containing external procedures, the owners of those
+  libraries, users that have been granted access to those libraries, and the
+  privileges they have been granted.  If there are owners other than the owners
+  that Oracle provides, then there may be executable objects stored either in the
+  database or external to the database that are called by objects in the
+  database. Check to see that those owners are authorized to access those
+  libraries. If there are users that have been granted access to libraries
+  provided by Oracle, check to see that they are authorized to access those
+  libraries.
+
+  (connect as sysdba)
+  set linesize 130
+  column library_name format a25
+  column name format a15
+  column owner format a15
+  column grantee format a15
+  column privilege format a15
+  select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;
+  &#x2F;&quot;
+  tag &quot;fix&quot;: &quot;Disable use of or remove any external application executable
+  object definitions that are not authorized.
+
+  Revoke privileges granted to users that are not authorized access to external
+  applications.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select library_name,owner,  &#39;&#39; grantee, &#39;&#39; privilege
+  from dba_libraries where file_spec is not null
+  minus
+  (
+  select library_name,o.name owner,  &#39;&#39; grantee, &#39;&#39; privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and l.file_spec is not null
+  )
+  union all
+  select library_name,o.name owner, --obj.obj#,oa.privilege#,
+         ge.name grantee,
+         tpm.name privilege
+    from dba_libraries l,
+         sys.user$ o,
+         sys.user$ ge,
+         sys.obj$ obj,
+         sys.objauth$ oa,
+         sys.table_privilege_map tpm
+   where l.owner&#x3D;o.name
+     and obj.owner#&#x3D;o.user#
+     and obj.name&#x3D;l.library_name
+     and oa.obj#&#x3D;obj.obj#
+     and ge.user#&#x3D;oa.grantee#
+     and tpm.privilege&#x3D;oa.privilege#
+     and l.file_spec is not null;&quot;).column(&#39;owner&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &#39;There are no oracle DBA users, control N&#x2F;A&#39; do
+      skip &#39;There are no oracle DBA users, control N&#x2F;A&#39;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;allowed_dbadmin_users&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61685</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Access to external executables must be disabled or restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000381
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61685</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Access to external executables must be disabled or restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not &quot;nobody&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference &quot;extproc&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference &quot;extproc&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to &quot;extproc&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by &quot;:&quot;.
+
+  Note: If &quot;ONLY&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If &quot;ANY&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61685&#39; do
+  title &#39;Access to external executables must be disabled or restricted.&#39;
+  desc  &quot;The Oracle external procedure capability provides use of the Oracle
+  process account outside the operation of the DBMS process. You can use it to
+  submit and execute applications stored externally from the database under
+  operating system controls. The external procedure process is the subject of
+  frequent and successful attacks as it allows unauthenticated use of the Oracle
+  process account on the operating system. As of Oracle version 11.1, the
+  external procedure agent may be run directly from the database and not require
+  use of the Oracle listener. This reduces the risk of unauthorized access to the
+  procedure from outside of the database process.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000141-DB-000093&#39;
+  tag &quot;gid&quot;: &#39;V-61685&#39;
+  tag &quot;rid&quot;: &#39;SV-76175r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011810&#39;
+  tag &quot;fix_id&quot;: &#39;F-67599r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000381&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the System Security Plan to determine if the use of the
+  external procedure agent is authorized.
+
+  Review the ORACLE_HOME&#x2F;bin directory or search the ORACLE_BASE path for the
+  executable extproc (UNIX) or extproc.exe (Windows).
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file does not exist or is restricted, this is not a
+  finding.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and the executable file exists and is not restricted, this is a finding.
+
+  If use of the external procedure agent is authorized, ensure extproc is
+  restricted to execution of authorized applications.
+
+  External jobs are run using the account nobody by default.
+
+  Review the contents of the file ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora for the
+  lines run_user&#x3D; and run_group&#x3D;.
+
+  If the user assigned to these parameters is not \&quot;nobody\&quot;, this is a finding.
+
+  For versions 11.1 and later, the external procedure agent (extproc executable)
+  is available directly from the database and does not require definition in the
+  listener.ora file for use.
+
+  Review the contents of the file ORACLE_HOME&#x2F;hs&#x2F;admin&#x2F;extproc.ora.
+
+  If the file does not exist, this is a finding.
+
+  If the following entry does not appear in the file, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:..
+
+  [dll full file name] represents a full path and file name.
+
+  This list of file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  Ensure that EXTPROC is not accessible from the listener.
+
+  Review the listener.ora file. If any entries reference \&quot;extproc\&quot;, this is a
+  finding.
+
+  Determine if the external procedure agent is in use per Oracle 10.x conventions.
+
+  Review the listener.ora file.
+
+  If any entries reference \&quot;extproc\&quot;, then the agent is in use.
+
+  If external procedure agent is not authorized for use in the System Security
+  Plan and references to \&quot;extproc\&quot; exist, this is a finding.
+
+  Sample listener.ora entries with extproc included:
+
+  LISTENER &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  EXTLSNR &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; EXTPROC))
+  )
+  SID_LIST_LISTENER &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (GLOBAL_DBNAME &#x3D; ORCL)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (SID_NAME &#x3D; ORCL)
+  )
+  )
+  SID_LIST_EXTLSNR &#x3D;
+  (SID_LIST &#x3D;
+  (SID_DESC &#x3D;
+  (PROGRAM &#x3D; extproc)
+  (SID_NAME &#x3D; PLSExtProc)
+  (ORACLE_HOME &#x3D; &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;product&#x2F;11.1.0&#x2F;db_1)
+  (ENVS&#x3D;\&quot;EXTPROC_DLLS&#x3D;ONLY:&#x2F;home&#x2F;app1&#x2F;app1lib.so:&#x2F;home&#x2F;app2&#x2F;app2lib.so,
+  LD_LIBRARY_PATH&#x3D;&#x2F;private&#x2F;app2&#x2F;lib:&#x2F;private&#x2F;app1,
+  MYPATH&#x3D;&#x2F;usr&#x2F;fso:&#x2F;usr&#x2F;local&#x2F;packages\&quot;)
+  )
+  )
+
+  Sample tnsnames.ora entries with extproc included:
+
+  ORCL &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST &#x3D; 127.0.0.1)(PORT &#x3D; 1521))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVICE_NAME &#x3D; ORCL)
+  )
+  )
+  EXTPROC_CONNECTION_DATA &#x3D;
+  (DESCRIPTION &#x3D;
+  (ADDRESS_LIST &#x3D;
+  (ADDRESS &#x3D; (PROTOCOL &#x3D; IPC)(KEY &#x3D; extproc))
+  )
+  (CONNECT_DATA &#x3D;
+  (SERVER &#x3D; DEDICATED)
+  (SERVICE_NAME &#x3D; PLSExtProc)
+  )
+  )
+
+  If EXTPROC is in use, confirm that a listener is dedicated to serving the
+  external procedure agent (as shown above).
+
+  View the protocols configured for the listener.
+
+  For the listener to be dedicated, the only entries will be to specify extproc.
+
+  If there is not a dedicated listener in use for the external procedure agent,
+  this is a finding.
+
+  If the PROTOCOL&#x3D; specified is other than IPC, this is a finding.
+
+  Verify and ensure extproc is restricted executing authorized external
+  applications only and extproc is restricted to execution of authorized
+  applications.
+
+  Review the listener.ora file.
+
+  If the following entry does not exist, this is a finding:
+
+  EXTPROC_DLLS&#x3D;ONLY:[dll full file name1]:[dll full file name2]:...
+
+  Note: [dll full file name] represents a full path and file name. This list of
+  file names is separated by \&quot;:\&quot;.
+
+  Note: If \&quot;ONLY\&quot; is specified, then the list is restricted to allow execution
+  of only the DLLs specified in the list and is not a finding. If \&quot;ANY\&quot; is
+  specified, then there are no restrictions for execution except what is
+  controlled by operating system permissions and is a finding. If no
+  specification is made, any files located in the %ORACLE_HOME%\\bin directory on
+  Windows systems or $ORACLE_HOME&#x2F;lib directory on UNIX systems can be executed
+  (the default) and is a finding.
+
+  View the listener.ora file (usually in ORACLE_HOME&#x2F;network&#x2F;admin or directory
+  specified by the TNS_ADMIN environment variable).
+
+  If multiple listener processes are running, then the listener.ora file for each
+  must be viewed.
+
+  For each process, determine the directory specified in the ORACLE_HOME or
+  TNS_ADMIN environment variable defined for the process account to locate the
+  listener.ora file.&quot;
+  tag &quot;fix&quot;: &quot;If use of the external procedure agent is required, then
+  authorize and document the requirement in the System Security Plan.
+
+  If the external procedure agent must be accessible to the Oracle listener, then
+  specify this and authorize it in the System Security Plan.
+
+  If use of the Oracle External Procedure agent is not required:
+
+  - Stop the Oracle Listener process
+  - Remove all references to extproc in the listener.ora and tnsnames.ora files
+  - Alter the permissions on the executable files:
+            UNIX - Remove read&#x2F;write&#x2F;execute permissions from owner, group and
+  world
+            Windows - Remove Groups&#x2F;Users from the executable (except groups
+  SYSTEM and ADMINISTRATORS) and allow READ [only] for SYSTEM and ADMINISTRATORS
+  groups
+
+  If required:
+
+  - Restrict extproc execution to only authorized applications.
+  - Specify EXTPROC_DLLS&#x3D;ONLY: [list of authorized DLLS] in the extproc.ora and
+  the listener.ora files
+  - Create a separate, dedicated listener for use by the external procedure agent
+
+  See the Oracle Net Services Administrators Guides, External Procedures section
+  for detailed configuration information.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;rdbms&#x2F;admin&#x2F;externaljob.ora&quot; do
+    its(&#39;content&#39;) { should_not include &#39;run_user &#x3D; nobody&#39; }
+    its(&#39;content&#39;) { should_not include &#39;run_group &#x3D; nobody&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;hs&#x2F;admin&#x2F;extproc.ora&quot; do
+    it { should exist }
+    its(&#39;content&#39;) { should match &#x2F;^EXTPROC_DLLS&#x3D;ONLY:\s*\w*&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61687</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-7 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000382
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61687</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-7 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS settings for functions, ports, protocols, and services that are not 
+    approved.
+
+    If any are found, this is a finding.
+
+    - - - - -
+    In the Oracle database, the communications with the database and incoming requests are performed by 
+    the Oracle Listener.  The Oracle Listener listens on a specific port or ports for connections to a 
+    specific database.  The Oracle Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin 
+    directory.  To check the ports and protocols in use, go to that directory and review the SQLNET.ora, 
+    LISTENER.ora, and the TNSNAMES.ora. If protocols or ports are in use that are not authorized, this 
+    is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61687&#39; do
+  title &quot;The DBMS must support the organizational requirements to specifically
+  prohibit or restrict the use of unauthorized functions, ports, protocols,
+  and&#x2F;or services.&quot;
+  desc &quot;Information systems are capable of providing a wide variety of
+  functions and services. Some of the functions and services, provided by
+  default, may not be necessary to support essential organizational operations
+  (e.g., key missions, functions).
+
+      Additionally, it is sometimes convenient to provide multiple services from
+  a single component of an information system (e.g., email and web services), but
+  doing so increases risk by constraining the ability to restrict the use of
+  functions, ports, protocols, and&#x2F;or services.
+
+      To support the requirements and principles of least functionality, the
+  application must support the organizational requirements providing only
+  essential capabilities and limiting the use of ports, protocols, and&#x2F;or
+  services to only those required, authorized, and approved to conduct official
+  business or to address authorized quality of life issues.
+
+      Database Management Systems using ports, protocols, and services deemed
+  unsafe are open to attack through those ports, protocols, and services. This
+  can allow unauthorized access to the database and through the database to other
+  components of the information system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000142-DB-000094&#39;
+  tag &quot;gid&quot;: &#39;V-61687&#39;
+  tag &quot;rid&quot;: &#39;SV-76177r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-011900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67601r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000382&#39;]
+  tag &quot;nist&quot;: [&#39;CM-7 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS settings for functions, ports, protocols, and
+  services that are not approved.
+
+  If any are found, this is a finding.
+
+  (For definitive information on Ports, Protocols and Services Management (PPSM),
+  refer to
+  http:&#x2F;&#x2F;www.disa.mil&#x2F;Services&#x2F;Network-Services&#x2F;Enterprise-Connections&#x2F;PPSM)
+
+  - - - - -
+  In the Oracle database, the communications with the database and incoming
+  requests are performed by the Oracle Listener.  The Oracle Listener listens on
+  a specific port or ports for connections to a specific database.  The Oracle
+  Listener has configuration files located in the $ORACLE_HOME&#x2F;network&#x2F;admin
+  directory.  To check the ports and protocols in use, go to  that directory and
+  review the SQLNET.ora, LISTENER.ora, and the TNSNAMES.ora.  If protocols or
+  ports are in use that are not authorized, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Disable functions, ports, protocols, and services that are not
+  approved.
+
+  - - - - -
+  Change the SQLNET.ora, LISTENER.ora, and TNSNAMES.ora files to reflect the
+  proper use of ports, protocols, and services that are approved at the site.
+
+  If changes to the Listener are made, the files associated with the Listener
+  must be reloaded.  Do that by issuing the following commands at the Unix&#x2F;Linux
+  or Windows prompt.
+  First - issue the command to see what the current status is
+  $ lsnrctl stat
+  Then load the new file that was corrected to reflect site-specific requirements.
+  $ lsnrctl reload
+  Then check the status again to see that the changes have taken place.
+  $ lsnrctl stat&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports the organizational requirements to specifically
+    prohibit or restrict the use of unauthorized functions, ports, protocols, and&#x2F;or services&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61689</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-10 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000553
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61689</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-10 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61689&#39; do
+  title &quot;Recovery procedures and technical system features must exist to ensure
+  recovery is done in a secure and verifiable manner.&quot;
+  desc &quot;Application recovery and reconstitution constitutes executing an
+information system contingency plan comprised of activities that restore
+essential missions and business functions.
+
+    Database management systems and transaction-based processing systems are
+examples of information systems that are transaction-based. Transaction
+rollback and transaction journaling are examples of mechanisms supporting
+transaction recovery.
+
+    A DBMS may be vulnerable to use of compromised data or other critical files
+during recovery. Use of compromised files could introduce maliciously altered
+application code, relaxed security settings or loss of data integrity. Where
+available, DBMS mechanisms to ensure use of only trusted files can help protect
+the database from this type of compromise during DBMS recovery.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000144-DB-000101&#39;
+  tag &quot;gid&quot;: &#39;V-61689&#39;
+  tag &quot;rid&quot;: &#39;SV-76179r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67603r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000553&#39;]
+  tag &quot;nist&quot;: [&#39;CP-10 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS recovery procedures and technical system features
+  to determine if mechanisms exist and are in place to specify use of trusted
+  files during DBMS recovery.
+
+  If recovery procedures do not exist or are not sufficient to ensure recovery is
+  done in a secure and verifiable manner, this is a finding.
+
+  If system features exist and are not employed or not employed sufficiently,
+  this is a finding.
+
+  If circumstances that can inhibit a trusted recovery are not documented and
+  appropriate mitigating procedures have not been put in place, this is a finding.
+
+  Review the database backup strategy with the system administrator.  Consider
+  using Oracle RMAN with an encrypted backup to insure the backed up files can be
+  trusted not to be compromised.&quot;
+  tag &quot;fix&quot;: &quot;Implement DBMS recovery procedures and employ technical system
+  features to specify trusted files during DBMS recovery.  Test the solution and
+  review the site-specific criteria to ensure that the backup and recovery
+  process uses trusted files.
+
+  Ensure circumstances that can inhibit a trusted recovery are documented and
+  appropriate mitigating procedures have been put in place.
+
+  Oracle recommends using RMAN Backup and encrypting backup files.  With
+  encrypted files stored on a mount point with limited access, the integrity of
+  the files can be trusted.
+
+  - - - - -
+  Notes on Oracle Backup and Recovery Solutions
+
+  When implementing a backup and recovery strategy, have the following solutions
+  available:
+
+  --  Recovery Manager (RMAN)
+  Recovery Manager is fully integrated with the Oracle database to perform a
+  range of backup and recovery activities, including maintaining an RMAN
+  repository of historical data about backups. Can access RMAN through the
+  command line or through Oracle Enterprise Manager.
+
+  --  User-managed backup and recovery
+  In this solution, perform backup and recovery with a mixture of host operating
+  system commands and SQL*Plus recovery commands. Responsible for determining all
+  aspects of when and how backups and recovery are done.
+
+  --  Media management
+  If not wanting to use RMAN with an encrypted backup, consider configuring RMAN
+  to make backups to a media manager.  On most platforms, to back up to and
+  restore from sequential media such as tape, must integrate a media manager with
+  the Oracle database. Can use Oracle Secure Backup, which supports both database
+  and file system backups to tape, as the media manager. See Oracle Secure Backup
+  Administrator&#39;s Guide to learn how to set up RMAN for use specifically with
+  Oracle Secure Backup.
+
+  These solutions are supported by Oracle and are fully documented, but RMAN is
+  the preferred solution for database backup and recovery. RMAN provides a common
+  interface for backup tasks across different host operating systems and offers
+  several backup techniques not available through user-managed methods.
+
+  --  Incremental backups:
+  An incremental backup stores only blocks changed since a previous backup.
+  Thus, they provide more compact backups and faster recovery, thereby reducing
+  the need to apply redo during data file media recovery. If enabling block
+  change tracking, then can improve performance by avoiding full scans of every
+  input data file. Can use the BACKUP INCREMENTAL command to perform incremental
+  backups.
+
+  --  Block media recovery:
+  Can repair a data file with only a small number of corrupt data blocks without
+  taking it off-line or restoring it from backup. Can use the RECOVER BLOCK
+  command to perform block media recovery.
+
+  --  Binary compression:
+  A binary compression mechanism integrated into Oracle Database reduces the size
+  of backups.
+
+  --  Encrypted backups:
+  RMAN uses backup encryption capabilities integrated into Oracle Database to
+  store backup sets in an encrypted format. To create encrypted backups on disk,
+  the database must use the Advanced Security Option. To create encrypted backups
+  directly on tape, RMAN must use the Oracle Secure Backup SBT interface but does
+  not require the Advanced Security Option.
+
+  --  Automated database duplication:
+  Easily creates a copy of the database, supporting various storage
+  configurations, including direct duplication between ASM databases.
+
+  --  Cross-platform data conversion:
+  Whether using RMAN or user-managed methods, can supplement physical backups
+  with logical backups of schema objects made with Data Pump Export utility. Can
+  later use Data Pump Import to re-create data after restore and recovery.
+  Logical backups are mostly beyond the scope of the backup and recovery
+  documentation.&quot;
+  describe &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39; do
+    skip &#39;A manual review is required to ensure recovery procedures and technical system features exist to ensure
+    recovery is done in a secure and verifiable manner&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61693</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Oracle must back up user-level information per a defined frequency.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Oracle backs up user-level information per a defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Oracle backs up user-level information per a defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Oracle backs up user-level information per a defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Oracle backs up user-level information per a defined frequency</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61693</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Oracle must back up user-level information per a defined frequency.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS is required to ensure user-generated 
+    data is backed up at a defined frequency. This includes data stored on file systems, within databases or 
+    within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Databases that do not backup information regularly risk the loss of that information in the event of a system 
+    failure. Most databases contain functionality to allow regular backups; it is important that this 
+    functionality is enabled and configured correctly to prevent data loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61693&#39; do
+  title &#39;Oracle must back up user-level information per a defined frequency.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Databases that do not backup information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000095&#39;
+  tag &quot;gid&quot;: &#39;V-61693&#39;
+  tag &quot;rid&quot;: &#39;SV-76183r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67609r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and site documentation to determine
+  whether Oracle is configured to back up user-level data according to a defined
+  frequency.
+
+  If it is not, this is a finding.
+
+  (The V$RMAN_STATUS view displays the finished and on-going RMAN jobs. For
+  on-going jobs, this view displays progress and status.)&quot;
+  tag &quot;fix&quot;: &quot;Configure the Oracle DBMS to back up user-level data on a defined
+  frequency.&quot;
+  describe &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39; do
+    skip &#39;A manual review is required to ensure Oracle backs up user-level information per a defined frequency&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61695</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database backup procedures must be defined, documented, and
+  implemented.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61695</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database backup procedures must be defined, documented, and
+  implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on file 
+    systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups help 
+    reduce the vulnerability to unauthorized access or hardware loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file &quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement database backup procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61695&#39; do
+  title &quot;Database backup procedures must be defined, documented, and
+  implemented.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Database backups provide the required means to restore databases after
+  compromise or loss. Backups help reduce the vulnerability to unauthorized
+  access or hardware loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000096&#39;
+  tag &quot;gid&quot;: &#39;V-61695&#39;
+  tag &quot;rid&quot;: &#39;SV-76185r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67611r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the database backup procedures and implementation
+  evidence. Evidence of implementation includes records of backup events and
+  physical review of backup media.
+
+  Evidence should match the backup plan as recorded in the system documentation.
+
+  If backup procedures do not exist or are not implemented in accordance with the
+  procedures, this is a finding.
+
+  - - - - -
+  The Oracle recommended process for backup and recovery is Oracle RMAN. If
+  Oracle RMAN is deployed, execute the following commands to ensure that the
+  evidence of the implementation of the backup policy includes validating that
+  the files are restorable:
+
+  Validating Database Files with BACKUP VALIDATE
+  --Use the BACKUP VALIDATE command to do the following:
+  --Check datafiles for physical and logical block corruption
+  --Confirm that all database files exist and are in the correct locations
+  --When BACKUP VALIDATE is run, RMAN reads the files to be backed up in their
+  entirety, as it would during a real backup. RMAN does not, however, actually
+  produce any backup sets or image copies.
+  --Cannot use the BACKUPSET, MAXCORRUPT, or PROXY parameters with BACKUP
+  VALIDATE.
+  --To validate files with the BACKUP VALIDATE command:
+    1. Start RMAN and connect to a target database and recovery catalog (if used).
+    2. Run the BACKUP VALIDATE command.
+
+  For example, can validate that all database files and archived logs can be
+  backed up by running a command as shown in the following example. This command
+  checks for physical corruptions only.
+
+  BACKUP VALIDATE
+  DATABASE
+  ARCHIVELOG ALL;
+
+  To check for logical corruptions in addition to physical corruptions, run the
+  following variation of the preceding command:
+
+  BACKUP VALIDATE
+  CHECK LOGICAL
+  DATABASE
+  ARCHIVELOG ALL;
+
+  In the preceding examples, the RMAN client displays the same output that it
+  would if it were really backing up the files. If RMAN cannot back up one or
+  more of the files, then it issues an error message.
+
+  Validating Backups Before Restoring Them
+
+  Run RESTORE ... VALIDATE to test whether RMAN can restore a specific file or
+  set of files from a backup. RMAN chooses which backups to use. The database
+  must be mounted or open for this command. Do not have to take datafiles
+  off-line when validating the restore of datafiles, because validation of
+  backups of the datafiles only reads the backups and does not affect the
+  production datafiles. When validating files on disk or tape, RMAN reads all
+  blocks in the backup piece or image copy. RMAN also validates off-site backups.
+  The validation is identical to a real restore operation except that RMAN does
+  not write output files.
+
+  To validate backups with the RESTORE command:
+  1. Run the RESTORE command with the VALIDATE option.
+
+  This following example illustrates validating the restore of the database and
+  all archived redo logs:
+
+  RESTORE DATABASE VALIDATE;
+  RESTORE ARCHIVELOG ALL VALIDATE;
+
+  If an RMAN error stack is not generated, then skip the subsequent steps. The
+  lack of error messages means that RMAN had confirmed that it can use these
+  backups successfully during a real restore and recovery.
+
+  2. If error messages are seen in the output and one is the RMAN-06026 message,
+  then investigate the cause of the problem. If possible, correct the problem
+  that is preventing RMAN from validating the backups and retry the validation.
+  The following error means that RMAN cannot restore one or more of the specified
+  files from available backups:
+
+  RMAN-06026: some targets not found - aborting restore
+  The following sample output shows that RMAN encountered a problem reading the
+  specified backup:
+
+  RMAN-03009: failure of restore command on c1 channel at 12-DEC-14 23:22:30
+  ORA-19505: failed to identify file \&quot;oracle&#x2F;dbs&#x2F;1fafv9gl_1_1\&quot;
+  ORA-27037: unable to obtain file status
+  SVR4 Error: 2: No such file or directory
+  Additional information: 3&quot;
+  tag &quot;fix&quot;: &#39;Develop, document, and implement database backup procedures.&#39;
+  describe &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39; do
+    skip &#39;A manual review is required to ensure database backup procedures are defined, documented, and
+    implemented.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61697</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61697</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order to 
+    assure availability of this data in the event of a system failure, CMS organizations are required 
+    to ensure user-generated data is backed up at a defined frequency. This includes data stored on 
+    file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-
+    defined frequency.
+
+    Database backups provide the required means to restore databases after compromise or loss. Backups 
+    help reduce the vulnerability to unauthorized access or hardware loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61697&#39; do
+  title &quot;Database recovery procedures must be developed, documented,
+  implemented, and periodically tested.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency.  This includes data stored on file
+  systems, within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Problems with backup procedures or backup media may not be discovered until
+  after a recovery is needed. Testing and verification of procedures provides the
+  opportunity to discover oversights, conflicts, or other issues in the backup
+  procedures or use of media designed to be used.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000097&#39;
+  tag &quot;gid&quot;: &#39;V-61697&#39;
+  tag &quot;rid&quot;: &#39;SV-76187r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67613r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the testing and verification procedures documented in
+  the system documentation. Review evidence of implementation of testing and
+  verification procedures by reviewing logs from backup and recovery
+  implementation. Logs may be in electronic form or hardcopy and may include
+  email or other notification.
+
+  If testing and verification of backup and recovery procedures is not documented
+  in the system documentation, this is a finding.
+
+  If evidence of testing and verification of backup and recovery procedures does
+  not exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement testing and verification
+  procedures for database backup and recovery. Include requirements for
+  documenting database backup and recovery testing and verification activities in
+  the procedures.&quot;
+  describe &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39; do
+    skip &#39;A manual review is required to ensure database recovery procedures are developed, documented,
+    implemented, and periodically tested&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61699</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS backup and restoration files must be protected from unauthorized
+  access.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000535
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61699</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS backup and restoration files must be protected from unauthorized
+  access.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data assurance and availability.
+
+    User-level information is data generated by information system and&#x2F;or application users. In order 
+    to assure availability of this data in the event of a system failure, CMS organizations are 
+    required to ensure user-generated data is backed up at a defined frequency. This includes data 
+    stored on file systems, within databases or within any other storage media.
+
+    Applications performing backups must be capable of backing up user-level information per the CMS-defined 
+    frequency.
+
+    Lost or compromised DBMS backup and restoration files may lead to not only the loss of data, but also 
+    the unauthorized access to sensitive data. Backup files need the same protections against unauthorized 
+    access when stored on backup media as when online and actively in use by the database system. In 
+    addition, the backup media needs to be protected against physical loss. Most DBMS&#39;s maintain online 
+    copies of critical control files to provide transparent or easy recovery from hard disk loss or other 
+    interruptions to database operation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61699&#39; do
+  title &quot;DBMS backup and restoration files must be protected from unauthorized
+  access.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      User-level information is data generated by information system and&#x2F;or
+  application users. In order to assure availability of this data in the event of
+  a system failure, DoD organizations are required to ensure user-generated data
+  is backed up at a defined frequency. This includes data stored on file systems,
+  within databases or within any other storage media.
+
+      Applications performing backups must be capable of backing up user-level
+  information per the DoD-defined frequency.
+
+      Lost or compromised DBMS backup and restoration files may lead to not only
+  the loss of data, but also the unauthorized access to sensitive data. Backup
+  files need the same protections against unauthorized access when stored on
+  backup media as when online and actively in use by the database system. In
+  addition, the backup media needs to be protected against physical loss. Most
+  DBMS&#39;s maintain online copies of critical control files to provide transparent
+  or easy recovery from hard disk loss or other interruptions to database
+  operation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000145-DB-000098&#39;
+  tag &quot;gid&quot;: &#39;V-61699&#39;
+  tag &quot;rid&quot;: &#39;SV-76189r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67615r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000535&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review file protections assigned to online backup and
+  restoration files. Review access protections and procedures for off-line backup
+  and restoration files.
+
+  If backup or restoration files are subject to unauthorized access, this is a
+  finding.
+
+  It may be necessary to review backup and restoration procedures to determine
+  ownership and access during all phases of backup and recovery.&quot;
+  tag &quot;fix&quot;: &quot;Implement protection for backup and restoration files. Document
+  personnel and the level of access authorized for each to the backup and
+  restoration files in the system documentation.&quot;
+  describe &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39; do
+    skip &#39;A manual review is required to ensure DBMS backup and restoration files are protected from unauthorized
+    access&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61701</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000537
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61701</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61701&#39; do
+  title &quot;DBMS must conduct backups of system-level information per
+  organization-defined frequency that is consistent with recovery time and
+  recovery point objectives.&quot;
+  desc &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      Databases that do not back up information regularly risk the loss of that
+  information in the event of a system failure. Most databases contain
+  functionality to allow regular backups; it is important that this functionality
+  is enabled and configured correctly to prevent data loss.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000099&#39;
+  tag &quot;gid&quot;: &#39;V-61701&#39;
+  tag &quot;rid&quot;: &#39;SV-76191r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67617r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS and OS backup configuration to determine that
+  system-level data is backed up in according with organization-defined frequency.
+
+  If the system-level data of the DBMS is not backed up to the
+  organization-defined frequency, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize DBMS, OS, or third-party product(s) to meet the
+  requirement of backing up system data according to the organization-defined
+  frequency.&quot;
+  describe &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39; do
+    skip &#39;A manual is required to ensure the DBMS conducts backups of system-level information per
+    organization-defined frequency that is consistent with recovery time and
+    recovery point objectives&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61703</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for network access to
+  privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000765
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61703</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for network access to
+  privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access 
+    mechanism settings to determine whether users logging on to privileged accounts via a network are 
+    required to use multifactor authentication.
+
+    If users logging on to privileged accounts via a network are not required to use multifactor 
+    authentication, this is a finding.
+
+    Use authentication to prove the identities of users who are attempting to log on to the database. 
+    Authenticating user identity is imperative in distributed environments, without which there can be 
+    little confidence in network security. Passwords are the most common means of authentication. Oracle 
+    Database enables strong authentication with Oracle authentication adapters that support various 
+    third-party authentication services, including TLS with digital certificates, as well as Smart Cards (PIV).
+
+    If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the following, TLS is enabled. 
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the 
+    supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or 
+    differently located sqlnet.ora files.)
+
+    SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+    SSL_VERSION &#x3D; 1.2 or 1.1
+    SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+    WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+    (METHOD &#x3D; FILE)
+    (METHOD_DATA &#x3D;
+    (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+    )
+    )
+
+    SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+    ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+    Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for network users logging on to privileged accounts. 
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61703&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000149-DB-000104&#39;
+  tag &quot;gid&quot;: &#39;V-61703&#39;
+  tag &quot;rid&quot;: &#39;SV-76193r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-012900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67619r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000765&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts via a network are not required to
+  use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates,
+  as well as Smart Cards (CAC, PIV).
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled. (Note: This assumes that a single sqlnet.ora file,
+  in the default location, is in use. Please see the supplemental file
+  \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or
+  differently located sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+  (SOURCE &#x3D;
+  (METHOD &#x3D; FILE)
+  (METHOD_DATA &#x3D;
+  (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+  )
+  )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61705</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000766
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61705</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to 
+    require multifactor authentication for network users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61705&#39; do
+  title &quot;The DBMS must use multifactor authentication for network access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii)  Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Network access is defined as access to an information system by a user (or
+  a process acting on behalf of a user) communicating through a network (e.g.,
+  local area network, wide area network, Internet).
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000150-DB-000105&#39;
+  tag &quot;gid&quot;: &#39;V-61705&#39;
+  tag &quot;rid&quot;: &#39;SV-76195r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67621r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000766&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts via a network are required to use multifactor
+  authentication.
+
+  If users logging on to non-privileged accounts via a network are not required
+  to use multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for network users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61707</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for local access to
+  privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (3)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000767
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61707</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for local access to
+  privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (3), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61707&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A privileged account is defined as an information system account with
+  authorizations of a privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000151-DB-000106&#39;
+  tag &quot;gid&quot;: &#39;V-61707&#39;
+  tag &quot;rid&quot;: &#39;SV-76197r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67623r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000767&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (3)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to privileged accounts locally are required to use multifactor authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) {
+      should include &#39;WALLET_LOCATION &#x3D;
+      (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+      (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+      )&#39;
+    }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61709</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000768
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61709</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access mechanism to require 
+    multifactor authentication for local users logging on to non-privileged accounts.
+
+    If appropriate, enable support for Transport Layer Security (TLS) protocols and multifactor 
+    authentication through the use of Smart Cards (PIV).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61709&#39; do
+  title &quot;The DBMS must use multifactor authentication for local access to
+  non-privileged accounts.&quot;
+  desc &quot;Multifactor authentication is defined as using two or more factors to
+  achieve authentication.
+
+      Factors include:
+      (i) Something a user knows (e.g., password&#x2F;PIN);
+      (ii) Something a user has (e.g., cryptographic identification device,
+  token); or
+      (iii) Something a user is (e.g., biometric).
+
+      A non-privileged account is defined as an information system account with
+  authorizations of a regular or non-privileged user.
+
+      Local Access is defined as access to an organizational information system
+  by a user (or process acting on behalf of a user) communicating through a
+  direct connection without the use of a network.
+
+      The lack of multifactor authentication makes it much easier for an attacker
+  to gain unauthorized access to a system.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000152-DB-000107&#39;
+  tag &quot;gid&quot;: &#39;V-61709&#39;
+  tag &quot;rid&quot;: &#39;SV-76199r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67625r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000768&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether users logging on
+  to non-privileged accounts locally are required to use multifactor
+  authentication.
+
+  If users logging on to privileged accounts locally are not required to use
+  multifactor authentication, this is a finding.
+
+  Use authentication to prove the identities of users who are attempting to log
+  on to the database. Authenticating user identity is imperative in distributed
+  environments, without which there can be little confidence in network security.
+  Passwords are the most common means of authentication. Oracle Database enables
+  strong authentication with Oracle authentication adapters that support various
+  third-party authentication services, including TLS with digital certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains entries similar to the
+  following, TLS is enabled.
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION &#x3D; TRUE
+  WALLET_LOCATION &#x3D;
+    (SOURCE &#x3D;
+      (METHOD &#x3D; FILE)
+      (METHOD_DATA &#x3D;
+        (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)
+      )
+    )
+  SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)
+  ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require multifactor authentication for local users logging on to
+  non-privileged accounts.
+
+  If appropriate, enable support for Transport Layer Security (TLS) protocols and
+  multifactor authentication through the use of Smart Cards (CAC&#x2F;PIV).&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE &#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; (DIRECTORY &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#x2F;product&#x2F;12.1.0&#x2F;dbhome_1&#x2F;owm&#x2F;wallets)))&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;ADR_BASE &#x3D; &#x2F;u01&#x2F;app&#x2F;oracle&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61711</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (5)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000770
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61711</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanism 
+  settings to determine whether shared accounts exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this is a finding.
+  
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor authentication of applications 
+  front-ending Oracle Datasets that may use group accounts. Oracle Access Manager supports using PKI-based 
+  smart cards (PIV) for multifactor authentication. When a user authenticates to a smart card application, 
+  the smart card engine produces a certificate-based authentication token. Can configure a certificate-based 
+  authentication scheme in Oracle Access Manager that uses information from the smart card certificate. 
+  Certificate-based authentication works with any smart card or similar device that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (5), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61711&#39; do
+  title &quot;The DBMS must ensure users are authenticated with an individual
+  authenticator prior to using a shared authenticator.&quot;
+  desc &quot;To assure individual accountability and prevent unauthorized access,
+  application users (and any processes acting on behalf of users) must be
+  individually identified and authenticated.
+
+      A shared authenticator is a generic account used by multiple individuals.
+  Use of a shared authenticator alone does not uniquely identify individual
+  users. An example of a shared authenticator is the UNIX OS &#39;root&#39; user account,
+  a Windows &#39;administrator&#39; account, an &#39;SA&#39; account, or a &#39;helpdesk&#39; account.
+
+      For example, the UNIX and Windows operating systems offer a &#39;switch user&#39;
+  capability allowing users to authenticate with their individual credentials
+  and, when needed, &#39;switch&#39; to the administrator role. This method provides for
+  unique individual authentication prior to using a shared authenticator.
+
+      Some applications may not have the need to provide a group authenticator;
+  this is considered a matter of application design. In those instances where the
+  application design includes the use of a shared authenticator, this requirement
+  will apply.
+
+      There may also be instances when specific user actions need to be performed
+  on the information system without unique user identification or authentication.
+  An example of this type of access is a web server which contains publicly
+  releasable information. These types of accesses are allowed but must be
+  explicitly identified and documented by the organization.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000153-DB-000108&#39;
+  tag &quot;gid&quot;: &#39;V-61711&#39;
+  tag &quot;rid&quot;: &#39;SV-76201r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67627r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000770&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (5)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether shared accounts
+  exist. If group accounts do not exist, this is NA.
+
+  Review DBMS settings to determine if individual authentication is required
+  before shared authentication.
+
+  If shared authentication does not require prior individual authentication, this
+  is a finding.
+
+  (Oracle Access Manager may be helpful in meeting this requirement. Notes on
+  Oracle Access Manager follow.)
+
+  Oracle Access Manager is used when there is a need for multifactor
+  authentication of applications front-ending Oracle Datasets that may use group
+  accounts. Oracle Access Manager supports using PKI-based smart cards (CAC, PIV)
+  for multifactor authentication. When a user authenticates to a smart card
+  application, the smart card engine produces a certificate-based authentication
+  token. Can configure a certificate-based authentication scheme in Oracle Access
+  Manager that uses information from the smart card certificate.
+  Certificate-based authentication works with any smart card or similar device
+  that presents an X.509 certificate.
+
+  Check:
+  First, check that the Authentication Module is set up properly:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.  Select the X509Scheme.
+  2) Make sure the Authentication Module option is set to X509Plugin.
+
+  Second, check that the Authentication policy is using the x509Scheme:
+  1) Go to Oracle Access Manager Home Screen and click the Policy Configuration
+  tab.
+  2) Select Application Domains.  Select Search.
+  3) Select the application domain protecting the Oracle Database.
+  4) Select the Authentication Polices tab and Click Protected Resource Policy.
+  5) Make sure the Authentication Scheme is set to x509Scheme.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require individual authentication prior to authentication for
+  shared account access.
+
+  If appropriate, install Oracle Access Manager to provide multifactor
+  authentication of applications front-ending Oracle Databases and using shared
+  accounts.  After installation, use x509 Authentication modules provided out of
+  the box.&quot;
+  describe &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39; do
+    skip &#39;A manual review is required to ensure the DBMS ensures users are authenticated with an individual
+    authenticator prior to using a shared authenticator&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61713</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (8)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001941
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61713</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a 
+    specific one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-
+    response one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in unfettered access 
+    to the database settings and data. A successful replay attack against a privileged database account 
+    could result in a complete compromise of the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction 
+    between privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack: An unauthorized party intercepting data in transit, altering it, and 
+    retransmitting it is a data modification attack. For example, intercepting a $100 bank deposit, 
+    changing the amount to $10,000, and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such 
+    as intercepting a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited 
+    during the transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  
+    Allowable uses during the transition include CHECKSUM usage and verification of legacy certificate 
+    signatures.  SHA-1 is considered a temporary solution during legacy application transitionary periods 
+    and should not be engineered into new applications. SHA-2 is the path forward for CMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (8), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61713&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in unfettered access to the database settings and data. A successful
+  replay attack against a privileged database account could result in a complete
+  compromise of the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000156-DB-000111&#39;
+  tag &quot;gid&quot;: &#39;V-61713&#39;
+  tag &quot;rid&quot;: &#39;SV-76203r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67629r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001941&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (8)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings to determine whether
+  organization-defined replay-resistant authentication mechanisms for network
+  access to privileged accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to utilize replay-resistant authentication mechanisms such as nonces
+  (e.g., numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61715</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2 (9)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001942
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61715</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">An authentication process resists replay attacks if it is impractical to achieve a successful 
+    authentication by recording and replaying a previous authentication message.
+
+    Techniques used to address this include protocols using nonces (e.g., numbers generated for a specific 
+    one-time use) or challenges (e.g., TLS, WS_Security), and time synchronous or challenge-response 
+    one-time authenticators.
+
+    Replay attacks, if successfully used against a database account, could result in access to database 
+    data.  A successful replay attack against a non-privileged database account could result in a compromise 
+    of data stored on the database.
+
+    Oracle Database enables you to encrypt data that is sent over a network.  There is no distinction between 
+    privileged and non-privileged accounts.
+
+    Encryption of network data provides data privacy so that unauthorized parties are not able to view 
+    plaintext data as it passes over the network. Oracle Database also provides protection against two 
+    forms of active attacks.
+
+    Data modification attack:  An unauthorized party intercepting data in transit, altering it, and retransmitting 
+    it is a data modification attack. For example, intercepting a $100 bank deposit, changing the amount to $10,000, 
+    and retransmitting the higher amount is a data modification attack.
+
+    Replay attack:  Repetitively retransmitting an entire set of valid data is a replay attack, such as intercepting 
+    a $100 bank withdrawal and retransmitting it ten times, thereby receiving $1,000.
+
+    AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+    The DES algorithm uses a 56-bit key length.
+
+    SHA-1 is in the process of being removed from service within CMS and it&#39;s use is to be limited during the 
+    transition to SHA-2.  Use of SHA-1 for digital signature generation is prohibited.  Allowable uses during 
+    the transition include CHECKSUM usage and verification of legacy certificate signatures.  SHA-1 is considered 
+    a temporary solution during legacy application transitionary periods and should not be engineered into new 
+    applications. SHA-2 is the path forward for CMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2 (9), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61715&#39; do
+  title &quot;The DBMS must use organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.&quot;
+  desc &quot;An authentication process resists replay attacks if it is impractical
+  to achieve a successful authentication by recording and replaying a previous
+  authentication message.
+
+      Techniques used to address this include protocols using nonces (e.g.,
+  numbers generated for a specific one-time use) or challenges (e.g., TLS,
+  WS_Security), and time synchronous or challenge-response one-time
+  authenticators.
+
+      Replay attacks, if successfully used against a database account, could
+  result in access to database data.  A successful replay attack against a
+  non-privileged database account could result in a compromise of data stored on
+  the database.
+
+      Oracle Database enables you to encrypt data that is sent over a network.
+  There is no distinction between privileged and non-privileged accounts.
+
+      Encryption of network data provides data privacy so that unauthorized
+  parties are not able to view plaintext data as it passes over the network.
+  Oracle Database also provides protection against two forms of active attacks.
+
+      Data modification attack:  An unauthorized party intercepting data in
+  transit, altering it, and retransmitting it is a data modification attack. For
+  example, intercepting a $100 bank deposit, changing the amount to $10,000, and
+  retransmitting the higher amount is a data modification attack.
+
+      Replay attack:  Repetitively retransmitting an entire set of valid data is
+  a replay attack, such as intercepting a $100 bank withdrawal and retransmitting
+  it ten times, thereby receiving $1,000.
+
+      AES and Triple-DES operate in outer Cipher Block Chaining (CBC) mode.
+
+      The DES algorithm uses a 56-bit key length.
+
+      SHA-1 is in the process of being removed from service within the DoD and
+  it&#39;s use is to be limited during the transition to SHA-2.  Use of SHA-1 for
+  digital signature generation is prohibited.  Allowable uses during the
+  transition include CHECKSUM usage and verification of legacy certificate
+  signatures.  SHA-1 is considered a temporary solution during legacy application
+  transitionary periods and should not be engineered into new applications. SHA-2
+  is the path forward for DoD.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000157-DB-000112&#39;
+  tag &quot;gid&quot;: &#39;V-61715&#39;
+  tag &quot;rid&quot;: &#39;SV-76205r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67631r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001942&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2 (9)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether organization-defined
+  replay-resistant authentication mechanisms for network access to non-privileged
+  accounts exist.
+
+  If these mechanisms do not exist, this is a finding.
+
+  To check that network encryption is enabled and using site-specified encryption
+  procedures, look in SQLNET.ORA, located at
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora. (Note: This assumes that a single
+  sqlnet.ora file, in the default location, is in use. Please see the
+  supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to find
+  multiple and&#x2F;or differently located sqlnet.ora files.) If encryption is set,
+  entries like the following will be present:
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)
+  SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required
+
+  SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)
+  SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)
+  SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested
+
+  (The values assigned to the parameters may be different, the combination of
+  parameters may be different, and not all of the example parameters will
+  necessarily exist in the file.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to require organization-defined replay-resistant authentication
+  mechanisms for network access to non-privileged accounts.
+
+  If appropriate, apply Oracle Data Network Encryption to protect against replay
+  mechanisms.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D;(AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61717</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must disable user accounts after 60 days of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-4 e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000795
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password life time for profile: DEFAULT is expected to cmp &lt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 60
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61717</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must disable user accounts after 60 days of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-4 e), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For accounts managed by Oracle, check DBMS settings to determine if accounts can be automatically disabled 
+    by the system after 60 days of inactivity. Also, ask the DBA if an alternative method, such as a stored 
+    procedure run daily, to disable Oracle-managed accounts inactive for more than 60 days, has been deployed.
+
+    If the ability to disable accounts after 60 days of inactivity, by either of these means, does not exist, 
+    this is a finding.
+
+    - - - - -
+
+    Check to see what profile each user is associated with, if any, with this query:
+
+    select username, profile from dba_users order by 1,2;
+
+    Then check the profile to see what the password_life_time is set to in the table dba_profiles; the 
+    password_life_time is a value stored in the LIMIT column, and identified by the value PASSWORD_LIFE_TIME 
+    in the RESOURCE_NAME column.
+    SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where upper(resource_name) &#x3D; &quot;PASSWORD_LIFE_TIME&quot;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For accounts managed by Oracle, determine if it is practical and acceptable to require a 
+    password change every 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue the statement:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60;
+    (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for examples.)
+
+    If password changes every 60 days or fewer are unacceptable or impractical, implement an alternative method, 
+    such as a stored procedure run daily, to disable accounts inactive for more than 60 days.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61717&#39; do
+  title &#39;The DBMS must disable user accounts after 35 days of inactivity.&#39;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Unused or expired DBMS accounts provide a means for undetected,
+  unauthorized access to the database.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000163-DB-000113&#39;
+  tag &quot;gid&quot;: &#39;V-61717&#39;
+  tag &quot;rid&quot;: &#39;SV-76207r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67633r3_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000795&#39;]
+  tag &quot;nist&quot;: [&#39;IA-4 e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For accounts managed by Oracle, check DBMS settings to determine if accounts
+  can be automatically disabled by the system after 35 days of inactivity. Also,
+  ask the DBA if an alternative method, such as a stored procedure run daily, to
+  disable Oracle-managed accounts inactive for more than 35 days, has been
+  deployed.
+
+  If the ability to disable accounts after 35 days of inactivity, by either of
+  these means, does not exist, this is a finding.
+
+  - - - - -
+
+  Check to see what profile each user is associated with, if any, with this query:
+
+  select username, profile from dba_users order by 1,2;
+
+  Then check the profile to see what the password_life_time is set to in the
+  table dba_profiles; the password_life_time is a value stored in the LIMIT
+  column, and identified by the value PASSWORD_LIFE_TIME in the RESOURCE_NAME
+  column.
+
+  SQL&gt;select profile, resource_name, resource_type, limit from dba_profiles where
+  upper(resource_name) &#x3D; &#39;PASSWORD_LIFE_TIME&#39;;&quot;
+  tag &quot;fix&quot;: &quot;For accounts managed by Oracle, determine if it is practical and
+  acceptable to require a password change every 35 days or fewer, rather than the
+  standard 60 days (as specified in SRG-APP-000174-DB-000080).  If it is, issue
+  the statement:
+
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35;
+  (See the Oracle-provided $ORACLE_HOME&#x2F;rdbms&#x2F;admin&#x2F;secconf.sql script for
+  examples.)
+
+  If password changes every 35 days or fewer are unacceptable or impractical,
+  implement an alternative method, such as a stored procedure run daily, to
+  disable accounts inactive for more than 35 days.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_LIFE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_life_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password life time for profile: #{profile}&quot; do
+      subject { password_life_time }
+      it { should cmp &lt;&#x3D; input(&#39;account_inactivity_age&#39;) }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61719</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce minimum
+  password length.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000205
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61719</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce minimum
+  password length.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called 
+    DEFAULT, determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+
+    For each password verification function, examine its source code.
+    
+    If it does not enforce the CMS-defined minimum length (15 unless otherwise specified), this is 
+    a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+&lt;   oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61719&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce minimum
+  password length.&quot;
+  desc &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Weak passwords are a primary target for attack to gain unauthorized access
+  to databases and other systems. Where username&#x2F;password is used for
+  identification and authentication to the database, requiring the use of strong
+  passwords can help prevent simple and more sophisticated methods for guessing
+  at passwords.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000164-DB-000082&#39;
+  tag &quot;gid&quot;: &#39;V-61719&#39;
+  tag &quot;rid&quot;: &#39;SV-76209r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-013900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67635r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000205&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the DoD-defined minimum length (15 unless otherwise
+  specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61721</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (e)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000200
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse max for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password reuse time for profile: DEFAULT is expected not to cmp &#x3D;&#x3D; &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: UNLIMITED
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61721</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (e), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password reuse rule, if any, that is in effect:
+
+    SELECT * FROM SYS.DBA_PROFILES 
+    WHERE RESOURCE_NAME IN (&quot;PASSWORD_REUSE_MAX&quot;, &quot;PASSWORD_REUSE_TIME&quot;)
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+    ORDER BY PROFILE, RESOURCE_NAME;
+    Bearing in mind that a profile can inherit from another profile, and the root profile is 
+    called DEFAULT, determine the value of the PASSWORD_REUSE_MAX effective for each profile.
+
+    If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the CMS-defined minimum 
+    number of password changes before a password may be repeated (five or greater), this is a finding.
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so if both are 
+    UNLIMITED, this is a finding.&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  For each profile, set the PASSWORD_REUSE_MAX to 
+    enforce the CMS-defined minimum number of password changes before a password may be 
+    repeated (six or greater).
+
+    PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is specified, so ensure also 
+    that it has a meaningful value.  Since the minimum password lifetime is 1 day, the smallest 
+    meaningful value is the same as the PASSWORD_REUSE_MAX value.
+
+    Using PPPPPP as an example, the statement to do this is:
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 6 PASSWORD_REUSE_TIME 6;&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61721&#39; do
+  title &quot;The DBMS must support organizational requirements to prohibit password
+  reuse for the organization-defined number of generations.&quot;
+  desc  &quot;Password complexity, or strength, is a measure of the effectiveness of
+  a password in resisting attempts at guessing and brute-force attacks.
+
+      To meet password policy requirements, passwords need to be changed at
+  specific policy-based intervals.
+
+      If the information system or application allows the user to consecutively
+  reuse their password when that password has exceeded its defined lifetime, the
+  end result is a password that is not changed as per policy requirements.
+
+      Password reuse restrictions protect against bypass of password expiration
+  requirements and help protect accounts from password guessing attempts.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000165-DB-000081&#39;
+  tag &quot;gid&quot;: &#39;V-61721&#39;
+  tag &quot;rid&quot;: &#39;SV-76211r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67637r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000200&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (e)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password reuse rule, if any, that is in effect:
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME IN (&#39;PASSWORD_REUSE_MAX&#39;, &#39;PASSWORD_REUSE_TIME&#39;)
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE, RESOURCE_NAME;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the value of the PASSWORD_REUSE_MAX
+  effective for each profile.
+
+  If, for any profile, the PASSWORD_REUSE_MAX value does not enforce the
+  DoD-defined minimum number of password changes before a password may be
+  repeated (five or greater), this is a finding.
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so if both are UNLIMITED, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  For each profile, set the
+  PASSWORD_REUSE_MAX to enforce the DoD-defined minimum number of password
+  changes before a password may be repeated (five or greater).
+
+  PASSWORD_REUSE_MAX is effective if and only if PASSWORD_REUSE_TIME is
+  specified, so ensure also that it has a meaningful value.  Since the minimum
+  password lifetime is 1 day, the smallest meaningful value is the same as the
+  PASSWORD_REUSE_MAX value.
+
+  Using PPPPPP as an example, the statement to do this is:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_REUSE_MAX 5 PASSWORD_REUSE_TIME 5;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_password_max_reuse &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_MAX&#39;
+  }
+
+  query_password_reuse_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_REUSE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_reuse_max &#x3D; sql.query(format(query_password_max_reuse, profile: profile)).column(&#39;limit&#39;)
+    password_reuse_time &#x3D; sql.query(format(query_password_reuse_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password reuse max for profile: #{profile}&quot; do
+      subject { password_reuse_max }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+
+    describe &quot;The oracle database account password reuse time for profile: #{profile}&quot; do
+      subject { password_reuse_time }
+      it { should_not cmp &#39;UNLIMITED&#39; }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61723</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000192
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61723</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification 
+    function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61723&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of upper-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000166-DB-000070&#39;
+  tag &quot;gid&quot;: &#39;V-61723&#39;
+  tag &quot;rid&quot;: &#39;SV-76213r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67639r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000192&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.  If it does
+  not enforce the organization-defined minimum number of upper-case characters (1
+  unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61725</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000193
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61725</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61725&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of lower-case characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000167-DB-000071&#39;
+  tag &quot;gid&quot;: &#39;V-61725&#39;
+  tag &quot;rid&quot;: &#39;SV-76215r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67641r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000193&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of lower-case
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61727</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000194
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61727</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61727&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of numeric characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000168-DB-000072&#39;
+  tag &quot;gid&quot;: &#39;V-61727&#39;
+  tag &quot;rid&quot;: &#39;SV-76217r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67643r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000194&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of numeric
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61729</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001619
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61729</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">&quot;If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, no fix to the DBMS is required.
+
+    If any user accounts are managed by Oracle:  Develop, test and implement a password verification function 
+    that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61729&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  complexity by the number of special characters used.&quot;
+  desc &quot;Password complexity or strength is a measure of the effectiveness of a
+  password in resisting attempts at guessing and brute-force attacks.
+
+      Password complexity is one factor of several that determine how long it
+  takes to crack a password. The more complex the password is, the greater the
+  number of possible combinations that need to be tested before the password is
+  compromised.
+
+      Use of a complex password helps to increase the time and resources required
+  to compromise the password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000169-DB-000176&#39;
+  tag &quot;gid&quot;: &#39;V-61729&#39;
+  tag &quot;rid&quot;: &#39;SV-76219r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67645r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001619&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)]
+  ORDER BY PROFILE;
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of special
+  characters (1 unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, no fix to
+  the DBMS is required.
+
+  If any user accounts are managed by Oracle:  Develop, test and implement a
+  password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file
+  &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point
+  for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61731</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000195
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: RDSADMIN is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account password verify function for profile: DEFAULT is expected not to eq [&quot;NULL&quot;]</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: value !&#x3D; [&quot;NULL&quot;]
+     got: [&quot;NULL&quot;]
+
+(compared using &#x3D;&#x3D;)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61731</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are managed and authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    For each profile that can be applied to accounts where authentication is under Oracle&#39;s control, 
+    determine the password verification function, if any, that is in use:
+
+    SELECT * FROM SYS.DBA_PROFILES
+    WHERE RESOURCE_NAME &#x3D; &quot;PASSWORD_VERIFY_FUNCTION&quot;
+    [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+    Bearing in mind that a profile can inherit from another profile, and the root profile is called DEFAULT, 
+    determine the name of the password verification function effective for each profile.
+
+    If, for any profile, the function name is null, this is a finding.
+    
+    For each password verification function, examine its source code.
+
+    If it does not enforce the organization-defined minimum number of characters by which the password must differ 
+    from the previous password (six of the characters unless otherwise specified), this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If any user accounts are managed by Oracle:  Develop, test and implement a password 
+    verification function that enforces CMS requirements.
+
+    (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the script file 
+    &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the starting point for a customized function.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61731&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce the
+  number of characters that get changed when passwords are changed.&quot;
+  desc  &quot;Passwords need to be changed at specific policy-based intervals.
+
+    If the information system or application allows the user to consecutively
+  reuse extensive portions of their password when they change their password, the
+  end result is a password that has not had enough elements changed to meet the
+  policy requirements.
+
+      Changing passwords frequently can thwart password-guessing attempts or
+  re-establish protection of a compromised DBMS account. Minor changes to
+  passwords may not accomplish this since password guessing may be able to
+  continue to build on previous guesses, or the new password may be easily
+  guessed using the old password.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000170-DB-000073&#39;
+  tag &quot;gid&quot;: &#39;V-61731&#39;
+  tag &quot;rid&quot;: &#39;SV-76221r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67647r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000195&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are managed and authenticated by the OS or
+  an enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  For each profile that can be applied to accounts where authentication is under
+  Oracle&#39;s control, determine the password verification function, if any, that is
+  in use:
+
+  SELECT * FROM SYS.DBA_PROFILES
+  WHERE RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  [AND PROFILE NOT IN (&lt;list of non-applicable profiles&gt;)] ORDER BY PROFILE;
+
+  Bearing in mind that a profile can inherit from another profile, and the root
+  profile is called DEFAULT, determine the name of the password verification
+  function effective for each profile.
+
+  If, for any profile, the function name is null, this is a finding.
+
+  For each password verification function, examine its source code.
+
+  If it does not enforce the organization-defined minimum number of characters by
+  which the password must differ from the previous password (eight of the
+  characters unless otherwise specified), this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If any user accounts are managed by Oracle:  Develop, test and
+  implement a password verification function that enforces DoD requirements.
+
+  (Oracle supplies a sample function called ORA12C_STRONG_VERIFY_FUNCTION, in the
+  script file &lt;oracle_home&gt;&#x2F;RDBMS&#x2F;ADMIN&#x2F;utlpwdmg.sql.  This can be used as the
+  starting point for a customized function.)&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;PASSWORD_VERIFY_FUNCTION&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    password_verify_function &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database account password verify function for profile: #{profile}&quot; do
+      subject { password_verify_function }
+      it { should_not eq [&#39;NULL&#39;] }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61733</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to enforce password
+  encryption for storage.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000196
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61733</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to enforce password
+  encryption for storage.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME  etwork\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61733&#39; do
+  title &quot;The DBMS must support organizational requirements to enforce password
+  encryption for storage.&quot;
+  desc &quot;Applications must enforce password encryption when storing passwords.
+  Passwords need to be protected at all times, and encryption is the standard
+  method for protecting passwords. If passwords are not encrypted, they can be
+  plainly read and easily compromised.
+
+      Database passwords stored in clear text are vulnerable to unauthorized
+  disclosure. Database passwords must always be encoded or encrypted when stored
+  internally or externally to the DBMS.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000171-DB-000074&#39;
+  tag &quot;gid&quot;: &#39;V-61733&#39;
+  tag &quot;rid&quot;: &#39;SV-76223r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67649r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000196&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;(Oracle stores and displays its passwords in encrypted form.
+  Nevertheless, this should be verified by reviewing the relevant system views,
+  along with the other items to be checked here.)
+
+  Ask the DBA to review the list of DBMS database objects, database configuration
+  files, associated scripts, and applications defined within and external to the
+  DBMS that access the database. The list should also include files, tables, or
+  settings used to configure the operational environment for the DBMS and for
+  interactive DBMS user accounts.
+
+  Ask the DBA and&#x2F;or ISSO to determine if any DBMS database objects, database
+  configuration files, associated scripts, and applications defined within or
+  external to the DBMS that access the database, and DBMS&#x2F;user environment
+  files&#x2F;settings&#x2F;tables, contain database passwords. If any do, confirm that DBMS
+  passwords stored internally or externally to the DBMS are encoded or encrypted.
+
+  If any passwords are stored in clear text, this is a finding.
+
+  Ask the DBA&#x2F;SA&#x2F;Application Support staff if they have created an external
+  password store for applications, batch jobs, and scripts to use.  Verify that
+  all passwords stored there are encrypted.
+
+  If a password store is used and any password is not encrypted, this is a
+  finding.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  You can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, you
+  cannot use Oracle Wallet Manager to manage credentials in the external password
+  store of the wallet. Instead, use the command-line utility mkstore to manage
+  these credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and maintain a list of DBMS database objects,
+  database configuration files, associated scripts, and applications defined
+  within or external to the DBMS that access the database, and DBMS&#x2F;user
+  environment files&#x2F;settings in the System Security Plan.
+
+  Record whether they do or do not contain DBMS passwords. If passwords are
+  present, ensure they are encoded or encrypted and protected by host system
+  security.
+
+  - - - - -
+  The following are notes on implementing a Secure External Password Store using
+  Oracle Wallet.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use, or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information that can be used to decide whether to add or delete
+  credentials from the store.  To list the contents of the external password
+  store, enter the following command at the command line:
+
+  $ mkstore -wrl wallet_location -listCredential
+
+  For example: $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+  mkstore -wrl wallet_location -create
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example: mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -createCredential oracle system
+  Enter password: password
+
+  In this specification, the wallet_location is the path to the directory where
+  the wallet was created. The db_connect_string used in the CONNECT
+  &#x2F;@db_connect_string statement must be identical to the db_connect_string
+  specified in the -createCredential command. The db_connect_string is the TNS
+  alias used to specify the database in the tnsnames.ora file or any service name
+  used to identify the database on an Oracle network. By default, tnsnames.ora is
+  located in the $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in
+  ORACLE_HOME\
+  etwork\\admin on Windows.  The username is the database logon credential. When
+  prompted, enter the password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  created the wallet in $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to
+  &#x2F;private&#x2F;ora12, then need to enter the following into client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+  SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61735</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61735</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Procedures for establishing temporary passwords that meet CMS password requirements for new accounts 
+    must be defined, documented, and implemented.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level authentication&#x2F;access 
+    mechanism, and not by Oracle, this is not a finding.
+
+    Where accounts are authenticated using passwords, review procedures and implementation evidence for creation 
+    of temporary passwords.
+
+    If the procedures or evidence do not exist or do not enforce passwords to meet CMS password requirements, this 
+    is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures for assigning temporary passwords to user accounts.
+
+    Procedures should include instructions to meet current CMS password length and complexity requirements and 
+    provide a secure method to relay the temporary password to the user.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61735&#39; do
+  title &quot;Procedures for establishing temporary passwords that meet DoD password
+  requirements for new accounts must be defined, documented, and implemented.&quot;
+  desc &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      New accounts authenticated by passwords that are created without a password
+  or with an easily guessed password are vulnerable to unauthorized access.
+  Procedures for creating new accounts with passwords should include the required
+  assignment of a temporary password to be modified by the user upon first use.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP  With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000077&#39;
+  tag &quot;gid&quot;: &#39;V-61735&#39;
+  tag &quot;rid&quot;: &#39;SV-76225r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-014900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67651r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Where accounts are authenticated using passwords, review procedures and
+  implementation evidence for creation of temporary passwords.
+
+  If the procedures or evidence do not exist or do not enforce passwords to meet
+  DoD password requirements, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures for assigning temporary passwords to user
+  accounts.
+
+  Procedures should include instructions to meet current DoD password length and
+  complexity requirements and provide a secure method to relay the temporary
+  password to the user.&quot;
+  describe &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39; do
+    skip &#39;A manual review is required to ensure procedures for establishing temporary passwords that meet DoD password
+    requirements for new accounts are defined, documented, and implemented&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61737</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61737</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61737&#39; do
+  title &quot;DBMS passwords must not be stored in compiled, encoded, or encrypted
+  batch jobs or compiled, encoded, or encrypted application source code.&quot;
+  desc  &quot;Password maximum lifetime is  the maximum period of time, (typically
+  in days) a user&#39;s password may be in effect before the user is forced to change
+  it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The storage of passwords in application source or batch job code that is
+  compiled, encoded, or encrypted prevents compliance with password expiration
+  and other management requirements, as well as provides another means for
+  potential discovery.
+
+      This requirement applies equally to those accounts managed by Oracle and
+  those managed and authenticated by the OS or an enterprise-wide mechanism.
+
+      This requirement should not be construed as prohibiting or discouraging the
+  encryption of source code, which remains an advisable precaution.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000079&#39;
+  tag &quot;gid&quot;: &#39;V-61737&#39;
+  tag &quot;rid&quot;: &#39;SV-76227r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67653r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review application source code required to be encoded or
+  encrypted for database accounts used by applications or batch jobs to access
+  the database.
+
+  Review source batch job code prior to compiling, encoding, or encrypting for
+  database accounts used by applications or the batch jobs themselves to access
+  the database.
+
+  Determine if the compiled, encoded, or encrypted application source code or
+  batch jobs contain passwords used for authentication to the database.
+
+  If any of the identified compiled, encoded, or encrypted application source
+  code or batch job code do contain passwords used for authentication to the
+  database, this is a finding.
+
+  - - - - -
+  The check would depend on the information provided by the DBA.  In a default
+  Oracle installation, all passwords are stored in an encrypted manner.  Ask the
+  DBA if they have created an External Password Store for applications, batch
+  jobs, and scripts to use.
+
+  Secure External Password Store
+
+  Can store password credentials for connecting to databases by using a
+  client-side Oracle wallet. An Oracle wallet is a secure software container that
+  stores authentication and signing credentials.
+
+  This wallet usage can simplify large-scale deployments that rely on password
+  credentials for connecting to databases. When this feature is configured,
+  application code, batch jobs, and scripts no longer need embedded user names
+  and passwords. This reduces risk because the passwords are no longer exposed,
+  and password management policies are more easily enforced without changing
+  application code whenever user names or passwords change.
+
+  The external password store of the wallet is separate from the area where
+  public key infrastructure (PKI) credentials are stored. Consequently, cannot
+  use Oracle Wallet Manager to manage credentials in the external password store
+  of the wallet. Instead, use the command-line utility mkstore to manage these
+  credentials.
+
+  How Does the External Password Store Work?
+
+  Typically, users (and as applications, batch jobs, and scripts) connect to
+  databases by using a standard CONNECT statement that specifies a database
+  connection string. This string can include a user name and password, and an
+  Oracle Net service name identifying the database on an Oracle Database network.
+  If the password is omitted, the connection prompts the user for the password.
+
+  For example, the service name could be the URL that identifies that database,
+  or a TNS alias entered in the tnsnames.ora file in the database. Another
+  possibility is a host:port:sid string.
+
+  The following examples are standard CONNECT statements that could be used for a
+  client that is not configured to use the external password store:
+
+    CONNECT salesapp@sales_db.us.example.com
+    Enter password: password
+
+    CONNECT salesapp@orasales
+    Enter password: password
+
+    CONNECT salesapp@ourhost37:1527:DB17
+    Enter password: password
+
+  In these examples, salesapp is the user name, with the unique connection string
+  for the database shown as specified in three different ways. Could use its URL
+  sales_db.us.example.com, or its TNS alias, orasales, from the tnsnames.ora
+  file, or its host:port:sid string.
+
+  However, when clients are configured to use the secure external password store,
+  applications can connect to a database with the following CONNECT statement
+  syntax, without specifying database logon credentials:
+
+    CONNECT &#x2F;@db_connect_string
+
+    CONNECT &#x2F;@db_connect_string AS SYSDBA
+
+    CONNECT &#x2F;@db_connect_string AS SYSOPER
+
+  In this specification, db_connect_string is a valid connection string to access
+  the intended database, such as the service name, URL, or alias as shown in the
+  earlier examples. Each user account must have its own unique connection string;
+  cannot create one connection string for multiple users.
+
+  In this case, the database credentials, user name and password, are securely
+  stored in an Oracle wallet created for this purpose. The autologon feature of
+  this wallet is turned on, so the system does not need a password to open the
+  wallet. From the wallet, it gets the credentials to access the database for the
+  user they represent.&quot;
+  tag &quot;fix&quot;: &quot;Design DBMS application code and batch job code that is compiled,
+  encoded or encrypted, to NOT contain passwords.
+
+  - - - - -
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information can use to decide whether to add or delete credentials
+  from the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, can set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+   1. Create a wallet on the client by using the following syntax at the command
+  line:
+
+   mkstore -wrl wallet_location -create
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -create
+      Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+   2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+
+      mkstore -wrl wallet_location -createCredential db_connect_string username
+      Enter password: password
+
+      For example:
+
+      mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+      Enter password: password
+
+      In this specification:
+
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+   3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in
+         $ORACLE_HOME&#x2F;network&#x2F;admin and Oracle home is set to &#x2F;private&#x2F;ora12,
+  then need to enter the following into your client sqlnet.ora file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+   4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D; 1.2 or 1.1
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.
+
+  (Note:  this assumes that a single sqlnet.ora file, in the default location, is
+  in use.  Please see the supplemental file, \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently-located
+  sqlnet.ora files.)&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61739</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must enforce password maximum lifetime restrictions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (1) (d)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database account effective life time limit is expected to cmp &gt;&#x3D; 60</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &gt;&#x3D; 60
+     got: UNLIMITED
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">[&quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;, &quot;UNLIMITED&quot;] is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61739</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must enforce password maximum lifetime restrictions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (1) (d), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If all user accounts are authenticated by the OS or an enterprise-level 
+    authentication&#x2F;access mechanism, and not by Oracle, this is not a finding.
+
+    Review DBMS settings to determine if passwords must be changed periodically. If not, this is a finding:
+
+    SELECT p1.profile,
+    CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+    TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit, &#39;DEFAULT&#39;, p4.limit, p2.limit))
+    END
+    END
+    END
+    END effective_life_time
+    FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+    WHERE p1.profile&#x3D;p2.profile
+    AND p3.profile&#x3D;&#39;DEFAULT&#39;
+    AND p4.profile&#x3D;&#39;DEFAULT&#39;
+    AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+    AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+    AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+    AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+    order by 1;
+
+    If the “effective_life_time” is greater than “60” for any profile applied to user accounts, and the 
+    need for this has not been documented and approved by the ISSO, this is a finding.
+
+    If the value is greater than 60 for any profile applied to user accounts, and the DBMS is configured to use 
+    Password Lifetime to disable inactive accounts, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For user accounts managed by Oracle: Modify DBMS settings to force users to periodically change 
+    their passwords. For example, using PPPPPP to stand for a profile name:
+
+    ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 60 PASSWORD_GRACE_TIME 0;
+    Do this for each profile applied to user accounts.
+    
+    Where a password lifetime longer than “60” is needed, document the reasons and obtain ISSO approval.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61739&#39; do
+  title &#39;The DBMS must enforce password maximum lifetime restrictions.&#39;
+  desc  &quot;Password maximum lifetime is the maximum period of time, (typically in
+  days) a user&#39;s password may be in effect before the user is forced to change it.
+
+      Passwords need to be changed at specific policy-based intervals as per
+  policy. Any password, no matter how complex, can eventually be cracked.
+
+      One method of minimizing this risk is to use complex passwords and
+  periodically change them. If the application does not limit the lifetime of
+  passwords and force users to change their passwords, there is the risk that the
+  system and&#x2F;or application passwords could be compromised.
+
+      The “PASSWORD_LIFE_TIME” parameter defines the number of days a password
+  remains valid. This can, but must not be, set to “UNLIMITED”. Further, the
+  “PASSWORD_GRACE_TIME” parameter, if set to “UNLIMITED”, can nullify the
+  “PASSWORD_LIFE_TIME”. “PASSWORD_GRACE_TIME” must be set to “0” days (or another
+  small integer).
+
+      Note: User authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible. Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. With respect to Oracle, this requirement applies to cases
+  where it is necessary to have accounts directly managed by Oracle.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000174-DB-000080&#39;
+  tag &quot;gid&quot;: &#39;V-61739&#39;
+  tag &quot;rid&quot;: &#39;SV-76229r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67655r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000199&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (1) (d)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If all user accounts are authenticated by the OS or an
+  enterprise-level authentication&#x2F;access mechanism, and not by Oracle, this is
+  not a finding.
+
+  Review DBMS settings to determine if passwords must be changed periodically. If
+  not, this is a finding:
+
+  SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;
+
+  If the “effective_life_time” is greater than “60” for any profile applied to
+  user accounts, and the need for this has not been documented and approved by
+  the ISSO, this is a finding.
+
+  If the value is greater than 35 for any profile applied to user accounts, and
+  the DBMS is configured to use Password Lifetime to disable inactive accounts,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For user accounts managed by Oracle: Modify DBMS settings to
+  force users to periodically change their passwords. For example, using PPPPPP
+  to stand for a profile name:
+  ALTER PROFILE PPPPPP LIMIT PASSWORD_LIFE_TIME 35 PASSWORD_GRACE_TIME 0;
+  Do this for each profile applied to user accounts.
+
+  (Note: Although the DoD requirement is for a password change every 60 days,
+  using a value of “35” facilitates the use of “PASSWORD_LIFE_TIME” as a means of
+  locking accounts inactive for 35 days. But if “35” is not a practical or
+  acceptable limit for password lifetime, set it to the standard DoD value of
+  “60”.)
+
+  Where a password lifetime longer than “60” is needed, document the reasons and
+  obtain ISSO approval.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  get_effective_life_time &#x3D; sql.query(&quot;SELECT p1.profile,
+  CASE p1.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p2.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p3.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  CASE p4.limit WHEN &#39;UNLIMITED&#39; THEN &#39;UNLIMITED&#39; ELSE
+  TO_CHAR(DECODE(p1.limit, &#39;DEFAULT&#39;, p3.limit, p1.limit) + DECODE(p2.limit,
+  &#39;DEFAULT&#39;, p4.limit, p2.limit))
+  END
+  END
+  END
+  END effective_life_time
+  FROM dba_profiles p1, dba_profiles p2, dba_profiles p3, dba_profiles p4
+  WHERE p1.profile&#x3D;p2.profile
+  AND p3.profile&#x3D;&#39;DEFAULT&#39;
+  AND p4.profile&#x3D;&#39;DEFAULT&#39;
+  AND p1.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39;
+  AND p2.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39;
+  AND p3.resource_name&#x3D;&#39;PASSWORD_LIFE_TIME&#39; -- from DEFAULT profile
+  AND p4.resource_name&#x3D;&#39;PASSWORD_GRACE_TIME&#39; -- from DEFAULT profile
+  order by 1;&quot;).column(&#39;effective_life_time&#39;)
+
+  get_effective_life_time.each do |effective_life_time|
+
+    describe &#39;The oracle database account effective life time limit&#39; do
+      subject { effective_life_time }
+      it { should cmp &gt;&#x3D; 60 }
+    end
+  end
+  describe get_effective_life_time do
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61741</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (a)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000185
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61741</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (a), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file &quot;Non-default sqlnet.ora
+  configurations.pdf&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to use
+  one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61741&#39; do
+  title &quot;The DBMS, when utilizing PKI-based authentication, must validate
+  certificates by constructing a certification path with status information to an
+  accepted trust anchor.&quot;
+  desc &quot;A trust anchor is an authoritative entity represented via a public key
+  and associated data. It is used in the context of public key infrastructures,
+  X.509 digital certificates, and DNSSEC.
+
+      When there is a chain of trust, usually the top entity to be trusted
+  becomes the trust anchor; it can be for example a Certification Authority (CA).
+  A certification path starts with the Subject certificate and proceeds through a
+  number of intermediate certificates up to a trusted root certificate, typically
+  issued by a trusted CA.
+
+      Path validation is necessary for a relying party to make an informed trust
+  decision when presented with any certificate not already explicitly trusted.
+
+      Status information for certification paths includes certificate revocation
+  lists or online certificate status protocol responses.
+
+      Database Management Systems that do not validate certificates to a trust
+  anchor are in danger of accepting certificates that are invalid and&#x2F;or
+  counterfeit. This could allow unauthorized access to the database.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000175-DB-000067&#39;
+  tag &quot;gid&quot;: &#39;V-61741&#39;
+  tag &quot;rid&quot;: &#39;SV-76231r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67657r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000185&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (a)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If PKI is not enabled in the Oracle Database, this is not a
+  finding.
+
+  If all accounts are authenticated by the OS or an enterprise-level
+  authentication&#x2F;access mechanism and not by Oracle, this is not a finding.
+
+  Review DBMS configuration to verify the certificates being accepted by the DBMS
+  have a valid certification path with status information to an accepted trust
+  anchor.
+
+  If certification paths are not being validated back to a trust anchor, this is
+  a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients. The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed.
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;TRUE
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to use
+  one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to validate certificates by constructing a
+  certification path with status information to an accepted trust anchor.
+
+  Configure the database to support Transport Layer Security (TLS) protocols and
+  the Oracle Wallet to store authentication and signing credentials, including
+  private keys.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61743</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-5 (2) (c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000187
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61743</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-5 (2) (c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  &quot;SSL_VERSION &#x3D; 1.2 or 1.1&quot; is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61743&#39; do
+  title &quot;The DBMS must map the authenticated identity to the user account using
+  PKI-based authentication.&quot;
+  desc &quot;The cornerstone of the PKI is the private key used to encrypt or
+  digitally sign information. The key by itself is a cryptographic value that
+  does not contain specific user information.
+
+      When including the DBMS in the Private Key Infrastructure, the
+  authenticated user must map directly to a user account in the DBMS. If the user
+  account is not directly tied to the authenticated identity, there is no way to
+  know which, if any, database user account has been authorized.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  &#39;SSL&#39;, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61743&#39;
+  tag &quot;rid&quot;: &#39;SV-76233r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67659r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000187&#39;]
+  tag &quot;nist&quot;: [&#39;IA-5 (2) (c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to verify DBMS user accounts are
+  being mapped directly to authenticated identity information being passed via
+  the PKI.
+
+  If user accounts are not being mapped to authenticated identity information
+  being passed via the PKI, this is a finding.
+
+  - - - - -
+  The database supports PKI-based authentication by using digital certificates
+  over TLS in addition to the native encryption and data integrity capabilities
+  of these protocols.
+
+  Oracle provides a complete PKI that is based on RSA Security, Inc., Public-Key
+  Cryptography Standards, and which interoperates with Oracle servers and
+  clients.  The database uses a wallet that is a container that is used to store
+  authentication and signing credentials, including private keys, certificates,
+  and trusted certificates needed by TLS. In an Oracle environment, every entity
+  that communicates over TLS must have a wallet containing an X.509 version 3
+  certificate, private key, and list of trusted certificates.  Security
+  administrators use Oracle Wallet Manager to manage security credentials on the
+  server.
+
+  If the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora contains the following entries,
+  TLS is installed. (Note: This assumes that a single sqlnet.ora file, in the
+  default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  WALLET_LOCATION &#x3D; (SOURCE&#x3D;
+                            (METHOD &#x3D; FILE)
+                            (METHOD_DATA &#x3D;
+                             DIRECTORY&#x3D;&#x2F;wallet)
+
+  SSL_CIPHER_SUITES&#x3D;(SSL_cipher_suiteExample)
+  SSL_VERSION &#x3D; 1.2 or 1.1
+  SSL_CLIENT_AUTHENTICATION&#x3D;FALSE&#x2F;TRUE
+
+  Note:  \&quot;SSL_VERSION &#x3D; 1.2 or 1.1\&quot; is the actual value, not a suggestion to
+  use one or the other.&quot;
+  tag &quot;fix&quot;: &quot;Configure the DBMS to map the authenticated identity directly to
+  the DBMS user account.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;WALLET_LOCATION &#x3D; (SOURCE&#x3D; (METHOD &#x3D; FILE) (METHOD_DATA &#x3D; DIRECTORY&#x3D;&#x2F;wallet)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should match &#x2F;SSL_CIPHER_SUITES&#x3D;\(\w*\)&#x2F; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;TRUE)&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION&#x3D;FALSE)&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61745</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61745</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Processes (services, applications, etc.) that connect to the DBMS independently of individual users, 
+    must use valid, current CMS-issued PKI certificates for authentication to the  DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Just as individual users must be authenticated, and just as they must use PKI-based authentication, 
+    so must any processes that connect to the DBMS.
+
+    The CMS standard for authentication of a process or device communicating with another process or device is 
+    the presentation of a valid, current, CMS-issued Public Key Infrastructure (PKI) certificate that has 
+    previously been verified as Trusted by an administrator of the other process or device.
+
+    This applies both to processes that run on the same server as the DBMS and to processes running on other computers.
+
+    The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are exceptions.  These cannot currently use 
+    certificate-based authentication.  For this reason among others, use of these accounts should be restricted to 
+    where it is truly needed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review configuration to confirm that accounts used by processes to connect to the DBMS are 
+    authenticated using valid, current CMS-issued PKI certificates.
+
+    If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not certificate-based, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For each such account, use CMS certificate-based authentication.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61745&#39; do
+  title &quot;Processes (services, applications, etc.) that connect to the DBMS
+  independently of individual users, must use valid, current DoD-issued PKI
+  certificates for authentication to the  DBMS.&quot;
+  desc &quot;Just as individual users must be authenticated, and just as they must
+  use PKI-based authentication, so must any processes that connect to the DBMS.
+
+      The DoD standard for authentication of a process or device communicating
+  with another process or device is the presentation of a valid, current,
+  DoD-issued Public Key Infrastructure (PKI) certificate that has previously been
+  verified as Trusted by an administrator of the other process or device.
+
+      This applies both to processes that run on the same server as the DBMS and
+  to processes running on other computers.
+
+      The Oracle-supplied accounts, SYS, SYSBACKUP, SYSDG, and SYSKM, are
+  exceptions.  These cannot currently use certificate-based authentication.  For
+  this reason among others, use of these accounts should be restricted to where
+  it is truly needed.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000177-DB-000069&#39;
+  tag &quot;gid&quot;: &#39;V-61745&#39;
+  tag &quot;rid&quot;: &#39;SV-76235r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015501&#39;
+  tag &quot;fix_id&quot;: &#39;F-67661r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review configuration to confirm that accounts used by processes
+  to connect to the DBMS are authenticated using valid, current DoD-issued PKI
+  certificates.
+
+  If any such account (other than SYS, SYSBACKUP, SYSDG, and SYSKM) is not
+  certificate-based, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;For each such account, use DoD certificate-based authentication.&#39;
+  describe &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39; do
+    skip &#39;A manual review is required to ensure processes (services, applications, etc.) that connect to the DBMS
+    independently of individual users, must use valid, current DoD-issued PKI
+    certificates for authentication to the  DBMS&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61747</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-7
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000803
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61747</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-7, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  </td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61747&#39; do
+  title &quot;The DBMS must use  NIST-validated FIPS 140-2-compliant cryptography
+  for authentication mechanisms.&quot;
+  desc &quot;Encryption is only as good as the encryption modules utilized.
+  Unapproved cryptographic module algorithms cannot be verified and cannot be
+  relied upon to provide confidentiality or integrity, and DoD data may be
+  compromised due to weak algorithms.
+
+      Applications utilizing encryption are required to use approved encryption
+  modules that meet the requirements of applicable federal laws, Executive
+  Orders, directives, policies, regulations, standards, and guidance.
+
+      FIPS 140-2 is the current standard for validating cryptographic modules,
+  and NSA Type-X (where X&#x3D;1, 2, 3, 4) products are NSA-certified hardware-based
+  encryption modules.
+
+      Authentication modules with weak encryption could allow an attacker to gain
+  access to data stored in the database and to the administration settings of the
+  DBMS.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000179-DB-000114&#39;
+  tag &quot;gid&quot;: &#39;V-61747&#39;
+  tag &quot;rid&quot;: &#39;SV-76237r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-015700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67663r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000803&#39;]
+  tag &quot;nist&quot;: [&#39;IA-7&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check the following settings to see if FIPS 140-2
+  authentication&#x2F;encryption is configured. If encryption is required but not
+  configured, check with the DBA and system administrator to see if other
+  mechanisms or third-party cryptography products are deployed for authentication.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize NIST-validated FIPS 140-2-compliant cryptography for all
+  authentication mechanisms.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf. (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2  &quot;
+  sql &#x3D; oracledb_session(user: &#39;system&#39;, password: &#39;xvIA7zonxGM&#x3D;1&#39;, host: &#39;localhost&#39;, service: &#39;ORCLCDB&#39;, sqlplus_bin: &#39;&#x2F;opt&#x2F;oracle&#x2F;product&#x2F;12.2.0.1&#x2F;dbhome_1&#x2F;bin&#x2F;sqlplus&#39;)
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61749</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002890
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-003123
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61749</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not 
+    mandatory in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">MA-4 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61749&#39; do
+  title &quot;The DBMS must employ cryptographic mechanisms to protect the integrity
+  and confidentiality of nonlocal maintenance and diagnostic communications.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the communication channels used to
+  remotely access the system are adequately protected.  If the communication
+  channel is not adequately protected authentication information, application
+  data, and configuration information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000184-DB-000119&#39;
+  tag &quot;gid&quot;: &#39;V-61749&#39;
+  tag &quot;rid&quot;: &#39;SV-76239r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67665r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002890&#39;, &#39;CCI-003123&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS configuration to determine if cryptographic
+  mechanisms are being utilized to protect the integrity and confidentiality of
+  nonlocal maintenance and diagnostic communications.
+
+  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to utilize cryptographic mechanisms to protect the
+  integrity and confidentiality of nonlocal maintenance and diagnostic
+  communications.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.AUTHENTICATION_SERVICES&#x3D; (BEQ, TCPS)&#39; }
+  end
+
+  describe.one do
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.2&#39; }
+    end
+    describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+      its(&#39;content&#39;) { should include &#39;SSL_VERSION &#x3D; 1.1&#39; }
+    end
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CLIENT_AUTHENTICATION &#x3D; TRUE)&#39; }
+  end
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSL_CIPHER_SUITES&#x3D; (SSL_RSA_WITH_AES_256_CBC_SHA384)&#39; }
+  end
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER&#x3D; (SHA384)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_CLIENT&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.ENCRYPTION_TYPES_SERVER&#x3D; (AES256)&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_CLIENT &#x3D; requested&#39; }
+    its(&#39;content&#39;) { should include &#39;SQLNET.CRYPTO_CHECKSUM_SERVER &#x3D; required&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61751</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      MA-4 c)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000877
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61751</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">MA-4 c), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61751&#39; do
+  title &quot;The DBMS must employ strong identification and authentication
+  techniques when establishing nonlocal maintenance and diagnostic sessions.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure the identification and
+  authentication techniques used to remotely access the system are strong enough
+  to protect the system. If the communication channel is not adequately
+  protected, authentication information, application data, and configuration
+  information could be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000185-DB-000116&#39;
+  tag &quot;gid&quot;: &#39;V-61751&#39;
+  tag &quot;rid&quot;: &#39;SV-76241r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67667r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000877&#39;]
+  tag &quot;nist&quot;: [&#39;MA-4 c)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether strong identification
+  and authentication techniques are required for nonlocal maintenance and
+  diagnostic sessions.
+
+  If strong identification and authentication techniques are not required, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to use strong identification and
+  authentication techniques for nonlocal maintenance and diagnostic sessions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs strong identification and authentication
+    techniques when establishing nonlocal maintenance and diagnostic sessions&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61753</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61753</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61753&#39; do
+  title &quot;Databases employed to write data to portable digital media must use
+  cryptographic mechanisms to protect and restrict access to information on
+  portable digital media.&quot;
+  desc &quot;When data is written to portable digital media, such as thumb drives,
+  floppy diskettes, compact disks, magnetic tape, etc., there is risk of data
+  loss.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+
+      Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access. Fewer protection measures are needed for
+  media containing information determined by the organization to be in the public
+  domain, to be publicly releasable, or to have limited or no adverse impact if
+  accessed by other than authorized personnel.
+
+      In these situations, it is assumed the physical access controls where the
+  media resides provide adequate protection. The decision whether to employ
+  cryptography is the responsibility of the information owner&#x2F;steward, who
+  exercises discretion within the framework of applicable rules, policies, and
+  law.
+
+      The selection of the cryptographic mechanisms used is based upon
+  maintaining the confidentiality and integrity of the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      When the organization has determined the risk warrants it, data written to
+  portable digital media must be encrypted. When information written to digital
+  media is not encrypted, it can be compromised.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000187-DB-000120&#39;
+  tag &quot;gid&quot;: &#39;V-61753&#39;
+  tag &quot;rid&quot;: &#39;SV-76243r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67669r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If data is written to portable media, the data must be
+  protected and access restricted via cryptographic mechanisms.
+
+  Review system documentation and interview DBA to determine whether data is ever
+  written directly from Oracle to portable media.
+
+  If this is the case, and cryptographic mechanisms are not used to protect data
+  written to portable media, this is a finding.
+
+  If all data writing from Oracle to portable media is done via intermediate
+  files, pipes, or other non-portable resources under the control of the
+  operating system, then this is not a finding with respect to Oracle.  (Note,
+  however, that if encryption is not in use, it may be a finding with respect to
+  the OS or the application that is used to perform the data transfer.)&quot;
+  tag &quot;fix&quot;: &quot;Reconfigure processes that write to portable digital media so
+  that they use cryptographic mechanisms to restrict access and protect the
+  information.&quot;
+  describe &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39; do
+    skip &#39;A manual review is required to ensure databases employed to write data to portable digital media use
+    cryptographic mechanisms to protect and restrict access to information on
+    portable digital media&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61755</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-16 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002262
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61755</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not                               
+    mandatory in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-16 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61755&#39; do
+  title &quot;The DBMS must support organizational requirements to encrypt
+  information stored in the database and information extracted or derived from
+  the database and stored on digital media.&quot;
+  desc &quot;When data is written to digital media, such as hard drives, mobile
+  computers, external&#x2F;removable hard drives, personal digital assistants,
+  flash&#x2F;thumb drives, etc., there is risk of data loss and&#x2F;or compromise.
+
+      An organizational assessment of risk guides the selection of media and
+  associated information contained on that media requiring restricted access.
+  Organizations need to document in policy and procedures the media requiring
+  restricted access, individuals authorized to access the media, and the specific
+  measures taken to restrict access.
+
+      Fewer protection measures are needed for media containing information
+  determined by the organization to be in the public domain, to be publicly
+  releasable, or to have limited or no adverse impact if accessed by other than
+  authorized personnel. In these situations, it is assumed the physical access
+  controls where the media resides provide adequate protection.
+
+      As part of a defense-in-depth strategy, the organization considers
+  routinely encrypting information at rest on selected secondary storage devices.
+  The decision whether to employ cryptography is the responsibility of the
+  information owner&#x2F;steward, who exercises discretion within the framework of
+  applicable rules, policies, and law. The selection of the cryptographic
+  mechanisms used is based upon maintaining the confidentiality and integrity of
+  the information.
+
+      The strength of mechanisms is commensurate with the classification and
+  sensitivity of the information.
+
+      Information at rest, when not encrypted, is open to compromise from
+  attackers who have gained unauthorized access to the data files.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000188-DB-000121&#39;
+  tag &quot;gid&quot;: &#39;V-61755&#39;
+  tag &quot;rid&quot;: &#39;SV-76245r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67671r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002262&#39;]
+  tag &quot;nist&quot;: [&#39;AC-16 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database and data derived
+  from it, this is not a finding.
+
+  Review DBMS settings to determine whether data stored on the database is
+  encrypted according to organizational requirements.
+
+  If not, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured.  If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  stored in the database.
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces enter the following SQL*Plus command:
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate
+  in a FIPS 140-compliant manner if FIPS 140 operation is enabled for the Solaris
+  Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Configure cryptographic functions to use FIPS 140-2-compliant
+  algorithms and hashing functions.
+
+  Configure the DBMS and&#x2F;or the OS to encrypt data at rest according to the
+  requirements of the organization.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;E48135-11.pdf.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61757</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001133
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idele time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61757</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must terminate the network connection associated with a communications session at the end of 
+    the session or 30 minutes of inactivity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and vendor documentation to verify network connections 
+    are terminated when a database communications session is ended or after 30 minutes of inactivity.
+
+    If the network connection is not terminated, this is a finding.
+
+    The defined duration for these timeouts 30 minutes, except to fulfill documented and validated mission 
+    requirements.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and&#x2F;or OS settings to disconnect network sessions when database communication 
+    sessions have ended or after the CMS-defined period of inactivity.
+
+    To configure this in Oracle, modify each relevant profile.  The resource name is IDLE_TIME, which is 
+    expressed in minutes.  Using PPPPPP as an example of a profile, set the timeout to 30 minutes with:
+    ALTER PROFILE PPPPPP LIMIT IDLE_TIME 30;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61757&#39; do
+  title &quot;The DBMS must terminate the network connection associated with a
+  communications session at the end of the session or 15 minutes of inactivity.&quot;
+  desc &quot;Non-local maintenance and diagnostic activities are those activities
+  conducted by individuals communicating through a network, either an external
+  network (e.g., the Internet) or an internal network.
+
+      The act of managing systems and applications includes the ability to access
+  sensitive application information, such as system configuration details,
+  diagnostic information, user information, and potentially sensitive application
+  data.
+
+      When applications provide a remote management capability inherent to the
+  application, the application needs to ensure all sessions and network
+  connections are terminated when non-local maintenance is completed.
+
+      When network connections are left open after the database session has
+  closed, the network session is open to session hijacking.
+
+      The Oracle Listener inherently meets most of this SRG requirement.  When a
+  user logs off, or times out, or encounters an unrecoverable network fault, the
+  Oracle Listener terminates all sessions and network connections.  The remaining
+  aspect of the requirement, the timeout because of inactivity, is configurable.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000190-DB-000137&#39;
+  tag &quot;gid&quot;: &#39;V-61757&#39;
+  tag &quot;rid&quot;: &#39;SV-76247r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67673r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001133&#39;]
+  tag &quot;nist&quot;: [&#39;SC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and vendor documentation to
+  verify network connections are terminated when a database communications
+  session is ended or after 15 minutes of inactivity.
+
+  If the network connection is not terminated, this is a finding.
+
+  The defined duration for these timeouts 15 minutes, except to fulfill
+  documented and validated mission requirements.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and&#x2F;or OS settings to disconnect network sessions
+  when database communication sessions have ended or after the DoD-defined period
+  of inactivity.
+
+  To configure this in Oracle, modify each relevant profile.  The resource name
+  is IDLE_TIME, which is expressed in minutes.  Using PPPPPP as an example of a
+  profile, set the timeout to 15 minutes with:
+  ALTER PROFILE PPPPPP LIMIT IDLE_TIME 15;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idele time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61759</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61759</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-13, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line &quot;SSLFIPS_140&#x3D;TRUE&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch &quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line &quot;SSLFIPS_140&#x3D;TRUE&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61759&#39; do
+  title &quot;The DBMS must implement required cryptographic protections using
+  cryptographic modules complying with applicable federal laws, Executive Orders,
+  directives, policies, regulations, standards, and guidance.&quot;
+  desc &quot;Use of cryptography to provide confidentiality and non-repudiation is
+  not effective unless strong methods are employed. Many earlier encryption
+  methods and modules have been broken and&#x2F;or overtaken by increasing computing
+  power. The NIST FIPS 140-2 cryptographic standards provide proven methods and
+  strengths to employ cryptography effectively.
+
+      Detailed information on the NIST Cryptographic Module Validation Program
+  (CMVP) is available at http:&#x2F;&#x2F;csrc.nist.gov&#x2F;groups&#x2F;STM&#x2F;cmvp&#x2F;index.html
+
+      Note: this does not require that all databases be encrypted. It specifies
+  that if encryption is required, then the implementation of the encryption must
+  satisfy the prevailing standards.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000140&#39;
+  tag &quot;gid&quot;: &#39;V-61759&#39;
+  tag &quot;rid&quot;: &#39;SV-76249r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67675r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If encryption is not required for the database, this is not a
+  finding.
+
+  If the DBMS has not implemented federally required cryptographic protections
+  for the level of classification of the data it contains, this is a finding.
+
+  Check the following settings to see if FIPS 140-2 encryption is configured. If
+  encryption is not configured, check with the DBA and SYSTEM Administrator to
+  see if other mechanisms or third-party products are deployed to encrypt data
+  during the transmission or storage of data.
+
+  For Transparent Data Encryption and DBMS_CRYPTO:
+
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+  SHOW PARAMETER DBFIPS_140
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if Oracle is configured for FIPS 140-2 SSL&#x2F;TLS authentication and&#x2F;or
+  Encryption:
+
+  Verify the DBMS version:
+  select * from V_$VERSION;
+
+  If the version displayed for Oracle Database is lower than 12.1.0.2, this is a
+  finding.
+
+  If the operating system is Windows and the DBMS version is 12.1.0.2, use the
+  opatch command to display the patches applied to the DBMS.
+
+  If the patches listed do not include \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot;,
+  this is a finding.
+
+  Open the fips.ora file in a browser or editor.  (The default location for
+  fips.ora is $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An
+  alternate location, if it is in use, is specified in the FIPS_HOME environment
+  variable.)
+
+  If the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot; is not found in fips.ora, or the file does not
+  exist, this is a finding.
+
+  For (Native) Network Data Encryption:
+  If the line, SQLNET.FIPS_140&#x3D;TRUE is not found in
+  $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;sqlnet.ora, this is a finding. (Note: This assumes
+  that a single sqlnet.ora file, in the default location, is in use. Please see
+  the supplemental file \&quot;Non-default sqlnet.ora configurations.pdf\&quot; for how to
+  find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+  Note: For the Solaris platform, when DBFIPS_140 is FALSE, TDE (but not
+  DBMS_CRYPTO) can still operate in a FIPS 140-compliant manner if FIPS 140
+  operation is enabled for the Solaris Cryptographic Framework.&quot;
+  tag &quot;fix&quot;: &quot;Implement required cryptographic protections using cryptographic
+  modules complying with applicable federal laws, Executive Orders, directives,
+  policies, regulations, standards, and guidance.
+
+  Where not already in effect, upgrade the DBMS to version 12.1.0.2 or higher.
+
+  Where the operating system is Windows and the DBMS version is 12.1.0.2, install
+  patch \&quot;WINDOWS DB BUNDLE PATCH 12.1.0.2.7\&quot; if not already deployed.
+
+  Open the fips.ora file in an editor.  (The default location for fips.ora is
+  $ORACLE_HOME&#x2F;ldap&#x2F;admin&#x2F; but alternate locations are possible. An alternate
+  location, if it is in use, is specified in the FIPS_HOME environment variable.)
+
+  Create or modify fips.ora to include the line \&quot;SSLFIPS_140&#x3D;TRUE\&quot;.
+
+  - - - - -
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows:
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  version &#x3D; sql.query(&#39;select version from v$instance;&#39;).column(&#39;version&#39;)
+
+  describe &#39;The oracle database version&#39; do
+    subject { version }
+    it { should cmp &gt;&#x3D; &#39;12.1.0.2&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;ldap&#x2F;admin&#x2F;fips.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;SSLFIPS_140&#x3D;TRUE&#39; }
+    it { should exist }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61761</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database data files containing sensitive information must be
+  encrypted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-13
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002450
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle tablespaces that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle table columns that are encrypted is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61761</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database data files containing sensitive information must be
+  encrypted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-13, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61761&#39; do
+  title &quot;Database data files containing sensitive information must be
+  encrypted.&quot;
+  desc &quot;Cryptography is only as strong as the encryption modules&#x2F;algorithms
+  employed to encrypt the data.
+
+      Use of weak or untested encryption algorithms undermines the purposes of
+  utilizing encryption to protect data.
+
+      Data files that are not encrypted are vulnerable to theft. When data files
+  are not encrypted they can be copied and opened on a separate system. The data
+  can be compromised without the information owner&#39;s knowledge that the theft has
+  even taken place.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000196-DB-000141&#39;
+  tag &quot;gid&quot;: &#39;V-61761&#39;
+  tag &quot;rid&quot;: &#39;SV-76251r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-016700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67677r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002450&#39;]
+  tag &quot;nist&quot;: [&#39;SC-13&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database does not handle sensitive information, this is
+  not a finding.
+
+  Review the system documentation to determine whether the database handles
+  classified information. If the database handles classified information, upgrade
+  the severity Category Code to I.
+
+  Review the system documentation to discover sensitive or classified data
+  identified by the Information Owner that requires encryption.
+
+  If no sensitive or classified data is identified as requiring encryption by the
+  Information Owner, this is not a finding.
+
+  Have the DBA use select statements in the database to review sensitive data
+  stored in tables as identified in the system documentation.
+  To see if Oracle is configured for FIPS 140-2 Transparent Data Encryption
+  and&#x2F;or DBMS_CRYPTO, enter the following SQL*Plus command:
+
+  SHOW PARAMETER DBFIPS_140
+
+  or the following SQL query:
+
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;DBFIPS_140&#39;;
+
+  If Oracle returns the value &#39;FALSE&#39;, or returns no rows, this is a finding.
+
+  To see if there are encrypted tablespaces, enter the following SQL*Plus command:
+
+  SELECT * FROM V$ENCRYPTED_TABLESPACES;
+
+  If no rows are returned, then there are no encrypted tablespaces.
+
+  To see if there are encrypted columns within existing tables, enter the
+  following SQL*Plus command:
+
+  SELECT * FROM DBA_ENCRYPTED_COLUMNS;
+
+  If no rows are returned, then there are no encrypted columns within existing
+  tables.
+
+  If all sensitive data identified is encrypted within the database objects,
+  encryption of the DBMS data files is optional and not a finding.
+
+  If all sensitive data is not encrypted within database objects, review
+  encryption applied to the DBMS host data files. If no encryption is applied,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Obtain and utilize native or third-party NIST-validated FIPS
+  140-2-compliant cryptography solution for the DBMS.  Configure cryptographic
+  functions to use FIPS 140-2-compliant algorithms and hashing functions.
+
+  The strength requirements are dependent upon data classification.
+
+  For unclassified data, where cryptography is required:
+  AES 128 for encryption
+  SHA 256 for hashing
+
+  NSA has established the suite B encryption requirements for protecting National
+  Security Systems (NSS) as follows.
+  AES 128 for Secret
+  AES 256 for Top Secret
+  SHA 256 for Secret
+  SHA 384 for Top Secret
+
+  National Security System is defined as:
+  (OMB Circular A-130) Any telecommunications or information system operated by
+  the United States Government, the function, operation, or use of which (1)
+  involves intelligence activities; (2) involves cryptologic activities related
+  to national security; (3) involves command and control of military forces; (4)
+  involves equipment that is an integral part of a weapon or weapons system; or
+  (5) is critical to the direct fulfillment of military or intelligence missions,
+  but excluding any system that is to be used for routine administrative and
+  business applications (including payroll, finance, logistics, and personnel
+  management applications).
+
+  There is more information on this topic in the Oracle Database 12c Advanced
+  Security Administrator&#39;s Guide, which may be found at
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ASOAG&#x2F;toc.htm.  (Note, however, that
+  because of changes in Oracle&#39;s licensing policy, it is no longer necessary to
+  purchase Oracle Advanced Security to use network encryption and advanced
+  authentication.)
+
+  FIPS 140-2 documentation can be downloaded from
+  http:&#x2F;&#x2F;csrc.nist.gov&#x2F;publications&#x2F;PubsFIPS.html#140-2&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+
+  encrypted_tablespaces &#x3D; sql.query(&#39;SELECT * FROM V$ENCRYPTED_TABLESPACES;&#39;).column(&#39;MASTERKEYID&#39;)
+
+  describe &#39;The oracle tablespaces that are encrypted&#39; do
+    subject { encrypted_tablespaces }
+    it { should_not be_empty }
+  end
+
+  encrypted_colums &#x3D; sql.query(&#39;SELECT * FROM DBA_ENCRYPTED_COLUMNS;&#39;).column(&#39;COLUMN_NAME&#39;)
+
+  describe &#39;The oracle table columns that are encrypted&#39; do
+    subject { encrypted_colums }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61763</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect the integrity of publicly available information
+  and applications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61763</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect the integrity of publicly available information
+  and applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61763&#39; do
+  title &quot;The DBMS must protect the integrity of publicly available information
+  and applications.&quot;
+  desc &quot;The purpose of this control is to ensure organizations explicitly
+  address the protection needs for public information and applications with such
+  protection likely being implemented as part of other security controls.
+
+      Databases designed to contain publicly available information, though not
+  concerned with confidentiality, must still maintain the integrity of the data
+  they house. If data available to the public is not protected from unauthorized
+  modification, then it cannot be trusted by those accessing it.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000201-DB-000145&#39;
+  tag &quot;gid&quot;: &#39;V-61763&#39;
+  tag &quot;rid&quot;: &#39;SV-76253r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67679r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Determine whether the database houses and distributes
+  information to the public. Review DBMS settings to determine whether controls
+  exist to protect the integrity of publicly available information.
+
+  If not, this is a finding.
+
+  - - - - -
+  All of the permissions and policies we would employ to protect information
+  would be in play, like access control mechanisms, auditing, and password
+  protection.  For data that is for display or download to the public for their
+  informational needs, it may be appropriate to place the data in a read-only
+  tablespace.  This will provide the DBA with the ability to modify content as
+  needed by modifying the tablespace from read-only to read-write in the event
+  the content needs to be modified.  Check with the Application Developer to see
+  what tables are used to store the data and&#x2F;or content that is displayed to the
+  public.  Then find the tablespace name the data objects are stored in.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  For better performance while accessing data in a read-only tablespace, can
+  issue a query that accesses all of the blocks of the tables in the tablespace
+  just before making it read-only. A simple query, such as SELECT COUNT (*),
+  executed against each table ensures that the data blocks in the tablespace can
+  be subsequently accessed most efficiently. This eliminates the need for the
+  database to check the status of the transactions that most recently modified
+  the blocks.
+
+  The following statement makes the flights tablespace read-only:
+
+  ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace.
+
+  If a transaction attempts further changes, it is terminated and rolled back.
+  However, transactions that already made changes and that attempt no further
+  changes are allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued.
+
+  If a transaction started before the statement remains active, but rolls back to
+  a savepoint, rolling back its changes to the tablespace, then the statement no
+  longer waits for this active transaction.&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the integrity of publicly
+  available information.
+
+  - - - - -
+  If the appropriate controls include placing the data in a read-only tablespace,
+  proceed as follows.
+
+  After we figure out the tablespace the data object is stored in:
+  $ sqlplus connect as sysdba
+  SQL&gt; SELECT table_name, tablespace_name from dba_tables where upper(table_name)
+  like &amp;tablename_from_developer;
+
+  Once we get the name of the tablespace where all of the important data is
+  stored, alter the tablespace to be read-only.
+  SQL&gt; ALTER TABLESPACE &amp;tablespace_where_data_is READ ONLY;
+
+  The following statement makes the flights tablespace read-only:
+   ALTER TABLESPACE flights READ ONLY;
+
+  Can issue the ALTER TABLESPACE...READ ONLY statement while the database is
+  processing transactions. After the statement is issued, the tablespace is put
+  into a transitional read-only state. No transactions are allowed to make
+  further changes (using DML statements) to the tablespace. If a transaction
+  attempts further changes, it is terminated and rolled back. However,
+  transactions that already made changes and that attempt no further changes are
+  allowed to commit or roll back.
+
+  The ALTER TABLESPACE...READ ONLY statement waits for the following transactions
+  to either commit or roll back before returning: transactions that have pending
+  or uncommitted changes to the tablespace and that were started before the
+  statement was issued. If a transaction started before the statement remains
+  active, but rolls back to a savepoint, rolling back its changes to the
+  tablespace, then the statement no longer waits for this active transaction.&quot;
+  describe &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS protects the integrity of publicly available information
+    and applications.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61765</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-23 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001185
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: RDSADMIN is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: RDSADMIN is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database idle time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of sessions per user for profile: DEFAULT is expected to cmp &lt;&#x3D; 3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 3
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database connect time for profile: DEFAULT is expected to cmp &lt;&#x3D; 15</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected it to be &lt;&#x3D; 15
+     got: [&quot;UNLIMITED&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61765</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Caveat</td>
+                  <td class="whitespace-pre-line">Not applicable for this CMS ARS 3.1 overlay, since the related security control is not selected in CMS ARS 3.1</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-23 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with &quot;alter profile&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file &quot;Non-default
+  sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   </td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61765&#39; do
+  title &quot;The DBMS must terminate user sessions upon user logoff or any other
+  organization or policy-defined session termination events, such as idle time
+  limit exceeded.&quot;
+  desc  &quot;This requirement focuses on communications protection at the
+  application session, versus network packet, level.
+
+      Session IDs are tokens generated by web applications to uniquely identify
+  an application user&#39;s session.   Applications will make application decisions
+  and execute business logic based on the session ID. Unique session identifiers
+  or IDs are the opposite of sequentially generated session IDs, which can be
+  easily guessed by an attacker. Unique session IDs help to reduce predictability
+  of said identifiers. Unique session IDs address man-in-the-middle attacks,
+  including session hijacking or insertion of false information into a session.
+  If the attackers are unable to identify or guess the session information
+  related to pending application traffic, they will have more difficulty in
+  hijacking the session or otherwise manipulating valid sessions. When a user
+  logs out, or when any other session termination event occurs, the application
+  must terminate the user session to minimize the potential for an attacker to
+  hijack that particular user session.
+
+      Database sessions must be terminated when no longer in use in order to
+  prevent session hijacking.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000220-DB-000149&#39;
+  tag &quot;gid&quot;: &#39;V-61765&#39;
+  tag &quot;rid&quot;: &#39;SV-76255r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-017600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67681r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001185&#39;]
+  tag &quot;nist&quot;: [&#39;SC-23 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and vendor documentation to verify user
+  sessions are terminated upon user logout. If they are not, this is a finding.
+
+  Review system documentation and organization policy to identify other events
+  that should result in session terminations. If other session termination events
+  are defined, review DBMS settings to verify occurrences of these events would
+  cause session termination.
+
+  If occurrences of defined session-terminating events do not cause session
+  terminations, this is a finding.
+
+  When a user logs off of an Oracle session gracefully or has the session
+  terminated for an idle timeout or any other reason, the session is terminated,
+  and the resources are returned to the system.  Check with the DBA to see what
+  mechanism is used to disconnect the session and what events the site uses to
+  determine if a connection needs to be terminated.
+
+  To test for timeout, open a connection and leave it idle for a period greater
+  than the defined idle timeout setting enforced by the system.  Then try to use
+  the connection.  If the connection is no longer active, then the mechanism
+  deployed to terminate the connection is active and working.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to terminate sessions upon user logoff.
+  Configure DBMS settings to terminate sessions upon the occurrence of any
+  organization or policy-defined session termination event.
+
+  - - - - -
+
+  To configure specific session termination processes, we need to define the
+  organization or policy-defined session termination event. Below are some
+  examples.
+
+  Oracle has several ways to disconnect idle sessions, both from within SQL*Plus
+  via resources profiles (connect_time, idle_time) and with the SQL*net expire
+  time parameter.
+
+  Can use profiles to set the connect time and idle time with \&quot;alter profile\&quot;
+  statements:
+
+  alter profile senior_claim_analyst limit
+  connect_time 15
+  sessions_per_user 2
+  ldle_time 10;
+
+  Profiles comprise a named set of resource limits. By default, when users are
+  created, they are given the default profile, which provides unlimited use of
+  all resources.
+
+  The syntax to create a profile follows:
+
+  CREATE PROFILE LIMIT resource_parameters|password_parameters;
+  Resource_parameters:
+  [SESSIONS_PER_USER n|UNLIMITED|DEFAULT]
+  [CPU_PER_SESSION n|UNLIMITED|DEFAULT]
+  [CPU_PER_CALL n|UNLIMITED|DEFAULT]
+  [CONNECT_TIME n|UNLIMITED|DEFAULT]
+  [IDLE_TIME n|UNLIMITED|DEFAULT]
+
+  By setting resource limits, can prevent users from performing operations that
+  will tie up the system and prevent other users from performing operations. Can
+  use resource limits for security, to ensure that users log off the system, so
+  as not to leave the session connected for long periods of time.
+
+  The system resource limits can be enforced at the session level, the call
+  level, or both. The session level is calculated from the time the user logs on
+  to the database until the user exits. The call level applies to each SQL
+  command issued. Session-level limits are enforced for each connection. When a
+  session-level limit is exceeded, only the last SQL command issued is rolled
+  back; no further work can be performed until a commit, rollback, or exit is
+  performed.
+
+  Using SQLNET.EXPIRE_TIME
+
+  The sqlnet.expire_time parameter is used to set a time interval, in minutes, to
+  determine how often a probe should be sent verifying that client&#x2F;server
+  connections are active. If there is a need to ensure that connections are not
+  left open indefinitely (or up to the time set by operating system-specific
+  parameters), set a value that is greater than 0. This protects the system from
+  connections left open due to an abnormal client termination.
+
+  When the probe detects a terminated connection or a connection no longer in
+  use, it signals an error, causing the server process to exit. This setting is
+  intended for use on the database server side of the connection, which usually
+  handles multiple connections at any one time. Limitations on using this
+  terminated (dead) connection detection feature are:
+
+  sqlnet.expire_time cannot be used on bequeathed connections.
+
+  The SQL*Net expire_time probe packet will generate additional network traffic
+  that may downgrade the network&#39;s performance, depending on the number of
+  connections.
+
+  Depending on the operating system that is in use, additional server processing
+  may need to be performed to distinguish the connection probe from other events
+  that occur. This overhead for detection of probe events can result in
+  downgraded network performance.
+
+  Turning-on expire_time
+
+  To set up these advanced features, simply edit the sqlnet.ora file. If a
+  beginner, follow this procedure:
+
+  Start the Oracle Network Manager GUI.
+
+  In the GUI navigator pane, expand the icons Local &gt;&gt; Profile.
+
+  From the list on the right-hand pane, select General.
+
+  Click on the Advanced tab.
+
+  Next, enter the values for the fields or options to set.
+
+  When finished, choose File &gt;&gt; Save Network Configuration to write the changes
+  to the sqlnet.ora file. (Note: This assumes that a single sqlnet.ora file, in
+  the default location, is in use. Please see the supplemental file \&quot;Non-default
+  sqlnet.ora configurations.pdf\&quot; for how to find multiple and&#x2F;or differently
+  located sqlnet.ora files.)
+
+  The sqlnet.ora inbound_connect_timeout parameter
+
+  The sqlnet.ora inbound_connect_timeout parameter is used to limit the time, set
+  in seconds, for a client to connect with the database server and provide the
+  required authentication information.
+
+  Also see sqlnet.inbound_connect_timeout tips.
+
+  To limit consumption of Oracle resources by unauthorized users and enable an
+  audit trail, should set time-limit values for the
+  sqlnet.inbound_connect_timeout parameter in wall-clock seconds. (This parameter
+  does not have default values.) Failure resulting from
+  sqlnet.inbound_connect_timeout will throw an ORA-03136 inbound connection timed
+  out error.   &quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  query_idle_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;IDLE_TIME&#39;
+  }
+
+  query_sessions_per_user &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;
+  }
+
+  query_connect_time &#x3D; %{
+    SELECT PROFILE, RESOURCE_NAME, LIMIT FROM DBA_PROFILES WHERE PROFILE &#x3D;
+  &#39;%&lt;profile&gt;s&#39; AND RESOURCE_NAME &#x3D; &#39;CONNECT_TIME&#39;
+  }
+
+  user_profiles &#x3D; sql.query(&#39;SELECT profile FROM dba_users;&#39;).column(&#39;profile&#39;).uniq
+
+  user_profiles.each do |profile|
+    idle_time &#x3D; sql.query(format(query_idle_time, profile: profile)).column(&#39;limit&#39;)
+    sessions_per_user &#x3D; sql.query(format(query_sessions_per_user, profile: profile)).column(&#39;limit&#39;)
+    connect_time &#x3D; sql.query(format(query_connect_time, profile: profile)).column(&#39;limit&#39;)
+
+    describe &quot;The oracle database idle time for profile: #{profile}&quot; do
+      subject { idle_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+
+    describe &quot;The oracle database number of sessions per user for profile: #{profile}&quot; do
+      subject { sessions_per_user }
+      it { should cmp &lt;&#x3D; 3 }
+    end
+
+    describe &quot;The oracle database connect time for profile: #{profile}&quot; do
+      subject { connect_time }
+      it { should cmp &lt;&#x3D; 15 }
+    end
+  end
+  if user_profiles.empty?
+    describe &#39;There are no user profiles, therefore this control is NA&#39; do
+      skip &#39;There are no user profiles, therefore this control is NA&#39;
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61769</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-24
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001665
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The list of oracle database log mode is expected to cmp &#x3D;&#x3D; &quot;ARCHIVELOG&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: ARCHIVELOG
+     got: [&quot;NOARCHIVELOG&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61769</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-24, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as &quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61769&#39; do
+  title &quot;The DBMS must preserve any organization-defined system state
+  information in the event of a system failure.&quot;
+  desc &quot;Failure in a known state can address safety or security in accordance
+  with the mission&#x2F;business needs of the organization. Failure in a known secure
+  state helps prevent a loss of confidentiality, integrity, or availability in
+  the event of a failure of the information system or a component of the system.
+
+      Preserving information system state information helps to facilitate system
+  restart and return to the operational mode of the organization with less
+  disruption of mission&#x2F;business processes.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000226-DB-000147&#39;
+  tag &quot;gid&quot;: &#39;V-61769&#39;
+  tag &quot;rid&quot;: &#39;SV-76259r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67685r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001665&#39;]
+  tag &quot;nist&quot;: [&#39;SC-24&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the database is used solely for transient data (such as one
+  dedicated to Extract-Transform-Load (ETL)), and a clear plan exists for the
+  recovery of the database by means other than archiving, this is not a finding.
+
+  If it has been determined that up-to-the second recovery is not necessary and
+  this fact is recorded in the system documentation, with appropriate approval,
+  this is not a finding.
+
+  Check DBMS settings to determine whether system state information is being
+  preserved in the event of a system failure.
+
+  The necessary state information is defined as \&quot;information necessary to
+  determine cause of failure and to return to operations with least disruption to
+  mission&#x2F;business processes\&quot;.
+
+  Oracle creates what is known as archive logs. Archive logs contain information
+  required to replay a transaction should something happen. The redo logs are
+  also used to copy transactions or pieces of transactions.
+
+  Issue the following commands to check the status of archive log mode:
+
+  $ sqlplus connect as sysdba --Check current archivelog mode in database
+
+  SQL&gt; archive log list
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination &#x2F;home&#x2F;oracle&#x2F;app&#x2F;oracle&#x2F;arc2&#x2F;ORCL
+  Oldest online log sequence 433
+  Next log sequence to archive 435
+  Current log sequence 435
+
+  If archive log mode is not enabled, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to preserve all required system state
+  information in the event of a system failure.
+
+  If the database is not in archive log mode, issue the following commands to put
+  the database in archive log mode. The database must be normally shutdown and
+  restarted before it can be placed in archive log mode.
+
+  $ sqlplus connect as sysdba -- stop and dismount database and shutdown instance.
+  SQL&gt; shutdown immediate;
+
+  Database closed.
+  Database dismounted.
+  ORACLE instance shut down.
+
+  SQL&gt; startup mount; -- Restart instance.
+
+  ORACLE instance started.
+  Total System Global Area 1653518336 bytes
+  Fixed Size 2228904 bytes
+  Variable Size 1325403480 bytes
+  Database Buffers 318767104 bytes
+  Redo Buffers 7118848 bytes
+  Database mounted.
+
+  SQL&gt; alter database archivelog; -- Enable ArchiveLog
+  Database altered.
+
+  SQL&gt; alter database open; -- Re-open database
+  Database altered.
+
+  Issue the following command to see the new status:
+  SQL&gt; select log_mode from v$database;
+
+  LOG_MODE
+  ------------
+  ARCHIVELOG
+
+  SQL&gt; archive log list;
+
+  Database log mode Archive Mode
+  Automatic archival Enabled
+  Archive destination USE_DB_RECOVERY_FILE_DEST
+  Oldest online log sequence 294
+  Next log sequence to archive 296
+  Current log sequence 296
+
+  The database is now in archive log mode, and transactions are either being
+  recorded to transport to another database or being re-applied if the database
+  becomes corrupt and needs to be restored from the last backup. Use the redo
+  logs to replay transactions not captured in the backup.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  log_mode &#x3D; sql.query(&#39;select log_mode from v$database;&#39;).column(&#39;log_mode&#39;)
+
+  describe &#39;The list of oracle database log mode&#39; do
+    subject { log_mode }
+    it { should cmp &#39;ARCHIVELOG&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61771</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-28
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001199
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database DBFIPS_140c parameter is expected not to be empty</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;[].empty?&#x60; to return false, got true</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61771</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-28, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name &quot;TSName&quot;,
+  e.encryptionalg &quot;Algorithm&quot;,
+  d.file_name &quot;File Name&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner &quot;Owner&quot;,
+  a.table_name &quot;Table Name&quot;,
+  e.encryptionalg &quot;Algorithm&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61771&#39; do
+  title &quot;The DBMS must take needed steps to protect data at rest and ensure
+  confidentiality and integrity of application data.&quot;
+  desc &quot;This control is intended to address the confidentiality and integrity
+  of information at rest in non-mobile devices and covers user information and
+  system information. Information at rest refers to the state of information when
+  it is located on a secondary storage device (e.g., disk drive, tape drive)
+  within an organizational information system. Applications and application users
+  generate information throughout the course of their application use.
+
+      User-generated data and application specific configuration data both need
+  to be protected. Configurations and&#x2F;or rule sets for firewalls, gateways,
+  intrusion detection&#x2F;prevention systems, and filtering routers and authenticator
+  content are examples of system information likely requiring protection.
+  Organizations may choose to employ different mechanisms to achieve
+  confidentiality and integrity protections, as appropriate.
+
+      If the confidentiality and integrity of application data is not protected,
+  the data will be open to compromise and unauthorized modification.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000231-DB-000154&#39;
+  tag &quot;gid&quot;: &#39;V-61771&#39;
+  tag &quot;rid&quot;: &#39;SV-76261r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67687r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001199&#39;]
+  tag &quot;nist&quot;: [&#39;SC-28&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the application owner and Authorizing Official have
+  determined that encryption of data at rest is NOT required, this is not a
+  finding.
+
+  Review DBMS settings to determine whether controls exist to protect the
+  confidentiality and integrity of data at rest in the database.
+
+  If controls do not exist or are not enabled, this is a finding.
+
+  To ensure that the appropriate controls are in place, discuss the precautions
+  taken with the site Database Administrators and System Administrators and try
+  to modify data at rest.
+
+  Oracle recommends using Transparent Data Encryption to protect data.
+
+  In order to check to see if the data is encrypted, for example, upon an
+  auditor&#39;s request, Oracle provides views that document the encryption status of
+  the database. For TDE column encryption, use the view &#39;dba_encrypted_columns&#39;,
+  which lists the owner, table name, column name, encryption algorithm, and salt
+  for all encrypted columns. For TDE tablespace encryption, the following SQL
+  statement lists all encrypted tablespaces with their encryption algorithm and
+  corresponding, encrypted, data files. Issue the following commands to check to
+  see if the data at rest is encrypted.
+
+  $ sqlplus connect as sysdba
+
+  SQL&gt; SELECT t.name \&quot;TSName\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;,
+  d.file_name \&quot;File Name\&quot;
+  FROM v$tablespace t,
+  v$encrypted_tablespaces e,
+  dba_data_files d
+  WHERE t.ts# &#x3D; e.ts#
+  and t.name &#x3D; d.tablespace_name;
+
+  The next SQL statement lists the table owner, tables within encrypted
+  tablespaces, and the encryption algorithm:
+
+  SQL&gt; SELECT a.owner \&quot;Owner\&quot;,
+  a.table_name \&quot;Table Name\&quot;,
+  e.encryptionalg \&quot;Algorithm\&quot;
+  FROM dba_tables a,
+  v$encrypted_tablespaces e
+  WHERE a.tablespace_name in (select t.name from v$tablespace t,
+  v$encrypted_tablespaces e where t.ts# &#x3D; e.ts#);&quot;
+  tag &quot;fix&quot;: &quot;Apply appropriate controls to protect the confidentiality and
+  integrity of data at rest in the database.
+
+  If no site-specific precautions are in place, use Oracle Advanced Security
+  Option to encrypt data at rest.
+
+  If ASO is not an option, use site-specific procedures to secure data at rest.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  parameter &#x3D; sql.query(&quot;select * from v$parameter where name &#x3D; &#39;DBFIPS_140c&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database DBFIPS_140c parameter&#39; do
+    subject { parameter }
+    it { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61775</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-3
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001084
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61775</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Security functions are defined as &quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-3, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61775&#39; do
+  title &quot;The DBMS must isolate security functions from nonsecurity functions by
+  means of separate security domains.&quot;
+  desc  &quot;Security functions are defined as \&quot;the hardware, software, and&#x2F;or
+  firmware of the information system responsible for enforcing the system
+  security policy and supporting the isolation of code and data on which the
+  protection is based\&quot;.
+
+      Developers and implementers can increase the assurance in security
+  functions by employing well-defined security policy models, structured,
+  disciplined, and rigorous hardware and software development techniques, and
+  sound system&#x2F;security engineering principles.
+
+      Database Management Systems typically separate security functionality from
+  non-security functionality via separate databases or schemas. Database objects
+  or code implementing security functionality must not be commingled with objects
+  or code implementing application logic. When security and non-security
+  functionality is commingled, users who have access to non-security
+  functionality may be able to access security functionality.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000233-DB-000124&#39;
+  tag &quot;gid&quot;: &#39;V-61775&#39;
+  tag &quot;rid&quot;: &#39;SV-76265r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67691r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001084&#39;]
+  tag &quot;nist&quot;: [&#39;SC-3&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether objects or code
+  implementing security functionality are located in a separate security domain,
+  such as a separate database or schema created specifically for security
+  functionality.
+
+  If security-related database objects or code are not kept separate, this is a
+  finding.
+
+  The Oracle elements of security functionality, such as the roles, permissions,
+  and profiles, along with password complexity requirements, are stored in
+  separate schemas in the database.  Review any site-specific applications
+  security modules built into the database and determine what schema they are
+  located in and take appropriate action.  The Oracle objects will be in the
+  Oracle Data Dictionary.&quot;
+  tag &quot;fix&quot;: &quot;Locate security-related database objects and code in a separate
+  database, schema, or other separate security domain from database objects and
+  code implementing application logic.  (This is the default behavior for
+  Oracle.)  Review any site-specific applications security modules built into the
+  database:   determine what schema they are located in and take appropriate
+  action.&quot;
+  describe &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39; do
+    skip &#39;A manual review is required to ensure the DBMS isolates security functions from nonsecurity functions by
+    means of separate security domains&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61777</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001682
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61777</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must automatically terminate emergency accounts after 60 days for each type of account.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Emergency application accounts are typically created due to an unforeseen operational event or could 
+    ostensibly be used in the event of a vendor support visit where a support representative requires a temporary 
+    unique account in order to perform diagnostic testing or conduct some other support-related activity. 
+    When these types of accounts are created, there is a risk that the temporary account may remain in place 
+    and active after the support representative has left.
+
+    In the event emergency application accounts are required, the application must ensure accounts that are 
+    designated as temporary in nature shall automatically terminate these accounts after an organization-defined 
+    time period.  Such a process and capability greatly reduces the risk that accounts will be misused, hijacked, 
+    or application data compromised.
+
+    Note that user authentication and account management must be done via an enterprise-wide mechanism whenever 
+    possible.  Examples of enterprise-level authentication&#x2F;access mechanisms include, but are not limited to, 
+    Active Directory and LDAP. This requirement applies to cases where it is necessary to have accounts directly 
+    managed by Oracle.
+
+    If it is possible for any temporary emergency accounts to be created and managed by Oracle, then the DBMS or 
+    application must provide or utilize a mechanism to automatically terminate such accounts after 60 days.
+
+    Emergency database accounts must be automatically terminated after an organization-defined time period in 
+    order to mitigate the risk of the account being misused.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization has a policy, consistently enforced, forbidding the creation of emergency 
+    or temporary accounts, this is not a finding.
+
+    Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms settings to 
+    determine if emergency accounts are being automatically terminated by the system after 60 days. Check also 
+    for custom code (scheduled jobs, procedures, triggers, etc.) for achieving this. 
+
+    If emergency accounts are not being terminated after 60 days, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create a profile specifically for emergency or temporary accounts.  When creating the accounts, 
+    assign them to this profile.  Configure DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, 
+    or implement custom code, to terminate accounts with this profile after 60 days.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61777&#39; do
+  title &quot;The DBMS must automatically terminate emergency accounts after an
+  organization-defined time period for each type of account.&quot;
+  desc &quot;Emergency application accounts are typically created due to an
+  unforeseen operational event or could ostensibly be used in the event of a
+  vendor support visit where a support representative requires a temporary unique
+  account in order to perform diagnostic testing or conduct some other
+  support-related activity. When these types of accounts are created, there is a
+  risk that the temporary account may remain in place and active after the
+  support representative has left.
+
+      In the event emergency application accounts are required, the application
+  must ensure accounts that are designated as temporary in nature shall
+  automatically terminate these accounts after an organization-defined time
+  period.  Such a process and capability greatly reduces the risk that accounts
+  will be misused, hijacked, or application data compromised.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where it is necessary to
+  have accounts directly managed by Oracle.
+
+      If it is possible for any temporary emergency accounts to be created and
+  managed by Oracle, then the DBMS or application must provide or utilize a
+  mechanism to automatically terminate such accounts after an
+  organization-defined time period.
+
+      Emergency database accounts must be automatically terminated after an
+  organization-defined time period in order to mitigate the risk of the account
+  being misused.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000234-DB-000157&#39;
+  tag &quot;gid&quot;: &#39;V-61777&#39;
+  tag &quot;rid&quot;: &#39;SV-76267r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67693r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001682&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization has a policy, consistently enforced,
+  forbidding the creation of emergency or temporary accounts, this is not a
+  finding.
+
+  Check DBMS settings, OS settings, and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanisms settings to determine if emergency accounts are being automatically
+  terminated by the system after an organization-defined time period. Check also
+  for custom code (scheduled jobs, procedures, triggers, etc.) for achieving
+  this.
+
+  If emergency accounts are not being terminated after an organization-defined
+  time period, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create a profile specifically for emergency or temporary
+  accounts.  When creating the accounts, assign them to this profile.  Configure
+  DBMS, OS, and&#x2F;or enterprise-level authentication&#x2F;access mechanisms, or
+  implement custom code, to terminate accounts with this profile after an
+  organization-defined time period.&quot;
+  describe &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39; do
+    skip &#39;A manual review is required to ensure the DBMS automatically terminates emergency accounts after an
+    organization-defined time period for each type of account&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61779</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-4 (12)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001274
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61779</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-4 (12), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61779&#39; do
+  title &quot;The DBMS must employ automated mechanisms to alert security personnel
+  of inappropriate or unusual activities with security implications.&quot;
+  desc &quot;Applications will typically utilize logging mechanisms for maintaining
+  a historical log of activity that occurs within the application. This
+  information can then be used for diagnostic purposes, forensics purposes, or
+  other purposes relevant to ensuring the availability and integrity of the
+  application.
+
+      While it is important to log events identified as being critical and
+  relevant to security, it is equally important to notify the appropriate
+  personnel in a timely manner, so they are able to respond to events as they
+  occur.
+
+      Solutions that include a manual notification procedure do not offer the
+  reliability and speed of an automated notification solution. Applications must
+  employ automated mechanisms to alert security personnel of inappropriate or
+  unusual activities that have security implications. If this capability is not
+  built directly into the application, the application must be able to integrate
+  with existing security infrastructure that provides this capability.
+
+      Database management systems that do not automatically alert security
+  personnel of unusual activities run the risk of security incidents going
+  unnoticed for long periods of time. This can allow security breaches to be
+  ongoing and more serious.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000237-DB-000158&#39;
+  tag &quot;gid&quot;: &#39;V-61779&#39;
+  tag &quot;rid&quot;: &#39;SV-76269r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67695r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001274&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (12)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security personnel are
+  alerted automatically when unusual or security-related activities (threats
+  identified by authoritative sources (e.g., CTOs) and IAW with CJCSM 6510.01A)
+  are detected on the database.
+
+  If security personnel are not automatically alerted, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure database to automatically alert security personnel of
+  inappropriate or unusual activities with security implications.
+
+  Oracle provides this capability with the Audit Vault.  Install and configure
+  Oracle Audit Vault if it is available.
+
+  If Audit Vault is not available, implement custom code or deploy a third-party
+  product to satisfy this requirement.&quot;
+  describe &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39; do
+    skip &#39;A manual review is required to ensure the DBMS employs automated mechanisms to alert security personnel
+    of inappropriate or unusual activities with security implications&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61781</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-4
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001090
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61781</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-4, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61781&#39; do
+  title &quot;The DBMS must prevent unauthorized and unintended information transfer
+  via shared system resources.&quot;
+  desc &quot;The purpose of this control is to prevent information, including
+  encrypted representations of information, produced by the actions of a prior
+  user&#x2F;role (or the actions of a process acting on behalf of a prior user&#x2F;role)
+  from being available to any current user&#x2F;role (or current process) that obtains
+  access to a shared system resource (e.g., registers, main memory, secondary
+  storage) after the resource has been released back to the information system.
+  Control of information in shared resources is also referred to as object reuse.
+
+      Data used for the development and testing of applications often involves
+  copying data from production.  It is important that specific procedures exist
+  for this process, so copies of sensitive data are not misplaced or left in a
+  temporary location without the proper controls.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000243-DB-000128&#39;
+  tag &quot;gid&quot;: &#39;V-61781&#39;
+  tag &quot;rid&quot;: &#39;SV-76271r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-018900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67697r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001090&#39;]
+  tag &quot;nist&quot;: [&#39;SC-4&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify there are proper procedures in place for the refreshing
+  of development&#x2F;test data from production.  Review any scripts or code that
+  exists for the movement of production data to development&#x2F;test, and verify
+  copies of production data are not left in unprotected locations.
+
+  If there is no documented procedure for data movement from production to
+  development&#x2F;test, this is a finding.
+
+  If the code that exists for data movement does not remove any copies of
+  production data from unprotected locations, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Create and document a process for moving data from production to
+  development&#x2F;test systems, and follow the process.
+
+  Modify any code used for moving data from production to development&#x2F;test
+  systems to ensure copies of production data are not left in nonsecured
+  locations.
+
+  Moving data is only a part of the challenge of protecting the data.  When the
+  data is moved, it should also be changed so sensitive information is not made
+  available in development environments.
+
+  With the Oracle Data Masking Pack for Oracle Enterprise Manager, organizations
+  can comply with data privacy and protection mandates that restrict the use of
+  actual customer data. With Oracle Data Masking Pack, sensitive information,
+  such as credit card or social security numbers, can be replaced with realistic
+  values, allowing production data to be safely used for development, testing, or
+  sharing with out-source or off-shore partners for other nonproduction purposes.
+   When used in conjunction with Oracle Enterprise Manager, it is easy to develop
+  a secure process that is capable of obfuscating the data during the movement
+  process.
+
+  If the Oracle Data Masking Pack and Enterprise Manager are not available,
+  develop site-specific procedures to manage and obfuscate sensitive data.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents unauthorized and unintended information transfer
+    via shared system resources&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61783</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002385
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61783</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61783&#39; do
+  title &quot;The DBMS must protect against or limit the effects of
+  organization-defined types of Denial of Service (DoS) attacks.&quot;
+  desc &quot;A variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks. For example, boundary protection devices can filter
+  certain types of packets to protect devices on an organization&#39;s internal
+  network from being directly affected by DoS attacks.
+
+      Employing increased capacity and bandwidth combined with service redundancy
+  may reduce the susceptibility to some DoS attacks.
+
+      Some of the ways databases can limit their exposure to DoS attacks are
+  through limiting the number of connections that can be opened by a single user
+  and database clustering.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000245-DB-000132&#39;
+  tag &quot;gid&quot;: &#39;V-61783&#39;
+  tag &quot;rid&quot;: &#39;SV-76273r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67699r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002385&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to verify the DBMS implements measures to
+  limit the effects of the organization-defined types of Denial of Service (DoS)
+  attacks.
+
+  If measures have not been implemented, this is a finding.
+
+  Check the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to see if a Rate Limit has
+  been established.  A rate limit is used to prevent denial of service (DOS)
+  attacks on a database or to control a logon storm such as may be caused by an
+  application server reboot.
+
+  - - - - -
+  Example of a listener configuration with rate limiting in effect:
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )
+  LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;8))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;12))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+    )&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to limit the effects of organization-defined
+  types of Denial of Service attacks.
+
+  Modify the $ORACLE_HOME&#x2F;network&#x2F;admin&#x2F;listener.ora to establish a Rate Limit.&quot;
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;RATE_LIMIT&#x3D;&#39; }
+    its(&#39;content&#39;) { should match &#x2F;CONNECTION_RATE_LISTENER&#x3D;\d*&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61785</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must check the validity of data inputs.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001310
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS checks the validity of data inputs</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS checks the validity of data inputs</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS checks the validity of data inputs</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS checks the validity of data inputs</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61785</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must check the validity of data inputs.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See &quot;Reporting Constraint Exceptions&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61785&#39; do
+  title &#39;The DBMS must check the validity of data inputs.&#39;
+  desc  &quot;Invalid user input occurs when a user inserts data or characters into
+  an application&#39;s data entry fields and the application is unprepared to process
+  that data. This results in unanticipated application behavior, potentially
+  leading to an application or information system compromise. Invalid user input
+  is one of the primary methods employed when attempting to compromise an
+  application.
+
+      All applications need to validate the data users attempt to input to the
+  application for processing. Rules for checking the valid syntax and semantics
+  of information system inputs (e.g., character set, length, numerical range,
+  acceptable values) are in place to verify inputs match specified definitions
+  for format and content. Inputs passed to interpreters are prescreened to
+  prevent the content from being unintentionally interpreted as commands.
+
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000251-DB-000160&#39;
+  tag &quot;gid&quot;: &#39;V-61785&#39;
+  tag &quot;rid&quot;: &#39;SV-76275r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67701r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001310&#39;]
+  tag &quot;nist&quot;: [&#39;SI-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS code, settings, field definitions, constraints, and
+  triggers to determine whether or not data being input into the database is
+  validated.
+
+  If code exists that allows invalid data to be acted upon or input into the
+  database, this is a finding.
+
+  If field definitions do not exist in the database, this is a finding.
+
+  If fields do not contain enabled constraints where required, this is a finding.
+
+  - - - - -
+  Oracle provides built-in processes to keep data and its integrity intact by
+  using constraints.
+
+  Integrity Constraint States
+  Can specify that a constraint is enabled (ENABLE) or disabled (DISABLE). If a
+  constraint is enabled, data is checked as it is entered or updated in the
+  database, and data that does not conform to the constraint is prevented from
+  being entered. If a constraint is disabled, then data that does not conform can
+  be allowed to enter the database.
+
+  Additionally, can specify that existing data in the table must conform to the
+  constraint (VALIDATE). Conversely, if specified NOVALIDATE, are not ensured
+  that existing data conforms.
+
+  An integrity constraint defined on a table can be in one of the following
+  states:
+      ENABLE, VALIDATE
+      ENABLE, NOVALIDATE
+      DISABLE, VALIDATE
+      DISABLE, NOVALIDATE
+
+  For details about the meaning of these states and an understanding of their
+  consequences, see the Oracle Database SQL Language Reference. Some of these
+  consequences are discussed here.
+
+  Disabling Constraints
+  To enforce the rules defined by integrity constraints, the constraints should
+  always be enabled. However, consider temporarily disabling the integrity
+  constraints of a table for the following performance reasons:
+
+  - When loading large amounts of data into a table
+
+  - When performing batch operations that make massive changes to a table (for
+  example, changing every employee&#39;s number by adding 1000 to the existing number)
+
+  - When importing or exporting one table at a time
+
+  In all three cases, temporarily disabling integrity constraints can improve the
+  performance of the operation, especially in data warehouse configurations.
+
+  It is possible to enter data that violates a constraint while that constraint
+  is disabled. Thus, always enable the constraint after completing any of the
+  operations listed in the preceding bullet list.
+
+  Enabling Constraints
+  While a constraint is enabled, no row violating the constraint can be inserted
+  into the table. However, while the constraint is disabled, such a row can be
+  inserted. This row is known as an exception to the constraint. If the
+  constraint is in the ENABLE, NOVALIDATE state, violations resulting from data
+  entered while the constraint was disabled remain. The rows that violate the
+  constraint must be either updated or deleted in order for the constraint to be
+  put in the validated state.
+
+  Can identify exceptions to a specific integrity constraint while attempting to
+  enable the constraint. See \&quot;Reporting Constraint Exceptions\&quot;. All rows
+  violating constraints are noted in an EXCEPTIONS table, which can be examined.
+
+  ENABLE, NOVALIDATE Constraint State
+  When a constraint is in the ENABLE, NOVALIDATE state, all subsequent statements
+  are checked for conformity to the constraint. However, any existing data in the
+  table is not checked. A table with ENABLE, NOVALIDATE constraints can contain
+  invalid data, but it is not possible to add new invalid data to it. Constraints
+  in the ENABLE, NOVALIDATE state is most useful in data warehouse configurations
+  that are uploading valid OLTP data.
+
+  Enabling a constraint does not require validation. Enabling a constraint
+  novalidate is much faster than enabling and validating a constraint. Also,
+  validating a constraint that is already enabled does not require any DML locks
+  during validation (unlike validating a previously disabled constraint).
+  Enforcement guarantees that no violations are introduced during the validation.
+  Hence, enabling without validating reduces the downtime typically associated
+  with enabling a constraint.
+
+  Efficient Use of Integrity Constraints: A Procedure
+
+  Using integrity constraint states in the following order can ensure the best
+  benefits:
+      Disable state.
+      Perform the operation (load, export, import).
+      ENABLE, NOVALIDATE state.
+      Enable state.
+
+  Some benefits of using constraints in this order are:
+      No locks are held.
+      All constraints can go to enable state concurrently.
+      Constraint enabling is done in parallel.
+      Concurrent activity on table is permitted.
+
+  Setting Integrity Constraints Upon Definition
+  When an integrity constraint is defined in a CREATE TABLE or ALTER TABLE
+  statement, it can be enabled, disabled, or validated or not validated as
+  determined by the specification of the ENABLE&#x2F;DISABLE clause. If the
+  ENABLE&#x2F;DISABLE clause is not specified in a constraint definition, the database
+  automatically enables and validates the constraint.
+
+  Disabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and disable
+  integrity constraints:
+
+  CREATE TABLE emp (
+     empno NUMBER(5) PRIMARY KEY DISABLE,   . . . ;
+
+  ALTER TABLE emp
+     ADD PRIMARY KEY (empno) DISABLE;
+
+  An ALTER TABLE statement that defines and disables an integrity constraint
+  never fails because of rows in the table that violate the integrity constraint.
+  The definition of the constraint is allowed because its rule is not enforced.
+
+  Enabling Constraints Upon Definition
+
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ;
+
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because rows of the table violate the integrity constraint.
+  If this case, the statement is rolled back, and the constraint definition is
+  not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  tag &quot;fix&quot;: &quot;Modify database code to properly validate data before it is put
+  into the database or acted upon by the database.
+
+  Modify database to contain field definitions for each field in the database.
+
+  Modify database to contain constraints on database columns and tables that
+  require them for data validity.
+
+  Review the application schemas implemented on the system.  Check the DDL for
+  the tables that are created for the applications to see if constraints have
+  been enabled.
+
+  - - - - -
+  Enabling Constraints Upon Definition
+  The following CREATE TABLE and ALTER TABLE statements both define and enable
+  integrity constraints:
+  CREATE TABLE emp (
+      empno NUMBER(5) CONSTRAINT emp.pk PRIMARY KEY,   . . . ) ;
+  ALTER TABLE emp
+      ADD CONSTRAINT emp.pk PRIMARY KEY (empno);
+
+  An ALTER TABLE statement that defines and attempts to enable an integrity
+  constraint can fail because existing rows of the table violate the integrity
+  constraint. In this case, the statement is rolled back, and the constraint
+  definition is not stored and not enabled.
+
+  When enabling a UNIQUE or PRIMARY KEY constraint, an associated index is
+  created.&quot;
+  describe &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39; do
+    skip &#39;A manual review is required to ensure the DBMS checks the validity of data inputs&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61787</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-7 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002716
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002718
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61787</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must verify there have not been unauthorized changes to the
+  DBMS software and information.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-7 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61787&#39; do
+  title &quot;The system must verify there have not been unauthorized changes to the
+  DBMS software and information.&quot;
+  desc &quot;Organizations are required to employ integrity verification
+  applications on information systems to look for evidence of information
+  tampering, errors, and omissions. The organization is also required to employ
+  good software engineering practices with regard to commercial off-the-shelf
+  integrity mechanisms (e.g., parity checks, cyclical redundancy checks, and
+  cryptographic hashes), and to use tools to automatically monitor the integrity
+  of the information system and the applications it hosts.
+
+      The DBMS opens data files and reads configuration files at system startup,
+  system shutdown, and during abort recovery efforts. If the DBMS does not verify
+  the trustworthiness of these files, it is vulnerable to malicious alterations
+  of its configuration or unauthorized replacement of data.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000262-DB-000159&#39;
+  tag &quot;gid&quot;: &#39;V-61787&#39;
+  tag &quot;rid&quot;: &#39;SV-76277r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67703r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002716&#39;, &#39;CCI-002718&#39;]
+  tag &quot;nist&quot;: [&#39;SI-7 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify the DBMS system initialization&#x2F;parameter files and
+  software is  included in the configuration of any  third-party software or
+  custom scripting at the OS level to perform integrity verification.
+
+  If neither a third-party application nor the OS is performing integrity
+  verification of DBMS system files, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Utilize the OS or a third-party product to perform file
+  verification of DBMS system file integrity.
+
+  (Using Oracle Configuration Manager with Enterprise Manager, configured to
+  perform this verification, is one possible way of satisfying this requirement.)&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61789</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must identify potentially security-relevant error conditions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61789</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must identify potentially security-relevant error conditions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61789&#39; do
+  title &#39;The DBMS must identify potentially security-relevant error conditions.&#39;
+  desc  &quot;The structure and content of error messages need to be carefully
+  considered by the organization and development team. The extent to which the
+  application is able to identify and handle error conditions is guided by
+  organizational policy and operational requirements.
+
+      Database logs can be monitored for specific security-related errors. Any
+  error that can have a negative effect on database security should be quickly
+  identified and forwarded to the appropriate personnel.  If security-relevant
+  error conditions are not identified by the DBMS, they may be overlooked by the
+  personnel responsible for addressing them.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000265-DB-000161&#39;
+  tag &quot;gid&quot;: &#39;V-61789&#39;
+  tag &quot;rid&quot;: &#39;SV-76279r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67705r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether security-related error
+  conditions are monitored for, and whether appropriate personnel are notified.
+
+  If security-related error conditions are not being monitored for, this is a
+  finding.
+
+  If appropriate personnel are not alerted when a security-related error
+  condition is found, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS to monitor for security-related error conditions.
+
+  Configure DBMS to alert appropriate personnel when security-related error
+  conditions are found.
+
+  This can be accomplished by using Oracle Audit Vault and&#x2F;or Oracle Enterprise
+  Manager. If neither of these products is deployed, then develop a site-specific
+  solution.
+
+  - - - - -
+  Notes to assist in developing a site-specific solution:
+
+  The AUD$ table has a column called RETURNCODE.  That column provides the return
+  code; so, for example, if the security-related condition is someone trying to
+  select data from a table that is not there, it would show up in the AUD$ table
+  as an ORA-00942 - table or view does not exist.  Since the RETURNCODE column is
+  only numeric, only the 00942 would be stored. If the query for the information
+  returned a row, the process would then need to form and send an email message.
+
+  Oracle recommends the use of Oracle Audit Vault to fill this requirement
+  without creating a custom solution.   It is possible to set up notifications
+  and alerts in Enterprise Manager as well, and if either of these alternatives
+  is not available, a custom solution will be necessary.&quot;
+  describe &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39; do
+    skip &#39;A manual review is required to ensure the DBMS must identifies potentially security-relevant error conditions&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61791</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-11 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001312
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61791</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-11 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61791&#39; do
+  title &quot;The DBMS must only generate error messages that provide information
+  necessary for corrective actions without revealing organization-defined
+  sensitive or potentially harmful information in error logs and administrative
+  messages that could be exploited.&quot;
+  desc &quot;Any application providing too much information in error logs and in
+  administrative messages to the screen risks compromising the data and security
+  of the application and system. The structure and content of error messages
+  needs to be carefully considered by the organization and development team.
+
+      The extent to which the application is able to identify and handle error
+  conditions is guided by organizational policy and operational requirements.
+  Sensitive information includes account numbers, social security numbers, and
+  credit card numbers.
+
+      Databases can inadvertently provide a wealth of information to an attacker
+  through improperly handled error messages. In addition to sensitive business or
+  personal information, database errors can provide host names, IP addresses,
+  user names, and other system information not required for troubleshooting but
+  very useful to someone targeting the system.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000266-DB-000162&#39;
+  tag &quot;gid&quot;: &#39;V-61791&#39;
+  tag &quot;rid&quot;: &#39;SV-76281r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-019900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67707r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001312&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database and application code to
+  verify error messages do not contain information beyond what is needed for
+  troubleshooting the issue.
+
+  If database errors contain PII data, sensitive business data, or information
+  useful for identifying the host system, this is a finding.
+
+  Notes on Oracle&#39;s approach to this issue:  Out of the box, Oracle covers this.
+  For example, if a user does not have access to a table, the error is just that
+  the table or view does not exist. The Oracle database is not going to display a
+  Social Security Number in an error code unless an application is programmed to
+  do so.  Oracle applications will not expose the actual transactional data to a
+  screen.  The only way Oracle will capture this information is to enable
+  specific logging levels.  Custom code would require a review to ensure
+  compliance.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS and custom database and application code not to
+  divulge sensitive information or information useful for system identification
+  in error information.&quot;
+  describe &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS only generates error messages that provide information
+    necessary for corrective actions without revealing organization-defined
+    sensitive or potentially harmful information in error logs and administrative
+    messages that could be exploited.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61793</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict error messages so only authorized personnel may
+  view them.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-11 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001314
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61793</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict error messages so only authorized personnel may
+  view them.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-11 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61793&#39; do
+  title &quot;The DBMS must restrict error messages so only authorized personnel may
+  view them.&quot;
+  desc &quot;If the application provides too much information in error logs and
+  administrative messages to the screen, this could lead to compromise. The
+  structure and content of error messages need to be carefully considered by the
+  organization and development team. The extent to which the information system
+  is able to identify and handle error conditions is guided by organizational
+  policy and operational requirements.
+
+      Some default DBMS error messages can contain information that could aid an
+  attacker in, among others things, identifying the database type, host address,
+  or state of the database. Custom errors may contain sensitive customer
+  information. It is important that error messages are displayed only to those
+  who are authorized to view them.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000267-DB-000163&#39;
+  tag &quot;gid&quot;: &#39;V-61793&#39;
+  tag &quot;rid&quot;: &#39;SV-76283r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020000&#39;
+  tag &quot;fix_id&quot;: &#39;F-67709r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001314&#39;]
+  tag &quot;nist&quot;: [&#39;SI-11 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and custom database code to determine if
+  error messages are ever displayed to unauthorized individuals:
+
+  i)  Review all end-user-facing applications that use the database, to determine
+  whether they display any DBMS-generated error messages to general users.  If
+  they do, this is a finding.
+
+  ii) Review whether the database is accessible to users who are not authorized
+  system administrators or database administrators, via the following types of
+  software:
+  iia) Oracle SQL*Plus
+  iib) Reporting and analysis tools
+  iic) Database management and&#x2F;or development tools, such as, but not limited to,
+  Toad.
+  iid) Application development tools, such as, but not limited to, Oracle
+  JDeveloper, Microsoft Visual Studio, PowerBuilder, or Eclipse.
+
+  If the answer to the preceding question (iia through iid) is Yes, inquire
+  whether, for each role or individual with respect to each tool, this access is
+  required to enable the user(s) to perform authorized job duties.  If No, this
+  is a finding. If Yes, continue:
+
+  For each tool in use, determine whether it is capable of suppressing
+  DBMS-generated error messages, and if it is, whether it is configured to do so.
+
+  Determine whether the role or individual, with respect to each tool, needs to
+  see detailed DBMS-generated error messages.
+
+  If No, and if the tool is not configured to suppress such messages, this is a
+  finding.
+
+  If Yes, determine whether the role&#x2F;user&#39;s need to see such messages is
+  documented in the System Security Plan.  If so, this is not a finding. If not,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;i)  For each end-user-facing application that displays
+  DBMS-generated error messages, configure or recode it to suppress these
+  messages.
+
+  If the application is coded in Oracle PL&#x2F;SQL, the EXCEPTION block can be used
+  to suppress or divert error messages.  Most other programming languages provide
+  comparable facilities, such as TRY ... CATCH.
+
+  ii) For each unauthorized user of each tool, remove the ability to access it.
+  For each tool where access to DBMS error messages is not required and can be
+  configured, suppress the messages.  For each role&#x2F;user that needs access to the
+  error messages, or needs a tool where the messages cannot be suppressed,
+  document the need in the system security plan.&quot;
+  describe &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39; do
+    skip &#39;A manual review is required to ensure the DBMS restricts error messages so only authorized personnel may
+    view them&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61795</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SI-4 (7)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001670
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61795</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SI-4 (7), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61795&#39; do
+  title &quot;The DBMS must support taking organization-defined list of least
+  disruptive actions to terminate suspicious events.&quot;
+  desc &quot;System availability is a key tenet of system security. Organizations
+  need to have the flexibility to be able to define the automated actions taken
+  in response to an identified incident. This includes being able to define a
+  least disruptive action the application takes to terminate suspicious events. A
+  least disruptive action may include initiating a request for human response
+  rather than blocking traffic or disrupting system operation.
+
+      In order to preserve availability, it is important for the DBMS to
+  terminate suspicious events with the least disruptive action possible.  If
+  suspicious events are not terminated, an attacker may gain entry into the
+  system; however, if the system overreacts to a suspicious event and takes an
+  overly disruptive action, a Denial of Service (DoS) may occur.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000287-DB-000126&#39;
+  tag &quot;gid&quot;: &#39;V-61795&#39;
+  tag &quot;rid&quot;: &#39;SV-76285r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67711r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001670&#39;]
+  tag &quot;nist&quot;: [&#39;SI-4 (7)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain the CC&#x2F;S&#x2F;A&#x2F;FA&#39;s list of suspicious event types and the
+  actions to be taken in response, ordered from least disruptive to last resort.
+
+  If the list does not exist, this is a finding.
+
+  For each event type in the list, review the measures in place in the
+  DBMS&#x2F;database configuration that are designed to detect and&#x2F;or counter the
+  event.  (Alerting an administrator or operator to the problem is a valid
+  measure.)
+
+  If, for any event type defined in the list, no means of detecting the event
+  exists, this is a finding.
+
+  For each event type where an automatic countermeasure is defined, verify that
+  its implementation is congruent with the list of defined actions.  If not, this
+  is a finding.
+
+  Verify that administrators&#x2F;operators are familiar with the list and the
+  notification mechanism and are equipped to follow the instructions in the list.
+   If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the list does not exist, create it.
+
+  For any event type defined in the list where no means of detecting the event
+  exists, either create the means of detection or modify the list.
+
+  For each event type where an automatic countermeasure is defined but its
+  implementation differs from its description in the list, either modify the
+  countermeasure or amend the list.
+
+  If any administrators&#x2F;operators are unfamiliar with the list or the
+  notification mechanism, train them.
+
+  If any administrators&#x2F;operators are not equipped to follow the instructions in
+  the list, provide them with the means to do so.
+
+  Ensure the list is incorporated into, or referenced by, the System Security
+  Plan.
+
+  Note that Oracle Audit Vault and Oracle Database Vault are optional products
+  that can be of considerable use in implementing active protection measures of
+  this kind.&quot;
+  describe &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS supports taking organization-defined list of least
+    disruptive actions to terminate suspicious events.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61797</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  created.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001683
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61797</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  created.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61797&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  created.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to simply create a new account.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners exist. Such a process greatly
+  reduces the risk that accounts will be surreptitiously created and provides
+  logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account creation within
+  Oracle.  Indeed, in a configuration where accounts are managed externally, the
+  creation of an account within Oracle may indicate hostile activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000291-DB-000139&#39;
+  tag &quot;gid&quot;: &#39;V-61797&#39;
+  tag &quot;rid&quot;: &#39;SV-76287r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67713r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001683&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are created.
+
+  If the DBMS does not notify appropriate individuals when accounts are created,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are created.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-creation activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    created&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61799</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  modified.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001684
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61799</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  modified.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61799&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  modified.&quot;
+  desc &quot;Once an attacker establishes initial access to a system, they often
+  attempt to create a persistent method of re-establishing access. One way to
+  accomplish this is for the attacker to modify an existing account for later use.
+
+      Notification of account creation is one method and best practice for
+  mitigating this risk. A comprehensive account management process will ensure an
+  audit trail which documents the creation of application user accounts and
+  notifies administrators and&#x2F;or application owners that they exist. Such a
+  process greatly reduces the risk that accounts will be surreptitiously created
+  and provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP. This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account modification
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000292-DB-000138&#39;
+  tag &quot;gid&quot;: &#39;V-61799&#39;
+  tag &quot;rid&quot;: &#39;SV-76289r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020500&#39;
+  tag &quot;fix_id&quot;: &#39;F-67715r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001684&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are modified.
+
+  If the DBMS does not notify appropriate individuals when accounts are modified,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are modified.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record account-modification activity.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    modified&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61801</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001685
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61801</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when account disabling
+  actions are taken.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61801&#39; do
+  title &quot;The DBMS must notify appropriate individuals when account disabling
+  actions are taken.&quot;
+  desc &quot;When application accounts are disabled, user accessibility is
+  affected. Accounts are utilized for identifying individual application users or
+  for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must audit account disabling actions and,
+  as required, notify the appropriate individuals so they can investigate the
+  event. Such a capability greatly reduces the risk that application
+  accessibility will be negatively affected for extended periods of time and also
+  provides logging that can be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon the disabling of an
+  account within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000293-DB-000130&#39;
+  tag &quot;gid&quot;: &#39;V-61801&#39;
+  tag &quot;rid&quot;: &#39;SV-76291r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67717r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001685&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when account disabling actions are taken.
+
+  If the DBMS does not notify appropriate individuals when account disabling
+  actions are taken, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are disabled.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record disabling of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when account disabling
+    actions are taken&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61803</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must notify appropriate individuals when accounts are
+  terminated.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-2 (4)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001686
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61803</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must notify appropriate individuals when accounts are
+  terminated.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-2 (4), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61803&#39; do
+  title &quot;The DBMS must notify appropriate individuals when accounts are
+  terminated.&quot;
+  desc &quot;When application accounts are terminated, user accessibility is
+  affected.  Accounts are utilized for identifying individual application users
+  or for identifying the application processes themselves.
+
+      In order to detect and respond to events that affect user accessibility and
+  application processing, applications must notify the appropriate individuals
+  when an account is terminated so they can investigate the event. Such a
+  capability greatly reduces the risk that application accessibility will be
+  negatively affected for extended periods of time and provides logging that can
+  be used for forensic purposes.
+
+      Note that user authentication and account management must be done via an
+  enterprise-wide mechanism whenever possible.  Examples of enterprise-level
+  authentication&#x2F;access mechanisms include, but are not limited to, Active
+  Directory and LDAP.  This requirement applies to cases where accounts are
+  directly managed by Oracle.
+
+      Notwithstanding how accounts are normally managed, the DBMS must support
+  the requirement to notify appropriate individuals upon account termination
+  within Oracle.  Indeed, in a configuration where accounts are managed
+  externally, the manipulation of an account within Oracle may indicate hostile
+  activity.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000294-DB-000129&#39;
+  tag &quot;gid&quot;: &#39;V-61803&#39;
+  tag &quot;rid&quot;: &#39;SV-76293r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-020700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67719r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001686&#39;]
+  tag &quot;nist&quot;: [&#39;AC-2 (4)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings to determine whether it will notify
+  appropriate individuals when accounts are terminated.
+
+  If the DBMS does not notify appropriate individuals when accounts are
+  terminated, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Working with the DBA and site management, determine the
+  appropriate individuals (by job role) to be notified.
+
+  If Oracle Audit Vault is available, configure it to notify the appropriate
+  individuals when accounts are terminated.
+
+  If Oracle Audit Vault is not available, configure the Oracle DBMS&#39;s auditing
+  feature to record termination of accounts.
+
+  If Standard Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.AUD$ table for these records and notify the appropriate individuals.
+
+  If unified Auditing is used:
+  Create and deploy a mechanism, such as a frequently-run job, to monitor the
+  SYS.UNIFIED_AUDIT_TRAIL view for these records and notify the appropriate
+  individuals.&quot;
+  describe &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39; do
+    skip &#39;A manual review is required to ensure the DBMS notifies the appropriate individuals when accounts are
+    terminated&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61809</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must implement separation of duties through assigned
+    information access authorizations.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-5 c
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002220
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61809</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must implement separation of duties through assigned
+    information access authorizations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-5 c, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61809&#39; do
+  title &quot;The DBMS must implement separation of duties through assigned
+    information access authorizations.&quot;
+  desc  &quot;Separation of duties is a prevalent Information Technology control
+    that is implemented at different layers of the information system, including
+    the operating system and in applications. It serves to eliminate or reduce the
+    possibility that a single user may carry out a prohibited action. Separation of
+    duties requires that the person accountable for approving an action is not the
+    same person who is tasked with implementing or carrying out that action.
+
+        Additionally, the person or entity accountable for monitoring the activity
+    must be separate as well. To meet this requirement, applications, when
+    applicable, shall be divided where functionality is based on roles and duties.
+    Examples of separation of duties include: (i) mission functions and distinct
+    information system support functions are divided among different
+    individuals&#x2F;roles; (ii) different individuals perform information system
+    support functions (e.g., system management, systems programming, configuration
+    management, quality assurance and testing, network security); (iii) security
+    personnel who administer access control functions do not administer audit
+    functions; and (iv) different administrator accounts for different roles.
+
+        Privileges granted outside the context of the application user job function
+    are more likely to go unmanaged or without oversight for authorization.
+    Maintenance of privileges using roles defined for discrete job functions offers
+    improved oversight of application user privilege assignments and helps to
+    protect against unauthorized privilege assignment.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000062-DB-000009&#39;
+  tag &quot;gid&quot;: &#39;V-61809&#39;
+  tag &quot;rid&quot;: &#39;SV-76299r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-003300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67725r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;, &#39;CCI-002220&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;nist&quot;: [&#39;AC-5 c&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Obtain a list of privileges assigned to the DBMS user accounts.
+    If any direct privilege assignments exist that can be assigned to a role, this
+    is a finding.
+
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege on &#39;
+            || table_name value
+    FROM    dba_tab_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;,  &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,  &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;,
+    &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || grantee
+            || &#39; is directly granted &#39;
+            || privilege
+            || &#39; privilege &#39; value
+    FROM    dba_sys_privs
+    WHERE   grantee NOT IN (SELECT role FROM dba_roles)
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE INDEXTYPE&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;UNLIMITED TABLESPACE&#39; )
+    AND     grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;PUBLIC&#39;,
+            &#39;DBSNMP&#39;, &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;,
+            &#39;SYSDG&#39;, &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,
+            &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;, &#39;ORDDATA&#39;,
+            &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;, &#39;ORDPLUGINS&#39;,
+            &#39;GSMADMIN_INTERNAL&#39;, &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;,
+            &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;, &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;, &#39;SYSKM&#39;, &#39;SYSMAN_TYPES&#39;,
+            &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;, &#39;GSMCATUSER&#39;, &#39;OLAPSYS&#39;,
+            &#39;CLOUD_SWLIB_USER&#39;,
+            &#39;GSMUSER&#39;, &#39;MDDATA&#39;, &#39;XS$NULL&#39;, &#39;CLOUD_ENGINE_USER&#39;
+            )
+    UNION
+    SELECT
+            &#39;User &#39;
+            || username
+            || &#39; is granted &#39;
+            || privilege
+            || &#39; privilege via role &#39;
+            || rp.granted_role value
+    FROM    dba_users u,
+            dba_role_privs rp,
+            dba_sys_privs sp
+    WHERE   username &#x3D; rp.grantee
+    AND     rp.granted_role &#x3D; sp.grantee
+    AND     privilege NOT IN
+            (
+            &#39;CREATE SEQUENCE&#39;,
+            &#39;CREATE TRIGGER&#39;,
+            &#39;SET CONTAINER&#39;,
+            &#39;CREATE CLUSTER&#39;,
+            &#39;CREATE PROCEDURE&#39;,
+            &#39;CREATE TYPE&#39;,
+            &#39;CREATE SESSION&#39;,
+            &#39;CREATE OPERATOR&#39;,
+            &#39;CREATE TABLE&#39;,
+            &#39;CREATE INDEXTYPE&#39;
+            )
+    AND     username NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39; )
+    AND     rp.granted_role NOT IN
+            (
+            &#39;EXP_FULL_DATABASE&#39;,&#39;AQ_ADMINISTRATOR_ROLE&#39;,&#39;DV_REALM_RESOURCE&#39;,
+            &#39;DBA&#39;,&#39;CDB_DBA&#39;,&#39;OEM_ADVISOR&#39;,&#39;RECOVERY_CATALOG_OWNER&#39;,
+            &#39;EM_EXPRESS_ALL&#39;,&#39;SCHEDULER_ADMIN&#39;,&#39;OLAP_USER&#39;,
+            &#39;RESOURCE&#39;,&#39;EM_EXPRESS_BASIC&#39;,&#39;IMP_FULL_DATABASE&#39;,&#39;CONNECT&#39;,
+            &#39;AUDIT_ADMIN&#39;,&#39;DATAPUMP_EXP_FULL_DATABASE&#39;,&#39;GSMADMIN_ROLE&#39;,
+            &#39;DV_REALM_OWNER&#39;,&#39;OLAP_DBA&#39;,&#39;JAVADEBUGPRIV&#39;,
+            &#39;DATAPUMP_IMP_FULL_DATABASE&#39;,&#39;OEM_MONITOR&#39;,
+            &#39;APEX_GRANTS_FOR_NEW_USERS_ROLE&#39;
+            )
+    UNION
+
+    SELECT
+            &#39;User &#39;
+            ||grantee
+            ||&#39; is granted &#39;
+            ||privilege
+            ||&#39; on &#39;
+            ||owner
+            ||&#39;.&#39;
+            ||table_name
+            ||&#39;.&#39;
+            ||column_name
+            ||&#39; by &#39;
+            ||grantor
+    FROM    dba_col_privs
+    WHERE   grantee NOT IN
+            (
+            &#39;XDB&#39;, &#39;SYSTEM&#39;, &#39;SYS&#39;, &#39;LBACSYS&#39;,
+            &#39;DVSYS&#39;, &#39;DVF&#39;, &#39;SYSMAN_RO&#39;, &#39;SYSMAN_BIPLATFORM&#39;,
+            &#39;SYSMAN_MDS&#39;, &#39;SYSMAN_OPSS&#39;, &#39;SYSMAN_STB&#39;, &#39;DBSNMP&#39;,
+            &#39;SYSMAN&#39;, &#39;APEX_040200&#39;, &#39;WMSYS&#39;, &#39;SYSDG&#39;,
+            &#39;SYSBACKUP&#39;, &#39;SPATIAL_WFS_ADMIN_USR&#39;,
+            &#39;SPATIAL_CSW_ADMIN_US&#39;,&#39;GSMCATUSER&#39;,
+            &#39;OLAPSYS&#39;, &#39;SI_INFORMTN_SCHEMA&#39;, &#39;OUTLN&#39;, &#39;ORDSYS&#39;,
+            &#39;ORDDATA&#39;, &#39;OJVMSYS&#39;, &#39;ORACLE_OCM&#39;, &#39;MDSYS&#39;,
+            &#39;ORDPLUGINS&#39;, &#39;GSMADMIN_INTERNAL&#39;, &#39;MDDATA&#39;,
+            &#39;FLOWS_FILES&#39;, &#39;IMP_FULL_DATABASE&#39;,
+            &#39;DIP&#39;, &#39;CTXSYS&#39;, &#39;AUDSYS&#39;, &#39;APPQOSSYS&#39;,
+            &#39;APEX_PUBLIC_USER&#39;, &#39;ANONYMOUS&#39;,
+            &#39;SPATIAL_CSW_ADMIN_USR&#39;,&#39;SYSKM&#39;,
+            &#39;SYSMAN_TYPES&#39;, &#39;MGMT_VIEW&#39;, &#39;EUS_ENGINE_USER&#39;,
+            &#39;EXFSYS&#39;,&#39;SYSMAN_APM&#39;
+            )
+    ;
+
+    (The lists of special accounts that are excluded from this requirement may not
+    be complete.  It is expected that the DBA will edit the lists to suit local
+    circumstances, adding other special accounts as necessary, and removing any
+    that are not supposed to be in use in the Oracle deployment that is under
+    review.  Similarly, the lists of privileges and roles excluded from the
+    subqueries may be modified according to circumstances.)&quot;
+  tag &quot;fix&quot;: &quot;Define DBMS user roles based on privilege and job function
+  requirements.
+
+  Assign the required privileges to the role, and assign the role to authorized
+  DBMS user accounts.
+
+  Revoke any privileges directly assigned to DBMS user accounts, and assign them
+  to a role the DBMS user already has assigned.&quot;
+  describe &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39; do
+    skip &#39;A manual review is required to ensure the DBMS implements separation of duties through assigned
+    information access authorizations&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61813</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide an audit log reduction capability.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001875
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides an audit log reduction capability</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides an audit log reduction capability</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides an audit log reduction capability</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides an audit log reduction capability</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61813</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide an audit log reduction capability.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Deploy software capable of performing audit data reduction.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61813&#39; do
+  title &#39;The system must provide an audit log reduction capability.&#39;
+  desc  &quot;Audit reduction is used to reduce the volume of audit records in order
+  to facilitate manual review.  Before a security review, information systems
+  and&#x2F;or applications with an audit reduction capability may remove many audit
+  records known to have little security significance.
+
+      This is generally accomplished by removing records generated by specified
+  classes of events, such as records generated by nightly backups. Audit
+  reduction does not alter original audit records.
+
+      An audit reduction capability provides support for near real-time audit
+  review and analysis requirements and after-the-fact investigations of security
+  incidents.
+
+      The lack of audit reduction in a database can require the DBA, or others
+  responsible for reviewing audit logs, to sort through large amounts of data in
+  order to find relevant records. This can cause important audit records to be
+  missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000113-DB-000053&#39;
+  tag &quot;gid&quot;: &#39;V-61813&#39;
+  tag &quot;rid&quot;: &#39;SV-76303r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67729r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001875&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &#39;Deploy software capable of performing audit data reduction.&#39;
+  describe &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39; do
+    skip &#39;A manual review is required to ensure the system provides an audit log reduction capability&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61815</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001094
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61815</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to restrict functionality that could be used to initiate DoS attacks.
+
+    Securing the Network Connection:
+    Protecting the network and its traffic from inappropriate access or modification is the essence of network 
+    security. You should consider all paths the data travels, and assess the threats on each path and node. Then, 
+    take steps to lessen or eliminate those threats and the consequences of a security breach. In addition, 
+    monitor and audit to detect either increased threat levels or penetration attempts.
+
+    The following practices improve network security:
+
+    1. Disable the Default Listener.
+    All listeners have a unique name instead of the name LISTENER and have startup protection.
+
+    LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+    
+    This configuration prevents the default listener from starting.
+
+    2. Prevent online administration by requiring the administrator to have the write privilege on the 
+    listener.ora file on the server.
+
+    a. Add or alter this line in the listener.ora file:
+
+    ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+    b. Use RELOAD to reload the configuration.
+
+    3. Set Protection against crafted network packets on database level.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should take when bad packets are 
+    received from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the default)
+
+    NONE: The database server ignores the bad packets and does not generate any trace files or log messages. 
+    (Not recommended)
+
+    TRACE: A detailed trace file is generated when bad packets are received, which can be used to debug any 
+    problems in client&#x2F;server communication.
+
+    LOG: A minimal log message is printed in the alert logfile and in the server trace file. A minimal amount 
+    of disk space is used.
+
+    ALERT: An alert message is sent to a DBA or monitoring console.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server process when receiving bad 
+    packets from a possibly malicious client.
+
+    SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) | (DROP,integer) } (DROP,3 is the default)
+
+    CONTINUE: The server process continues execution. The database server may be subject to a Denial of Service (DoS) 
+    if bad packets continue to be sent by a malicious client. (Not recommended)
+
+    (DELAY, integer) :The client experiences a delay of integer seconds before the server process accepts the 
+    next request from the same client connection. Malicious clients are prevented from excessive consumption 
+    of server resources while legitimate clients experience degradation in performance but can continue to function.
+
+    (DROP, integer) : The server forcefully terminates the client connection after integer bad packets. The server 
+    protects itself at the expense of the client (for example, a client transaction may be lost). The client may 
+    reconnect and attempt the same operation.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can be made by a client on a 
+    connection to the server process. After the specified number of failure attempts, the connection will be 
+    automatically dropped by the server process.
+
+    SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to unlimited. (A value of 1 to 3 is 
+    recommended)
+
+    For more information about the parameters in listener.ora, 
+    see https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+    
+    4. When a host computer has multiple IP addresses associated with multiple network interface controller (NIC) 
+    cards, configure the listener to the specific IP address.
+
+    You can restrict the listener to listen on a specific IP address. Oracle recommends that you specify the specific 
+    IP addresses on these types of computers, rather than allowing the listener to listen on all IP addresses. 
+    Restricting the listener to specific IP addresses helps to prevent an intruder from stealing a TCP end point from 
+    under the listener process.
+
+    5. Restrict the privileges of the listener, so that it cannot read or write files in the database or the Oracle 
+    server address space.
+
+    The default configuration for external procedures does not require a network listener to work with Oracle Database 
+    and the extproc agent. The extproc agent is spawned directly by Oracle Database and eliminates the risks that the 
+    extproc agent might be spawned by Oracle Listener unexpectedly. This default configuration is recommended for maximum 
+    security. For more information about securing external procedures see
+    https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+    However, the extproc agent can be configured to be spawned by a listener. In that case (not recommended) the listener 
+    should have restricted privileges.
+
+    6. Use a firewall, IAW CMS network policy and guidance.
+    
+    Appropriately placed and configured firewalls can prevent outside access to your databases.
+
+    7. Prevent unauthorized administration of the Oracle listener.
+
+    Local administration of the listener is secure by default through the local operating system. Therefore configuring 
+    a password is neither required nor recommended for secure local administration. However, a password can be configured 
+    for the listener to provide security for administrative operations, such as starting or stopping the listener, 
+    viewing a list of supported services, or saving changes to the Listener Control configuration.
+
+    By default, Oracle Net Listener permits only local administration for security reasons. As a policy, the listener 
+    can be administered only by the user who started it. This is enforced through local operating system authentication. 
+    For example, if user1 starts the listener, then only user1 can administer it. Any other user trying to administer 
+    the listener gets an error. The super user is the only exception.
+
+    Oracle recommends that you perform listener administration in the default mode (secure by means of local operating 
+    system authentication), and access the system remotely using a remote logon. Oracle Enterprise Manager Cloud 
+    Control can also be used for remote administration.
+
+    8. Encrypt network traffic.  (Mandatory for sensitive data and optional for non-sensitive, as covered in other 
+    STIG requirements.)
+
+    Where applicable, use Oracle network data encryption to encrypt network traffic among clients, databases, 
+    and application servers.
+
+    9. Set Connect Rate to organization defined limit. (Also required by O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+    The connection rate limiter feature in Oracle Net Listener enables a database administrator to limit the number of 
+    new connections handled by the listener. When this feature is enabled, Oracle Net Listener imposes a user-specified 
+    maximum limit on the number of new connections handled by the listener every second.
+
+    CONNECTION_RATE_LISTENER&#x3D;10
+    LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+    (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))  
+    )
+
+    10. Setup Valid Node Checking.
+    (See also O121-BP-025600.)
+
+    Valid node checking is a security feature that protects DBMS instances from malevolent or errant Oracle Net 
+    connections over TCP&#x2F;IP, without the need for a firewall or IP address filtering at the operating system-level. 
+    The feature is controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes, and tcp.excluded_nodes.
+
+    Modify the sqlnet.ora file manually
+    TCP.VALIDNODE_CHECKING&#x3D;yes
+    (Note: This assumes that a single sqlnet.ora file, in the default location, is in use. Please see the supplemental 
+    file &quot;Non-default sqlnet.ora configurations.pdf&quot; for how to find multiple and&#x2F;or differently located sqlnet.ora files.)
+
+    If this parameter is set to yes, then incoming connections are allowed only if they originate from a node that conforms 
+    to the list specified by TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter is 
+    set to yes (no is the default).
+
+    The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the TCP.VALIDNODE_CHECKING parameter 
+    is set to yes.
+
+    Modify the listener.ora file manually
+
+    TCP.EXCLUDED_NODES Syntax:
+    TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25, 172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+    TCP.INVITED_NODES Syntax:
+    TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+    Example:
+    TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*, 2001:DB8:200C:433B&#x2F;32)
+
+    Usage Notes:
+
+    Use TCP.INVITED_NODES to specify which clients are allowed access to the database. This list takes precedence 
+    over the TCP.EXCLUDED_NODES parameter if both lists are present. These parameters can use wildcards for IPv4 
+    addresses and CIDR notation for IPv4 and IPv6 addresses.
+
+    11. Apply Listener Security Patches.
+    (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+    Critical Patch Updates are cumulative. Therefore, the latest patch will contain all previous security patches 
+    for the Listener.
+
+    12. Ensure that listener logging is turned on.
+
+    Listener logging is on by default. If logging is not on, configure logging for all listeners in order to capture 
+    Listener commands and brute force password attacks.
+
+    13. Monitor the listener logfile.
+
+    The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors, which may signify attacks or 
+    inappropriate activity. Monitor the logfile and generate an alert whenever these errors are encountered.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61815&#39; do
+  title &quot;The DBMS must restrict the ability of users to launch Denial of
+  Service (DoS) attacks against other information systems or networks.&quot;
+  desc &quot;When it comes to DoS attacks, most of the attention is paid to
+  ensuring that systems and applications are not victims of these attacks.
+
+      While it is true that those accountable for systems want to ensure they are
+  not affected by a DoS attack, they also need to ensure their systems and
+  applications are not used to launch such an attack against others. To that
+  extent, a variety of technologies exist to limit, or in some cases, eliminate
+  the effects of DoS attacks.
+
+      For example, boundary protection devices can filter certain types of
+  packets to protect devices from being directly affected by  DoS attacks.
+  Limiting system resources that are allocated to any user to a bare minimum may
+  also reduce the ability of users to launch some DoS attacks.
+
+      Applications and application developers must take the steps needed to
+  ensure users cannot use these applications to launch DoS attacks against other
+  systems and networks. An example would be designing applications to include
+  mechanisms that throttle network traffic so users are not able to generate
+  unlimited network traffic via the application.
+
+      The methods employed to counter this risk will be dependent upon the
+  potential application layer methods that can be used to exploit it.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+    &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000246-DB-000133&#39;
+  tag &quot;gid&quot;: &#39;V-61815&#39;
+  tag &quot;rid&quot;: &#39;SV-76305r4_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67731r10_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001094&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and custom database code to determine
+  whether the DBMS or database application code could be used to launch DoS
+  attacks.
+
+  If the DBMS or custom database code would facilitate DoS-style attacks against
+  other information systems, this is a finding.
+
+  The Listener is the key for a denial of service attack.  Check to insure the
+  appropriate steps to secure the Oracle Listener are in place at the site.
+  (Refer to the Fix for more detail on implementing these protections.)&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to restrict functionality that could be
+  used to initiate DoS attacks.
+
+  Securing the Network Connection:
+  Protecting the network and its traffic from inappropriate access or
+  modification is the essence of network security. You should consider all paths
+  the data travels, and assess the threats on each path and node. Then, take
+  steps to lessen or eliminate those threats and the consequences of a security
+  breach. In addition, monitor and audit to detect either increased threat levels
+  or penetration attempts.
+
+  The following practices improve network security:
+
+  1. Disable the Default Listener.
+  All listeners have a unique name instead of the name LISTENER and have startup
+  protection.
+
+  LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))
+
+  This configuration prevents the default listener from starting.
+
+  2. Prevent online administration by requiring the administrator to have the
+  write privilege on the listener.ora file on the server.
+  a. Add or alter this line in the listener.ora file:
+
+  ADMIN_RESTRICTIONS_LISTENER&#x3D;ON
+
+  b. Use RELOAD to reload the configuration.
+
+  3. Set Protection against crafted network packets on database level.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION specifies the action that the database should
+  take when bad packets are received from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_TRACE_ACTION &#x3D; { NONE | TRACE | LOG | ALERT } (TRACE is the
+  default)
+
+  NONE: The database server ignores the bad packets and does not generate any
+  trace files or log messages. (Not recommended)
+
+  TRACE: A detailed trace file is generated when bad packets are received, which
+  can be used to debug any problems in client&#x2F;server communication.
+
+  LOG: A minimal log message is printed in the alert logfile and in the server
+  trace file. A minimal amount of disk space is used.
+
+  ALERT: An alert message is sent to a DBA or monitoring console.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION specifies the further execution of a server
+  process when receiving bad packets from a possibly malicious client.
+
+  SEC_PROTOCOL_ERROR_FURTHER_ACTION &#x3D; { CONTINUE | (DELAY,integer) |
+  (DROP,integer) } (DROP,3 is the default)
+
+  CONTINUE: The server process continues execution. The database server may be
+  subject to a Denial of Service (DoS) if bad packets continue to be sent by a
+  malicious client. (Not recommended)
+
+  (DELAY, integer) :The client experiences a delay of integer seconds before the
+  server process accepts the next request from the same client connection.
+  Malicious clients are prevented from excessive consumption of server resources
+  while legitimate clients experience degradation in performance but can continue
+  to function.
+
+  (DROP, integer) : The server forcefully terminates the client connection after
+  integer bad packets. The server protects itself at the expense of the client
+  (for example, a client transaction may be lost). The client may reconnect and
+  attempt the same operation.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts
+  that can be made by a client on a connection to the server process. After the
+  specified number of failure attempts, the connection will be automatically
+  dropped by the server process.
+
+  SEC_MAX_FAILED_LOGIN_ATTEMPTS &#x3D; n (3 is the default) Values range from 1 to
+  unlimited. (A value of 1 to 3 is recommended)
+
+  For more information about the parameters in listener.ora, see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;NETRF&#x2F;listener.htm#NETRF008
+
+  4. When a host computer has multiple IP addresses associated with multiple
+  network interface controller (NIC) cards, configure the listener to the
+  specific IP address.
+
+  You can restrict the listener to listen on a specific IP address. Oracle
+  recommends that you specify the specific IP addresses on these types of
+  computers, rather than allowing the listener to listen on all IP addresses.
+  Restricting the listener to specific IP addresses helps to prevent an intruder
+  from stealing a TCP end point from under the listener process.
+
+  5. Restrict the privileges of the listener, so that it cannot read or write
+  files in the database or the Oracle server address space.
+
+  The default configuration for external procedures does not require a network
+  listener to work with Oracle Database and the extproc agent. The extproc agent
+  is spawned directly by Oracle Database and eliminates the risks that the
+  extproc agent might be spawned by Oracle Listener unexpectedly. This default
+  configuration is recommended for maximum security. For more information about
+  securing external procedures see
+  https:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;app_devs.htm#DBSEG656
+  However, the extproc agent can be configured to be spawned by a listener. In
+  that case (not recommended) the listener should have restricted privileges.
+
+  6. Use a firewall, IAW DoD network policy and guidance.
+
+  Appropriately placed and configured firewalls can prevent outside access to
+  your databases.
+
+  7. Prevent unauthorized administration of the Oracle listener.
+
+  Local administration of the listener is secure by default through the local
+  operating system. Therefore configuring a password is neither required nor
+  recommended for secure local administration. However, a password can be
+  configured for the listener to provide security for administrative operations,
+  such as starting or stopping the listener, viewing a list of supported
+  services, or saving changes to the Listener Control configuration.
+
+  By default, Oracle Net Listener permits only local administration for security
+  reasons. As a policy, the listener can be administered only by the user who
+  started it. This is enforced through local operating system authentication. For
+  example, if user1 starts the listener, then only user1 can administer it. Any
+  other user trying to administer the listener gets an error. The super user is
+  the only exception.
+
+  Oracle recommends that you perform listener administration in the default mode
+  (secure by means of local operating system authentication), and access the
+  system remotely using a remote logon. Oracle Enterprise Manager Cloud Control
+  can also be used for remote administration.
+
+  8. Encrypt network traffic.  (Mandatory for sensitive data and optional for
+  non-sensitive, as covered in other STIG requirements.)
+
+  Where applicable, use Oracle network data encryption to encrypt network traffic
+  among clients, databases, and application servers.
+
+  9. Set Connect Rate to organization defined limit. (Also required by
+  O121-C2-019100&#x2F;SRG-APP-000245-DB-000132)
+
+  The connection rate limiter feature in Oracle Net Listener enables a database
+  administrator to limit the number of new connections handled by the listener.
+  When this feature is enabled, Oracle Net Listener imposes a user-specified
+  maximum limit on the number of new connections handled by the listener every
+  second.
+
+  CONNECTION_RATE_LISTENER&#x3D;10
+  LISTENER&#x3D;
+  (ADDRESS_LIST&#x3D;
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+  (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))
+  )
+
+  10. Setup Valid Node Checking.
+  (See also O121-BP-025600.)
+
+  Valid node checking is a security feature that protects DBMS instances from
+  malevolent or errant Oracle Net connections over TCP&#x2F;IP, without the need for a
+  firewall or IP address filtering at the operating system-level. The feature is
+  controlled by the three parameters; tcp.validnode_checking, tcp.invited_nodes,
+  and tcp.excluded_nodes.
+
+  Modify the sqlnet.ora file manually
+  TCP.VALIDNODE_CHECKING&#x3D;yes
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file \&quot;Non-default sqlnet.ora
+  configurations.pdf\&quot; for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  If this parameter is set to yes, then incoming connections are allowed only if
+  they originate from a node that conforms to the list specified by
+  TCP.INVITED_NODES or TCP.EXCLUDED_NODES parameters.
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes (no is the default).
+
+  The TCP.INVITED_NODES and TCP.EXCLUDED_NODES parameters are valid only when the
+  TCP.VALIDNODE_CHECKING parameter is set to yes.
+
+  Modify the listener.ora file manually
+
+  TCP.EXCLUDED_NODES Syntax:
+  TCP.EXCLUDED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.EXCLUDED_NODES&#x3D;(finance.us.example.com, mktg.us.example.com, 192.0.2.25,
+  172.30.*, 2001:DB8:200C:417A&#x2F;32)
+
+  TCP.INVITED_NODES Syntax:
+  TCP.INVITED_NODES&#x3D;(hostname | ip_address, hostname | ip_address, ...)
+
+  Example:
+  TCP.INVITED_NODES&#x3D;(sales.us.example.com, hr.us.example.com, 192.0.*,
+  2001:DB8:200C:433B&#x2F;32)
+
+  Usage Notes:
+
+  Use TCP.INVITED_NODES to specify which clients are allowed access to the
+  database. This list takes precedence over the TCP.EXCLUDED_NODES parameter if
+  both lists are present. These parameters can use wildcards for IPv4 addresses
+  and CIDR notation for IPv4 and IPv6 addresses.
+
+  11. Apply Listener Security Patches.
+  (See also O121-C1-011100&#x2F;SRG-APP-000133-DB-000205.)
+
+  Critical Patch Updates are cumulative. Therefore, the latest patch will contain
+  all previous security patches for the Listener.
+
+  12. Ensure that listener logging is turned on.
+
+  Listener logging is on by default. If logging is not on, configure logging for
+  all listeners in order to capture Listener commands and brute force password
+  attacks.
+
+  13. Monitor the listener logfile.
+
+  The logfile may contain TNS-01169, TNS-01189, TNS-01190, or TNS-12508 errors,
+  which may signify attacks or inappropriate activity. Monitor the logfile and
+  generate an alert whenever these errors are encountered.&quot;
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;listener.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;LISTENER&#x3D;(DESCRIPTION &#x3D;(ADDRESS &#x3D; (PROTOCOL &#x3D; TCP)(HOST&#x3D;)(PORT &#x3D; 0)))&#39; }
+    its(&#39;content&#39;) {
+      should include &#39;LISTENER&#x3D;
+    (ADDRESS_LIST&#x3D;
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1521)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1522)(RATE_LIMIT&#x3D;yes))
+      (ADDRESS&#x3D;(PROTOCOL&#x3D;tcp)(HOST&#x3D;)(PORT&#x3D;1526))&#39;
+    }
+    its(&#39;content&#39;) { should include &#39;CONNECTION_RATE_LISTENER&#x3D;10&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_MAX_FAILED_LOGIN_ATTEMPTS&#x3D;3&#39; }
+    its(&#39;content&#39;) { should include &#39;ADMIN_RESTRICTIONS_LISTENER&#x3D;ON&#39; }
+    its(&#39;content&#39;) { should include &#39;SEC_PROTOCOL_ERROR_TRACE_ACTION&#x3D;TRACE&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.INVITED_NODES&#x3D;&#39; }
+    its(&#39;content&#39;) { should include &#39;TCP.EXCLUDED_NODES&#x3D;&#39; }
+  end
+
+  oracle_home &#x3D; command(&#39;echo $ORACLE_HOME&#39;).stdout.strip
+
+  describe file &quot;#{oracle_home}&#x2F;network&#x2F;admin&#x2F;sqlnet.ora&quot; do
+    its(&#39;content&#39;) { should include &#39;TCP.VALIDNODE_CHECKING&#x3D;yes&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61817</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-5 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001095
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user profile limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61817</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-5 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61817&#39; do
+  title &quot;The DBMS must manage resources to limit the effects of information
+  flooding types of Denial of Service (DoS) incidents.&quot;
+  desc &quot;In the case of application DoS incidents, care must be taken when
+  designing the application to ensure the application makes the best use of
+  system resources. SQL queries have the potential to consume large amounts of
+  CPU cycles if they are not tuned for optimal performance. Web services
+  containing complex calculations requiring large amounts of time to complete can
+  bog down if too many requests for the service are encountered within a short
+  period of time.
+
+      The methods employed to meet this requirement will vary depending upon the
+  technology the application utilizes. However, a variety of technologies exist
+  to limit, or in some cases, eliminate the effects of application-related DoS
+  incidents. Employing increased capacity and bandwidth combined with specialized
+  application layer protection devices and service redundancy may reduce the
+  susceptibility to some DoS problems.
+
+      Databases are particularly susceptible to SQL-related DoS issues. Databases
+  that do not protect against resource-intensive SQL queries may experience
+  dramatic slowdowns from malicious attacks or accidental DoS incidents related
+  to SQL queries.  What constitutes a resource-intensive query has to be
+  determined locally, taking into account the purpose of the database and the
+  needs of the various classes of user.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000247-DB-000134&#39;
+  tag &quot;gid&quot;: &#39;V-61817&#39;
+  tag &quot;rid&quot;: &#39;SV-76307r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67733r8_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001095&#39;]
+  tag &quot;nist&quot;: [&#39;SC-5 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review Oracle user profiles.  Connect to Oracle as SYSDBA. Use
+  the following query to determine the established profiles and the users and
+  resource limits assigned to them.
+
+  select a.username, a.profile, b.resource_name, b.resource_type, b.limit
+  from dba_users a, dba_profiles b
+  where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;
+  order by a.profile;
+
+  If the configuration does not include profile limits on resource-intensive SQL
+  queries, or if users are not assigned to profiles appropriate to their needs,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure Oracle profile(s) to set resource limits appropriate to
+  each class of user.
+
+  SESSIONS_PER_USER
+  Specify the number of concurrent sessions to which you want to limit the user.
+
+  CPU_PER_SESSION
+  Specify the CPU time limit for a session, expressed in hundredth of seconds.
+
+  CPU_PER_CALL
+  Specify the CPU time limit for a call (a parse, execute, or fetch), expressed
+  in hundredths of seconds.
+
+  CONNECT_TIME
+  Specify the total elapsed time limit for a session, expressed in minutes.
+
+  IDLE_TIME
+  Specify the permitted periods of continuous inactive time during a session,
+  expressed in minutes. Long-running queries and other operations are not subject
+  to this limit.
+
+  LOGICAL_READS_PER_SESSION
+  Specify the permitted number of data blocks read in a session, including blocks
+  read from memory and disk.
+
+  LOGICAL_READS_PER_CALL
+  Specify the permitted number of data blocks read for a call to process a SQL
+  statement (a parse, execute, or fetch).
+
+  PRIVATE_SGA
+  Specify the amount of private space a session can allocate in the shared pool
+  of the system global area (SGA). Refer to size_clause for information on that
+  clause.
+
+  COMPOSITE_LIMIT
+  (This limit applies only when using shared server architecture. The private
+  space for a session in the SGA includes private SQL and PL&#x2F;SQL areas, but not
+  shared SQL and PL&#x2F;SQL areas.) Specify the total resource cost for a session,
+  expressed in service units. Oracle Database calculates the total service units
+  as a weighted sum of CPU_PER_SESSION, CONNECT_TIME, LOGICAL_READS_PER_SESSION,
+  and PRIVATE_SGA.
+
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select DISTINCT b.limit from dba_users a, dba_profiles b where a.profile &#x3D; b.profile and resource_type&#x3D;&#39;KERNEL&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user profile limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61819</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-6
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-002394
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database user limit is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;1&quot;, &quot;UNLIMITED&quot;, &quot;10&quot;, &quot;7&quot;, &quot;NULL&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61819</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-6, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61819&#39; do
+  title &quot;The DBMS must limit the use of resources by priority and not impede
+  the host from servicing processes designated as a higher-priority.&quot;
+  desc &quot;Priority protection helps prevent a lower-priority process from
+  delaying or interfering with the information system servicing any
+  higher-priority process. This control does not apply to components in the
+  information system for which there is only a single user&#x2F;role. The application
+  must limit the use of resources by priority.
+
+      The DBMS is often running queries for multiple users. If lower-priority
+  processes are utilizing a disproportionately high amount of database resources,
+  this can severely impact higher-priority processes.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000248-DB-000135&#39;
+  tag &quot;gid&quot;: &#39;V-61819&#39;
+  tag &quot;rid&quot;: &#39;SV-76309r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-019400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67735r5_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-002394&#39;]
+  tag &quot;nist&quot;: [&#39;SC-6&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings and documentation to determine if the DBMS
+  restricts resource usage by priority.
+
+  If the DBMS does not restrict resource usage by priority, this is a finding.
+
+  - - - - -
+  This capability is available in Oracle at both the user and database level.
+
+  At the user level, we create resource profiles for users of the database.
+
+  Resource Parameters
+  SESSIONS_PER_USER - Specify the number of concurrent sessions to which to limit
+  the user.
+  CPU_PER_SESSION - Specify the CPU time limit for a session, expressed in
+  hundredths of seconds.
+  CPU_PER_CALL - Specify the CPU time limit for a call (a parse, execute, or
+  fetch), expressed in hundredths of seconds.
+  CONNECT_TIME - Specify the total elapsed time limit for a session, expressed in
+  minutes.
+  IDLE_TIME - Specify the permitted periods of continuous inactive time during a
+  session, expressed in minutes. Long-running queries and other operations are
+  not subject to this limit.
+  LOGICAL_READS_PER_SESSION - Specify the permitted number of data blocks read in
+  a session, including blocks read from memory and disk.
+  LOGICAL_READS_PER_CALL - Specify the permitted number of data blocks read for a
+  call to process a SQL statement (a parse, execute, or fetch).
+  PRIVATE_SGA - Specify the amount of private space a session can allocate in the
+  shared pool of the system global area (SGA).
+  COMPOSITE_LIMIT - Specify the total resource cost for a session, expressed in
+  service units.
+
+  To check the resource controls assigned to a user, query the DBA_PROFILES and
+  DBA_USERS tables in the following manner.
+
+  set linesize 121
+  col username format a20
+  col profile format a20
+  col resource_name format a25
+  col resource_type format a14
+  col limit format a10
+  select a.username,
+     a.profile,
+     b.resource_name,
+     b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile order by username;
+
+  The output should look like the output below and display the users and the
+  contents of their profiles.
+
+  USERNAME        PROFILE       RESOURCE NAME      LIMIT
+  --------        -------       -------------      -----
+  SCOTT           DEFAULT       SESSIONS_PER_USER  UNLIMITED
+  SCOTT           DEFAULT       CPU_PER_SESSION    UNLIMITED&quot;
+  tag &quot;fix&quot;: &quot;Implement measures to restrict the usage of resources by priority.
+
+  - - - - -
+  To implement security at the user level, assign users a profile that limits
+  their resources:
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  Example
+
+  $ sqlplus connect as sysdba
+
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT
+  SESSIONS_PER_USER    1
+  IDLE_TIME           30
+  CPU_PER_SESSION    100
+  CPU_PER_CALL       100
+  CONNECT_TIME       600;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  limit &#x3D; sql.query(&quot;select
+    DISTINCT b.limit
+  from dba_users a,
+       dba_profiles b
+  where b.resource_type is not null and
+        a.profile &#x3D; b.profile;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database user limit&#39; do
+    subject { limit }
+    it { should_not include &#39;UNLIMITED&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61843</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61843</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61843&#39; do
+  title &quot;Applications must obscure feedback of authentication information
+  during the authentication process to protect the information from possible
+  exploitation&#x2F;use by unauthorized individuals.&quot;
+  desc &quot;To prevent the compromise of authentication information, such as
+  passwords, during the authentication process, the feedback from the information
+  system shall not provide any information that would allow an unauthorized user
+  to compromise the authentication mechanism.
+
+      Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk.
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and password
+  as a visible parameter of the application execution command. This practice
+  should be prohibited and disabled to prevent shoulder surfing.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61843&#39;
+  tag &quot;rid&quot;: &#39;SV-76333r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67759r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Interview the DBA to determine if any applications that access
+  the database allow for entry of the account name and password on the command
+  line. If any do, determine whether these applications obfuscate authentication
+  data.  If they do not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure or modify applications to prohibit display of passwords
+  in clear text on the command line.&quot;
+  describe &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39; do
+    skip &#39;A manual review is required to ensure the applications obscures feedback of authentication information
+    during the authentication process to protect the information from possible
+    exploitation&#x2F;use by unauthorized individuals&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61845</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61845</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\oracle\product\12.1.0\db_1\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\oracle\product\12.1.0\db_1\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME  etwork\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61845&#39; do
+  title &quot;When using command-line tools such as Oracle SQL*Plus, which can
+  accept a plain-text password, users must use an alternative logon method that
+  does not expose the password.&quot;
+  desc &quot;The SRG states:  To prevent the compromise of authentication
+  information, such as passwords, during the authentication process, the feedback
+  from the information system shall not provide any information that would allow
+  an unauthorized user to compromise the authentication mechanism.
+
+  Obfuscation of user-provided information when typed into the system is a
+  method used in addressing this risk
+
+      For example, displaying asterisks when a user types in a password, is an
+  example of obscuring feedback of authentication information.
+
+      Database applications may allow for entry of the account name and
+  password as a visible parameter of the application execution command. This
+  practice should be prohibited and disabled to prevent shoulder surfing.
+
+      SQL*Plus is an essential part of any Oracle installation.  SQL*Plus cannot
+  be configured not to accept a plain-text password.  Since the typical SQL*Plus
+  user is a database administrator, the consequences of password compromise are
+  particularly serious.  Therefore, the use of plain-text passwords must be
+  prohibited, as a matter of practice and procedure.
+
+      Transport Layer Security (TLS) is the successor protocol to Secure Sockets
+  Layer (SSL). Although the Oracle configuration parameters have names including
+  SSL, such as SSL_VERSION and SSL_CIPHER_SUITES, they refer to TLS.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000178-DB-000083&#39;
+  tag &quot;gid&quot;: &#39;V-61845&#39;
+  tag &quot;rid&quot;: &#39;SV-76335r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N1-015602&#39;
+  tag &quot;fix_id&quot;: &#39;F-67761r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation,
+  verify that the system documentation explains the need for the tool, who uses
+  it, and any relevant mitigations; and that AO approval has been obtained.  If
+  not, this is a finding.
+
+  Request evidence that all users of the tool are trained in the importance of
+  not using the plain-text password option and in how to keep the password
+  hidden; and that they adhere to this practice.  If not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;For Oracle SQL*Plus, which cannot be configured not to accept a
+  plain-text password, and any other essential tool with the same limitation:
+
+  1) Document the need for it, who uses it, and any relevant mitigations, and
+  obtain AO approval.
+  2) Train all users of the tool in the importance of not using the plain-text
+  password option and in how to keep the password hidden.
+
+  - - - - -
+  Consider wrapping the startup command with a shell or wrapper and using an
+  Oracle external password store.
+
+  Oracle provides the capability to provide for a secure external password
+  facility.  Use the Oracle mkstore to create a secure storage area for passwords
+  for applications, batch jobs, and scripts to use or deploy a site-authorized
+  facility to perform this function.
+
+  Check to see what has been stored in the Oracle External Password Store.
+
+  To view all contents of a client wallet external password store, check specific
+  credentials by viewing them. Listing the external password store contents
+  provides information used to decide whether to add or delete credentials from
+  the store.  To list the contents of the external password store, enter the
+  following command at the command line:
+
+    $ mkstore -wrl wallet_location -listCredential
+
+    For example:
+
+    $ mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -listCredential
+
+  The wallet_location specifies the path to the directory where the wallet, whose
+  external password store contents is to be viewed, is located. This command
+  lists all of the credential database service names (aliases) and the
+  corresponding user name (schema) for that database. Passwords are not listed.
+
+  Configuring Clients to Use the External Password Store
+
+  If the client is already configured to use external authentication, such as
+  Windows native authentication or Transport Layer Security (TLS), then Oracle
+  Database uses that authentication method. The same credentials used for this
+  type of authentication are typically also used to log on to the database.
+
+  For clients not using such authentication methods or wanting to override them
+  for database authentication, set the SQLNET.WALLET_OVERRIDE parameter in
+  sqlnet.ora to TRUE. The default value for SQLNET.WALLET_OVERRIDE is FALSE,
+  allowing standard use of authentication credentials as before.
+
+  If wanting a client to use the secure external password store feature, then
+  perform the following configuration task:
+
+  1. Create a wallet on the client by using the following syntax at the command
+  line:
+  orapki create -wallet wallet_location  -auto_login_local
+
+  For example:
+  orapki wallet create -wallet c:\\oracle\\product\\12.1.0\\db_1\\wallets
+  -auto_login_local
+  Enter password: password
+
+  The wallet_location is the path to the directory where the wallet is to be
+  created and stored. This command creates an Oracle wallet with the autologon
+  feature enabled at the location specified. The autologon feature enables the
+  client to access the wallet contents without supplying a password.
+
+  The mkstore utility -create option uses password complexity verification.
+
+  2. Create database connection credentials in the wallet by using the following
+  syntax at the command line:
+  mkstore -wrl wallet_location -createCredential db_connect_string username
+  Enter password: password
+
+  For example:
+  mkstore -wrl c:\\oracle\\product\\12.1.0\\db_1\\wallets -createCredential
+  oracle system
+  Enter password: password
+
+  In this specification:
+  The wallet_location is the path to the directory where the wallet was created.
+  The db_connect_string used in the CONNECT &#x2F;@db_connect_string statement must be
+  identical to the db_connect_string specified in the -createCredential command.
+
+  The db_connect_string is the TNS alias used to specify the database in the
+  tnsnames.ora file or any service name used to identify the database on an
+  Oracle network. By default, tnsnames.ora is located in the
+  $ORACLE_HOME&#x2F;network&#x2F;admin directory on UNIX systems and in ORACLE_HOME\
+  etwork\\admin on Windows.
+
+  The username is the database logon credential. When prompted, enter the
+  password for this user.
+
+  3. In the client sqlnet.ora file, enter the WALLET_LOCATION parameter and set
+  it to the directory location of the wallet created in Step 1.  For example, if
+  the wallet was created in $ORACLE_HOME&#x2F;network&#x2F;admin and the Oracle home is set
+  to &#x2F;private&#x2F;ora12, then need to enter the following into the client sqlnet.ora
+  file:
+
+      WALLET_LOCATION &#x3D;
+             (SOURCE &#x3D;
+               (METHOD &#x3D; FILE)
+               (METHOD_DATA &#x3D;
+             (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+             )
+            )
+
+  4. In the client sqlnet.ora file, enter the SQLNET.WALLET_OVERRIDE parameter
+  and set it to TRUE as follows:
+
+         SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+
+  This setting causes all CONNECT &#x2F;@db_connect_string statements to use the
+  information in the wallet at the specified location to authenticate to
+  databases.
+
+  When external authentication is in use, an authenticated user with such a
+  wallet can use the CONNECT &#x2F;@db_connect_string syntax to access the previously
+  specified databases without providing a user name and password. However, if a
+  user fails that external authentication, then these connect statements also
+  fail.
+
+  Below is a sample sqlnet.ora file with the WALLET_LOCATION and the
+  SQLNET.WALLET_OVERRIDE parameters set as described in Steps 3 and 4.
+
+  Below is a sample SQLNET.ORA File with Wallet Parameters Set
+
+          WALLET_LOCATION &#x3D;
+              (SOURCE &#x3D;
+                (METHOD &#x3D; FILE)
+                (METHOD_DATA &#x3D;
+              (DIRECTORY &#x3D; &#x2F;private&#x2F;ora12&#x2F;network&#x2F;admin)
+                )
+               )
+
+          SQLNET.WALLET_OVERRIDE &#x3D; TRUE
+          SSL_CLIENT_AUTHENTICATION &#x3D; FALSE
+          SSL_VERSION &#x3D;1.2 or 1.1
+
+  (Note: This assumes that a single sqlnet.ora file, in the default location, is
+  in use. Please see the supplemental file Non-default sqlnet.ora
+  configurations.pdf for how to find multiple and&#x2F;or differently located
+  sqlnet.ora files.)
+
+  Note: SSL_VERSION &#x3D; 1.2 or 1.1 is the actual value, not a suggestion to
+  use one or the other.&quot;
+  describe &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39; do
+    skip &#39;A manual review is required to ensure when using command-line tools such as Oracle SQL*Plus, which can
+    accept a plain-text password, users must use an alternative logon method that
+    does not expose the password&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61849</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>DBMS default accounts must be protected from misuse.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS default accounts are protected from misuse</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS default accounts are protected from misuse</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS default accounts are protected from misuse</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS default accounts are protected from misuse</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61849</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">DBMS default accounts must be protected from misuse.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61849&#39; do
+  title &#39;DBMS default accounts must be protected from misuse.&#39;
+  desc  &quot;The Security Requirements Guide says, Default accounts are usually
+  accounts that have special privileges required to administer the database.
+  Well-known DBMS account names are targeted most frequently by attackers and are
+  thus more prone to providing unauthorized access to the database.
+
+      If default account names are not changed, an attacker has a predefined
+  list of accounts to target.  Since most default accounts are administrative in
+  nature, the compromise of a default account can have catastrophic consequences,
+  including the complete loss of control over the information system.
+
+      However, Oracle does not provide for changing user names directly.
+  Workarounds to achieve the effect of a name change are cumbersome.  In
+  addition, names of essential system accounts such as SYS are baked into the
+  product, with thousands of dependencies involved.  Making such a change would
+  risk making the DBMS inoperative, and would interfere with getting support from
+  Oracle.
+
+      The Check and Fix, therefore, relate to good practices for protecting the
+  essential system accounts from misuse.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000023&#39;
+  tag &quot;gid&quot;: &#39;V-61849&#39;
+  tag &quot;rid&quot;: &#39;SV-76339r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-004701&#39;
+  tag &quot;fix_id&quot;: &#39;F-67765r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the use of the essential system accounts with the
+  DBA(s).  Request evidence that administrators have individual administrative
+  accounts and that they use these rather than SYS, SYSTEM, SYSMAN, etc., in
+  carrying out their duties.
+
+  If the evidence indicates otherwise, this is a finding.
+
+  Review the status of the essential system accounts, in the view DBA_USERS.  If
+  any of these accounts is not locked, or is not documented as a requirement,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Ensure that all individuals with DBA responsibilities always log
+  on under their individual administrative accounts.
+
+  Ensure that the passwords for essential system accounts such as SYS are
+  available only to authorized administrators and tightly guarded to avoid
+  misuse.  Ensure that these accounts are kept locked except when it is
+  specifically necessary to use them.&quot;
+  describe &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39; do
+    skip &#39;A manual review is required to ensure the DBMS default accounts are protected from misuse&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61853</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61853</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, &quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61853&#39; do
+  title &quot;Disk space used by audit trail(s) must be monitored; audit records
+  must be regularly or continuously off-loaded to a centralized log management
+  system.&quot;
+  desc &quot;It is critical when a system is at risk of failing to process audit
+  logs as required; it detects and takes action to mitigate the failure. Audit
+  processing failures include:  software&#x2F;hardware errors, failures in the audit
+  capturing mechanisms, and audit storage capacity being reached or exceeded.
+  Applications are required to be capable of either directly performing or
+  calling system-level functionality performing defined actions upon detection of
+  an application audit log processing failure.
+
+      The Security Requirements Guide says, \&quot;A failure of database auditing will
+  result in either the database continuing to function without auditing or in a
+  complete halt to database operations. The database must be capable of taking
+  organization-defined actions to avoid either a complete halt to processing or
+  processing transactions in an unaudited manner.\&quot;
+
+      This STIG requirement mandates the implementation of a method to mitigate
+  Oracle&#39;s inability to automatically reuse audit trail space on a first-in,
+  first-out basis.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000109-DB-000049&#39;
+  tag &quot;gid&quot;: &#39;V-61853&#39;
+  tag &quot;rid&quot;: &#39;SV-76343r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-N2-008601&#39;
+  tag &quot;fix_id&quot;: &#39;F-67769r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the procedures, manual and&#x2F;or automated, for monitoring
+  the space used by audit trail(s) and for off-loading audit records to a
+  centralized log management system.
+
+  If the procedures do not exist, this is a finding.
+
+  If the procedures exist, request evidence that they are followed.  If the
+  evidence indicates that the procedures are not followed, this is a finding.
+
+  If the procedures exist, inquire if the system has ever run out of audit trail
+  space in the last two years or since the last system upgrade, whichever is more
+  recent.  If it has run out of space in this period, and the procedures have not
+  been updated to compensate, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Modify DBMS, OS, or third-party logging application settings to
+  alert appropriate personnel when a specific percentage of log storage capacity
+  is reached.
+
+  For ease of management, it is recommended that the audit tables be kept in a
+  dedicated tablespace.
+
+  If Oracle Enterprise Manager is in use, the capability to issue such an alert
+  is built in and configurable via the console so an email can be sent to a
+  designated administrator.
+
+  If Enterprise Manager is unavailable, the following script can be used to
+  monitor storage space; this can be combined with additional code to email the
+  appropriate administrator so they can take action.
+
+  sqlplus connect as sysdba
+
+  set pagesize 300
+  set linesize 120
+  column sumb format 9,999,999,999,999
+  column extents format 999999
+  column bytes format 9,999,999,999,999
+  column largest format 9,999,999,999,999
+  column Tot_Size format 9,999,999,999,999
+  column Tot_Free format 9,999,999,999,999
+  column Pct_Free format 9,999,999,999,999
+  column Chunks_Free format 9,999,999,999,999
+  column Max_Free format 9,999,999,999,999
+  set echo off
+  spool TSINFO.txt
+  PROMPT  SPACE AVAILABLE IN TABLESPACES
+  select a.tablespace_name,sum(a.tots) Tot_Size,
+  sum(a.sumb) Tot_Free,
+  sum(a.sumb)*100&#x2F;sum(a.tots) Pct_Free,
+  sum(a.largest) Max_Free,sum(a.chunks) Chunks_Free
+  from
+  (
+  select tablespace_name,0 tots,sum(bytes) sumb,
+  max(bytes) largest,count(*) chunks
+  from dba_free_space a
+  group by tablespace_name
+  union
+  select tablespace_name,sum(bytes) tots,0,0,0 from
+  dba_data_files
+  group by tablespace_name) a
+  group by a.tablespace_name;
+
+   Sample Output
+
+  SPACE AVAILABLE IN TABLESPACES
+
+   TABLESPACE_NAME                     TOT_SIZE     TOT_FREE     PCT_FREE
+  MAX_FREE     CHUNKS_FREE
+   ------------------------------      ------------ ------------ ------------
+  ------------ ------------
+  DES2                                 41,943,040   30,935,040       74
+  30,935,040        1
+  DES2_I                               31,457,280   23,396,352       74
+  23,396,352        1
+  RBS                                  60,817,408   57,085,952       94
+  52,426,752       16
+  SYSTEM                               94,371,840    5,386,240        6
+  5,013,504        3
+  TEMP                                    563,200      561,152      100
+  133,120        5
+  TOOLS                               120,586,240   89,407,488       74
+  78,190,592       12
+  USERS                                 1,048,576       26,624        3
+  26,624        1&quot;
+  describe &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39; do
+    skip &#39;A manual review is required to ensure the Disk space used by audit trail(s) is monitored, and that audit records
+    are regularly or continuously off-loaded to a centralized log management system&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61865</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Use of the DBMS software installation account must be restricted.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the use of the DBMS software installation account is restricted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the use of the DBMS software installation account is restricted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the use of the DBMS software installation account is restricted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the use of the DBMS software installation account is restricted</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61865</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Use of the DBMS software installation account must be restricted.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61865&#39; do
+  title &#39;Use of the DBMS software installation account must be restricted.&#39;
+  desc  &quot;This requirement is intended to limit exposure due to operating from
+  within a privileged account or role. The inclusion of role is intended to
+  address those situations where an access control policy, such as Role Based
+  Access Control (RBAC), is being implemented and where a change of role provides
+  the same degree of assurance in the change of access authorizations for both
+  the user and all processes acting on behalf of the user as would be provided by
+  a change between a privileged and non-privileged account.
+
+      To limit exposure when operating from within a privileged account or role,
+  the application must support organizational requirements that users of
+  information system accounts, or roles, with access to organization-defined
+  lists of security functions or security-relevant information, use
+  non-privileged accounts, or roles, when accessing other (non-security) system
+  functions.
+
+      Use of privileged accounts for non-administrative purposes puts data at
+  risk of unintended or unauthorized loss, modification, or exposure. In
+  particular, DBA accounts if used for non-administration application development
+  or application maintenance can lead to miss-assignment of privileges where
+  privileges are inherited by object owners. It may also lead to loss or
+  compromise of application data where the elevated privileges bypass controls
+  designed in and provided by applications.
+
+      The DBMS software installation account may require privileges not required
+  for database administration or other functions. Use of accounts configured with
+  excess privileges may result in the loss or compromise of data or system
+  settings due to elevated privileges that bypass controls designed to protect
+  them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000063-DB-000022&#39;
+  tag &quot;gid&quot;: &#39;V-61865&#39;
+  tag &quot;rid&quot;: &#39;SV-76355r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-004600&#39;
+  tag &quot;fix_id&quot;: &#39;F-67781r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review system documentation to identify the installation
+  account.
+
+  Verify whether the account is used for anything involving interactive activity
+  beyond DBMS software installation, upgrade, and maintenance actions.
+
+  If the account is used for anything involving interactive activity beyond DBMS
+  software installation, upgrade, and maintenance actions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Restrict interactive use of the DBMS software installation
+  account to DBMS software installation, upgrade, and maintenance actions only.
+
+  If possible, disable installation accounts when authorized actions are not
+  being performed. Otherwise, disable the use of the account(s) for interactive
+  activity.&quot;
+  describe &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39; do
+    skip &#39;A manual review is required to ensure the use of the DBMS software installation account is restricted&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61867</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61867</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61867&#39; do
+  title &quot;Database software, applications, and configuration files must be
+  monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.
+
+      If the system were to allow any user to make changes to software libraries,
+  then those changes might be implemented without undergoing the appropriate
+  testing and approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database software libraries or
+  configuration can lead to unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-61867&#39;
+  tag &quot;rid&quot;: &#39;SV-76357r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67783r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database software libraries, related
+  applications, and configuration files is done.
+
+  Verify that the list of files and directories being monitored is complete. If
+  monitoring does not occur or is not complete, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to DBMS
+  software libraries, related software application libraries, and configuration
+  files. If a third-party automated tool is not employed, an automated job that
+  reports file information on the directories and files of interest and compares
+  them to the baseline report for the same will meet the requirement.
+
+  File hashes or checksums should be used for comparisons since file dates may be
+  manipulated by malicious users.&quot;
+  describe command(&#39;grep aide &#x2F;etc&#x2F;crontab &#x2F;etc&#x2F;cron.*&#x2F;*&#39;) do
+    its(&#39;stdout.strip&#39;) { should_not be_empty }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61869</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: RDSADMIN is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;RDSADMIN&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: ADMIN1 is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;ADMIN1&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYSTEM is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYSTEM&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">oracle DBA&#39;s users: SYS is expected to be in</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected &#x60;SYS&#x60; to be in the list: &#x60;[]&#x60;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61869</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61869&#39; do
+  title &quot;The OS must limit privileges to change the DBMS software resident
+  within software libraries (including privileged programs).&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent.  However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      The DBMS software libraries contain the executables used by the DBMS to
+  operate. Unauthorized access to the libraries can result in malicious
+  alteration. This may in turn jeopardize data stored in the DBMS and&#x2F;or
+  operation of the host system.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000207&#39;
+  tag &quot;gid&quot;: &#39;V-61869&#39;
+  tag &quot;rid&quot;: &#39;SV-76359r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-011200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67785r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review permissions that control access to the DBMS software
+  libraries. The software library location may be determined from vendor
+  documentation or service&#x2F;process executable paths.
+
+  DBA accounts, the DBMS process account, the DBMS software
+  installation&#x2F;maintenance account, SA accounts, if access by them is required
+  for some operational level of support such as backups, and the host system
+  itself require access. Any others should be scrutinized and a reason for access
+  provided by the DBA.
+
+  If accounts that are not required and authorized to have access to the software
+  library location do have access, this is a finding.
+
+  Check to see which users have been granted DBA.  Work from a basis of least
+  privilege.  Provide the least amount of privilege required to accomplish the
+  job.
+
+  SQL&gt; select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;
+  tag &quot;fix&quot;: &quot;Restrict access to the DBMS software libraries to accounts that
+  require access based on job function.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  dba_users &#x3D; sql.query(&quot;select * from dba_role_privs where granted_role &#x3D; &#39;DBA&#39;;&quot;).column(&#39;grantee&#39;).uniq
+  if dba_users.empty?
+    impact 0.0
+    describe &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot; do
+      skip &quot;There are no oracle DBA&#39;s, control N&#x2F;A&quot;
+    end
+  else
+    dba_users.each do |user|
+      describe &quot;oracle DBA&#39;s users: #{user}&quot; do
+        subject { user }
+        it { should be_in input(&#39;oracle_dbas&#39;) }
+      end
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61871</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-3 (2)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001844
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61871</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-3 (2), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61871&#39; do
+  title &quot;The DBMS must provide the ability to write specified audit record
+  content to a centralized audit log repository.&quot;
+  desc &quot;Information system auditing capability is critical for accurate
+  forensic analysis. Audit record content that may be necessary to satisfy the
+  requirement of this control includes but is not limited:  timestamps, source
+  and destination IP addresses, user&#x2F;process identifiers, event descriptions,
+  application specific events, success&#x2F;fail indications, file names involved,
+  access control or flow control rules invoked.
+
+      Centralized management of audit records and logs provides for efficiency in
+  maintenance and management of records, as well as, the backup and archiving of
+  those records. When organizations define application components requiring
+  centralized audit log management, applications need to support that requirement.
+
+      Database audit records not stored in a centralized audit log management
+  tool may be overlooked during investigation of a security incident or may be
+  subject to intentional or accidental manipulation by privileged users of the
+  database.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000102-DB-000045&#39;
+  tag &quot;gid&quot;: &#39;V-61871&#39;
+  tag &quot;rid&quot;: &#39;SV-76361r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-008100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67787r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001844&#39;]
+  tag &quot;nist&quot;: [&#39;AU-3 (2)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If the organization does not require the use of a centralized
+  audit log repository, this is not a finding.
+
+  If the organization requires the use of a centralized audit log repository,
+  continue.
+
+  Check that Oracle PL&#x2F;SQL code or other software is in place to copy or transfer
+  the specified audit record content to a centralized audit log repository.  If
+  it is not, this is a finding.
+
+  Check that permissions are set on the Oracle audit trail tables and on the
+  target repository to enable the required transfer of audit data.  If they are
+  not, this is a finding.
+
+  Verify that the specified audit record content is indeed copied or transferred
+  to the central repository.  If it is not, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;If the organization requires the use of a centralized audit log
+  repository, employ PL&#x2F;SQL code or other software to copy or transfer the
+  specified audit record content to the repository.
+
+  Ensure that permissions are set to enable transfer of the data.
+
+  If, after the preceding steps, the transfer is not succeeding, diagnose and
+  repair the problem.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241&quot;
+  describe &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39; do
+    skip &#39;A manual review is required to ensure the DBMS provides the ability to write specified audit record
+    content to a centralized audit log repository&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61873</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    High
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS software installation account must be restricted to
+  authorized users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61873</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS software installation account must be restricted to
+  authorized users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">high</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.7</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61873&#39; do
+  title &quot;The DBMS software installation account must be restricted to
+  authorized users.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      If the application were to allow any user to make changes to software
+  libraries, then those changes might be implemented without undergoing the
+  appropriate testing and approvals that are part of a robust change management
+  process.
+
+      This requirement is contingent upon the language in which the application
+  is programmed, as many application architectures in use today incorporate their
+  software libraries into, and make them inseparable from, their compiled
+  distributions, rendering them static and version-dependent. However, this
+  requirement does apply to applications with software libraries accessible and
+  configurable, as in the case of interpreted languages.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      DBA and other privileged administrative or application owner accounts are
+  granted privileges that allow actions that can have a greater impact on
+  database security and operation. It is especially important to grant access to
+  privileged accounts to only those persons who are qualified and authorized to
+  use them.
+
+      This requirement is particularly important because Oracle equates the
+  installation account with the SYS account - the super-DBA.  Once logged on to
+  the operating system, this account can connect to the database AS SYSDBA
+  without further authentication.  It is very powerful and, by virtue of not
+  being linked to any one person, cannot be audited to the level of the
+  individual.
+  &quot;
+  impact 0.7
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000198&#39;
+  tag &quot;gid&quot;: &#39;V-61873&#39;
+  tag &quot;rid&quot;: &#39;SV-76363r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67789r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review procedures for controlling and granting access to use of
+  the DBMS software installation account.
+
+  If access or use of this account is not restricted to the minimum number of
+  personnel required, or if unauthorized access to the account has been granted,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Develop, document, and implement procedures to restrict use of
+  the DBMS software installation account.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39; do
+
+    skip &#39;A manual review is required to ensure the DBMS software installation account is restricted to
+    authorized users&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61875</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61875</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61875&#39; do
+  title &quot;Database software directories, including DBMS configuration files,
+  must be stored in dedicated directories, or DASD pools, separate from the host
+  OS and other applications.&quot;
+  desc &quot;When dealing with change control issues, it should be noted, any
+  changes to the hardware, software, and&#x2F;or firmware components of the
+  information system and&#x2F;or application can potentially have significant effects
+  on the overall security of the system.
+
+      Multiple applications can provide a cumulative negative effect. A
+  vulnerability and subsequent exploit to one application can lead to an exploit
+  of other applications sharing the same security context. For example, an
+  exploit to a web server process that leads to unauthorized administrative
+  access to host system directories can most likely lead to a compromise of all
+  applications hosted by the same system. Database software not installed using
+  dedicated directories both threatens and is threatened by other hosted
+  applications. Access controls defined for one application may by default
+  provide access to the other application&#39;s database objects or directories. Any
+  method that provides any level of separation of security context assists in the
+  protection between applications.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000199&#39;
+  tag &quot;gid&quot;: &#39;V-61875&#39;
+  tag &quot;rid&quot;: &#39;SV-76365r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-010900&#39;
+  tag &quot;fix_id&quot;: &#39;F-67791r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the DBMS software library directory and note other root
+  directories located on the same disk directory or any subdirectories. If any
+  non-DBMS software directories exist on the disk directory, examine or
+  investigate their use.
+
+  If any of the directories are used by other applications, including third-party
+  applications that use the DBMS, this is a finding.
+
+  Only applications that are required for the functioning and administration, not
+  use, of the DBMS should be located on the same disk directory as the DBMS
+  software libraries.
+
+  For databases located on mainframes, confirm that the database and its
+  configuration files are isolated in their own DASD pools.
+
+  If database software and database configuration files share DASD with other
+  applications, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Install all applications on directories, or pools, separate from
+  the DBMS software library directory. Re-locate any directories or re-install
+  other application software that currently shares the DBMS software library
+  directory to separate directories.
+
+  For mainframe-based databases, locate database software and configuration files
+  in separate DASD pools from other mainframe applications.&quot;
+  describe &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39; do
+    skip &#39;A manual review is required to ensure Database software directories, including DBMS configuration files,
+    are stored in dedicated directories, or DASD pools, separate from the host
+    OS and other applications&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61877</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS software libraries must be periodically backed up.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CP-9 (b)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000537
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software libraries are periodically backed up</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software libraries are periodically backed up</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software libraries are periodically backed up</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS software libraries are periodically backed up</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61877</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS software libraries must be periodically backed up.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CP-9 (b), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure backups to include all DBMS application and third-party
+  database application software libraries.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61877&#39; do
+  title &#39;The DBMS software libraries must be periodically backed up.&#39;
+  desc  &quot;Information system backup is a critical step in maintaining data
+  assurance and availability.
+
+      System-level information includes:  system-state information, operating
+  system and application software, and licenses.
+
+      Backups shall be consistent with organizational recovery time and recovery
+  point objectives.
+
+      The DBMS application depends upon the availability and integrity of its
+  software libraries. Without backups, compromise or loss of the software
+  libraries can prevent a successful recovery of DBMS operations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000146-DB-000100&#39;
+  tag &quot;gid&quot;: &#39;V-61877&#39;
+  tag &quot;rid&quot;: &#39;SV-76367r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012700&#39;
+  tag &quot;fix_id&quot;: &#39;F-67793r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000537&#39;]
+  tag &quot;nist&quot;: [&#39;CP-9 (b)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review evidence of inclusion of the DBMS libraries in current
+  backup records.
+
+  If any DBMS library files are not included in regular backups, this is a
+  finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure backups to include all DBMS application and third-party
+  database application software libraries.&quot;
+  describe &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39; do
+    skip &#39;A manual review is required to ensure the DBMS software libraries are periodically backed up&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61879</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000764
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61879</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-2, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61879&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate organizational users
+  (or processes acting on behalf of organizational users).&quot;
+  desc &quot;To assure accountability and prevent unauthorized access,
+  organizational users shall be identified and authenticated.
+
+      Organizational users include organizational employees or individuals the
+  organization deems to have equivalent status of employees (e.g., contractors,
+  guest researchers, individuals from allied nations).
+
+      Users (and any processes acting on behalf of users) are uniquely identified
+  and authenticated for all accesses other than those accesses explicitly
+  identified and documented by the organization which outlines specific user
+  actions that can be performed on the information system without identification
+  or authentication.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000148-DB-000103&#39;
+  tag &quot;gid&quot;: &#39;V-61879&#39;
+  tag &quot;rid&quot;: &#39;SV-76369r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-012800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67795r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000764&#39;]
+  tag &quot;nist&quot;: [&#39;IA-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings, OS settings, and&#x2F;or enterprise-level
+  authentication&#x2F;access mechanism settings, and site practices, to determine
+  whether organizational users are uniquely identified and authenticated when
+  logging on to the system.
+
+  If organizational users are not uniquely identified and authenticated, this is
+  a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS, OS and&#x2F;or enterprise-level authentication&#x2F;access
+  mechanism to uniquely identify and authenticate all organizational users who
+  log on to the system.  Ensure that each user has a separate account from all
+  other users.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates organizational users
+    (or processes acting on behalf of organizational users).&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61881</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      IA-8
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000804
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61881</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">IA-8, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61881&#39; do
+  title &quot;The DBMS must uniquely identify and authenticate non-organizational
+  users (or processes acting on behalf of non-organizational users).&quot;
+  desc  &quot;Non-organizational users include all information system users other
+  than organizational users which include organizational employees or individuals
+  the organization deems to have equivalent status of employees (e.g.,
+  contractors, guest researchers, individuals from allied nations).
+
+      Non-organizational users shall be uniquely identified and authenticated for
+  all accesses other than those accesses explicitly identified and documented by
+  the organization when related to the use of anonymous access, such as accessing
+  a web server.
+
+      Accordingly, a risk assessment is used in determining the authentication
+  needs of the organization.
+
+      Scalability, practicality, and security are simultaneously considered in
+  balancing the need to ensure ease of use for access to federal information and
+  information systems with the need to protect and adequately mitigate risk to
+  organizational operations, organizational assets, individuals, other
+  organizations, and the Nation.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000180-DB-000115&#39;
+  tag &quot;gid&quot;: &#39;V-61881&#39;
+  tag &quot;rid&quot;: &#39;SV-76371r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-015800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67797r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000804&#39;]
+  tag &quot;nist&quot;: [&#39;IA-8&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review DBMS settings to determine whether non-organizational
+  users are uniquely identified and authenticated when logging onto the system.
+
+  If non-organizational users are not uniquely identified and authenticated, this
+  is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to uniquely identify and authenticate all
+  non-organizational users who log onto the system.&quot;
+  describe &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+  users (or processes acting on behalf of non-organizational users).&#39; do
+    skip &#39;A manual review is required to ensure the DBMS uniquely identifies and authenticates non-organizational
+    users (or processes acting on behalf of non-organizational users).&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61883</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-2
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001082
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61883</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must separate user functionality (including user interface
+  services) from database management functionality.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-2, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61883&#39; do
+  title &quot;The DBMS must separate user functionality (including user interface
+  services) from database management functionality.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources.
+
+      This may include isolating the administrative interface on a different
+  domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000211-DB-000122&#39;
+  tag &quot;gid&quot;: &#39;V-61883&#39;
+  tag &quot;rid&quot;: &#39;SV-76373r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017300&#39;
+  tag &quot;fix_id&quot;: &#39;F-67799r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001082&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39; do
+    skip &#39;A manual review is required to ensure the DBMS separates user functionality (including user interface
+    services) from database management functionality&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61885</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      SC-2 (1)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001083
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61885</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">SC-2 (1), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61885&#39; do
+  title &quot;The DBMS must prevent the presentation of information system
+  management-related functionality at an interface utilized by general (i.e.,
+  non-privileged) users.&quot;
+  desc &quot;Information system management functionality includes functions
+  necessary to administer databases, network components, workstations, or
+  servers, and typically requires privileged user access.
+
+      The separation of user functionality from information system management
+  functionality is either physical or logical and is accomplished by using
+  different computers, different central processing units, different instances of
+  the operating system, different network addresses, combinations of these
+  methods, or other methods, as appropriate.
+
+      An example of this type of separation is observed in web administrative
+  interfaces that use separate authentication methods for users of any other
+  information system resources. This may include isolating the administrative
+  interface on a different domain and with additional access controls.
+
+      If administrative functionality or information regarding DBMS management is
+  presented on an interface available for users, information on DBMS settings may
+  be inadvertently made available to the user.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000212-DB-000123&#39;
+  tag &quot;gid&quot;: &#39;V-61885&#39;
+  tag &quot;rid&quot;: &#39;SV-76375r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P2-017400&#39;
+  tag &quot;fix_id&quot;: &#39;F-67801r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001083&#39;]
+  tag &quot;nist&quot;: [&#39;SC-2 (1)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Check DBMS settings and vendor documentation to verify
+  administrative functionality is separate from user functionality.
+
+  If administrator and general user functionality is not separated either
+  physically or logically, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Configure DBMS settings to separate database administration and
+  general user functionality.  Provide those who have both administrative and
+  general-user responsibilities with separate accounts for these separate
+  functions.&quot;
+  describe &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39; do
+    skip &#39;A manual review is required to ensure the DBMS prevents the presentation of information system
+    management-related functionality at an interface utilized by general (i.e.,
+    non-privileged) users.&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61887</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000166
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">passed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">Standard auditing is in use for audit purposes is expected to equal true</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database audit_trail parameter is expected not to cmp &#x3D;&#x3D; &quot;NONE&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">
+expected: NONE
+     got: [&quot;NONE&quot;]
+
+(compared using &#x60;cmp&#x60; matcher)
+</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61887</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value &quot;TRUE&quot;, this is not a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  &quot;Auditing Database Activity&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  &quot;Monitoring Database Activity with Auditing&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  &quot;DBMS_AUDIT_MGMT&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61887&#39; do
+  title &quot;The DBMS must protect against an individual who uses a shared account
+  falsely denying having performed a particular action.&quot;
+  desc &quot;Non-repudiation of actions taken is required in order to maintain
+  application integrity. Examples of particular actions taken by individuals
+  include creating information, sending a message, approving information (e.g.,
+  indicating concurrence or signing a contract), and receiving a message.
+
+      Non-repudiation protects individuals against later claims by an author of
+  not having authored a particular document, a sender of not having transmitted a
+  message, a receiver of not having received a message, or a signatory of not
+  having signed a document.
+
+      Authentication via shared accounts does not provide individual
+  accountability for actions taken on the DBMS or data. Whenever a single
+  database account is used to connect to the database, a secondary authentication
+  method that provides individual accountability is required. This scenario most
+  frequently occurs when an externally hosted application authenticates
+  individual users to the application and the application uses a single account
+  to retrieve or update database information on behalf of the individual users.
+
+      When shared accounts are utilized without another means of identifying
+  individual users, users may deny having performed a particular action.
+
+      This calls for inspection of application source code, which will require
+  collaboration with the application developers. It is recognized that in many
+  cases, the database administrator (DBA) is organizationally separate from the
+  application developers and may have limited, if any, access to source code.
+  Nevertheless, protections of this type are so important to the secure operation
+  of databases that they must not be ignored. At a minimum, the DBA must attempt
+  to obtain assurances from the development organization that this issue has been
+  addressed and must document what has been discovered.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000080-DB-000063&#39;
+  tag &quot;gid&quot;: &#39;V-61887&#39;
+  tag &quot;rid&quot;: &#39;SV-76377r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-P3-006200&#39;
+  tag &quot;fix_id&quot;: &#39;F-67803r2_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000166&#39;]
+  tag &quot;nist&quot;: [&#39;AU-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If there are no shared accounts available to more than one
+  user, this is not a finding.
+
+  If a shared account is used by an application to interact with the database,
+  review the System Security Plan, the tables in the database, and the
+  application source code&#x2F;documentation to determine whether the application
+  captures the individual user&#39;s identity and stores that identity along with all
+  data inserted and updated (also with all records of reads and&#x2F;or deletions, if
+  these are required to be logged).
+
+  If there are gaps in the application&#39;s ability to do this, and the gaps and the
+  risk are not defined in the system documentation and accepted by the AO, this
+  is a finding.
+
+  If users are sharing a group account to log on to Oracle tools or third-party
+  products that access the database, this is a finding.
+
+  If Standard Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SHOW PARAMETER AUDIT_TRAIL
+  or the following SQL query:
+  SELECT * FROM SYS.V$PARAMETER WHERE NAME &#x3D; &#39;audit_trail&#39;;
+  If Oracle returns the value &#39;NONE&#39;, this is a finding.
+
+  If Unified Auditing is used:
+  To ensure that user activities other than SELECT, INSERT, UPDATE, and DELETE
+  are also monitored and attributed to individuals, verify that Oracle auditing
+  is enabled. To see if Oracle is configured to capture audit data, enter the
+  following SQL*Plus command:
+  SELECT * FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;
+  If Oracle returns the value \&quot;TRUE\&quot;, this is not a finding.&quot;
+  tag &quot;fix&quot;: &quot;Use accounts assigned to individual users where feasible.
+  Configure DBMS to provide individual accountability at the DBMS level, and in
+  audit logs, for actions performed under a shared database account.
+
+  Modify applications and data tables that are not capturing individual user
+  identity to do so.
+
+  Create and enforce the use of individual user IDs for logging on to Oracle
+  tools and third-party products.
+
+  If Oracle auditing is not already enabled, enable it.
+
+  If Standard Auditing is used:
+  If Oracle (or third-party) auditing is not already enabled, enable it. For
+  Oracle auditing, use this query:
+  ALTER SYSTEM SET AUDIT_TRAIL&#x3D;&lt;audit trail type&gt; SCOPE&#x3D;SPFILE;
+  Audit trail type can be &#39;OS&#39;, &#39;DB&#39;, &#39;DB,EXTENDED&#39;, &#39;XML&#39; or &#39;XML,EXTENDED&#39;.
+  After executing this statement, it may be necessary to shut down and restart
+  the Oracle database.
+
+  If Unified Auditing is used:
+  Link the oracle binary with uniaud_on, and then restart the database. Oracle
+  Database Upgrade Guide describes how to enable unified auditing.
+
+  For more information on the configuration of auditing, refer to the following
+  documents:
+  \&quot;Auditing Database Activity\&quot; in the Oracle Database 2 Day + Security Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;TDPSG&#x2F;tdpsg_auditing.htm#TDPSG50000
+  \&quot;Monitoring Database Activity with Auditing\&quot; in the Oracle Database Security
+  Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;DBSEG&#x2F;part_6.htm#CCHEHCGI
+  \&quot;DBMS_AUDIT_MGMT\&quot; in the Oracle Database PL&#x2F;SQL Packages and Types Reference:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;ARPLS&#x2F;d_audit_mgmt.htm#ARPLS241
+  Oracle Database Upgrade Guide:
+  http:&#x2F;&#x2F;docs.oracle.com&#x2F;database&#x2F;121&#x2F;UPGRD&#x2F;afterup.htm#UPGRD52810
+
+  If the site-specific audit requirements are not covered by the default audit
+  options, deploy and configure Fine-Grained Auditing.  For details, refer to
+  Oracle documentation at the locations above.
+
+  If this level of auditing does not meet site-specific requirements, consider
+  deploying the Oracle Audit Vault.  The Audit Vault is a highly configurable
+  option from Oracle made specifically for performing the audit functions.  It
+  has reporting capabilities as well as user-defined rules that provide
+  additional flexibility for complex auditing requirements.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  standard_auditing_used &#x3D; input(&#39;standard_auditing_used&#39;)
+  unified_auditing_used &#x3D; input(&#39;unified_auditing_used&#39;)
+
+  describe.one do
+    describe &#39;Standard auditing is in use for audit purposes&#39; do
+      subject { standard_auditing_used }
+      it { should be true }
+    end
+
+    describe &#39;Unified auditing is in use for audit purposes&#39; do
+      subject { unified_auditing_used }
+      it { should be true }
+    end
+  end
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  if standard_auditing_used
+    describe &#39;The oracle database audit_trail parameter&#39; do
+      subject { audit_trail }
+      it { should_not cmp &#39;NONE&#39; }
+    end
+  end
+
+  unified_auditing &#x3D; sql.query(&quot;SELECT value FROM V$OPTION WHERE PARAMETER &#x3D; &#39;Unified Auditing&#39;;&quot;).column(&#39;value&#39;)
+
+  if unified_auditing_used
+    describe &#39;The oracle database unified auditing parameter&#39; do
+      subject { unified_auditing }
+      it { should_not cmp &#39;FALSE&#39; }
+    end
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61963</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61963</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61963&#39; do
+  title &quot;The DBMS data files, transaction logs and audit files must be stored
+  in dedicated directories or disk partitions separate from software or other
+  application files.&quot;
+  desc &quot;Protection of DBMS data, transaction and audit data files stored by
+  the host operating system is dependent on OS controls. When different
+  applications share the same database process, resource contention and differing
+  security controls may be required to isolate and protect one application&#39;s data
+  and audit logs from another. DBMS software libraries and configuration files
+  also require differing access control lists.&quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61963&#39;
+  tag &quot;rid&quot;: &#39;SV-76453r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67883r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review the disk&#x2F;directory specification where database data,
+  transaction log and audit files are stored.
+
+  If DBMS data, transaction or audit data files are stored in the same directory,
+  this is a finding.
+
+  If separation of data, transaction and audit data is not supported by the DBMS,
+  this check is not a finding.
+
+  If stored separately and access permissions for each directory is the same,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Product-specific fix pending development. Use Generic Fix listed
+  below:
+
+  Specify dedicated host system disk directories to store database data,
+  transaction and audit files.
+
+  Configure DBMS default file storage locations to use dedicated disk directories
+  where supported by the DBMS.&quot;
+  describe &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39; do
+    skip &#39;A manual review is required to ensure the DBMS data files, transaction logs and audit files are stored
+    in dedicated directories or disk partitions separate from software or other
+    application files&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Applicable
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61965</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    None
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-6 b
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000366
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">This control is not applicable on oracle within aws rds, as aws manages the operating system in which the oracle database is running on</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61965</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">none</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-6 b, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\WINDOWS\system32\config\EventLogs\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61965&#39; do
+  title &quot;The directory assigned to the AUDIT_FILE_DEST parameter must be
+  protected from unauthorized access and must be stored in a dedicated directory
+  or disk partition separate from software or other application files.&quot;
+  desc &quot;The AUDIT_FILE_DEST parameter specifies the directory where the
+  database audit trail file is stored (when AUDIT_TRAIL parameter is set to ‘OS’,
+  ‘xml’ or ‘xml, extended’ where supported by the DBMS). Unauthorized access or
+  loss of integrity of the audit trail could result in loss of accountability or
+  the ability to detect suspicious
+      activity. This directory also contains the audit trail of the SYS and
+  SYSTEM accounts that captures privileged database events when the database is
+  not running (when AUDIT_SYS_OPERATIONS parameter is set to TRUE).
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000516-DB-999900&#39;
+  tag &quot;gid&quot;: &#39;V-61965&#39;
+  tag &quot;rid&quot;: &#39;SV-76455r3_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-BP-025101&#39;
+  tag &quot;fix_id&quot;: &#39;F-67885r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000366&#39;]
+  tag &quot;nist&quot;: [&#39;CM-6 b&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;If Standard Auditing is used:
+
+  From SQL*Plus:
+
+  select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;
+  select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;
+
+  If audit_trail is NOT set to OS, XML or XML EXTENDED, this is not applicable
+  (NA).
+
+  If audit_trail is set to OS, but the audit records are routed directly to a
+  separate log server without writing to the local file system, this is not a
+  finding.
+
+  On UNIX Systems:
+
+  ls -ld [pathname]
+
+  Replace [pathname] with the directory path listed from the above SQL command
+  for audit_file_dest.
+
+  If permissions are granted for world access, this is a finding.
+
+  If any groups that include members other than the Oracle process and software
+  owner accounts, DBAs, auditors, or backup accounts are listed, this is a
+  finding.
+
+  Compare path to $ORACLE_HOME. If audit_file_dest is a subdirectory of
+  $ORACLE_HOME, this is a finding.
+
+  On Windows Systems (From Windows Explorer):
+
+  Browse to the directory specified. Select and right-click on the directory,
+  select Properties, select the Security tab. On Windows hosts, records are also
+  written to the Windows application event log. The location of the application
+  event log is listed under Properties for the log under the Windows console. The
+  default location is C:\\WINDOWS\\system32\\config\\EventLogs\\AppEvent.Evt.
+
+  If permissions are granted to everyone, this is a finding. If any accounts
+  other than the Administrators, DBAs, System group, auditors or backup operators
+  are listed, this is a finding.
+
+  Compare path to %ORACLE_HOME%. If audit_file_dest is a subdirectory of
+  %ORACLE_HOME%, this is a finding.
+
+  If Unified Auditing is used:
+  AUDIT_FILE_DEST parameter is not used in Unified Auditing&quot;
+  tag &quot;fix&quot;: &quot;For file-based auditing, establish an audit file directory
+  separate from the Oracle Home.
+
+  Alter host system permissions to the AUDIT_FILE_DEST directory to the Oracle
+  process and software owner accounts, DBAs, backup accounts, SAs (if required),
+  and auditors.
+
+  Authorize and document user access requirements to the directory outside of the
+  Oracle, DBA, and SA account list in the System Security Plan.&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  audit_trail &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_trail&#39;;&quot;).column(&#39;value&#39;)
+
+  describe &#39;The oracle database audit trail&#39; do
+    subject { audit_trail }
+    it { should_not cmp &#39;NONE&#39; }
+  end
+
+  get_audit_file_dest &#x3D; sql.query(&quot;select value from v$parameter where name &#x3D; &#39;audit_file_dest&#39;;&quot;).column(&#39;value&#39;)
+
+  audit_file_dest &#x3D; get_audit_file_dest.to_s.delete(&#39;[&quot;&quot;]&#39;)
+
+  describe command(&quot;ls -ld #{audit_file_dest}&#x2F; |awk &#39;{ print $1; }&#39;&quot;) do
+    its(&#39;stdout&#39;) { should match &#x2F;\w*---.$&#x2F; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Failed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61967</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AC-10
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-000054
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;UNLIMITED&quot;</td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">failed</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">The oracle database number of concurrent sessions allowed is expected not to include &quot;DEFAULT&quot;</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all">expected [&quot;UNLIMITED&quot;, &quot;DEFAULT&quot;, &quot;UNLIMITED&quot;] not to include &quot;DEFAULT&quot;</td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61967</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AC-10, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Limit concurrent connections for each system account to a number less than or equal to the 
+    organization-defined number of sessions using the following SQL. Create profiles that conform to the 
+    requirements. Assign users to the appropriate profile.
+
+    The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle 12.1.0.2) to satisfy the STIG 
+    requirements pertaining to the profile parameters. Oracle recommends that this profile be customized with 
+    any site-specific requirements and assigned to all users where applicable.  Note: It remains necessary to 
+    create a customized replacement for the password validation function, ORA12C_STRONG_VERIFY_FUNCTION, if 
+    relying on this technique to verify password complexity.
+
+    The defaults for ORA_STIG_PROFILE are set as follows:
+    Resource Name                   Limit
+    -------------                   ------
+    COMPOSITE_LIMIT                 DEFAULT
+    SESSIONS_PER_USER               DEFAULT
+    CPU_PER_SESSION                 DEFAULT
+    CPU_PER_CALL                    DEFAULT
+    LOGICAL_READS_PER_SESSION       DEFAULT
+    LOGICAL_READS_PER_CALL          DEFAULT
+    IDLE_TIME                          15
+    CONNECT_TIME                    DEFAULT
+    PRIVATE_SGA                     DEFAULT
+    FAILED_LOGIN_ATTEMPTS               3 
+    PASSWORD_LIFE_TIME                 60
+    PASSWORD_REUSE_TIME               365
+    PASSWORD_REUSE_MAX                 10
+    PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+    PASSWORD_LOCK_TIME              UNLIMITED
+    PASSWORD_GRACE_TIME                 5
+
+    Change the value of SESSIONS_PER_USER (along with the other parameters, where relevant) from UNLIMITED to 
+    CMS-compliant, site-specific requirements and then assign users to the profile.
+    ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+    To assign the user to the profile do the following:
+    ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61967&#39; do
+  title &quot;The DBMS must limit the number of concurrent sessions for each system
+  account to an organization-defined number of sessions.&quot;
+  desc  &quot;Application management includes the ability to control the number of
+  users and user sessions utilizing an application. Limiting the number of
+  allowed users, and sessions per user, is helpful in limiting risks related to
+  Denial of Service attacks.
+
+      This requirement addresses concurrent session control for a single
+  information system account and does not address concurrent sessions by a single
+  user via multiple system accounts.
+
+      Unlimited concurrent connections to the DBMS could allow a successful
+  Denial of Service (DoS) attack by exhausting connection resources.
+
+      The organization will need to define the maximum number of concurrent
+  sessions by account type, by account, or a combination thereof. In deciding on
+  the appropriate number, it is important to take into account the work
+  requirements of the various types of user. For example, 2 might be an
+  acceptable limit for general users accessing the database via an application;
+  but 10 might be too few for a database administrator using a database
+  management GUI tool, where each query tab and navigation pane may count as a
+  separate session.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000001-DB-000031&#39;
+  tag &quot;gid&quot;: &#39;V-61967&#39;
+  tag &quot;rid&quot;: &#39;SV-76457r2_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C2-000100&#39;
+  tag &quot;fix_id&quot;: &#39;F-67887r4_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-000054&#39;]
+  tag &quot;nist&quot;: [&#39;AC-10&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Retrieve the settings for concurrent sessions for each profile
+  with the query:
+  SELECT * FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;
+
+  If the DBMS settings for concurrent sessions for each profile are greater than
+  the site-specific maximum number of sessions, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Limit concurrent connections for each system account to a number
+  less than or equal to the organization-defined number of sessions using the
+  following SQL. Create profiles that conform to the requirements. Assign users
+  to the appropriate profile.
+
+  The user profile, ORA_STIG_PROFILE, has been provided (starting with Oracle
+  12.1.0.2) to satisfy the STIG requirements pertaining to the profile
+  parameters. Oracle recommends that this profile be customized with any
+  site-specific requirements and assigned to all users where applicable.  Note:
+  It remains necessary to create a customized replacement for the password
+  validation function, ORA12C_STRONG_VERIFY_FUNCTION, if relying on this
+  technique to verify password complexity.
+
+  The defaults for ORA_STIG_PROFILE are set as follows:
+  Resource Name                   Limit
+  -------------                   ------
+  COMPOSITE_LIMIT                 DEFAULT
+  SESSIONS_PER_USER               DEFAULT
+  CPU_PER_SESSION                 DEFAULT
+  CPU_PER_CALL                    DEFAULT
+  LOGICAL_READS_PER_SESSION       DEFAULT
+  LOGICAL_READS_PER_CALL          DEFAULT
+  IDLE_TIME                          15
+  CONNECT_TIME                    DEFAULT
+  PRIVATE_SGA                     DEFAULT
+  FAILED_LOGIN_ATTEMPTS               3
+  PASSWORD_LIFE_TIME                 60
+  PASSWORD_REUSE_TIME               365
+  PASSWORD_REUSE_MAX                 10
+  PASSWORD_VERIFY_FUNCTION    ORA12C_STRONG_VERIFY_FUNCTION
+  PASSWORD_LOCK_TIME              UNLIMITED
+  PASSWORD_GRACE_TIME                 5
+
+  Change the value of SESSIONS_PER_USER (along with the other parameters, where
+  relevant) from UNLIMITED to DoD-compliant, site-specific requirements and then
+  assign users to the profile.
+  ALTER PROFILE ORA_STIG_PROFILE LIMIT SESSIONS_PER_USER &lt;site-specific value&gt;;
+
+  To assign the user to the profile do the following:
+  ALTER USER &lt;username&gt; PROFILE ORA_STIG_PROFILE;&quot;
+
+  sql &#x3D; oracledb_session(user: input(&#39;user&#39;), password: input(&#39;password&#39;), host: input(&#39;host&#39;), service: input(&#39;service&#39;), sqlplus_bin: input(&#39;sqlplus_bin&#39;))
+
+  concurrent_sessions &#x3D; sql.query(&quot;SELECT limit FROM SYS.DBA_PROFILES WHERE RESOURCE_NAME &#x3D; &#39;SESSIONS_PER_USER&#39;;&quot;).column(&#39;limit&#39;)
+
+  describe &#39;The oracle database number of concurrent sessions allowed&#39; do
+    subject { concurrent_sessions }
+    it { should_not include &#39;UNLIMITED&#39; }
+    it { should_not include &#39;DEFAULT&#39; }
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-61969</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Low
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>The system must provide a report generation capability for audit
+  reduction data.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      AU-7 a
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001878
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-61969</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">The system must provide a report generation capability for audit
+  reduction data.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">low</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.3</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">AU-7 a, Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-61969&#39; do
+  title &quot;The system must provide a report generation capability for audit
+  reduction data.&quot;
+  desc  &quot;In support of Audit Review, Analysis, and Reporting requirements,
+  audit reduction is a technique used to reduce the volume of audit records in
+  order to facilitate a manual review.
+
+      Before a security review is conducted, information systems and&#x2F;or
+  applications with an audit reduction capability may remove many audit records
+  known to have little security significance. This is generally accomplished by
+  removing records generated by specified classes of events, such as records
+  generated by nightly backups.
+
+      In order to identify and report on what (repetitive) data has been removed
+  via the use of audit reduction, the application must provide a capability to
+  generate reports containing what values were removed by the audit reduction.
+
+      Audit reduction does not alter original audit records. An audit reduction
+  capability provides support for near real-time audit review and analysis based
+  on policy-based requirements and after-the-fact investigations of security
+  incidents.
+
+      Reporting tools employing audit reduction methods must not alter the
+  original audit data. An example of a tool employing audit reduction methods is
+  the Windows Event Viewer tool which is used to view and analyze audit logs on
+  Windows systems.
+
+      The lack of reporting tools for audit reduction can require the DBA, or
+  others responsible for reviewing audit logs, to sort through large amounts of
+  data in order to find relevant records.  This can cause important audit records
+  to be missed.
+  &quot;
+  impact 0.3
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000114-DB-000054&#39;
+  tag &quot;gid&quot;: &#39;V-61969&#39;
+  tag &quot;rid&quot;: &#39;SV-76459r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-C3-008800&#39;
+  tag &quot;fix_id&quot;: &#39;F-67889r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001878&#39;]
+  tag &quot;nist&quot;: [&#39;AU-7 a&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Verify that audit reduction capabilities are in place for the
+  Oracle audit data.  Since Oracle has no reduction capability per se, a
+  third-party tool or in-house-developed software must be in place to provide
+  this functionality.  This must include the ability to report on the excluded
+  audit data.
+
+  If this capability has not been implemented, this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Deploy software capable of performing audit data reduction and of
+  reporting on the excluded audit data.&quot;
+  describe &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39; do
+    skip &#39;A manual review is required to ensure the system provides a report generation capability for audit
+    reduction data&#39;
+  end
+end</code
+          >
+        </div>
+        <div class="border border-black px-2 py-2">
+          <!-- Result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="Result header"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>Status</th>
+                <th>ID</th>
+                <th>Severity</th>
+                <th>Title</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Result status indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Not Reviewed
+                  </div>
+                </td>
+                <td>
+                  <!-- Result ID -->
+                  <div class="break-all">V-68863</div>
+                </td>
+                <td>
+                  <!-- Result severity indicator -->
+                  <div class="rounded border border-black px-2 py-1">
+                    Medium
+                  </div>
+                </td>
+                <!-- Result title -->
+                <td>Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+          <!-- Secondary result header -->
+          <table
+            class="border-separate border-spacing-x-2"
+            aria-labelledby="800-53 controls and CCIs"
+          >
+            <thead>
+              <tr class="text-left">
+                <th>800-53 Controls & CCIs</th>
+              </tr>
+            </thead>
+            <tbody>
+              <tr>
+                <td>
+                  <!-- Control tags -->
+                  <div class="flex flex-wrap gap-x-2 gap-y-1">
+                    <div class="rounded border border-black px-2 py-1">
+                      CM-5 (6)
+                    </div>
+                    <div class="rounded border border-black px-2 py-1">
+                      CCI-001499
+                    </div>
+                  </div>
+                </td>
+              </tr>
+            </tbody>
+          </table>
+          <hr class="my-1 h-1" />
+
+          <!-- Result description -->
+          Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+          <hr class="my-1 h-1" />
+
+          <!-- Result tables -->
+          <div>
+            <!-- Tests -->
+            <h5 class="text-lg font-bold">Test Results</h5>
+            <hr class="h-1 w-28 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Test description and results"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <!-- Generate all available test results -->
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+              <tbody class="border border-gray-300">
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Status</td>
+                  <td class="whitespace-pre-line break-all">skipped</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Test</td>
+                  <td class="whitespace-pre-line break-all">A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Result</td>
+                  <td class="whitespace-pre-line break-all"></td>
+                </tr>
+              </tbody>
+            </table>
+
+            <!-- Details -->
+            <h5 class="text-lg font-bold mt-3">Result Details</h5>
+            <hr class="h-1 w-32 bg-gray-300 mb-2" />
+            <table
+              class="table min-w-full text-left"
+              aria-describedby="Result details"
+            >
+              <thead class="hidden">
+                <th>Name</th>
+                <th>Value</th>
+              </thead>
+              <tbody class="border border-gray-300">
+                <!-- Generate all result details -->
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Control</td>
+                  <td class="whitespace-pre-line">V-68863</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Title</td>
+                  <td class="whitespace-pre-line">Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Desc</td>
+                  <td class="whitespace-pre-line">Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Severity</td>
+                  <td class="whitespace-pre-line">medium</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Impact</td>
+                  <td class="whitespace-pre-line">0.5</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Nist Controls</td>
+                  <td class="whitespace-pre-line">CM-5 (6), Rev_4</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Check Text</td>
+                  <td class="whitespace-pre-line">Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.</td>
+                </tr>
+                <tr class="border-b odd:bg-gray-100 even:bg-white">
+                  <td class="border-r border-gray-300">Fix Text</td>
+                  <td class="whitespace-pre-line">Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.</td>
+                </tr>
+              </tbody>
+            </table>
+          </div>
+
+          <!-- Result code block -->
+          <!-- Sensitive to whitespace, requires awkward tag placement -->
+          <hr class="my-1 h-1" />
+          <code class="whitespace-pre-wrap text-sm text-black"
+            >&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+# Profile name: Oracle Database 12c Security Technical Implementation Guide
+&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;&#x3D;
+
+control &#39;V-68863&#39; do
+  title &quot;Logic modules within the database (to include packages, procedures,
+  functions and triggers) must be monitored to discover unauthorized changes.&quot;
+  desc &quot;Any changes to the hardware, software, and&#x2F;or firmware components of
+  the information system and&#x2F;or application can potentially have significant
+  effects on the overall security of the system.  This includes the logic modules
+  implemented within the database, such as packages, procedures, functions and
+  triggers.
+
+      If the DBMS were to allow any user to make changes to these, then those
+  changes might be implemented without undergoing the appropriate testing and
+  approvals that are part of a robust change management process.
+
+      Accordingly, only qualified and authorized individuals shall be allowed to
+  obtain access to information system components for purposes of initiating
+  changes, including upgrades and modifications.
+
+      Unmanaged changes that occur to the database logic modules can lead to
+  unauthorized or compromised installations.
+  &quot;
+  impact 0.5
+  tag &quot;gtitle&quot;: &#39;SRG-APP-000133-DB-000179&#39;
+  tag &quot;gid&quot;: &#39;V-68863&#39;
+  tag &quot;rid&quot;: &#39;SV-83467r1_rule&#39;
+  tag &quot;stig_id&quot;: &#39;O121-OS-010710&#39;
+  tag &quot;fix_id&quot;: &#39;F-75045r1_fix&#39;
+  tag &quot;cci&quot;: [&#39;CCI-001499&#39;]
+  tag &quot;nist&quot;: [&#39;CM-5 (6)&#39;, &#39;Rev_4&#39;]
+  tag &quot;false_negatives&quot;: nil
+  tag &quot;false_positives&quot;: nil
+  tag &quot;documentable&quot;: false
+  tag &quot;mitigations&quot;: nil
+  tag &quot;severity_override_guidance&quot;: false
+  tag &quot;potential_impacts&quot;: nil
+  tag &quot;third_party_tools&quot;: nil
+  tag &quot;mitigation_controls&quot;: nil
+  tag &quot;responsibility&quot;: nil
+  tag &quot;ia_controls&quot;: nil
+  tag &quot;check&quot;: &quot;Review monitoring procedures and implementation evidence to
+  verify that monitoring of changes to database logic modules is done.
+
+  Verify the list of objects (packages, procedures, functions, and triggers)
+  being monitored is complete. If monitoring does not occur or is not complete,
+  this is a finding.&quot;
+  tag &quot;fix&quot;: &quot;Implement procedures to monitor for unauthorized changes to
+  database logic modules. If a third-party automated tool is not employed, an
+  automated job that reports on the objects of interest and compares them to the
+  baseline report for the same will meet the requirement.&quot;
+  describe &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39; do
+    skip &#39;A manual review is required to ensure the logic modules within the database (to include packages, procedures,
+    functions and triggers) are monitored to discover unauthorized changes&#39;
+  end
+end</code
+          >
+        </div>
+      </div>
+    </div>
+    <script type="text/javascript">
+      /*!
+* TW Elements 1.1.0
+* 
+* TW Elements is an open-source UI kit of advanced components for TailwindCSS.
+* Copyright © 2023 MDBootstrap.com
+* 
+* Unless a custom, individually assigned license has been granted, this program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
+* In addition, a custom license may be available upon request, subject to the terms and conditions of that license. Please contact tailwind@mdbootstrap.com for more information on obtaining a custom license.
+* This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
+* 
+* If you would like to purchase a COMMERCIAL, non-AGPL license for TWE, please check out our pricing: https://tw-elements.com/pro/
+*/
+(function(N,mt){typeof exports=="object"&&typeof module<"u"?mt(exports):typeof define=="function"&&define.amd?define(["exports"],mt):(N=typeof globalThis<"u"?globalThis:N||self,mt(N.te={}))})(this,function(N){"use strict";var xL=Object.defineProperty;var CL=(N,mt,O)=>mt in N?xL(N,mt,{enumerable:!0,configurable:!0,writable:!0,value:O}):N[mt]=O;var ke=(N,mt,O)=>(CL(N,typeof mt!="symbol"?mt+"":mt,O),O);const mt=(()=>{const s={};let t=1;return{set(e,i,n){typeof e[i]>"u"&&(e[i]={key:i,id:t},t++),s[e[i].id]=n},get(e,i){if(!e||typeof e[i]>"u")return null;const n=e[i];return n.key===i?s[n.id]:null},delete(e,i){if(typeof e[i]>"u")return;const n=e[i];n.key===i&&(delete s[n.id],delete e[i])}}})(),O={setData(s,t,e){mt.set(s,t,e)},getData(s,t){return mt.get(s,t)},removeData(s,t){mt.delete(s,t)}},lm=1e6,cm=1e3,xa="transitionend",hm=s=>s==null?`${s}`:{}.toString.call(s).match(/\s([a-z]+)/i)[1].toLowerCase(),bt=s=>{do s+=Math.floor(Math.random()*lm);while(document.getElementById(s));return s},ch=s=>{let t=s.getAttribute("data-te-target");if(!t||t==="#"){let e=s.getAttribute("href");if(!e||!e.includes("#")&&!e.startsWith("."))return null;e.includes("#")&&!e.startsWith("#")&&(e=`#${e.split("#")[1]}`),t=e&&e!=="#"?e.trim():null}return t},Ca=s=>{const t=ch(s);return t&&document.querySelector(t)?t:null},Ne=s=>{const t=ch(s);return t?document.querySelector(t):null},oo=s=>{if(!s)return 0;let{transitionDuration:t,transitionDelay:e}=window.getComputedStyle(s);const i=Number.parseFloat(t),n=Number.parseFloat(e);return!i&&!n?0:(t=t.split(",")[0],e=e.split(",")[0],(Number.parseFloat(t)+Number.parseFloat(e))*cm)},hh=s=>{s.dispatchEvent(new Event(xa))},Wi=s=>!s||typeof s!="object"?!1:(typeof s.jquery<"u"&&(s=s[0]),typeof s.nodeType<"u"),Be=s=>Wi(s)?s.jquery?s[0]:s:typeof s=="string"&&s.length>0?document.querySelector(s):null,L=(s,t,e)=>{Object.keys(e).forEach(i=>{const n=e[i],o=t[i],r=o&&Wi(o)?"element":hm(o);if(!new RegExp(n).test(r))throw new Error(`${s.toUpperCase()}: Option "${i}" provided type "${r}" but expected type "${n}".`)})},ae=s=>{if(!s||s.getClientRects().length===0)return!1;if(s.style&&s.parentNode&&s.parentNode.style){const t=getComputedStyle(s),e=getComputedStyle(s.parentNode);return getComputedStyle(s).getPropertyValue("visibility")==="visible"||t.display!=="none"&&e.display!=="none"&&t.visibility!=="hidden"}return!1},ci=s=>!s||s.nodeType!==Node.ELEMENT_NODE||s.classList.contains("disabled")?!0:typeof s.disabled<"u"?s.disabled:s.hasAttribute("disabled")&&s.getAttribute("disabled")!=="false",dh=s=>{if(!document.documentElement.attachShadow)return null;if(typeof s.getRootNode=="function"){const t=s.getRootNode();return t instanceof ShadowRoot?t:null}return s instanceof ShadowRoot?s:s.parentNode?dh(s.parentNode):null},ro=()=>function(){},zi=s=>{s.offsetHeight},uh=()=>{const{jQuery:s}=window;return s&&!document.body.hasAttribute("data-te-no-jquery")?s:null},Aa=[],ph=s=>{document.readyState==="loading"?(Aa.length||document.addEventListener("DOMContentLoaded",()=>{Aa.forEach(t=>t())}),Aa.push(s)):s()},et=()=>document.documentElement.dir==="rtl",dm=s=>Array.from(s),$=s=>document.createElement(s),hi=s=>{typeof s=="function"&&s()},fh=(s,t,e=!0)=>{if(!e){hi(s);return}const i=5,n=oo(t)+i;let o=!1;const r=({target:a})=>{a===t&&(o=!0,t.removeEventListener(xa,r),hi(s))};t.addEventListener(xa,r),setTimeout(()=>{o||hh(t)},n)},_h=(s,t,e,i)=>{let n=s.indexOf(t);if(n===-1)return s[!e&&i?s.length-1:0];const o=s.length;return n+=e?1:-1,i&&(n=(n+o)%o),s[Math.max(0,Math.min(n,o-1))]},um=/[^.]*(?=\..*)\.|.*/,pm=/\..*/,fm=/::\d+$/,wa={};let gh=1;const _m={mouseenter:"mouseover",mouseleave:"mouseout"},gm=/^(mouseenter|mouseleave)/i,mh=new Set(["click","dblclick","mouseup","mousedown","contextmenu","mousewheel","DOMMouseScroll","mouseover","mouseout","mousemove","selectstart","selectend","keydown","keypress","keyup","orientationchange","touchstart","touchmove","touchend","touchcancel","pointerdown","pointermove","pointerup","pointerleave","pointercancel","gesturestart","gesturechange","gestureend","focus","blur","change","reset","select","submit","focusin","focusout","load","unload","beforeunload","resize","move","DOMContentLoaded","readystatechange","error","abort","scroll"]);function bh(s,t){return t&&`${t}::${gh++}`||s.uidEvent||gh++}function vh(s){const t=bh(s);return s.uidEvent=t,wa[t]=wa[t]||{},wa[t]}function mm(s,t){return function e(i){return i.delegateTarget=s,e.oneOff&&_.off(s,i.type,t),t.apply(s,[i])}}function bm(s,t,e){return function i(n){const o=s.querySelectorAll(t);for(let{target:r}=n;r&&r!==this;r=r.parentNode)for(let a=o.length;a--;"")if(o[a]===r)return n.delegateTarget=r,i.oneOff&&_.off(s,n.type,e),e.apply(r,[n]);return null}}function yh(s,t,e=null){const i=Object.keys(s);for(let n=0,o=i.length;n<o;n++){const r=s[i[n]];if(r.originalHandler===t&&r.delegationSelector===e)return r}return null}function Th(s,t,e){const i=typeof t=="string",n=i?e:t;let o=xh(s);return mh.has(o)||(o=s),[i,n,o]}function Eh(s,t,e,i,n){if(typeof t!="string"||!s)return;if(e||(e=i,i=null),gm.test(t)){const p=f=>function(b){if(!b.relatedTarget||b.relatedTarget!==b.delegateTarget&&!b.delegateTarget.contains(b.relatedTarget))return f.call(this,b)};i?i=p(i):e=p(e)}const[o,r,a]=Th(t,e,i),l=vh(s),c=l[a]||(l[a]={}),h=yh(c,r,o?e:null);if(h){h.oneOff=h.oneOff&&n;return}const d=bh(r,t.replace(um,"")),u=o?bm(s,e,i):mm(s,e);u.delegationSelector=o?e:null,u.originalHandler=r,u.oneOff=n,u.uidEvent=d,c[d]=u,s.addEventListener(a,u,o)}function ka(s,t,e,i,n){const o=yh(t[e],i,n);o&&(s.removeEventListener(e,o,!!n),delete t[e][o.uidEvent])}function vm(s,t,e,i){const n=t[e]||{};Object.keys(n).forEach(o=>{if(o.includes(i)){const r=n[o];ka(s,t,e,r.originalHandler,r.delegationSelector)}})}function xh(s){return s=s.replace(pm,""),_m[s]||s}const _={on(s,t,e,i){Eh(s,t,e,i,!1)},one(s,t,e,i){Eh(s,t,e,i,!0)},off(s,t,e,i){if(typeof t!="string"||!s)return;const[n,o,r]=Th(t,e,i),a=r!==t,l=vh(s),c=t.startsWith(".");if(typeof o<"u"){if(!l||!l[r])return;ka(s,l,r,o,n?e:null);return}c&&Object.keys(l).forEach(d=>{vm(s,l,d,t.slice(1))});const h=l[r]||{};Object.keys(h).forEach(d=>{const u=d.replace(fm,"");if(!a||t.includes(u)){const p=h[d];ka(s,l,r,p.originalHandler,p.delegationSelector)}})},trigger(s,t,e){if(typeof t!="string"||!s)return null;const i=uh(),n=xh(t),o=t!==n,r=mh.has(n);let a,l=!0,c=!0,h=!1,d=null;return o&&i&&(a=i.Event(t,e),i(s).trigger(a),l=!a.isPropagationStopped(),c=!a.isImmediatePropagationStopped(),h=a.isDefaultPrevented()),r?(d=document.createEvent("HTMLEvents"),d.initEvent(n,l,!0)):d=new CustomEvent(t,{bubbles:l,cancelable:!0}),typeof e<"u"&&Object.keys(e).forEach(u=>{Object.defineProperty(d,u,{get(){return e[u]}})}),h&&d.preventDefault(),c&&s.dispatchEvent(d),d.defaultPrevented&&typeof a<"u"&&a.preventDefault(),d}},ct={on(s,t,e,i){const n=t.split(" ");for(let o=0;o<n.length;o++)_.on(s,n[o],e,i)},off(s,t,e,i){const n=t.split(" ");for(let o=0;o<n.length;o++)_.off(s,n[o],e,i)}},ym="5.1.3";class Mt{constructor(t){t=Be(t),t&&(this._element=t,O.setData(this._element,this.constructor.DATA_KEY,this))}dispose(){O.removeData(this._element,this.constructor.DATA_KEY),_.off(this._element,this.constructor.EVENT_KEY),Object.getOwnPropertyNames(this).forEach(t=>{this[t]=null})}_queueCallback(t,e,i=!0){fh(t,e,i)}static getInstance(t){return O.getData(Be(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static get VERSION(){return ym}static get NAME(){throw new Error('You have to implement the static method "NAME", for each component!')}static get DATA_KEY(){return`te.${this.NAME}`}static get EVENT_KEY(){return`.${this.DATA_KEY}`}}const Tm="button",Em="active";class ao extends Mt{static get NAME(){return Tm}toggle(){this._element.setAttribute("aria-pressed",this._element.classList.toggle(Em))}static jQueryInterface(t){return this.each(function(){const e=ao.getOrCreateInstance(this);t==="toggle"&&e[t]()})}}var vt="top",Lt="bottom",$t="right",yt="left",Ps="auto",ji=[vt,Lt,$t,yt],di="start",Yi="end",Ch="clippingParents",Sa="viewport",Ki="popper",Ah="reference",Oa=ji.reduce(function(s,t){return s.concat([t+"-"+di,t+"-"+Yi])},[]),Ia=[].concat(ji,[Ps]).reduce(function(s,t){return s.concat([t,t+"-"+di,t+"-"+Yi])},[]),wh="beforeRead",kh="read",Sh="afterRead",Oh="beforeMain",Ih="main",Dh="afterMain",Mh="beforeWrite",Lh="write",$h="afterWrite",lo=[wh,kh,Sh,Oh,Ih,Dh,Mh,Lh,$h];function le(s){return s?(s.nodeName||"").toLowerCase():null}function Rt(s){if(s==null)return window;if(s.toString()!=="[object Window]"){var t=s.ownerDocument;return t&&t.defaultView||window}return s}function ui(s){var t=Rt(s).Element;return s instanceof t||s instanceof Element}function Pt(s){var t=Rt(s).HTMLElement;return s instanceof t||s instanceof HTMLElement}function Da(s){if(typeof ShadowRoot>"u")return!1;var t=Rt(s).ShadowRoot;return s instanceof t||s instanceof ShadowRoot}function xm(s){var t=s.state;Object.keys(t.elements).forEach(function(e){var i=t.styles[e]||{},n=t.attributes[e]||{},o=t.elements[e];!Pt(o)||!le(o)||(Object.assign(o.style,i),Object.keys(n).forEach(function(r){var a=n[r];a===!1?o.removeAttribute(r):o.setAttribute(r,a===!0?"":a)}))})}function Cm(s){var t=s.state,e={popper:{position:t.options.strategy,left:"0",top:"0",margin:"0"},arrow:{position:"absolute"},reference:{}};return Object.assign(t.elements.popper.style,e.popper),t.styles=e,t.elements.arrow&&Object.assign(t.elements.arrow.style,e.arrow),function(){Object.keys(t.elements).forEach(function(i){var n=t.elements[i],o=t.attributes[i]||{},r=Object.keys(t.styles.hasOwnProperty(i)?t.styles[i]:e[i]),a=r.reduce(function(l,c){return l[c]="",l},{});!Pt(n)||!le(n)||(Object.assign(n.style,a),Object.keys(o).forEach(function(l){n.removeAttribute(l)}))})}}const Ma={name:"applyStyles",enabled:!0,phase:"write",fn:xm,effect:Cm,requires:["computeStyles"]};function Qt(s){return s.split("-")[0]}var pi=Math.max,co=Math.min,Ui=Math.round;function La(){var s=navigator.userAgentData;return s!=null&&s.brands&&Array.isArray(s.brands)?s.brands.map(function(t){return t.brand+"/"+t.version}).join(" "):navigator.userAgent}function Rh(){return!/^((?!chrome|android).)*safari/i.test(La())}function Xi(s,t,e){t===void 0&&(t=!1),e===void 0&&(e=!1);var i=s.getBoundingClientRect(),n=1,o=1;t&&Pt(s)&&(n=s.offsetWidth>0&&Ui(i.width)/s.offsetWidth||1,o=s.offsetHeight>0&&Ui(i.height)/s.offsetHeight||1);var r=ui(s)?Rt(s):window,a=r.visualViewport,l=!Rh()&&e,c=(i.left+(l&&a?a.offsetLeft:0))/n,h=(i.top+(l&&a?a.offsetTop:0))/o,d=i.width/n,u=i.height/o;return{width:d,height:u,top:h,right:c+d,bottom:h+u,left:c,x:c,y:h}}function $a(s){var t=Xi(s),e=s.offsetWidth,i=s.offsetHeight;return Math.abs(t.width-e)<=1&&(e=t.width),Math.abs(t.height-i)<=1&&(i=t.height),{x:s.offsetLeft,y:s.offsetTop,width:e,height:i}}function Ph(s,t){var e=t.getRootNode&&t.getRootNode();if(s.contains(t))return!0;if(e&&Da(e)){var i=t;do{if(i&&s.isSameNode(i))return!0;i=i.parentNode||i.host}while(i)}return!1}function Jt(s){return Rt(s).getComputedStyle(s)}function Am(s){return["table","td","th"].indexOf(le(s))>=0}function He(s){return((ui(s)?s.ownerDocument:s.document)||window.document).documentElement}function ho(s){return le(s)==="html"?s:s.assignedSlot||s.parentNode||(Da(s)?s.host:null)||He(s)}function Nh(s){return!Pt(s)||Jt(s).position==="fixed"?null:s.offsetParent}function wm(s){var t=/firefox/i.test(La()),e=/Trident/i.test(La());if(e&&Pt(s)){var i=Jt(s);if(i.position==="fixed")return null}var n=ho(s);for(Da(n)&&(n=n.host);Pt(n)&&["html","body"].indexOf(le(n))<0;){var o=Jt(n);if(o.transform!=="none"||o.perspective!=="none"||o.contain==="paint"||["transform","perspective"].indexOf(o.willChange)!==-1||t&&o.willChange==="filter"||t&&o.filter&&o.filter!=="none")return n;n=n.parentNode}return null}function Ns(s){for(var t=Rt(s),e=Nh(s);e&&Am(e)&&Jt(e).position==="static";)e=Nh(e);return e&&(le(e)==="html"||le(e)==="body"&&Jt(e).position==="static")?t:e||wm(s)||t}function Ra(s){return["top","bottom"].indexOf(s)>=0?"x":"y"}function Bs(s,t,e){return pi(s,co(t,e))}function km(s,t,e){var i=Bs(s,t,e);return i>e?e:i}function Bh(){return{top:0,right:0,bottom:0,left:0}}function Hh(s){return Object.assign({},Bh(),s)}function Vh(s,t){return t.reduce(function(e,i){return e[i]=s,e},{})}var Sm=function(t,e){return t=typeof t=="function"?t(Object.assign({},e.rects,{placement:e.placement})):t,Hh(typeof t!="number"?t:Vh(t,ji))};function Om(s){var t,e=s.state,i=s.name,n=s.options,o=e.elements.arrow,r=e.modifiersData.popperOffsets,a=Qt(e.placement),l=Ra(a),c=[yt,$t].indexOf(a)>=0,h=c?"height":"width";if(!(!o||!r)){var d=Sm(n.padding,e),u=$a(o),p=l==="y"?vt:yt,f=l==="y"?Lt:$t,b=e.rects.reference[h]+e.rects.reference[l]-r[l]-e.rects.popper[h],v=r[l]-e.rects.reference[l],y=Ns(o),T=y?l==="y"?y.clientHeight||0:y.clientWidth||0:0,x=b/2-v/2,E=d[p],C=T-u[h]-d[f],A=T/2-u[h]/2+x,w=Bs(E,A,C),S=l;e.modifiersData[i]=(t={},t[S]=w,t.centerOffset=w-A,t)}}function Im(s){var t=s.state,e=s.options,i=e.element,n=i===void 0?"[data-popper-arrow]":i;if(n!=null&&!(typeof n=="string"&&(n=t.elements.popper.querySelector(n),!n))){if({}.NODE_ENV!=="production"&&(Pt(n)||console.error(['Popper: "arrow" element must be an HTMLElement (not an SVGElement).',"To use an SVG arrow, wrap it in an HTMLElement that will be used as","the arrow."].join(" "))),!Ph(t.elements.popper,n)){({}).NODE_ENV!=="production"&&console.error(['Popper: "arrow" modifier\'s `element` must be a child of the popper',"element."].join(" "));return}t.elements.arrow=n}}const Fh={name:"arrow",enabled:!0,phase:"main",fn:Om,effect:Im,requires:["popperOffsets"],requiresIfExists:["preventOverflow"]};function Gi(s){return s.split("-")[1]}var Dm={top:"auto",right:"auto",bottom:"auto",left:"auto"};function Mm(s,t){var e=s.x,i=s.y,n=t.devicePixelRatio||1;return{x:Ui(e*n)/n||0,y:Ui(i*n)/n||0}}function Wh(s){var t,e=s.popper,i=s.popperRect,n=s.placement,o=s.variation,r=s.offsets,a=s.position,l=s.gpuAcceleration,c=s.adaptive,h=s.roundOffsets,d=s.isFixed,u=r.x,p=u===void 0?0:u,f=r.y,b=f===void 0?0:f,v=typeof h=="function"?h({x:p,y:b}):{x:p,y:b};p=v.x,b=v.y;var y=r.hasOwnProperty("x"),T=r.hasOwnProperty("y"),x=yt,E=vt,C=window;if(c){var A=Ns(e),w="clientHeight",S="clientWidth";if(A===Rt(e)&&(A=He(e),Jt(A).position!=="static"&&a==="absolute"&&(w="scrollHeight",S="scrollWidth")),A=A,n===vt||(n===yt||n===$t)&&o===Yi){E=Lt;var k=d&&A===C&&C.visualViewport?C.visualViewport.height:A[w];b-=k-i.height,b*=l?1:-1}if(n===yt||(n===vt||n===Lt)&&o===Yi){x=$t;var D=d&&A===C&&C.visualViewport?C.visualViewport.width:A[S];p-=D-i.width,p*=l?1:-1}}var I=Object.assign({position:a},c&&Dm),M=h===!0?Mm({x:p,y:b},Rt(e)):{x:p,y:b};if(p=M.x,b=M.y,l){var P;return Object.assign({},I,(P={},P[E]=T?"0":"",P[x]=y?"0":"",P.transform=(C.devicePixelRatio||1)<=1?"translate("+p+"px, "+b+"px)":"translate3d("+p+"px, "+b+"px, 0)",P))}return Object.assign({},I,(t={},t[E]=T?b+"px":"",t[x]=y?p+"px":"",t.transform="",t))}function Lm(s){var t=s.state,e=s.options,i=e.gpuAcceleration,n=i===void 0?!0:i,o=e.adaptive,r=o===void 0?!0:o,a=e.roundOffsets,l=a===void 0?!0:a;if({}.NODE_ENV!=="production"){var c=Jt(t.elements.popper).transitionProperty||"";r&&["transform","top","right","bottom","left"].some(function(d){return c.indexOf(d)>=0})&&console.warn(["Popper: Detected CSS transitions on at least one of the following",'CSS properties: "transform", "top", "right", "bottom", "left".',`
+
+`,'Disable the "computeStyles" modifier\'s `adaptive` option to allow',"for smooth transitions, or remove these properties from the CSS","transition declaration on the popper element if only transitioning","opacity or background-color for example.",`
+
+`,"We recommend using the popper element as a wrapper around an inner","element that can have any CSS property transitioned for animations."].join(" "))}var h={placement:Qt(t.placement),variation:Gi(t.placement),popper:t.elements.popper,popperRect:t.rects.popper,gpuAcceleration:n,isFixed:t.options.strategy==="fixed"};t.modifiersData.popperOffsets!=null&&(t.styles.popper=Object.assign({},t.styles.popper,Wh(Object.assign({},h,{offsets:t.modifiersData.popperOffsets,position:t.options.strategy,adaptive:r,roundOffsets:l})))),t.modifiersData.arrow!=null&&(t.styles.arrow=Object.assign({},t.styles.arrow,Wh(Object.assign({},h,{offsets:t.modifiersData.arrow,position:"absolute",adaptive:!1,roundOffsets:l})))),t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-placement":t.placement})}const Pa={name:"computeStyles",enabled:!0,phase:"beforeWrite",fn:Lm,data:{}};var uo={passive:!0};function $m(s){var t=s.state,e=s.instance,i=s.options,n=i.scroll,o=n===void 0?!0:n,r=i.resize,a=r===void 0?!0:r,l=Rt(t.elements.popper),c=[].concat(t.scrollParents.reference,t.scrollParents.popper);return o&&c.forEach(function(h){h.addEventListener("scroll",e.update,uo)}),a&&l.addEventListener("resize",e.update,uo),function(){o&&c.forEach(function(h){h.removeEventListener("scroll",e.update,uo)}),a&&l.removeEventListener("resize",e.update,uo)}}const Na={name:"eventListeners",enabled:!0,phase:"write",fn:function(){},effect:$m,data:{}};var Rm={left:"right",right:"left",bottom:"top",top:"bottom"};function po(s){return s.replace(/left|right|bottom|top/g,function(t){return Rm[t]})}var Pm={start:"end",end:"start"};function zh(s){return s.replace(/start|end/g,function(t){return Pm[t]})}function Ba(s){var t=Rt(s),e=t.pageXOffset,i=t.pageYOffset;return{scrollLeft:e,scrollTop:i}}function Ha(s){return Xi(He(s)).left+Ba(s).scrollLeft}function Nm(s,t){var e=Rt(s),i=He(s),n=e.visualViewport,o=i.clientWidth,r=i.clientHeight,a=0,l=0;if(n){o=n.width,r=n.height;var c=Rh();(c||!c&&t==="fixed")&&(a=n.offsetLeft,l=n.offsetTop)}return{width:o,height:r,x:a+Ha(s),y:l}}function Bm(s){var t,e=He(s),i=Ba(s),n=(t=s.ownerDocument)==null?void 0:t.body,o=pi(e.scrollWidth,e.clientWidth,n?n.scrollWidth:0,n?n.clientWidth:0),r=pi(e.scrollHeight,e.clientHeight,n?n.scrollHeight:0,n?n.clientHeight:0),a=-i.scrollLeft+Ha(s),l=-i.scrollTop;return Jt(n||e).direction==="rtl"&&(a+=pi(e.clientWidth,n?n.clientWidth:0)-o),{width:o,height:r,x:a,y:l}}function Va(s){var t=Jt(s),e=t.overflow,i=t.overflowX,n=t.overflowY;return/auto|scroll|overlay|hidden/.test(e+n+i)}function jh(s){return["html","body","#document"].indexOf(le(s))>=0?s.ownerDocument.body:Pt(s)&&Va(s)?s:jh(ho(s))}function Hs(s,t){var e;t===void 0&&(t=[]);var i=jh(s),n=i===((e=s.ownerDocument)==null?void 0:e.body),o=Rt(i),r=n?[o].concat(o.visualViewport||[],Va(i)?i:[]):i,a=t.concat(r);return n?a:a.concat(Hs(ho(r)))}function Fa(s){return Object.assign({},s,{left:s.x,top:s.y,right:s.x+s.width,bottom:s.y+s.height})}function Hm(s,t){var e=Xi(s,!1,t==="fixed");return e.top=e.top+s.clientTop,e.left=e.left+s.clientLeft,e.bottom=e.top+s.clientHeight,e.right=e.left+s.clientWidth,e.width=s.clientWidth,e.height=s.clientHeight,e.x=e.left,e.y=e.top,e}function Yh(s,t,e){return t===Sa?Fa(Nm(s,e)):ui(t)?Hm(t,e):Fa(Bm(He(s)))}function Vm(s){var t=Hs(ho(s)),e=["absolute","fixed"].indexOf(Jt(s).position)>=0,i=e&&Pt(s)?Ns(s):s;return ui(i)?t.filter(function(n){return ui(n)&&Ph(n,i)&&le(n)!=="body"}):[]}function Fm(s,t,e,i){var n=t==="clippingParents"?Vm(s):[].concat(t),o=[].concat(n,[e]),r=o[0],a=o.reduce(function(l,c){var h=Yh(s,c,i);return l.top=pi(h.top,l.top),l.right=co(h.right,l.right),l.bottom=co(h.bottom,l.bottom),l.left=pi(h.left,l.left),l},Yh(s,r,i));return a.width=a.right-a.left,a.height=a.bottom-a.top,a.x=a.left,a.y=a.top,a}function Kh(s){var t=s.reference,e=s.element,i=s.placement,n=i?Qt(i):null,o=i?Gi(i):null,r=t.x+t.width/2-e.width/2,a=t.y+t.height/2-e.height/2,l;switch(n){case vt:l={x:r,y:t.y-e.height};break;case Lt:l={x:r,y:t.y+t.height};break;case $t:l={x:t.x+t.width,y:a};break;case yt:l={x:t.x-e.width,y:a};break;default:l={x:t.x,y:t.y}}var c=n?Ra(n):null;if(c!=null){var h=c==="y"?"height":"width";switch(o){case di:l[c]=l[c]-(t[h]/2-e[h]/2);break;case Yi:l[c]=l[c]+(t[h]/2-e[h]/2);break}}return l}function qi(s,t){t===void 0&&(t={});var e=t,i=e.placement,n=i===void 0?s.placement:i,o=e.strategy,r=o===void 0?s.strategy:o,a=e.boundary,l=a===void 0?Ch:a,c=e.rootBoundary,h=c===void 0?Sa:c,d=e.elementContext,u=d===void 0?Ki:d,p=e.altBoundary,f=p===void 0?!1:p,b=e.padding,v=b===void 0?0:b,y=Hh(typeof v!="number"?v:Vh(v,ji)),T=u===Ki?Ah:Ki,x=s.rects.popper,E=s.elements[f?T:u],C=Fm(ui(E)?E:E.contextElement||He(s.elements.popper),l,h,r),A=Xi(s.elements.reference),w=Kh({reference:A,element:x,strategy:"absolute",placement:n}),S=Fa(Object.assign({},x,w)),k=u===Ki?S:A,D={top:C.top-k.top+y.top,bottom:k.bottom-C.bottom+y.bottom,left:C.left-k.left+y.left,right:k.right-C.right+y.right},I=s.modifiersData.offset;if(u===Ki&&I){var M=I[n];Object.keys(D).forEach(function(P){var X=[$t,Lt].indexOf(P)>=0?1:-1,R=[vt,Lt].indexOf(P)>=0?"y":"x";D[P]+=M[R]*X})}return D}function Wm(s,t){t===void 0&&(t={});var e=t,i=e.placement,n=e.boundary,o=e.rootBoundary,r=e.padding,a=e.flipVariations,l=e.allowedAutoPlacements,c=l===void 0?Ia:l,h=Gi(i),d=h?a?Oa:Oa.filter(function(f){return Gi(f)===h}):ji,u=d.filter(function(f){return c.indexOf(f)>=0});u.length===0&&(u=d,{}.NODE_ENV!=="production"&&console.error(["Popper: The `allowedAutoPlacements` option did not allow any","placements. Ensure the `placement` option matches the variation","of the allowed placements.",'For example, "auto" cannot be used to allow "bottom-start".','Use "auto-start" instead.'].join(" ")));var p=u.reduce(function(f,b){return f[b]=qi(s,{placement:b,boundary:n,rootBoundary:o,padding:r})[Qt(b)],f},{});return Object.keys(p).sort(function(f,b){return p[f]-p[b]})}function zm(s){if(Qt(s)===Ps)return[];var t=po(s);return[zh(s),t,zh(t)]}function jm(s){var t=s.state,e=s.options,i=s.name;if(!t.modifiersData[i]._skip){for(var n=e.mainAxis,o=n===void 0?!0:n,r=e.altAxis,a=r===void 0?!0:r,l=e.fallbackPlacements,c=e.padding,h=e.boundary,d=e.rootBoundary,u=e.altBoundary,p=e.flipVariations,f=p===void 0?!0:p,b=e.allowedAutoPlacements,v=t.options.placement,y=Qt(v),T=y===v,x=l||(T||!f?[po(v)]:zm(v)),E=[v].concat(x).reduce(function(we,Zt){return we.concat(Qt(Zt)===Ps?Wm(t,{placement:Zt,boundary:h,rootBoundary:d,padding:c,flipVariations:f,allowedAutoPlacements:b}):Zt)},[]),C=t.rects.reference,A=t.rects.popper,w=new Map,S=!0,k=E[0],D=0;D<E.length;D++){var I=E[D],M=Qt(I),P=Gi(I)===di,X=[vt,Lt].indexOf(M)>=0,R=X?"width":"height",z=qi(t,{placement:I,boundary:h,rootBoundary:d,altBoundary:u,padding:c}),Y=X?P?$t:yt:P?Lt:vt;C[R]>A[R]&&(Y=po(Y));var Gt=po(Y),oe=[];if(o&&oe.push(z[M]<=0),a&&oe.push(z[Y]<=0,z[Gt]<=0),oe.every(function(we){return we})){k=I,S=!1;break}w.set(I,oe)}if(S)for(var re=f?3:1,li=function(Zt){var Pe=E.find(function(Ta){var Vi=w.get(Ta);if(Vi)return Vi.slice(0,Zt).every(function(rh){return rh})});if(Pe)return k=Pe,"break"},qt=re;qt>0;qt--){var Ae=li(qt);if(Ae==="break")break}t.placement!==k&&(t.modifiersData[i]._skip=!0,t.placement=k,t.reset=!0)}}const Uh={name:"flip",enabled:!0,phase:"main",fn:jm,requiresIfExists:["offset"],data:{_skip:!1}};function Xh(s,t,e){return e===void 0&&(e={x:0,y:0}),{top:s.top-t.height-e.y,right:s.right-t.width+e.x,bottom:s.bottom-t.height+e.y,left:s.left-t.width-e.x}}function Gh(s){return[vt,$t,Lt,yt].some(function(t){return s[t]>=0})}function Ym(s){var t=s.state,e=s.name,i=t.rects.reference,n=t.rects.popper,o=t.modifiersData.preventOverflow,r=qi(t,{elementContext:"reference"}),a=qi(t,{altBoundary:!0}),l=Xh(r,i),c=Xh(a,n,o),h=Gh(l),d=Gh(c);t.modifiersData[e]={referenceClippingOffsets:l,popperEscapeOffsets:c,isReferenceHidden:h,hasPopperEscaped:d},t.attributes.popper=Object.assign({},t.attributes.popper,{"data-popper-reference-hidden":h,"data-popper-escaped":d})}const qh={name:"hide",enabled:!0,phase:"main",requiresIfExists:["preventOverflow"],fn:Ym};function Km(s,t,e){var i=Qt(s),n=[yt,vt].indexOf(i)>=0?-1:1,o=typeof e=="function"?e(Object.assign({},t,{placement:s})):e,r=o[0],a=o[1];return r=r||0,a=(a||0)*n,[yt,$t].indexOf(i)>=0?{x:a,y:r}:{x:r,y:a}}function Um(s){var t=s.state,e=s.options,i=s.name,n=e.offset,o=n===void 0?[0,0]:n,r=Ia.reduce(function(h,d){return h[d]=Km(d,t.rects,o),h},{}),a=r[t.placement],l=a.x,c=a.y;t.modifiersData.popperOffsets!=null&&(t.modifiersData.popperOffsets.x+=l,t.modifiersData.popperOffsets.y+=c),t.modifiersData[i]=r}const Zh={name:"offset",enabled:!0,phase:"main",requires:["popperOffsets"],fn:Um};function Xm(s){var t=s.state,e=s.name;t.modifiersData[e]=Kh({reference:t.rects.reference,element:t.rects.popper,strategy:"absolute",placement:t.placement})}const Wa={name:"popperOffsets",enabled:!0,phase:"read",fn:Xm,data:{}};function Gm(s){return s==="x"?"y":"x"}function qm(s){var t=s.state,e=s.options,i=s.name,n=e.mainAxis,o=n===void 0?!0:n,r=e.altAxis,a=r===void 0?!1:r,l=e.boundary,c=e.rootBoundary,h=e.altBoundary,d=e.padding,u=e.tether,p=u===void 0?!0:u,f=e.tetherOffset,b=f===void 0?0:f,v=qi(t,{boundary:l,rootBoundary:c,padding:d,altBoundary:h}),y=Qt(t.placement),T=Gi(t.placement),x=!T,E=Ra(y),C=Gm(E),A=t.modifiersData.popperOffsets,w=t.rects.reference,S=t.rects.popper,k=typeof b=="function"?b(Object.assign({},t.rects,{placement:t.placement})):b,D=typeof k=="number"?{mainAxis:k,altAxis:k}:Object.assign({mainAxis:0,altAxis:0},k),I=t.modifiersData.offset?t.modifiersData.offset[t.placement]:null,M={x:0,y:0};if(A){if(o){var P,X=E==="y"?vt:yt,R=E==="y"?Lt:$t,z=E==="y"?"height":"width",Y=A[E],Gt=Y+v[X],oe=Y-v[R],re=p?-S[z]/2:0,li=T===di?w[z]:S[z],qt=T===di?-S[z]:-w[z],Ae=t.elements.arrow,we=p&&Ae?$a(Ae):{width:0,height:0},Zt=t.modifiersData["arrow#persistent"]?t.modifiersData["arrow#persistent"].padding:Bh(),Pe=Zt[X],Ta=Zt[R],Vi=Bs(0,w[z],we[z]),rh=x?w[z]/2-re-Vi-Pe-D.mainAxis:li-Vi-Pe-D.mainAxis,mL=x?-w[z]/2+re+Vi+Ta+D.mainAxis:qt+Vi+Ta+D.mainAxis,ah=t.elements.arrow&&Ns(t.elements.arrow),bL=ah?E==="y"?ah.clientTop||0:ah.clientLeft||0:0,Zg=(P=I==null?void 0:I[E])!=null?P:0,vL=Y+rh-Zg-bL,yL=Y+mL-Zg,Qg=Bs(p?co(Gt,vL):Gt,Y,p?pi(oe,yL):oe);A[E]=Qg,M[E]=Qg-Y}if(a){var Jg,TL=E==="x"?vt:yt,EL=E==="x"?Lt:$t,Fi=A[C],Ea=C==="y"?"height":"width",tm=Fi+v[TL],em=Fi-v[EL],lh=[vt,yt].indexOf(y)!==-1,im=(Jg=I==null?void 0:I[C])!=null?Jg:0,sm=lh?tm:Fi-w[Ea]-S[Ea]-im+D.altAxis,nm=lh?Fi+w[Ea]+S[Ea]-im-D.altAxis:em,om=p&&lh?km(sm,Fi,nm):Bs(p?sm:tm,Fi,p?nm:em);A[C]=om,M[C]=om-Fi}t.modifiersData[i]=M}}const Qh={name:"preventOverflow",enabled:!0,phase:"main",fn:qm,requiresIfExists:["offset"]};function Zm(s){return{scrollLeft:s.scrollLeft,scrollTop:s.scrollTop}}function Qm(s){return s===Rt(s)||!Pt(s)?Ba(s):Zm(s)}function Jm(s){var t=s.getBoundingClientRect(),e=Ui(t.width)/s.offsetWidth||1,i=Ui(t.height)/s.offsetHeight||1;return e!==1||i!==1}function tb(s,t,e){e===void 0&&(e=!1);var i=Pt(t),n=Pt(t)&&Jm(t),o=He(t),r=Xi(s,n,e),a={scrollLeft:0,scrollTop:0},l={x:0,y:0};return(i||!i&&!e)&&((le(t)!=="body"||Va(o))&&(a=Qm(t)),Pt(t)?(l=Xi(t,!0),l.x+=t.clientLeft,l.y+=t.clientTop):o&&(l.x=Ha(o))),{x:r.left+a.scrollLeft-l.x,y:r.top+a.scrollTop-l.y,width:r.width,height:r.height}}function eb(s){var t=new Map,e=new Set,i=[];s.forEach(function(o){t.set(o.name,o)});function n(o){e.add(o.name);var r=[].concat(o.requires||[],o.requiresIfExists||[]);r.forEach(function(a){if(!e.has(a)){var l=t.get(a);l&&n(l)}}),i.push(o)}return s.forEach(function(o){e.has(o.name)||n(o)}),i}function ib(s){var t=eb(s);return lo.reduce(function(e,i){return e.concat(t.filter(function(n){return n.phase===i}))},[])}function sb(s){var t;return function(){return t||(t=new Promise(function(e){Promise.resolve().then(function(){t=void 0,e(s())})})),t}}function Ve(s){for(var t=arguments.length,e=new Array(t>1?t-1:0),i=1;i<t;i++)e[i-1]=arguments[i];return[].concat(e).reduce(function(n,o){return n.replace(/%s/,o)},s)}var fi='Popper: modifier "%s" provided an invalid %s property, expected %s but got %s',nb='Popper: modifier "%s" requires "%s", but "%s" modifier is not available',Jh=["name","enabled","phase","fn","effect","requires","options"];function ob(s){s.forEach(function(t){[].concat(Object.keys(t),Jh).filter(function(e,i,n){return n.indexOf(e)===i}).forEach(function(e){switch(e){case"name":typeof t.name!="string"&&console.error(Ve(fi,String(t.name),'"name"','"string"','"'+String(t.name)+'"'));break;case"enabled":typeof t.enabled!="boolean"&&console.error(Ve(fi,t.name,'"enabled"','"boolean"','"'+String(t.enabled)+'"'));break;case"phase":lo.indexOf(t.phase)<0&&console.error(Ve(fi,t.name,'"phase"',"either "+lo.join(", "),'"'+String(t.phase)+'"'));break;case"fn":typeof t.fn!="function"&&console.error(Ve(fi,t.name,'"fn"','"function"','"'+String(t.fn)+'"'));break;case"effect":t.effect!=null&&typeof t.effect!="function"&&console.error(Ve(fi,t.name,'"effect"','"function"','"'+String(t.fn)+'"'));break;case"requires":t.requires!=null&&!Array.isArray(t.requires)&&console.error(Ve(fi,t.name,'"requires"','"array"','"'+String(t.requires)+'"'));break;case"requiresIfExists":Array.isArray(t.requiresIfExists)||console.error(Ve(fi,t.name,'"requiresIfExists"','"array"','"'+String(t.requiresIfExists)+'"'));break;case"options":case"data":break;default:console.error('PopperJS: an invalid property has been provided to the "'+t.name+'" modifier, valid properties are '+Jh.map(function(i){return'"'+i+'"'}).join(", ")+'; but "'+e+'" was provided.')}t.requires&&t.requires.forEach(function(i){s.find(function(n){return n.name===i})==null&&console.error(Ve(nb,String(t.name),i,i))})})})}function rb(s,t){var e=new Set;return s.filter(function(i){var n=t(i);if(!e.has(n))return e.add(n),!0})}function ab(s){var t=s.reduce(function(e,i){var n=e[i.name];return e[i.name]=n?Object.assign({},n,i,{options:Object.assign({},n.options,i.options),data:Object.assign({},n.data,i.data)}):i,e},{});return Object.keys(t).map(function(e){return t[e]})}var td="Popper: Invalid reference or popper argument provided. They must be either a DOM element or virtual element.",lb="Popper: An infinite loop in the modifiers cycle has been detected! The cycle has been interrupted to prevent a browser crash.",ed={placement:"bottom",modifiers:[],strategy:"absolute"};function id(){for(var s=arguments.length,t=new Array(s),e=0;e<s;e++)t[e]=arguments[e];return!t.some(function(i){return!(i&&typeof i.getBoundingClientRect=="function")})}function fo(s){s===void 0&&(s={});var t=s,e=t.defaultModifiers,i=e===void 0?[]:e,n=t.defaultOptions,o=n===void 0?ed:n;return function(a,l,c){c===void 0&&(c=o);var h={placement:"bottom",orderedModifiers:[],options:Object.assign({},ed,o),modifiersData:{},elements:{reference:a,popper:l},attributes:{},styles:{}},d=[],u=!1,p={state:h,setOptions:function(y){var T=typeof y=="function"?y(h.options):y;b(),h.options=Object.assign({},o,h.options,T),h.scrollParents={reference:ui(a)?Hs(a):a.contextElement?Hs(a.contextElement):[],popper:Hs(l)};var x=ib(ab([].concat(i,h.options.modifiers)));if(h.orderedModifiers=x.filter(function(I){return I.enabled}),{}.NODE_ENV!=="production"){var E=rb([].concat(x,h.options.modifiers),function(I){var M=I.name;return M});if(ob(E),Qt(h.options.placement)===Ps){var C=h.orderedModifiers.find(function(I){var M=I.name;return M==="flip"});C||console.error(['Popper: "auto" placements require the "flip" modifier be',"present and enabled to work."].join(" "))}var A=Jt(l),w=A.marginTop,S=A.marginRight,k=A.marginBottom,D=A.marginLeft;[w,S,k,D].some(function(I){return parseFloat(I)})&&console.warn(['Popper: CSS "margin" styles cannot be used to apply padding',"between the popper and its reference element or boundary.","To replicate margin, use the `offset` modifier, as well as","the `padding` option in the `preventOverflow` and `flip`","modifiers."].join(" "))}return f(),p.update()},forceUpdate:function(){if(!u){var y=h.elements,T=y.reference,x=y.popper;if(!id(T,x)){({}).NODE_ENV!=="production"&&console.error(td);return}h.rects={reference:tb(T,Ns(x),h.options.strategy==="fixed"),popper:$a(x)},h.reset=!1,h.placement=h.options.placement,h.orderedModifiers.forEach(function(I){return h.modifiersData[I.name]=Object.assign({},I.data)});for(var E=0,C=0;C<h.orderedModifiers.length;C++){if({}.NODE_ENV!=="production"&&(E+=1,E>100)){console.error(lb);break}if(h.reset===!0){h.reset=!1,C=-1;continue}var A=h.orderedModifiers[C],w=A.fn,S=A.options,k=S===void 0?{}:S,D=A.name;typeof w=="function"&&(h=w({state:h,options:k,name:D,instance:p})||h)}}},update:sb(function(){return new Promise(function(v){p.forceUpdate(),v(h)})}),destroy:function(){b(),u=!0}};if(!id(a,l))return{}.NODE_ENV!=="production"&&console.error(td),p;p.setOptions(c).then(function(v){!u&&c.onFirstUpdate&&c.onFirstUpdate(v)});function f(){h.orderedModifiers.forEach(function(v){var y=v.name,T=v.options,x=T===void 0?{}:T,E=v.effect;if(typeof E=="function"){var C=E({state:h,name:y,instance:p,options:x}),A=function(){};d.push(C||A)}})}function b(){d.forEach(function(v){return v()}),d=[]}return p}}var cb=fo(),hb=[Na,Wa,Pa,Ma],db=fo({defaultModifiers:hb}),ub=[Na,Wa,Pa,Ma,Zh,Uh,Qh,Fh,qh],Fe=fo({defaultModifiers:ub});const sd=Object.freeze(Object.defineProperty({__proto__:null,afterMain:Dh,afterRead:Sh,afterWrite:$h,applyStyles:Ma,arrow:Fh,auto:Ps,basePlacements:ji,beforeMain:Oh,beforeRead:wh,beforeWrite:Mh,bottom:Lt,clippingParents:Ch,computeStyles:Pa,createPopper:Fe,createPopperBase:cb,createPopperLite:db,detectOverflow:qi,end:Yi,eventListeners:Na,flip:Uh,hide:qh,left:yt,main:Ih,modifierPhases:lo,offset:Zh,placements:Ia,popper:Ki,popperGenerator:fo,popperOffsets:Wa,preventOverflow:Qh,read:kh,reference:Ah,right:$t,start:di,top:vt,variationPlacements:Oa,viewport:Sa,write:Lh},Symbol.toStringTag,{value:"Module"}));function za(s){return s==="true"?!0:s==="false"?!1:s===Number(s).toString()?Number(s):s===""||s==="null"?null:s}function ja(s){return s.replace(/[A-Z]/g,t=>`-${t.toLowerCase()}`)}const g={setDataAttribute(s,t,e){s.setAttribute(`data-te-${ja(t)}`,e)},removeDataAttribute(s,t){s.removeAttribute(`data-te-${ja(t)}`)},getDataAttributes(s){if(!s)return{};const t={};return Object.keys(s.dataset).filter(e=>e.startsWith("te")).forEach(e=>{if(e.startsWith("teClass"))return;let i=e.replace(/^te/,"");i=i.charAt(0).toLowerCase()+i.slice(1,i.length),t[i]=za(s.dataset[e])}),t},getDataClassAttributes(s){if(!s)return{};const t={...s.dataset};return Object.keys(t).filter(e=>e.startsWith("teClass")).forEach(e=>{let i=e.replace(/^teClass/,"");i=i.charAt(0).toLowerCase()+i.slice(1,i.length),t[i]=za(t[e])}),t},getDataAttribute(s,t){return za(s.getAttribute(`data-te-${ja(t)}`))},offset(s){const t=s.getBoundingClientRect();return{top:t.top+document.body.scrollTop,left:t.left+document.body.scrollLeft}},position(s){return{top:s.offsetTop,left:s.offsetLeft}},style(s,t){Object.assign(s.style,t)},toggleClass(s,t){s&&Ya(t).forEach(e=>{s.classList.contains(e)?s.classList.remove(e):s.classList.add(e)})},addClass(s,t){Ya(t).forEach(e=>!s.classList.contains(e)&&s.classList.add(e))},addStyle(s,t){Object.keys(t).forEach(e=>{s.style[e]=t[e]})},removeClass(s,t){Ya(t).forEach(e=>s.classList.contains(e)&&s.classList.remove(e))},hasClass(s,t){return s.classList.contains(t)},maxOffset(s){const t=s.getBoundingClientRect();return{top:t.top+Math.max(document.body.scrollTop,document.documentElement.scrollTop,window.scrollY),left:t.left+Math.max(document.body.scrollLeft,document.documentElement.scrollLeft,window.scrollX)}}};function Ya(s){return typeof s=="string"?s.split(" "):Array.isArray(s)?s:!1}const pb=3,m={closest(s,t){return s.closest(t)},matches(s,t){return s.matches(t)},find(s,t=document.documentElement){return[].concat(...Element.prototype.querySelectorAll.call(t,s))},findOne(s,t=document.documentElement){return Element.prototype.querySelector.call(t,s)},children(s,t){return[].concat(...s.children).filter(i=>i.matches(t))},parents(s,t){const e=[];let i=s.parentNode;for(;i&&i.nodeType===Node.ELEMENT_NODE&&i.nodeType!==pb;)this.matches(i,t)&&e.push(i),i=i.parentNode;return e},prev(s,t){let e=s.previousElementSibling;for(;e;){if(e.matches(t))return[e];e=e.previousElementSibling}return[]},next(s,t){let e=s.nextElementSibling;for(;e;){if(this.matches(e,t))return[e];e=e.nextElementSibling}return[]},focusableChildren(s){const t=["a","button","input","textarea","select","details","[tabindex]",'[contenteditable="true"]'].map(e=>`${e}:not([tabindex^="-"])`).join(", ");return this.find(t,s).filter(e=>!ci(e)&&ae(e))}},Ka="dropdown",_i=".te.dropdown",Ua=".data-api",_o="Escape",nd="Space",od="Tab",Xa="ArrowUp",go="ArrowDown",fb=2,_b=new RegExp(`${Xa}|${go}|${_o}`),gb=`hide${_i}`,mb=`hidden${_i}`,bb=`show${_i}`,vb=`shown${_i}`,yb=`click${_i}${Ua}`,rd=`keydown${_i}${Ua}`,Tb=`keyup${_i}${Ua}`,We="show",Eb="dropup",xb="dropend",Cb="dropstart",Ab="[data-te-navbar-ref]",mo="[data-te-dropdown-toggle-ref]",Ga="[data-te-dropdown-menu-ref]",wb="[data-te-navbar-nav-ref]",kb="[data-te-dropdown-menu-ref] [data-te-dropdown-item-ref]:not(.disabled):not(:disabled)",Sb=et()?"top-end":"top-start",Ob=et()?"top-start":"top-end",Ib=et()?"bottom-end":"bottom-start",Db=et()?"bottom-start":"bottom-end",Mb=et()?"left-start":"right-start",Lb=et()?"right-start":"left-start",$b=[{opacity:"0"},{opacity:"1"}],Rb=[{opacity:"1"},{opacity:"0"}],ad={iterations:1,easing:"ease",fill:"both"},Pb={offset:[0,2],boundary:"clippingParents",reference:"toggle",display:"dynamic",popperConfig:null,autoClose:!0,dropdownAnimation:"on",animationDuration:550},Nb={offset:"(array|string|function)",boundary:"(string|element)",reference:"(string|element|object)",display:"string",popperConfig:"(null|object|function)",autoClose:"(boolean|string)",dropdownAnimation:"string",animationDuration:"number"};class Ft extends Mt{constructor(t,e){super(t),this._popper=null,this._config=this._getConfig(e),this._menu=this._getMenuElement(),this._inNavbar=this._detectNavbar(),this._fadeOutAnimate=null;const i=window.matchMedia("(prefers-reduced-motion: reduce)").matches;this._animationCanPlay=this._config.dropdownAnimation==="on"&&!i,this._didInit=!1,this._init()}static get Default(){return Pb}static get DefaultType(){return Nb}static get NAME(){return Ka}toggle(){return this._isShown()?this.hide():this.show()}show(){if(ci(this._element)||this._isShown(this._menu))return;const t={relatedTarget:this._element};if(_.trigger(this._element,bb,t).defaultPrevented)return;const i=Ft.getParentFromElement(this._element);this._inNavbar?g.setDataAttribute(this._menu,"popper","none"):this._createPopper(i),"ontouchstart"in document.documentElement&&!i.closest(wb)&&[].concat(...document.body.children).forEach(n=>_.on(n,"mouseover",ro)),this._element.focus(),this._element.setAttribute("aria-expanded",!0),this._menu.setAttribute(`data-te-dropdown-${We}`,""),this._animationCanPlay&&this._menu.animate($b,{...ad,duration:this._config.animationDuration}),this._element.setAttribute(`data-te-dropdown-${We}`,""),setTimeout(()=>{_.trigger(this._element,vb,t)},this._animationCanPlay?this._config.animationDuration:0)}hide(){if(ci(this._element)||!this._isShown(this._menu))return;const t={relatedTarget:this._element};this._completeHide(t)}dispose(){this._popper&&this._popper.destroy(),super.dispose()}update(){this._inNavbar=this._detectNavbar(),this._popper&&this._popper.update()}_init(){this._didInit||(_.on(document,rd,mo,Ft.dataApiKeydownHandler),_.on(document,rd,Ga,Ft.dataApiKeydownHandler),_.on(document,yb,Ft.clearMenus),_.on(document,Tb,Ft.clearMenus),this._didInit=!0)}_completeHide(t){this._fadeOutAnimate&&this._fadeOutAnimate.playState==="running"||_.trigger(this._element,gb,t).defaultPrevented||("ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(i=>_.off(i,"mouseover",ro)),this._animationCanPlay&&(this._fadeOutAnimate=this._menu.animate(Rb,{...ad,duration:this._config.animationDuration})),setTimeout(()=>{this._popper&&this._popper.destroy(),this._menu.removeAttribute(`data-te-dropdown-${We}`),this._element.removeAttribute(`data-te-dropdown-${We}`),this._element.setAttribute("aria-expanded","false"),g.removeDataAttribute(this._menu,"popper"),_.trigger(this._element,mb,t)},this._animationCanPlay?this._config.animationDuration:0))}_getConfig(t){if(t={...this.constructor.Default,...g.getDataAttributes(this._element),...t},L(Ka,t,this.constructor.DefaultType),typeof t.reference=="object"&&!Wi(t.reference)&&typeof t.reference.getBoundingClientRect!="function")throw new TypeError(`${Ka.toUpperCase()}: Option "reference" provided type "object" without a required "getBoundingClientRect" method.`);return t}_createPopper(t){if(typeof sd>"u")throw new TypeError("Bootstrap's dropdowns require Popper (https://popper.js.org)");let e=this._element;this._config.reference==="parent"?e=t:Wi(this._config.reference)?e=Be(this._config.reference):typeof this._config.reference=="object"&&(e=this._config.reference);const i=this._getPopperConfig(),n=i.modifiers.find(o=>o.name==="applyStyles"&&o.enabled===!1);this._popper=Fe(e,this._menu,i),n&&g.setDataAttribute(this._menu,"popper","static")}_isShown(t=this._element){return t.dataset[`teDropdown${We.charAt(0).toUpperCase()+We.slice(1)}`]===""}_getMenuElement(){return m.next(this._element,Ga)[0]}_getPlacement(){const t=this._element.parentNode;if(t.dataset.teDropdownPosition===xb)return Mb;if(t.dataset.teDropdownPosition===Cb)return Lb;const e=t.dataset.teDropdownAlignment==="end";return t.dataset.teDropdownPosition===Eb?e?Ob:Sb:e?Db:Ib}_detectNavbar(){return this._element.closest(Ab)!==null}_getOffset(){const{offset:t}=this._config;return typeof t=="string"?t.split(",").map(e=>Number.parseInt(e,10)):typeof t=="function"?e=>t(e,this._element):t}_getPopperConfig(){const t={placement:this._getPlacement(),modifiers:[{name:"preventOverflow",options:{boundary:this._config.boundary}},{name:"offset",options:{offset:this._getOffset()}}]};return this._config.display==="static"&&(t.modifiers=[{name:"applyStyles",enabled:!1}]),{...t,...typeof this._config.popperConfig=="function"?this._config.popperConfig(t):this._config.popperConfig}}_selectMenuItem({key:t,target:e}){const i=m.find(kb,this._menu).filter(ae);i.length&&_h(i,e,t===go,!i.includes(e)).focus()}static jQueryInterface(t){return this.each(function(){const e=Ft.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}static clearMenus(t){if(t&&(t.button===fb||t.type==="keyup"&&t.key!==od))return;const e=m.find(mo);for(let i=0,n=e.length;i<n;i++){const o=Ft.getInstance(e[i]);if(!o||o._config.autoClose===!1||!o._isShown())continue;const r={relatedTarget:o._element};if(t){const a=t.composedPath(),l=a.includes(o._menu);if(a.includes(o._element)||o._config.autoClose==="inside"&&!l||o._config.autoClose==="outside"&&l||o._menu.contains(t.target)&&(t.type==="keyup"&&t.key===od||/input|select|option|textarea|form/i.test(t.target.tagName)))continue;t.type==="click"&&(r.clickEvent=t)}o._completeHide(r)}}static getParentFromElement(t){return Ne(t)||t.parentNode}static dataApiKeydownHandler(t){if(/input|textarea/i.test(t.target.tagName)?t.key===nd||t.key!==_o&&(t.key!==go&&t.key!==Xa||t.target.closest(Ga)):!_b.test(t.key))return;const e=this.dataset[`teDropdown${We.charAt(0).toUpperCase()+We.slice(1)}`]==="";if(!e&&t.key===_o||(t.preventDefault(),t.stopPropagation(),ci(this)))return;const i=this.matches(mo)?this:m.prev(this,mo)[0],n=Ft.getOrCreateInstance(i);if(t.key===_o){n.hide();return}if(t.key===Xa||t.key===go){e||n.show(),n._selectMenuItem(t);return}(!e||t.key===nd)&&Ft.clearMenus()}}const qa="collapse",ld="te.collapse",bo=`.${ld}`,cd={toggle:!0,parent:null},Bb={toggle:"boolean",parent:"(null|element)"},Hb=`show${bo}`,Vb=`shown${bo}`,Fb=`hide${bo}`,Wb=`hidden${bo}`,Za="data-te-collapse-show",hd="data-te-collapse-collapsed",vo="data-te-collapse-collapsing",zb="data-te-collapse-horizontal",Zi="data-te-collapse-item",dd=`:scope [${Zi}] [${Zi}]`,jb="width",Yb="height",Kb="[data-te-collapse-item][data-te-collapse-show], [data-te-collapse-item][data-te-collapse-collapsing]",ud="[data-te-collapse-init]",Ub={visible:"!visible",hidden:"hidden",baseTransition:"overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none",collapsing:"h-0 transition-[height] overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none",collapsingHorizontal:"w-0 h-auto transition-[width] overflow-hidden duration-[350ms] ease-[cubic-bezier(0.25,0.1,0.25,1.0)] motion-reduce:transition-none"},Xb={visible:"string",hidden:"string",baseTransition:"string",collapsing:"string",collapsingHorizontal:"string"};class ce extends Mt{constructor(t,e,i){super(t),this._isTransitioning=!1,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._triggerArray=[];const n=m.find(ud);for(let o=0,r=n.length;o<r;o++){const a=n[o],l=Ca(a),c=m.find(l).filter(h=>h===this._element);l!==null&&c.length&&(this._selector=l,this._triggerArray.push(a))}this._initializeChildren(),this._config.parent||this._addAriaAndCollapsedClass(this._triggerArray,this._isShown()),this._config.toggle&&this.toggle()}static get Default(){return cd}static get NAME(){return qa}toggle(){this._isShown()?this.hide():this.show()}show(){if(this._isTransitioning||this._isShown())return;let t=[],e;if(this._config.parent){const h=m.find(dd,this._config.parent);t=m.find(Kb,this._config.parent).filter(d=>!h.includes(d))}const i=m.findOne(this._selector);if(t.length){const h=t.find(d=>i!==d);if(e=h?ce.getInstance(h):null,e&&e._isTransitioning)return}if(_.trigger(this._element,Hb).defaultPrevented)return;t.forEach(h=>{i!==h&&ce.getOrCreateInstance(h,{toggle:!1}).hide(),e||O.setData(h,ld,null)});const o=this._getDimension(),r=o==="height"?this._classes.collapsing:this._classes.collapsingHorizontal;g.removeClass(this._element,this._classes.visible),g.removeClass(this._element,this._classes.hidden),g.addClass(this._element,r),this._element.removeAttribute(Zi),this._element.setAttribute(vo,""),this._element.style[o]=0,this._addAriaAndCollapsedClass(this._triggerArray,!0),this._isTransitioning=!0;const a=()=>{this._isTransitioning=!1,g.removeClass(this._element,this._classes.hidden),g.removeClass(this._element,r),g.addClass(this._element,this._classes.visible),this._element.removeAttribute(vo),this._element.setAttribute(Zi,""),this._element.setAttribute(Za,""),this._element.style[o]="",_.trigger(this._element,Vb)},c=`scroll${o[0].toUpperCase()+o.slice(1)}`;this._queueCallback(a,this._element,!0),this._element.style[o]=`${this._element[c]}px`}hide(){if(this._isTransitioning||!this._isShown()||_.trigger(this._element,Fb).defaultPrevented)return;const e=this._getDimension(),i=e==="height"?this._classes.collapsing:this._classes.collapsingHorizontal;this._element.style[e]=`${this._element.getBoundingClientRect()[e]}px`,zi(this._element),g.addClass(this._element,i),g.removeClass(this._element,this._classes.visible),g.removeClass(this._element,this._classes.hidden),this._element.setAttribute(vo,""),this._element.removeAttribute(Zi),this._element.removeAttribute(Za);const n=this._triggerArray.length;for(let r=0;r<n;r++){const a=this._triggerArray[r],l=Ne(a);l&&!this._isShown(l)&&this._addAriaAndCollapsedClass([a],!1)}this._isTransitioning=!0;const o=()=>{this._isTransitioning=!1,g.removeClass(this._element,i),g.addClass(this._element,this._classes.visible),g.addClass(this._element,this._classes.hidden),this._element.removeAttribute(vo),this._element.setAttribute(Zi,""),_.trigger(this._element,Wb)};this._element.style[e]="",this._queueCallback(o,this._element,!0)}_isShown(t=this._element){return t.hasAttribute(Za)}_getConfig(t){return t={...cd,...g.getDataAttributes(this._element),...t},t.toggle=!!t.toggle,t.parent=Be(t.parent),L(qa,t,Bb),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Ub,...e,...t},L(qa,t,Xb),t}_getDimension(){return this._element.hasAttribute(zb)?jb:Yb}_initializeChildren(){if(!this._config.parent)return;const t=m.find(dd,this._config.parent);m.find(ud,this._config.parent).filter(e=>!t.includes(e)).forEach(e=>{const i=Ne(e);i&&this._addAriaAndCollapsedClass([e],this._isShown(i))})}_addAriaAndCollapsedClass(t,e){t.length&&t.forEach(i=>{e?i.removeAttribute(hd):i.setAttribute(`${hd}`,""),i.setAttribute("aria-expanded",e)})}static jQueryInterface(t){return this.each(function(){const e={};typeof t=="string"&&/show|hide/.test(t)&&(e.toggle=!1);const i=ce.getOrCreateInstance(this,e);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t]()}})}}const pd=".fixed-top, .fixed-bottom, .is-fixed, .sticky-top",fd=".sticky-top";class Qi{constructor(){this._element=document.body}getWidth(){const t=document.documentElement.clientWidth;return Math.abs(window.innerWidth-t)}hide(){const t=this.getWidth();this._disableOverFlow(),this._setElementAttributes(this._element,"paddingRight",e=>e+t),this._setElementAttributes(pd,"paddingRight",e=>e+t),this._setElementAttributes(fd,"marginRight",e=>e-t)}_disableOverFlow(){this._saveInitialAttribute(this._element,"overflow"),this._element.style.overflow="hidden"}_setElementAttributes(t,e,i){const n=this.getWidth(),o=r=>{if(r!==this._element&&window.innerWidth>r.clientWidth+n)return;this._saveInitialAttribute(r,e);const a=window.getComputedStyle(r)[e];r.style[e]=`${i(Number.parseFloat(a))}px`};this._applyManipulationCallback(t,o)}reset(){this._resetElementAttributes(this._element,"overflow"),this._resetElementAttributes(this._element,"paddingRight"),this._resetElementAttributes(pd,"paddingRight"),this._resetElementAttributes(fd,"marginRight")}_saveInitialAttribute(t,e){const i=t.style[e];i&&g.setDataAttribute(t,e,i)}_resetElementAttributes(t,e){const i=n=>{const o=g.getDataAttribute(n,e);typeof o>"u"?n.style.removeProperty(e):(g.removeDataAttribute(n,e),n.style[e]=o)};this._applyManipulationCallback(t,i)}_applyManipulationCallback(t,e){Wi(t)?e(t):m.find(t,this._element).forEach(e)}isOverflowing(){return this.getWidth()>0}}const Gb={isVisible:!0,isAnimated:!1,rootElement:"body",clickCallback:null,backdropClasses:null},qb={isVisible:"boolean",isAnimated:"boolean",rootElement:"(element|string)",clickCallback:"(function|null)",backdropClasses:"(array|string|null)"},_d="backdrop",gd=`mousedown.te.${_d}`;class Qa{constructor(t){this._config=this._getConfig(t),this._isAppended=!1,this._element=null}show(t){if(!this._config.isVisible){hi(t);return}this._append(),this._config.isAnimated&&zi(this._getElement());const e=this._config.backdropClasses||["opacity-50","transition-all","duration-300","ease-in-out","fixed","top-0","left-0","z-[1040]","bg-black","w-screen","h-screen"];g.removeClass(this._getElement(),"opacity-0"),g.addClass(this._getElement(),e),this._element.setAttribute("data-te-backdrop-show",""),this._emulateAnimation(()=>{hi(t)})}hide(t){if(!this._config.isVisible){hi(t);return}this._element.removeAttribute("data-te-backdrop-show"),this._getElement().classList.add("opacity-0"),this._getElement().classList.remove("opacity-50"),this._emulateAnimation(()=>{this.dispose(),hi(t)})}_getElement(){if(!this._element){const t=document.createElement("div");t.className=this._config.className,this._config.isAnimated&&t.classList.add("opacity-50"),this._element=t}return this._element}_getConfig(t){return t={...Gb,...typeof t=="object"?t:{}},t.rootElement=Be(t.rootElement),L(_d,t,qb),t}_append(){this._isAppended||(this._config.rootElement.append(this._getElement()),_.on(this._getElement(),gd,()=>{hi(this._config.clickCallback)}),this._isAppended=!0)}dispose(){this._isAppended&&(_.off(this._element,gd),this._element.remove(),this._isAppended=!1)}_emulateAnimation(t){fh(t,this._getElement(),this._config.isAnimated)}}class Vs{constructor(t,e={},i){this._element=t,this._toggler=i,this._event=e.event||"blur",this._condition=e.condition||(()=>!0),this._selector=e.selector||'button, a, input, select, textarea, [tabindex]:not([tabindex="-1"])',this._onlyVisible=e.onlyVisible||!1,this._focusableElements=[],this._firstElement=null,this._lastElement=null,this.handler=n=>{this._condition(n)&&!n.shiftKey&&n.target===this._lastElement?(n.preventDefault(),this._firstElement.focus()):this._condition(n)&&n.shiftKey&&n.target===this._firstElement&&(n.preventDefault(),this._lastElement.focus())}}trap(){this._setElements(),this._init(),this._setFocusTrap()}disable(){this._focusableElements.forEach(t=>{t.removeEventListener(this._event,this.handler)}),this._toggler&&this._toggler.focus()}update(){this._setElements(),this._setFocusTrap()}_init(){const t=e=>{!this._firstElement||e.key!=="Tab"||this._focusableElements.includes(e.target)||(e.preventDefault(),this._firstElement.focus(),window.removeEventListener("keydown",t))};window.addEventListener("keydown",t)}_filterVisible(t){return t.filter(e=>{if(!ae(e))return!1;const i=m.parents(e,"*");for(let n=0;n<i.length;n++){const o=window.getComputedStyle(i[n]);if(o&&(o.display==="none"||o.visibility==="hidden"))return!1}return!0})}_setElements(){this._focusableElements=m.focusableChildren(this._element),this._onlyVisible&&(this._focusableElements=this._filterVisible(this._focusableElements)),this._firstElement=this._focusableElements[0],this._lastElement=this._focusableElements[this._focusableElements.length-1]}_setFocusTrap(){this._focusableElements.forEach((t,e)=>{e===this._focusableElements.length-1||e===0?t.addEventListener(this._event,this.handler):t.removeEventListener(this._event,this.handler)})}}let md=[];const yo=(s,t="hide")=>{const e=`click.dismiss${s.EVENT_KEY}`,i=s.NAME;md.includes(i)||(md.push(i),_.on(document,e,`[data-te-${i}-dismiss]`,function(n){if(["A","AREA"].includes(this.tagName)&&n.preventDefault(),ci(this))return;const o=Ne(this)||this.closest(`.${i}`)||this.closest(`[data-te-${i}-init]`);if(!o)return;s.getOrCreateInstance(o)[t]()}))},bd="offcanvas",Ji=".te.offcanvas",Zb=`load${Ji}.data-api`,Qb="Escape",vd={backdrop:!0,keyboard:!0,scroll:!1},Jb={backdrop:"boolean",keyboard:"boolean",scroll:"boolean"},yd="show",tv="[data-te-offcanvas-init][data-te-offcanvas-show]",ev=`show${Ji}`,iv=`shown${Ji}`,sv=`hide${Ji}`,nv=`hidden${Ji}`,ov=`keydown.dismiss${Ji}`;class ts extends Mt{constructor(t,e){super(t),this._config=this._getConfig(e),this._isShown=!1,this._backdrop=this._initializeBackDrop(),this._focustrap=this._initializeFocusTrap(),this._addEventListeners(),this._didInit=!1,this._init()}static get NAME(){return bd}static get Default(){return vd}toggle(t){return this._isShown?this.hide():this.show(t)}show(t){if(this._isShown||_.trigger(this._element,ev,{relatedTarget:t}).defaultPrevented)return;this._isShown=!0,this._element.style.visibility="visible",this._backdrop.show(),this._config.scroll||new Qi().hide(),this._element.removeAttribute("aria-hidden"),this._element.setAttribute("aria-modal",!0),this._element.setAttribute("role","dialog"),this._element.setAttribute(`data-te-offcanvas-${yd}`,"");const i=()=>{this._config.scroll||this._focustrap.trap(),_.trigger(this._element,iv,{relatedTarget:t})};this._queueCallback(i,this._element,!0)}hide(){if(!this._isShown||_.trigger(this._element,sv).defaultPrevented)return;this._focustrap.disable(),this._element.blur(),this._isShown=!1,this._element.removeAttribute(`data-te-offcanvas-${yd}`),this._backdrop.hide();const e=()=>{this._element.setAttribute("aria-hidden",!0),this._element.removeAttribute("aria-modal"),this._element.removeAttribute("role"),this._element.style.visibility="hidden",this._config.scroll||new Qi().reset(),_.trigger(this._element,nv)};this._queueCallback(e,this._element,!0)}dispose(){this._backdrop.dispose(),this._focustrap.disable(),super.dispose()}_init(){this._didInit||(_.on(window,Zb,()=>m.find(tv).forEach(t=>ts.getOrCreateInstance(t).show())),this._didInit=!0,yo(ts))}_getConfig(t){return t={...vd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(bd,t,Jb),t}_initializeBackDrop(){return new Qa({isVisible:this._config.backdrop,isAnimated:!0,rootElement:this._element.parentNode,clickCallback:()=>this.hide()})}_initializeFocusTrap(){return new Vs(this._element,{event:"keydown",condition:t=>t.key==="Tab"})}_addEventListeners(){_.on(this._element,ov,t=>{this._config.keyboard&&t.key===Qb&&this.hide()})}static jQueryInterface(t){return this.each(function(){const e=ts.getOrCreateInstance(this,t);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Ja="alert",Td=".te.alert",rv=`close${Td}`,av=`closed${Td}`,Fs="data-te-alert-show",lv={animation:"boolean",autohide:"boolean",autoclose:"boolean",delay:"number"},Ed={animation:!0,autohide:!0,autoclose:!1,delay:1e3},cv={fadeIn:"animate-[fade-in_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none",fadeOut:"animate-[fade-out_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none"},hv={fadeIn:"string",fadeOut:"string"};class Ws extends Mt{constructor(t,e,i){super(t),this._element=t,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._didInit=!1,this._init()}static get DefaultType(){return lv}static get Default(){return Ed}static get NAME(){return Ja}close(){if(_.trigger(this._element,rv).defaultPrevented)return;let e=0;this._config.animation&&(e=300,g.addClass(this._element,this._classes.fadeOut)),this._element.removeAttribute(Fs),setTimeout(()=>{this._queueCallback(()=>this._destroyElement(),this._element,this._config.animation)},e)}show(){if(this._element){if(this._config.autohide&&this._setupAutohide(),(this._config.autoclose||this._config.autoclose&&this._config.autohide)&&this._setupAutoclose(),!this._element.hasAttribute(Fs)&&(g.removeClass(this._element,"hidden"),g.addClass(this._element,"block"),ae(this._element))){const t=e=>{g.removeClass(this._element,"hidden"),g.addClass(this._element,"block"),_.off(e.target,"animationend",t)};this._element.setAttribute(Fs,""),_.on(this._element,"animationend",t)}this._config.animation&&(g.removeClass(this._element,this._classes.fadeOut),g.addClass(this._element,this._classes.fadeIn))}}hide(){if(this._element&&this._element.hasAttribute(Fs)){this._element.removeAttribute(Fs);const t=e=>{g.addClass(this._element,"hidden"),g.removeClass(this._element,"block"),this._timeout!==null&&(clearTimeout(this._timeout),this._timeout=null),_.off(e.target,"animationend",t)};_.on(this._element,"animationend",t),g.removeClass(this._element,this._classes.fadeIn),g.addClass(this._element,this._classes.fadeOut)}}_init(){this._didInit||(yo(Ws,"close"),this._didInit=!0)}_getConfig(t){return t={...Ed,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(Ja,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cv,...e,...t},L(Ja,t,hv),t}_setupAutohide(){this._timeout=setTimeout(()=>{this.hide()},this._config.delay)}_setupAutoclose(){this._timeout=setTimeout(()=>{this.close()},this._config.delay)}_destroyElement(){this._element.remove(),_.trigger(this._element,av),this.dispose()}static jQueryInterface(t){return this.each(function(){const e=Ws.getOrCreateInstance(this);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const tl="carousel",Nt=".te.carousel",xd=".data-api",dv="ArrowLeft",uv="ArrowRight",pv=500,fv=40,Cd={interval:5e3,keyboard:!0,ride:!1,pause:"hover",wrap:!0,touch:!0},_v={interval:"(number|boolean)",keyboard:"boolean",ride:"(boolean|string)",pause:"(string|boolean)",wrap:"boolean",touch:"boolean"},gv={pointer:"touch-pan-y",block:"!block",visible:"data-[te-carousel-fade]:opacity-100 data-[te-carousel-fade]:z-[1]",invisible:"data-[te-carousel-fade]:z-0 data-[te-carousel-fade]:opacity-0 data-[te-carousel-fade]:duration-[600ms] data-[te-carousel-fade]:delay-600",slideRight:"translate-x-full",slideLeft:"-translate-x-full"},mv={pointer:"string",block:"string",visible:"string",invisible:"string",slideRight:"string",slideLeft:"string"},gi="next",mi="prev",bi="left",zs="right",bv={[dv]:zs,[uv]:bi},vv=`slide${Nt}`,el=`slid${Nt}`,yv=`keydown${Nt}`,Tv=`mouseenter${Nt}`,Ev=`mouseleave${Nt}`,xv=`touchstart${Nt}`,Cv=`touchmove${Nt}`,Av=`touchend${Nt}`,wv=`pointerdown${Nt}`,kv=`pointerup${Nt}`,Sv=`dragstart${Nt}`,Ov=`load${Nt}${xd}`,Iv=`click${Nt}${xd}`,Ad="data-te-carousel-init",vi="data-te-carousel-active",Dv="data-te-carousel-item-end",il="data-te-carousel-item-start",Mv="data-te-carousel-item-next",Lv="data-te-carousel-item-prev",$v="data-te-carousel-pointer-event",Rv="[data-te-carousel-init]",wd="[data-te-carousel-active]",sl="[data-te-carousel-item]",es=`${wd}${sl}`,Pv=`${sl} img`,Nv="[data-te-carousel-item-next], [data-te-carousel-item-prev]",Bv="[data-te-carousel-indicators]",Hv="[data-te-target]",Vv="[data-te-slide], [data-te-slide-to]",Fv="touch",Wv="pen";class he extends Mt{constructor(t,e,i){super(t),this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.touchStartX=0,this.touchDeltaX=0,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._indicatorsElement=m.findOne(Bv,this._element),this._touchSupported="ontouchstart"in document.documentElement||navigator.maxTouchPoints>0,this._pointerEvent=!!window.PointerEvent,this._setActiveElementClass(),this._addEventListeners(),this._didInit=!1,this._init(),this._config.ride==="carousel"&&this.cycle()}static get Default(){return Cd}static get NAME(){return tl}next(){this._slide(gi)}nextWhenVisible(){!document.hidden&&ae(this._element)&&this.next()}prev(){this._slide(mi)}pause(t){t||(this._isPaused=!0),m.findOne(Nv,this._element)&&(hh(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null}cycle(t){t||(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config&&this._config.interval&&!this._isPaused&&(this._updateInterval(),this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))}to(t){this._activeElement=m.findOne(es,this._element);const e=this._getItemIndex(this._activeElement);if(t>this._items.length-1||t<0)return;if(this._isSliding){_.one(this._element,el,()=>this.to(t));return}if(e===t){this.pause(),this.cycle();return}const i=t>e?gi:mi;this._slide(i,this._items[t])}_init(){this._didInit||(_.on(document,Iv,Vv,he.dataApiClickHandler),_.on(window,Ov,()=>{const t=m.find(Rv);for(let e=0,i=t.length;e<i;e++)he.carouselInterface(t[e],he.getInstance(t[e]))}),this._didInit=!0)}_getConfig(t){return t={...Cd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(tl,t,_v),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...gv,...e,...t},L(tl,t,mv),t}_enableCycle(){if(this._config.ride){if(this._isSliding){_.one(this._element,el,()=>this.cycle());return}this.cycle()}}_applyInitialClasses(){const t=m.findOne(es,this._element);t.classList.add(this._classes.block,...this._classes.visible.split(" ")),this._setActiveIndicatorElement(t)}_handleSwipe(){const t=Math.abs(this.touchDeltaX);if(t<=fv)return;const e=t/this.touchDeltaX;this.touchDeltaX=0,e&&this._slide(e>0?zs:bi)}_setActiveElementClass(){this._activeElement=m.findOne(es,this._element),g.addClass(this._activeElement,"hidden")}_addEventListeners(){this._config.keyboard&&_.on(this._element,yv,t=>this._keydown(t)),this._config.pause==="hover"&&(_.on(this._element,Tv,t=>this.pause(t)),_.on(this._element,Ev,t=>this._enableCycle(t))),this._config.touch&&this._touchSupported&&this._addTouchEventListeners(),this._applyInitialClasses()}_addTouchEventListeners(){const t=o=>this._pointerEvent&&(o.pointerType===Wv||o.pointerType===Fv),e=o=>{t(o)?this.touchStartX=o.clientX:this._pointerEvent||(this.touchStartX=o.touches[0].clientX)},i=o=>{this.touchDeltaX=o.touches&&o.touches.length>1?0:o.touches[0].clientX-this.touchStartX},n=o=>{t(o)&&(this.touchDeltaX=o.clientX-this.touchStartX),this._handleSwipe(),this._config.pause==="hover"&&(this.pause(),this.touchTimeout&&clearTimeout(this.touchTimeout),this.touchTimeout=setTimeout(r=>this._enableCycle(r),pv+this._config.interval))};m.find(Pv,this._element).forEach(o=>{_.on(o,Sv,r=>r.preventDefault())}),this._pointerEvent?(_.on(this._element,wv,o=>e(o)),_.on(this._element,kv,o=>n(o)),this._element.classList.add(this._classes.pointer),this._element.setAttribute(`${$v}`,"")):(_.on(this._element,xv,o=>e(o)),_.on(this._element,Cv,o=>i(o)),_.on(this._element,Av,o=>n(o)))}_keydown(t){if(/input|textarea/i.test(t.target.tagName))return;const e=bv[t.key];e&&(t.preventDefault(),this._slide(e))}_getItemIndex(t){return this._items=t&&t.parentNode?m.find(sl,t.parentNode):[],this._items.indexOf(t)}_getItemByOrder(t,e){const i=t===gi;return _h(this._items,e,i,this._config.wrap)}_triggerSlideEvent(t,e){const i=this._getItemIndex(t),n=this._getItemIndex(m.findOne(es,this._element));return _.trigger(this._element,vv,{relatedTarget:t,direction:e,from:n,to:i})}_setActiveIndicatorElement(t){if(this._indicatorsElement){const e=m.findOne(wd,this._indicatorsElement);e.removeAttribute(vi),e.removeAttribute("aria-current"),e.classList.remove("!opacity-100");const i=m.find(Hv,this._indicatorsElement);for(let n=0;n<i.length;n++)if(Number.parseInt(i[n].getAttribute("data-te-slide-to"),10)===this._getItemIndex(t)){i[n].setAttribute(`${vi}`,""),i[n].setAttribute("aria-current","true"),i[n].classList.add("!opacity-100");break}}}_updateInterval(){const t=this._activeElement||m.findOne(es,this._element);if(!t)return;const e=Number.parseInt(t.getAttribute("data-te-interval"),10);e?(this._config.defaultInterval=this._config.defaultInterval||this._config.interval,this._config.interval=e):this._config.interval=this._config.defaultInterval||this._config.interval}_slide(t,e){const i=this._directionToOrder(t),n=m.findOne(es,this._element),o=this._getItemIndex(n),r=e||this._getItemByOrder(i,n),a=this._getItemIndex(r),l=!!this._interval,c=i===gi,h=c?il:Dv,d=c?Mv:Lv,u=this._orderToDirection(i),p=h===il?this._classes.slideLeft:this._classes.slideRight,f=h!==il?this._classes.slideLeft:this._classes.slideRight;if(r&&r.hasAttribute(vi)){this._isSliding=!1;return}if(this._isSliding||this._triggerSlideEvent(r,u).defaultPrevented||!n||!r)return;this._isSliding=!0,l&&this.pause(),this._setActiveIndicatorElement(r),this._activeElement=r;const v=()=>{_.trigger(this._element,el,{relatedTarget:r,direction:u,from:o,to:a})};if(this._element.hasAttribute(Ad)){r.setAttribute(`${d}`,""),r.classList.add(this._classes.block,f),zi(r),n.setAttribute(`${h}`,""),n.classList.add(p,...this._classes.invisible.split(" ")),n.classList.remove(...this._classes.visible.split(" ")),r.setAttribute(`${h}`,""),r.classList.add(...this._classes.visible.split(" ")),r.classList.remove(this._classes.slideRight,this._classes.slideLeft);const y=()=>{r.removeAttribute(h),r.removeAttribute(d),r.setAttribute(`${vi}`,""),n.removeAttribute(vi),n.classList.remove(p,...this._classes.invisible.split(" "),this._classes.block),n.removeAttribute(d),n.removeAttribute(h),this._isSliding=!1,setTimeout(v,0)};this._queueCallback(y,n,!0)}else n.removeAttribute(vi),n.classList.remove(this._classes.block),r.setAttribute(`${vi}`,""),r.classList.add(this._classes.block),this._isSliding=!1,v();l&&this.cycle()}_directionToOrder(t){return[zs,bi].includes(t)?et()?t===bi?mi:gi:t===bi?gi:mi:t}_orderToDirection(t){return[gi,mi].includes(t)?et()?t===mi?bi:zs:t===mi?zs:bi:t}static carouselInterface(t,e){const i=he.getOrCreateInstance(t,e);let{_config:n}=i;typeof e=="object"&&(n={...n,...e});const o=typeof e=="string"?e:e.slide;if(typeof e=="number"){i.to(e);return}if(typeof o=="string"){if(typeof i[o]>"u")throw new TypeError(`No method named "${o}"`);i[o]()}else n.interval&&n.ride===!0&&i.pause()}static jQueryInterface(t){return this.each(function(){he.carouselInterface(this,t)})}static dataApiClickHandler(t){const e=Ne(this);if(!e||!e.hasAttribute(Ad))return;const i={...g.getDataAttributes(e),...g.getDataAttributes(this)},n=this.getAttribute("data-te-slide-to");n&&(i.interval=!1),he.carouselInterface(e,i),n&&he.getInstance(e).to(n),t.preventDefault()}}const nl="modal",te=".te.modal",kd="Escape",Sd={backdrop:!0,keyboard:!0,focus:!0,modalNonInvasive:!1},zv={backdrop:"(boolean|string)",keyboard:"boolean",focus:"boolean",modalNonInvasive:"boolean"},jv={show:"transform-none",static:"scale-[1.02]",staticProperties:"transition-scale duration-300 ease-in-out",backdrop:"opacity-50 transition-all duration-300 ease-in-out fixed top-0 left-0 z-[1040] bg-black w-screen h-screen"},Yv={show:"string",static:"string",staticProperties:"string",backdrop:"string"},Kv=`hide${te}`,Uv=`hidePrevented${te}`,Xv=`hidden${te}`,Gv=`show${te}`,qv=`shown${te}`,Od=`resize${te}`,Id=`click.dismiss${te}`,Dd=`keydown.dismiss${te}`,Zv=`mouseup.dismiss${te}`,Md=`mousedown.dismiss${te}`,Ld="data-te-modal-open",$d="data-te-open",js="[data-te-modal-dialog-ref]",Qv="[data-te-modal-body-ref]";class Ys extends Mt{constructor(t,e,i){super(t),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._dialog=m.findOne(js,this._element),this._backdrop=this._config.modalNonInvasive?null:this._initializeBackDrop(),this._focustrap=this._initializeFocusTrap(),this._isShown=!1,this._ignoreBackdropClick=!1,this._isTransitioning=!1,this._scrollBar=new Qi,this._didInit=!1,this._init()}static get Default(){return Sd}static get NAME(){return nl}toggle(t){return this._isShown?this.hide():this.show(t)}show(t){this._isShown||this._isTransitioning||_.trigger(this._element,Gv,{relatedTarget:t}).defaultPrevented||(this._isShown=!0,this._isAnimated()&&(this._isTransitioning=!0),!this._config.modalNonInvasive&&this._scrollBar.hide(),document.body.setAttribute(Ld,"true"),this._adjustDialog(),this._setEscapeEvent(),this._setResizeEvent(),_.on(this._dialog,Md,()=>{_.one(this._element,Zv,i=>{i.target===this._element&&(this._ignoreBackdropClick=!0)})}),this._showElement(t),!this._config.modalNonInvasive&&this._showBackdrop())}hide(){if(!this._isShown||this._isTransitioning||_.trigger(this._element,Kv).defaultPrevented)return;this._isShown=!1;const e=this._isAnimated();e&&(this._isTransitioning=!0),this._setEscapeEvent(),this._setResizeEvent(),this._focustrap.disable(),m.findOne(js,this._element).classList.remove(this._classes.show),_.off(this._element,Id),_.off(this._dialog,Md),this._queueCallback(()=>this._hideModal(),this._element,e),this._element.removeAttribute($d)}dispose(){[window,document,this._dialog].forEach(t=>_.off(t,te)),this._backdrop&&this._backdrop.dispose(),this._focustrap.disable(),super.dispose()}handleUpdate(){this._adjustDialog()}_init(){this._didInit||(yo(Ys),this._didInit=!0)}_initializeBackDrop(){return new Qa({isVisible:!!this._config.backdrop,isAnimated:this._isAnimated(),backdropClasses:this._classes.backdrop})}_initializeFocusTrap(){return new Vs(this._element,{event:"keydown",condition:t=>t.key==="Tab"})}_getConfig(t){return t={...Sd,...g.getDataAttributes(this._element),...typeof t=="object"?t:{}},L(nl,t,zv),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...jv,...e,...t},L(nl,t,Yv),t}_showElement(t){const e=this._isAnimated(),i=m.findOne(Qv,this._dialog);(!this._element.parentNode||this._element.parentNode.nodeType!==Node.ELEMENT_NODE)&&document.body.append(this._element),this._element.style.display="block",this._element.classList.remove("hidden"),this._element.removeAttribute("aria-hidden"),this._element.setAttribute("aria-modal",!0),this._element.setAttribute("role","dialog"),this._element.setAttribute(`${$d}`,"true"),this._element.scrollTop=0;const n=m.findOne(js,this._element);n.classList.add(this._classes.show),n.classList.remove("opacity-0"),n.classList.add("opacity-100"),i&&(i.scrollTop=0),e&&zi(this._element);const o=()=>{this._config.focus&&this._focustrap.trap(),this._isTransitioning=!1,_.trigger(this._element,qv,{relatedTarget:t})};this._queueCallback(o,this._dialog,e)}_setEscapeEvent(){this._isShown?_.on(document,Dd,t=>{this._config.keyboard&&t.key===kd?(t.preventDefault(),this.hide()):!this._config.keyboard&&t.key===kd&&this._triggerBackdropTransition()}):_.off(this._element,Dd)}_setResizeEvent(){this._isShown?_.on(window,Od,()=>this._adjustDialog()):_.off(window,Od)}_hideModal(){const t=m.findOne(js,this._element);t.classList.remove(this._classes.show),t.classList.remove("opacity-100"),t.classList.add("opacity-0");const e=oo(t);setTimeout(()=>{this._element.style.display="none"},e),this._element.setAttribute("aria-hidden",!0),this._element.removeAttribute("aria-modal"),this._element.removeAttribute("role"),this._isTransitioning=!1,this._backdrop&&this._backdrop.hide(()=>{document.body.removeAttribute(Ld),this._resetAdjustments(),!this._config.modalNonInvasive&&this._scrollBar.reset(),_.trigger(this._element,Xv)})}_showBackdrop(t){_.on(this._element,Id,e=>{if(this._ignoreBackdropClick){this._ignoreBackdropClick=!1;return}e.target===e.currentTarget&&(this._config.backdrop===!0?this.hide():this._config.backdrop==="static"&&this._triggerBackdropTransition())}),this._backdrop&&this._backdrop.show(t)}_isAnimated(){return!!m.findOne(js,this._element)}_triggerBackdropTransition(){if(_.trigger(this._element,Uv).defaultPrevented)return;const{classList:e,scrollHeight:i,style:n}=this._element,o=i>document.documentElement.clientHeight;if(!o&&n.overflowY==="hidden"||e.contains(this._classes.static))return;o||(n.overflowY="hidden"),e.add(...this._classes.static.split(" ")),e.add(...this._classes.staticProperties.split(" "));const r=oo(this._element);this._queueCallback(()=>{e.remove(this._classes.static),setTimeout(()=>{e.remove(...this._classes.staticProperties.split(" "))},r),o||this._queueCallback(()=>{n.overflowY=""},this._dialog)},this._dialog),this._element.focus()}_adjustDialog(){const t=this._element.scrollHeight>document.documentElement.clientHeight,e=this._scrollBar.getWidth(),i=e>0;(!i&&t&&!et()||i&&!t&&et())&&(this._element.style.paddingLeft=`${e}px`),(i&&!t&&!et()||!i&&t&&et())&&(this._element.style.paddingRight=`${e}px`)}_resetAdjustments(){this._element.style.paddingLeft="",this._element.style.paddingRight=""}static jQueryInterface(t,e){return this.each(function(){const i=Ys.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}}const Jv=new Set(["background","cite","href","itemtype","longdesc","poster","src","xlink:href"]),Rd=/^aria-[\w-]*$/i,t0=/^data-te-[\w-]*$/i,e0=/^(?:(?:https?|mailto|ftp|tel|file|sms):|[^#&/:?]*(?:[#/?]|$))/i,i0=/^data:(?:image\/(?:bmp|gif|jpeg|jpg|png|tiff|webp)|video\/(?:mpeg|mp4|ogg|webm)|audio\/(?:mp3|oga|ogg|opus));base64,[\d+/a-z]+=*$/i,s0=(s,t)=>{const e=s.nodeName.toLowerCase();if(t.includes(e))return Jv.has(e)?!!(e0.test(s.nodeValue)||i0.test(s.nodeValue)):!0;const i=t.filter(n=>n instanceof RegExp);for(let n=0,o=i.length;n<o;n++)if(i[n].test(e))return!0;return!1},Pd={"*":["class","dir","id","lang","role",Rd,t0],a:["target","href","title","rel"],area:[],b:[],br:[],col:[],code:[],div:[],em:[],hr:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],i:[],img:["src","srcset","alt","title","width","height"],li:[],ol:[],p:[],pre:[],s:[],small:[],span:[],sub:[],sup:[],strong:[],u:[],ul:[]},n0={"*":["class","dir","id","lang","role",Rd],a:["target","href","title","rel"],area:[],b:[],br:[],col:[],code:[],div:[],em:[],hr:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],i:[],img:["src","srcset","alt","title","width","height"],li:[],ol:[],p:[],pre:[],s:[],small:[],span:[],sub:[],sup:[],strong:[],u:[],ul:[]};function To(s,t,e){if(!s.length)return s;if(e&&typeof e=="function")return e(s);const n=new window.DOMParser().parseFromString(s,"text/html"),o=[].concat(...n.body.querySelectorAll("*"));for(let r=0,a=o.length;r<a;r++){const l=o[r],c=l.nodeName.toLowerCase();if(!Object.keys(t).includes(c)){l.remove();continue}const h=[].concat(...l.attributes),d=[].concat(t["*"]||[],t[c]||[]);h.forEach(u=>{s0(u,d)||l.removeAttribute(u.nodeName)})}return n.body.innerHTML}const Nd="tooltip",de=".te.tooltip",o0="te-tooltip",r0=new Set(["sanitize","allowList","sanitizeFn"]),a0={animation:"boolean",template:"string",title:"(string|element|function)",trigger:"string",delay:"(number|object)",html:"boolean",selector:"(string|boolean)",placement:"(string|function)",offset:"(array|string|function)",container:"(string|element|boolean)",fallbackPlacements:"array",boundary:"(string|element)",customClass:"(string|function)",sanitize:"boolean",sanitizeFn:"(null|function)",allowList:"object",popperConfig:"(null|object|function)"},l0={AUTO:"auto",TOP:"top",RIGHT:et()?"left":"right",BOTTOM:"bottom",LEFT:et()?"right":"left"},c0={animation:!0,template:'<div class="opacity-0 transition-opacity duration-300 ease-in-out absolute z-[1080] block m-0 text-sm not-italic font-normal text-left no-underline underline-offset-auto normal-case leading-6 tracking-normal break-normal whitespace-normal" role="tooltip"><div data-te-tooltip-inner-ref class="tooltip-inner max-w-[200px] text-sm py-1.5 px-4 text-white text-center bg-[#6d6d6d] rounded"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,selector:!1,placement:"top",offset:[0,0],container:!1,fallbackPlacements:["top","right","bottom","left"],boundary:"clippingParents",customClass:"",sanitize:!0,sanitizeFn:null,allowList:n0,popperConfig:{hide:!0}},h0={HIDE:`hide${de}`,HIDDEN:`hidden${de}`,SHOW:`show${de}`,SHOWN:`shown${de}`,INSERTED:`inserted${de}`,CLICK:`click${de}`,FOCUSIN:`focusin${de}`,FOCUSOUT:`focusout${de}`,MOUSEENTER:`mouseenter${de}`,MOUSELEAVE:`mouseleave${de}`},d0="fade",u0="modal",ol="show",Ks="show",rl="out",Bd=".tooltip-inner",Hd=`.${u0}`,Vd="hide.te.modal",Us="hover",al="focus",p0="click",f0="manual";let is=class rm extends Mt{constructor(t,e){if(typeof sd>"u")throw new TypeError("Bootstrap's tooltips require Popper (https://popper.js.org)");super(t),this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._popper=null,this._config=this._getConfig(e),this.tip=null,this._setListeners()}static get Default(){return c0}static get NAME(){return Nd}static get Event(){return h0}static get DefaultType(){return a0}enable(){this._isEnabled=!0}disable(){this._isEnabled=!1}toggleEnabled(){this._isEnabled=!this._isEnabled}toggle(t){if(this._isEnabled)if(t){const e=this._initializeOnDelegatedTarget(t);e._activeTrigger.click=!e._activeTrigger.click,e._isWithActiveTrigger()?e._enter(null,e):e._leave(null,e)}else{if(this.getTipElement().classList.contains(ol)){this._leave(null,this);return}this._enter(null,this)}}dispose(){clearTimeout(this._timeout),_.off(this._element.closest(Hd),Vd,this._hideModalHandler),this.tip&&this.tip.remove(),this._disposePopper(),super.dispose()}show(){if(this._element.style.display==="none")throw new Error("Please use show on visible elements");if(!(this.isWithContent()&&this._isEnabled))return;const t=_.trigger(this._element,this.constructor.Event.SHOW),e=dh(this._element),i=e===null?this._element.ownerDocument.documentElement.contains(this._element):e.contains(this._element);if(t.defaultPrevented||!i)return;this.constructor.NAME==="tooltip"&&this.tip&&this.getTitle()!==this.tip.querySelector(Bd).innerHTML&&(this._disposePopper(),this.tip.remove(),this.tip=null);const n=this.getTipElement(),o=bt(this.constructor.NAME);n.setAttribute("id",o),this._element.setAttribute("aria-describedby",o),this._config.animation&&setTimeout(()=>{this.tip.classList.add("opacity-100"),this.tip.classList.remove("opacity-0")},100);const r=typeof this._config.placement=="function"?this._config.placement.call(this,n,this._element):this._config.placement,a=this._getAttachment(r);this._addAttachmentClass(a);const{container:l}=this._config;if(O.setData(n,this.constructor.DATA_KEY,this),this._element.ownerDocument.documentElement.contains(this.tip)||(l.append(n),_.trigger(this._element,this.constructor.Event.INSERTED)),this._popper?this._popper.update():this._popper=Fe(this._element,n,this._getPopperConfig(a)),n.getAttribute("id").includes("tooltip"))switch(r){case"bottom":n.classList.add("py-[0.4rem]");break;case"left":n.classList.add("px-[0.4rem]");break;case"right":n.classList.add("px-[0.4rem]");break;default:n.classList.add("py-[0.4rem]");break}const h=this._resolvePossibleFunction(this._config.customClass);h&&n.classList.add(...h.split(" ")),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(p=>{_.on(p,"mouseover",ro)});const d=()=>{const p=this._hoverState;this._hoverState=null,_.trigger(this._element,this.constructor.Event.SHOWN),p===rl&&this._leave(null,this)},u=this.tip.classList.contains("transition-opacity");this._queueCallback(d,this.tip,u)}hide(){if(!this._popper)return;const t=this.getTipElement(),e=()=>{this._isWithActiveTrigger()||(this._hoverState!==Ks&&t.remove(),this._cleanTipClass(),this._element.removeAttribute("aria-describedby"),_.trigger(this._element,this.constructor.Event.HIDDEN),this._disposePopper())};if(_.trigger(this._element,this.constructor.Event.HIDE).defaultPrevented)return;t.classList.add("opacity-0"),t.classList.remove("opacity-100"),"ontouchstart"in document.documentElement&&[].concat(...document.body.children).forEach(o=>_.off(o,"mouseover",ro)),this._activeTrigger[p0]=!1,this._activeTrigger[al]=!1,this._activeTrigger[Us]=!1;const n=this.tip.classList.contains("opacity-0");this._queueCallback(e,this.tip,n),this._hoverState=""}update(){this._popper!==null&&this._popper.update()}isWithContent(){return!!this.getTitle()}getTipElement(){if(this.tip)return this.tip;const t=document.createElement("div");t.innerHTML=this._config.template;const e=t.children[0];return this.setContent(e),e.classList.remove(d0,ol),this.tip=e,this.tip}setContent(t){this._sanitizeAndSetContent(t,this.getTitle(),Bd)}_sanitizeAndSetContent(t,e,i){const n=m.findOne(i,t);if(!e&&n){n.remove();return}this.setElementContent(n,e)}setElementContent(t,e){if(t!==null){if(Wi(e)){e=Be(e),this._config.html?e.parentNode!==t&&(t.innerHTML="",t.append(e)):t.textContent=e.textContent;return}this._config.html?(this._config.sanitize&&(e=To(e,this._config.allowList,this._config.sanitizeFn)),t.innerHTML=e):t.textContent=e}}getTitle(){const t=this._element.getAttribute("data-te-original-title")||this._config.title;return this._resolvePossibleFunction(t)}updateAttachment(t){return t==="right"?"end":t==="left"?"start":t}_initializeOnDelegatedTarget(t,e){return e||this.constructor.getOrCreateInstance(t.delegateTarget,this._getDelegateConfig())}_getOffset(){const{offset:t}=this._config;return typeof t=="string"?t.split(",").map(e=>Number.parseInt(e,10)):typeof t=="function"?e=>t(e,this._element):t}_resolvePossibleFunction(t){return typeof t=="function"?t.call(this._element):t}_getPopperConfig(t){const e={placement:t,modifiers:[{name:"flip",options:{fallbackPlacements:this._config.fallbackPlacements}},{name:"offset",options:{offset:this._getOffset()}},{name:"preventOverflow",options:{boundary:this._config.boundary}},{name:"arrow",options:{element:`.${this.constructor.NAME}-arrow`}},{name:"onChange",enabled:!0,phase:"afterWrite",fn:i=>this._handlePopperPlacementChange(i)}],onFirstUpdate:i=>{i.options.placement!==i.placement&&this._handlePopperPlacementChange(i)}};return{...e,...typeof this._config.popperConfig=="function"?this._config.popperConfig(e):this._config.popperConfig}}_addAttachmentClass(t){this.getTipElement().classList.add(`${this._getBasicClassPrefix()}-${this.updateAttachment(t)}`)}_getAttachment(t){return l0[t.toUpperCase()]}_setListeners(){this._config.trigger.split(" ").forEach(e=>{if(e==="click")_.on(this._element,this.constructor.Event.CLICK,this._config.selector,i=>this.toggle(i));else if(e!==f0){const i=e===Us?this.constructor.Event.MOUSEENTER:this.constructor.Event.FOCUSIN,n=e===Us?this.constructor.Event.MOUSELEAVE:this.constructor.Event.FOCUSOUT;_.on(this._element,i,this._config.selector,o=>this._enter(o)),_.on(this._element,n,this._config.selector,o=>this._leave(o))}}),this._hideModalHandler=()=>{this._element&&this.hide()},_.on(this._element.closest(Hd),Vd,this._hideModalHandler),this._config.selector?this._config={...this._config,trigger:"manual",selector:""}:this._fixTitle()}_fixTitle(){const t=this._element.getAttribute("title"),e=typeof this._element.getAttribute("data-te-original-title");(t||e!=="string")&&(this._element.setAttribute("data-te-original-title",t||""),t&&!this._element.getAttribute("aria-label")&&!this._element.textContent&&this._element.setAttribute("aria-label",t),this._element.setAttribute("title",""))}_enter(t,e){if(e=this._initializeOnDelegatedTarget(t,e),t&&(e._activeTrigger[t.type==="focusin"?al:Us]=!0),e.getTipElement().classList.contains(ol)||e._hoverState===Ks){e._hoverState=Ks;return}if(clearTimeout(e._timeout),e._hoverState=Ks,!e._config.delay||!e._config.delay.show){e.show();return}e._timeout=setTimeout(()=>{e._hoverState===Ks&&e.show()},e._config.delay.show)}_leave(t,e){if(e=this._initializeOnDelegatedTarget(t,e),t&&(e._activeTrigger[t.type==="focusout"?al:Us]=e._element.contains(t.relatedTarget)),!e._isWithActiveTrigger()){if(clearTimeout(e._timeout),e._hoverState=rl,!e._config.delay||!e._config.delay.hide){e.hide();return}e._timeout=setTimeout(()=>{e._hoverState===rl&&e.hide()},e._config.delay.hide)}}_isWithActiveTrigger(){for(const t in this._activeTrigger)if(this._activeTrigger[t])return!0;return!1}_getConfig(t){const e=g.getDataAttributes(this._element);return Object.keys(e).forEach(i=>{r0.has(i)&&delete e[i]}),t={...this.constructor.Default,...e,...typeof t=="object"&&t?t:{}},t.container=t.container===!1?document.body:Be(t.container),typeof t.delay=="number"&&(t.delay={show:t.delay,hide:t.delay}),typeof t.title=="number"&&(t.title=t.title.toString()),typeof t.content=="number"&&(t.content=t.content.toString()),L(Nd,t,this.constructor.DefaultType),t.sanitize&&(t.template=To(t.template,t.allowList,t.sanitizeFn)),t}_getDelegateConfig(){const t={};for(const e in this._config)this.constructor.Default[e]!==this._config[e]&&(t[e]=this._config[e]);return t}_cleanTipClass(){const t=this.getTipElement(),e=new RegExp(`(^|\\s)${this._getBasicClassPrefix()}\\S+`,"g"),i=t.getAttribute("class").match(e);i!==null&&i.length>0&&i.map(n=>n.trim()).forEach(n=>t.classList.remove(n))}_getBasicClassPrefix(){return o0}_handlePopperPlacementChange(t){const{state:e}=t;e&&(this.tip=e.elements.popper,this._cleanTipClass(),this._addAttachmentClass(this._getAttachment(e.placement)))}_disposePopper(){this._popper&&(this._popper.destroy(),this._popper=null)}static jQueryInterface(t){return this.each(function(){const e=rm.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}};const _0="popover",ue=".te.popover",g0="te-popover",m0={...is.Default,placement:"right",offset:[0,8],trigger:"click",content:"",template:'<div class="opacity-0 transition-opacity duration-150 ease-in-out absolute top-0 left-0 z-[1070] block max-w-[267px] break-words bg-white bg-clip-padding border border-neutral-100 rounded-lg shadow-[0_0px_3px_0_rgba(0,0,0,0.07),0_2px_2px_0_rgba(0,0,0,0.04)] text-sm not-italic font-normal text-left no-underline underline-offset-auto normal-case leading-6 tracking-normal break-normal whitespace-normal dark:bg-neutral-700 dark:border-0 dark:text-white data-[popper-reference-hidden]:hidden" role="tooltip"><h3 class="popover-header py-2 px-4 mb-0 border-b-2 border-neutral-100 rounded-t-lg font-medium empty:hidden dark:border-neutral-500"></h3><div class="popover-body p-4 text-[#212529] dark:text-white"></div></div>'},b0={...is.DefaultType,content:"(string|element|function)"},v0={HIDE:`hide${ue}`,HIDDEN:`hidden${ue}`,SHOW:`show${ue}`,SHOWN:`shown${ue}`,INSERTED:`inserted${ue}`,CLICK:`click${ue}`,FOCUSIN:`focusin${ue}`,FOCUSOUT:`focusout${ue}`,MOUSEENTER:`mouseenter${ue}`,MOUSELEAVE:`mouseleave${ue}`},y0=".popover-header",T0=".popover-body";class Eo extends is{static get Default(){return m0}static get NAME(){return _0}static get Event(){return v0}static get DefaultType(){return b0}isWithContent(){return this.getTitle()||this._getContent()}setContent(t){this._sanitizeAndSetContent(t,this.getTitle(),y0),this._sanitizeAndSetContent(t,this._getContent(),T0)}_getContent(){return this._resolvePossibleFunction(this._config.content)}_getBasicClassPrefix(){return g0}static jQueryInterface(t){return this.each(function(){const e=Eo.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const ll="scrollspy",cl=".te.scrollspy",Fd={offset:10,method:"auto",target:""},E0={offset:"number",method:"string",target:"(string|element)"},x0={active:"!text-primary dark:!text-primary-400 font-semibold border-l-[0.125rem] border-solid border-primary dark:border-primary-400"},C0={active:"string"},A0=`activate${cl}`,w0=`scroll${cl}`,hl="data-te-nav-link-active",Wd="[data-te-dropdown-item-ref]",k0="[data-te-nav-list-ref]",dl="[data-te-nav-link-ref]",S0="[data-te-nav-item-ref]",zd="[data-te-list-group-item-ref]",ul=`${dl}, ${zd}, ${Wd}`,O0="[data-te-dropdown-ref]",I0="[data-te-dropdown-toggle-ref]",D0="maxOffset",jd="position";class xo extends Mt{constructor(t,e,i){super(t),this._scrollElement=this._element.tagName==="BODY"?window:this._element,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._offsets=[],this._targets=[],this._activeTarget=null,this._scrollHeight=0,_.on(this._scrollElement,w0,()=>this._process()),this.refresh(),this._process()}static get Default(){return Fd}static get NAME(){return ll}refresh(){const t=this._scrollElement===this._scrollElement.window?D0:jd,e=this._config.method==="auto"?t:this._config.method,i=e===jd?this._getScrollTop():0;this._offsets=[],this._targets=[],this._scrollHeight=this._getScrollHeight(),m.find(ul,this._config.target).map(o=>{const r=Ca(o),a=r?m.findOne(r):null;if(a){const l=a.getBoundingClientRect();if(l.width||l.height)return[g[e](a).top+i,r]}return null}).filter(o=>o).sort((o,r)=>o[0]-r[0]).forEach(o=>{this._offsets.push(o[0]),this._targets.push(o[1])})}dispose(){_.off(this._scrollElement,cl),super.dispose()}_getConfig(t){return t={...Fd,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},t.target=Be(t.target)||document.documentElement,L(ll,t,E0),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...x0,...e,...t},L(ll,t,C0),t}_getScrollTop(){return this._scrollElement===window?this._scrollElement.pageYOffset:this._scrollElement.scrollTop}_getScrollHeight(){return this._scrollElement.scrollHeight||Math.max(document.body.scrollHeight,document.documentElement.scrollHeight)}_getOffsetHeight(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height}_process(){const t=this._getScrollTop()+this._config.offset,e=this._getScrollHeight(),i=this._config.offset+e-this._getOffsetHeight();if(this._scrollHeight!==e&&this.refresh(),t>=i){const n=this._targets[this._targets.length-1];this._activeTarget!==n&&this._activate(n);return}if(this._activeTarget&&t<this._offsets[0]&&this._offsets[0]>0){this._activeTarget=null,this._clear();return}for(let n=this._offsets.length;n--;)this._activeTarget!==this._targets[n]&&t>=this._offsets[n]&&(typeof this._offsets[n+1]>"u"||t<this._offsets[n+1])&&this._activate(this._targets[n])}_activate(t){this._activeTarget=t,this._clear();const e=ul.split(",").map(n=>`${n}[data-te-target="${t}"],${n}[href="${t}"]`),i=m.findOne(e.join(","),this._config.target);i.classList.add(...this._classes.active.split(" ")),i.setAttribute(hl,""),i.getAttribute(Wd)?m.findOne(I0,i.closest(O0)).classList.add(...this._classes.active.split(" ")):m.parents(i,k0).forEach(n=>{m.prev(n,`${dl}, ${zd}`).forEach(o=>{o.classList.add(...this._classes.active.split(" ")),o.setAttribute(hl,"")}),m.prev(n,S0).forEach(o=>{m.children(o,dl).forEach(r=>r.classList.add(...this._classes.active.split(" ")))})}),_.trigger(this._scrollElement,A0,{relatedTarget:t})}_clear(){m.find(ul,this._config.target).filter(t=>t.classList.contains(...this._classes.active.split(" "))).forEach(t=>{t.classList.remove(...this._classes.active.split(" ")),t.removeAttribute(hl)})}static jQueryInterface(t){return this.each(function(){const e=xo.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const Yd="tab",Co=".te.tab",M0=`hide${Co}`,L0=`hidden${Co}`,$0=`show${Co}`,R0=`shown${Co}`,P0="data-te-dropdown-menu-ref",ss="data-te-tab-active",Ao="data-te-nav-active",N0="[data-te-dropdown-ref]",B0="[data-te-nav-ref]",Kd=`[${ss}]`,H0=`[${Ao}]`,Ud=":scope > li > .active",V0="[data-te-dropdown-toggle-ref]",F0=":scope > [data-te-dropdown-menu-ref] [data-te-dropdown-show]",W0={show:"opacity-100",hide:"opacity-0"},z0={show:"string",hide:"string"};class wo extends Mt{constructor(t,e){super(t),this._classes=this._getClasses(e)}static get NAME(){return Yd}show(){if(this._element.parentNode&&this._element.parentNode.nodeType===Node.ELEMENT_NODE&&this._element.getAttribute(Ao)==="")return;let t;const e=Ne(this._element),i=this._element.closest(B0),n=m.findOne(H0,i);if(i){const l=i.nodeName==="UL"||i.nodeName==="OL"?Ud:Kd;t=m.find(l,i),t=t[t.length-1]}const o=t?_.trigger(t,M0,{relatedTarget:this._element}):null;if(_.trigger(this._element,$0,{relatedTarget:t}).defaultPrevented||o!==null&&o.defaultPrevented)return;this._activate(this._element,i,null,n,this._element);const a=()=>{_.trigger(t,L0,{relatedTarget:this._element}),_.trigger(this._element,R0,{relatedTarget:t})};e?this._activate(e,e.parentNode,a,n,this._element):a()}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...W0,...e,...t},L(Yd,t,z0),t}_activate(t,e,i,n,o){const a=(e&&(e.nodeName==="UL"||e.nodeName==="OL")?m.find(Ud,e):m.children(e,Kd))[0],l=i&&a&&a.hasAttribute(ss),c=()=>this._transitionComplete(t,a,i,n,o);a&&l?(g.removeClass(a,this._classes.show),g.addClass(a,this._classes.hide),this._queueCallback(c,t,!0)):c()}_transitionComplete(t,e,i,n,o){if(e&&n){e.removeAttribute(ss),n.removeAttribute(Ao);const a=m.findOne(F0,e.parentNode);a&&a.removeAttribute(ss),e.getAttribute("role")==="tab"&&e.setAttribute("aria-selected",!1)}t.setAttribute(ss,""),o.setAttribute(Ao,""),t.getAttribute("role")==="tab"&&t.setAttribute("aria-selected",!0),zi(t),t.classList.contains(this._classes.hide)&&(g.removeClass(t,this._classes.hide),g.addClass(t,this._classes.show));let r=t.parentNode;if(r&&r.nodeName==="LI"&&(r=r.parentNode),r&&r.hasAttribute(P0)){const a=t.closest(N0);a&&m.find(V0,a).forEach(l=>l.setAttribute(ss,"")),t.setAttribute("aria-expanded",!0)}i&&i()}static jQueryInterface(t){return this.each(function(){const e=wo.getOrCreateInstance(this);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}}const pl="toast",ze=".te.toast",j0=`mouseover${ze}`,Y0=`mouseout${ze}`,K0=`focusin${ze}`,U0=`focusout${ze}`,X0=`hide${ze}`,G0=`hidden${ze}`,q0=`show${ze}`,Z0=`shown${ze}`,Xd="data-te-toast-hide",fl="data-te-toast-show",ko="data-te-toast-showing",Q0={animation:"boolean",autohide:"boolean",delay:"number"},Gd={animation:!0,autohide:!0,delay:5e3},J0={fadeIn:"animate-[fade-in_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none",fadeOut:"animate-[fade-out_0.3s_both] p-[auto] motion-reduce:transition-none motion-reduce:animate-none"},ty={fadeIn:"string",fadeOut:"string"};class Xs extends Mt{constructor(t,e,i){super(t),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._timeout=null,this._hasMouseInteraction=!1,this._hasKeyboardInteraction=!1,this._setListeners(),this._didInit=!1,this._init()}static get DefaultType(){return Q0}static get Default(){return Gd}static get NAME(){return pl}show(){if(_.trigger(this._element,q0).defaultPrevented)return;this._clearTimeout(),this._config.animation&&(g.removeClass(this._element,this._classes.fadeOut),g.addClass(this._element,this._classes.fadeIn));const e=()=>{this._element.removeAttribute(ko),_.trigger(this._element,Z0),this._maybeScheduleHide()};this._element.removeAttribute(Xd),zi(this._element),this._element.setAttribute(fl,""),this._element.setAttribute(ko,""),this._queueCallback(e,this._element,this._config.animation)}hide(){if(!this._element||this._element.dataset.teToastShow===void 0||_.trigger(this._element,X0).defaultPrevented)return;const e=()=>{let i=0;this._config.animation&&(i=300,g.removeClass(this._element,this._classes.fadeIn),g.addClass(this._element,this._classes.fadeOut)),setTimeout(()=>{this._element.setAttribute(Xd,""),this._element.removeAttribute(ko),this._element.removeAttribute(fl),_.trigger(this._element,G0)},i)};this._element.setAttribute(ko,""),this._queueCallback(e,this._element,this._config.animation)}dispose(){this._clearTimeout(),this._element.dataset.teToastShow!==void 0&&this._element.removeAttribute(fl),super.dispose()}_init(){this._didInit||(yo(Xs),this._didInit=!0)}_getConfig(t){return t={...Gd,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(pl,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...J0,...e,...t},L(pl,t,ty),t}_maybeScheduleHide(){this._config.autohide&&(this._hasMouseInteraction||this._hasKeyboardInteraction||(this._timeout=setTimeout(()=>{this.hide()},this._config.delay)))}_onInteraction(t,e){switch(t.type){case"mouseover":case"mouseout":this._hasMouseInteraction=e;break;case"focusin":case"focusout":this._hasKeyboardInteraction=e;break}if(e){this._clearTimeout();return}const i=t.relatedTarget;this._element===i||this._element.contains(i)||this._maybeScheduleHide()}_setListeners(){_.on(this._element,j0,t=>this._onInteraction(t,!0)),_.on(this._element,Y0,t=>this._onInteraction(t,!1)),_.on(this._element,K0,t=>this._onInteraction(t,!0)),_.on(this._element,U0,t=>this._onInteraction(t,!1))}_clearTimeout(){clearTimeout(this._timeout),this._timeout=null}static jQueryInterface(t){return this.each(function(){const e=Xs.getOrCreateInstance(this,t);if(typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}(()=>{var s={454:(i,n,o)=>{o.d(n,{Z:()=>l});var r=o(645),a=o.n(r)()(function(c){return c[1]});a.push([i.id,"INPUT:-webkit-autofill,SELECT:-webkit-autofill,TEXTAREA:-webkit-autofill{animation-name:onautofillstart}INPUT:not(:-webkit-autofill),SELECT:not(:-webkit-autofill),TEXTAREA:not(:-webkit-autofill){animation-name:onautofillcancel}@keyframes onautofillstart{}@keyframes onautofillcancel{}",""]);const l=a},645:i=>{i.exports=function(n){var o=[];return o.toString=function(){return this.map(function(r){var a=n(r);return r[2]?"@media ".concat(r[2]," {").concat(a,"}"):a}).join("")},o.i=function(r,a,l){typeof r=="string"&&(r=[[null,r,""]]);var c={};if(l)for(var h=0;h<this.length;h++){var d=this[h][0];d!=null&&(c[d]=!0)}for(var u=0;u<r.length;u++){var p=[].concat(r[u]);l&&c[p[0]]||(a&&(p[2]?p[2]="".concat(a," and ").concat(p[2]):p[2]=a),o.push(p))}},o}},810:()=>{(function(){if(typeof window<"u")try{var i=new window.CustomEvent("test",{cancelable:!0});if(i.preventDefault(),i.defaultPrevented!==!0)throw new Error("Could not prevent default")}catch{var n=function(r,a){var l,c;return(a=a||{}).bubbles=!!a.bubbles,a.cancelable=!!a.cancelable,(l=document.createEvent("CustomEvent")).initCustomEvent(r,a.bubbles,a.cancelable,a.detail),c=l.preventDefault,l.preventDefault=function(){c.call(this);try{Object.defineProperty(this,"defaultPrevented",{get:function(){return!0}})}catch{this.defaultPrevented=!0}},l};n.prototype=window.Event.prototype,window.CustomEvent=n}})()},379:(i,n,o)=>{var r,a=function(){var x={};return function(E){if(x[E]===void 0){var C=document.querySelector(E);if(window.HTMLIFrameElement&&C instanceof window.HTMLIFrameElement)try{C=C.contentDocument.head}catch{C=null}x[E]=C}return x[E]}}(),l=[];function c(x){for(var E=-1,C=0;C<l.length;C++)if(l[C].identifier===x){E=C;break}return E}function h(x,E){for(var C={},A=[],w=0;w<x.length;w++){var S=x[w],k=E.base?S[0]+E.base:S[0],D=C[k]||0,I="".concat(k," ").concat(D);C[k]=D+1;var M=c(I),P={css:S[1],media:S[2],sourceMap:S[3]};M!==-1?(l[M].references++,l[M].updater(P)):l.push({identifier:I,updater:T(P,E),references:1}),A.push(I)}return A}function d(x){var E=document.createElement("style"),C=x.attributes||{};if(C.nonce===void 0){var A=o.nc;A&&(C.nonce=A)}if(Object.keys(C).forEach(function(S){E.setAttribute(S,C[S])}),typeof x.insert=="function")x.insert(E);else{var w=a(x.insert||"head");if(!w)throw new Error("Couldn't find a style target. This probably means that the value for the 'insert' parameter is invalid.");w.appendChild(E)}return E}var u,p=(u=[],function(x,E){return u[x]=E,u.filter(Boolean).join(`
+`)});function f(x,E,C,A){var w=C?"":A.media?"@media ".concat(A.media," {").concat(A.css,"}"):A.css;if(x.styleSheet)x.styleSheet.cssText=p(E,w);else{var S=document.createTextNode(w),k=x.childNodes;k[E]&&x.removeChild(k[E]),k.length?x.insertBefore(S,k[E]):x.appendChild(S)}}function b(x,E,C){var A=C.css,w=C.media,S=C.sourceMap;if(w?x.setAttribute("media",w):x.removeAttribute("media"),S&&typeof btoa<"u"&&(A+=`
+/*# sourceMappingURL=data:application/json;base64,`.concat(btoa(unescape(encodeURIComponent(JSON.stringify(S))))," */")),x.styleSheet)x.styleSheet.cssText=A;else{for(;x.firstChild;)x.removeChild(x.firstChild);x.appendChild(document.createTextNode(A))}}var v=null,y=0;function T(x,E){var C,A,w;if(E.singleton){var S=y++;C=v||(v=d(E)),A=f.bind(null,C,S,!1),w=f.bind(null,C,S,!0)}else C=d(E),A=b.bind(null,C,E),w=function(){(function(k){if(k.parentNode===null)return!1;k.parentNode.removeChild(k)})(C)};return A(x),function(k){if(k){if(k.css===x.css&&k.media===x.media&&k.sourceMap===x.sourceMap)return;A(x=k)}else w()}}i.exports=function(x,E){(E=E||{}).singleton||typeof E.singleton=="boolean"||(E.singleton=(r===void 0&&(r=!!(window&&document&&document.all&&!window.atob)),r));var C=h(x=x||[],E);return function(A){if(A=A||[],Object.prototype.toString.call(A)==="[object Array]"){for(var w=0;w<C.length;w++){var S=c(C[w]);l[S].references--}for(var k=h(A,E),D=0;D<C.length;D++){var I=c(C[D]);l[I].references===0&&(l[I].updater(),l.splice(I,1))}C=k}}}}},t={};function e(i){var n=t[i];if(n!==void 0)return n.exports;var o=t[i]={id:i,exports:{}};return s[i](o,o.exports,e),o.exports}e.n=i=>{var n=i&&i.__esModule?()=>i.default:()=>i;return e.d(n,{a:n}),n},e.d=(i,n)=>{for(var o in n)e.o(n,o)&&!e.o(i,o)&&Object.defineProperty(i,o,{enumerable:!0,get:n[o]})},e.o=(i,n)=>Object.prototype.hasOwnProperty.call(i,n),(()=>{var i=e(379),n=e.n(i),o=e(454);function r(l){if(!l.hasAttribute("autocompleted")){l.setAttribute("autocompleted","");var c=new window.CustomEvent("onautocomplete",{bubbles:!0,cancelable:!0,detail:null});l.dispatchEvent(c)||(l.value="")}}function a(l){l.hasAttribute("autocompleted")&&(l.removeAttribute("autocompleted"),l.dispatchEvent(new window.CustomEvent("onautocomplete",{bubbles:!0,cancelable:!1,detail:null})))}n()(o.Z,{insert:"head",singleton:!1}),o.Z.locals,e(810),document.addEventListener("animationstart",function(l){l.animationName==="onautofillstart"?r(l.target):a(l.target)},!0),document.addEventListener("input",function(l){l.inputType!=="insertReplacementText"&&"data"in l?a(l.target):r(l.target)},!0)})()})();const _l="input",So="te.input",qd="data-te-input-wrapper-init",Zd="data-te-input-notch-ref",Qd="data-te-input-notch-leading-ref",Jd="data-te-input-notch-middle-ref",ey="data-te-input-notch-trailing-ref",iy="data-te-input-helper-ref",sy="data-te-input-placeholder-active",je="data-te-input-state-active",tu="data-te-input-focused",eu="data-te-input-form-counter",Oo=`[${qd}] input`,Io=`[${qd}] textarea`,ns=`[${Zd}]`,iu=`[${Qd}]`,su=`[${Jd}]`,ny=`[${iy}]`,oy={inputFormWhite:!1},ry={inputFormWhite:"(boolean)"},nu={notch:"group flex absolute left-0 top-0 w-full max-w-full h-full text-left pointer-events-none",notchLeading:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none left-0 top-0 h-full w-2 border-r-0 rounded-l-[0.25rem] group-data-[te-input-focused]:border-r-0 group-data-[te-input-state-active]:border-r-0",notchLeadingNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[-1px_0_0_#3b71ca,_0_1px_0_0_#3b71ca,_0_-1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchLeadingWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[-1px_0_0_#ffffff,_0_1px_0_0_#ffffff,_0_-1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",notchMiddle:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none grow-0 shrink-0 basis-auto w-auto max-w-[calc(100%-1rem)] h-full border-r-0 border-l-0 group-data-[te-input-focused]:border-x-0 group-data-[te-input-state-active]:border-x-0 group-data-[te-input-focused]:border-t group-data-[te-input-state-active]:border-t group-data-[te-input-focused]:border-solid group-data-[te-input-state-active]:border-solid group-data-[te-input-focused]:border-t-transparent group-data-[te-input-state-active]:border-t-transparent",notchMiddleNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[0_1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchMiddleWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[0_1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",notchTrailing:"pointer-events-none border border-solid box-border bg-transparent transition-all duration-200 ease-linear motion-reduce:transition-none grow h-full border-l-0 rounded-r-[0.25rem] group-data-[te-input-focused]:border-l-0 group-data-[te-input-state-active]:border-l-0",notchTrailingNormal:"border-neutral-300 dark:border-neutral-600 group-data-[te-input-focused]:shadow-[1px_0_0_#3b71ca,_0_-1px_0_0_#3b71ca,_0_1px_0_0_#3b71ca] group-data-[te-input-focused]:border-primary",notchTrailingWhite:"border-neutral-200 group-data-[te-input-focused]:shadow-[1px_0_0_#ffffff,_0_-1px_0_0_#ffffff,_0_1px_0_0_#ffffff] group-data-[te-input-focused]:border-white",counter:"text-right leading-[1.6]"},ay={notch:"string",notchLeading:"string",notchLeadingNormal:"string",notchLeadingWhite:"string",notchMiddle:"string",notchMiddleNormal:"string",notchMiddleWhite:"string",notchTrailing:"string",notchTrailingNormal:"string",notchTrailingWhite:"string",counter:"string"};class Z{constructor(t,e,i){this._config=this._getConfig(e,t),this._element=t,this._classes=this._getClasses(i),this._label=null,this._labelWidth=0,this._labelMarginLeft=0,this._notchLeading=null,this._notchMiddle=null,this._notchTrailing=null,this._initiated=!1,this._helper=null,this._counter=!1,this._counterElement=null,this._maxLength=0,this._leadingIcon=null,this._element&&(O.setData(t,So,this),this.init())}static get NAME(){return _l}get input(){return m.findOne("input",this._element)||m.findOne("textarea",this._element)}init(){this._initiated||(this._getLabelData(),this._applyDivs(),this._applyNotch(),this._activate(),this._getHelper(),this._getCounter(),this._getEvents(),this._initiated=!0)}update(){this._getLabelData(),this._getNotchData(),this._applyNotch(),this._activate(),this._getHelper(),this._getCounter()}forceActive(){this.input.setAttribute(je,""),m.findOne(ns,this.input.parentNode).setAttribute(je,"")}forceInactive(){this.input.removeAttribute(je),m.findOne(ns,this.input.parentNode).removeAttribute(je)}dispose(){this._removeBorder(),O.removeData(this._element,So),this._element=null}_getConfig(t,e){return t={...oy,...g.getDataAttributes(e),...typeof t=="object"?t:{}},L(_l,t,ry),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...nu,...e,...t},L(_l,t,ay),t}_getLabelData(){this._label=m.findOne("label",this._element),this._label===null?this._showPlaceholder():(this._getLabelWidth(),this._getLabelPositionInInputGroup(),this._toggleDefaultDatePlaceholder())}_getHelper(){this._helper=m.findOne(ny,this._element)}_getCounter(){this._counter=g.getDataAttribute(this.input,"inputShowcounter"),this._counter&&(this._maxLength=this.input.maxLength,this._showCounter())}_getEvents(){_.on(this._element,"focus","input",Z.activate(new Z)),_.on(this._element,"input","input",Z.activate(new Z)),_.on(this._element,"blur","input",Z.deactivate(new Z)),_.on(this._element,"focus","textarea",Z.activate(new Z)),_.on(this._element,"input","textarea",Z.activate(new Z)),_.on(this._element,"blur","textarea",Z.deactivate(new Z)),_.on(window,"shown.te.modal",t=>{m.find(Oo,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.update()}),m.find(Io,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.update()})}),_.on(window,"shown.te.dropdown",t=>{const e=t.target.parentNode.querySelector("[data-te-dropdown-menu-ref]");e&&(m.find(Oo,e).forEach(i=>{const n=Z.getInstance(i.parentNode);n&&n.update()}),m.find(Io,e).forEach(i=>{const n=Z.getInstance(i.parentNode);n&&n.update()}))}),_.on(window,"shown.te.tab",t=>{let e;t.target.href?e=t.target.href.split("#")[1]:e=g.getDataAttribute(t.target,"target").split("#")[1];const i=m.findOne(`#${e}`);m.find(Oo,i).forEach(n=>{const o=Z.getInstance(n.parentNode);o&&o.update()}),m.find(Io,i).forEach(n=>{const o=Z.getInstance(n.parentNode);o&&o.update()})}),_.on(window,"reset",t=>{m.find(Oo,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.forceInactive()}),m.find(Io,t.target).forEach(e=>{const i=Z.getInstance(e.parentNode);i&&i.forceInactive()})}),_.on(window,"onautocomplete",t=>{const e=Z.getInstance(t.target.parentNode);!e||!t.cancelable||e.forceActive()})}_showCounter(){if(m.find(`[${eu}]`,this._element).length>0)return;this._counterElement=document.createElement("div"),g.addClass(this._counterElement,this._classes.counter),this._counterElement.setAttribute(eu,"");const e=this.input.value.length;this._counterElement.innerHTML=`${e} / ${this._maxLength}`,this._helper.appendChild(this._counterElement),this._bindCounter()}_bindCounter(){_.on(this.input,"input",()=>{const t=this.input.value.length;this._counterElement.innerHTML=`${t} / ${this._maxLength}`})}_toggleDefaultDatePlaceholder(t=this.input){if(!(t.getAttribute("type")==="date"))return;!(document.activeElement===t)&&!t.value?t.style.opacity=0:t.style.opacity=1}_showPlaceholder(){this.input.setAttribute(sy,"")}_getNotchData(){this._notchMiddle=m.findOne(su,this._element),this._notchLeading=m.findOne(iu,this._element)}_getLabelWidth(){this._labelWidth=this._label.clientWidth*.8+8}_getLabelPositionInInputGroup(){if(this._labelMarginLeft=0,!this._element.hasAttribute("data-te-input-group-ref"))return;const t=this.input,e=m.prev(t,"[data-te-input-group-text-ref]")[0];e===void 0?this._labelMarginLeft=0:this._labelMarginLeft=e.offsetWidth-1}_applyDivs(){const t=this._config.inputFormWhite?this._classes.notchLeadingWhite:this._classes.notchLeadingNormal,e=this._config.inputFormWhite?this._classes.notchMiddleWhite:this._classes.notchMiddleNormal,i=this._config.inputFormWhite?this._classes.notchTrailingWhite:this._classes.notchTrailingNormal,n=m.find(ns,this._element),o=$("div");g.addClass(o,this._classes.notch),o.setAttribute(Zd,""),this._notchLeading=$("div"),g.addClass(this._notchLeading,`${this._classes.notchLeading} ${t}`),this._notchLeading.setAttribute(Qd,""),this._notchMiddle=$("div"),g.addClass(this._notchMiddle,`${this._classes.notchMiddle} ${e}`),this._notchMiddle.setAttribute(Jd,""),this._notchTrailing=$("div"),g.addClass(this._notchTrailing,`${this._classes.notchTrailing} ${i}`),this._notchTrailing.setAttribute(ey,""),!(n.length>=1)&&(o.append(this._notchLeading),o.append(this._notchMiddle),o.append(this._notchTrailing),this._element.append(o))}_applyNotch(){this._notchMiddle.style.width=`${this._labelWidth}px`,this._notchLeading.style.width=`${this._labelMarginLeft+9}px`,this._label!==null&&(this._label.style.marginLeft=`${this._labelMarginLeft}px`)}_removeBorder(){const t=m.findOne(ns,this._element);t&&t.remove()}_activate(t){ph(()=>{this._getElements(t);const e=t?t.target:this.input,i=m.findOne(ns,this._element);t&&t.type==="focus"&&i&&i.setAttribute(tu,""),e.value!==""&&(e.setAttribute(je,""),i&&i.setAttribute(je,"")),this._toggleDefaultDatePlaceholder(e)})}_getElements(t){if(t&&(this._element=t.target.parentNode,this._label=m.findOne("label",this._element)),t&&this._label){const e=this._labelWidth;this._getLabelData(),e!==this._labelWidth&&(this._notchMiddle=m.findOne(su,t.target.parentNode),this._notchLeading=m.findOne(iu,t.target.parentNode),this._applyNotch())}}_deactivate(t){const e=t?t.target:this.input,i=m.findOne(ns,e.parentNode);i.removeAttribute(tu),e.value===""&&(e.removeAttribute(je),i.removeAttribute(je)),this._toggleDefaultDatePlaceholder(e)}static activate(t){return function(e){t._activate(e)}}static deactivate(t){return function(e){t._deactivate(e)}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,So);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Z(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,So)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const ou="animation",gl="te.animation",ly={animation:"string",animationStart:"string",animationShowOnLoad:"boolean",onStart:"(null|function)",onEnd:"(null|function)",onHide:"(null|function)",onShow:"(null|function)",animationOnScroll:"(string)",animationWindowHeight:"number",animationOffset:"(number|string)",animationDelay:"(number|string)",animationReverse:"boolean",animationInterval:"(number|string)",animationRepeat:"(number|boolean)",animationReset:"boolean"},cy={animation:"fade",animationStart:"onClick",animationShowOnLoad:!0,onStart:null,onEnd:null,onHide:null,onShow:null,animationOnScroll:"once",animationWindowHeight:0,animationOffset:0,animationDelay:0,animationReverse:!1,animationInterval:0,animationRepeat:!1,animationReset:!1};class Gs{constructor(t,e){this._element=t,this._animateElement=this._getAnimateElement(),this._isFirstScroll=!0,this._repeatAnimateOnScroll=!0,this._options=this._getConfig(e),this._element&&(O.setData(t,gl,this),this._init())}static get NAME(){return ou}init(){this._init()}startAnimation(){this._startAnimation()}stopAnimation(){this._clearAnimationClass()}changeAnimationType(t){this._options.animation=t}dispose(){_.off(this._element,"mousedown"),_.off(this._animateElement,"animationend"),_.off(window,"scroll"),_.off(this._element,"mouseover"),O.removeData(this._element,gl),this._element=null,this._animateElement=null,this._isFirstScroll=null,this._repeatAnimateOnScroll=null,this._options=null}_init(){switch(this._options.animationStart){case"onHover":this._bindHoverEvents();break;case"onLoad":this._startAnimation();break;case"onScroll":this._bindScrollEvents();break;case"onClick":this._bindClickEvents();break}this._bindTriggerOnEndCallback(),this._options.animationReset&&this._bindResetAnimationAfterFinish()}_getAnimateElement(){const t=g.getDataAttribute(this._element,"animation-target");return t?m.find(t)[0]:this._element}_getConfig(t){const e=g.getDataAttributes(this._animateElement);return t={...cy,...e,...t},L(ou,t,ly),t}_animateOnScroll(){const t=g.offset(this._animateElement).top,e=this._animateElement.offsetHeight,i=window.innerHeight,n=t+this._options.animationOffset<=i&&t+this._options.animationOffset+e>=0,o=this._animateElement.style.visibility==="visible";switch(!0){case(n&&this._isFirstScroll):this._isFirstScroll=!1,this._startAnimation();break;case(!n&&this._isFirstScroll):this._isFirstScroll=!1,this._hideAnimateElement();break;case(n&&!o&&this._repeatAnimateOnScroll):this._options.animationOnScroll!=="repeat"&&(this._repeatAnimateOnScroll=!1),this._callback(this._options.onShow),this._showAnimateElement(),this._startAnimation();break;case(!n&&o&&this._repeatAnimateOnScroll):this._hideAnimateElement(),this._clearAnimationClass(),this._callback(this._options.onHide);break}}_addAnimatedClass(){g.addClass(this._animateElement,`animate-${this._options.animation}`)}_clearAnimationClass(){this._animateElement.classList.remove(`animate-${this._options.animation}`)}_startAnimation(){this._callback(this._options.onStart),this._addAnimatedClass(),this._options.animationRepeat&&!this._options.animationInterval&&this._setAnimationRepeat(),this._options.animationReverse&&this._setAnimationReverse(),this._options.animationDelay&&this._setAnimationDelay(),this._options.animationDuration&&this._setAnimationDuration(),this._options.animationInterval&&this._setAnimationInterval()}_setAnimationReverse(){g.style(this._animateElement,{animationIterationCount:this._options.animationRepeat===!0?"infinite":"2",animationDirection:"alternate"})}_setAnimationDuration(){g.style(this._animateElement,{animationDuration:`${this._options.animationDuration}ms`})}_setAnimationDelay(){g.style(this._animateElement,{animationDelay:`${this._options.animationDelay}ms`})}_setAnimationRepeat(){g.style(this._animateElement,{animationIterationCount:this._options.animationRepeat===!0?"infinite":this._options.animationRepeat})}_setAnimationInterval(){_.on(this._animateElement,"animationend",()=>{this._clearAnimationClass(),setTimeout(()=>{this._addAnimatedClass()},this._options.animationInterval)})}_hideAnimateElement(){g.style(this._animateElement,{visibility:"hidden"})}_showAnimateElement(){g.style(this._animateElement,{visibility:"visible"})}_bindResetAnimationAfterFinish(){_.on(this._animateElement,"animationend",()=>{this._clearAnimationClass()})}_bindTriggerOnEndCallback(){_.on(this._animateElement,"animationend",()=>{this._callback(this._options.onEnd)})}_bindScrollEvents(){this._options.animationShowOnLoad||this._animateOnScroll(),_.on(window,"scroll",()=>{this._animateOnScroll()})}_bindClickEvents(){_.on(this._element,"mousedown",()=>{this._startAnimation()})}_bindHoverEvents(){_.one(this._element,"mouseover",()=>{this._startAnimation()}),_.one(this._animateElement,"animationend",()=>{setTimeout(()=>{this._bindHoverEvents()},100)})}_callback(t){t instanceof Function&&t()}static autoInit(t){t._init()}static jQueryInterface(t){new Gs(this[0],t).init()}static getInstance(t){return O.getData(t,gl)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const hy={property:"color",defaultValue:null,inherit:!0},os=(s,t)=>{const{property:e,defaultValue:i,inherit:n}={...hy,...t},o=document.createElement("div");o.classList.add(s),document.body.appendChild(o);const a=window.getComputedStyle(o)[e]||i,c=window.getComputedStyle(o.parentElement)[e];return document.body.removeChild(o),!n&&c&&a===c?i:a||i},ml="ripple",Do="te.ripple",dy="rgba({{color}}, 0.2) 0, rgba({{color}}, 0.3) 40%, rgba({{color}}, 0.4) 50%, rgba({{color}}, 0.5) 60%, rgba({{color}}, 0) 70%",uy=["[data-te-ripple-init]"],Mo=[0,0,0],py=[{name:"primary",gradientColor:os("text-primary",{defaultValue:"#3B71CA",inherit:!1})},{name:"secondary",gradientColor:os("text-secondary",{defaultValue:"#9FA6B2",inherit:!1})},{name:"success",gradientColor:os("text-success",{defaultValue:"#14A44D",inherit:!1})},{name:"danger",gradientColor:os("text-danger",{defaultValue:"#DC4C64",inherit:!1})},{name:"warning",gradientColor:os("text-warning",{defaultValue:"#E4A11B",inherit:!1})},{name:"info",gradientColor:os("text-info",{defaultValue:"#54B4D3",inherit:!1})},{name:"light",gradientColor:"#fbfbfb"},{name:"dark",gradientColor:"#262626"}],ru=.5,fy={rippleCentered:!1,rippleColor:"",rippleColorDark:"",rippleDuration:"500ms",rippleRadius:0,rippleUnbound:!1},_y={rippleCentered:"boolean",rippleColor:"string",rippleColorDark:"string",rippleDuration:"string",rippleRadius:"number",rippleUnbound:"boolean"},gy={ripple:"relative overflow-hidden inline-block align-bottom",rippleWave:"rounded-[50%] opacity-50 pointer-events-none absolute touch-none scale-0 transition-[transform,_opacity] ease-[cubic-bezier(0,0,0.15,1),_cubic-bezier(0,0,0.15,1)] z-[999]",unbound:"overflow-visible"},my={ripple:"string",rippleWave:"string",unbound:"string"};class Ye{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._element&&(O.setData(t,Do,this),g.addClass(this._element,this._classes.ripple)),this._clickHandler=this._createRipple.bind(this),this._rippleTimer=null,this._isMinWidthSet=!1,this._initialClasses=null,this.init()}static get NAME(){return ml}init(){this._addClickEvent(this._element)}dispose(){O.removeData(this._element,Do),_.off(this._element,"click",this._clickHandler),this._element=null,this._options=null}_autoInit(t){uy.forEach(e=>{m.closest(t.target,e)&&(this._element=m.closest(t.target,e))}),this._element.style.minWidth||(g.style(this._element,{"min-width":getComputedStyle(this._element).width}),this._isMinWidthSet=!0),this._options=this._getConfig(),this._classes=this._getClasses(),this._initialClasses=[...this._element.classList],g.addClass(this._element,this._classes.ripple),this._createRipple(t)}_addClickEvent(t){_.on(t,"mousedown",this._clickHandler)}_createRipple(t){this._element.className.indexOf(this._classes.ripple)<0&&g.addClass(this._element,this._classes.ripple);const{layerX:e,layerY:i}=t,n=t.offsetX||e,o=t.offsetY||i,r=this._element.offsetHeight,a=this._element.offsetWidth,l=this._durationToMsNumber(this._options.rippleDuration),c={offsetX:this._options.rippleCentered?r/2:n,offsetY:this._options.rippleCentered?a/2:o,height:r,width:a},h=this._getDiameter(c),d=this._options.rippleRadius||h/2,u={delay:l*ru,duration:l-l*ru},p={left:this._options.rippleCentered?`${a/2-d}px`:`${n-d}px`,top:this._options.rippleCentered?`${r/2-d}px`:`${o-d}px`,height:`${this._options.rippleRadius*2||h}px`,width:`${this._options.rippleRadius*2||h}px`,transitionDelay:`0s, ${u.delay}ms`,transitionDuration:`${l}ms, ${u.duration}ms`},f=$("div");this._createHTMLRipple({wrapper:this._element,ripple:f,styles:p}),this._removeHTMLRipple({ripple:f,duration:l})}_createHTMLRipple({wrapper:t,ripple:e,styles:i}){Object.keys(i).forEach(n=>e.style[n]=i[n]),g.addClass(e,this._classes.rippleWave),e.setAttribute("data-te-ripple-ref",""),this._addColor(e,t),this._toggleUnbound(t),this._appendRipple(e,t)}_removeHTMLRipple({ripple:t,duration:e}){this._rippleTimer&&(clearTimeout(this._rippleTimer),this._rippleTimer=null),t&&setTimeout(()=>{t.classList.add("!opacity-0")},10),this._rippleTimer=setTimeout(()=>{if(t&&(t.remove(),this._element)){m.find("[data-te-ripple-ref]",this._element).forEach(n=>{n.remove()}),this._isMinWidthSet&&(g.style(this._element,{"min-width":""}),this._isMinWidthSet=!1);const i=this._initialClasses?this._addedNewRippleClasses(this._classes.ripple,this._initialClasses):this._classes.ripple.split(" ");g.removeClass(this._element,i)}},e)}_addedNewRippleClasses(t,e){return t.split(" ").filter(i=>e.findIndex(n=>i===n)===-1)}_durationToMsNumber(t){return Number(t.replace("ms","").replace("s","000"))}_getConfig(t={}){const e=g.getDataAttributes(this._element);return t={...fy,...e,...t},L(ml,t,_y),t}_getClasses(t={}){const e=g.getDataClassAttributes(this._element);return t={...gy,...e,...t},L(ml,t,my),t}_getDiameter({offsetX:t,offsetY:e,height:i,width:n}){const o=e<=i/2,r=t<=n/2,a=(u,p)=>Math.sqrt(u**2+p**2),l=e===i/2&&t===n/2,c={first:o===!0&&r===!1,second:o===!0&&r===!0,third:o===!1&&r===!0,fourth:o===!1&&r===!1},h={topLeft:a(t,e),topRight:a(n-t,e),bottomLeft:a(t,i-e),bottomRight:a(n-t,i-e)};let d=0;return l||c.fourth?d=h.topLeft:c.third?d=h.topRight:c.second?d=h.bottomRight:c.first&&(d=h.bottomLeft),d*2}_appendRipple(t,e){e.appendChild(t),setTimeout(()=>{g.addClass(t,"opacity-0 scale-100")},50)}_toggleUnbound(t){this._options.rippleUnbound===!0?g.addClass(t,this._classes.unbound):g.removeClass(t,this._classes.unbound)}_addColor(t){let e=this._options.rippleColor||"rgb(0,0,0)";(localStorage.theme==="dark"||!("theme"in localStorage)&&window.matchMedia("(prefers-color-scheme: dark)").matches)&&(e=this._options.rippleColorDark||this._options.rippleColor);const i=py.find(r=>r.name===e.toLowerCase()),n=i?this._colorToRGB(i.gradientColor).join(","):this._colorToRGB(e).join(","),o=dy.split("{{color}}").join(`${n}`);t.style.backgroundImage=`radial-gradient(circle, ${o})`}_colorToRGB(t){function e(o){return o.length<7&&(o=`#${o[1]}${o[1]}${o[2]}${o[2]}${o[3]}${o[3]}`),[parseInt(o.substr(1,2),16),parseInt(o.substr(3,2),16),parseInt(o.substr(5,2),16)]}function i(o){const r=document.body.appendChild(document.createElement("fictum")),a="rgb(1, 2, 3)";return r.style.color=a,r.style.color!==a||(r.style.color=o,r.style.color===a||r.style.color==="")?Mo:(o=getComputedStyle(r).color,document.body.removeChild(r),o)}function n(o){return o=o.match(/[.\d]+/g).map(r=>+Number(r)),o.length=3,o}return t.toLowerCase()==="transparent"?Mo:t[0]==="#"?e(t):(t.indexOf("rgb")===-1&&(t=i(t)),t.indexOf("rgb")===0?n(t):Mo)}static autoInitial(t){return function(e){t._autoInit(e)}}static jQueryInterface(t){return this.each(function(){return O.getData(this,Do)?null:new Ye(this,t)})}static getInstance(t){return O.getData(t,Do)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}function Tt(s){return s.getDate()}function Lo(s){return s.getDay()}function ot(s){return s.getMonth()}function K(s){return s.getFullYear()}function by(s,t,e){const i=e.startDay,n=i>0?7-i:0,r=new Date(s,t).getDay()+n;return r>=7?r-7:r}function bl(s){return vy(s).getDate()}function vy(s){return ee(s.getFullYear(),s.getMonth()+1,0)}function rs(){return new Date}function kt(s,t){return St(s,t*12)}function St(s,t){const e=ee(s.getFullYear(),s.getMonth()+t,s.getDate()),i=Tt(s),n=Tt(e);return i!==n&&e.setDate(0),e}function as(s,t){return ee(s.getFullYear(),s.getMonth(),s.getDate()+t)}function ee(s,t,e){const i=new Date(s,t,e);return s>=0&&s<100&&i.setFullYear(i.getFullYear()-1900),i}function au(s){const t=s.split("-"),e=t[0],i=t[1],n=t[2];return ee(e,i,n)}function yy(s){return!Number.isNaN(s.getTime())}function ls(s,t){return K(s)-K(t)||ot(s)-ot(t)||Tt(s)-Tt(t)}function yi(s,t){return s.setHours(0,0,0,0),t.setHours(0,0,0,0),s.getTime()===t.getTime()}function $o(s,t){const i=K(s)-Ey();return Ty(i,t)}function Ty(s,t){return(s%t+t)%t}function Ey(s,t,e){let i=0;return e?i=K(e)-s+1:t&&(i=K(t)),i}function Ro(s,t,e,i,n,o){const r=new Date;r.setHours(0,0,0,0);const a=t&&ls(s,t)<=-1,l=e&&ls(s,e)>=1,c=n&&ls(s,r)<=-1,h=o&&ls(s,r)>=1,d=i&&i(s)===!1;return a||l||d||c||h}function lu(s,t,e,i,n,o){const r=new Date,a=i&&K(i),l=i&&ot(i),c=e&&K(e),h=e&&ot(e),d=K(r),u=ot(r),p=l&&a&&(t>a||t===a&&s>l),f=h&&c&&(t<c||t===c&&s<h),b=n&&(t<d||t===d&&s<u),v=o&&(t>d||t===d&&s>u);return p||f||b||v}function vl(s,t,e,i,n){const o=t&&K(t),r=e&&K(e),a=K(new Date),l=r&&s>r,c=o&&s<o,h=i&&s<a,d=n&&s>a;return l||c||h||d}function xy(s,t,e,i,n,o,r,a){const l=new Date;return l.setHours(0,0,0,0),(s&&o&&ls(o,l)<0||s)&&(o=l),o&&qs(t,o,e,i,n,o,r,a)}function Cy(s,t,e,i,n,o,r,a){const l=new Date;return l.setHours(0,0,0,0),(s&&n&&ls(n,l)<0||s)&&(n=l),n&&qs(t,n,e,i,n,o,r,a)}function qs(s,t,e,i,n,o,r,a){return e==="days"?K(s)===K(t)&&ot(s)===ot(t):e==="months"?K(s)===K(t):e==="years"?K(t)>=a&&K(t)<=r:!1}const Ay="data-te-datepicker-modal-container-ref",wy="data-te-datepicker-dropdown-container-ref",ky="data-te-dropdown-backdrop-ref",Sy="data-te-datepicker-date-text-ref",cu="data-te-datepicker-view-ref",Oy="data-te-datepicker-previous-button-ref",Iy="data-te-datepicker-next-button-ref",Dy="data-te-datepicker-ok-button-ref",My="data-te-datepicker-cancel-button-ref",Ly="data-te-datepicker-clear-button-ref",$y="data-te-datepicker-view-change-button-ref";function Ry(s,t,e,i,n,o,r,a,l,c){const h=ot(s),d=K(s),u=Tt(s),p=Lo(s),f=$("div"),b=`
+        ${hu(s,h,d,t,e,i,n,o,r,a,c)}
+    `,v=`
+      ${Ny(u,p,h,n,c)}
+      ${hu(s,h,d,t,e,i,n,o,r,a,c)}
+    `;return n.inline?(g.addClass(f,c.datepickerDropdownContainer),f.setAttribute(wy,l),f.innerHTML=b):(g.addClass(f,c.modalContainer),f.setAttribute(Ay,l),f.innerHTML=v),f}function Py(s){const t=$("div");return g.addClass(t,s),t.setAttribute(ky,""),t}function Ny(s,t,e,i,n){return`
+      <div class="${n.datepickerHeader}" data-te-datepicker-header>
+        <div class="${n.datepickerTitle}">
+          <span class="${n.datepickerTitleText}">${i.title}</span>
+        </div>
+        <div class="${n.datepickerDate}">
+          <span class="${n.datepickerDateText}" ${Sy} >${i.weekdaysShort[t]}, ${i.monthsShort[e]} ${s}</span>
+        </div>
+      </div>
+    `}function hu(s,t,e,i,n,o,r,a,l,c,h){let d;return r.inline?d=`
+    <div class="${h.datepickerMain}">
+      ${uu(t,e,r,h)}
+      <div class="${h.datepickerView}" ${cu} tabindex="0">
+        ${du(s,e,i,n,o,r,a,l,c,h)}
+      </div>
+    </div>
+  `:d=`
+    <div class="${h.datepickerMain}">
+      ${uu(t,e,r,h)}
+      <div class="${h.datepickerView}" ${cu} tabindex="0">
+        ${du(s,e,i,n,o,r,a,l,c,h)}
+      </div>
+      ${By(r,h)}
+    </div>
+  `,d}function du(s,t,e,i,n,o,r,a,l,c){let h;return o.view==="days"?h=Po(s,e,o,c):o.view==="months"?h=No(t,i,n,o,r,c):h=Bo(s,i,o,a,l,c),h}function uu(s,t,e,i){return`
+    <div class="${i.datepickerDateControls}">
+      <button class="${i.datepickerViewChangeButton}" aria-label="${e.switchToMultiYearViewLabel}" ${$y}>
+        ${e.monthsFull[s]} ${t} ${pe(e,i)}
+      </button>
+      <div class="${i.datepickerArrowControls}">
+        <button class="${i.datepickerPreviousButton}" aria-label="${e.prevMonthLabel}" ${Oy}>${e.changeMonthIconTemplate}</button>
+        <button class="${i.datepickerNextButton}" aria-label="${e.nextMonthLabel}" ${Iy}>${e.changeMonthIconTemplate}</button>
+      </div>
+    </div>
+    `}function pe(s,t){return`
+  <span class="${t.datepickerViewChangeIcon}">
+  ${s.viewChangeIconTemplate}
+  </span>
+  `}function By(s,t){const e=`<button class="${t.datepickerFooterBtn}" aria-label="${s.okBtnLabel}" ${Dy}>${s.okBtnText}</button>`,i=`<button class="${t.datepickerFooterBtn}" aria-label="${s.cancelBtnLabel}" ${My}>${s.cancelBtnText}</button>`,n=`<button class="${t.datepickerFooterBtn} ${t.datepickerClearBtn}" aria-label="${s.clearBtnLabel}" ${Ly}>${s.clearBtnText}</button>`;return`
+        <div class="${t.datepickerFooter}">
+          
+        ${s.removeClearBtn?"":n}
+        ${s.removeCancelBtn?"":i}
+        ${s.removeOkBtn?"":e}
+        </div>
+      `}function Po(s,t,e,i){const n=Hy(s,t,e),r=`
+      <tr>
+        ${e.weekdaysNarrow.map((l,c)=>`<th class="${i.datepickerDayHeading}" scope="col" aria-label="${e.weekdaysFull[c]}">${l}</th>`).join("")}
+      </tr>
+    `,a=n.map(l=>`
+        <tr>
+          ${l.map(c=>`
+              <td
+              class="${i.datepickerCell} ${i.datepickerCellSmall}"
+              data-te-date="${K(c.date)}-${ot(c.date)}-${Tt(c.date)}"
+              aria-label="${c.date}"
+              aria-selected="${c.isSelected}"
+              ${c.isSelected?"data-te-datepicker-cell-selected":""}
+              ${!c.currentMonth||c.disabled?"data-te-datepicker-cell-disabled":""}
+              ${c.isToday?"data-te-datepicker-cell-current":""}
+              >
+                <div
+                  class="${i.datepickerCellContent} ${i.datepickerCellContentSmall}"
+                  style="${c.currentMonth?"display: block":"display: none"}"
+                  >
+                  ${c.dayNumber}
+                  </div>
+              </td>
+            `).join("")}
+        </tr>
+      `).join("");return`
+      <table class="${i.datepickerTable}">
+        <thead>
+          ${r}
+        </thead>
+        <tbody>
+         ${a}
+        </tbody>
+      </table>
+    `}function Hy(s,t,e){const i=[],n=ot(s),o=ot(St(s,-1)),r=ot(St(s,1)),a=K(s),l=by(a,n,e),c=bl(s),h=bl(St(s,-1)),d=7;let u=1,p=!1;for(let f=1;f<d;f++){const b=[];if(f===1){const v=h-l+1;for(let T=v;T<=h;T++){const x=ee(a,o,T);b.push({date:x,currentMonth:p,isSelected:t&&yi(x,t),isToday:yi(x,rs()),dayNumber:Tt(x)})}p=!0;const y=d-b.length;for(let T=0;T<y;T++){const x=ee(a,n,u);b.push({date:x,currentMonth:p,isSelected:t&&yi(x,t),isToday:yi(x,rs()),dayNumber:Tt(x),disabled:Ro(x,e.min,e.max,e.filter,e.disablePast,e.disableFuture)}),u++}}else for(let v=1;v<8;v++){u>c&&(u=1,p=!1);const y=ee(a,p?n:r,u);b.push({date:y,currentMonth:p,isSelected:t&&yi(y,t),isToday:yi(y,rs()),dayNumber:Tt(y),disabled:Ro(y,e.min,e.max,e.filter,e.disablePast,e.disableFuture)}),u++}i.push(b)}return i}function No(s,t,e,i,n,o){const r=Vy(i,n),a=ot(rs()),l=K(rs()),c=`
+      ${r.map(h=>`
+          <tr>
+            ${h.map(d=>{const u=i.monthsShort.indexOf(d);return`
+                <td class="${o.datepickerCell} ${o.datepickerCellLarge}"
+                ${lu(u,s,i.min,i.max,i.disablePast,i.disableFuture)?"data-te-datepicker-cell-disabled":""}
+                
+                data-te-month="${u}" data-te-year="${s}" aria-label="${d}, ${s}"
+                ${u===e&&s===t?"data-te-datepicker-cell-selected":""}
+                ${u===a&&s===l?"data-te-datepicker-cell-current":""}" data-te-month="${u}" data-te-year="${s}" aria-label="${d}, ${s}">
+                  <div class="${o.datepickerCellContent} ${o.datepickerCellContentLarge}">${d}</div>
+                </td>
+              `}).join("")}
+          </tr>
+        `).join("")}
+    `;return`
+      <table class="${o.datepickerTable}">
+        <tbody>
+         ${c}
+        </tbody>
+      </table>
+    `}function Vy(s,t){const e=[];let i=[];for(let n=0;n<s.monthsShort.length;n++)if(i.push(s.monthsShort[n]),i.length===t){const o=i;e.push(o),i=[]}return e}function Bo(s,t,e,i,n,o){const r=Fy(s,i,n),a=K(rs()),l=`
+    ${r.map(c=>`
+        <tr>
+          ${c.map(h=>`
+              <td class="${o.datepickerCell} ${o.datepickerCellLarge}"  aria-label="${h}" data-te-year="${h}"
+              ${vl(h,e.min,e.max,e.disablePast,e.disableFuture)?"data-te-datepicker-cell-disabled":""}
+              ${h===t?"data-te-datepicker-cell-selected":""}
+              ${h===a?"data-te-datepicker-cell-current":""}
+              >
+                <div class="${o.datepickerCellContent} ${o.datepickerCellContentLarge}">${h}</div>
+              </td>
+            `).join("")}
+        </tr>
+      `).join("")}
+  `;return`
+      <table class="${o.datepickerTable}">
+        <tbody>
+        ${l}
+        </tbody>
+      </table>
+    `}function Fy(s,t,e){const i=[],n=K(s),o=$o(s,t),r=n-o;let a=[];for(let l=0;l<t;l++)if(a.push(r+l),a.length===e){const c=a;i.push(c),a=[]}return i}function Wy(s,t){return`
+    <button id="${s}" type="button" class="${t}" data-te-datepicker-toggle-button-ref data-te-datepicker-toggle-ref>
+      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+      <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+      </svg>  
+    </button>
+  `}const cs=37,ut=38,hs=39,ht=40,Ti=36,Ei=35,yl=33,Tl=34,Et=13,Ho=32,xi=27,Ci=9,zy=8,jy=46,ie=24,Vo=4,Fo=4,El="datepicker",Wo="te.datepicker",zo=`.${Wo}`,Yy=".data-api",Ky=`close${zo}`,Uy=`open${zo}`,Xy=`dateChange${zo}`,jo=`click${zo}${Yy}`,pu="data-te-datepicker-modal-container-ref",fu="data-te-datepicker-dropdown-container-ref",Yo="[data-te-datepicker-toggle-ref]",Gy=`[${pu}]`,qy=`[${fu}]`,Zy="[data-te-datepicker-view-change-button-ref]",Qy="[data-te-datepicker-previous-button-ref]",Jy="[data-te-datepicker-next-button-ref]",tT="[data-te-datepicker-ok-button-ref]",eT="[data-te-datepicker-cancel-button-ref]",iT="[data-te-datepicker-clear-button-ref]",sT="[data-te-datepicker-view-ref]",nT="[data-te-datepicker-toggle-button-ref]",oT="[data-te-datepicker-date-text-ref]",rT="[data-te-dropdown-backdrop-ref]",aT="animate-[fade-in_0.3s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",lT="animate-[fade-out_0.3s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",cT="animate-[fade-in_0.15s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",hT="animate-[fade-out_0.15s_both] px-[auto] motion-reduce:transition-none motion-reduce:animate-none",dT="flex flex-col fixed top-1/2 left-1/2 -translate-x-1/2 -translate-y-1/2 w-[328px] h-[512px] bg-white rounded-[0.6rem] shadow-lg z-[1066] xs:max-md:landscape:w-[475px] xs:max-md:landscape:h-[360px] xs:max-md:landscape:flex-row dark:bg-zinc-700",uT="w-full h-full fixed top-0 right-0 left-0 bottom-0 bg-black/40 z-[1065]",pT="relative h-full",fT="xs:max-md:landscape:h-full h-[120px] px-6 bg-primary flex flex-col rounded-t-lg dark:bg-zinc-800",_T="h-8 flex flex-col justify-end",gT="text-[10px] font-normal uppercase tracking-[1.7px] text-white",mT="xs:max-md:landscape:mt-24 h-[72px] flex flex-col justify-end",bT="text-[34px] font-normal text-white",vT="outline-none px-3",yT="px-3 pt-2.5 pb-0 flex justify-between text-black/[64]",TT="flex items-center outline-none p-2.5 text-neutral-500 font-medium text-[0.9rem] rounded-xl shadow-none bg-transparent m-0 border-none hover:bg-neutral-200 focus:bg-neutral-200  dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10",ET="mt-2.5",xT="p-0 w-10 h-10 leading-10 border-none outline-none m-0 text-gray-600 bg-transparent mr-6 hover:bg-neutral-200 hover:rounded-[50%] focus:bg-neutral-200 focus:rounded-[50%] dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10 [&>svg]:w-4 [&>svg]:h-4 [&>svg]:mx-auto",CT="p-0 w-10 h-10 leading-10 border-none outline-none m-0 text-gray-600 bg-transparent hover:bg-neutral-200 hover:rounded-[50%] focus:bg-neutral-200 focus:rounded-[50%] dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10 [&>svg]:w-4 [&>svg]:h-4 [&>svg]:rotate-180 [&>svg]:mx-auto",AT="h-14 flex absolute w-full bottom-0 justify-end items-center px-3",wT="outline-none bg-white text-primary border-none cursor-pointer py-0 px-2.5 uppercase text-[0.8rem] leading-10 font-medium h-10 tracking-[.1rem] rounded-[10px] mb-2.5 hover:bg-neutral-200 focus:bg-neutral-200 dark:bg-transparent dark:text-white dark:hover:bg-white/10 dark:focus:bg-white/10",kT="mr-auto",ST="w-10 h-10 text-center text-[12px] font-normal dark:text-white",OT="text-center data-[te-datepicker-cell-disabled]:text-neutral-300 data-[te-datepicker-cell-disabled]:cursor-default data-[te-datepicker-cell-disabled]:pointer-events-none data-[te-datepicker-cell-disabled]:hover:cursor-default hover:cursor-pointer group",IT="w-10 h-10 xs:max-md:landscape:w-8 xs:max-md:landscape:h-8",DT="w-[76px] h-[42px]",MT="mx-auto group-[:not([data-te-datepicker-cell-disabled]):not([data-te-datepicker-cell-selected]):hover]:bg-neutral-300 group-[[data-te-datepicker-cell-selected]]:bg-primary group-[[data-te-datepicker-cell-selected]]:text-white group-[:not([data-te-datepicker-cell-selected])[data-te-datepicker-cell-focused]]:bg-neutral-100 group-[[data-te-datepicker-cell-focused]]:data-[te-datepicker-cell-selected]:bg-primary group-[[data-te-datepicker-cell-current]]:border-solid group-[[data-te-datepicker-cell-current]]:border-black group-[[data-te-datepicker-cell-current]]:border dark:group-[:not([data-te-datepicker-cell-disabled]):not([data-te-datepicker-cell-selected]):hover]:bg-white/10 dark:group-[[data-te-datepicker-cell-current]]:border-white dark:text-white dark:group-[:not([data-te-datepicker-cell-selected])[data-te-datepicker-cell-focused]]:bg-white/10 dark:group-[[data-te-datepicker-cell-disabled]]:text-neutral-500",LT="w-9 h-9 leading-9 rounded-[50%] text-[13px]",$T="w-[72px] h-10 leading-10 py-[1px] px-0.5 rounded-[999px]",RT="mx-auto w-[304px]",PT="flex items-center justify-content-center [&>svg]:w-5 [&>svg]:h-5 absolute outline-none border-none bg-transparent right-0.5 top-1/2 -translate-x-1/2 -translate-y-1/2 hover:text-primary focus:text-primary dark:hover:text-primary-400 dark:focus:text-primary-400 dark:text-neutral-200",NT="inline-block pointer-events-none ml-[3px] [&>svg]:w-4 [&>svg]:h-4 [&>svg]:fill-neutral-500 dark:[&>svg]:fill-white",BT="w-[328px] h-[380px] bg-white rounded-lg shadow-[0px_2px_15px_-3px_rgba(0,0,0,.07),_0px_10px_20px_-2px_rgba(0,0,0,.04)] z-[1066] dark:bg-zinc-700",HT={title:"Select date",container:"body",disablePast:!1,disableFuture:!1,monthsFull:["January","February","March","April","May","June","July","August","September","October","November","December"],monthsShort:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],weekdaysFull:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],weekdaysShort:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],weekdaysNarrow:["S","M","T","W","T","F","S"],okBtnText:"Ok",clearBtnText:"Clear",cancelBtnText:"Cancel",okBtnLabel:"Confirm selection",clearBtnLabel:"Clear selection",cancelBtnLabel:"Cancel selection",nextMonthLabel:"Next month",prevMonthLabel:"Previous month",nextYearLabel:"Next year",prevYearLabel:"Previous year",changeMonthIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-6 h-6">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M15.75 19.5L8.25 12l7.5-7.5" />
+  </svg>
+  `,nextMultiYearLabel:"Next 24 years",prevMultiYearLabel:"Previous 24 years",switchToMultiYearViewLabel:"Choose year and month",switchToMonthViewLabel:"Choose date",switchToDayViewLabel:"Choose date",startDate:null,startDay:0,format:"dd/mm/yyyy",view:"days",viewChangeIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="0" stroke="currentColor" class="w-6 h-6">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+  </svg>
+  `,min:null,max:null,filter:null,inline:!1,toggleButton:!0,disableToggleButton:!1,disableInput:!1,animations:!0,confirmDateOnSelect:!1,removeOkBtn:!1,removeCancelBtn:!1,removeClearBtn:!1},VT={title:"string",container:"string",disablePast:"boolean",disableFuture:"boolean",monthsFull:"array",monthsShort:"array",weekdaysFull:"array",weekdaysShort:"array",weekdaysNarrow:"array",okBtnText:"string",clearBtnText:"string",cancelBtnText:"string",okBtnLabel:"string",clearBtnLabel:"string",cancelBtnLabel:"string",nextMonthLabel:"string",prevMonthLabel:"string",nextYearLabel:"string",prevYearLabel:"string",nextMultiYearLabel:"string",prevMultiYearLabel:"string",changeMonthIconTemplate:"string",switchToMultiYearViewLabel:"string",switchToMonthViewLabel:"string",switchToDayViewLabel:"string",startDate:"(null|string|date)",startDay:"number",format:"string",view:"string",viewChangeIconTemplate:"string",min:"(null|string|date)",max:"(null|string|date)",filter:"(null|function)",inline:"boolean",toggleButton:"boolean",disableToggleButton:"boolean",disableInput:"boolean",animations:"boolean",confirmDateOnSelect:"boolean",removeOkBtn:"boolean",removeCancelBtn:"boolean",removeClearBtn:"boolean"},FT={fadeIn:aT,fadeOut:lT,fadeInShort:cT,fadeOutShort:hT,modalContainer:dT,datepickerBackdrop:uT,datepickerMain:pT,datepickerHeader:fT,datepickerTitle:_T,datepickerTitleText:gT,datepickerDate:mT,datepickerDateText:bT,datepickerView:vT,datepickerDateControls:yT,datepickerViewChangeButton:TT,datepickerViewChangeIcon:NT,datepickerArrowControls:ET,datepickerPreviousButton:xT,datepickerNextButton:CT,datepickerFooter:AT,datepickerFooterBtn:wT,datepickerClearBtn:kT,datepickerDayHeading:ST,datepickerCell:OT,datepickerCellSmall:IT,datepickerCellLarge:DT,datepickerCellContent:MT,datepickerCellContentSmall:LT,datepickerCellContentLarge:$T,datepickerTable:RT,datepickerToggleButton:PT,datepickerDropdownContainer:BT},WT={fadeIn:"string",fadeOut:"string",fadeInShort:"string",fadeOutShort:"string",modalContainer:"string",datepickerBackdrop:"string",datepickerMain:"string",datepickerHeader:"string",datepickerTitle:"string",datepickerTitleText:"string",datepickerDate:"string",datepickerDateText:"string",datepickerView:"string",datepickerDateControls:"string",datepickerViewChangeButton:"string",datepickerArrowControls:"string",datepickerPreviousButton:"string",datepickerNextButton:"string",datepickerFooter:"string",datepickerFooterBtn:"string",datepickerClearBtn:"string",datepickerDayHeading:"string",datepickerCell:"string",datepickerCellSmall:"string",datepickerCellLarge:"string",datepickerCellContent:"string",datepickerCellContentSmall:"string",datepickerCellContentLarge:"string",datepickerTable:"string",datepickerToggleButton:"string",datepickerDropdownContainer:"string"};class xl{constructor(t,e,i){this._element=t,this._input=m.findOne("input",this._element),this._options=this._getConfig(e),this._classes=this._getClasses(i),this._activeDate=new Date,this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this._headerDate=null,this._headerYear=null,this._headerMonth=null,this._view=this._options.view,this._popper=null,this._focusTrap=null,this._isOpen=!1,this._toggleButtonId=bt("datepicker-toggle-"),this._animations=!window.matchMedia("(prefers-reduced-motion: reduce)").matches&&this._options.animations,this._scrollBar=new Qi,this._element&&O.setData(t,Wo,this),this._init(),this.toggleButton&&this._options.disableToggle&&(this.toggleButton.disabled="true"),this._options.disableInput&&(this._input.disabled="true")}static get NAME(){return El}get container(){return m.findOne(`[${pu}='${this._toggleButtonId}']`)||m.findOne(`[${fu}='${this._toggleButtonId}']`)}get options(){return this._options}get activeCell(){let t;return this._view==="days"&&(t=this._getActiveDayCell()),this._view==="months"&&(t=this._getActiveMonthCell()),this._view==="years"&&(t=this._getActiveYearCell()),t}get activeDay(){return Tt(this._activeDate)}get activeMonth(){return ot(this._activeDate)}get activeYear(){return K(this._activeDate)}get firstYearInView(){return this.activeYear-$o(this._activeDate,ie)}get lastYearInView(){return this.firstYearInView+ie-1}get viewChangeButton(){return m.findOne(Zy,this.container)}get previousButton(){return m.findOne(Qy,this.container)}get nextButton(){return m.findOne(Jy,this.container)}get okButton(){return m.findOne(tT,this.container)}get cancelButton(){return m.findOne(eT,this.container)}get clearButton(){return m.findOne(iT,this.container)}get datesContainer(){return m.findOne(sT,this.container)}get toggleButton(){return m.findOne(nT,this._element)}update(t={}){this._options=this._getConfig({...this._options,...t})}_getConfig(t){const e=g.getDataAttributes(this._element);if(t={...HT,...e,...t},L(El,t,VT),t.max&&typeof t.max=="string"&&(t.max=new Date(t.max)),t.min&&typeof t.min=="string"&&(t.min=new Date(t.min)),t.startDay&&t.startDay!==0){const i=this._getNewDaysOrderArray(t);t.weekdaysNarrow=i}return t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...FT,...e,...t},L(El,t,WT),t}_getContainer(){return m.findOne(this._options.container)}_getNewDaysOrderArray(t){const e=t.startDay,i=t.weekdaysNarrow;return i.slice(e).concat(i.slice(0,e))}_init(){!this.toggleButton&&this._options.toggleButton&&(this._appendToggleButton(),(this._input.readOnly||this._input.disabled)&&(this.toggleButton.style.pointerEvents="none")),this._listenToUserInput(),this._listenToToggleClick(),this._listenToToggleKeydown()}_appendToggleButton(){const t=Wy(this._toggleButtonId,this._classes.datepickerToggleButton);this._element.insertAdjacentHTML("beforeend",t)}open(){if(this._input.readOnly||this._input.disabled)return;const t=_.trigger(this._element,Uy);if(this._isOpen||t.defaultPrevented)return;this._setInitialDate();const e=Py(this._classes.datepickerBackdrop),i=Ry(this._activeDate,this._selectedDate,this._selectedYear,this._selectedMonth,this._options,Fo,ie,Vo,this._toggleButtonId,this._classes);this._options.inline?this._openDropdown(i):(this._openModal(e,i),this._scrollBar.hide()),this._animations&&(g.addClass(this.container,this._classes.fadeIn),g.addClass(e,this._classes.fadeInShort)),this._setFocusTrap(this.container),this._listenToDateSelection(),this._addControlsListeners(),this._updateControlsDisabledState(),this._listenToEscapeClick(),this._listenToKeyboardNavigation(),this._listenToDatesContainerFocus(),this._listenToDatesContainerBlur(),this._asyncFocusDatesContainer(),this._updateViewControlsAndAttributes(this._view),this._isOpen=!0,setTimeout(()=>{this._listenToOutsideClick()},0)}_openDropdown(t){this._popper=Fe(this._input,t,{placement:"bottom-start"}),this._getContainer().appendChild(t)}_openModal(t,e){const i=this._getContainer();i.appendChild(t),i.appendChild(e)}_setFocusTrap(t){this._focusTrap=new Vs(t,{event:"keydown",condition:e=>e.key==="Tab"}),this._focusTrap.trap()}_listenToUserInput(){_.on(this._input,"input",t=>{this._handleUserInput(t.target.value)})}_listenToToggleClick(){_.on(this._element,jo,Yo,t=>{t.preventDefault(),this.open()})}_listenToToggleKeydown(){_.on(this._element,"keydown",Yo,t=>{t.keyCode===Et&&!this._isOpen&&this.open()})}_listenToDateSelection(){_.on(this.datesContainer,"click",t=>{this._handleDateSelection(t)})}_handleDateSelection(t){const e=t.target.nodeName==="DIV"?t.target.parentNode.dataset:t.target.dataset,i=t.target.nodeName==="DIV"?t.target.parentNode:t.target;if(e.teDate&&this._pickDay(e.teDate,i),e.teMonth&&e.teYear){const n=parseInt(e.teMonth,10),o=parseInt(e.teYear,10);this._pickMonth(n,o)}if(e.teYear&&!e.teMonth){const n=parseInt(e.teYear,10);this._pickYear(n)}this._options.inline||this._updateHeaderDate(this._activeDate,this._options.monthsShort,this._options.weekdaysShort)}_updateHeaderDate(t,e,i){const n=m.findOne(oT,this.container),o=ot(t),r=Tt(t),a=Lo(t);n.innerHTML=`${i[a]}, ${e[o]} ${r}`}_addControlsListeners(){_.on(this.nextButton,"click",()=>{this._view==="days"?this.nextMonth():this._view==="years"?this.nextYears():this.nextYear(),this._updateControlsDisabledState()}),_.on(this.previousButton,"click",()=>{this._view==="days"?this.previousMonth():this._view==="years"?this.previousYears():this.previousYear(),this._updateControlsDisabledState()}),_.on(this.viewChangeButton,"click",()=>{this._view==="days"?this._changeView("years"):(this._view==="years"||this._view==="months")&&this._changeView("days")}),this._options.inline||this._listenToFooterButtonsClick()}_listenToFooterButtonsClick(){_.on(this.okButton,"click",()=>this.handleOk()),_.on(this.cancelButton,"click",()=>this.handleCancel()),_.on(this.clearButton,"click",()=>this.handleClear())}_listenToOutsideClick(){_.on(document,jo,t=>{const e=t.target===this.container,i=this.container&&this.container.contains(t.target);!e&&!i&&this.close()})}_listenToEscapeClick(){_.on(document,"keydown",t=>{t.keyCode===xi&&this._isOpen&&this.close()})}_listenToKeyboardNavigation(){_.on(this.datesContainer,"keydown",t=>{this._handleKeydown(t)})}_listenToDatesContainerFocus(){_.on(this.datesContainer,"focus",()=>{this._focusActiveCell(this.activeCell)})}_listenToDatesContainerBlur(){_.on(this.datesContainer,"blur",()=>{this._removeCurrentFocusStyles()})}_handleKeydown(t){this._view==="days"&&this._handleDaysViewKeydown(t),this._view==="months"&&this._handleMonthsViewKeydown(t),this._view==="years"&&this._handleYearsViewKeydown(t)}_handleDaysViewKeydown(t){const e=this._activeDate,i=this.activeCell;switch(t.keyCode){case cs:this._activeDate=as(this._activeDate,et()?1:-1);break;case hs:this._activeDate=as(this._activeDate,et()?-1:1);break;case ut:this._activeDate=as(this._activeDate,-7);break;case ht:this._activeDate=as(this._activeDate,7);break;case Ti:this._activeDate=as(this._activeDate,1-Tt(this._activeDate));break;case Ei:this._activeDate=as(this._activeDate,bl(this._activeDate)-Tt(this._activeDate));break;case yl:this._activeDate=St(this._activeDate,-1);break;case Tl:this._activeDate=St(this._activeDate,1);break;case Et:case Ho:this._selectDate(this._activeDate),this._handleDateSelection(t),t.preventDefault();return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("days"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_asyncFocusDatesContainer(){setTimeout(()=>{this.datesContainer.focus()},0)}_focusActiveCell(t){t&&t.setAttribute("data-te-datepicker-cell-focused","")}_removeHighlightFromCell(t){t&&t.removeAttribute("data-te-datepicker-cell-focused")}_getActiveDayCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>{const n=au(i.dataset.teDate);return yi(n,this._activeDate)})}_handleMonthsViewKeydown(t){const e=this._activeDate,i=this.activeCell;switch(t.keyCode){case cs:this._activeDate=St(this._activeDate,et()?1:-1);break;case hs:this._activeDate=St(this._activeDate,et()?-1:1);break;case ut:this._activeDate=St(this._activeDate,-4);break;case ht:this._activeDate=St(this._activeDate,4);break;case Ti:this._activeDate=St(this._activeDate,-this.activeMonth);break;case Ei:this._activeDate=St(this._activeDate,11-this.activeMonth);break;case yl:this._activeDate=kt(this._activeDate,-1);break;case Tl:this._activeDate=kt(this._activeDate,1);break;case Et:case Ho:this._selectMonth(this.activeMonth);return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("months"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_getActiveMonthCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>{const n=parseInt(i.dataset.teYear,10),o=parseInt(i.dataset.teMonth,10);return n===this.activeYear&&o===this.activeMonth})}_handleYearsViewKeydown(t){const e=this._activeDate,i=this.activeCell,n=4,o=24;switch(t.keyCode){case cs:this._activeDate=kt(this._activeDate,et()?1:-1);break;case hs:this._activeDate=kt(this._activeDate,et()?-1:1);break;case ut:this._activeDate=kt(this._activeDate,-n);break;case ht:this._activeDate=kt(this._activeDate,n);break;case Ti:this._activeDate=kt(this._activeDate,-$o(this._activeDate,o));break;case Ei:this._activeDate=kt(this._activeDate,o-$o(this._activeDate,o)-1);break;case yl:this._activeDate=kt(this._activeDate,-o);break;case Tl:this._activeDate=kt(this._activeDate,o);break;case Et:case Ho:this._selectYear(this.activeYear);return;default:return}qs(e,this._activeDate,this._view,ie,this._options.min,this._options.max)||this._changeView("years"),this._removeHighlightFromCell(i),this._focusActiveCell(this.activeCell),t.preventDefault()}_getActiveYearCell(){const t=m.find("td",this.datesContainer);return Array.from(t).find(i=>parseInt(i.dataset.teYear,10)===this.activeYear)}_setInitialDate(){this._input.value?this._handleUserInput(this._input.value):this._options.startDate?this._activeDate=new Date(this._options.startDate):this._activeDate=new Date}close(){const t=_.trigger(this._element,Ky);!this._isOpen||t.defaultPrevented||(this._removeDatepickerListeners(),this._animations&&g.addClass(this.container,this._classes.fadeOut),this._options.inline?this._closeDropdown():this._closeModal(),this._isOpen=!1,this._view=this._options.view,this.toggleButton?this.toggleButton.focus():this._input.focus())}_closeDropdown(){const t=m.findOne(qy),e=this._getContainer();window.matchMedia("(prefers-reduced-motion: reduce)").matches&&(t&&e.removeChild(t),this._popper&&this._popper.destroy()),t.addEventListener("animationend",()=>{t&&e.removeChild(t),this._popper&&this._popper.destroy()}),this._removeFocusTrap()}_closeModal(){const t=m.findOne(rT),e=m.findOne(Gy);!e||!t||(this._animations?(g.addClass(t,this._classes.fadeOutShort),t.addEventListener("animationend",()=>{this._removePicker(t,e),this._scrollBar.reset()})):(this._removePicker(t,e),this._scrollBar.reset()))}_removePicker(t,e){const i=this._getContainer();i.removeChild(t),i.removeChild(e)}_removeFocusTrap(){this._focusTrap&&(this._focusTrap.disable(),this._focusTrap=null)}_removeDatepickerListeners(){_.off(this.nextButton,"click"),_.off(this.previousButton,"click"),_.off(this.viewChangeButton,"click"),_.off(this.okButton,"click"),_.off(this.cancelButton,"click"),_.off(this.clearButton,"click"),_.off(this.datesContainer,"click"),_.off(this.datesContainer,"keydown"),_.off(this.datesContainer,"focus"),_.off(this.datesContainer,"blur"),_.off(document,jo)}dispose(){this._isOpen&&this.close(),this._removeInputAndToggleListeners();const t=m.findOne(`#${this._toggleButtonId}`);t&&this._element.removeChild(t),O.removeData(this._element,Wo),this._element=null,this._input=null,this._options=null,this._activeDate=null,this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this._headerDate=null,this._headerYear=null,this._headerMonth=null,this._view=null,this._popper=null,this._focusTrap=null}_removeInputAndToggleListeners(){_.off(this._input,"input"),_.off(this._element,jo,Yo),_.off(this._element,"keydown",Yo)}handleOk(){this._confirmSelection(this._headerDate),this.close()}_selectDate(t,e=this.activeCell){const{min:i,max:n,filter:o,disablePast:r,disableFuture:a}=this._options;Ro(t,i,n,o,r,a)||(this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._selectedDate=t,this._selectedYear=K(t),this._selectedMonth=ot(t),this._headerDate=t,(this._options.inline||this.options.confirmDateOnSelect)&&(this._confirmSelection(t),this.close()))}_selectYear(t,e=this.activeCell){this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._headerYear=t,this._asyncChangeView("months")}_selectMonth(t,e=this.activeCell){this._removeCurrentSelectionStyles(),this._removeCurrentFocusStyles(),this._addSelectedStyles(e),this._headerMonth=t,this._asyncChangeView("days")}_removeSelectedStyles(t){t&&t.removeAttribute("data-te-datepicker-cell-selected")}_addSelectedStyles(t){t&&t.setAttribute("data-te-datepicker-cell-selected","")}_confirmSelection(t){if(t){const e=this.formatDate(t);this._input.value=e,_.trigger(this._element,Xy,{date:t}),_.trigger(this._input,"input")}}handleCancel(){this._selectedDate=null,this._selectedYear=null,this._selectedMonth=null,this.close()}handleClear(){this._selectedDate=null,this._selectedMonth=null,this._selectedYear=null,this._headerDate=null,this._headerMonth=null,this._headerYear=null,this._removeCurrentSelectionStyles(),this._input.value="",this._setInitialDate(),this._changeView("days"),this._updateHeaderDate(this._activeDate,this._options.monthsShort,this._options.weekdaysShort)}_removeCurrentSelectionStyles(){const t=m.findOne("[data-te-datepicker-cell-selected]",this.container);t&&t.removeAttribute("data-te-datepicker-cell-selected")}_removeCurrentFocusStyles(){const t=m.findOne("[data-te-datepicker-cell-focused]",this.container);t&&t.removeAttribute("data-te-datepicker-cell-focused")}formatDate(t){const e=Tt(t),i=this._addLeadingZero(Tt(t)),n=this._options.weekdaysShort[Lo(t)],o=this._options.weekdaysFull[Lo(t)],r=ot(t)+1,a=this._addLeadingZero(ot(t)+1),l=this._options.monthsShort[ot(t)],c=this._options.monthsFull[ot(t)],h=K(t).toString().length===2?K(t):K(t).toString().slice(2,4),d=K(t),u=this._options.format.split(/(d{1,4}|m{1,4}|y{4}|yy|!.)/g);let p="";return u.forEach(f=>{switch(f){case"dddd":f=f.replace(f,o);break;case"ddd":f=f.replace(f,n);break;case"dd":f=f.replace(f,i);break;case"d":f=f.replace(f,e);break;case"mmmm":f=f.replace(f,c);break;case"mmm":f=f.replace(f,l);break;case"mm":f=f.replace(f,a);break;case"m":f=f.replace(f,r);break;case"yyyy":f=f.replace(f,d);break;case"yy":f=f.replace(f,h);break}p+=f}),p}_addLeadingZero(t){return parseInt(t,10)<10?`0${t}`:t}_pickDay(t,e){const i=au(t),{min:n,max:o,filter:r,disablePast:a,disableFuture:l}=this._options;Ro(i,n,o,r,a,l)||(this._activeDate=i,this._selectDate(i,e))}_pickYear(t){const{min:e,max:i,disablePast:n,disableFuture:o}=this._options;if(vl(t,e,i,n,o))return;const r=ee(t,this.activeMonth,this.activeDay);this._activeDate=r,this._selectedDate=r,this._selectYear(t)}_pickMonth(t,e){const{min:i,max:n,disablePast:o,disableFuture:r}=this._options;if(lu(t,e,i,n,o,r)||vl(e,i,n,o,r))return;const a=ee(e,t,this.activeDay);this._activeDate=a,this._selectMonth(t)}nextMonth(){const t=St(this._activeDate,1),e=Po(t,this._headerDate,this._options,this._classes);this._activeDate=t,this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}previousMonth(){const t=St(this._activeDate,-1);this._activeDate=t;const e=Po(t,this._headerDate,this._options,this._classes);this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}nextYear(){const t=kt(this._activeDate,1);this._activeDate=t,this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes);const e=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes);this.datesContainer.innerHTML=e}previousYear(){const t=kt(this._activeDate,-1);this._activeDate=t,this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes);const e=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes);this.datesContainer.innerHTML=e}nextYears(){const t=kt(this._activeDate,24);this._activeDate=t;const e=Bo(t,this._selectedYear,this._options,ie,Vo,this._classes);this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}previousYears(){const t=kt(this._activeDate,-24);this._activeDate=t;const e=Bo(t,this._selectedYear,this._options,ie,Vo,this._classes);this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.datesContainer.innerHTML=e}_asyncChangeView(t){setTimeout(()=>{this._changeView(t)},0)}_changeView(t){this._view=t,this.datesContainer.blur(),t==="days"&&(this.datesContainer.innerHTML=Po(this._activeDate,this._headerDate,this._options,this._classes)),t==="months"&&(this.datesContainer.innerHTML=No(this.activeYear,this._selectedYear,this._selectedMonth,this._options,Fo,this._classes)),t==="years"&&(this.datesContainer.innerHTML=Bo(this._activeDate,this._selectedYear,this._options,ie,Vo,this._classes)),this.datesContainer.focus(),this._updateViewControlsAndAttributes(t),this._updateControlsDisabledState()}_updateViewControlsAndAttributes(t){t==="days"&&(this.viewChangeButton.textContent=`${this._options.monthsFull[this.activeMonth]} ${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToMultiYearViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevMonthLabel),this.nextButton.setAttribute("aria-label",this._options.nextMonthLabel)),t==="months"&&(this.viewChangeButton.textContent=`${this.activeYear}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToDayViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevYearLabel),this.nextButton.setAttribute("aria-label",this._options.nextYearLabel)),t==="years"&&(this.viewChangeButton.textContent=`${this.firstYearInView} - ${this.lastYearInView}`,this.viewChangeButton.innerHTML+=pe(this._options,this._classes),this.viewChangeButton.setAttribute("aria-label",this._options.switchToMonthViewLabel),this.previousButton.setAttribute("aria-label",this._options.prevMultiYearLabel),this.nextButton.setAttribute("aria-label",this._options.nextMultiYearLabel))}_updateControlsDisabledState(){xy(this._options.disableFuture,this._activeDate,this._view,ie,this._options.min,this._options.max,this.lastYearInView,this.firstYearInView)?this.nextButton.disabled=!0:this.nextButton.disabled=!1,Cy(this._options.disablePast,this._activeDate,this._view,ie,this._options.min,this._options.max,this.lastYearInView,this.firstYearInView)?this.previousButton.disabled=!0:this.previousButton.disabled=!1}_handleUserInput(t){const e=this._getDelimeters(this._options.format),i=this._parseDate(t,this._options.format,e);yy(i)?(this._activeDate=i,this._selectedDate=i,this._selectedYear=K(i),this._selectedMonth=ot(i),this._headerDate=i):(this._activeDate=new Date,this._selectedDate=null,this._selectedMonth=null,this._selectedYear=null,this._headerDate=null,this._headerMonth=null,this._headerYear=null)}_getDelimeters(t){return t.match(/[^(dmy)]{1,}/g)}_parseDate(t,e,i){let n;i[0]!==i[1]?n=i[0]+i[1]:n=i[0];const o=new RegExp(`[${n}]`),r=t.split(o),a=e.split(o),l=e.indexOf("mmm")!==-1,c=[];for(let b=0;b<a.length;b++)a[b].indexOf("yy")!==-1&&(c[0]={value:r[b],format:a[b]}),a[b].indexOf("m")!==-1&&(c[1]={value:r[b],format:a[b]}),a[b].indexOf("d")!==-1&&a[b].length<=2&&(c[2]={value:r[b],format:a[b]});let h;e.indexOf("mmmm")!==-1?h=this._options.monthsFull:h=this._options.monthsShort;const d=Number(c[0].value),u=l?this.getMonthNumberByMonthName(c[1].value,h):Number(c[1].value)-1,p=Number(c[2].value);return ee(d,u,p)}getMonthNumberByMonthName(t,e){return e.findIndex(i=>i===t)}static getInstance(t){return O.getData(t,Wo)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zT=({format24:s,okLabel:t,cancelLabel:e,headID:i,footerID:n,bodyID:o,pickerID:r,clearLabel:a,inline:l,showClearBtn:c,amLabel:h,pmLabel:d},u)=>{const p=`<div id='${r}' class='${u.timepickerWrapper}' data-te-timepicker-wrapper>
+      <div class="${u.timepickerContainer}">
+        <div class="${u.timepickerElements}" data-te-timepicker-elements-wrapper>
+        <div id='${i}' class='${u.timepickerHead}' style='padding-right:${s?50:10}px'>
+        <div class='${u.timepickerHeadContent}'>
+            <div class="${u.timepickerCurrentWrapper}">
+              <span class="${u.timepickerCurrentButtonWrapper}">
+                <button type='button' class='${u.timepickerCurrentButton}' tabindex="0" data-te-timepicker-active data-te-timepicker-current data-te-timepicker-hour data-te-ripple-init>21</button>
+              </span>
+              <button type='button' class='${u.timepickerDot}' disabled>:</button>
+            <span class="${u.timepickerCurrentButtonWrapper}">
+              <button type='button' class='${u.timepickerCurrentButton}' tabindex="0" data-te-timepicker-current data-te-timepicker-minute data-te-ripple-init>21</button>
+            </span>
+            </div>
+            ${s?"":`<div class="${u.timepickerModeWrapper}">
+                  <button type='button' class="${u.timepickerModeAm}" tabindex="0" data-te-timepicker-am data-te-timepicker-hour-mode data-te-ripple-init>${h}</button>
+                  <button class="${u.timepickerModePm}" tabindex="0" data-te-timepicker-pm data-te-timepicker-hour-mode data-te-ripple-init>${d}</button>
+                </div>`}
+        </div>
+      </div>
+      ${l?"":`<div id='${o}' class='${u.timepickerClockWrapper}' data-te-timepicker-clock-wrapper>
+            <div class='${u.timepickerClock}' data-te-timepicker-clock>
+              <span class='${u.timepickerMiddleDot}' data-te-timepicker-middle-dot></span>
+              <div class='${u.timepickerHandPointer}' data-te-timepicker-hand-pointer>
+                <div class='${u.timepickerPointerCircle}' data-te-timepicker-circle></div>
+              </div>
+              ${s?'<div class="'+u.timepickerClockInner+'" data-te-timepicker-clock-inner></div>':""}
+            </div>
+          </div>`}
+    </div>
+    <div id='${n}' class='${u.timepickerFooterWrapper}'>
+      <div class="${u.timepickerFooter}">
+        ${c?`<button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-clear tabindex="0" data-te-ripple-init>${a}</button>`:""}
+        <button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-cancel tabindex="0" data-te-ripple-init>${e}</button>
+        <button type='button' class='${u.timepickerFooterButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>
+      </div>
+    </div>
+  </div>
+</div>`,f=`<div id='${r}' class='${u.timepickerInlineWrapper}' data-te-timepicker-wrapper>
+        <div class="${u.timepickerInlineContainer}">
+          <div class="${u.timepickerInlineElements}" data-te-timepicker-elements-wrapper>
+          <div id='${i}' class='${u.timepickerInlineHead}'
+          style='padding-right:10px'>
+          <div class='${u.timepickerInlineHeadContent}'>
+              <div class="${u.timepickerCurrentWrapper}">
+                <span class="${u.timepickerInlineHourWrapper}" data-te-timepicker-inline-hour-icons>
+                  <span class="${u.timepickerInlineIconUp}" data-te-timepicker-icon-up data-te-timepicker-icon-inline-hour>
+                    <span class="${u.timepickerInlineIconSvg}">
+                      <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                      <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 15.75l7.5-7.5 7.5 7.5" />
+                      </svg>   
+                    </span>
+                  </span>
+                  <button type='button' class='${u.timepickerInlineCurrentButton}' data-te-timepicker-hour data-te-timepicker-current data-te-timepicker-current-inline tabindex="0" data-te-ripple-init>21</button>
+                  <span class="${u.timepickerInlineIconDown}" data-te-timepicker-icon-inline-hour data-te-timepicker-icon-down>
+                    <span class="${u.timepickerInlineIconSvg}">
+                      <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                      <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+                      </svg>  
+                    </span>
+                  </span>
+                </span>
+                <button type='button' class='${u.timepickerInlineDot}' data-te-timepicker-current-inline disabled>:</button>
+              <span class="${u.timepickerCurrentMinuteWrapper}">
+                <span class="${u.timepickerInlineIconUp}" data-te-timepicker-icon-up data-te-timepicker-icon-inline-minute>
+                  <span class="${u.timepickerInlineIconSvg}">
+                    <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                    <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 15.75l7.5-7.5 7.5 7.5" />
+                    </svg>
+                  </span>
+                </span>
+                <button type='button' class='${u.timepickerInlineCurrentButton}' data-te-timepicker-minute data-te-timepicker-current data-te-timepicker-current-inline tabindex="0" data-te-ripple-init>21</button>
+                <span class="${u.timepickerInlineIconDown}" data-te-timepicker-icon-inline-minute data-te-timepicker-icon-down>
+                  <span class="${u.timepickerInlineIconSvg}">
+                    <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-5 h-5">
+                    <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+                    </svg> 
+                  </span>
+                </span>
+              </span>
+              </div>
+              ${s?"":`<div class="${u.timepickerInlineModeWrapper}">
+                      <button type='button' class="${u.timepickerInlineModeAm}" data-te-timepicker-am data-te-timepicker-hour-mode tabindex="0" data-te-ripple-init>${h}</button>
+                      <button class="${u.timepickerInlineModePm}" data-te-timepicker-hour-mode data-te-timepicker-pm tabindex="0" data-te-ripple-init>${d}</button>
+                      <button type='button' class='${u.timepickerInlineSubmitButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>
+                    </div>`}
+              ${s?`<button class='${u.timepickerInlineSubmitButton}' data-te-timepicker-submit tabindex="0" data-te-ripple-init>${t}</button>`:""}
+          </div>
+        </div>
+      </div>
+    </div>
+</div>`;return l?f:p},jT=(s,t,e)=>{const{iconSVG:i}=s;return`
+  <button id="${t}" tabindex="0" type="button" class="${e.timepickerToggleButton}" data-te-toggle="timepicker" data-te-timepicker-toggle-button data-te-timepicker-icon>
+    ${i}
+  </button>
+`},Ko="data-te-timepicker-disabled",Uo="data-te-timepicker-active",Ai=s=>{if(s==="")return;let t,e,i,n;return _u(s)?(t=s.getHours(),n=t,e=s.getMinutes(),t%=12,n===0&&t===0&&(i="AM"),t=t||12,i===void 0&&(i=Number(n)>=12?"PM":"AM"),e=e<10?`0${e}`:e):([t,e,i]=j(s,!1),n=t,t%=12,n===0&&t===0&&(i="AM"),t=t||12,i===void 0&&(i=Number(n)>=12?"PM":"AM")),{hours:t,minutes:e,amOrPm:i}},_u=s=>s&&Object.prototype.toString.call(s)==="[object Date]"&&!Number.isNaN(s),gu=s=>{if(s==="")return;let t,e;return _u(s)?(t=s.getHours(),e=s.getMinutes()):[t,e]=j(s,!1),e=Number(e)<10?`0${Number(e)}`:e,{hours:t,minutes:e}},YT=(s,t,e)=>_.on(document,s,t,({target:i})=>{if(i.hasAttribute(Uo))return;document.querySelectorAll(t).forEach(o=>{o.hasAttribute(Uo)&&(g.removeClass(o,e.opacity),o.removeAttribute(Uo))}),g.addClass(i,e.opacity),i.setAttribute(Uo,"")}),mu=({clientX:s,clientY:t,touches:e},i,n=!1)=>{const{left:o,top:r}=i.getBoundingClientRect();let a={};return!n||!e?a={x:s-o,y:t-r}:n&&Object.keys(e).length>0&&(a={x:e[0].clientX-o,y:e[0].clientY-r}),a},Xo=()=>navigator.maxTouchPoints&&navigator.maxTouchPoints>2&&/MacIntel/.test(navigator.platform)||/Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent),j=(s,t=!0)=>t?s.value.replace(/:/gi," ").split(" "):s.replace(/:/gi," ").split(" "),bu=(s,t)=>{const[e,i,n]=j(s,!1),[o,r,a]=j(t,!1);return n==="PM"&&a==="AM"||n===a&&e>o||i>r},vu=()=>{const s=new Date,t=s.getHours(),e=s.getMinutes();return`${t}:${e<10?`0${e}`:e}`},Ke=(s,t,e)=>{if(!t)return s;let i=vu();return e&&(i=`${Ai(i).hours}:${Ai(i).minutes} ${Ai(i).amOrPm}`),(s!==""&&bu(i,s)||s==="")&&(s=i),s},Ue=(s,t,e)=>{if(!t)return s;let i=vu();return e&&(i=`${Ai(i).hours}:${Ai(i).minutes} ${Ai(i).amOrPm}`),(s!==""&&!bu(i,s)||s==="")&&(s=i),s},KT=({format12:s,maxTime:t,minTime:e,disablePast:i,disableFuture:n},o,r)=>{const a=j(o)[1];e=Ke(e,i,s),t=Ue(t,n,s);const[l,c,h]=j(t,!1),[d,u,p]=j(e,!1);if(h!==void 0||p!==void 0)return[r,a];if(!(l!==""&&d===""&&Number(r)>Number(l))&&!(l===""&&d!==""&&c===void 0&&u!==""&&Number(r)<Number(d)))return[r,a]},yu=(s,t,e,i)=>{s.forEach(n=>{t=t==="12"&&i?"0":t,(n.textContent==="00"||Number(n.textContent==="12"&&i?"0":n.textContent)>t)&&(g.addClass(n,e.tipsDisabled),n.setAttribute(Ko,""))})},Tu=(s,t,e,i)=>{s.forEach(n=>{t=t==="12"&&i?"0":t,n.textContent!=="00"&&Number(n.textContent==="12"&&i?"0":n.textContent)<Number(t)&&(g.addClass(n,e.tipsDisabled),n.setAttribute(Ko,""))})},Eu=(s,t,e,i)=>{if(t==="12"||t==="24")return;const n=e?12:24;return i==="max"?(Number(s)===n?0:Number(s))>Number(t):(Number(s)===n?0:Number(s))<Number(t)},UT=(s,t,e,i,n,o)=>{s.forEach(r=>{(Eu(i,e,o,"max")||Number(r.textContent)>t&&Number(i)===Number(e))&&(g.addClass(r,n.tipsDisabled),r.setAttribute(Ko,""))})},XT=(s,t,e,i,n,o)=>{s.forEach(r=>{(Eu(i,e,o,"min")||Number(r.textContent)<t&&Number(i)===Number(e))&&(g.addClass(r,n.tipsDisabled),r.setAttribute(Ko,""))})},GT=s=>s.startsWith("0")?Number(s.slice(1)):Number(s),Zs="timepicker",W=`data-te-${Zs}`,xu="[data-te-toggle]",Go=`te.${Zs}`,fe=`.${Go}`,_e=".data-api",Cu=`click${fe}${_e}`,qo=`keydown${fe}${_e}`,Au=`mousedown${fe}${_e}`,wu=`mouseup${fe}${_e}`,ku=`mousemove${fe}${_e}`,Su=`mouseleave${fe}${_e}`,Ou=`mouseover${fe}${_e}`,Iu=`touchmove${fe}${_e}`,Du=`touchend${fe}${_e}`,Mu=`touchstart${fe}${_e}`,qT=`[${W}-am]`,ZT=`[${W}-pm]`,QT=`[${W}-format24]`,Zo=`[${W}-current]`,Qo=`[${W}-hour-mode]`,JT=`[${W}-toggle-button]`,Cl=`${W}-cancel`,Lu=`${W}-clear`,Al=`${W}-submit`,tE=`${W}-icon`,wl=`${W}-icon-up`,kl=`${W}-icon-down`,eE=`${W}-icon-inline-hour`,iE=`${W}-icon-inline-minute`,$u=`${W}-inline-hour-icons`,sE=`${W}-current-inline`,nE="readonly",oE=`${W}-invalid-feedback`,Sl=`${W}-is-invalid`,Xe=`${W}-disabled`,J=`${W}-active`,rE=`${W}-input`,wi=`${W}-clock`,Qs=`${W}-clock-inner`,Ol=`${W}-wrapper`,Ru=`${W}-clock-wrapper`,Jo=`${W}-hour`,Il=`${W}-minute`,tr=`${W}-tips-element`,_t=`${W}-tips-hours`,xt=`${W}-tips-minutes`,Bt=`${W}-tips-inner`,er=`${W}-tips-inner-element`,Pu=`${W}-middle-dot`,Dl=`${W}-hand-pointer`,Ml=`${W}-circle`,Nu=`${W}-modal`,aE={appendValidationInfo:!0,bodyID:"",cancelLabel:"Cancel",clearLabel:"Clear",closeModalOnBackdropClick:!0,closeModalOnMinutesClick:!1,container:"body",defaultTime:"",disabled:!1,disablePast:!1,disableFuture:!1,enableValidation:!0,focusInputAfterApprove:!1,footerID:"",format12:!0,format24:!1,headID:"",increment:!1,inline:!1,invalidLabel:"Invalid Time Format",maxTime:"",minTime:"",modalID:"",okLabel:"Ok",overflowHidden:!0,pickerID:"",readOnly:!1,showClearBtn:!0,switchHoursToMinutesOnClick:!0,iconSVG:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z" />
+</svg>`,withIcon:!0,pmLabel:"PM",amLabel:"AM",animations:!0},lE={appendValidationInfo:"boolean",bodyID:"string",cancelLabel:"string",clearLabel:"string",closeModalOnBackdropClick:"boolean",closeModalOnMinutesClick:"boolean",container:"string",disabled:"boolean",disablePast:"boolean",disableFuture:"boolean",enableValidation:"boolean",footerID:"string",format12:"boolean",format24:"boolean",headID:"string",increment:"boolean",inline:"boolean",invalidLabel:"string",modalID:"string",okLabel:"string",overflowHidden:"boolean",pickerID:"string",readOnly:"boolean",showClearBtn:"boolean",switchHoursToMinutesOnClick:"boolean",defaultTime:"(string|date|number)",iconSVG:"string",withIcon:"boolean",pmLabel:"string",amLabel:"string",animations:"boolean"},cE={tips:"absolute rounded-[100%] w-[32px] h-[32px] text-center cursor-pointer text-[1.1rem] rounded-[100%] bg-transparent flex justify-center items-center font-light focus:outline-none selection:bg-transparent",tipsActive:"text-white bg-[#3b71ca] font-normal",tipsDisabled:"text-[#b3afaf] pointer-events-none bg-transparent",transform:"transition-[transform,height] ease-in-out duration-[400ms]",modal:"z-[1065]",clockAnimation:"animate-[show-up-clock_350ms_linear]",opacity:"!opacity-100",timepickerWrapper:"touch-none opacity-100 z-[1065] inset-0 bg-[#00000066] h-full flex items-center justify-center flex-col fixed",timepickerContainer:"flex items-center justify-center flex-col max-h-[calc(100%-64px)] overflow-y-auto shadow-[0_10px_15px_-3px_rgba(0,0,0,0.07),0_4px_6px_-2px_rgba(0,0,0,0.05)] min-[320px]:max-[825px]:landscape:rounded-lg",timepickerElements:"flex flex-col min-w-[310px] min-h-[325px] bg-white rounded-t-[0.6rem] min-[320px]:max-[825px]:landscape:!flex-row min-[320px]:max-[825px]:landscape:min-w-[auto] min-[320px]:max-[825px]:landscape:min-h-[auto] min-[320px]:max-[825px]:landscape:overflow-y-auto justify-around",timepickerHead:"bg-[#3b71ca] dark:bg-zinc-700 h-[100px] rounded-t-lg pr-[24px] pl-[50px] py-[10px] min-[320px]:max-[825px]:landscape:rounded-tr-none min-[320px]:max-[825px]:landscape:rounded-bl-none min-[320px]:max-[825px]:landscape:p-[10px] min-[320px]:max-[825px]:landscape:pr-[10px] min-[320px]:max-[825px]:landscape:h-auto min-[320px]:max-[825px]:landscape:min-h-[305px] flex flex-row items-center justify-center",timepickerHeadContent:"min-[320px]:max-[825px]:landscape:flex-col flex w-full justify-evenly",timepickerCurrentWrapper:"[direction:ltr] rtl:[direction:rtl]",timepickerCurrentButtonWrapper:"relative h-full",timepickerCurrentButton:"text-[3.75rem] font-light leading-[1.2] tracking-[-0.00833em] text-white opacity-[.54] border-none bg-transparent p-0 min-[320px]:max-[825px]:landscape:text-5xl min-[320px]:max-[825px]:landscape:font-normal cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none ",timepickerDot:"font-light leading-[1.2] tracking-[-0.00833em] text-[3.75rem] opacity-[.54] border-none bg-transparent p-0 text-white min-[320px]:max-[825px]:landscape:text-[3rem] min-[320px]:max-[825px]:landscape:font-normal",timepickerModeWrapper:"flex flex-col justify-center text-[18px] text-[#ffffff8a] min-[320px]:max-[825px]:landscape:!justify-around min-[320px]:max-[825px]:landscape:!flex-row",timepickerModeAm:"p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none",timepickerModePm:"p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none",timepickerClockWrapper:"min-w-[310px] max-w-[325px] min-h-[305px] overflow-x-hidden h-full flex justify-center flex-col items-center dark:bg-zinc-500",timepickerClock:"relative rounded-[100%] w-[260px] h-[260px] cursor-default my-0 mx-auto bg-[#00000012] dark:bg-zinc-600/50",timepickerMiddleDot:"top-1/2 left-1/2 w-[6px] h-[6px] -translate-y-1/2 -translate-x-1/2 rounded-[50%] bg-[#3b71ca] absolute",timepickerHandPointer:"bg-[#3b71ca] bottom-1/2 h-2/5 left-[calc(50%-1px)] rtl:!left-auto origin-[center_bottom_0] rtl:!origin-[50%_50%_0] w-[2px] absolute",timepickerPointerCircle:"-top-[21px] -left-[15px] w-[4px] border-[14px] border-solid border-[#3b71ca] h-[4px] box-content rounded-[100%] absolute",timepickerClockInner:"absolute top-1/2 left-1/2 -translate-y-1/2 -translate-x-1/2 w-[160px] h-[160px] rounded-[100%]",timepickerFooterWrapper:"rounded-b-lg flex justify-between items-center w-full h-[56px] px-[12px] bg-white dark:bg-zinc-500",timepickerFooter:"w-full flex justify-between",timepickerFooterButton:"text-[0.8rem] min-w-[64px] box-border font-medium leading-[40px] rounded-[10px] tracking-[0.1rem] uppercase text-[#3b71ca] dark:text-white border-none bg-transparent transition-[background-color,box-shadow,border] duration-[250ms] ease-[cubic-bezier(0.4,0,0.2,1)] delay-[0ms] outline-none py-0 px-[10px] h-[40px] mb-[10px] hover:bg-[#00000014] focus:bg-[#00000014] focus:outline-none",timepickerInlineWrapper:"touch-none opacity-100 z-[1065] inset-0 bg-[#00000066] h-full flex items-center justify-center flex-col rounded-lg",timepickerInlineContainer:"flex items-center justify-center flex-col max-h-[calc(100%-64px)] overflow-y-auto shadow-[0_10px_15px_-3px_rgba(0,0,0,0.07),0_4px_6px_-2px_rgba(0,0,0,0.05)]",timepickerInlineElements:"flex flex-col min-h-[auto] min-w-[310px] bg-white rounded-[0.6rem] min-[320px]:max-[825px]:landscape:!flex-row min-[320px]:max-[825px]:landscape:rounded-bl-lg min-[320px]:max-[825px]:landscape:min-w-[auto] min-[320px]:max-[825px]:landscape::min-h-[auto] min-[320px]:max-[825px]:landscape:overflow-y-auto justify-around",timepickerInlineHead:"bg-[#3b71ca] dark:bg-zinc-700 h-[100px] rounded-t-lg min-[320px]:max-[825px]:landscape:rounded-tr-none min-[320px]:max-[825px]:landscape:rounded-bl-none min-[320px]:max-[825px]:landscape:p-[10px] min-[320px]:max-[825px]:landscape:pr-[10px] min-[320px]:max-[825px]:landscape:h-auto min-[320px]:max-[825px]:landscape:min-h-[305px] flex flex-row items-center justify-center p-0 rounded-b-lg",timepickerInlineHeadContent:"min-[320px]:max-[825px]:landscape:flex-col flex w-full justify-evenly items-center",timepickerInlineHourWrapper:"relative h-full !opacity-100",timepickerCurrentMinuteWrapper:"relative h-full",timepickerInlineIconUp:"absolute text-white -top-[35px] opacity-0 hover:opacity-100 transition-all duration-200 ease-[ease] cursor-pointer -translate-x-1/2 -translate-y-1/2 left-1/2 w-[30px] h-[30px] flex justify-center items-center",timepickerInlineIconSvg:"h-4 w-4",timepickerInlineCurrentButton:"font-light leading-[1.2] tracking-[-0.00833em] text-white border-none bg-transparent p-0 min-[320px]:max-[825px]:landscape:text-5xl min-[320px]:max-[825px]:landscape:font-normal !opacity-100 cursor-pointer focus:bg-[#00000026] hover:outline-none focus:outline-none text-[2.5rem] hover:bg-[unset]",timepickerInlineIconDown:"absolute text-white -bottom-[47px] opacity-0 hover:opacity-100 transition-all duration-200 ease-[ease] cursor-pointer -translate-x-1/2 -translate-y-1/2 left-1/2 w-[30px] h-[30px] flex justify-center items-center",timepickerInlineDot:"font-light leading-[1.2] tracking-[-0.00833em] opacity-[.54] border-none bg-transparent p-0 text-white min-[320px]:max-[825px]:landscape:text-[3rem] min-[320px]:max-[825px]:landscape:font-normal text-[2.5rem]",timepickerInlineModeWrapper:"flex justify-center text-[18px] text-[#ffffff8a] min-[320px]:max-[825px]:landscape:!justify-around min-[320px]:max-[825px]:landscape:!flex-row",timepickerInlineModeAm:"hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer mr-2 ml-6",timepickerInlineModePm:"hover:bg-[#00000026] hover:outline-none focus:bg-[#00000026] focus:outline-none p-0 bg-transparent border-none text-white opacity-[.54] cursor-pointer",timepickerInlineSubmitButton:"hover:bg-[#00000014] focus:bg-[#00000014] focus:outline-none text-[0.8rem] box-border font-medium leading-[40px] tracking-[.1rem] uppercase border-none bg-transparent [transition:background-color_250ms_cubic-bezier(0.4,0,0.2,1)_0ms,box-shadow_250ms_cubic-bezier(0.4,0,0.2,1)_0ms,border_250ms_cubic-bezier(0.4,0,0.2,1)_0ms] outline-none rounded-[100%] h-[48px] min-w-[48px] inline-block ml-[30px] text-white py-1 px-2 mb-0",timepickerToggleButton:"h-4 w-4 ml-auto absolute outline-none border-none bg-transparent right-1.5 top-1/2 -translate-x-1/2 -translate-y-1/2 transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)] cursor-pointer hover:text-[#3b71ca] focus:text-[#3b71ca] dark:hover:text-[#3b71ca] dark:focus:text-[#3b71ca] dark:text-white"},hE={tips:"string",tipsActive:"string",tipsDisabled:"string",transform:"string",modal:"string",clockAnimation:"string",opacity:"string",timepickerWrapper:"string",timepickerContainer:"string",timepickerElements:"string",timepickerHead:"string",timepickerHeadContent:"string",timepickerCurrentWrapper:"string",timepickerCurrentButtonWrapper:"string",timepickerCurrentButton:"string",timepickerDot:"string",timepickerModeWrapper:"string",timepickerModeAm:"string",timepickerModePm:"string",timepickerClockWrapper:"string",timepickerClock:"string",timepickerMiddleDot:"string",timepickerHandPointer:"string",timepickerPointerCircle:"string",timepickerClockInner:"string",timepickerFooterWrapper:"string",timepickerFooterButton:"string",timepickerInlineWrapper:"string",timepickerInlineContainer:"string",timepickerInlineElements:"string",timepickerInlineHead:"string",timepickerInlineHeadContent:"string",timepickerInlineHourWrapper:"string",timepickerCurrentMinuteWrapper:"string",timepickerInlineIconUp:"string",timepickerInlineIconSvg:"string",timepickerInlineCurrentButton:"string",timepickerInlineIconDown:"string",timepickerInlineDot:"string",timepickerInlineModeWrapper:"string",timepickerInlineModeAm:"string",timepickerInlineModePm:"string",timepickerInlineSubmitButton:"string",timepickerToggleButton:"string"};class Ll{constructor(t,e={},i){ke(this,"_toggleAmPm",t=>{t==="PM"?(this._isPmEnabled=!0,this._isAmEnabled=!1):t==="AM"&&(this._isPmEnabled=!1,this._isAmEnabled=!0)});ke(this,"_toggleBackgroundColorCircle",t=>{if(this._modal.querySelector(`${t}[${J}]`)!==null){g.addStyle(this._circle,{backgroundColor:"#1976d2"});return}g.addStyle(this._circle,{backgroundColor:"transparent"})});ke(this,"_toggleClassActive",(t,{textContent:e},i)=>{const n=[...t].find(o=>Number(o)===Number(e));return i.forEach(o=>{if(!o.hasAttribute(Xe)){if(o.textContent===n){g.addClass(o,this._classes.tipsActive),o.setAttribute(J,"");return}g.removeClass(o,this._classes.tipsActive),o.removeAttribute(J)}})});ke(this,"_makeMinutesDegrees",(t,e)=>{const{increment:i}=this._options;return t<0?(e=Math.round(360+t/6)%60,t=360+Math.round(t/6)*6):(e=Math.round(t/6)%60,t=Math.round(t/6)*6),i&&(t=Math.round(t/30)*30,e=Math.round(t/6)*6/6,e===60&&(e="00")),t>=360&&(t=0),{degrees:t,minute:e,addDegrees:i?30:6}});ke(this,"_makeHourDegrees",(t,e,i)=>{if(t)return this._hasTargetInnerClass(t)?e<0?(i=Math.round(360+e/30)%24,e=360+e):(i=Math.round(e/30)+12,i===12&&(i="00")):e<0?(i=Math.round(360+e/30)%12,e=360+e):(i=Math.round(e/30)%12,(i===0||i>12)&&(i=12)),e>=360&&(e=0),{degrees:e,hour:i,addDegrees:30}});ke(this,"_makeInnerHoursDegrees",(t,e)=>(t<0?(e=Math.round(360+t/30)%24,t=360+t):(e=Math.round(t/30)+12,e===12&&(e="00")),{degrees:t,hour:e,addDegrees:30}));ke(this,"_getAppendClock",(t=[],e=`[${wi}]`,i)=>{let{minTime:n,maxTime:o}=this._options;const{inline:r,format12:a,disablePast:l,disableFuture:c}=this._options;n=Ke(n,l,a),o=Ue(o,c,a);const[h,d,u]=j(o,!1),[p,f,b]=j(n,!1);!r&&a&&this._isInvalidTimeFormat&&!this._AM.hasAttribute(J)&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,""));const v=m.findOne(e),y=360/t.length;function T(A){return A*(Math.PI/180)}if(v===null)return;const x=(v.offsetWidth-32)/2,E=(v.offsetHeight-32)/2,C=x-4;setTimeout(()=>{let A;a&&(A=m.findOne(`${Qo}[${J}]`).textContent),this._handleDisablingTipsMinTime(A,b,f,p),this._handleDisablingTipsMaxTime(A,u,d,h)},0),[...t].forEach((A,w)=>{const S=T(w*y),k=$("span"),D=$("span");D.innerHTML=A,g.addClass(k,this._classes.tips),k.setAttribute(i,"");const I=k.offsetWidth,M=k.offsetHeight;return g.addStyle(k,{left:`${x+Math.sin(S)*C-I}px`,bottom:`${E+Math.cos(S)*C-M}px`}),t.includes("05")&&k.setAttribute(xt,""),t.includes("13")?D.setAttribute(er,""):D.setAttribute(tr,""),k.appendChild(D),v.appendChild(k)})});this._element=t,this._element&&O.setData(t,Go,this),this._document=document,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._currentTime=null,this._toggleButtonId=bt("timepicker-toggle-"),this.hoursArray=["12","1","2","3","4","5","6","7","8","9","10","11"],this.innerHours=["00","13","14","15","16","17","18","19","20","21","22","23"],this.minutesArray=["00","05","10","15","20","25","30","35","40","45","50","55"],this.input=m.findOne("input",this._element),this.dataWithIcon=t.dataset.withIcon,this.dataToggle=t.dataset.toggle,this.customIcon=m.findOne(JT,this._element),this._checkToggleButton(),this.inputFormatShow=m.findOne(QT,this._element),this.inputFormat=this.inputFormatShow===null?"":Object.values(this.inputFormatShow.dataset)[0],this.elementToggle=m.findOne(xu,this._element),this.toggleElement=Object.values(t.querySelector(xu).dataset)[0],this._hour=null,this._minutes=null,this._AM=null,this._PM=null,this._wrapper=null,this._modal=null,this._hand=null,this._circle=null,this._focusTrap=null,this._popper=null,this._interval=null,this._timeoutInterval=null,this._inputValue=this._options.defaultTime!==""?this._options.defaultTime:this.input.value,this._options.format24&&(this._options.format12=!1,this._currentTime=gu(this._inputValue)),this._options.format12&&(this._options.format24=!1,this._currentTime=Ai(this._inputValue)),this._options.readOnly&&this.input.setAttribute(nE,!0),this.inputFormat==="true"&&this.inputFormat!==""&&(this._options.format12=!1,this._options.format24=!0,this._currentTime=gu(this._inputValue)),this._animations=!window.matchMedia("(prefers-reduced-motion: reduce)").matches&&this._options.animations,this.init(),this._isHours=!0,this._isMinutes=!1,this._isInvalidTimeFormat=!1,this._isMouseMove=!1,this._isInner=!1,this._isAmEnabled=!1,this._isPmEnabled=!1,this._options.format12&&!this._options.defaultTime&&(this._isPmEnabled=!0),this._objWithDataOnChange={degrees:null},this._scrollBar=new Qi}static get NAME(){return Zs}init(){const{format12:t,format24:e,enableValidation:i}=this._options;let n,o,r;if(this.input.setAttribute(rE,""),this._currentTime!==void 0){const{hours:a,minutes:l,amOrPm:c}=this._currentTime;n=Number(a)<10?0:"",o=`${n}${Number(a)}:${l}`,r=c,t?this.input.value=`${o} ${r}`:e&&(this.input.value=`${o}`)}else n="",o="",r="",this.input.value="";this.input.value.length>0&&this.input.value!==""&&(this.input.setAttribute(J,""),_.trigger(this.input,"input")),!(this._options===null&&this._element===null)&&(i&&this._getValidate("keydown change blur focus"),this._handleOpen(),this._listenToToggleKeydown())}dispose(){this._removeModal(),this._element!==null&&O.removeData(this._element,Go),setTimeout(()=>{this._element=null,this._options=null,this.input=null,this._focusTrap=null},350),_.off(this._element,"click",`[data-te-toggle='${this.toggleElement}']`),_.off(this._element,"keydown",`[data-te-toggle='${this.toggleElement}']`)}update(t={}){this._options=this._getConfig({...this._options,...t})}_checkToggleButton(){this.customIcon===null&&(this.dataWithIcon!==void 0&&(this._options.withIcon=null,this.dataWithIcon==="true"&&this._appendToggleButton(this._options)),this._options.withIcon&&this._appendToggleButton(this._options))}_appendToggleButton(){const t=jT(this._options,this._toggleButtonId,this._classes);this.input.insertAdjacentHTML("afterend",t)}_getDomElements(){this._hour=m.findOne(`[${Jo}]`),this._minutes=m.findOne(`[${Il}]`),this._AM=m.findOne(qT),this._PM=m.findOne(ZT),this._wrapper=m.findOne(`[${Ol}]`),this._modal=m.findOne(`[${Nu}]`),this._hand=m.findOne(`[${Dl}]`),this._circle=m.findOne(`[${Ml}]`),this._clock=m.findOne(`[${wi}]`),this._clockInner=m.findOne(`[${Qs}]`)}_handlerMaxMinHoursOptions(t,e,i,n,o,r){if(!e&&!i)return!0;const{format24:a,format12:l,disablePast:c,disableFuture:h}=this._options,{_isAmEnabled:d,_isPmEnabled:u}=this,p=r.keyCode,f=r.target.hasAttribute(Qs)||r.target.hasAttribute(Bt)||r.target.hasAttribute(er);i=Ke(i,c,l),e=Ue(e,h,l),typeof e!="number"&&(e=j(e,!1)[0]);const b=e!==""?e*30:"",v=i!==""?i*30:"";t<0&&(t=360+t),t=t===360?0:t;const y=()=>{const w=document.querySelectorAll(`[${tr}]`),S=document.querySelectorAll(`[${er}]`),k=GT(this._hour.innerText);let D,I,M;return p===ut?I=1:p===ht&&(I=-1),k===12&&p===ut?M=1:k===0&&p===ut?M=13:k===0&&p===ht?M=23:k===13&&p===ht?M=0:k===1&&p===ht?M=12:M=k+I,w.forEach(P=>{Number(P.textContent)===M&&(D=P)}),S.forEach(P=>{Number(P.textContent)===M&&(D=P)}),!D.parentElement.hasAttribute(Xe)},T=()=>{const w=i!==""&&i>12?(i-12)*30:"",S=e!==""&&e>12?(e-12)*30:"";if(!(w&&t<w||S&&t>S||e&&e<12))return!0};if(a&&r.type!=="keydown"&&f)return T();if(r.type==="keydown")return y();const x=!o||o==="PM"&&u||i!==""&&o==="AM"&&d,E=!n||n==="PM"&&u||e!==""&&n==="AM"&&d,C=()=>{const w=v===360&&l?0:v;if(i){if(o==="PM"&&d||x&&t<w)return}else return!0;return!0},A=()=>{const w=b===360&&l?0:b;if(e){if(n==="AM"&&u||E&&t>w)return}else return!0;return!0};return C()&&A()}_handleKeyboard(){_.on(this._document,qo,"",t=>{let e,i,n;const{increment:o,maxTime:r,minTime:a,format12:l,disablePast:c,disableFuture:h}=this._options;let d=j(a,!1)[0],u=j(r,!1)[0];const p=j(a,!1)[2],f=j(r,!1)[2];d=Ke(d,c,l),u=Ue(u,h,l),typeof u!="number"&&(u=j(u,!1)[0]);const b=m.findOne(`[${xt}]`)===null,v=m.findOne(`[${Bt}]`)!==null,y=Number(this._hand.style.transform.replace(/[^\d-]/g,"")),T=m.find(`[${xt}]`,this._modal),x=m.find(`[${_t}]`,this._modal),E=m.find(`[${Bt}]`,this._modal);let C=this._makeHourDegrees(t.target,y,e).hour;const{degrees:A,addDegrees:w}=this._makeHourDegrees(t.target,y,e);let{minute:S,degrees:k}=this._makeMinutesDegrees(y,i);const D=this._makeMinutesDegrees(y,i).addDegrees;let{hour:I}=this._makeInnerHoursDegrees(y,n);if(t.keyCode===xi){const M=m.findOne(`[${Cl}]`,this._modal);_.trigger(M,"click")}else if(b){if(v&&(t.keyCode===hs&&(this._isInner=!1,g.addStyle(this._hand,{height:"calc(40% + 1px)"}),this._hour.textContent=this._setHourOrMinute(C>12?1:C),this._toggleClassActive(this.hoursArray,this._hour,x),this._toggleClassActive(this.innerHours,this._hour,E)),t.keyCode===cs&&(this._isInner=!0,g.addStyle(this._hand,{height:"21.5%"}),this._hour.textContent=this._setHourOrMinute(I>=24||I==="00"?0:I),this._toggleClassActive(this.innerHours,this._hour,E),this._toggleClassActive(this.hoursArray,this._hour-1,x))),t.keyCode===ut){if(!this._handlerMaxMinHoursOptions(A+30,u,d,f,p,t))return;g.addStyle(this._hand,{transform:`rotateZ(${A+w}deg)`}),this._isInner?(I+=1,I===24?I=0:(I===25||I==="001")&&(I=13),this._hour.textContent=this._setHourOrMinute(I),this._toggleClassActive(this.innerHours,this._hour,E)):(C+=1,this._hour.textContent=this._setHourOrMinute(C>12?1:C),this._toggleClassActive(this.hoursArray,this._hour,x))}if(t.keyCode===ht){if(!this._handlerMaxMinHoursOptions(A-30,u,d,f,p,t))return;g.addStyle(this._hand,{transform:`rotateZ(${A-w}deg)`}),this._isInner?(I-=1,I===12?I=0:I===-1&&(I=23),this._hour.textContent=this._setHourOrMinute(I),this._toggleClassActive(this.innerHours,this._hour,E)):(C-=1,this._hour.textContent=this._setHourOrMinute(C===0?12:C),this._toggleClassActive(this.hoursArray,this._hour,x))}}else t.keyCode===ut&&(k+=D,g.addStyle(this._hand,{transform:`rotateZ(${k}deg)`}),S+=1,o&&(S+=4,S==="0014"&&(S=5)),this._minutes.textContent=this._setHourOrMinute(S>59?0:S),this._toggleClassActive(this.minutesArray,this._minutes,T),this._toggleBackgroundColorCircle(`[${xt}]`)),t.keyCode===ht&&(k-=D,g.addStyle(this._hand,{transform:`rotateZ(${k}deg)`}),o?S-=5:S-=1,S===-1?S=59:S===-5&&(S=55),this._minutes.textContent=this._setHourOrMinute(S),this._toggleClassActive(this.minutesArray,this._minutes,T),this._toggleBackgroundColorCircle(`[${xt}]`))})}_setActiveClassToTipsOnOpen(t,...e){if(!this._isInvalidTimeFormat)if(this._options.format24){const i=m.find(`[${_t}]`,this._modal),n=m.find(`[${Bt}]`,this._modal);this._addActiveClassToTip(i,t),this._addActiveClassToTip(n,t)}else{[...e].filter(n=>(n.toLowerCase()==="pm"?(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,"")):n.toLowerCase()==="am"?(g.addClass(this._AM,this._classes.opacity),this._AM.setAttribute(J,"")):(g.removeClass(this._AM,this._classes.opacity),g.removeClass(this._PM,this._classes.opacity),this._AM.removeAttribute(J),this._PM.removeAttribute(J)),n));const i=m.find(`[${_t}]`,this._modal);this._addActiveClassToTip(i,t)}}_setTipsAndTimesDependOnInputValue(t,e){const{inline:i,format12:n}=this._options;if(this._isInvalidTimeFormat)this._hour.textContent="12",this._minutes.textContent="00",i||g.addStyle(this._hand,{transform:"rotateZ(0deg)"}),n&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,""));else{const o=t>12?t*30-360:t*30;this._hour.textContent=t,this._minutes.textContent=e,i||(g.addStyle(this._hand,{transform:`rotateZ(${o}deg)`}),g.addStyle(this._circle,{backgroundColor:"#1976d2"}),(Number(t)>12||t==="00")&&g.addStyle(this._hand,{height:"21.5%"}))}}_listenToToggleKeydown(){_.on(this._element,"keydown",`[data-te-toggle='${this.toggleElement}']`,t=>{t.keyCode===Et&&(t.preventDefault(),_.trigger(this.elementToggle,"click"))})}_handleOpen(){const t=this._getContainer();ct.on(this._element,"click",`[data-te-toggle='${this.toggleElement}']`,e=>{if(this._options===null)return;const i=g.getDataAttribute(this.input,"toggle")!==null?200:0;setTimeout(()=>{g.addStyle(this.elementToggle,{pointerEvents:"none"}),this.elementToggle.blur();let n;j(this.input)[0]===""?n=["12","00","PM"]:n=j(this.input);const{modalID:o,inline:r,format12:a}=this._options,[l,c,h]=n,d=$("div");if((Number(l)>12||l==="00")&&(this._isInner=!0),this.input.blur(),e.target.blur(),d.innerHTML=zT(this._options,this._classes),g.addClass(d,this._classes.modal),d.setAttribute(Nu,""),d.setAttribute("role","dialog"),d.setAttribute("tabIndex","-1"),d.setAttribute("id",o),r?(this._popper=Fe(this.input,d,{placement:"bottom-start"}),t.appendChild(d)):(t.appendChild(d),this._scrollBar.hide()),this._getDomElements(),this._animations?this._toggleBackdropAnimation():g.addClass(this._wrapper,this._classes.opacity),this._setActiveClassToTipsOnOpen(l,c,h),this._appendTimes(),this._setActiveClassToTipsOnOpen(l,c,h),this._setTipsAndTimesDependOnInputValue(l,c),this.input.value===""){const u=m.find(`[${_t}]`,this._modal);a&&(g.addClass(this._PM,this._classes.opacity),this._PM.setAttribute(J,"")),this._hour.textContent="12",this._minutes.textContent="00",this._addActiveClassToTip(u,Number(this._hour.textContent))}if(this._handleSwitchTimeMode(),this._handleOkButton(),this._handleClose(),r)this._handleHoverInlineBtn(),this._handleDocumentClickInline(),this._handleInlineClicks();else{this._handleSwitchHourMinute(),this._handleClockClick(),this._handleKeyboard();const u=document.querySelector(`${Zo}[${J}]`);g.addClass(u,this._classes.opacity),g.addStyle(this._hour,{pointerEvents:"none"}),g.addStyle(this._minutes,{pointerEvents:""})}this._focusTrap=new Vs(this._wrapper,{event:"keydown",condition:({key:u})=>u==="Tab"}),this._focusTrap.trap()},i)})}_handleInlineClicks(){let t,e;const i=p=>{let f=p;return f>59?f=0:f<0&&(f=59),f},n=p=>{let f=p;return this._options.format24?(f>24?f=1:f<0&&(f=23),f>23&&(f=0)):(f>12?f=1:f<1&&(f=12),f>12&&(f=1)),f},o=p=>{const f=n(p);this._hour.textContent=this._setHourOrMinute(f)},r=p=>{const f=i(p);this._minutes.textContent=this._setHourOrMinute(f)},a=()=>{t=n(t)+1,o(t)},l=()=>{e=i(e)+1,r(e)},c=()=>{t=n(t)-1,o(t)},h=()=>{e=i(e)-1,r(e)},d=()=>{clearInterval(this._interval),clearTimeout(this._timeoutInterval)},u=p=>{d(),this._timeoutInterval=setTimeout(()=>{this._interval=setInterval(p,100)},500)};ct.on(this._modal,"click mousedown mouseup touchstart touchend contextmenu",`[${wl}], [${kl}]`,p=>{t=Number(this._hour.textContent),e=Number(this._minutes.textContent);const{target:f,type:b}=p,v=b==="mousedown"||b==="touchstart";f.closest(`[${wl}]`)?f.closest(`[${wl}]`).parentNode.hasAttribute($u)?v?u(a):b==="mouseup"||b==="touchend"||b==="contextmenu"?d():a():v?u(l):b==="mouseup"||b==="touchend"||b==="contextmenu"?d():l():f.closest(`[${kl}]`)&&(f.closest(`[${kl}]`).parentNode.hasAttribute($u)?v?u(c):b==="mouseup"||b==="touchend"?d():c():v?u(h):b==="mouseup"||b==="touchend"?d():h())}),_.on(window,qo,p=>{const f=p.code,b=document.activeElement.hasAttribute(Jo),v=document.activeElement.hasAttribute(Il),y=document.activeElement===document.body;switch(t=Number(this._hour.textContent),e=Number(this._minutes.textContent),f){case"ArrowUp":p.preventDefault(),y||b?(this._hour.focus(),a()):v&&l();break;case"ArrowDown":p.preventDefault(),y||b?(this._hour.focus(),c()):v&&h();break}})}_handleClose(){_.on(this._modal,"click",`[${Ol}], [${Cl}], [${Lu}]`,({target:t})=>{const{closeModalOnBackdropClick:e}=this._options,i=()=>{var n;g.addStyle(this.elementToggle,{pointerEvents:"auto"}),this._animations&&this._toggleBackdropAnimation(!0),this._removeModal(),(n=this._focusTrap)==null||n.disable(),this._focusTrap=null,this.elementToggle?this.elementToggle.focus():this.input&&this.input.focus()};if(t.hasAttribute(Lu)){this._toggleAmPm("PM"),this.input.value="",this.input.removeAttribute(J);let n;j(this.input)[0]===""?n=["12","00","PM"]:n=j(this.input);const[o,r,a]=n;this._setTipsAndTimesDependOnInputValue("12","00"),this._setActiveClassToTipsOnOpen(o,r,a),this._hour.click()}else(t.hasAttribute(Cl)||t.hasAttribute(Al)||t.hasAttribute(Ol)&&e)&&i()})}showValueInput(){return this.input.value}_handleOkButton(){ct.on(this._modal,"click",`[${Al}]`,()=>{let{maxTime:t,minTime:e}=this._options;const{format12:i,format24:n,readOnly:o,focusInputAfterApprove:r,disablePast:a,disableFuture:l}=this._options,c=this._document.querySelector(`${Qo}[${J}]`),h=`${this._hour.textContent}:${this._minutes.textContent}`,d=Number(this._hour.textContent),u=d===12&&i?0:d,p=Number(this._minutes.textContent);e=Ke(e,a,i),t=Ue(t,l,i);let[f,b,v]=j(t,!1),[y,T,x]=j(e,!1);y=y==="12"&&i?"00":y,f=f==="12"&&i?"00":f;const E=u<Number(y),C=u>Number(f);let A=!0;c&&(A=v===c.textContent);let w=!0;c&&(w=x===c.textContent);const S=p>b&&u===Number(f),k=p<T&&u===Number(y);if(this.input.setAttribute(J,""),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),t!==""){if(A&&(C||S))return;if(v==="AM"&&c.textContent==="PM")return}e!==""&&(w&&(E||k)||x==="PM"&&c.textContent==="AM")||KT(this._options,this.input,this._hour.textContent)!==void 0&&(this._isInvalidTimeFormat&&this.input.removeAttribute(Sl),!o&&r&&this.input.focus(),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),n?this.input.value=h:c===null?this.input.value=`${h} PM`:this.input.value=`${h} ${c.textContent}`,this._animations&&this._toggleBackdropAnimation(!0),this._removeModal(),_.trigger(this.input,"input.te.timepicker"),_.trigger(this.input,"input"))})}_handleHoverInlineBtn(){ct.on(this._modal,"mouseover mouseleave",`[${sE}]`,({type:t,target:e})=>{const i=m.find(`[${eE}]`,this._modal),n=m.find(`[${iE}]`,this._modal),o=(l,c)=>l.forEach(h=>{if(c){g.addClass(h,this._classes.opacity),h.setAttribute(J,"");return}g.removeClass(h,this._classes.opacity),h.removeAttribute(J)}),a=e.hasAttribute(Jo)?i:n;o(a,t==="mouseover")})}_handleDocumentClickInline(){_.on(document,Cu,({target:t})=>{if(this._modal&&!this._modal.contains(t)&&!t.hasAttribute(tE)){if(clearInterval(this._interval),g.addStyle(this.elementToggle,{pointerEvents:"auto"}),this._removeModal(),!this._animations)return;this._toggleBackdropAnimation(!0)}})}_handleSwitchHourMinute(){YT("click",Zo,this._classes),_.on(this._modal,"click",Zo,()=>{const{format24:t}=this._options,e=m.find(Zo,this._modal),i=m.find(`[${xt}]`,this._modal),n=m.find(`[${_t}]`,this._modal),o=m.find(`[${Bt}]`,this._modal),r=Number(this._hour.textContent),a=Number(this._minutes.textContent),l=(c,h)=>{n.forEach(u=>u.remove()),i.forEach(u=>u.remove()),g.addClass(this._hand,this._classes.transform),setTimeout(()=>{g.removeClass(this._hand,this._classes.transform)},401),this._getAppendClock(c,`[${wi}]`,h);const d=()=>{const u=m.find(`[${_t}]`,this._modal),p=m.find(`[${xt}]`,this._modal);this._addActiveClassToTip(u,r),this._addActiveClassToTip(p,a)};if(!t)setTimeout(()=>{d()},401);else{const u=m.find(`[${Bt}]`,this._modal);setTimeout(()=>{this._addActiveClassToTip(u,r),d()},401)}};e.forEach(c=>{c.hasAttribute(J)&&(c.hasAttribute(Il)?(g.addClass(this._hand,this._classes.transform),g.addStyle(this._hand,{transform:`rotateZ(${this._minutes.textContent*6}deg)`,height:"calc(40% + 1px)"}),t&&o.length>0&&o.forEach(h=>h.remove()),l(this.minutesArray,xt),this._hour.style.pointerEvents="",this._minutes.style.pointerEvents="none"):c.hasAttribute(Jo)&&(g.addStyle(this._hand,{transform:`rotateZ(${this._hour.textContent*30}deg)`}),Number(this._hour.textContent)>12?(g.addStyle(this._hand,{transform:`rotateZ(${this._hour.textContent*30-360}deg)`,height:"21.5%"}),Number(this._hour.textContent)>12&&g.addStyle(this._hand,{height:"21.5%"})):g.addStyle(this._hand,{height:"calc(40% + 1px)"}),t&&this._getAppendClock(this.innerHours,`[${Qs}]`,Bt),o.length>0&&o.forEach(h=>h.remove()),l(this.hoursArray,_t),g.addStyle(this._hour,{pointerEvents:"none"}),g.addStyle(this._minutes,{pointerEvents:""})))})})}_handleDisablingTipsMaxTime(t,e,i,n){if(!this._options.maxTime&&!this._options.disableFuture)return;const o=m.find(`[${_t}]`),r=m.find(`[${Bt}]`),a=m.find(`[${xt}]`);if(!e||e===t){yu(r,n,this._classes,this._options.format12),yu(o,n,this._classes,this._options.format12),UT(a,i,n,this._hour.textContent,this._classes,this._options.format12);return}e==="AM"&&t==="PM"&&(o.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}),a.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}))}_handleDisablingTipsMinTime(t,e,i,n){if(!this._options.minTime&&!this._options.disablePast)return;const o=m.find(`[${_t}]`),r=m.find(`[${Bt}]`),a=m.find(`[${xt}]`);!e||e===t?(Tu(o,n,this._classes,this._options.format12),Tu(r,n,this._classes,this._options.format12),XT(a,i,n,this._hour.textContent,this._classes,this._options.format12)):e==="PM"&&t==="AM"&&(o.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}),a.forEach(l=>{g.addClass(l,this._classes.tipsDisabled),l.setAttribute(Xe,"")}))}_handleSwitchTimeMode(){_.on(document,"click",Qo,({target:t})=>{let{maxTime:e,minTime:i}=this._options;const{disablePast:n,disableFuture:o,format12:r}=this._options;i=Ke(i,n,r),e=Ue(e,o,r);const[a,l,c]=j(e,!1),[h,d,u]=j(i,!1),p=m.find(`[${_t}]`),f=m.find(`[${xt}]`);(()=>{p.forEach(v=>{g.removeClass(v,this._classes.tipsDisabled),v.removeAttribute(Xe)}),f.forEach(v=>{g.removeClass(v,this._classes.tipsDisabled),v.removeAttribute(Xe)})})(),this._handleDisablingTipsMinTime(t.textContent,u,d,h),this._handleDisablingTipsMaxTime(t.textContent,c,l,a),this._toggleAmPm(t.textContent),t.hasAttribute(J)||(m.find(Qo).forEach(y=>{y.hasAttribute(J)&&(g.removeClass(y,this._classes.opacity),y.removeAttribute(J))}),g.addClass(t,this._classes.opacity),t.setAttribute(J,""))})}_handleClockClick(){let{maxTime:t,minTime:e}=this._options;const{disablePast:i,disableFuture:n,format12:o}=this._options;e=Ke(e,i,o),t=Ue(t,n,o);const r=j(t,!1)[2],a=j(e,!1)[2],l=j(t,!1)[0],c=j(e,!1)[0],h=m.findOne(`[${Ru}]`);ct.on(document,`${Au} ${wu} ${ku} ${Su} ${Ou} ${Mu} ${Iu} ${Du}`,"",d=>{Xo()||d.preventDefault();const{type:u,target:p}=d,{closeModalOnMinutesClick:f,switchHoursToMinutesOnClick:b}=this._options,v=m.findOne(`[${xt}]`,this._modal)!==null,y=m.findOne(`[${_t}]`,this._modal)!==null,T=m.findOne(`[${Bt}]`,this._modal)!==null,x=m.find(`[${xt}]`,this._modal),E=mu(d,h),C=h.offsetWidth/2;let A=Math.atan2(E.y-C,E.x-C);if(Xo()){const D=mu(d,h,!0);A=Math.atan2(D.y-C,D.x-C)}let w=null,S=null,k=null;if(u==="mousedown"||u==="mousemove"||u==="touchmove"||u==="touchstart")(u==="mousedown"||u==="touchstart"||u==="touchmove")&&(this._hasTargetInnerClass(p)||p.hasAttribute(Ru)||p.hasAttribute(wi)||p.hasAttribute(xt)||p.hasAttribute(_t)||p.hasAttribute(Ml)||p.hasAttribute(Dl)||p.hasAttribute(Pu)||p.hasAttribute(tr))&&(this._isMouseMove=!0,Xo()&&d.touches&&(w=d.touches[0].clientX,S=d.touches[0].clientY,k=document.elementFromPoint(w,S)));else if(u==="mouseup"||u==="touchend"){if(this._isMouseMove=!1,this._hasTargetInnerClass(p)||p.hasAttribute(wi)||p.hasAttribute(_t)||p.hasAttribute(Ml)||p.hasAttribute(Dl)||p.hasAttribute(Pu)||p.hasAttribute(tr)){if((y||T)&&b){const D=Number(this._hour.textContent)>l||Number(this._hour.textContent)<c;if(this._options.format24&&l!==""&&c!==""&&D)return;if(this._options.format24&&c!==""&&Number(this._hour.textContent)<c)return}_.trigger(this._minutes,"click")}if(v&&f){const D=m.findOne(`[${Al}]`,this._modal);_.trigger(D,"click")}}if(v){let D;const I=Math.trunc(A*180/Math.PI)+90,{degrees:M,minute:P}=this._makeMinutesDegrees(I,D);if(this._handlerMaxMinMinutesOptions(M,P)===void 0)return;const{degrees:X,minute:R}=this._handlerMaxMinMinutesOptions(M,P);if(this._isMouseMove){if(g.addStyle(this._hand,{transform:`rotateZ(${X}deg)`}),R===void 0)return;const z=()=>R>=10||R==="00"?R:`0${R}`;this._minutes.textContent=z(),this._toggleClassActive(this.minutesArray,this._minutes,x),this._toggleBackgroundColorCircle(`[${xt}]`),this._objWithDataOnChange.degreesMinutes=X,this._objWithDataOnChange.minutes=R}}if(y||T){let D,I=Math.trunc(A*180/Math.PI)+90;if(I=Math.round(I/30)*30,g.addStyle(this._circle,{backgroundColor:"#1976d2"}),this._makeHourDegrees(p,I,D)===void 0)return;const M=()=>{if(Xo()&&I&&k){const{degrees:P,hour:X}=this._makeHourDegrees(k,I,D);return this._handleMoveHand(k,X,P)}else{const{degrees:P,hour:X}=this._makeHourDegrees(p,I,D);return this._handleMoveHand(p,X,P)}};this._objWithDataOnChange.degreesHours=I,this._handlerMaxMinHoursOptions(I,l,c,r,a,d)&&M()}d.stopPropagation()})}_hasTargetInnerClass(t){return t.hasAttribute(Qs)||t.hasAttribute(Bt)||t.hasAttribute(er)}_handleMoveHand(t,e,i){const n=m.find(`[${_t}]`,this._modal),o=m.find(`[${Bt}]`,this._modal);this._isMouseMove&&(this._hasTargetInnerClass(t)?g.addStyle(this._hand,{height:"21.5%"}):g.addStyle(this._hand,{height:"calc(40% + 1px)"}),g.addStyle(this._hand,{transform:`rotateZ(${i}deg)`}),this._hour.textContent=e>=10||e==="00"?e:`0${e}`,this._toggleClassActive(this.hoursArray,this._hour,n),this._toggleClassActive(this.innerHours,this._hour,o),this._objWithDataOnChange.hour=e>=10||e==="00"?e:`0${e}`)}_handlerMaxMinMinutesOptions(t,e){let{maxTime:i,minTime:n}=this._options;const{format12:o,increment:r,disablePast:a,disableFuture:l}=this._options;n=Ke(n,a,o),i=Ue(i,l,o);const c=j(i,!1)[1],h=j(n,!1)[1],d=j(i,!1)[0],u=j(n,!1)[0],p=u==="12"&&o?"0":u,f=d==="12"&&o?"0":d,b=j(i,!1)[2],v=j(n,!1)[2],y=c!==""?c*6:"",T=h!==""?h*6:"",x=Number(this._hour.textContent),E=x===12&&o?0:x;if(!b&&!v){if(i!==""&&n!==""){if(Number(f)===E&&t>y||Number(p)===E&&t<T)return t}else if(n!==""&&E<=Number(p)){if(t<=T-6)return t}else if(i!==""&&E>=Number(f)&&t>=y+6)return t}else{if(n!==""){if(v==="PM"&&this._isAmEnabled)return;if(v==="PM"&&this._isPmEnabled){if(E<Number(p))return;if(E<=Number(p)&&t<=T-6)return t}else if(v==="AM"&&this._isAmEnabled){if(E<Number(p))return;if(E<=Number(p)&&t<=T-6)return t}}if(i!==""){if(b==="AM"&&this._isPmEnabled)return;if(b==="PM"&&this._isPmEnabled){if(E>=Number(f)&&t>=y+6)return t}else if(b==="AM"&&this._isAmEnabled&&E>=Number(f)&&t>=y+6)return t}}return r&&(t=Math.round(t/30)*30),t<0?t=360+t:t>=360&&(t=0),{degrees:t,minute:e}}_removeModal(){this._animations?setTimeout(()=>{this._removeModalElements(),this._scrollBar.reset()},300):(this._removeModalElements(),this._scrollBar.reset()),ct.off(this._document,`${Cu} ${qo} ${Au} ${wu} ${ku} ${Su} ${Ou} ${Mu} ${Iu} ${Du}`),_.off(window,qo)}_removeModalElements(){this._modal&&this._modal.remove()}_toggleBackdropAnimation(t=!1){t?this._wrapper.classList.add("animate-[fade-out_350ms_ease-in-out]"):(this._wrapper.classList.add("animate-[fade-in_350ms_ease-in-out]"),this._options.inline||g.addClass(this._clock,this._classes.clockAnimation)),setTimeout(()=>{this._wrapper.classList.remove("animate-[fade-out_350ms_ease-in-out]","animate-[fade-in_350ms_ease-in-out]")},351)}_addActiveClassToTip(t,e){t.forEach(i=>{Number(i.textContent)===Number(e)&&(g.addClass(i,this._classes.tipsActive),i.setAttribute(J,""))})}_setHourOrMinute(t){return t<10?`0${t}`:t}_appendTimes(){const{format24:t}=this._options;if(t){this._getAppendClock(this.hoursArray,`[${wi}]`,_t),this._getAppendClock(this.innerHours,`[${Qs}]`,Bt);return}this._getAppendClock(this.hoursArray,`[${wi}]`,_t)}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...aE,...e,...t},L(Zs,t,lE),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cE,...e,...t},L(Zs,t,hE),t}_getContainer(){return m.findOne(this._options.container)}_getValidate(t){const{format24:e,format12:i,appendValidationInfo:n}=this._options;ct.on(this.input,t,({target:o})=>{if(this._options===null||this.input.value==="")return;const r=/^(0?[1-9]|1[012])(:[0-5]\d) [APap][mM]$/,a=/^([01]\d|2[0-3])(:[0-5]\d)$/,l=r.test(o.value);if(a.test(o.value)!==!0&&e||l!==!0&&i){n&&this.input.setAttribute(Sl,""),g.addStyle(o,{marginBottom:0}),this._isInvalidTimeFormat=!0;return}this.input.removeAttribute(Sl),this._isInvalidTimeFormat=!1;const h=m.findOne(`[${oE}]`);h!==null&&h.remove()})}static getInstance(t){return O.getData(t,Go)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const dE={threshold:10,direction:"all"};let uE=class{constructor(t,e){this._element=t,this._startPosition=null,this._options={...dE,...e}}handleTouchStart(t){this._startPosition=this._getCoordinates(t)}handleTouchMove(t){if(!this._startPosition)return;const e=this._getCoordinates(t),i={x:e.x-this._startPosition.x,y:e.y-this._startPosition.y},n=this._getDirection(i);if(this._options.direction==="all"){if(n.y.value<this._options.threshold&&n.x.value<this._options.threshold)return;const r=n.y.value>n.x.value?n.y.direction:n.x.direction;_.trigger(this._element,`swipe${r}`),_.trigger(this._element,"swipe",{direction:r}),this._startPosition=null;return}const o=this._options.direction==="left"||this._options==="right"?"x":"y";n[o].direction===this._options.direction&&n[o].value>this._options.threshold&&(_.trigger(this._element,`swipe${n[o].direction}`),this._startPosition=null)}handleTouchEnd(){this._startPosition=null}_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection(t){return{x:{direction:t.x<0?"left":"right",value:Math.abs(t.x)},y:{direction:t.y<0?"up":"down",value:Math.abs(t.y)}}}},pE=class{constructor(t,e="swipe",i={}){this._element=t,this._event=e,this.swipe=new uE(t,i),this._touchStartHandler=this._handleTouchStart.bind(this),this._touchMoveHandler=this._handleTouchMove.bind(this),this._touchEndHandler=this._handleTouchEnd.bind(this)}dispose(){this._element.removeEventListener("touchstart",this._touchStartHandler),this._element.removeEventListener("touchmove",this._touchMoveHandler),window.removeEventListener("touchend",this._touchEndHandler)}init(){this._element.addEventListener("touchstart",t=>this._handleTouchStart(t)),this._element.addEventListener("touchmove",t=>this._handleTouchMove(t)),window.addEventListener("touchend",t=>this._handleTouchEnd(t))}_handleTouchStart(t){this[this._event].handleTouchStart(t)}_handleTouchMove(t){this[this._event].handleTouchMove(t)}_handleTouchEnd(t){this[this._event].handleTouchEnd(t)}};const $l="stepper",ir="te.stepper",ds=`.${ir}`,Js=`data-te-${$l}`,tn="horizontal",ge="vertical",fE=`onChangeStep${ds}`,_E=`onChangedStep${ds}`,gE={stepperType:"string",stepperLinear:"boolean",stepperNoEditable:"boolean",stepperActive:"string",stepperCompleted:"string",stepperInvalid:"string",stepperDisabled:"string",stepperVerticalBreakpoint:"number",stepperMobileBreakpoint:"number",stepperMobileBarBreakpoint:"number",stepperAnimationDuration:"number",slideInLeftAnimation:"string",slideOutLeftAnimation:"string",slideInRightAnimation:"string",slideOutRightAnimation:"string"},mE={stepperType:tn,stepperLinear:!1,stepperNoEditable:!1,stepperActive:"",stepperCompleted:"",stepperInvalid:"",stepperDisabled:"",stepperVerticalBreakpoint:0,stepperMobileBreakpoint:0,stepperMobileBarBreakpoint:4,stepperAnimationDuration:800,slideInLeftAnimation:"animate-[slide-in-left_0.8s_both]",slideOutLeftAnimation:"animate-[slide-out-left_0.8s_both]",slideInRightAnimation:"animate-[slide-in-right_0.8s_both]",slideOutRightAnimation:"animate-[slide-out-right_0.8s_both]"},Bu=`mousedown${ds}`,Hu=`keydown${ds}`,bE=`keyup${ds}`,Vu=`resize${ds}`,Ge=`[${Js}-step-ref]`,Ct=`[${Js}-head-ref]`,Fu=`[${Js}-head-text-ref]`,sr=`[${Js}-head-icon-ref]`,At=`[${Js}-content-ref]`;class Wu{constructor(t,e){this._element=t,this._options=this._getConfig(e),this._elementHeight=0,this._steps=m.find(`${Ge}`,this._element),this._currentView="",this._activeStepIndex=0,this._verticalStepperStyles=[],this._timeout=0,this._element&&(O.setData(t,ir,this),this._init())}static get NAME(){return $l}get activeStep(){return this._steps[this._activeStepIndex]}get activeStepIndex(){return this._activeStepIndex}dispose(){this._steps.forEach(t=>{_.off(t,Bu),_.off(t,Hu)}),_.off(window,Vu),O.removeData(this._element,ir),this._element=null}changeStep(t){this._toggleStep(t)}nextStep(){this._toggleStep(this._activeStepIndex+1)}previousStep(){this._toggleStep(this._activeStepIndex-1)}_init(){const t=m.find(`${Ge}`,this._element)[this._activeStepIndex].setAttribute("data-te","active-step"),e=m.find(`${Fu}`,this._element),i=m.find(`${sr}`,this._element);switch(t?(this._activeStepIndex=this._steps.indexOf(t),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperActive),e[this._activeStepIndex].classList.add("font-medium"),i[this._activeStepIndex].classList.add("!bg-primary-100"),i[this._activeStepIndex].classList.add("!text-primary-700")):(e[this._activeStepIndex].classList.add("font-medium"),i[this._activeStepIndex].classList.add("!bg-primary-100"),i[this._activeStepIndex].classList.add("!text-primary-700"),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperActive)),this._bindMouseDown(),this._bindKeysNavigation(),this._options.stepperType){case ge:this._toggleVertical();break;default:this._toggleHorizontal();break}(this._options.stepperVerticalBreakpoint||this._options.stepperMobileBreakpoint)&&this._toggleStepperView(),this._bindResize()}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...mE,...e,...t},L($l,t,gE),t}_bindMouseDown(){this._steps.forEach(t=>{const e=m.findOne(`${Ct}`,t);_.on(e,Bu,i=>{const n=m.parents(i.target,`${Ge}`)[0],o=this._steps.indexOf(n);i.preventDefault(),this._toggleStep(o)})})}_bindResize(){_.on(window,Vu,()=>{this._currentView===ge&&this._setSingleStepHeight(this.activeStep),this._currentView===tn&&this._setHeight(this.activeStep),(this._options.stepperVerticalBreakpoint||this._options.stepperMobileBreakpoint)&&this._toggleStepperView()})}_toggleStepperView(){const t=this._options.stepperVerticalBreakpoint<window.innerWidth,e=this._options.stepperVerticalBreakpoint>window.innerWidth,i=this._options.stepperMobileBreakpoint>window.innerWidth;t&&this._currentView!==tn&&this._toggleHorizontal(),e&&!i&&this._currentView!==ge&&(this._steps.forEach(n=>{const o=m.findOne(`${At}`,n);this._resetStepperHeight(),this._showElement(o)}),this._toggleVertical())}_toggleStep(t){if(this._activeStepIndex===t)return;this._options.stepperNoEditable&&this._toggleDisabled();const e=this._activeStepIndex,i=_.trigger(this.activeStep,fE,{currentStep:this._activeStepIndex,nextStep:t});t>this._activeStepIndex&&i.defaultPrevented||(this._showElement(m.findOne(`${At}`,this._steps[t])),this._toggleActive(t),t>this._activeStepIndex&&this._toggleCompleted(this._activeStepIndex),this._currentView===tn?this._animateHorizontalStep(t):(this._animateVerticalStep(t),this._setSingleStepHeight(this._steps[t])),this._toggleStepTabIndex(m.findOne(`${Ct}`,this.activeStep),m.findOne(`${Ct}`,this._steps[t])),this._activeStepIndex=t,this._steps[this._activeStepIndex].setAttribute("data-te","active-step"),this._steps.forEach((n,o)=>{n[this._activeStepIndex]!==o&&n.removeAttribute("data-te")}),_.trigger(this.activeStep,_E,{currentStep:this._activeStepIndex,prevStep:e}))}_resetStepperHeight(){this._element.style.height=""}_setStepsHeight(){this._steps.forEach(t=>{const e=m.findOne(`${At}`,t),i=window.getComputedStyle(e);this._verticalStepperStyles.push({paddingTop:parseFloat(i.paddingTop),paddingBottom:parseFloat(i.paddingBottom)});const n=e.scrollHeight;e.style.height=`${n}px`})}_setSingleStepHeight(t){const e=m.findOne(`${At}`,t),i=this.activeStep===t,n=this._steps.indexOf(t);let o;i?(e.style.height="",o=e.scrollHeight):o=e.scrollHeight+this._verticalStepperStyles[n].paddingTop+this._verticalStepperStyles[n].paddingBottom,e.style.height=`${o}px`}_toggleVertical(){this._currentView=ge,this._setStepsHeight(),this._hideInactiveSteps()}_toggleHorizontal(){this._currentView=tn,this._setHeight(this.activeStep),this._hideInactiveSteps()}_toggleStepperClass(){m.findOne("[data-te-stepper-type]",this._element)!==null&&this._steps.forEach(e=>{m.findOne(`${At}`,e).classList.remove("!my-0"),m.findOne(`${At}`,e).classList.remove("!py-0"),m.findOne(`${At}`,e).classList.remove("!h-0")})}_toggleStepClass(t,e,i){i&&this._steps[t].classList[e](i)}_bindKeysNavigation(){this._toggleStepTabIndex(!1,m.findOne(`${Ct}`,this.activeStep)),this._steps.forEach(t=>{const e=m.findOne(`${Ct}`,t);_.on(e,Hu,i=>{const n=m.parents(i.currentTarget,`${Ge}`)[0],o=m.next(n,`${Ge}`)[0],r=m.prev(n,`${Ge}`)[0],a=m.findOne(`${Ct}`,n),l=m.findOne(`${Ct}`,this.activeStep);let c=null,h=null;if(o&&(c=m.findOne(`${Ct}`,o)),r&&(h=m.findOne(`${Ct}`,r)),i.keyCode===cs&&this._currentView!==ge&&(h?(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus()):c&&(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus())),i.keyCode===hs&&this._currentView!==ge&&(c?(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus()):h&&(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus())),i.keyCode===ht&&this._currentView===ge&&(i.preventDefault(),c&&(this._toggleStepTabIndex(a,c),this._toggleOutlineStyles(a,c),c.focus())),i.keyCode===ut&&this._currentView===ge&&(i.preventDefault(),h&&(this._toggleStepTabIndex(a,h),this._toggleOutlineStyles(a,h),h.focus())),i.keyCode===Ti){const d=m.findOne(`${Ct}`,this._steps[0]);this._toggleStepTabIndex(a,d),this._toggleOutlineStyles(a,d),d.focus()}if(i.keyCode===Ei){const d=this._steps[this._steps.length-1],u=m.findOne(`${Ct}`,d);this._toggleStepTabIndex(a,u),this._toggleOutlineStyles(a,u),u.focus()}(i.keyCode===Et||i.keyCode===Ho)&&(i.preventDefault(),this.changeStep(this._steps.indexOf(n))),i.keyCode===Ci&&(this._toggleStepTabIndex(a,l),this._toggleOutlineStyles(a,!1),l.focus())}),_.on(e,bE,i=>{const n=m.parents(i.currentTarget,`${Ge}`)[0],o=m.findOne(`${Ct}`,n),r=m.findOne(`${Ct}`,this.activeStep);i.keyCode===Ci&&(this._toggleStepTabIndex(o,r),this._toggleOutlineStyles(!1,r),r.focus())})})}_toggleStepTabIndex(t,e){t&&t.setAttribute("tabIndex",-1),e&&e.setAttribute("tabIndex",0)}_toggleOutlineStyles(t,e){t&&(t.style.outline=""),e&&(e.style.outline="revert")}_toggleDisabled(){const t=m.find(`${Ct}`,this._element),e=m.find(`${sr}`,this._element);t[this._activeStepIndex].classList.add("color-[#858585]"),t[this._activeStepIndex].classList.add("cursor-default"),e[this._activeStepIndex].classList.add("!bg-[#858585]"),this._toggleStepClass(this._activeStepIndex,"add",this._options.stepperDisabled)}_toggleActive(t){const e=m.find(`${Fu}`,this._element),i=m.find(`${sr}`,this._element);e[t].classList.add("font-medium"),i[t].classList.add("!bg-primary-100"),i[t].classList.add("!text-primary-700"),i[t].classList.remove("!bg-success-100"),i[t].classList.remove("!text-success-700"),e[this._activeStepIndex].classList.remove("font-medium"),i[this._activeStepIndex].classList.remove("!bg-primary-100"),i[this._activeStepIndex].classList.remove("!text-primary-700"),this._toggleStepClass(t,"add",this._options.stepperActive),this._toggleStepClass(this._activeStepIndex,"remove",this._options.stepperActive)}_toggleCompleted(t){const e=m.find(`${sr}`,this._element);this._options.stepperNoEditable?this._steps[t].classList.add("pointer-events-none"):(e[t].classList.add("!bg-success-100"),e[t].classList.add("!text-success-700")),e[t].classList.remove("!bg-danger-100"),e[t].classList.remove("!text-danger-700"),this._toggleStepClass(t,"add",this._options.stepperCompleted),this._toggleStepClass(t,"remove",this._options.stepperInvalid)}_hideInactiveSteps(){this._steps.forEach(t=>{if(!t.getAttribute("data-te")){const e=m.findOne(`${At}`,t);e.classList.remove("translate-x-[150%]"),this._hideElement(e)}})}_setHeight(t){const e=m.findOne(`${At}`,t),i=getComputedStyle(e),n=m.findOne(`${Ct}`,t),o=getComputedStyle(n),r=e.offsetHeight+parseFloat(i.marginTop)+parseFloat(i.marginBottom),a=n.offsetHeight+parseFloat(o.marginTop)+parseFloat(o.marginBottom);this._element.style.height=`${a+r}px`}_hideElement(t){!m.parents(t,`${Ge}`)[0].getAttribute("data-te")&&this._currentView!==ge?t.style.display="none":(t.classList.add("!my-0"),t.classList.add("!py-0"),t.classList.add("!h-0"))}_showElement(t){this._currentView===ge?(t.classList.remove("!my-0"),t.classList.remove("!py-0"),t.classList.remove("!h-0")):t.style.display="block"}_animateHorizontalStep(t){clearTimeout(this._timeout),this._clearStepsAnimation();const e=t>this._activeStepIndex,i=m.findOne(`${At}`,this._steps[t]),n=m.findOne(`${At}`,this.activeStep);let o,r;this._steps.forEach((a,l)=>{const c=m.findOne(`${At}`,a);l!==t&&l!==this._activeStepIndex&&this._hideElement(c)}),e?(r=this._options.slideOutLeftAnimation,o=this._options.slideInRightAnimation):(r=this._options.slideOutRightAnimation,o=this._options.slideInLeftAnimation),n.classList.add(r),i.classList.add(o),this._setHeight(this._steps[t]),this._timeout=setTimeout(()=>{this._hideElement(n),this._clearStepsAnimation()},this._options.stepperAnimationDuration)}_clearStepsAnimation(){this._steps.forEach(t=>{m.findOne(`${At}`,t).classList.remove(this._options.slideInLeftAnimation,this._options.slideOutLeftAnimation,this._options.slideInRightAnimation,this._options.slideOutRightAnimation)})}_animateVerticalStep(t){const e=m.findOne(`${At}`,this._steps[t]),i=m.findOne(`${At}`,this.activeStep);this._hideElement(i),this._showElement(e)}static getInstance(t){return O.getData(t,ir)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zu="data-te-input-state-active",nr="data-te-input-selected",ju="data-te-input-multiple-active",Yu="[data-te-form-check-input]";class Ku{constructor(t,e,i,n,o,r,a,l,c,h,d){this.id=t,this.nativeOption=e,this.multiple=i,this.value=n,this.label=o,this.selected=r,this.disabled=a,this.hidden=l,this.secondaryText=c,this.groupId=h,this.icon=d,this.node=null,this.active=!1}select(){this.multiple?this._selectMultiple():this._selectSingle()}_selectSingle(){this.selected||(this.node.setAttribute(nr,""),this.node.setAttribute("aria-selected",!0),this.selected=!0,this.nativeOption&&(this.nativeOption.selected=!0))}_selectMultiple(){if(!this.selected){const t=m.findOne(Yu,this.node);t.checked=!0,this.node.setAttribute(nr,""),this.node.setAttribute("aria-selected",!0),this.selected=!0,this.nativeOption&&(this.nativeOption.selected=!0)}}deselect(){this.multiple?this._deselectMultiple():this._deselectSingle()}_deselectSingle(){this.selected&&(this.node.removeAttribute(nr),this.node.setAttribute("aria-selected",!1),this.selected=!1,this.nativeOption&&(this.nativeOption.selected=!1))}_deselectMultiple(){if(this.selected){const t=m.findOne(Yu,this.node);t.checked=!1,this.node.removeAttribute(nr),this.node.setAttribute("aria-selected",!1),this.selected=!1,this.nativeOption&&(this.nativeOption.selected=!1)}}setNode(t){this.node=t}setActiveStyles(){if(!this.active){if(this.multiple){this.node.setAttribute(ju,"");return}this.active=!0,this.node.setAttribute(zu,"")}}removeActiveStyles(){this.active&&(this.active=!1,this.node.removeAttribute(zu)),this.multiple&&this.node.removeAttribute(ju)}}class vE{constructor(t=!1){this._multiple=t,this._selections=[]}select(t){this._multiple?this._selections.push(t):this._selections=[t]}deselect(t){if(this._multiple){const e=this._selections.findIndex(i=>t===i);this._selections.splice(e,1)}else this._selections=[]}clear(){this._selections=[]}get selection(){return this._selections[0]}get selections(){return this._selections}get label(){return this._selections[0]&&this.selection.label}get labels(){return this._selections.map(t=>t.label).join(", ")}get value(){return this.selections[0]&&this.selection.value}get values(){return this._selections.map(t=>t.value)}}function Rl(s){return s.filter(t=>!t.disabled).every(t=>t.selected)}const yE="data-te-select-form-outline-ref",TE="data-te-select-wrapper-ref",EE="data-te-select-input-ref",xE="data-te-select-clear-btn-ref",CE="data-te-select-dropdown-container-ref",AE="data-te-select-dropdown-ref",wE="data-te-select-options-wrapper-ref",kE="data-te-select-options-list-ref",SE="data-te-select-input-filter-ref",Uu="data-te-select-option-ref",OE="data-te-select-option-all-ref",IE="data-te-select-option-text-ref",DE="data-te-form-check-input",ME="data-te-select-option-group-ref",LE="data-te-select-option-group-label-ref",Xu="data-te-select-selected",$E=`
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 8.25l-7.5 7.5-7.5-7.5" />
+</svg>
+`,RE=s=>{s.code==="Tab"||s.code==="Esc"||s.preventDefault()};function or(s,t,e,i,n){t.selectSize==="default"&&g.addClass(s,e),t.selectSize==="sm"&&g.addClass(s,i),t.selectSize==="lg"&&g.addClass(s,n)}function PE(s,t,e,i,n){const o=document.createElement("div");o.setAttribute("id",s),o.setAttribute(TE,"");const r=$("div");r.setAttribute(yE,""),g.addClass(r,i.formOutline);const a=$("input"),l=t.selectFilter?"combobox":"listbox",c=t.multiple?"true":"false",h=t.disabled?"true":"false";a.setAttribute(EE,""),g.addClass(a,i.selectInput),or(a,t,i.selectInputSizeDefault,i.selectInputSizeSm,i.selectInputSizeLg),t.selectFormWhite&&g.addClass(a,i.selectInputWhite),a.setAttribute("type","text"),a.setAttribute("role",l),a.setAttribute("aria-multiselectable",c),a.setAttribute("aria-disabled",h),a.setAttribute("aria-haspopup","true"),a.setAttribute("aria-expanded",!1),t.tabIndex&&a.setAttribute("tabIndex",t.tabIndex),t.disabled&&a.setAttribute("disabled",""),t.selectPlaceholder!==""&&a.setAttribute("placeholder",t.selectPlaceholder),t.selectValidation?(g.addStyle(a,{"pointer-events":"none","caret-color":"transparent"}),g.addStyle(r,{cursor:"pointer"})):a.setAttribute("readonly","true"),t.selectValidation&&(a.setAttribute("required","true"),a.setAttribute("aria-required","true"),a.addEventListener("keydown",RE));const d=$("div");g.addClass(d,i.selectValidationValid);const u=document.createTextNode(`${t.selectValidFeedback}`);d.appendChild(u);const p=$("div");g.addClass(p,i.selectValidationInvalid);const f=document.createTextNode(`${t.selectInvalidFeedback}`);p.appendChild(f);const b=$("span");b.setAttribute(xE,""),g.addClass(b,i.selectClearBtn),or(b,t,i.selectClearBtnDefault,i.selectClearBtnSm,i.selectClearBtnLg),t.selectFormWhite&&g.addClass(b,i.selectClearBtnWhite);const v=document.createTextNode("✕");b.appendChild(v),b.setAttribute("tabindex","0");const y=$("span");return g.addClass(y,i.selectArrow),or(y,t,i.selectArrowDefault,i.selectArrowSm,i.selectArrowLg),t.selectFormWhite&&g.addClass(y,i.selectArrowWhite),y.innerHTML=n||$E,r.appendChild(a),e&&(g.addClass(e,i.selectLabel),or(e,t,i.selectLabelSizeDefault,i.selectLabelSizeSm,i.selectLabelSizeLg),t.selectFormWhite&&g.addClass(e,i.selectLabelWhite),r.appendChild(e)),t.selectValidation&&(r.appendChild(d),r.appendChild(p)),t.selectClearButton&&r.appendChild(b),r.appendChild(y),o.appendChild(r),o}function Gu(s,t,e,i,n,o,r,a){const l=document.createElement("div");l.setAttribute(CE,""),g.addClass(l,a.selectDropdownContainer),l.setAttribute("id",`${s}`),l.style.width=`${e}px`;const c=document.createElement("div");c.setAttribute("tabindex",0),c.setAttribute(AE,""),g.addClass(c,a.dropdown);const h=$("div");h.setAttribute(wE,""),g.addClass(h,a.optionsWrapper),g.addClass(h,a.optionsWrapperScrollbar),h.style.maxHeight=`${i}px`;const d=qu(o,n,t,a);return h.appendChild(d),t.selectFilter&&c.appendChild(NE(t.selectSearchPlaceholder,a)),c.appendChild(h),r&&c.appendChild(r),l.appendChild(c),l}function qu(s,t,e,i){const n=$("div");n.setAttribute(kE,""),g.addClass(n,i.optionsList);let o;return e.multiple?o=HE(s,t,e,i):o=BE(s,e,i),o.forEach(r=>{n.appendChild(r)}),n}function NE(s,t){const e=$("div");g.addClass(e,t.inputGroup);const i=$("input");return i.setAttribute(SE,""),g.addClass(i,t.selectFilterInput),i.placeholder=s,i.setAttribute("role","searchbox"),i.setAttribute("type","text"),e.appendChild(i),e}function BE(s,t,e){return Zu(s,t,e)}function HE(s,t,e,i){let n=null;e.selectAll&&(n=VE(t,s,e,i));const o=Zu(s,e,i);return n?[n,...o]:o}function Zu(s,t,e){const i=[];return s.forEach(n=>{if(Object.prototype.hasOwnProperty.call(n,"options")){const r=jE(n,t,e);i.push(r)}else i.push(Qu(n,t,e))}),i}function VE(s,t,e,i){const n=Rl(t),o=$("div");o.setAttribute(Uu,"");const r=i.selectAllOption||i.selectOption;return g.addClass(o,r),o.setAttribute(OE,""),g.addStyle(o,{height:`${e.selectOptionHeight}px`}),o.setAttribute("role","option"),o.setAttribute("aria-selected",n),n&&o.setAttribute(Xu,""),o.appendChild(Ju(s,e,i)),s.setNode(o),o}function Qu(s,t,e){if(s.node)return s.node;const i=$("div");return i.setAttribute(Uu,""),g.addClass(i,e.selectOption),g.addStyle(i,{height:`${t.selectOptionHeight}px`}),g.setDataAttribute(i,"id",s.id),i.setAttribute("role","option"),i.setAttribute("aria-selected",s.selected),i.setAttribute("aria-disabled",s.disabled),s.selected&&i.setAttribute(Xu,""),s.disabled&&i.setAttribute("data-te-select-option-disabled",!0),s.hidden&&g.addClass(i,"hidden"),i.appendChild(Ju(s,t,e)),s.icon&&i.appendChild(zE(s,e)),s.setNode(i),i}function Ju(s,t,e){const i=$("span");i.setAttribute(IE,""),g.addClass(i,e.selectOptionText);const n=document.createTextNode(s.label);return t.multiple&&i.appendChild(WE(s,e)),i.appendChild(n),(s.secondaryText||typeof s.secondaryText=="number")&&i.appendChild(FE(s.secondaryText,e)),i}function FE(s,t){const e=$("span");g.addClass(e,t.selectOptionSecondaryText);const i=document.createTextNode(s);return e.appendChild(i),e}function WE(s,t){const e=$("input");e.setAttribute("type","checkbox"),g.addClass(e,t.formCheckInput),e.setAttribute(DE,"");const i=$("label");return s.selected&&e.setAttribute("checked",!0),s.disabled&&e.setAttribute("disabled",!0),e.appendChild(i),e}function zE(s,t){const e=$("span"),i=$("img");return g.addClass(i,t.selectOptionIcon),i.src=s.icon,e.appendChild(i),e}function jE(s,t,e){const i=$("div");i.setAttribute(ME,""),g.addClass(i,e.selectOptionGroup),i.setAttribute("role","group"),i.setAttribute("id",s.id),s.hidden&&g.addClass(i,"hidden");const n=$("label");return n.setAttribute(LE,""),g.addClass(n,e.selectOptionGroupLabel),g.addStyle(n,{height:`${t.selectOptionHeight}px`}),n.setAttribute("for",s.id),n.textContent=s.label,i.appendChild(n),s.options.forEach(o=>{i.appendChild(Qu(o,t,e))}),i}function YE(s,t){const e=$("div");return e.textContent=s,g.addClass(e,t.selectLabel),g.addClass(e,t.selectFakeValue),e}const Pl="select",en="te.select",sn=`.${en}`,KE=`close${sn}`,UE=`open${sn}`,tp=`optionSelect${sn}`,ep=`optionDeselect${sn}`,XE=`valueChange${sn}`,GE="change",ip="data-te-select-init",sp="data-te-select-no-results-ref",np="data-te-select-open",wt="data-te-input-state-active",qe="data-te-input-focused",Nl="data-te-input-disabled",qE="data-te-select-option-group-label-ref",ZE="data-te-select-option-all-ref",nn="data-te-select-selected",QE="[data-te-select-label-ref]",op="[data-te-select-input-ref]",JE="[data-te-select-input-filter-ref]",tx="[data-te-select-dropdown-ref]",ex="[data-te-select-options-wrapper-ref]",rp="[data-te-select-options-list-ref]",ix="[data-te-select-option-ref]",sx="[data-te-select-clear-btn-ref]",nx="[data-te-select-custom-content-ref]",ox=`[${sp}]`,ap="[data-te-select-form-outline-ref]",rx="[data-te-select-toggle]",Bl="[data-te-input-notch-ref]",ax={selectAutoSelect:!1,selectContainer:"body",selectClearButton:!1,disabled:!1,selectDisplayedLabels:5,selectFormWhite:!1,multiple:!1,selectOptionsSelectedLabel:"options selected",selectOptionHeight:38,selectAll:!0,selectAllLabel:"Select all",selectSearchPlaceholder:"Search...",selectSize:"default",selectVisibleOptions:5,selectFilter:!1,selectFilterDebounce:300,selectNoResultText:"No results",selectValidation:!1,selectValidFeedback:"Valid",selectInvalidFeedback:"Invalid",selectPlaceholder:""},lx={selectAutoSelect:"boolean",selectContainer:"string",selectClearButton:"boolean",disabled:"boolean",selectDisplayedLabels:"number",selectFormWhite:"boolean",multiple:"boolean",selectOptionsSelectedLabel:"string",selectOptionHeight:"number",selectAll:"boolean",selectAllLabel:"string",selectSearchPlaceholder:"string",selectSize:"string",selectVisibleOptions:"number",selectFilter:"boolean",selectFilterDebounce:"number",selectNoResultText:"string",selectValidation:"boolean",selectValidFeedback:"string",selectInvalidFeedback:"string",selectPlaceholder:"string"},cx={dropdown:"relative outline-none min-w-[100px] m-0 scale-y-[0.8] opacity-0 bg-white shadow-[0_2px_5px_0_rgba(0,0,0,0.16),_0_2px_10px_0_rgba(0,0,0,0.12)] transition duration-200 motion-reduce:transition-none data-[te-select-open]:scale-100 data-[te-select-open]:opacity-100 dark:bg-zinc-700",formCheckInput:"relative float-left mt-[0.15rem] mr-[8px] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 dark:border-neutral-600 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary dark:checked:border-primary checked:bg-primary dark:checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:ml-[0.25rem] checked:after:-mt-px checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-t-0 checked:after:border-l-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:ml-[0.25rem] checked:focus:after:-mt-px checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-t-0 checked:focus:after:border-l-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent",formOutline:"relative",initialized:"hidden",inputGroup:"flex items-center whitespace-nowrap p-2.5 text-center text-base font-normal leading-[1.6] text-gray-700 dark:bg-zinc-800 dark:text-gray-200 dark:placeholder:text-gray-200",noResult:"flex items-center px-4",optionsList:"list-none m-0 p-0",optionsWrapper:"overflow-y-auto",optionsWrapperScrollbar:"[&::-webkit-scrollbar]:w-1 [&::-webkit-scrollbar]:h-1 [&::-webkit-scrollbar-button]:block [&::-webkit-scrollbar-button]:h-0 [&::-webkit-scrollbar-button]:bg-transparent [&::-webkit-scrollbar-track-piece]:bg-transparent [&::-webkit-scrollbar-track-piece]:rounded-none [&::-webkit-scrollbar-track-piece]: [&::-webkit-scrollbar-track-piece]:rounded-l [&::-webkit-scrollbar-thumb]:h-[50px] [&::-webkit-scrollbar-thumb]:bg-[#999] [&::-webkit-scrollbar-thumb]:rounded",selectArrow:"absolute right-3 text-[0.8rem] cursor-pointer peer-focus:text-primary peer-data-[te-input-focused]:text-primary group-data-[te-was-validated]/validation:peer-valid:text-green-600 group-data-[te-was-validated]/validation:peer-invalid:text-[rgb(220,76,100)] w-5 h-5",selectArrowWhite:"text-gray-50 peer-focus:!text-white peer-data-[te-input-focused]:!text-white",selectArrowDefault:"top-2",selectArrowLg:"top-[13px]",selectArrowSm:"top-1",selectClearBtn:"absolute top-2 right-9 text-black cursor-pointer focus:text-primary outline-none dark:text-gray-200",selectClearBtnWhite:"!text-gray-50",selectClearBtnDefault:"top-2 text-base",selectClearBtnLg:"top-[11px] text-base",selectClearBtnSm:"top-1 text-[0.8rem]",selectDropdownContainer:"z-[1070]",selectFakeValue:"transform-none hidden data-[te-input-state-active]:block",selectFilterInput:"relative m-0 block w-full min-w-0 flex-auto rounded border border-solid border-gray-300 bg-transparent bg-clip-padding px-3 py-1.5 text-base font-normal text-gray-700 transition duration-300 ease-in-out motion-reduce:transition-none focus:border-primary focus:text-gray-700 focus:shadow-te-primary focus:outline-none dark:text-gray-200 dark:placeholder:text-gray-200",selectInput:"peer block min-h-[auto] w-full rounded border-0 bg-transparent outline-none transition-all duration-200 ease-linear focus:placeholder:opacity-100 data-[te-input-state-active]:placeholder:opacity-100 motion-reduce:transition-none dark:text-gray-200 dark:placeholder:text-gray-200 [&:not([data-te-input-placeholder-active])]:placeholder:opacity-0 cursor-pointer data-[te-input-disabled]:bg-[#e9ecef] data-[te-input-disabled]:cursor-default group-data-[te-was-validated]/validation:mb-4 dark:data-[te-input-disabled]:bg-zinc-600",selectInputWhite:"!text-gray-50",selectInputSizeDefault:"py-[0.32rem] px-3 leading-[1.6]",selectInputSizeLg:"py-[0.32rem] px-3 leading-[2.15]",selectInputSizeSm:"py-[0.33rem] px-3 text-xs leading-[1.5]",selectLabel:"pointer-events-none absolute top-0 left-3 mb-0 max-w-[90%] origin-[0_0] truncate text-gray-500 transition-all duration-200 ease-out peer-focus:scale-[0.8] peer-focus:text-primary peer-data-[te-input-state-active]:scale-[0.8] motion-reduce:transition-none dark:text-gray-200 dark:peer-focus:text-gray-200 data-[te-input-state-active]:scale-[0.8] dark:peer-focus:text-primary",selectLabelWhite:"!text-gray-50",selectLabelSizeDefault:"pt-[0.37rem] leading-[1.6] peer-focus:-translate-y-[0.9rem] peer-data-[te-input-state-active]:-translate-y-[0.9rem] data-[te-input-state-active]:-translate-y-[0.9rem]",selectLabelSizeLg:"pt-[0.37rem] leading-[2.15] peer-focus:-translate-y-[1.15rem] peer-data-[te-input-state-active]:-translate-y-[1.15rem] data-[te-input-state-active]:-translate-y-[1.15rem]",selectLabelSizeSm:"pt-[0.37rem] text-xs leading-[1.5] peer-focus:-translate-y-[0.75rem] peer-data-[te-input-state-active]:-translate-y-[0.75rem] data-[te-input-state-active]:-translate-y-[0.75rem]",selectOption:"flex flex-row items-center justify-between w-full px-4 truncate text-gray-700 bg-transparent select-none cursor-pointer data-[te-input-multiple-active]:bg-black/5 hover:[&:not([data-te-select-option-disabled])]:bg-black/5 data-[te-input-state-active]:bg-black/5 data-[te-select-option-selected]:data-[te-input-state-active]:bg-black/5 data-[te-select-selected]:data-[te-select-option-disabled]:cursor-default data-[te-select-selected]:data-[te-select-option-disabled]:text-gray-400 data-[te-select-selected]:data-[te-select-option-disabled]:bg-transparent data-[te-select-option-selected]:bg-black/[0.02] data-[te-select-option-disabled]:text-gray-400 data-[te-select-option-disabled]:cursor-default group-data-[te-select-option-group-ref]/opt:pl-7 dark:text-gray-200 dark:hover:[&:not([data-te-select-option-disabled])]:bg-white/30 dark:data-[te-input-state-active]:bg-white/30 dark:data-[te-select-option-selected]:data-[te-input-state-active]:bg-white/30 dark:data-[te-select-option-disabled]:text-gray-400 dark:data-[te-input-multiple-active]:bg-white/30",selectAllOption:"",selectOptionGroup:"group/opt",selectOptionGroupLabel:"flex flex-row items-center w-full px-4 truncate bg-transparent text-black/50 select-none dark:text-gray-300",selectOptionIcon:"w-7 h-7 rounded-full",selectOptionSecondaryText:"block text-[0.8rem] text-gray-500 dark:text-gray-300",selectOptionText:"group",selectValidationValid:"hidden absolute -mt-3 w-auto text-sm text-green-600 cursor-pointer group-data-[te-was-validated]/validation:peer-valid:block",selectValidationInvalid:"hidden absolute -mt-3 w-auto text-sm text-[rgb(220,76,100)] cursor-pointer group-data-[te-was-validated]/validation:peer-invalid:block"},hx={dropdown:"string",formCheckInput:"string",formOutline:"string",initialized:"string",inputGroup:"string",noResult:"string",optionsList:"string",optionsWrapper:"string",optionsWrapperScrollbar:"string",selectArrow:"string",selectArrowDefault:"string",selectArrowLg:"string",selectArrowSm:"string",selectClearBtn:"string",selectClearBtnDefault:"string",selectClearBtnLg:"string",selectClearBtnSm:"string",selectDropdownContainer:"string",selectFakeValue:"string",selectFilterInput:"string",selectInput:"string",selectInputSizeDefault:"string",selectInputSizeLg:"string",selectInputSizeSm:"string",selectLabel:"string",selectLabelSizeDefault:"string",selectLabelSizeLg:"string",selectLabelSizeSm:"string",selectOption:"string",selectAllOption:"string",selectOptionGroup:"string",selectOptionGroupLabel:"string",selectOptionIcon:"string",selectOptionSecondaryText:"string",selectOptionText:"string"};class on{constructor(t,e,i){this._element=t,this._config=this._getConfig(e),this._classes=this._getClasses(i),this._config.selectPlaceholder&&!this._config.multiple&&this._addPlaceholderOption(),this._optionsToRender=this._getOptionsToRender(t),this._plainOptions=this._getPlainOptions(this._optionsToRender),this._filteredOptionsList=null,this._selectionModel=new vE(this.multiple),this._activeOptionIndex=-1,this._activeOption=null,this._wrapperId=bt("select-wrapper-"),this._dropdownContainerId=bt("select-dropdown-container-"),this._selectAllId=bt("select-all-"),this._debounceTimeoutId=null,this._dropdownHeight=this._config.selectOptionHeight*this._config.selectVisibleOptions,this._popper=null,this._input=null,this._label=m.next(this._element,QE)[0],this._notch=null,this._fakeValue=null,this._isFakeValueActive=!1,this._customContent=m.next(t,nx)[0],this._toggleButton=null,this._elementToggle=null,this._wrapper=null,this._inputEl=null,this._dropdownContainer=null,this._container=null,this._selectAllOption=null,this._init(),this._mutationObserver=null,this._isOpen=!1,this._addMutationObserver(),this._element&&O.setData(t,en,this)}static get NAME(){return Pl}get filterInput(){return m.findOne(JE,this._dropdownContainer)}get dropdown(){return m.findOne(tx,this._dropdownContainer)}get optionsList(){return m.findOne(rp,this._dropdownContainer)}get optionsWrapper(){return m.findOne(ex,this._dropdownContainer)}get clearButton(){return m.findOne(sx,this._wrapper)}get options(){return this._filteredOptionsList?this._filteredOptionsList:this._plainOptions}get value(){return this.multiple?this._selectionModel.values:this._selectionModel.value}get multiple(){return this._config.multiple}get hasSelectAll(){return this.multiple&&this._config.selectAll}get hasSelection(){return this._selectionModel.selection||this._selectionModel.selections.length>0}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...ax,...e,...t},this._element.hasAttribute("multiple")&&(t.multiple=!0),this._element.hasAttribute("disabled")&&(t.disabled=!0),this._element.tabIndex&&(t.tabIndex=this._element.getAttribute("tabIndex")),L(Pl,t,lx),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...cx,...e,...t},L(Pl,t,hx),t}_addPlaceholderOption(){const t=new Option("","",!0,!0);t.hidden=!0,t.selected=!0,this._element.prepend(t)}_getOptionsToRender(t){const e=[];return t.childNodes.forEach(n=>{if(n.nodeName==="OPTGROUP"){const o={id:bt("group-"),label:n.label,disabled:n.hasAttribute("disabled"),hidden:n.hasAttribute("hidden"),options:[]};n.childNodes.forEach(a=>{a.nodeName==="OPTION"&&o.options.push(this._createOptionObject(a,o))}),e.push(o)}else n.nodeName==="OPTION"&&e.push(this._createOptionObject(n))}),e}_getPlainOptions(t){if(!m.findOne("optgroup",this._element))return t;const i=[];return t.forEach(n=>{Object.prototype.hasOwnProperty.call(n,"options")?n.options.forEach(r=>{i.push(r)}):i.push(n)}),i}_createOptionObject(t,e={}){const i=bt("option-"),n=e.id?e.id:null,o=e.disabled?e.disabled:!1,r=t.selected||t.hasAttribute(nn),a=t.hasAttribute("disabled")||o,l=t.hasAttribute("hidden")||e&&e.hidden,c=this.multiple,h=t.value,d=t.label,u=g.getDataAttribute(t,"selectSecondaryText"),p=g.getDataAttribute(t,"select-icon");return new Ku(i,t,c,h,d,r,a,l,u,n,p)}_getNavigationOptions(){const t=this.options.filter(e=>!e.hidden);return this.hasSelectAll?[this._selectAllOption,...t]:t}_init(){this._renderMaterialWrapper(),this._wrapper=m.findOne(`#${this._wrapperId}`),this._input=m.findOne(op,this._wrapper),this._config.disabled&&this._input.setAttribute(Nl,"");const t=this._config.selectContainer;t==="body"?this._container=document.body:this._container=m.findOne(t),this._initOutlineInput(),this._setDefaultSelections(),this._updateInputValue(),this._appendFakeValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._bindComponentEvents(),this.hasSelectAll&&(this._selectAllOption=this._createSelectAllOption()),this._dropdownContainer=Gu(this._dropdownContainerId,this._config,this._input.offsetWidth,this._dropdownHeight,this._selectAllOption,this._optionsToRender,this._customContent,this._classes),this._setFirstActiveOption(),this._listenToFocusChange()}_renderMaterialWrapper(){const t=PE(this._wrapperId,this._config,this._label,this._classes,this._config.customArrow);this._element.parentNode.insertBefore(t,this._element),g.addClass(this._element,this._classes.initialized),t.appendChild(this._element)}_initOutlineInput(){const t=m.findOne(ap,this._wrapper);new Z(t,{inputFormWhite:this._config.selectFormWhite},this._classes).init(),this._notch=m.findOne(Bl,this._wrapper)}_bindComponentEvents(){this._listenToComponentKeydown(),this._listenToWrapperClick(),this._listenToClearBtnClick(),this._listenToClearBtnKeydown()}_setDefaultSelections(){this.options.forEach(t=>{t.selected&&this._selectionModel.select(t)})}_listenToComponentKeydown(){_.on(this._wrapper,"keydown",this._handleKeydown.bind(this))}_handleKeydown(t){this._isOpen&&!this._config.selectFilter?this._handleOpenKeydown(t):this._handleClosedKeydown(t)}_handleOpenKeydown(t){const e=t.keyCode,i=e===xi||e===ut&&t.altKey||e===Ci;if(e===Ci&&this._config.selectAutoSelect&&!this.multiple&&this._handleAutoSelection(this._activeOption),i){this.close(),this._input.focus();return}switch(e){case ht:this._setNextOptionActive(),this._scrollToOption(this._activeOption);break;case ut:this._setPreviousOptionActive(),this._scrollToOption(this._activeOption);break;case Ti:this._setFirstOptionActive(),this._scrollToOption(this._activeOption);break;case Ei:this._setLastOptionActive(),this._scrollToOption(this._activeOption);break;case Et:t.preventDefault(),this._activeOption&&(this.hasSelectAll&&this._activeOptionIndex===0?this._handleSelectAll():this._handleSelection(this._activeOption));return;default:return}t.preventDefault()}_handleClosedKeydown(t){const e=t.keyCode;if(e===Et&&t.preventDefault(),(e===Et||e===ht&&t.altKey||e===ht&&this.multiple)&&this.open(),this.multiple)switch(e){case ht:this.open();break;case ut:this.open();break;default:return}else switch(e){case ht:this._setNextOptionActive(),this._handleSelection(this._activeOption);break;case ut:this._setPreviousOptionActive(),this._handleSelection(this._activeOption);break;case Ti:this._setFirstOptionActive(),this._handleSelection(this._activeOption);break;case Ei:this._setLastOptionActive(),this._handleSelection(this._activeOption);break;default:return}t.preventDefault()}_scrollToOption(t){if(!t)return;let e;const i=this.options.filter(h=>!h.hidden);this.hasSelectAll?e=i.indexOf(t)+1:e=i.indexOf(t);const n=this._getNumberOfGroupsBeforeOption(e),o=e+n,r=this.optionsWrapper,a=r.offsetHeight,l=this._config.selectOptionHeight,c=r.scrollTop;if(e>-1){const h=o*l,d=h+l>c+a;h<c?r.scrollTop=h:d?r.scrollTop=h-a+l:r.scrollTop=c}}_getNumberOfGroupsBeforeOption(t){const e=this.options.filter(r=>!r.hidden),i=this._optionsToRender.filter(r=>!r.hidden),n=this.hasSelectAll?t-1:t;let o=0;for(let r=0;r<=n;r++)e[r].groupId&&i[o]&&i[o].id&&e[r].groupId===i[o].id&&o++;return o}_setNextOptionActive(){let t=this._activeOptionIndex+1;const e=this._getNavigationOptions();if(e[t]){for(;e[t].disabled;)if(t+=1,!e[t])return;this._updateActiveOption(e[t],t)}}_setPreviousOptionActive(){let t=this._activeOptionIndex-1;const e=this._getNavigationOptions();if(e[t]){for(;e[t].disabled;)if(t-=1,!e[t])return;this._updateActiveOption(e[t],t)}}_setFirstOptionActive(){const e=this._getNavigationOptions();this._updateActiveOption(e[0],0)}_setLastOptionActive(){const t=this._getNavigationOptions(),e=t.length-1;this._updateActiveOption(t[e],e)}_updateActiveOption(t,e){const i=this._activeOption;i&&i.removeActiveStyles(),t.setActiveStyles(),this._activeOptionIndex=e,this._activeOption=t}_listenToWrapperClick(){_.on(this._wrapper,"click",()=>{this.toggle()})}_listenToClearBtnClick(){_.on(this.clearButton,"click",t=>{t.preventDefault(),t.stopPropagation(),this._handleClear()})}_listenToClearBtnKeydown(){_.on(this.clearButton,"keydown",t=>{t.keyCode===Et&&(this._handleClear(),t.preventDefault(),t.stopPropagation())})}_handleClear(){if(this.multiple)this._selectionModel.clear(),this._deselectAllOptions(this.options),this.hasSelectAll&&this._updateSelectAllState();else{const t=this._selectionModel.selection;this._selectionModel.clear(),t.deselect()}this._fakeValue.textContent="",this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._emitValueChangeEvent(null),this._emitNativeChangeEvent()}_listenToOptionsClick(){_.on(this.optionsWrapper,"click",t=>{if(t.target.hasAttribute(qE))return;const i=t.target.nodeName==="DIV"?t.target:m.closest(t.target,ix);if(i.hasAttribute(ZE)){this._handleSelectAll();return}const o=i.dataset.teId,r=this.options.find(a=>a.id===o);r&&!r.disabled&&this._handleSelection(r)})}_handleSelectAll(){this._selectAllOption.selected?(this._deselectAllOptions(this.options),this._selectAllOption.deselect()):(this._selectAllOptions(this.options),this._selectAllOption.select()),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent()}_selectAllOptions(t){t.forEach(e=>{!e.selected&&!e.disabled&&(this._selectionModel.select(e),e.select())})}_deselectAllOptions(t){t.forEach(e=>{e.selected&&!e.disabled&&(this._selectionModel.deselect(e),e.deselect())})}_handleSelection(t){this.multiple?(this._handleMultiSelection(t),this.hasSelectAll&&this._updateSelectAllState()):this._handleSingleSelection(t),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility()}_handleAutoSelection(t){this._singleOptionSelect(t),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility()}_handleSingleSelection(t){this._singleOptionSelect(t),this.close(),this._input.focus()}_singleOptionSelect(t){const e=this._selectionModel.selections[0];e&&e!==t&&(this._selectionModel.deselect(e),e.deselect(),e.node.setAttribute(nn,!1),_.trigger(this._element,ep,{value:e.value})),(!e||e&&t!==e)&&(this._selectionModel.select(t),t.select(),t.node.setAttribute(nn,!0),_.trigger(this._element,tp,{value:t.value}),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent())}_handleMultiSelection(t){t.selected?(this._selectionModel.deselect(t),t.deselect(),t.node.setAttribute(nn,!1),_.trigger(this._element,ep,{value:t.value})):(this._selectionModel.select(t),t.select(),t.node.setAttribute(nn,!0),_.trigger(this._element,tp,{value:t.value})),this._emitValueChangeEvent(this.value),this._emitNativeChangeEvent()}_emitValueChangeEvent(t){_.trigger(this._element,XE,{value:t})}_emitNativeChangeEvent(){_.trigger(this._element,GE)}_updateInputValue(){const t=this.multiple?this._selectionModel.labels:this._selectionModel.label;let e;this.multiple&&this._config.selectDisplayedLabels!==-1&&this._selectionModel.selections.length>this._config.selectDisplayedLabels?e=`${this._selectionModel.selections.length} ${this._config.selectOptionsSelectedLabel}`:e=t,!this.multiple&&!this._isSelectionValid(this._selectionModel.selection)?this._input.value="":this._isLabelEmpty(this._selectionModel.selection)?this._input.value=" ":e?this._input.value=e:this.multiple||!this._optionsToRender[0]?this._input.value="":this._input.value=this._optionsToRender[0].label}_isSelectionValid(t){return!(t&&(t.disabled||t.value===""))}_isLabelEmpty(t){return!!(t&&t.label==="")}_appendFakeValue(){if(!this._selectionModel.selection||this._selectionModel._multiple)return;const t=this._selectionModel.selection.label;this._fakeValue=YE(t,this._classes),m.findOne(ap,this._wrapper).appendChild(this._fakeValue)}_updateLabelPosition(){const t=this._element.hasAttribute(ip),e=this._input.value!=="";this._label&&(t&&(e||this._isOpen||this._isFakeValueActive)?(this._label.setAttribute(wt,""),this._notch.setAttribute(wt,"")):(this._label.removeAttribute(wt),this._notch.removeAttribute(wt,"")))}_updateLabelPositionWhileClosing(){this._label&&(this._input.value!==""||this._isFakeValueActive?(this._label.setAttribute(wt,""),this._notch.setAttribute(wt,"")):(this._label.removeAttribute(wt),this._notch.removeAttribute(wt)))}_updateFakeLabelPosition(){this._fakeValue&&(this._input.value===""&&this._fakeValue.innerHTML!==""&&!this._config.selectPlaceholder?(this._isFakeValueActive=!0,this._fakeValue.setAttribute(wt,"")):(this._isFakeValueActive=!1,this._fakeValue.removeAttribute(wt)))}_updateClearButtonVisibility(){if(!this.clearButton)return;this._selectionModel.selection||this._selectionModel.selections.length>0?g.addStyle(this.clearButton,{display:"block"}):g.addStyle(this.clearButton,{display:"none"})}_updateSelectAllState(){const t=this._selectAllOption.selected,e=Rl(this.options);!e&&t?this._selectAllOption.deselect():e&&!t&&this._selectAllOption.select()}toggle(){this._isOpen?this.close():this.open()}open(){const t=this._config.disabled,e=_.trigger(this._element,UE);this._isOpen||t||e.defaultPrevented||(this._openDropdown(),this._updateDropdownWidth(),this._setFirstActiveOption(),this._scrollToOption(this._activeOption),this._config.selectFilter&&(setTimeout(()=>{this.filterInput.focus()},0),this._listenToSelectSearch(),this._listenToDropdownKeydown()),this._listenToOptionsClick(),this._listenToOutsideClick(),this._listenToWindowResize(),this._isOpen=!0,this._updateLabelPosition(),this._setInputActiveStyles())}_openDropdown(){this._popper=Fe(this._input,this._dropdownContainer,{placement:"bottom-start",modifiers:[{name:"offset",options:{offset:[0,1]}}]}),this._container.appendChild(this._dropdownContainer),setTimeout(()=>{this.dropdown.setAttribute(np,"")},0)}_updateDropdownWidth(){const t=this._input.offsetWidth;g.addStyle(this._dropdownContainer,{width:`${t}px`})}_setFirstActiveOption(){const t=this._getNavigationOptions(),e=this._activeOption;e&&e.removeActiveStyles();const i=this.multiple?this._selectionModel.selections[0]:this._selectionModel.selection;i?(this._activeOption=i,i.setActiveStyles(),this._activeOptionIndex=t.findIndex(n=>n===i)):(this._activeOption=null,this._activeOptionIndex=-1)}_setInputActiveStyles(){this._input.setAttribute(qe,""),m.findOne(Bl,this._wrapper).setAttribute(qe,"")}_listenToWindowResize(){_.on(window,"resize",this._handleWindowResize.bind(this))}_handleWindowResize(){this._dropdownContainer&&this._updateDropdownWidth()}_listenToSelectSearch(){this.filterInput.addEventListener("input",t=>{const e=t.target.value,i=this._config.selectFilterDebounce;this._debounceFilter(e,i)})}_debounceFilter(t,e){this._debounceTimeoutId&&clearTimeout(this._debounceTimeoutId),this._debounceTimeoutId=setTimeout(()=>{this._filterOptions(t)},e)}_filterOptions(t){const e=[];this._optionsToRender.forEach(o=>{const r=Object.prototype.hasOwnProperty.call(o,"options"),a=!r&&o.label.toLowerCase().includes(t.toLowerCase()),l={};r&&(l.label=o.label,l.options=this._filter(t,o.options),l.options.length>0&&e.push(l)),a&&e.push(o)});const i=this._config.selectNoResultText!=="",n=e.length!==0;if(n)this._updateOptionsListTemplate(e),this._popper.forceUpdate(),this._filteredOptionsList=this._getPlainOptions(e),this.hasSelectAll&&this._updateSelectAllState(),this._setFirstActiveOption();else if(!n&&i){const o=this._getNoResultTemplate();this.optionsWrapper.innerHTML=o}}_updateOptionsListTemplate(t){const e=m.findOne(rp,this._dropdownContainer)||m.findOne(ox,this._dropdownContainer),i=qu(t,this._selectAllOption,this._config,this._classes);this.optionsWrapper.removeChild(e),this.optionsWrapper.appendChild(i)}_getNoResultTemplate(){return`<div class="${this._classes.noResult}" ${sp} style="height: ${this._config.selectOptionHeight}px">${this._config.selectNoResultText}</div>`}_filter(t,e){const i=t.toLowerCase();return e.filter(n=>n.label.toLowerCase().includes(i))}_listenToDropdownKeydown(){_.on(this.dropdown,"keydown",this._handleOpenKeydown.bind(this))}_listenToOutsideClick(){this._outsideClick=this._handleOutSideClick.bind(this),_.on(document,"click",this._outsideClick)}_listenToFocusChange(t=!0){if(t===!1){_.off(this._input,"focus",()=>this._notch.setAttribute(qe,"")),_.off(this._input,"blur",()=>this._notch.removeAttribute(qe));return}_.on(this._input,"focus",()=>this._notch.setAttribute(qe,"")),_.on(this._input,"blur",()=>this._notch.removeAttribute(qe))}_handleOutSideClick(t){const e=this._wrapper&&this._wrapper.contains(t.target),i=t.target===this._dropdownContainer,n=this._dropdownContainer&&this._dropdownContainer.contains(t.target);let o;this._toggleButton||(this._elementToggle=m.find(rx)),this._elementToggle&&this._elementToggle.forEach(r=>{const a=g.getDataAttribute(r,"select-toggle");(a===this._element.id||this._element.classList.contains(a))&&(this._toggleButton=r,o=this._toggleButton.contains(t.target))}),!e&&!i&&!n&&!o&&this.close()}close(){const t=_.trigger(this._element,KE),e=oo(this._dropdownContainer.children[0]);!this._isOpen||t.defaultPrevented||(this._config.selectFilter&&this.hasSelectAll&&(this._resetFilterState(),this._updateOptionsListTemplate(this._optionsToRender),this._config.multiple&&this._updateSelectAllState()),this._removeDropdownEvents(),this.dropdown.removeAttribute(np),setTimeout(()=>{this._input.removeAttribute(qe),this._input.blur(),m.findOne(Bl,this._wrapper).removeAttribute(qe),this._label&&!this.hasSelection&&(this._label.removeAttribute(wt),this._notch.setAttribute(wt,""),this._input.removeAttribute(wt),this._notch.removeAttribute(wt)),this._updateLabelPositionWhileClosing()},0),setTimeout(()=>{this._container&&this._dropdownContainer.parentNode===this._container&&this._container.removeChild(this._dropdownContainer),this._popper.destroy(),this._isOpen=!1,_.off(this.dropdown,"transitionend")},e))}_resetFilterState(){this.filterInput.value="",this._filteredOptionsList=null}_removeDropdownEvents(){_.off(document,"click",this._outsideClick),this._config.selectFilter&&_.off(this.dropdown,"keydown"),_.off(this.optionsWrapper,"click")}_addMutationObserver(){this._mutationObserver=new MutationObserver(()=>{this._wrapper&&(this._updateSelections(),this._updateDisabledState())}),this._observeMutationObserver()}_updateSelections(){this._optionsToRender=this._getOptionsToRender(this._element),this._plainOptions=this._getPlainOptions(this._optionsToRender),this._selectionModel.clear(),this._setDefaultSelections(),this._updateInputValue(),this._updateFakeLabelPosition(),this._updateLabelPosition(),this._updateClearButtonVisibility(),this.hasSelectAll&&this._updateSelectAllState();const t=this._config.filter&&this.filterInput&&this.filterInput.value;this._isOpen&&!t?(this._updateOptionsListTemplate(this._optionsToRender),this._setFirstActiveOption()):this._isOpen&&t?(this._filterOptions(this.filterInput.value),this._setFirstActiveOption()):this._dropdownContainer=Gu(this._dropdownContainerId,this._config,this._input.offsetWidth,this._dropdownHeight,this._selectAllOption,this._optionsToRender,this._customContent,this._classes)}_updateDisabledState(){const t=m.findOne(op,this._wrapper);this._element.hasAttribute("disabled")?(this._config.disabled=!0,t.setAttribute("disabled",""),t.setAttribute(Nl,"")):(this._config.disabled=!1,t.removeAttribute("disabled"),t.removeAttribute(Nl))}_observeMutationObserver(){this._mutationObserver&&this._mutationObserver.observe(this._element,{attributes:!0,childList:!0,characterData:!0,subtree:!0})}_disconnectMutationObserver(){this.mutationObserver&&(this._mutationObserver.disconnect(),this._mutationObserver=null)}_createSelectAllOption(){const t=this._selectAllId,e=null,i=!0,n="select-all",o=this._config.selectAllLabel,r=Rl(this.options),a=!1,l=!1,c=null,h=null,d=null;return new Ku(t,e,i,n,o,r,a,l,c,h,d)}dispose(){this._removeComponentEvents(),this._destroyMaterialSelect(),this._listenToFocusChange(!1),O.removeData(this._element,en)}_removeComponentEvents(){_.off(this.input,"click"),_.off(this.wrapper,this._handleKeydown.bind(this)),_.off(this.clearButton,"click"),_.off(this.clearButton,"keydown"),_.off(window,"resize",this._handleWindowResize.bind(this))}_destroyMaterialSelect(){this._isOpen&&this.close(),this._destroyMaterialTemplate()}_destroyMaterialTemplate(){const t=this._wrapper.parentNode,e=m.find("label",this._wrapper);t.appendChild(this._element),e.forEach(i=>{t.appendChild(i)}),e.forEach(i=>{i.removeAttribute(wt)}),g.removeClass(this._element,this._classes.initialized),this._element.removeAttribute(ip),t.removeChild(this._wrapper)}setValue(t){this.options.filter(i=>i.selected).forEach(i=>i.nativeOption.selected=!1),Array.isArray(t)?t.forEach(i=>{this._selectByValue(i)}):this._selectByValue(t),this._updateSelections(),this._emitValueChangeEvent(this.value)}_selectByValue(t){const e=this.options.find(i=>i.value===t);return e?(e.nativeOption.selected=!0,!0):!1}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,en);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new on(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,en)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const dx=({inputID:s,labelText:t},e)=>`<div data-te-chips-input-wrapper data-te-input-wrapper-init class="${e.chipsInputWrapper}">
+      <input
+          type="text"
+          class="${e.chipsInput}"
+          id="${s}"
+          placeholder="Example label" />
+        <label
+          for="${s}"
+          class="${e.chipsLabel}"
+          >${t}
+        </label>
+      </div>
+    </div>`,ux=({text:s,iconSVG:t},e)=>`<div data-te-chip-init data-te-ripple-init class="${e.chipElement}">
+    <span data-te-chip-text>${s}</span> 
+      <span data-te-chip-close class="${e.chipCloseIcon}">
+        ${t}
+      </span>
+  </div>`,rr="chip",px=`te.${rr}`,lp="data-te-chip-close",Hl=`[${lp}]`,fx="delete.te.chips",_x="select.te.chip",gx='<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-3 h-3"> <path stroke-linecap="round" stroke-linejoin="round" d="M6 18L18 6M6 6l12 12" /></svg>',mx={text:"string",closeIcon:"boolean",img:"object",iconSVG:"string"},bx={text:"",closeIcon:!1,img:{path:"",alt:""},iconSVG:gx},vx={icon:"float-right pl-[8px] text-[16px] opacity-[.53] cursor-pointer fill-[#afafaf] hover:text-[#8b8b8b] transition-all duration-200 ease-in-out",chipElement:"flex justify-between items-center h-[32px] leading-loose py-[5px] px-[12px] mr-4 my-[5px] text-[13px] font-normal text-[#4f4f4f] cursor-pointer bg-[#eceff1] dark:text-white dark:bg-neutral-600 rounded-[16px] transition-[opacity] duration-300 ease-linear [word-wrap: break-word] shadow-none normal-case hover:!shadow-none active:bg-[#cacfd1] inline-block font-medium leading-normal text-[#4f4f4f] text-center no-underline align-middle cursor-pointer select-none border-[.125rem] border-solid border-transparent py-1.5 px-3 text-xs rounded",chipCloseIcon:"w-4 float-right pl-[8px] text-[16px] opacity-[.53] cursor-pointer fill-[#afafaf] hover:fill-[#8b8b8b] dark:fill-gray-400 dark:hover:fill-gray-100 transition-all duration-200 ease-in-out"},yx={icon:"string",chipElement:"string",chipCloseIcon:"string"};class ki{constructor(t,e={},i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i)}static get NAME(){return rr}init(){this._appendCloseIcon(),this._handleDelete(),this._handleTextChip(),this._handleClickOnChip()}dispose(){this._element=null,this._options=null,_.off(this._element,"click")}appendChip(){const{text:t,closeIcon:e,iconSVG:i}=this._options;return ux({text:t,closeIcon:e,iconSVG:i},this._classes)}_appendCloseIcon(t=this._element){if(!(m.find(Hl,this._element).length>0)&&this._options.closeIcon){const e=$("span");e.classList=this._classes.icon,e.setAttribute(lp),e.innerHTML=this._options.iconSVG,t.insertAdjacentElement("beforeend",e)}}_handleClickOnChip(){_.on(this._element,"click",t=>{const{textContent:e}=t.target,i={};i.tag=e.trim(),_.trigger(_x,{event:t,obj:i})})}_handleDelete(){m.find(Hl,this._element).length!==0&&_.on(this._element,"click",Hl,()=>{_.trigger(this._element,fx),this._element.remove()})}_handleTextChip(){this._element.innerText===""&&(this._element.innerText=this._options.text)}_getConfig(t){const e={...bx,...g.getDataAttributes(this._element),...t};return L(rr,e,mx),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...vx,...e,...t},L(rr,t,yx),t}static getInstance(t){return O.getData(t,px)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const rn="chips",an=`data-te-${rn}`,cp=`te.${rn}`,Tx=`${an}-input-init`,Wt=`${an}-active`,hp=`${an}-initial`,dp=`${an}-placeholder`,Ex=`${an}-input-wrapper`,Vl="data-te-chip-init",up="data-te-chip-close",pp="data-te-chip-text",xx=`[${Wt}]`,Fl=`[${Vl}]`,Cx=`${Fl}${xx}`,Wl=`[${up}]`,Ax=`[${Ex}]`,wx=`[${pp}]`,kx=`[${dp}]`,Sx="data-te-input-notch-leading-ref",Ox="data-te-input-notch-middle-ref",Ix=`[${Sx}]`,Dx=`[${Ox}]`,us="data-te-input-state-active",zl="[data-te-input-notch-ref]",Mx="add.te.chips",Lx="arrowDown.te.chips",$x="arrowLeft.te.chips",Rx="arrowRight.te.chips",Px="arrowUp.te.chips",fp="delete.te.chips",_p="select.te.chips",Nx={inputID:"string",parentSelector:"string",initialValues:"array",editable:"boolean",labelText:"string",inputClasses:"object",inputOptions:"object"},Bx={inputID:bt("chips-input-"),parentSelector:"",initialValues:[{tag:"init1"},{tag:"init2"}],editable:!1,labelText:"Example label",inputClasses:{},inputOptions:{}},Hx={opacity:"opacity-0",inputWrapperPadding:"p-[5px]",transition:"transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)]",contentEditable:"outline-none !border-[3px] !border-solid !border-[#b2b3b4]",chipsInputWrapper:"relative flex items-center flex-wrap transition-all duration-300 ease-[cubic-bezier(0.25,0.1,0.25,1)]",chipsInput:"peer block min-h-[auto] w-[150px] rounded border-0 bg-transparent py-[0.32rem] px-3 leading-[1.6] outline-none transition-all duration-200 ease-linear focus:placeholder:opacity-100 data-[te-input-state-active]:placeholder:opacity-100 motion-reduce:transition-none dark:text-gray-200 dark:placeholder:text-gray-200 [&:not([data-te-input-placeholder-active])]:placeholder:opacity-0",chipsLabel:"pointer-events-none absolute top-0 left-3 mb-0 max-w-[90%] origin-[0_0] truncate pt-[0.37rem] leading-[1.6] text-gray-500 transition-all duration-200 ease-out peer-focus:-translate-y-[0.9rem] peer-focus:scale-[0.8] peer-focus:text-primary peer-data-[te-input-state-active]:-translate-y-[0.9rem] peer-data-[te-input-state-active]:scale-[0.8] motion-reduce:transition-none dark:text-gray-200 dark:peer-focus:text-gray-200"},Vx={opacity:"string",inputWrapperPadding:"string",transition:"string",contentEditable:"string",chipsInputWrapper:"string",chipsInput:"string",chipsLabel:"string"};class gp extends ki{constructor(e,i={},n){super(e,i);ke(this,"_handleBlurInput",({target:e})=>{e.value.length>0&&this._handleCreateChip(e,e.value),this.allChips.length>0?(e.setAttribute(Wt,""),this.input.setAttribute(us,""),m.findOne(zl,this.input.parentNode).setAttribute(us,""),this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" "))):(e.removeAttribute(Wt),this.input.removeAttribute(us),m.findOne(zl,this.input.parentNode).removeAttribute(us),this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" "))),this.allChips.forEach(i=>i.removeAttribute(Wt))});this._element=e,this._inputInstance=null,this._element&&O.setData(e,cp,this),this._options=this._getConfig(i),this._classes=this._getClasses(n),this.numberClicks=0,this.init()}static get NAME(){return rn}get activeChip(){return m.findOne(Cx,this._element)}get input(){return m.findOne("input",this._element)}get allChips(){return m.find(Fl,this._element)}get chipsInputWrapper(){return m.findOne(Ax,this._element)}init(){this._setChipsClass(),this._appendInputToElement(dp),this._handleInitialValue(),this._handleInputText(),this._handleKeyboard(),this._handleChipsOnSelect(),this._handleEditable(),this._handleChipsFocus(),this._handleClicksOnChips(),this._inputInstance._getLabelWidth(),this._inputInstance._applyNotch()}dispose(){this._element=null,this._options=null}_getNotchData(){this._notchMiddle=m.findOne(Dx,this._element),this._notchLeading=m.findOne(Ix,this._element)}_setChipsClass(){this._element.setAttribute(Tx,"")}_handleDeleteEvents(e){const[i]=this.allChips.slice(-1);if(this.activeChip===null)i.remove(),this._handleEvents(e,fp);else{const n=this.allChips.findIndex(a=>a===this.activeChip),o=this._handleActiveChipAfterRemove(n),r=[];if(this.activeChip===null)return;this.activeChip.remove(),this._handleEvents(e,fp),this.numberClicks=n,o.setAttribute(Wt,""),this.allChips.forEach(a=>{a.hasAttribute(Wt)&&(r.push(a),r.length>1&&this.allChips.forEach(l=>l.remove()))})}}_handleUpEvents(e){this.numberClicks+=1,this.numberClicks===this.allChips.length+1&&(this.numberClicks=0),this._handleRightKeyboardArrow(this.numberClicks),this._handleEvents(e,Rx),this._handleEvents(e,Px)}_handleDownEvents(e){this.numberClicks-=1,this.numberClicks<=0&&(this.numberClicks=this.allChips.length),this._handleLeftKeyboardArrow(this.numberClicks),this._handleEvents(e,$x),this._handleEvents(e,Lx)}_keyboardEvents(e){const{target:i,keyCode:n,ctrlKey:o}=e;i.value.length>0||this.allChips.length===0||(n===zy||n===jy?this._handleDeleteEvents(e):n===hs||n===ut?this._handleUpEvents(e):n===cs||n===ht?this._handleDownEvents(e):n===65&&o&&this._handleAddActiveClass())}_handleKeyboard(){_.on(this.input,"keydown",e=>this._keyboardEvents(e))}_handleEditable(){const{editable:e}=this._options;e&&this.allChips.forEach(i=>{_.on(i,"dblclick",n=>{const o=m.findOne(Wl,i);i.classList.add(...this._classes.contentEditable.split(" ")),i.contentEditable=!0,i.focus(),setTimeout(()=>{g.addStyle(o,{display:"none"})},200),o.classList.add(...this._classes.opacity.split(" ")),n.target.textContent,_.trigger(i,_p,{event:n,allChips:this.allChips})}),_.on(document,"click",({target:n})=>{const o=m.findOne(Wl,i),r=m.findOne(wx,i),a=n===i,l=i&&i.contains(n);!a&&!l&&(i.contentEditable=!1,i.classList.remove(...this._classes.contentEditable.split(" ")),r.textContent!==""&&setTimeout(()=>{g.addStyle(o,{display:"block"}),o.classList.remove(...this._classes.opacity.split(" "))},160)),r.textContent===""&&(setTimeout(()=>{i.classList.add(...this._classes.opacity.split(" "))},200),setTimeout(()=>{i.remove()},300))})})}_handleRemoveActiveClass(){this.allChips.forEach(e=>e.removeAttribute(Wt))}_handleAddActiveClass(){this.allChips.forEach(e=>e.setAttribute(Wt,""))}_handleRightKeyboardArrow(e){this._handleRemoveActiveClass(),e===0&&(e=1),this._handleAddActiveClassWithKebyboard(e)}_handleLeftKeyboardArrow(e){this._handleRemoveActiveClass(),this._handleAddActiveClassWithKebyboard(e)}_handleActiveChipAfterRemove(e){const i=e===0?1:e-1;return this.allChips[i]}_handleClicksOnChips(){_.on(this._element,"click",()=>{this.allChips.length===0&&(this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" ")),this.input.removeAttribute(Wt))})}_handleTextContent(){const e=[];return this.allChips.forEach(i=>e.push({tag:i.textContent.trim()})),e}_handleEvents(e,i){const n=this._handleTextContent(),o=this.allChips.filter(r=>r.hasAttribute(Wt)&&r);_.trigger(this._element,i,{event:e,allChips:this.allChips,arrOfObjects:n,active:o,activeObj:{tag:o.length<=0?"":o[0].textContent.trim()}})}_handleChipsFocus(){_.on(this._element,"click",({target:{attributes:e}})=>{const i=[...e].map(n=>n.name);i.includes(Vl)||i.includes(up)||i.includes(pp)||this.input.focus()})}_handleInitialValue(){if(this._appendInputToElement(hp),this._element.hasAttribute(hp)){const{initialValues:e}=this._options;e.forEach(({tag:i})=>this._handleCreateChip(this.input,i)),m.findOne(zl,this.input.parentNode).setAttribute(us,""),this.input.setAttribute(Wt,""),this.input.setAttribute(us,"")}this.allChips.length>0&&(this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" ")),this.chipsInputWrapper.classList.add(...this._classes.transition.split(" ")))}_handleKeysInputToElement(e){const{keyCode:i,target:n}=e;if(n.hasAttribute(Vl)){const o=m.findOne(Wl,n);i===Et&&(n.contentEditable=!1,n.classList.remove(...this._classes.contentEditable.split(" ")),n.textContent!==""?setTimeout(()=>{g.addStyle(o,{display:"block"}),o.classList.remove(...this._classes.opacity.split(" "))},160):n.textContent===""&&(setTimeout(()=>{n.classList.add(...this._classes.opacity.split(" "))},200),setTimeout(()=>{n.remove()},300)));return}if(i===Et){if(n.value==="")return;this._handleCreateChip(n,n.value),this._handleRemoveActiveClass(),this.numberClicks=this.allChips.length+1,this._handleEvents(e,Mx)}this.allChips.length>0?(this.chipsInputWrapper.classList.add(...this._classes.inputWrapperPadding.split(" ")),this.chipsInputWrapper.classList.add(...this._classes.transition.split(" "))):this.chipsInputWrapper.classList.remove(...this._classes.inputWrapperPadding.split(" "))}_handleInputText(){const e=m.findOne(kx,this._element);_.on(this._element,"keyup",e,i=>this._handleKeysInputToElement(i)),_.on(this.input,"blur",i=>this._handleBlurInput(i))}_appendInputToElement(e){if(!this._element.hasAttribute(e))return;const i=dx(this._options,this._classes);this._element.insertAdjacentHTML("beforeend",i);const n=m.findOne("[data-te-chips-input-wrapper]",this._element);this._inputInstance=new Z(n,this._options.inputOptions,this._options.inputClasses)}_handleCreateChip(e,i){const n=$("div"),o=ki.getInstance(n),r=new ki(o,{text:i},this._classes);this._options.parentSelector!==""?document.querySelector(this._options.parentSelector).insertAdjacentHTML("beforeend",r.appendChip()):e.insertAdjacentHTML("beforebegin",r.appendChip()),e.value="",m.find(Fl).forEach(a=>{let l=ki.getInstance(a);return l||(l=new ki(a,{},this._classes)),l.init()}),this._handleEditable()}_handleChipsOnSelect(){this.allChips.forEach(e=>{_.on(this._element,"click",i=>{_.trigger(e,_p,{event:i,allChips:this.allChips})})})}_handleAddActiveClassWithKebyboard(e){let i;this.allChips[e-1]===void 0?i=this.allChips[e-2]:i=this.allChips[e-1],i.setAttribute(Wt)}_getConfig(e){const i={...Bx,...g.getDataAttributes(this._element),...e};return L(rn,i,Nx),i}_getClasses(e){const i=g.getDataClassAttributes(this._element);return e={...Hx,...i,...e},L(rn,e,Vx),e}static getInstance(e){return O.getData(e,cp)}static getOrCreateInstance(e,i={}){return this.getInstance(e)||new this(e,typeof i=="object"?i:null)}}const Ze={plugins:{legend:{labels:{color:"rgb(102,102,102)"}}}},ln={line:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.0)",borderColor:"rgb(59, 112, 202)",borderWidth:2,tension:0},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},datasets:{borderColor:"red"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!1,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},bar:{options:{...Ze,backgroundColor:"rgb(59, 112, 202)",borderWidth:0,responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!0,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},pie:{options:{...Ze,elements:{arc:{backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},doughnut:{options:{...Ze,elements:{arc:{backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},polarArea:{options:{...Ze,elements:{arc:{backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0}}},radar:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.5)",borderColor:"rgb(59, 112, 202)",borderWidth:2},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgb(59, 112, 202)"}},responsive:!0,legend:{display:!0}}},scatter:{options:{...Ze,elements:{line:{backgroundColor:"rgba(59, 112, 202, 0.5)",borderColor:"rgb(59, 112, 202)",borderWidth:2,tension:0},point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0},tooltips:{intersect:!1,mode:"index"},datasets:{borderColor:"red"},scales:{x:{stacked:!0,grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{stacked:!1,grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}},bubble:{options:{...Ze,elements:{point:{borderColor:"rgb(59, 112, 202)",backgroundColor:"rgba(59, 112, 202, 0.5)"}},responsive:!0,legend:{display:!0},scales:{x:{grid:{display:!1},ticks:{fontColor:"rgba(0,0,0, 0.5)"}},y:{grid:{borderDash:[2],drawBorder:!1,zeroLineColor:"rgba(0,0,0,0)",zeroLineBorderDash:[2],zeroLineBorderDashOffset:[2]},ticks:{fontColor:"rgba(0,0,0, 0.5)"}}}}}};var Fx=function(t){return Wx(t)&&!zx(t)};function Wx(s){return!!s&&typeof s=="object"}function zx(s){var t=Object.prototype.toString.call(s);return t==="[object RegExp]"||t==="[object Date]"||Kx(s)}var jx=typeof Symbol=="function"&&Symbol.for,Yx=jx?Symbol.for("react.element"):60103;function Kx(s){return s.$$typeof===Yx}function Ux(s){return Array.isArray(s)?[]:{}}function cn(s,t){return t.clone!==!1&&t.isMergeableObject(s)?ps(Ux(s),s,t):s}function Xx(s,t,e){return s.concat(t).map(function(i){return cn(i,e)})}function Gx(s,t){if(!t.customMerge)return ps;var e=t.customMerge(s);return typeof e=="function"?e:ps}function qx(s){return Object.getOwnPropertySymbols?Object.getOwnPropertySymbols(s).filter(function(t){return Object.propertyIsEnumerable.call(s,t)}):[]}function mp(s){return Object.keys(s).concat(qx(s))}function bp(s,t){try{return t in s}catch{return!1}}function Zx(s,t){return bp(s,t)&&!(Object.hasOwnProperty.call(s,t)&&Object.propertyIsEnumerable.call(s,t))}function Qx(s,t,e){var i={};return e.isMergeableObject(s)&&mp(s).forEach(function(n){i[n]=cn(s[n],e)}),mp(t).forEach(function(n){Zx(s,n)||(bp(s,n)&&e.isMergeableObject(t[n])?i[n]=Gx(n,e)(s[n],t[n],e):i[n]=cn(t[n],e))}),i}function ps(s,t,e){e=e||{},e.arrayMerge=e.arrayMerge||Xx,e.isMergeableObject=e.isMergeableObject||Fx,e.cloneUnlessOtherwiseSpecified=cn;var i=Array.isArray(t),n=Array.isArray(s),o=i===n;return o?i?e.arrayMerge(s,t,e):Qx(s,t,e):cn(t,e)}ps.all=function(t,e){if(!Array.isArray(t))throw new Error("first argument should be an array");return t.reduce(function(i,n){return ps(i,n,e)},{})};var Jx=ps,jl=Jx;const vp="chart",ar="te.chart",tC="chart",Yl=(s,t,e)=>{const i=(n,o,r)=>{const a=n.slice();return o.forEach((l,c)=>{typeof a[c]>"u"?a[c]=r.cloneUnlessOtherwiseSpecified(l,r):r.isMergeableObject(l)?a[c]=jl(n[c],l,r):n.indexOf(l)===-1&&a.push(l)}),a};return jl(e[t],s,{arrayMerge:i})},eC={darkTicksColor:"#fff",darkLabelColor:"#fff",darkGridLinesColor:"#555",darkmodeOff:"undefined",darkMode:null,darkBgColor:"#262626",darkBgColorLight:"#fff",options:null},iC={darkTicksColor:"string",darkLabelColor:"string",darkGridLinesColor:"string",darkmodeOff:"(string|null)",darkMode:"(string|null)",darkBgColor:"string",darkBgColorLight:"string",options:"(object|null)"};let yp=class am{constructor(t,e,i={},n={}){this._waitForCharts(t,e,i,n)}async _getChartjs(){const{Chart:t,ArcElement:e,LineElement:i,BarElement:n,PointElement:o,BarController:r,BubbleController:a,DoughnutController:l,LineController:c,PieController:h,PolarAreaController:d,RadarController:u,ScatterController:p,CategoryScale:f,LinearScale:b,LogarithmicScale:v,RadialLinearScale:y,TimeScale:T,TimeSeriesScale:x,Decimation:E,Filler:C,Legend:A,Title:w,Tooltip:S,SubTitle:k}=await Promise.resolve().then(()=>UM);return t.register(e,i,n,o,r,a,l,c,h,d,u,p,f,b,v,y,T,x,E,C,A,w,S,k),t}async _getChartDataLabels(){return await Promise.resolve().then(()=>gL)}async _waitForCharts(t,e,i={},n={}){if(this._Chartjs=await this._getChartjs(),this._ChartDataLabels=await this._getChartDataLabels(),this._element=t,this._data=e,this._options=i,this._type=e.type,this._canvas=null,this._chart=null,this._darkOptions=this._getDarkConfig(n),this._darkModeClassContainer=document.querySelector("html"),this._prevConfig=null,this._observer=null,this._element&&(O.setData(t,ar,this),g.addClass(this._element,tC),this._chartConstructor()),this._darkOptions.darkmodeOff!==null){const o=this._darkOptions.darkMode==="dark"?"dark":this._darkOptions.darkMode==="light"?"light":this.systemColorMode;this._handleMode(o),this._observer=new MutationObserver(this._observerCallback.bind(this)),this._observer.observe(this._darkModeClassContainer,{attributes:!0})}}static get NAME(){return vp}get systemColorMode(){return localStorage.theme||(this._darkModeClassContainer.classList.contains("dark")?"dark":"light")}dispose(){this._observer.disconnect(),O.removeData(this._element,ar),this._element=null}update(t,e){t&&(this._data={...this._data,...t},this._chart.data=this._data);const i=Object.prototype.hasOwnProperty.call(e,"options")?e:{options:{...e}};this._options=jl(this._options,i),this._chart.options=Yl(this._options,this._type,ln).options,this._chart.update()}setTheme(t){t!=="dark"&&t!=="light"||!this._data||this._handleMode(t)}_getDarkConfig(t){let e={};const i=g.getDataAttributes(this._element);Object.keys(i).forEach(c=>c.startsWith("dark")&&(e[c]=i[c])),e={...eC,...e};const n={y:{ticks:{color:e.darkTicksColor},grid:{color:e.darkGridLinesColor}},x:{ticks:{color:e.darkTicksColor},grid:{color:e.darkGridLinesColor}}},o={r:{ticks:{color:e.darkTicksColor,backdropColor:e.darkBgColor},grid:{color:e.darkGridLinesColor},pointLabels:{color:e.darkTicksColor}}},l={scales:["pie","doughnut","polarArea","radar"].includes(this._type)?["polarArea","radar"].includes(this._type)?o:{}:n,plugins:{legend:{labels:{color:e.darkLabelColor}}}};return t={...e,options:{...l},...t},L(vp,t,iC),t}_chartConstructor(){if(this._data){this._createCanvas();const t=Yl(this._options,this._type,ln),e=[];t.dataLabelsPlugin&&e.push(this._ChartDataLabels.default),this._prevConfig=t,this._chart=new this._Chartjs(this._canvas,{...this._data,...t,plugins:e})}}_createCanvas(){this._canvas||(this._element.nodeName==="CANVAS"?this._canvas=this._element:(this._canvas=$("canvas"),this._element.appendChild(this._canvas)))}_handleMode(t){t==="dark"?(this._changeDatasetBorderColor(),this.update(null,this._darkOptions.options)):(this._changeDatasetBorderColor(!1),this._prevConfig&&this.update(null,this._prevConfig))}_observerCallback(t){for(const e of t)e.type==="attributes"&&this._handleMode(this.systemColorMode)}_changeDatasetBorderColor(t=!0){[...this._data.data.datasets].forEach(e=>["pie","doughnut","polarArea"].includes(this._type)&&(e.borderColor=t?this._darkOptions.darkBgColor:this._darkOptions.darkBgColorLight))}static jQueryInterface(t,e,i){return this.each(function(){let n=O.getData(this,ar);if(!(!n&&/dispose/.test(t))){if(!n){const o=e?Yl(e,i,ln):ln[i];n=new am(this,{...t,...o})}if(typeof t=="string"){if(typeof n[t]>"u")throw new TypeError(`No method named "${t}"`);n[t](e,i)}}})}static getInstance(t){return O.getData(t,ar)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}};/*!
+ * perfect-scrollbar v1.5.3
+ * Copyright 2021 Hyunje Jun, MDBootstrap and Contributors
+ * Licensed under MIT
+ */function me(s){return getComputedStyle(s)}function Ot(s,t){for(var e in t){var i=t[e];typeof i=="number"&&(i=i+"px"),s.style[e]=i}return s}function lr(s){var t=document.createElement("div");return t.className=s,t}var Tp=typeof Element<"u"&&(Element.prototype.matches||Element.prototype.webkitMatchesSelector||Element.prototype.mozMatchesSelector||Element.prototype.msMatchesSelector);function Qe(s,t){if(!Tp)throw new Error("No element matching method supported");return Tp.call(s,t)}function fs(s){s.remove?s.remove():s.parentNode&&s.parentNode.removeChild(s)}function Ep(s,t){return Array.prototype.filter.call(s.children,function(e){return Qe(e,t)})}var at={main:"ps",rtl:"ps__rtl",element:{thumb:function(s){return"ps__thumb-"+s},rail:function(s){return"ps__rail-"+s},consuming:"ps__child--consume"},state:{focus:"ps--focus",clicking:"ps--clicking",active:function(s){return"ps--active-"+s},scrolling:function(s){return"ps--scrolling-"+s}}},xp={x:null,y:null};function Cp(s,t){var e=s.element.classList,i=at.state.scrolling(t);e.contains(i)?clearTimeout(xp[t]):e.add(i)}function Ap(s,t){xp[t]=setTimeout(function(){return s.isAlive&&s.element.classList.remove(at.state.scrolling(t))},s.settings.scrollingThreshold)}function sC(s,t){Cp(s,t),Ap(s,t)}var hn=function(t){this.element=t,this.handlers={}},wp={isEmpty:{configurable:!0}};hn.prototype.bind=function(t,e){typeof this.handlers[t]>"u"&&(this.handlers[t]=[]),this.handlers[t].push(e),this.element.addEventListener(t,e,!1)},hn.prototype.unbind=function(t,e){var i=this;this.handlers[t]=this.handlers[t].filter(function(n){return e&&n!==e?!0:(i.element.removeEventListener(t,n,!1),!1)})},hn.prototype.unbindAll=function(){for(var t in this.handlers)this.unbind(t)},wp.isEmpty.get=function(){var s=this;return Object.keys(this.handlers).every(function(t){return s.handlers[t].length===0})},Object.defineProperties(hn.prototype,wp);var _s=function(){this.eventElements=[]};_s.prototype.eventElement=function(t){var e=this.eventElements.filter(function(i){return i.element===t})[0];return e||(e=new hn(t),this.eventElements.push(e)),e},_s.prototype.bind=function(t,e,i){this.eventElement(t).bind(e,i)},_s.prototype.unbind=function(t,e,i){var n=this.eventElement(t);n.unbind(e,i),n.isEmpty&&this.eventElements.splice(this.eventElements.indexOf(n),1)},_s.prototype.unbindAll=function(){this.eventElements.forEach(function(t){return t.unbindAll()}),this.eventElements=[]},_s.prototype.once=function(t,e,i){var n=this.eventElement(t),o=function(r){n.unbind(e,o),i(r)};n.bind(e,o)};function cr(s){if(typeof window.CustomEvent=="function")return new CustomEvent(s);var t=document.createEvent("CustomEvent");return t.initCustomEvent(s,!1,!1,void 0),t}function hr(s,t,e,i,n){i===void 0&&(i=!0),n===void 0&&(n=!1);var o;if(t==="top")o=["contentHeight","containerHeight","scrollTop","y","up","down"];else if(t==="left")o=["contentWidth","containerWidth","scrollLeft","x","left","right"];else throw new Error("A proper axis should be provided");nC(s,e,o,i,n)}function nC(s,t,e,i,n){var o=e[0],r=e[1],a=e[2],l=e[3],c=e[4],h=e[5];i===void 0&&(i=!0),n===void 0&&(n=!1);var d=s.element;s.reach[l]=null,d[a]<1&&(s.reach[l]="start"),d[a]>s[o]-s[r]-1&&(s.reach[l]="end"),t&&(d.dispatchEvent(cr("ps-scroll-"+l)),t<0?d.dispatchEvent(cr("ps-scroll-"+c)):t>0&&d.dispatchEvent(cr("ps-scroll-"+h)),i&&sC(s,l)),s.reach[l]&&(t||n)&&d.dispatchEvent(cr("ps-"+l+"-reach-"+s.reach[l]))}function st(s){return parseInt(s,10)||0}function oC(s){return Qe(s,"input,[contenteditable]")||Qe(s,"select,[contenteditable]")||Qe(s,"textarea,[contenteditable]")||Qe(s,"button,[contenteditable]")}function rC(s){var t=me(s);return st(t.width)+st(t.paddingLeft)+st(t.paddingRight)+st(t.borderLeftWidth)+st(t.borderRightWidth)}var gs={isWebKit:typeof document<"u"&&"WebkitAppearance"in document.documentElement.style,supportsTouch:typeof window<"u"&&("ontouchstart"in window||"maxTouchPoints"in window.navigator&&window.navigator.maxTouchPoints>0||window.DocumentTouch&&document instanceof window.DocumentTouch),supportsIePointer:typeof navigator<"u"&&navigator.msMaxTouchPoints,isChrome:typeof navigator<"u"&&/Chrome/i.test(navigator&&navigator.userAgent)};function Se(s){var t=s.element,e=Math.floor(t.scrollTop),i=t.getBoundingClientRect();s.containerWidth=Math.round(i.width),s.containerHeight=Math.round(i.height),s.contentWidth=t.scrollWidth,s.contentHeight=t.scrollHeight,t.contains(s.scrollbarXRail)||(Ep(t,at.element.rail("x")).forEach(function(n){return fs(n)}),t.appendChild(s.scrollbarXRail)),t.contains(s.scrollbarYRail)||(Ep(t,at.element.rail("y")).forEach(function(n){return fs(n)}),t.appendChild(s.scrollbarYRail)),!s.settings.suppressScrollX&&s.containerWidth+s.settings.scrollXMarginOffset<s.contentWidth?(s.scrollbarXActive=!0,s.railXWidth=s.containerWidth-s.railXMarginWidth,s.railXRatio=s.containerWidth/s.railXWidth,s.scrollbarXWidth=kp(s,st(s.railXWidth*s.containerWidth/s.contentWidth)),s.scrollbarXLeft=st((s.negativeScrollAdjustment+t.scrollLeft)*(s.railXWidth-s.scrollbarXWidth)/(s.contentWidth-s.containerWidth))):s.scrollbarXActive=!1,!s.settings.suppressScrollY&&s.containerHeight+s.settings.scrollYMarginOffset<s.contentHeight?(s.scrollbarYActive=!0,s.railYHeight=s.containerHeight-s.railYMarginHeight,s.railYRatio=s.containerHeight/s.railYHeight,s.scrollbarYHeight=kp(s,st(s.railYHeight*s.containerHeight/s.contentHeight)),s.scrollbarYTop=st(e*(s.railYHeight-s.scrollbarYHeight)/(s.contentHeight-s.containerHeight))):s.scrollbarYActive=!1,s.scrollbarXLeft>=s.railXWidth-s.scrollbarXWidth&&(s.scrollbarXLeft=s.railXWidth-s.scrollbarXWidth),s.scrollbarYTop>=s.railYHeight-s.scrollbarYHeight&&(s.scrollbarYTop=s.railYHeight-s.scrollbarYHeight),aC(t,s),s.scrollbarXActive?t.classList.add(at.state.active("x")):(t.classList.remove(at.state.active("x")),s.scrollbarXWidth=0,s.scrollbarXLeft=0,t.scrollLeft=s.isRtl===!0?s.contentWidth:0),s.scrollbarYActive?t.classList.add(at.state.active("y")):(t.classList.remove(at.state.active("y")),s.scrollbarYHeight=0,s.scrollbarYTop=0,t.scrollTop=0)}function kp(s,t){return s.settings.minScrollbarLength&&(t=Math.max(t,s.settings.minScrollbarLength)),s.settings.maxScrollbarLength&&(t=Math.min(t,s.settings.maxScrollbarLength)),t}function aC(s,t){var e={width:t.railXWidth},i=Math.floor(s.scrollTop);t.isRtl?e.left=t.negativeScrollAdjustment+s.scrollLeft+t.containerWidth-t.contentWidth:e.left=s.scrollLeft,t.isScrollbarXUsingBottom?e.bottom=t.scrollbarXBottom-i:e.top=t.scrollbarXTop+i,Ot(t.scrollbarXRail,e);var n={top:i,height:t.railYHeight};t.isScrollbarYUsingRight?t.isRtl?n.right=t.contentWidth-(t.negativeScrollAdjustment+s.scrollLeft)-t.scrollbarYRight-t.scrollbarYOuterWidth-9:n.right=t.scrollbarYRight-s.scrollLeft:t.isRtl?n.left=t.negativeScrollAdjustment+s.scrollLeft+t.containerWidth*2-t.contentWidth-t.scrollbarYLeft-t.scrollbarYOuterWidth:n.left=t.scrollbarYLeft+s.scrollLeft,Ot(t.scrollbarYRail,n),Ot(t.scrollbarX,{left:t.scrollbarXLeft,width:t.scrollbarXWidth-t.railBorderXWidth}),Ot(t.scrollbarY,{top:t.scrollbarYTop,height:t.scrollbarYHeight-t.railBorderYWidth})}function lC(s){s.element,s.event.bind(s.scrollbarY,"mousedown",function(t){return t.stopPropagation()}),s.event.bind(s.scrollbarYRail,"mousedown",function(t){var e=t.pageY-window.pageYOffset-s.scrollbarYRail.getBoundingClientRect().top,i=e>s.scrollbarYTop?1:-1;s.element.scrollTop+=i*s.containerHeight,Se(s),t.stopPropagation()}),s.event.bind(s.scrollbarX,"mousedown",function(t){return t.stopPropagation()}),s.event.bind(s.scrollbarXRail,"mousedown",function(t){var e=t.pageX-window.pageXOffset-s.scrollbarXRail.getBoundingClientRect().left,i=e>s.scrollbarXLeft?1:-1;s.element.scrollLeft+=i*s.containerWidth,Se(s),t.stopPropagation()})}function cC(s){Sp(s,["containerWidth","contentWidth","pageX","railXWidth","scrollbarX","scrollbarXWidth","scrollLeft","x","scrollbarXRail"]),Sp(s,["containerHeight","contentHeight","pageY","railYHeight","scrollbarY","scrollbarYHeight","scrollTop","y","scrollbarYRail"])}function Sp(s,t){var e=t[0],i=t[1],n=t[2],o=t[3],r=t[4],a=t[5],l=t[6],c=t[7],h=t[8],d=s.element,u=null,p=null,f=null;function b(T){T.touches&&T.touches[0]&&(T[n]=T.touches[0].pageY),d[l]=u+f*(T[n]-p),Cp(s,c),Se(s),T.stopPropagation(),T.type.startsWith("touch")&&T.changedTouches.length>1&&T.preventDefault()}function v(){Ap(s,c),s[h].classList.remove(at.state.clicking),s.event.unbind(s.ownerDocument,"mousemove",b)}function y(T,x){u=d[l],x&&T.touches&&(T[n]=T.touches[0].pageY),p=T[n],f=(s[i]-s[e])/(s[o]-s[a]),x?s.event.bind(s.ownerDocument,"touchmove",b):(s.event.bind(s.ownerDocument,"mousemove",b),s.event.once(s.ownerDocument,"mouseup",v),T.preventDefault()),s[h].classList.add(at.state.clicking),T.stopPropagation()}s.event.bind(s[r],"mousedown",function(T){y(T)}),s.event.bind(s[r],"touchstart",function(T){y(T,!0)})}function hC(s){var t=s.element,e=function(){return Qe(t,":hover")},i=function(){return Qe(s.scrollbarX,":focus")||Qe(s.scrollbarY,":focus")};function n(o,r){var a=Math.floor(t.scrollTop);if(o===0){if(!s.scrollbarYActive)return!1;if(a===0&&r>0||a>=s.contentHeight-s.containerHeight&&r<0)return!s.settings.wheelPropagation}var l=t.scrollLeft;if(r===0){if(!s.scrollbarXActive)return!1;if(l===0&&o<0||l>=s.contentWidth-s.containerWidth&&o>0)return!s.settings.wheelPropagation}return!0}s.event.bind(s.ownerDocument,"keydown",function(o){if(!(o.isDefaultPrevented&&o.isDefaultPrevented()||o.defaultPrevented)&&!(!e()&&!i())){var r=document.activeElement?document.activeElement:s.ownerDocument.activeElement;if(r){if(r.tagName==="IFRAME")r=r.contentDocument.activeElement;else for(;r.shadowRoot;)r=r.shadowRoot.activeElement;if(oC(r))return}var a=0,l=0;switch(o.which){case 37:o.metaKey?a=-s.contentWidth:o.altKey?a=-s.containerWidth:a=-30;break;case 38:o.metaKey?l=s.contentHeight:o.altKey?l=s.containerHeight:l=30;break;case 39:o.metaKey?a=s.contentWidth:o.altKey?a=s.containerWidth:a=30;break;case 40:o.metaKey?l=-s.contentHeight:o.altKey?l=-s.containerHeight:l=-30;break;case 32:o.shiftKey?l=s.containerHeight:l=-s.containerHeight;break;case 33:l=s.containerHeight;break;case 34:l=-s.containerHeight;break;case 36:l=s.contentHeight;break;case 35:l=-s.contentHeight;break;default:return}s.settings.suppressScrollX&&a!==0||s.settings.suppressScrollY&&l!==0||(t.scrollTop-=l,t.scrollLeft+=a,Se(s),n(a,l)&&o.preventDefault())}})}function dC(s){var t=s.element;function e(r,a){var l=Math.floor(t.scrollTop),c=t.scrollTop===0,h=l+t.offsetHeight===t.scrollHeight,d=t.scrollLeft===0,u=t.scrollLeft+t.offsetWidth===t.scrollWidth,p;return Math.abs(a)>Math.abs(r)?p=c||h:p=d||u,p?!s.settings.wheelPropagation:!0}function i(r){var a=r.deltaX,l=-1*r.deltaY;return(typeof a>"u"||typeof l>"u")&&(a=-1*r.wheelDeltaX/6,l=r.wheelDeltaY/6),r.deltaMode&&r.deltaMode===1&&(a*=10,l*=10),a!==a&&l!==l&&(a=0,l=r.wheelDelta),r.shiftKey?[-l,-a]:[a,l]}function n(r,a,l){if(!gs.isWebKit&&t.querySelector("select:focus"))return!0;if(!t.contains(r))return!1;for(var c=r;c&&c!==t;){if(c.classList.contains(at.element.consuming))return!0;var h=me(c);if(l&&h.overflowY.match(/(scroll|auto)/)){var d=c.scrollHeight-c.clientHeight;if(d>0&&(c.scrollTop>0&&l<0||c.scrollTop<d&&l>0))return!0}if(a&&h.overflowX.match(/(scroll|auto)/)){var u=c.scrollWidth-c.clientWidth;if(u>0&&(c.scrollLeft>0&&a<0||c.scrollLeft<u&&a>0))return!0}c=c.parentNode}return!1}function o(r){var a=i(r),l=a[0],c=a[1];if(!n(r.target,l,c)){var h=!1;s.settings.useBothWheelAxes?s.scrollbarYActive&&!s.scrollbarXActive?(c?t.scrollTop-=c*s.settings.wheelSpeed:t.scrollTop+=l*s.settings.wheelSpeed,h=!0):s.scrollbarXActive&&!s.scrollbarYActive&&(l?t.scrollLeft+=l*s.settings.wheelSpeed:t.scrollLeft-=c*s.settings.wheelSpeed,h=!0):(t.scrollTop-=c*s.settings.wheelSpeed,t.scrollLeft+=l*s.settings.wheelSpeed),Se(s),h=h||e(l,c),h&&!r.ctrlKey&&(r.stopPropagation(),r.preventDefault())}}typeof window.onwheel<"u"?s.event.bind(t,"wheel",o):typeof window.onmousewheel<"u"&&s.event.bind(t,"mousewheel",o)}function uC(s){if(!gs.supportsTouch&&!gs.supportsIePointer)return;var t=s.element;function e(f,b){var v=Math.floor(t.scrollTop),y=t.scrollLeft,T=Math.abs(f),x=Math.abs(b);if(x>T){if(b<0&&v===s.contentHeight-s.containerHeight||b>0&&v===0)return window.scrollY===0&&b>0&&gs.isChrome}else if(T>x&&(f<0&&y===s.contentWidth-s.containerWidth||f>0&&y===0))return!0;return!0}function i(f,b){t.scrollTop-=b,t.scrollLeft-=f,Se(s)}var n={},o=0,r={},a=null;function l(f){return f.targetTouches?f.targetTouches[0]:f}function c(f){return f.pointerType&&f.pointerType==="pen"&&f.buttons===0?!1:!!(f.targetTouches&&f.targetTouches.length===1||f.pointerType&&f.pointerType!=="mouse"&&f.pointerType!==f.MSPOINTER_TYPE_MOUSE)}function h(f){if(c(f)){var b=l(f);n.pageX=b.pageX,n.pageY=b.pageY,o=new Date().getTime(),a!==null&&clearInterval(a)}}function d(f,b,v){if(!t.contains(f))return!1;for(var y=f;y&&y!==t;){if(y.classList.contains(at.element.consuming))return!0;var T=me(y);if(v&&T.overflowY.match(/(scroll|auto)/)){var x=y.scrollHeight-y.clientHeight;if(x>0&&(y.scrollTop>0&&v<0||y.scrollTop<x&&v>0))return!0}if(b&&T.overflowX.match(/(scroll|auto)/)){var E=y.scrollWidth-y.clientWidth;if(E>0&&(y.scrollLeft>0&&b<0||y.scrollLeft<E&&b>0))return!0}y=y.parentNode}return!1}function u(f){if(c(f)){var b=l(f),v={pageX:b.pageX,pageY:b.pageY},y=v.pageX-n.pageX,T=v.pageY-n.pageY;if(d(f.target,y,T))return;i(y,T),n=v;var x=new Date().getTime(),E=x-o;E>0&&(r.x=y/E,r.y=T/E,o=x),e(y,T)&&f.preventDefault()}}function p(){s.settings.swipeEasing&&(clearInterval(a),a=setInterval(function(){if(s.isInitialized){clearInterval(a);return}if(!r.x&&!r.y){clearInterval(a);return}if(Math.abs(r.x)<.01&&Math.abs(r.y)<.01){clearInterval(a);return}if(!s.element){clearInterval(a);return}i(r.x*30,r.y*30),r.x*=.8,r.y*=.8},10))}gs.supportsTouch?(s.event.bind(t,"touchstart",h),s.event.bind(t,"touchmove",u),s.event.bind(t,"touchend",p)):gs.supportsIePointer&&(window.PointerEvent?(s.event.bind(t,"pointerdown",h),s.event.bind(t,"pointermove",u),s.event.bind(t,"pointerup",p)):window.MSPointerEvent&&(s.event.bind(t,"MSPointerDown",h),s.event.bind(t,"MSPointerMove",u),s.event.bind(t,"MSPointerUp",p)))}var pC=function(){return{handlers:["click-rail","drag-thumb","keyboard","wheel","touch"],maxScrollbarLength:null,minScrollbarLength:null,scrollingThreshold:1e3,scrollXMarginOffset:0,scrollYMarginOffset:0,suppressScrollX:!1,suppressScrollY:!1,swipeEasing:!0,useBothWheelAxes:!1,wheelPropagation:!0,wheelSpeed:1}},fC={"click-rail":lC,"drag-thumb":cC,keyboard:hC,wheel:dC,touch:uC},dn=function(t,e){var i=this;if(e===void 0&&(e={}),typeof t=="string"&&(t=document.querySelector(t)),!t||!t.nodeName)throw new Error("no element is specified to initialize PerfectScrollbar");this.element=t,t.classList.add(at.main),this.settings=pC();for(var n in e)this.settings[n]=e[n];this.containerWidth=null,this.containerHeight=null,this.contentWidth=null,this.contentHeight=null;var o=function(){return t.classList.add(at.state.focus)},r=function(){return t.classList.remove(at.state.focus)};this.isRtl=me(t).direction==="rtl",this.isRtl===!0&&t.classList.add(at.rtl),this.isNegativeScroll=function(){var c=t.scrollLeft,h=null;return t.scrollLeft=-1,h=t.scrollLeft<0,t.scrollLeft=c,h}(),this.negativeScrollAdjustment=this.isNegativeScroll?t.scrollWidth-t.clientWidth:0,this.event=new _s,this.ownerDocument=t.ownerDocument||document,this.scrollbarXRail=lr(at.element.rail("x")),t.appendChild(this.scrollbarXRail),this.scrollbarX=lr(at.element.thumb("x")),this.scrollbarXRail.appendChild(this.scrollbarX),this.scrollbarX.setAttribute("tabindex",0),this.event.bind(this.scrollbarX,"focus",o),this.event.bind(this.scrollbarX,"blur",r),this.scrollbarXActive=null,this.scrollbarXWidth=null,this.scrollbarXLeft=null;var a=me(this.scrollbarXRail);this.scrollbarXBottom=parseInt(a.bottom,10),isNaN(this.scrollbarXBottom)?(this.isScrollbarXUsingBottom=!1,this.scrollbarXTop=st(a.top)):this.isScrollbarXUsingBottom=!0,this.railBorderXWidth=st(a.borderLeftWidth)+st(a.borderRightWidth),Ot(this.scrollbarXRail,{display:"block"}),this.railXMarginWidth=st(a.marginLeft)+st(a.marginRight),Ot(this.scrollbarXRail,{display:""}),this.railXWidth=null,this.railXRatio=null,this.scrollbarYRail=lr(at.element.rail("y")),t.appendChild(this.scrollbarYRail),this.scrollbarY=lr(at.element.thumb("y")),this.scrollbarYRail.appendChild(this.scrollbarY),this.scrollbarY.setAttribute("tabindex",0),this.event.bind(this.scrollbarY,"focus",o),this.event.bind(this.scrollbarY,"blur",r),this.scrollbarYActive=null,this.scrollbarYHeight=null,this.scrollbarYTop=null;var l=me(this.scrollbarYRail);this.scrollbarYRight=parseInt(l.right,10),isNaN(this.scrollbarYRight)?(this.isScrollbarYUsingRight=!1,this.scrollbarYLeft=st(l.left)):this.isScrollbarYUsingRight=!0,this.scrollbarYOuterWidth=this.isRtl?rC(this.scrollbarY):null,this.railBorderYWidth=st(l.borderTopWidth)+st(l.borderBottomWidth),Ot(this.scrollbarYRail,{display:"block"}),this.railYMarginHeight=st(l.marginTop)+st(l.marginBottom),Ot(this.scrollbarYRail,{display:""}),this.railYHeight=null,this.railYRatio=null,this.reach={x:t.scrollLeft<=0?"start":t.scrollLeft>=this.contentWidth-this.containerWidth?"end":null,y:t.scrollTop<=0?"start":t.scrollTop>=this.contentHeight-this.containerHeight?"end":null},this.isAlive=!0,this.settings.handlers.forEach(function(c){return fC[c](i)}),this.lastScrollTop=Math.floor(t.scrollTop),this.lastScrollLeft=t.scrollLeft,this.event.bind(this.element,"scroll",function(c){return i.onScroll(c)}),Se(this)};dn.prototype.update=function(){this.isAlive&&(this.negativeScrollAdjustment=this.isNegativeScroll?this.element.scrollWidth-this.element.clientWidth:0,Ot(this.scrollbarXRail,{display:"block"}),Ot(this.scrollbarYRail,{display:"block"}),this.railXMarginWidth=st(me(this.scrollbarXRail).marginLeft)+st(me(this.scrollbarXRail).marginRight),this.railYMarginHeight=st(me(this.scrollbarYRail).marginTop)+st(me(this.scrollbarYRail).marginBottom),Ot(this.scrollbarXRail,{display:"none"}),Ot(this.scrollbarYRail,{display:"none"}),Se(this),hr(this,"top",0,!1,!0),hr(this,"left",0,!1,!0),Ot(this.scrollbarXRail,{display:""}),Ot(this.scrollbarYRail,{display:""}))},dn.prototype.onScroll=function(t){this.isAlive&&(Se(this),hr(this,"top",this.element.scrollTop-this.lastScrollTop),hr(this,"left",this.element.scrollLeft-this.lastScrollLeft),this.lastScrollTop=Math.floor(this.element.scrollTop),this.lastScrollLeft=this.element.scrollLeft)},dn.prototype.destroy=function(){this.isAlive&&(this.event.unbindAll(),fs(this.scrollbarX),fs(this.scrollbarY),fs(this.scrollbarXRail),fs(this.scrollbarYRail),this.removePsClasses(),this.element=null,this.scrollbarX=null,this.scrollbarY=null,this.scrollbarXRail=null,this.scrollbarYRail=null,this.isAlive=!1)},dn.prototype.removePsClasses=function(){this.element.className=this.element.className.split(" ").filter(function(t){return!t.match(/^ps([-_].+|)$/)}).join(" ")};const Kl="perfectScrollbar",_C="perfect-scrollbar",dr="te.perfectScrollbar",be="te",ve="ps",Ul=[{te:`scrollX.${be}.${ve}`,ps:"ps-scroll-x"},{te:`scrollY.${be}.${ve}`,ps:"ps-scroll-y"},{te:`scrollUp.${be}.${ve}`,ps:"ps-scroll-up"},{te:`scrollDown.${be}.${ve}`,ps:"ps-scroll-down"},{te:`scrollLeft.${be}.${ve}`,ps:"ps-scroll-left"},{te:`scrollRight.${be}.${ve}`,ps:"ps-scroll-right"},{te:`scrollXEnd.${be}.${ve}`,ps:"ps-x-reach-end"},{te:`scrollYEnd.${be}.${ve}`,ps:"ps-y-reach-end"},{te:`scrollXStart.${be}.${ve}`,ps:"ps-x-reach-start"},{te:`scrollYStart.${be}.${ve}`,ps:"ps-y-reach-start"}],gC={handlers:["click-rail","drag-thumb","keyboard","wheel","touch"],wheelSpeed:1,wheelPropagation:!0,swipeEasing:!0,minScrollbarLength:null,maxScrollbarLength:null,scrollingThreshold:1e3,useBothWheelAxes:!1,suppressScrollX:!1,suppressScrollY:!1,scrollXMarginOffset:0,scrollYMarginOffset:0,positionRight:!0},mC={handlers:"(string|array)",wheelSpeed:"number",wheelPropagation:"boolean",swipeEasing:"boolean",minScrollbarLength:"(number|null)",maxScrollbarLength:"(number|null)",scrollingThreshold:"number",useBothWheelAxes:"boolean",suppressScrollX:"boolean",suppressScrollY:"boolean",scrollXMarginOffset:"number",scrollYMarginOffset:"number",positionRight:"boolean"},bC={ps:"group/ps overflow-hidden [overflow-anchor:none] touch-none",railX:"group/x absolute bottom-0 h-[0.9375rem] hidden opacity-0 transition-[background-color,_opacity] duration-200 ease-linear motion-reduce:transition-none z-[1035] group-[&.ps--active-x]/ps:block group-hover/ps:opacity-60 group-focus/ps:opacity-60 group-[&.ps--scrolling-x]/ps:opacity-60 hover:!opacity-90 focus:!opacity-90 [&.ps--clicking]:!opacity-90 outline-none",railXColors:"group-[&.ps--active-x]/ps:bg-transparent hover:!bg-[#eee] focus:!bg-[#eee] [&.ps--clicking]:!bg-[#eee] dark:hover:!bg-[#555] dark:focus:!bg-[#555] dark:[&.ps--clicking]:!bg-[#555]",railXThumb:"absolute bottom-0.5 rounded-md h-1.5 group-focus/ps:opacity-100 group-active/ps:opacity-100 [transition:background-color_.2s_linear,_height_.2s_ease-in-out] group-hover/x:h-[11px] group-focus/x:h-[0.6875rem] group-[&.ps--clicking]/x:bg-[#999] group-[&.ps--clicking]/x:h-[11px] outline-none",railXThumbColors:"bg-[#aaa] group-hover/x:bg-[#999] group-focus/x:bg-[#999]",railY:"group/y absolute right-0 w-[0.9375rem] hidden opacity-0 transition-[background-color,_opacity] duration-200 ease-linear motion-reduce:transition-none z-[1035] group-[&.ps--active-y]/ps:block group-hover/ps:opacity-60 group-focus/ps:opacity-60 group-[&.ps--scrolling-y]/ps:opacity-60 hover:!opacity-90 focus:!opacity-90 [&.ps--clicking]:!opacity-90 outline-none",railYColors:"group-[&.ps--active-y]/ps:bg-transparent hover:!bg-[#eee] focus:!bg-[#eee] [&.ps--clicking]:!bg-[#eee] dark:hover:!bg-[#555] dark:focus:!bg-[#555] dark:[&.ps--clicking]:!bg-[#555]",railYThumb:"absolute right-0.5 rounded-md w-1.5 group-focus/ps:opacity-100 group-active/ps:opacity-100 [transition:background-color_.2s_linear,_width_.2s_ease-in-out,_opacity] group-hover/y:w-[11px] group-focus/y:w-[0.6875rem] group-[&.ps--clicking]/y:w-[11px] outline-none",railYThumbColors:"bg-[#aaa] group-hover/y:bg-[#999] group-focus/y:bg-[#999] group-[&.ps--clicking]/y:bg-[#999]"},vC={ps:"string",railX:"string",railXColors:"string",railXThumb:"string",railXThumbColors:"string",railY:"string",railYColors:"string",railYThumb:"string",railYThumbColors:"string"};class ms{constructor(t,e={},i={}){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this.perfectScrollbar=null,this._observer=null,this._psClasses=[{ps:"ps__rail-x",te:this._classes.railX,teColor:this._classes.railXColors},{ps:"ps__rail-y",te:this._classes.railY,teColor:this._classes.railYColors},{ps:"ps__thumb-x",te:this._classes.railXThumb,teColor:this._classes.railXThumbColors},{ps:"ps__thumb-y",te:this._classes.railYThumb,teColor:this._classes.railYThumbColors}],this._element&&(O.setData(t,dr,this),g.addClass(this._element,_C)),this.init()}static get NAME(){return Kl}get railX(){return m.findOne(".ps__rail-x",this._element)}get railY(){return m.findOne(".ps__rail-y",this._element)}_getConfig(t){const e=g.getDataAttributes(this._element);return e.handlers!==void 0&&(e.handlers=e.handlers.split(" ")),t={...gC,...e,...t},L(Kl,t,mC),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...bC,...e,...t},L(Kl,t,vC),t}dispose(){this._options.positionRight&&this._observer.disconnect(),O.removeData(this._element,dr),this._element=null,this._dataAttrOptions=null,this._options=null,this.perfectScrollbar.destroy(),this.removeEvent(Ul),this.perfectScrollbar=null}init(){if(this.perfectScrollbar=new dn(this._element,this._options),this._addPerfectScrollbarStyles(),this._updateScrollPosition(),this.perfectScrollbar.update(),this._initEvents(Ul),this._options.positionRight){this._observer=new ResizeObserver(()=>{setTimeout(()=>{this._updateScrollPosition()},100)});const t={attributes:!0,attributeFilter:["class","className"]};this._observer.observe(this._element,t)}}_updateScrollPosition(){const t=getComputedStyle(this._element).getPropertyValue("height"),e=getComputedStyle(this._element).getPropertyValue("width");this.railX&&(this.railX.style.transform=`translateY(calc(-100% + ${this._canTransform(t)?t:"0px"}))`),this.railY&&(this.railY.style.transform=`translateX(calc(-100% + ${this._canTransform(e)?e:"0px"}))`)}_canTransform(t){return t&&t.includes("px")}update(){return this.perfectScrollbar.update()}_initEvents(t=[]){t.forEach(({ps:e,te:i})=>_.on(this._element,e,n=>_.trigger(this._element,i,{e:n})))}_addPerfectScrollbarStyles(){this._psClasses.forEach(t=>{const e=m.findOne(`.${t.ps}`,this._element);g.addClass(e,t.te),g.addClass(e,t.teColor)}),g.addClass(this._element,this._classes.ps),g.removeClass(this._element,"ps")}removeEvent(t){let e=[];typeof t=="string"&&(e=Ul.filter(({te:i})=>i===t)),e.forEach(({ps:i,te:n})=>{_.off(this._element,i),_.off(this._element,n)})}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,dr);const i=typeof t=="object"&&t;if(!(!e&&/dispose|hide/.test(t))&&(e||(e=new ms(this,i)),typeof t=="string")){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t]()}})}static getInstance(t){return O.getData(t,dr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const yC="data-te-datatable-select-ref",TC="data-te-datatable-pagination-nav-ref",EC="data-te-datatable-pagination-right-ref",xC="data-te-datatable-pagination-left-ref",CC="data-te-datatable-pagination-start-ref",AC="data-te-datatable-pagination-end-ref",wC=({text:s,entries:t,entriesOptions:e,fullPagination:i,rowsText:n,allText:o,paginationStartIconTemplate:r,paginationLeftIconTemplate:a,paginationRightIconTemplate:l,paginationEndIconTemplate:c,classes:h},d,u)=>{const p=e.map(f=>f==="All"?`<option value="${f}" ${f===t?"selected":""}>${o}</option>`:`<option value="${f}" ${f===t?"selected":""}>${f}</option>`).join(`
+`);return`
+<div class="${h.pagination} ${u?`${h.paginationBordered}`:""} ${h.borderColor} ${h.color}">
+  <div class="${h.selectItemsWrapper}">  
+    <p class="${h.paginationRowsText} ${d?`${h.loadingPaginationRowsText}`:""}">${n}</p>
+    <div class="${h.selectWrapper} ${d?`${h.loadingPaginationSelectWrapper}`:""}">
+      <select name="entries"
+        ${d?"disabled":""} class="select" ${yC}>
+        ${p}
+      </select>
+    </div>
+  </div>
+  <div class="${h.paginationNav} ${d?`${h.loadingPaginationNav}`:""}" ${TC}>
+  ${s}
+  </div>
+  <div class="${h.paginationButtonsWrapper}">
+    ${i?`<button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationStartButton}" ${CC}>
+           ${r}
+          </button>`:""}
+    <button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationLeftButton}" ${xC}>
+      ${a}
+  </button>
+    <button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationRightButton}" ${EC}>
+      ${l}
+  </button>
+    ${i?`<button data-te-ripple-init data-te-ripple-color="dark" class="${h.paginationEndButton}" ${AC}>
+           ${c}
+          </button>`:""}
+  </div>
+</div>
+`},kC="data-te-datatable-sort-icon-ref",SC="data-te-datatable-header-checkbox-ref",OC=(s,t,e,i,n,o,r,a)=>{const l=e?`
+  <th scope="col">
+    <div class="${a.checkboxHeaderWrapper}">
+      <input
+        class="${a.checkboxHeader}"
+        type="checkbox"
+        value=""
+        ${SC}
+        />
+    </div>
+  </th>
+  `:'<th scope="col"></th>',c=s.map((h,d)=>{const u=h.fixed?s.filter((p,f)=>p.fixed===h.fixed&&f<d).reduce((p,f)=>p+f.width,0):null;return`<th class="${a.column} ${i?`${a.tableBordered}`:""} ${a.borderColor} ${n?`${a.sm}`:""} ${h.fixed?`${a.fixedHeader} ${a.color}`:""} ${o?`${a.loadingColumn}`:""}" style="${h.fixed?`${h.fixed==="right"?"right":"left"}: ${u}px;`:""}" scope="col">${h.sort?`<div class="${a.sortIconWrapper}"><span class="${a.sortIcon} ${o?"invisible":""}" data-te-sort="${h.field}" ${kC}>${r}</span>`:""} <span class="${h.sort?"":"pl-[18px]"}">${h.label}</span></div></th>`});return[t?l:"",...c].join(`
+`)},IC="data-te-datatable-row-ref",DC="data-te-datatable-row-checkbox-ref",MC="data-te-datatable-cell-ref",LC=({rows:s,columns:t,noFoundMessage:e,edit:i,selectable:n,loading:o,bordered:r,borderless:a,striped:l,hover:c,sm:h,classes:d})=>{const u=s.map(p=>{const f=`
+      <td data-te-field="checkbox" class="${r?`${d.tableBordered} ${d.borderColor}`:""}">
+        <div class="${d.checkboxRowWrapper}">
+          <input
+            class="${d.checkboxRow}"
+            type="checkbox"
+            value=""
+            data-te-row-index="${p.rowIndex}"  ${DC}/>
+        </div>
+      </td>`,b=t.map((v,y)=>{const T={};if(v.width&&(T["min-width"]=`${v.width-1}px`,T["max-width"]=`${v.width}px`,T.width=`${v.width}px`),v.fixed){const E=t.filter((C,A)=>C.fixed===v.fixed&&A<y).reduce((C,A)=>C+A.width,0);T[v.fixed==="right"?"right":"left"]=`${E}px`}return`<td style="${Object.keys(T).map(E=>`${E}: ${T[E]}`).join("; ")}" class="${d.rowItem} ${d.borderColor} ${i?`${d.edit}`:""} ${r?`${d.tableBordered}`:""} ${h?`${d.sm}`:""} ${v.fixed?`${d.fixedHeader} ${d.color}`:""}" ${MC} data-te-field="${v.field}" ${i&&'contenteditable="true"'}>${p[v.field]}</td>`}).join("");return`<tr scope="row" class="${d.row} ${d.borderColor} ${d.rowAnimation} ${l?`${d.striped}`:""} ${a?`${d.borderless}`:""} ${c?`${d.hoverRow}`:""}" data-te-index="${p.rowIndex}" ${IC}>${n?f:""}${b}</tr>`});return s.length>0||o?u.join(`
+`):`<tr class="${d.noFoundMessageWrapper} ${d.borderColor}"><td class="${d.noFoundMessage}">${e}</td></tr>`},$C="data-te-datatable-inner-ref",RC="data-te-datatable-header-ref",Op=({columns:s,rows:t,noFoundMessage:e,edit:i,multi:n,selectable:o,loading:r,loadingMessage:a,pagination:l,bordered:c,borderless:h,striped:d,hover:u,fixedHeader:p,sm:f,sortIconTemplate:b,classes:v})=>{const y=LC({rows:t,columns:s,noFoundMessage:e,edit:i,loading:r,selectable:o,bordered:c,borderless:h,striped:d,hover:u,sm:f,classes:v}),T=OC(s,o,n,c,f,r,b,v);return{table:`
+<div class="${v.color}" ${$C}>
+  <table class="${v.table}">
+    <thead class="${v.tableHeader} ${c?`${v.tableBordered}`:""} ${h?`${v.borderless}`:""} ${v.borderColor}" ${RC}>
+      <tr>
+        ${T}
+      </tr>
+    </thead>
+    <tbody class="${p?`${v.fixedHeaderBody}`:""}">
+      ${r?"":y}
+    </tbody>
+  </table>
+</div>
+${r?`
+  <div class="${v.loadingItemsWrapper}">
+    <div class="${v.loadingProgressBarWrapper}">
+      <div class="${v.loadingProgressBar}"></div>
+    </div>
+  </div>
+<p class="${v.loadingMessage}">${a}</p>
+`:""}
+${l.enable?wC(l,r,c):""}
+  `,rows:y,column:T}},PC=({rows:s,field:t,order:e})=>s.sort((n,o)=>{let r=n[t],a=o[t];return typeof r=="string"&&(r=r.toLowerCase()),typeof a=="string"&&(a=a.toLowerCase()),r<a?e==="desc"?1:-1:r>a?e==="desc"?-1:1:0}),NC=(s,t,e)=>{if(!t)return s;const i=n=>{const o=document.createElement("div");return o.innerHTML=n,n=o.textContent||o.innerText||"",n.toString().toLowerCase().match(t.toLowerCase())};return s.filter(n=>{if(e&&typeof e=="string")return i(n[e]);let o=Object.values(n);return e&&Array.isArray(e)&&(o=Object.keys(n).filter(r=>e.includes(r)).map(r=>n[r])),o.filter(r=>i(r)).length>0})},Ip=({rows:s,entries:t,activePage:e})=>{const i=e*t;return s.slice(i,i+Number(t))},un="datatable",Ht=`data-te-${un}`,pn=`te.${un}`,ur=`.${pn}`,BC=`[${Ht}-inner-ref]`,Xl=`[${Ht}-cell-ref]`,HC=`[${Ht}-header-ref]`,VC=`[${Ht}-header-checkbox-ref]`,FC=`[${Ht}-pagination-right-ref]`,WC=`[${Ht}-pagination-left-ref]`,zC=`[${Ht}-pagination-start-ref]`,jC=`[${Ht}-pagination-end-ref]`,YC=`[${Ht}-pagination-nav-ref]`,KC=`[${Ht}-select-ref]`,Gl=`[${Ht}-sort-icon-ref]`,fn=`[${Ht}-row-ref]`,ql=`[${Ht}-row-checkbox-ref]`,UC=`selectRows${ur}`,Dp=`render${ur}`,XC=`rowClick${ur}`,GC=`update${ur}`,qC=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 10.5L12 3m0 0l7.5 7.5M12 3v18" />
+</svg>`,ZC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M18.75 19.5l-7.5-7.5 7.5-7.5m-6 15L5.25 12l7.5-7.5" />
+</svg>`,QC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M15.75 19.5L8.25 12l7.5-7.5" />
+</svg>`,JC=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M8.25 4.5l7.5 7.5-7.5 7.5" />
+</svg>`,tA=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M11.25 4.5l7.5 7.5-7.5 7.5m-6-15l7.5 7.5-7.5 7.5"/>
+</svg>`,eA="border-neutral-200 dark:border-neutral-500",iA="border-none",sA="relative float-left -ml-[1.5rem] mr-[6px] mt-[0.15rem] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:-mt-px checked:after:ml-[0.25rem] checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-l-0 checked:after:border-t-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:-mt-px checked:focus:after:ml-[0.25rem] checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-l-0 checked:focus:after:border-t-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent dark:border-neutral-600 dark:checked:border-primary dark:checked:bg-primary dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:border-neutral-400",nA="mb-[0.125rem] min-h-[1.5rem] pl-[1.5rem] ml-3 flex items-center",oA="relative float-left -ml-[1.5rem] mr-[6px] mt-[0.15rem] h-[1.125rem] w-[1.125rem] appearance-none rounded-[0.25rem] border-[0.125rem] border-solid border-neutral-300 outline-none before:pointer-events-none before:absolute before:h-[0.875rem] before:w-[0.875rem] before:scale-0 before:rounded-full before:bg-transparent before:opacity-0 before:shadow-[0px_0px_0px_13px_transparent] before:content-[''] checked:border-primary checked:bg-primary checked:before:opacity-[0.16] checked:after:absolute checked:after:-mt-px checked:after:ml-[0.25rem] checked:after:block checked:after:h-[0.8125rem] checked:after:w-[0.375rem] checked:after:rotate-45 checked:after:border-[0.125rem] checked:after:border-l-0 checked:after:border-t-0 checked:after:border-solid checked:after:border-white checked:after:bg-transparent checked:after:content-[''] hover:cursor-pointer hover:before:opacity-[0.04] hover:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:shadow-none focus:transition-[border-color_0.2s] focus:before:scale-100 focus:before:opacity-[0.12] focus:before:shadow-[0px_0px_0px_13px_rgba(0,0,0,0.6)] focus:before:transition-[box-shadow_0.2s,transform_0.2s] focus:after:absolute focus:after:z-[1] focus:after:block focus:after:h-[0.875rem] focus:after:w-[0.875rem] focus:after:rounded-[0.125rem] focus:after:content-[''] checked:focus:before:scale-100 checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] checked:focus:before:transition-[box-shadow_0.2s,transform_0.2s] checked:focus:after:-mt-px checked:focus:after:ml-[0.25rem] checked:focus:after:h-[0.8125rem] checked:focus:after:w-[0.375rem] checked:focus:after:rotate-45 checked:focus:after:rounded-none checked:focus:after:border-[0.125rem] checked:focus:after:border-l-0 checked:focus:after:border-t-0 checked:focus:after:border-solid checked:focus:after:border-white checked:focus:after:bg-transparent dark:border-neutral-600 dark:checked:border-primary dark:checked:bg-primary dark:focus:before:shadow-[0px_0px_0px_13px_rgba(255,255,255,0.4)] dark:checked:focus:before:shadow-[0px_0px_0px_13px_#3b71ca] dark:border-neutral-400",rA="mb-[0.125rem] min-h-[1.5rem] pl-[1.5rem] ml-3 flex items-center",aA="bg-white dark:bg-neutral-800",lA="py-4 pl-1 text-clip overflow-hidden text-[#212529] dark:text-white",cA="focus:outline-none",hA="sticky top-0 z-30",dA="sticky z-10 bg-inherit",uA="hover:bg-neutral-100 dark:hover:bg-neutral-700",pA="pointer-events-none cursor-none text-neutral-400 dark:text-neutral-300",fA="h-[2px] relative w-full overflow-hidden",_A="text-center text-neutral-500 font-ligh text-sm my-4 dark:text-neutral-400",gA="text-neutral-500 dark:text-neutral-300",mA="text-neutral-500 dark:text-neutral-300",bA="pointer-events-none cursor-none",vA="h-full w-[45%] bg-primary-400 dark:bg-primary-600",yA="h-full animate-[progress_3s_ease-in-out_infinite]",TA="pl-2 py-3 font-light text-sm dark:text-neutral-300",EA="border-b",xA="flex md:flex-row justify-end items-center py-2 space-x-4 text-sm flex-col leading-[1.6]",CA="border border-t-0",AA="order-1 my-3 md:order-none md:my-0 md:pr-1",wA="inline-block rounded p-2.5 text-xs font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",kA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",SA="font-normal order-2 mb-3 md:order-none md:mb-0",OA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",IA="font-light",DA="inline-block rounded p-2.5 font-medium uppercase leading-normal transition duration-150 ease-in-out hover:bg-neutral-100 hover:text-primary-600 focus:text-primary-600 focus:outline-none focus:ring-0 active:text-primary-700 disabled:text-slate-300 disabled:hover:bg-transparent dark:hover:bg-neutral-500 dark:disabled:hover:bg-transparent dark:disabled:text-neutral-600",MA="border-b",LA="transition ease-in-out duration-300 motion-reduce:transition-none",$A="whitespace-nowrap text-clip overflow-auto px-[1.4rem] py-4",RA="relative",PA="!bg-neutral-100 dark:!bg-neutral-600",NA="flex items-center space-x-4 order-3 md:order-none",BA="w-[70px]",HA="!py-2",VA="w-[15px] h-[10px] origin-bottom font-black mr-1 opacity-0 text-neutral-500 group-hover:opacity-100 transition hover:ease-in-out transform ease-linear duration-300 motion-reduce:transition-none dark:text-neutral-400",FA="flex flex-row group",WA="[&:nth-child(odd)]:bg-neutral-50 [&:nth-child(odd)]:dark:bg-neutral-700",zA="border",jA="border-b font-normal px-[1.4rem]",YA="text-left text-sm font-light w-full leading-[1.6]",KA={bordered:"boolean",borderless:"boolean",clickableRows:"boolean",defaultValue:"string",edit:"boolean",entries:"(number|string)",entriesOptions:"array",fullPagination:"boolean",hover:"boolean",loading:"boolean",loadingMessage:"string",maxWidth:"(null|number|string)",maxHeight:"(null|number|string)",multi:"boolean",noFoundMessage:"string",pagination:"boolean",selectable:"boolean",sm:"boolean",sortField:"(null|string)",sortOrder:"string",fixedHeader:"boolean",striped:"boolean",rowsText:"string",ofText:"string",allText:"string",forceSort:"boolean",sortIconTemplate:"string",paginationStartIconTemplate:"string",paginationEndIconTemplate:"string",paginationLeftIconTemplate:"string",paginationRightIconTemplate:"string"},UA={bordered:!1,borderless:!1,clickableRows:!1,defaultValue:"-",edit:!1,entries:10,entriesOptions:[10,25,50,200],fixedHeader:!1,fullPagination:!1,hover:!1,loading:!1,loadingMessage:"Loading results...",maxWidth:null,maxHeight:null,multi:!1,noFoundMessage:"No matching results found",pagination:!0,selectable:!1,sm:!1,sortField:null,sortOrder:"asc",striped:!1,rowsText:"Rows per page:",ofText:"of",allText:"All",forceSort:!1,sortIconTemplate:qC,paginationStartIconTemplate:ZC,paginationEndIconTemplate:tA,paginationLeftIconTemplate:QC,paginationRightIconTemplate:JC},XA={label:"string",field:"string",fixed:"(boolean|string)",format:"(function|null)",width:"(number|null)",sort:"boolean",columnIndex:"number"},GA={label:"",field:"",fixed:!1,format:null,width:null,sort:!0,columnIndex:0},qA={table:YA,tableHeader:jA,column:lA,pagination:xA,selectWrapper:BA,scroll:RA,tableBordered:zA,paginationBordered:CA,borderless:iA,checkboxRowWrapper:rA,checkboxRow:oA,checkboxHeaderWrapper:nA,checkboxHeader:sA,row:MA,rowItem:$A,striped:WA,sortIconWrapper:FA,sortIcon:VA,paginationRowsText:IA,paginationNav:SA,paginationButtonsWrapper:AA,hoverRow:uA,borderColor:eA,color:aA,fixedHeader:hA,fixedHeaderBody:dA,selectableRow:PA,rowAnimation:LA,sm:HA,edit:cA,selectItemsWrapper:NA,paginationStartButton:DA,paginationLeftButton:kA,paginationRightButton:OA,paginationEndButton:wA,loadingItemsWrapper:fA,loadingProgressBarWrapper:yA,loadingProgressBar:vA,loadingMessage:_A,loadingPaginationRowsText:mA,loadingPaginationSelectWrapper:bA,loadingPaginationNav:gA,loadingColumn:pA,noFoundMessageWrapper:EA,noFoundMessage:TA},ZA={table:"string",tableHeader:"string",column:"string",pagination:"string",selectWrapper:"string",scroll:"string",tableBordered:"string",paginationBordered:"string",borderless:"string",checkboxRowWrapper:"string",checkboxRow:"string",checkboxHeaderWrapper:"string",checkboxHeader:"string",row:"string",rowItem:"string",striped:"string",sortIconWrapper:"string",sortIcon:"string",paginationRowsText:"string",paginationNav:"string",paginationButtonsWrapper:"string",hoverRow:"string",borderColor:"string",color:"string",fixedHeader:"string",fixedHeaderBody:"string",selectableRow:"string",rowAnimation:"string",sm:"string",edit:"string",selectItemsWrapper:"string",paginationStartButton:"string",paginationLeftButton:"string",paginationRightButton:"string",paginationEndButton:"string",loadingItemsWrapper:"string",loadingProgressBarWrapper:"string",loadingProgressBar:"string",loadingMessage:"string",loadingPaginationRowsText:"string",loadingPaginationSelectWrapper:"string",loadingPaginationNav:"string",loadingColumn:"string",noFoundMessageWrapper:"string",noFoundMessage:"string"};class pr{constructor(t,e={},i={},n={}){this._element=t,this._options=this._getOptions(i),this._classes=this._getClasses(n),this._sortReverse=!1,this._activePage=0,this._search="",this._searchColumn=null,this._paginationLeft=null,this._paginationRight=null,this._paginationStart=null,this._paginationEnd=null,this._select=null,this._selectInstance=null,this._selected=[],this._checkboxes=null,this._headerCheckbox=null,this._rows=this._getRows(e.rows),this._columns=this._getColumns(e.columns),this._element&&(O.setData(t,pn,this),this._perfectScrollbar=null,this._setup())}static get NAME(){return un}get columns(){return this._columns.map((t,e)=>{let i={...GA,field:`field_${e}`,columnIndex:e};return typeof t=="string"?i.label=t:typeof t=="object"&&(i={...i,...t}),L("column",i,XA),i})}get rows(){return this._rows.map((t,e)=>{const i={rowIndex:e};return Array.isArray(t)?this.columns.forEach((n,o)=>{t[o]===0?i[n.field]=t[o]:i[n.field]=t[o]||this._options.defaultValue}):typeof t=="object"&&this.columns.forEach(n=>{t[n.field]===0?i[n.field]=t[n.field]:i[n.field]=t[n.field]||this._options.defaultValue}),i})}get searchResult(){return NC(this.rows,this._search,this._searchColumn)}get computedRows(){let t=[...this.searchResult];return this._options.sortOrder&&(t=PC({rows:t,field:this._options.sortField,order:this._options.sortOrder})),this._options.pagination&&(this._options.entries==="All"?t=Ip({rows:t,entries:t.length,activePage:this._activePage}):t=Ip({rows:t,entries:this._options.entries,activePage:this._activePage})),t}get pages(){return this._options.entries==="All"?1:Math.ceil(this.searchResult.length/this._options.entries)}get navigationText(){const t=this._activePage*this._options.entries;return this.searchResult.length===0?`0 ${this._options.ofText} 0`:this._options.entries==="All"?`1 - ${this.searchResult.length} ${this._options.ofText} ${this.searchResult.length}`:`${t+1} - ${this.computedRows.length+t} ${this._options.ofText} ${this.searchResult.length}`}get tableOptions(){return{classes:this._classes,columns:this.columns,rows:this.computedRows,noFoundMessage:this._options.noFoundMessage,edit:this._options.edit,loading:this._options.loading,loaderClass:this._options.loaderClass,loadingMessage:this._options.loadingMessage,selectable:this._options.selectable,multi:this._options.multi,bordered:this._options.bordered,borderless:this._options.borderless,striped:this._options.striped,hover:this._options.hover,fixedHeader:this._options.fixedHeader,sm:this._options.sm,sortIconTemplate:this._options.sortIconTemplate,pagination:{enable:this._options.pagination,text:this.navigationText,entries:this._options.entries,entriesOptions:this._options.entriesOptions,fullPagination:this._options.fullPagination,rowsText:this._options.rowsText,ofText:this._options.ofText,allText:this._options.allText,paginationStartIconTemplate:this._options.paginationStartIconTemplate,paginationLeftIconTemplate:this._options.paginationLeftIconTemplate,paginationRightIconTemplate:this._options.paginationRightIconTemplate,paginationEndIconTemplate:this._options.paginationEndIconTemplate,classes:this._classes},forceSort:this._options.forceSort}}update(t,e={}){t&&t.rows&&(this._rows=t.rows),t&&t.columns&&(this._columns=t.columns),this._clearClassList(e),this._options=this._getOptions({...this._options,...e}),this._setup(),this._performSort()}dispose(){this._selectInstance&&this._selectInstance.dispose(),O.removeData(this._element,pn),this._removeEventListeners(),this._perfectScrollbar.destroy(),this._element=null}search(t,e){this._search=t,this._searchColumn=e,this._activePage=0,this._options.pagination&&this._toggleDisableState(),this._renderRows(),this._options.maxHeight&&(this._perfectScrollbar.element.scrollTop=0,this._perfectScrollbar.update())}sort(t,e="asc"){this._options.sortOrder=e,typeof t=="string"?this._options.sortField=this.columns.find(n=>n.label===t).field:this._options.sortField=t.field;const i=m.findOne(`[data-te-sort="${this._options.sortField}"]`,this._element);this._activePage=0,this._toggleDisableState(),this._renderRows(),this._setActiveSortIcon(i)}setActivePage(t){t<this.pages&&this._changeActivePage(t)}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...qA,...e,...t},L(un,t,ZA),t}_changeActivePage(t){this._activePage=t,this._toggleDisableState(),this._renderRows()}_clearClassList(t){["hover","bordered","borderless","sm","striped"].forEach(e=>{this._options[e]&&!t[e]&&g.removeDataAttribute(`data-te-${e}`)})}_emitSelectEvent(){_.trigger(this._element,UC,{selectedRows:this.rows.filter(t=>this._selected.indexOf(t.rowIndex)!==-1),selectedIndexes:this._selected,allSelected:this._selected.length===this.rows.length})}_getRows(t=[]){const e=m.findOne("tbody",this._element);return e?[...m.find("tr",e).map(n=>m.find("td",n).map(o=>o.innerHTML)),...t]:t}_getColumns(t=[]){const e=m.findOne("thead",this._element);if(!e)return t;const i=m.findOne("tr",e);return[...m.find("th",i).map(o=>({label:o.innerHTML,...g.getDataAttributes(o)})),...t]}_getCSSValue(t){return typeof t=="string"?t:`${t}px`}_getOptions(t){const e={...UA,...g.getDataAttributes(this._element),...t};return L(un,e,KA),e}_setActiveRows(){m.find(fn,this._element).forEach(t=>{this._selected.includes(g.getDataAttribute(t,"index"))?g.addClass(t,`active ${this._classes.selectableRow}`):g.removeClass(t,`active ${this._classes.selectableRow}`)})}_setEntries(t){this._options=this._getOptions({...this._options,entries:t.target.value}),this._activePage>this.pages-1&&(this._activePage=this.pages-1),this._toggleDisableState(),this._renderRows()}_setSelected(){m.find(ql,this._element).forEach(t=>{const e=g.getDataAttribute(t,"rowIndex");t.checked=this._selected.includes(e)}),this._setActiveRows()}_setActiveSortIcon(t){m.find(Gl,this._element).forEach(e=>{const i=this._options.sortOrder==="desc"&&e===t?180:0;g.style(e,{transform:`rotate(${i}deg)`}),e===t&&this._options.sortOrder?g.addClass(e,"opacity-100"):g.removeClass(e,"opacity-100")})}_setup(){this._renderTable(),this._options.pagination&&this._setupPagination(),this._options.edit&&this._setupEditable(),this._options.clickableRows&&this._setupClickableRows(),this._options.selectable&&this._setupSelectable(),this._setupScroll(),this._setupSort()}_setupClickableRows(){m.find(fn,this._element).forEach(t=>{const e=g.getDataAttribute(t,"index");g.addClass(t,"cursor-pointer"),_.on(t,"click",i=>{m.matches(i.target,ql)||_.trigger(this._element,XC,{index:e,row:this.rows[e]})})})}_setupEditable(){m.find(fn,this._element).forEach(t=>{const e=g.getDataAttribute(t,"index");m.find(Xl,t).forEach(i=>{_.on(i,"input",n=>this._updateRow(n,e))})})}_setupScroll(){const t=m.findOne(BC,this._element),e={};if(this._options.maxHeight&&(e.maxHeight=this._getCSSValue(this._options.maxHeight)),this._options.maxWidth){const i=this._getCSSValue(this._options.maxWidth);e.maxWidth=i,g.style(this._element,{maxWidth:i})}if(g.style(t,e),g.addClass(t,`${this._classes.scroll}`),this._options.fixedHeader){let i=m.find(HC,this._element);this._options.selectable&&(i=i.filter((n,o)=>(g.addClass(n,`${this._classes.fixedHeader} ${this._classes.color}`),o!==0))),i.forEach((n,o)=>{g.addClass(n,`${this._classes.fixedHeader} ${this._classes.color}`),this.columns[o].fixed&&g.addClass(n,"!z-40")})}this._perfectScrollbar=new ms(t)}_setupSort(){m.find(Gl,this._element).forEach(t=>{const e=g.getDataAttribute(t,"sort"),[i]=m.parents(t,"th");if(this.columns.sort)g.addClass(i,"cursor-pointer");else return;e===this._options.sortField&&this._setActiveSortIcon(t),_.on(i,"click",()=>{this._options.sortField===e&&this._options.sortOrder==="asc"?this._options.sortOrder="desc":this._options.sortField===e&&this._options.sortOrder==="desc"?this._options.sortOrder=this._options.forceSort?"asc":null:this._options.sortOrder="asc",this._options.sortField=e,this._activePage=0,this._performSort(),this._setActiveSortIcon(t)})})}_performSort(){this._toggleDisableState(),this._renderRows()}_setupSelectable(){this._checkboxes=m.find(ql,this._element),this._headerCheckbox=m.findOne(VC,this._element),_.on(this._headerCheckbox,"input",t=>this._toggleSelectAll(t)),this._checkboxes.forEach(t=>{const e=g.getDataAttribute(t,"rowIndex");_.on(t,"input",i=>this._toggleSelectRow(i,e))})}_setupPagination(){this._paginationRight=m.findOne(FC,this._element),this._paginationLeft=m.findOne(WC,this._element),_.on(this._paginationRight,"click",()=>this._changeActivePage(this._activePage+1)),_.on(this._paginationLeft,"click",()=>this._changeActivePage(this._activePage-1)),this._options.fullPagination&&(this._paginationStart=m.findOne(zC,this._element),this._paginationEnd=m.findOne(jC,this._element),_.on(this._paginationStart,"click",()=>this._changeActivePage(0)),_.on(this._paginationEnd,"click",()=>this._changeActivePage(this.pages-1))),this._toggleDisableState(),this._setupPaginationSelect()}_setupPaginationSelect(){this._select=m.findOne(KC,this._element),this._selectInstance=new on(this._select),_.on(this._select,"valueChange.te.select",t=>this._setEntries(t))}_removeEventListeners(){this._options.pagination&&(_.off(this._paginationRight,"click"),_.off(this._paginationLeft,"click"),_.off(this._select,"valueChange.te.select"),this._options.fullPagination&&(_.off(this._paginationStart,"click"),_.off(this._paginationEnd,"click"))),this._options.edit&&m.find(Xl,this._element).forEach(t=>{_.off(t,"input")}),this._options.clickableRows&&m.find(fn,this._element).forEach(t=>{_.off(t,"click")}),m.find(Gl,this._element).forEach(t=>{const[e]=m.parents(t,"th");_.off(e,"click")}),this._options.selectable&&(_.off(this._headerCheckbox,"input"),this._checkboxes.forEach(t=>{_.off(t,"input")}))}_renderTable(){this._element.innerHTML=Op(this.tableOptions).table,this._formatCells(),_.trigger(this._element,Dp)}_renderRows(){const t=m.findOne("tbody",this._element);if(this._options.pagination){const e=m.findOne(YC,this._element);e.innerText=this.navigationText}t.innerHTML=Op(this.tableOptions).rows,this._formatCells(),this._options.edit&&this._setupEditable(),this._options.selectable&&(this._setupSelectable(),this._setSelected()),this._options.clickableRows&&this._setupClickableRows(),_.trigger(this._element,Dp)}_formatCells(){m.find(fn,this._element).forEach(e=>{const i=g.getDataAttribute(e,"index");m.find(Xl,e).forEach(o=>{const r=g.getDataAttribute(o,"field"),a=this.columns.find(l=>l.field===r);a&&a.format!==null&&a.format(o,this.rows[i][r])})})}_toggleDisableState(){this._options.pagination!==!1&&(this._activePage===0||this._options.loading?(this._paginationLeft.setAttribute("disabled",""),this._options.fullPagination&&this._paginationStart.setAttribute("disabled","")):(this._paginationLeft.removeAttribute("disabled"),this._options.fullPagination&&this._paginationStart.removeAttribute("disabled")),this._activePage===this.pages-1||this._options.loading||this.pages===0?(this._paginationRight.setAttribute("disabled",""),this._options.fullPagination&&this._paginationEnd.setAttribute("disabled","")):(this._paginationRight.removeAttribute("disabled"),this._options.fullPagination&&this._paginationEnd.removeAttribute("disabled")))}_toggleSelectAll(t){t.target.checked?this._selected=this.rows.map(e=>e.rowIndex):this._selected=[],this._setSelected(),this._emitSelectEvent()}_toggleSelectRow(t,e){t.target.checked?this._options.multi&&!this._selected.includes(e)?this._selected=[...this._selected,e]:(this._selected=[e],this._checkboxes.forEach(i=>{i!==t.target&&(i.checked=!1)})):this._selected=this._selected.filter(i=>i!==e),this._options.multi&&!t.target.checked&&(this._headerCheckbox.checked=!1),this._setActiveRows(),this._emitSelectEvent()}_updateRow(t,e){const i=g.getDataAttribute(t.target,"field"),n=t.target.textContent,o=this._rows[e];if(Array.isArray(o)){const a=this.columns.find(l=>l.field===i).columnIndex;o[a]=n}else o[i]=n;_.trigger(this._element,GC,{rows:this._rows,columns:this._columns})}static jQueryInterface(t,e,i){return this.each(function(){let n=O.getData(this,pn);const o=typeof t=="object"&&t;if(!(!n&&/dispose/.test(t))&&(n||(n=new pr(this,o,e)),typeof t=="string")){if(typeof n[t]>"u")throw new TypeError(`No method named "${t}"`);n[t](e,i)}})}static getInstance(t){return O.getData(t,pn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Mp="rating",fr="te.rating",QA="data-te-rating-init",JA="[data-te-rating-icon-ref]",bs=`.${fr}`,tw="ArrowLeft",ew="ArrowRight",iw={tooltip:"string",value:"(string|number)",readonly:"boolean",after:"string",before:"string",dynamic:"boolean",active:"string"},sw={tooltip:"top",value:"",readonly:!1,after:"",before:"",dynamic:!1,active:"fill-current"},Lp=`onSelect${bs}`,nw=`onHover${bs}`,$p=`keyup${bs}`,Rp=`focusout${bs}`,Pp=`keydown${bs}`,Np=`mousedown${bs}`;class Bp{constructor(t,e){this._element=t,this._icons=m.find(JA,this._element),this._options=this._getConfig(e),this._index=-1,this._savedIndex=null,this._originalClassList=[],this._originalIcons=[],this._fn={},this._tooltips=[],this._element&&(O.setData(t,fr,this),this._init())}static get NAME(){return Mp}dispose(){O.removeData(this._element,fr),this._options.readonly||(_.off(this._element,$p),_.off(this._element,Rp),_.off(this._element,Pp),this._element.removeEventListener("mouseleave",this._fn.mouseleave),this._icons.forEach((t,e)=>{_.off(t,Np),t.removeEventListener("mouseenter",this._fn.mouseenter[e]),g.removeClass(t,"cursor-pointer")}),this._tooltips.forEach(t=>{t._element.removeAttribute(QA),t.dispose()}),this._icons.forEach(t=>t.removeAttribute("tabIndex"))),this._element=null}_init(){this._options.readonly||(this._bindMouseEnter(),this._bindMouseLeave(),this._bindMouseDown(),this._bindKeyDown(),this._bindKeyUp(),this._bindFocusLost(),this._icons.forEach(t=>{g.addClass(t,"cursor-pointer")})),this._options.dynamic&&(this._saveOriginalClassList(),this._saveOriginalIcons()),this._setCustomText(),this._setToolTips(),this._options.value&&(this._index=this._options.value-1,this._updateRating(this._index))}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...sw,...e,...t},L(Mp,t,iw),t}_bindMouseEnter(){this._fn.mouseenter=[],this._icons.forEach((t,e)=>{t.addEventListener("mouseenter",this._fn.mouseenter[e]=i=>{this._index=this._icons.indexOf(i.target),this._updateRating(this._index),this._triggerEvents(t,nw)})})}_bindMouseLeave(){this._element.addEventListener("mouseleave",this._fn.mouseleave=()=>{this._savedIndex!==null?(this._updateRating(this._savedIndex),this._index=this._savedIndex):this._options.value?(this._updateRating(this._options.value-1),this._index=this._options.value-1):(this._index=-1,this._clearRating())})}_bindMouseDown(){this._icons.forEach(t=>{_.on(t,Np,()=>{this._setElementOutline("none"),this._savedIndex=this._index,this._triggerEvents(t,Lp)})})}_bindKeyDown(){this._element.tabIndex=0,_.on(this._element,Pp,t=>this._updateAfterKeyDown(t))}_bindKeyUp(){_.on(this._element,$p,()=>this._setElementOutline("auto"))}_bindFocusLost(){_.on(this._element,Rp,()=>this._setElementOutline("none"))}_setElementOutline(t){this._element.style.outline=t}_triggerEvents(t,e){_.trigger(t,e,{value:this._index+1})}_updateAfterKeyDown(t){const e=this._icons.length-1,i=this._index;t.key===ew&&this._index<e&&(this._index+=1),t.key===tw&&this._index>-1&&(this._index-=1),i!==this._index&&(this._savedIndex=this._index,this._updateRating(this._savedIndex),this._triggerEvents(this._icons[this._savedIndex],Lp))}_updateRating(t){this._clearRating(),this._options.dynamic&&this._restoreOriginalIcon(t),this._icons.forEach((e,i)=>{i<=t&&g.addClass(e.querySelector("svg"),this._options.active)})}_clearRating(){this._icons.forEach((t,e)=>{const i=t.querySelector("svg");this._options.dynamic&&(t.classList=this._originalClassList[e],i.innerHTML=this._originalIcons[e]),g.removeClass(i,this._options.active)})}_setToolTips(){this._icons.forEach((t,e)=>{const i=g.getDataAttribute(t,"toggle");t.title&&!i&&(g.setDataAttribute(t,"toggle","tooltip"),this._tooltips[e]=new is(t,{placement:this._options.tooltip}))})}_setCustomText(){this._icons.forEach(t=>{const e=g.getDataAttribute(t,"after"),i=g.getDataAttribute(t,"before");e&&t.insertAdjacentHTML("afterEnd",e),i&&t.insertAdjacentHTML("beforeBegin",i)})}_saveOriginalClassList(){this._icons.forEach(t=>{const e=t.classList.value;this._originalClassList.push(e)})}_saveOriginalIcons(){this._icons.forEach(t=>{const e=t.querySelector("svg").innerHTML;this._originalIcons.push(e)})}_restoreOriginalIcon(t){const e=this._originalClassList[t],i=this._originalIcons[t];this._icons.forEach((n,o)=>{if(o<=t){const r=n.querySelector("svg");r.innerHTML=i,n.classList=e}})}static getInstance(t){return O.getData(t,fr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Zl="popconfirm",_n="te.popconfirm",Hp=`.${_n}`,ow=`cancel${Hp}`,rw=`confirm${Hp}`,aw="[data-te-popconfirm-body]",Ql="data-te-popconfirm-popover",lw="data-te-popconfirm-modal",Vp="data-te-popconfirm-backdrop",cw={popconfirmMode:"string",message:"string",cancelText:"(null|string)",okText:"(null|string)",popconfirmIconTemplate:"string",cancelLabel:"(null|string)",confirmLabel:"(null|string)",position:"(null|string)"},hw={popconfirmMode:"inline",message:"Are you sure?",cancelText:"Cancel",okText:"OK",popconfirmIconTemplate:"",cancelLabel:"Cancel",confirmLabel:"Confirm",position:"bottom"},dw={backdrop:"string",body:"string",btnCancel:"string",btnConfirm:"string",btnsContainer:"string",fade:"string",icon:"string",message:"string",messageText:"string",modal:"string",popover:"string"},uw={backdrop:"h-full w-full z-[1070] fixed top-0 left-0 bg-[#00000066] flex justify-center items-center",body:"p-[1rem] bg-white rounded-[0.5rem] opacity-0 dark:bg-neutral-700",btnCancel:"inline-block rounded bg-primary-100 px-4 pb-[5px] pt-[6px] text-xs font-medium uppercase leading-normal text-primary-700 transition duration-150 ease-in-out hover:bg-primary-accent-100 focus:bg-primary-accent-100 focus:outline-none focus:ring-0 active:bg-primary-accent-200",btnConfirm:"inline-block rounded bg-primary px-4 pb-[5px] pt-[6px] text-xs font-medium uppercase leading-normal text-white shadow-[0_4px_9px_-4px_#3b71ca] transition duration-150 ease-in-out hover:bg-primary-600 hover:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] focus:bg-primary-600 focus:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] focus:outline-none focus:ring-0 active:bg-primary-700 active:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.3),0_4px_18px_0_rgba(59,113,202,0.2)] dark:shadow-[0_4px_9px_-4px_rgba(59,113,202,0.5)] dark:hover:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)] dark:focus:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)] dark:active:shadow-[0_8px_9px_-4px_rgba(59,113,202,0.2),0_4px_18px_0_rgba(59,113,202,0.1)]",btnsContainer:"flex justify-end space-x-2",fade:"transition-opacity duration-[150ms] ease-linear",icon:"pr-2",message:"flex mb-3",messageText:"text-neutral-600 dark:text-white",modal:"absolute w-[300px] z-[1080] shadow-sm rounded-[0.5rem]",popover:"w-[300px] border-0 rounded-[0.5rem] z-[1080] shadow-sm"};class _r{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._popper=null,this._cancelButton="",this._confirmButton="",this._isOpen=!1,this._uid=this._element.id?`popconfirm-${this._element.id}`:bt("popconfirm-"),t&&O.setData(t,_n,this),this._clickHandler=this.open.bind(this),_.on(this._element,"click",this._clickHandler)}static get NAME(){return Zl}get container(){return m.findOne(`#${this._uid}`)}get popconfirmBody(){return m.findOne(aw,this.container)}dispose(){(this._isOpen||this.container!==null)&&this.close(),O.removeData(this._element,_n),_.off(this._element,"click",this._clickHandler),this._element=null}open(){this._isOpen||(this._options.popconfirmMode==="inline"?this._openPopover(this._getPopoverTemplate()):this._openModal(this._getModalTemplate()),this._handleCancelButtonClick(),this._handleConfirmButtonClick(),this._listenToEscapeKey(),this._listenToOutsideClick())}close(){if(this._isOpen){if(this._popper!==null||m.findOne(`[${Ql}]`)!==null)_.on(this.popconfirmBody,"transitionend",this._handlePopconfirmTransitionEnd.bind(this)),g.removeClass(this.popconfirmBody,"opacity-100");else{const t=m.findOne(`[${Vp}]`);g.removeClass(this.popconfirmBody,"opacity-100"),document.body.removeChild(t),this._isOpen=!1}_.off(document,"click",this._handleOutsideClick.bind(this)),_.off(document,"keydown",this._handleEscapeKey.bind(this))}}_handlePopconfirmTransitionEnd(t){if(t.target!==this.popconfirmBody)return;const e=m.findOne(`[${Ql}]`);_.off(this.popconfirmBody,"transitionend"),this._isOpen&&t&&t.propertyName==="opacity"&&(this._popper.destroy(),e&&document.body.removeChild(e),this._isOpen=!1)}_getPopoverTemplate(){const t=$("div"),e=this._getPopconfirmTemplate();return t.setAttribute(Ql,""),g.addClass(t,this._classes.popover),t.id=this._uid,t.innerHTML=e,t}_getModalTemplate(){const t=$("div"),e=this._getPopconfirmTemplate();return t.setAttribute(lw,""),g.addClass(t,`${this._classes.modal}`),t.id=this._uid,t.innerHTML=e,t}_getPopconfirmTemplate(){return`<div data-te-popconfirm-body class="${this._classes.body}">
+      <p class="${this._classes.message}">
+      ${this._options.popconfirmIconTemplate?`<span class="${this._classes.icon}">${this._options.popconfirmIconTemplate}</span>`:""}
+      <span class="${this._classes.messageText}">${this._options.message}</span>
+      </p>
+      <div class="${this._classes.btnsContainer}">
+      ${this._options.cancelText?`<button type="button" data-te-ripple-init data-te-ripple-color="light" id="popconfirm-button-cancel" aria-label="${this._options.cancelLabel}"
+        class="${this._classes.btnCancel}">${this._options.cancelText}</button>`:""}
+      <button type="button" data-te-ripple-init data-te-ripple-color="light" id="popconfirm-button-confirm"
+      aria-label="${this._options.confirmLabel}"
+      class="${this._classes.btnConfirm}">${this._options.okText?this._options.okText:"Ok"}</button>
+      </div>
+    </div>`}_getConfig(t){return t={...hw,...g.getDataAttributes(this._element),...t},L(Zl,t,cw),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...uw,...e,...t},L(Zl,t,dw),t}_openPopover(t){this._popper=Fe(this._element,t,{placement:this._translatePositionValue(),modifiers:[{name:"offset",options:{offset:[0,5]}}]}),document.body.appendChild(t),setTimeout(()=>{g.addClass(this.popconfirmBody,`${this._classes.fade} opacity-100`),this._isOpen=!0},0)}_openModal(t){const e=$("div");e.setAttribute(Vp,""),g.addClass(e,this._classes.backdrop),document.body.appendChild(e),e.appendChild(t),g.addClass(this.popconfirmBody,"opacity-100"),this._isOpen=!0}_handleCancelButtonClick(){const t=this.container;this._cancelButton=m.findOne("#popconfirm-button-cancel",t),Ye.getOrCreateInstance(this._cancelButton,{rippleColor:"light"}),this._cancelButton!==null&&_.on(this._cancelButton,"click",()=>{this.close(),_.trigger(this._element,ow)})}_handleConfirmButtonClick(){const t=this.container;this._confirmButton=m.findOne("#popconfirm-button-confirm",t),Ye.getOrCreateInstance(this._confirmButton,{rippleColor:"light"}),_.on(this._confirmButton,"click",()=>{this.close(),_.trigger(this._element,rw)})}_listenToEscapeKey(){_.on(document,"keydown",this._handleEscapeKey.bind(this))}_handleEscapeKey(t){t.keyCode===xi&&this.close()}_listenToOutsideClick(){_.on(document,"click",this._handleOutsideClick.bind(this))}_handleOutsideClick(t){const e=this.container,i=t.target===e,n=e&&e.contains(t.target),o=t.target===this._element,r=this._element&&this._element.contains(t.target);!i&&!n&&!o&&!r&&this.close()}_translatePositionValue(){switch(this._options.position){case"top left":return"top-end";case"top":return"top";case"top right":return"top-start";case"bottom left":return"bottom-end";case"bottom":return"bottom";case"bottom right":return"bottom-start";case"left":return"left";case"left top":return"left-end";case"left bottom":return"left-start";case"right":return"right";case"right top":return"right-end";case"right bottom":return"right-start";case void 0:return"bottom";default:return"bottom"}}static jQueryInterface(t,e){return this.each(function(){const i=O.getData(this,_n),n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))){if(!i)return new _r(this,n);if(typeof t=="string"){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}}})}static getInstance(t){return O.getData(t,_n)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Jl="lightbox",gn="te.lightbox",vs=`click${`.${gn}`}.data-api`,Fp="[data-te-lightbox-init]",pw=`${Fp} img:not([data-te-lightbox-disabled])`,Wp="data-te-lightbox-caption",fw="data-te-lightbox-disabled",ye="data-te-lightbox-active",_w=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 12h-15m0 0l6.75 6.75M4.5 12l6.75-6.75" />
+</svg>
+`,gw=`<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M4.5 12h15m0 0l-6.75-6.75M19.5 12l-6.75 6.75" />
+</svg>
+`,mw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M3.75 3.75v4.5m0-4.5h4.5m-4.5 0L9 9M3.75 20.25v-4.5m0 4.5h4.5m-4.5 0L9 15M20.25 3.75h-4.5m4.5 0v4.5m0-4.5L15 9m5.25 11.25h-4.5m4.5 0v-4.5m0 4.5L15 15" />
+</svg>
+`,bw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M9 9V4.5M9 9H4.5M9 9L3.75 3.75M9 15v4.5M9 15H4.5M9 15l-5.25 5.25M15 9h4.5M15 9V4.5M15 9l5.25-5.25M15 15h4.5M15 15v4.5m0-4.5l5.25 5.25" />
+</svg>
+`,vw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-5.197-5.197m0 0A7.5 7.5 0 105.196 5.196a7.5 7.5 0 0010.607 10.607zM10.5 7.5v6m3-3h-6" />
+</svg>
+`,yw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+<path stroke-linecap="round" stroke-linejoin="round" d="M21 21l-5.197-5.197m0 0A7.5 7.5 0 105.196 5.196a7.5 7.5 0 0010.607 10.607zM13.5 10.5h-6" />
+</svg>
+`,Tw=`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="3" stroke="currentColor" class="w-4 h-4">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M6 18L18 6M6 6l12 12" />
+</svg>
+`,Ew={container:"string",zoomLevel:"(number|string)",prevIconTemplate:"string",nextIconTemplate:"string",showFullscreenIconTemplate:"string",hideFullscreenIconTemplate:"string",zoomInIconTemplate:"string",closeIconTemplate:"string",zoomOutIconTemplate:"string",spinnerContent:"string"},xw={container:"body",zoomLevel:1,prevIconTemplate:_w,nextIconTemplate:gw,showFullscreenIconTemplate:mw,hideFullscreenIconTemplate:bw,zoomInIconTemplate:vw,zoomOutIconTemplate:yw,closeIconTemplate:Tw,spinnerContent:"Loading..."},Cw={caption:"text-white text-ellipsis overflow-hidden whitespace-nowrap mx-[10px] text-center",captionWrapper:"fixed left-0 bottom-0 w-full h-[50px] flex justify-center items-center",closeBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",fullscreenBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",gallery:"invisible fixed left-0 top-0 w-full h-full z-[1100] pointer-events-none opacity-0 bg-[#000000e6] transition-all duration-[400ms] motion-reduce:transition-none",galleryContent:"fixed top-[50px] left-[50px] w-[calc(100%-100px)] h-[calc(100%-100px)]",galleryCounter:"flex justify-center items-center px-[10px] mb-0 h-full text-[#b3b3b3]",img:"absolute left-0 top-0 w-full max-h-full h-auto cursor-pointer pointer-events-auto",imgWrapper:"absolute top-0 left-0 w-full h-full opacity-0 transform scale-[0.25] transition-all duration-[400ms] ease-out pointer-events-none motion-reduce:transition-none motion-reduce:transform-none",leftTools:"float-left h-full",loader:"fixed left-0 top-0 z-[2] w-full h-full text-neutral-50 opacity-1 flex justify-center items-center pointer-events-none transition-opacity duration-[1000ms] motion-reduce:transition-none",nextBtn:"border-none bg-transparent w-full h-[50px] flex justify-center items-center text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",nextBtnWrapper:"fixed right-0 top-0 w-[50px] h-full flex justify-center items-center transition-opacity duration-[400ms] motion-reduce:transition-none",prevBtn:"border-none bg-transparent w-full h-[50px] flex justify-center items-center text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none",prevBtnWrapper:"fixed left-0 top-0 w-[50px] h-full flex justify-center items-center transition-opacity duration-[400ms] motion-reduce:transition-none",rightTools:"float-right",spinner:"inline-block h-8 w-8 animate-[spinner-grow_0.75s_linear_infinite] rounded-full bg-current align-[-0.125em] motion-reduce:animate-[spinner-grow_1.5s_linear_infinite]",spinnerContent:"!absolute !-m-px !h-px !w-px !overflow-hidden !whitespace-nowrap !border-0 !p-0 ![clip:rect(0,0,0,0)]",toolbar:"absolute top-0 left-0 w-full h-[50px] z-20 transition-opacity duration-[400ms] motion-reduce:transition-none",vertical:"h-full max-h-full w-auto",zoomBtn:"border-none bg-transparent w-[50px] h-[50px] px-4 text-[#b3b3b3] transition-colors duration-200 ease-in-out hover:text-white focus:text-white motion-reduce:transition-none outline-none"},Aw={caption:"string",captionWrapper:"string",closeBtn:"string",fullscreenBtn:"string",gallery:"string",galleryContent:"string",galleryCounter:"string",img:"string",imgWrapper:"string",leftTools:"string",loader:"string",nextBtn:"string",nextBtnWrapper:"string",prevBtn:"string",prevBtnWrapper:"string",rightTools:"string",spinner:"string",spinnerContent:"string",toolbar:"string",vertical:"string",zoomBtn:"string"};class ys{constructor(t,e={},i){this._element=t,this._options=e,this._classes=this._getClasses(i),this._getContainer(),this._id=`lightbox-${Math.random().toString(36).substr(2,9)}`,this._activeImg=0,this._images=[],this._zoom=1,this._gallery=null,this._galleryToolbar=null,this._galleryContent=null,this._loader=null,this._imgCounter=null,this._animating=!1,this._fullscreen=!1,this._zoomBtn=null,this._fullscreenBtn=null,this._toolsToggleTimer=0,this._mousedown=!1,this._mousedownPositionX=0,this._mousedownPositionY=0,this._originalPositionX=0,this._originalPositionY=0,this._positionX=0,this._positionY=0,this._zoomTimer=0,this._tapCounter=0,this._tapTime=0,this._rightArrow=null,this._leftArrowWrapper=null,this._rightArrowWrapper=null,this._initiated=!1,this._multitouch=!1,this._touchZoomPosition=[],this._element&&(O.setData(t,gn,this),this.init())}static get NAME(){return Jl}get activeImg(){return this._activeImg}get currentImg(){return m.findOne(`[${ye}]`,this._galleryContent)}get options(){const t={...xw,...g.getDataAttributes(this._element),...this._options};return L(Jl,t,Ew),t}init(){this._initiated||(this._appendTemplate(),this._initiated=!0)}open(t=0){this._getImages(),this._setActiveImg(t),this._sortImages(),this._triggerEvents("open","opened"),this._loadImages().then(e=>{this._resizeImages(e),this._toggleTemplate(),this._addEvents(),this._focusFullscreenBtn()})}close(){this.reset(),this._removeEvents(),this._toggleTemplate(),this._triggerEvents("close","closed")}slide(t="right"){this._animating===!0||this._images.length<=1||(this._triggerEvents("slide","slided"),this._beforeSlideEvents(),t==="right"&&this._slideHorizontally(t),t==="left"&&this._slideHorizontally(t),t==="first"&&this._slideToTarget(t),t==="last"&&this._slideToTarget(t),this._afterSlideEvents())}zoomIn(){this._zoom>=3||(this._triggerEvents("zoomIn","zoomedIn"),this._zoom+=parseFloat(this.options.zoomLevel),g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn())}zoomOut(){this._zoom<=1||(this._triggerEvents("zoomOut","zoomedOut"),this._zoom-=parseFloat(this.options.zoomLevel),g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn(),this._updateImgPosition())}toggleFullscreen(){this._fullscreen===!1?(this._fullscreenBtn.setAttribute(ye,""),this._fullscreenBtn.innerHTML=this.options.hideFullscreenIconTemplate,this._gallery.requestFullscreen&&this._gallery.requestFullscreen(),this._fullscreen=!0):(this._fullscreenBtn.removeAttribute(ye),document.exitFullscreen&&document.exitFullscreen(),this._fullscreen=!1)}reset(){this._restoreDefaultFullscreen(),this._restoreDefaultPosition(),this._restoreDefaultZoom(),clearTimeout(this._toolsToggleTimer),clearTimeout(this._doubleTapTimer)}dispose(){_.off(document,vs,pw,this.toggle),this._galleryContent&&this._removeEvents(),this._gallery&&this._gallery.remove(),O.removeData(this._element,gn),this._element=null}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Cw,...e,...t},L(Jl,t,Aw),t}_getImages(){const e=m.find("img",this._element).filter(i=>!i.hasAttribute(fw));this._images=e}_getContainer(){this._container=m.findOne(this.options.container)}_setActiveImg(t){this._activeImg=typeof t=="number"?t:this._images.indexOf(t.target)}_appendTemplate(){this._gallery=$("div"),g.addClass(this._gallery,`${this._classes.gallery}`),this._element.dataset.id=this._id,this._gallery.id=this._id,this._appendLoader(),this._appendToolbar(),this._appendContent(),this._appendArrows(),this._appendCaption(),this._container.append(this._gallery)}_appendToolbar(){this._galleryToolbar=$("div"),this._imgCounter=$("p"),this._fullscreenBtn=$("button"),this._zoomBtn=$("button");const t=$("button"),e=$("div"),i=$("div");g.addClass(this._galleryToolbar,`${this._classes.toolbar}`),g.addClass(this._imgCounter,`${this._classes.galleryCounter}`),g.addClass(this._fullscreenBtn,`${this._classes.fullscreenBtn}`),g.addClass(this._zoomBtn,`${this._classes.zoomInBtn}`),g.addClass(this._zoomBtn,this._classes.zoomBtn),g.addClass(e,`${this._classes.leftTools}`),g.addClass(i,`${this._classes.rightTools}`),g.addClass(t,`${this._classes.closeBtn}`),this._fullscreenBtn.innerHTML=this.options.showFullscreenIconTemplate,t.innerHTML=this.options.closeIconTemplate,this._zoomBtn.innerHTML=this.options.zoomInIconTemplate,this._fullscreenBtn.setAttribute("aria-label","Toggle fullscreen"),this._zoomBtn.setAttribute("aria-label","Zoom in"),t.setAttribute("aria-label","Close"),_.on(this._fullscreenBtn,vs,()=>this.toggleFullscreen()),_.on(this._zoomBtn,vs,()=>this._toggleZoom()),_.on(t,vs,()=>this.close()),e.append(this._imgCounter),i.append(this._fullscreenBtn),i.append(this._zoomBtn),i.append(t),this._galleryToolbar.append(e),this._galleryToolbar.append(i),this._gallery.append(this._galleryToolbar)}_appendContent(){this._galleryContent=$("div"),g.addClass(this._galleryContent,`${this._classes.galleryContent}`),this._gallery.append(this._galleryContent)}_appendLoader(){this._loader=$("div");const t=$("div"),e=$("span");g.addClass(this._loader,`${this._classes.loader}`),g.addClass(t,`${this._classes.spinner}`),g.addClass(e,`${this._classes.spinnerContent}`),t.setAttribute("role","status"),e.innerHTML=this.options.spinnerContent,t.append(e),this._loader.append(t),this._gallery.append(this._loader)}_appendArrows(){this._leftArrowWrapper=$("div"),g.addClass(this._leftArrowWrapper,`${this._classes.prevBtnWrapper}`);const t=$("button");t.setAttribute("aria-label","Previous"),g.addClass(t,`${this._classes.prevBtn}`),_.on(t,vs,()=>this.slide("left")),this._leftArrowWrapper.append(t),this._rightArrowWrapper=$("div"),g.addClass(this._rightArrowWrapper,`${this._classes.nextBtnWrapper}`),this._rightArrow=$("button"),this._rightArrow.setAttribute("aria-label","Next"),g.addClass(this._rightArrow,`${this._classes.nextBtn}`),_.on(this._rightArrow,vs,()=>this.slide()),this._rightArrowWrapper.append(this._rightArrow),this._rightArrow.innerHTML=this.options.nextIconTemplate,t.innerHTML=this.options.prevIconTemplate,this._getImages(),!(this._images.length<=1)&&(this._gallery.append(this._leftArrowWrapper),this._gallery.append(this._rightArrowWrapper))}_appendCaption(){const t=$("div"),e=$("p");e.setAttribute(Wp,""),g.addClass(t,`${this._classes.captionWrapper}`),g.addClass(e,`${this._classes.caption}`),t.append(e),this._gallery.append(t)}_sortImages(){for(let t=0;t<this._activeImg;t++)this._images.push(this._images.shift())}async _loadImages(){const t=[],e=[];this._galleryContent.innerHTML="";let i=0;return this._images.forEach((n,o)=>{t.push(new Promise(r=>{const a=new Image,l=$("div");g.addClass(l,`${this._classes.imgWrapper}`),g.addClass(a,`${this._classes.img}`),this._addImgStyles(a,l,i,o,n),l.append(a),this._galleryContent.append(l),a.onload=r,a.src=n.dataset.teImg||n.src,e.push(a),i+=100}))}),await Promise.all(t),e}_addImgStyles(t,e,i,n,o){t.alt=o.alt,t.draggable=!1,g.style(e,{position:"absolute",left:`${i}%`,top:0}),(o.dataset.teCaption||o.dataset.teCaption==="")&&(t.dataset.caption=o.dataset.teCaption),i===0?(o.width<o.height&&g.addClass(t,`${this._classes.vertical}`),g.style(e,{opacity:1}),t.setAttribute(ye,"")):t.removeAttribute(ye),n===this._images.length-1&&this._images.length>1&&g.style(e,{left:"-100%"})}_resizeImages(t){t.forEach(e=>{this._calculateImgSize(e)})}_calculateImgSize(t){t.width>=t.height?(t.style.width="100%",t.style.maxWidth="100%",t.style.height="auto",t.style.top=`${(t.parentNode.offsetHeight-t.height)/2}px`,t.style.left=0):(t.style.height="100%",t.style.maxHeight="100%",t.style.width="auto",t.style.left=`${(t.parentNode.offsetWidth-t.width)/2}px`,t.style.top=0),t.width>=t.parentNode.offsetWidth&&(t.style.width=`${t.parentNode.offsetWidth}px`,t.style.height="auto",t.style.left=0,t.style.top=`${(t.parentNode.offsetHeight-t.height)/2}px`),t.height>=t.parentNode.offsetHeight&&(t.style.height=`${t.parentNode.offsetHeight}px`,t.style.width="auto",t.style.top=0,t.style.left=`${(t.parentNode.offsetWidth-t.width)/2}px`),this._positionX=parseFloat(t.style.left)||0,this._positionY=parseFloat(t.style.top)||0}_onResize(){this._images=m.find("img",this._galleryContent),this._images.forEach(t=>{this._calculateImgSize(t)})}_onFullscreenChange(){(document.webkitIsFullScreen||document.mozFullScreen||document.msFullscreenElement)===void 0&&(this._fullscreen=!1,this._fullscreenBtn.innerHTML=this.options.showFullscreenIconTemplate,this._fullscreenBtn.removeAttribute(ye))}_beforeSlideEvents(){this._animationStart(),this._restoreDefaultZoom(),this._restoreDefaultPosition(),this._resetDoubleTap()}_slideHorizontally(t){this._images=m.find("img",this._galleryContent),this._images.forEach(e=>{let i;t==="right"?(i=parseInt(e.parentNode.style.left,10)-100,i<-100&&(i=(this._images.length-2)*100)):(i=parseInt(e.parentNode.style.left,10)+100,i===(this._images.length-1)*100&&(i=-100)),this._slideImg(e,i)}),this._updateActiveImg(t)}_slideImg(t,e){e===0?(t.setAttribute(ye,""),g.style(t.parentNode,{opacity:1,transform:"scale(1)"})):(t.removeAttribute(ye),g.style(t.parentNode,{opacity:0,transform:"scale(0.25)"})),t.parentNode.style.left=`${e}%`}_slideToTarget(t){t==="first"&&this._activeImg===0||t==="last"&&this._activeImg===this._images.length-1||(this.reset(),this._removeEvents(),this._showLoader(),this._getImages(),this._activeImg=t==="first"?0:this._images.length-1,this._sortImages(),g.style(this.currentImg.parentNode,{transform:"scale(0.25)",opacity:0}),setTimeout(()=>{this._loadImages().then(e=>{this._resizeImages(e),this._addEvents(),this._updateCaption(),this._hideLoader(),setTimeout(()=>{g.style(this.currentImg.parentNode,{transform:"scale(1)",opacity:1})},10)})},400))}_updateActiveImg(t){t==="right"&&(this._activeImg===this._images.length-1?this._activeImg=0:this._activeImg++),t==="left"&&(this._activeImg===0?this._activeImg=this._images.length-1:this._activeImg--)}_afterSlideEvents(){this._updateCounter(),this._updateCaption()}_updateCounter(){this._images.length<=1||setTimeout(()=>{this._imgCounter.innerHTML=`${this._activeImg+1} / ${this._images.length}`},200)}_updateCaption(){setTimeout(()=>{let t=this.currentImg.alt;(this.currentImg.dataset.caption||this.currentImg.dataset.caption==="")&&(t=this.currentImg.dataset.caption),m.findOne(`[${Wp}]`,this._gallery).innerHTML=t},200)}_toggleTemplate(){this._gallery.style.visibility==="visible"?(g.style(this.currentImg.parentNode,{transform:"scale(0.25)"}),setTimeout(()=>{this._hideGallery(),this._enableScroll(),this._showLoader()},100)):(this._showGallery(),this._disableScroll(),this._updateCounter(),this._updateCaption(),this._setToolsToggleTimout(),this._hideLoader())}_showLoader(){g.style(this._loader,{opacity:1})}_hideLoader(){g.style(this._loader,{opacity:0})}_hideGallery(){g.style(this._gallery,{opacity:0,pointerEvents:"none",visibility:"hidden"})}_showGallery(){g.style(this._gallery,{opacity:1,pointerEvents:"initial",visibility:"visible"}),setTimeout(()=>{g.style(this.currentImg.parentNode,{transform:"scale(1)"})},50)}_toggleZoom(){this._zoom!==1?this.zoomOut():this.zoomIn()}_updateZoomBtn(){this._zoom>1?(this._zoomBtn.setAttribute(ye,""),this._zoomBtn.setAttribute("aria-label","Zoom out"),this._zoomBtn.innerHTML=this.options.zoomOutIconTemplate):(this._zoomBtn.removeAttribute(ye),this._zoomBtn.setAttribute("aria-label","Zoom in"),this._zoomBtn.innerHTML=this.options.zoomInIconTemplate)}_updateImgPosition(){this._zoom===1&&this._restoreDefaultPosition()}_addEvents(){const t=m.find("img",this._galleryContent);this._onWindowTouchmove=this._onWindowTouchmove.bind(this),this._onWindowTouchstart=this._onWindowTouchstart.bind(this),this._onImgMousedown=this._onMousedown.bind(this),this._onImgMousemove=this._onMousemove.bind(this),this._onImgWheel=this._onZoom.bind(this),this._onImgMouseup=this._onMouseup.bind(this),this._onImgTouchend=this._onTouchend.bind(this),this._onImgDoubleClick=this._onDoubleClick.bind(this),this._onWindowResize=this._onResize.bind(this),this._onWindowFullscreenChange=this._onFullscreenChange.bind(this),this._onAnyImgAction=this._resetToolsToggler.bind(this),this._onGalleryClick=this._onBackdropClick.bind(this),this._onKeyupEvent=this._onKeyup.bind(this),this._onRightArrowKeydownEvent=this._onRightArrowKeydown.bind(this),this._onFullscreenBtnKeydownEvent=this._onFullscreenBtnKeydown.bind(this),t.forEach(e=>{_.on(e,"mousedown",this._onImgMousedown,{passive:!0}),_.on(e,"touchstart",this._onImgMousedown,{passive:!0}),_.on(e,"mousemove",this._onImgMousemove,{passive:!0}),_.on(e,"touchmove",this._onImgMousemove,{passive:!0}),_.on(e,"wheel",this._onImgWheel,{passive:!0}),_.on(e,"dblclick",this._onImgDoubleClick,{passive:!0})}),document.addEventListener("touchmove",this._onWindowTouchmove,{passive:!1}),_.on(window,"touchstart",this._onWindowTouchstart),_.on(window,"mouseup",this._onImgMouseup),_.on(window,"touchend",this._onImgTouchend),_.on(window,"resize",this._onWindowResize),_.on(window,"orientationchange",this._onWindowResize),_.on(window,"keyup",this._onKeyupEvent),_.on(window,"fullscreenchange",this._onWindowFullscreenChange),_.on(this._gallery,"mousemove",this._onAnyImgAction),_.on(this._gallery,"click",this._onGalleryClick),_.on(this._rightArrow,"keydown",this._onRightArrowKeydownEvent),_.on(this._fullscreenBtn,"keydown",this._onFullscreenBtnKeydownEvent)}_removeEvents(){m.find("img",this._galleryContent).forEach(e=>{_.off(e,"mousedown",this._onImgMousedown),_.off(e,"touchstart",this._onImgMousedown),_.off(e,"mousemove",this._onImgMousemove),_.off(e,"touchmove",this._onImgMousemove),_.off(e,"wheel",this._onImgWheel),_.off(e,"dblclick",this._onImgDoubleClick)}),document.removeEventListener("touchmove",this._onWindowTouchmove,{passive:!1}),_.off(window,"touchstart",this._onWindowTouchstart),_.off(window,"mouseup",this._onImgMouseup),_.off(window,"touchend",this._onImgTouchend),_.off(window,"resize",this._onWindowResize),_.off(window,"orientationchange",this._onWindowResize),_.off(window,"keyup",this._onKeyupEvent),_.off(window,"fullscreenchange",this._onWindowFullscreenChange),_.off(this._gallery,"mousemove",this._onAnyImgAction),_.off(this._gallery,"click",this._onGalleryClick),_.off(this._rightArrow,"keydown",this._onRightArrowKeydownEvent),_.off(this._fullscreenBtn,"keydown",this._onFullscreenBtnKeydownEvent)}_onMousedown(t){const e=t.touches,i=e?e[0].clientX:t.clientX,n=e?e[0].clientY:t.clientY;this._originalPositionX=parseFloat(this.currentImg.style.left)||0,this._originalPositionY=parseFloat(this.currentImg.style.top)||0,this._positionX=this._originalPositionX,this._positionY=this._originalPositionY,this._mousedownPositionX=i*(1/this._zoom)-this._positionX,this._mousedownPositionY=n*(1/this._zoom)-this._positionY,this._mousedown=!0,t.type==="touchstart"&&t.touches.length>1&&(this._multitouch=!0,this._touchZoomPosition=t.touches)}_onMousemove(t){if(!this._mousedown)return;const e=t.touches,i=e?e[0].clientX:t.clientX,n=e?e[0].clientY:t.clientY;if(e&&this._resetToolsToggler(),!this._multitouch)if(this._zoom!==1)this._positionX=i*(1/this._zoom)-this._mousedownPositionX,this._positionY=n*(1/this._zoom)-this._mousedownPositionY,g.style(this.currentImg,{left:`${this._positionX}px`,top:`${this._positionY}px`});else{if(this._images.length<=1)return;this._positionX=i*(1/this._zoom)-this._mousedownPositionX,g.style(this.currentImg,{left:`${this._positionX}px`})}}_onMouseup(t){this._mousedown=!1,this._moveImg(t.target)}_onTouchend(t){this._mousedown=!1,this._multitouch?t.targetTouches.length===0&&(this._multitouch=!1,this._touchZoomPosition=[]):this._multitouch||(this._checkDoubleTap(t),this._moveImg(t.target))}_calculateTouchZoom(t){const e=Math.hypot(this._touchZoomPosition[1].pageX-this._touchZoomPosition[0].pageX,this._touchZoomPosition[1].pageY-this._touchZoomPosition[0].pageY),i=Math.hypot(t.touches[1].pageX-t.touches[0].pageX,t.touches[1].pageY-t.touches[0].pageY),n=Math.abs(e-i),o=t.view.screen.width;n>o*.03&&(e<=i?this.zoomIn():this.zoomOut(),this._touchZoomPosition=t.touches)}_onWindowTouchstart(t){t.touches.length>1&&(this._multitouch=!0,this._touchZoomPosition=t.touches)}_onWindowTouchmove(t){t.preventDefault(),t.type==="touchmove"&&t.targetTouches.length>1&&this._calculateTouchZoom(t)}_onRightArrowKeydown(t){switch(t.keyCode){case 9:if(t.shiftKey)break;t.preventDefault(),this._focusFullscreenBtn();break}}_onFullscreenBtnKeydown(t){switch(t.keyCode){case 9:if(!t.shiftKey)break;t.preventDefault(),this._focusRightArrow();break}}_onKeyup(t){switch(this._resetToolsToggler(),t.keyCode){case 39:this.slide();break;case 37:this.slide("left");break;case 27:this.close();break;case 36:this.slide("first");break;case 35:this.slide("last");break;case 38:this.zoomIn();break;case 40:this.zoomOut();break}}_focusFullscreenBtn(){setTimeout(()=>{this._fullscreenBtn.focus()},100)}_focusRightArrow(){this._rightArrow.focus()}_moveImg(t){if(this._multitouch||this._zoom!==1||t!==this.currentImg||this._images.length<=1)return;const e=this._positionX-this._originalPositionX;e>0?this.slide("left"):e<0&&this.slide()}_checkDoubleTap(t){clearTimeout(this._doubleTapTimer);const i=new Date().getTime()-this._tapTime;this._tapCounter>0&&i<500?(this._onDoubleClick(t),this._doubleTapTimer=setTimeout(()=>{this._tapTime=new Date().getTime(),this._tapCounter=0},300)):(this._tapCounter++,this._tapTime=new Date().getTime())}_resetDoubleTap(){this._tapTime=0,this._tapCounter=0,clearTimeout(this._doubleTapTimer)}_onDoubleClick(t){this._multitouch||(t.touches||this._setNewPositionOnZoomIn(t),this._zoom!==1?this._restoreDefaultZoom():this.zoomIn())}_onZoom(t){if(t.deltaY>0)this.zoomOut();else{if(this._zoom>=3)return;this._setNewPositionOnZoomIn(t),this.zoomIn()}}_onBackdropClick(t){this._resetToolsToggler(),t.target.tagName==="DIV"&&this.close()}_setNewPositionOnZoomIn(t){clearTimeout(this._zoomTimer),this._positionX=window.innerWidth/2-t.offsetX-50,this._positionY=window.innerHeight/2-t.offsetY-50,this.currentImg.style.transition="all 0.5s ease-out",this.currentImg.style.left=`${this._positionX}px`,this.currentImg.style.top=`${this._positionY}px`,this._zoomTimer=setTimeout(()=>{this.currentImg.style.transition="none"},500)}_resetToolsToggler(){this._showTools(),clearTimeout(this._toolsToggleTimer),this._setToolsToggleTimout()}_setToolsToggleTimout(){this._toolsToggleTimer=setTimeout(()=>{this._hideTools(),clearTimeout(this._toolsToggleTimer)},4e3)}_hideTools(){g.style(this._galleryToolbar,{opacity:0}),g.style(this._leftArrowWrapper,{opacity:0}),g.style(this._rightArrowWrapper,{opacity:0})}_showTools(){g.style(this._galleryToolbar,{opacity:1}),g.style(this._leftArrowWrapper,{opacity:1}),g.style(this._rightArrowWrapper,{opacity:1})}_disableScroll(){g.addClass(document.body,"overflow-y-hidden relative"),document.documentElement.scrollHeight>document.documentElement.clientHeight&&g.addClass(document.body,"md:pr-[17px]")}_enableScroll(){setTimeout(()=>{g.removeClass(document.body,"overflow-y-hidden relative"),g.removeClass(document.body,"md:pr-[17px]")},300)}_animationStart(){this._animating=!0,setTimeout(()=>{this._animating=!1},400)}_restoreDefaultZoom(){this._zoom!==1&&(this._zoom=1,g.style(this.currentImg.parentNode,{transform:`scale(${this._zoom})`}),this._updateZoomBtn(),this._updateImgPosition())}_restoreDefaultFullscreen(){this._fullscreen&&this.toggleFullscreen()}_restoreDefaultPosition(){clearTimeout(this._zoomTimer);const t=this.currentImg;g.style(this.currentImg.parentNode,{left:0,top:0}),g.style(this.currentImg,{transition:"all 0.5s ease-out",left:0,top:0}),this._calculateImgSize(t),setTimeout(()=>{g.style(this.currentImg,{transition:"none"})},500)}async _triggerEvents(t,e){_.trigger(this._element,`${t}.te.lightbox`),e&&await setTimeout(()=>{_.trigger(this._element,`${e}.te.lightbox`)},505)}static getInstance(t){return O.getData(t,gn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static toggle(){return function(t){const e=m.closest(t.target,`${Fp}`);(ys.getInstance(e)||new ys(e)).open(t)}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,gn);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new ys(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}}const ww={isRequired:"This is required",isEmail:"Please enter a valid email address",isLongerThan:"This field must be longer than {length} characters",isShorterThan:"This field must be shorter than {length} characters",isChecked:"This is required",isPhone:"Please enter a valid phone number",isNumber:"Expected value with type Number",isString:"Expected value with type String",isBoolean:"Expected value with type Boolean",isDate:"Please enter a valid date",is12hFormat:"Please enter a valid time in 12h format",is24hFormat:"Please enter a valid time in 24h format"},kw={isRequired:(s,t)=>(s==null?void 0:s.trim())?!0:t,isEmail:(s,t)=>/^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/.test(s)?!0:t,isLongerThan:(s,t,e)=>s.length>e?!0:t.replace("{length}",e),isShorterThan:(s,t,e)=>s.length<e?!0:t.replace("{length}",e),isChecked:s=>s?!0:"This is required",isPhone:(s,t)=>s.length===9?!0:t,isNumber:(s,t)=>s&&!isNaN(Number(s))?!0:t,isString:(s,t)=>typeof s=="string"?!0:t,isBoolean:(s,t)=>typeof s=="boolean"?!0:t,isDate:(s,t)=>{const e=/^([0-9]{1,2})\/([0-9]{1,2})\/([0-9]{4})$/;return s.match(e)?!0:t},is12hFormat:(s,t)=>{const e=/^(0?[1-9]|1[0-2]):[0-5][0-9] [APap][mM]$/;return s.match(e)?!0:t},is24hFormat:(s,t)=>{const e=/^(?:[01]\d|2[0-3]):[0-5][0-9]$/;return s.match(e)?!0:t}},tc="validation",ec="te.validation",gr=`.${ec}`,zp="data-te-validate",mr="data-te-validated",br="data-te-validation-state",vr="data-te-validation-feedback",ic="data-te-valid-feedback",yr="data-te-invalid-feedback",jp="data-te-validation-ruleset",Sw="data-te-submit-btn-ref",Ow=`[${zp}]`,Iw="[data-te-input-notch-ref] div",Dw=`[${Sw}]`,Mw=`validated${gr}`,Lw=`valid${gr}`,$w=`invalid${gr}`,Rw=`changed${gr}`,Pw={validFeedback:"string",invalidFeedback:"string",disableFeedback:"boolean",customRules:"object",customErrorMessages:"object",activeValidation:"boolean",submitCallback:"(function|null)"},Yp={validFeedback:"Looks good!",invalidFeedback:"Something is wrong!",disableFeedback:!1,customRules:{},customErrorMessages:{},activeValidation:!1,submitCallback:null},Nw={notchLeadingValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[-1px_0_0_#14a44d,_0_1px_0_0_#14a44d,_0_-1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchMiddleValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[0_1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchTrailingValid:"border-[#14a44d] dark:border-[#14a44d] group-data-[te-input-focused]:shadow-[1px_0_0_#14a44d,_0_-1px_0_0_#14a44d,_0_1px_0_0_#14a44d] group-data-[te-input-focused]:border-[#14a44d]",notchLeadingInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[-1px_0_0_#dc4c64,_0_1px_0_0_#dc4c64,_0_-1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",notchMiddleInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[0_1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",notchTrailingInvalid:"border-[#dc4c64] dark:border-[#dc4c64] group-data-[te-input-focused]:shadow-[1px_0_0_#dc4c64,_0_-1px_0_0_#dc4c64,_0_1px_0_0_#dc4c64] group-data-[te-input-focused]:border-[#dc4c64]",basicInputValid:"!border-[#14a44d] focus:!border-[#14a44d] focus:!shadow-[inset_0_0_0_1px_#14a44d]",basicInputInvalid:"!border-[#dc4c64] focus:!border-[#dc4c64] focus:!shadow-[inset_0_0_0_1px_#dc4c64]",checkboxValid:"checked:!border-[#14a44d] checked:!bg-[#14a44d] checked:after:!bg-[#14a44d]",checkboxInvalid:"checked:!border-[#dc4c64] checked:!bg-[#dc4c64] checked:after:!bg-[#dc4c64]",radioValid:"checked:!border-[#14a44d] checked:after:!bg-[#14a44d]",radioInvalid:"checked:!border-[#dc4c64] checked:after:!bg-[#dc4c64]",labelValid:"!text-[#14a44d]",labelInvalid:"!text-[#dc4c64]",validFeedback:"absolute top-full left-0 m-1 w-auto text-sm text-[#14a44d] animate-[fade-in_0.3s_both]",invalidFeedback:"absolute top-full left-0 m-1 w-auto text-sm text-[#dc4c64] animate-[fade-in_0.3s_both]",elementValidated:"mb-8"},Bw={notchLeadingValid:"string",notchMiddleValid:"string",notchTrailingValid:"string",notchLeadingInvalid:"string",notchMiddleInvalid:"string",notchTrailingInvalid:"string",basicInputValid:"string",basicInputInvalid:"string",checkboxValid:"string",checkboxInvalid:"string",radioValid:"string",radioInvalid:"string",labelValid:"string",labelInvalid:"string",validFeedback:"string",invalidFeedback:"string",elementValidated:"string"};class Tr extends Mt{constructor(t,e,i){super(t),this._element=t,this._element&&O.setData(t,ec,this),this._config=this._getConfig(e),this._classes=this._getClasses(i),this._isValid=!0,this._shouldApplyInputEvents=!0,this._submitCallback=null,this._errorMessages={...ww,...this._config.customErrorMessages},this._validationElements=this._getValidationElements(),this._validationElements.forEach(({element:n,input:o})=>{this._createFeedbackWrapper(n,o)}),this._validationObserver=this._watchForValidationChanges(),this._validationObserver.observe(this._element,{attributes:!0}),this._submitButton=null,this._handleSubmitButton(),this._validationResult=[]}static get DefaultType(){return Pw}static get Default(){return Yp}static get NAME(){return tc}dispose(){var t;(t=this._validationObserver)==null||t.disconnect(),this._validationObserver=null,this._submitCallback=null,this._element.removeAttribute(mr),this._removeInputEvents(),this._removeValidationTraces(),this._validationResult=[],this._submitButton&&_.off(this._submitButton,"click"),this._config.activeValidation&&(this._validationElements.forEach(e=>{const{input:i}=e;_.off(i,"input")}),this._shouldApplyInputEvents=!0)}_removeValidationTraces(){this._removeFeedbackWrapper(),this._validationElements.forEach(({element:t,classes:e,initialHTML:i})=>{t.className=e,t.innerHTML=i,t.removeAttribute(br),t.removeAttribute(yr),t.removeAttribute(ic)}),this._validationElements=[]}_getValidationElements(){return m.find(Ow,this._element).map(e=>{const i=m.findOne("input",e)||m.findOne("textarea",e),n=m.findOne("select",e);return{id:i.name||i.id||(n==null?void 0:n.name)||bt("validation-"),element:e,type:e.getAttribute(zp),input:i,validFeedback:e.getAttribute(ic),invalidFeedback:e.getAttribute(yr),classes:e.className,initialHTML:e.innerHTML,ruleset:e.getAttribute(jp)}})}_createFeedbackWrapper(t,e){if(t.querySelectorAll(`[${vr}]`).length>0)return;const i=document.createElement("span");i.setAttribute(vr,""),e.parentNode.appendChild(i)}_removeFeedbackWrapper(){m.find(`[${vr}]`,this._element).forEach(e=>{e.remove()})}_watchForValidationChanges(){return new MutationObserver(e=>{e.forEach(i=>{const{attributeName:n}=i;n===mr&&(this._handleValidation(),this._config.activeValidation&&this._shouldApplyInputEvents&&this._applyInputEvents())})})}_handleValidation(){this._element.getAttribute(mr)&&(this._validationResult=[],this._isValid=!0,this._validationElements.forEach(t=>this._validateSingleElement(t)),this._emitEvents(this._isValid),this._submitCallback&&this._submitCallback(this._isValid))}_validateSingleElement(t){var c;const{element:e,type:i,input:n,ruleset:o,id:r}=t;o&&this._validateByRuleset(t);const a=e.getAttribute(br);if(a!=="valid"&&a!=="invalid")return;const l=a.replace(a.charAt(0),a.charAt(0).toUpperCase());i==="input"&&this._restyleNotches(e,l),i==="basic"&&this._restyleBasicInputs(n,l),(i==="checkbox"||i==="radio")&&this._restyleCheckboxes(n,l,i),this._restyleLabels(e,l),a==="invalid"&&(this._isValid=!1),this._config.disableFeedback||this._applyFeedback(e,a),_.trigger(this._element,Rw,{value:{name:r,result:a,validation:(c=this._validationResult[r])==null?void 0:c.validation}})}_validateByRuleset({element:t,type:e,invalidFeedback:i,input:n,id:o}){const r=this._getRuleset(t);if(!r.length)return;const a=e==="checkbox"||e==="radio"?n.checked:n.value;let l="",c=[];for(const h of r){const d=h.callback(a,this._errorMessages[h.name]||this._config.invalidFeedback,h.parameter);c.push({result:d===!0,name:h.name,fullName:h.fullName}),typeof d=="string"&&!l&&(l=d)}if(this._validationResult[o]={element:t,validation:c},!l){t.setAttribute(br,"valid");return}t.setAttribute(br,"invalid"),i||t.setAttribute(yr,l)}_handleInputChange(t){this._validateSingleElement(t)}_getRuleset(t){const i=t.getAttribute(jp).split("|");let n=[];const o={...kw,...this._config.customRules};return i.forEach(r=>{const a=this._getRuleData(r,o);a.callback?n.push(a):console.warn(`Rule ${r} does not exist`)}),n}_getRuleData(t,e){const i=t.split("(");return{callback:e[i[0]],parameter:i[1]?i[1].split(")")[0]:null,name:i[0],fullName:t}}_applyFeedback(t,e){const i=m.findOne(`[${vr}]`,t),n=t.getAttribute(ic)||this._config.validFeedback,o=t.getAttribute(yr)||this._config.invalidFeedback;g.addClass(t,this._classes.elementValidated),i.textContent=e==="valid"?n:o,i.className=this._classes[e==="valid"?"validFeedback":"invalidFeedback"]}_restyleCheckboxes(t,e,i){g.removeClass(t,this._classes.checkboxValid),g.removeClass(t,this._classes.checkboxInvalid),g.addClass(t,this._classes[`${i}${e}`])}_restyleBasicInputs(t,e){g.removeClass(t,this._classes.basicInputValid),g.removeClass(t,this._classes.basicInputInvalid),g.addClass(t,this._classes[`basicInput${e}`])}_restyleNotches(t,e){m.find(Iw,t).forEach((n,o)=>{let r=o===0?"notchLeading":o===1?"notchMiddle":"notchTrailing";n.className="",g.addClass(n,nu[r]),r+=e,g.addClass(n,this._classes[r])})}_restyleLabels(t,e){const i=m.find("label",t);i.length&&i.forEach(n=>{g.removeClass(n,this._classes.labelValid),g.removeClass(n,this._classes.labelInvalid),g.addClass(n,this._classes[`label${e}`])})}_emitEvents(t){if(_.trigger(this._element,Mw),t){_.trigger(this._element,Lw,{value:this._validationResult});return}_.trigger(this._element,$w,{value:this._validationResult})}_applyInputEvents(){this._validationElements.forEach(t=>{const{input:e,element:i}=t;_.on(e,"input",()=>this._handleInputChange(t)),_.on(i,"valueChange.te.select",()=>this._delayedInputChange(t)),_.on(i,"itemSelect.te.autocomplete",()=>this._delayedInputChange(t))}),this._shouldApplyInputEvents=!1}_removeInputEvents(){this._validationElements.forEach(t=>{const{input:e,element:i}=t;_.off(e,"input",()=>this._handleInputChange(t)),_.off(i,"valueChange.te.select",()=>this._delayedInputChange(t)),_.off(i,"itemSelect.te.autocomplete",()=>this._delayedInputChange(t))})}_delayedInputChange(t){setTimeout(()=>{this._handleInputChange(t)},10)}_handleSubmitButton(){this._submitButton=m.findOne(Dw,this._element),this._submitButton&&_.on(this._submitButton,"click",t=>this._handleSubmitButtonClick(t))}_handleSubmitButtonClick(t){if(this._element.setAttribute(mr,!0),this._config.submitCallback){this._submitCallback=e=>this._config.submitCallback(t,e);return}}_getConfig(t){return t={...Yp,...g.getDataAttributes(this._element),...typeof t=="object"&&t?t:{}},L(tc,t,this.constructor.DefaultType),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Nw,...e,...t},L(tc,t,Bw),t}static getInstance(t){return O.getData(t,ec)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){const e=Tr.getOrCreateInstance(this);if(typeof t=="string"){if(e[t]===void 0||t.startsWith("_")||t==="constructor")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}class mn{_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection({x:t,y:e}){return{x:{direction:t<0?"left":"right",value:Math.abs(t)},y:{direction:e<0?"up":"down",value:Math.abs(e)}}}_getOrigin({x:t,y:e},{x:i,y:n}){return{x:t-i,y:e-n}}_getDistanceBetweenTwoPoints(t,e,i,n){return Math.hypot(e-t,n-i)}_getMidPoint({x1:t,x2:e,y1:i,y2:n}){return{x:(t+e)/2,y:(i+n)/2}}_getVectorLength({x1:t,x2:e,y1:i,y2:n}){return Math.sqrt((e-t)**2+(n-i)**2)}_getRightMostTouch(t){let e=null;const i=Number.MIN_VALUE;return t.forEach(n=>{n.clientX>i&&(e=n)}),e}_getAngle(t,e,i,n){return Math.atan2(n-e,i-t)}_getAngularDistance(t,e){return e-t}_getCenterXY({x1:t,x2:e,y1:i,y2:n}){return{x:t+(e-t)/2,y:i+(n-i)/2}}_getPinchTouchOrigin(t){const[e,i]=t,n={x1:e.clientX,x2:i.clientX,y1:e.clientY,y2:i.clientY};return[this._getVectorLength(n),this._getCenterXY(n)]}_getPosition({x1:t,x2:e,y1:i,y2:n}){return{x1:t,x2:e,y1:i,y2:n}}}const sc="press",Hw="pressup",Vw={time:"number",pointers:"number"},Fw={time:250,pointers:1};class Ww extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._timer=null}static get NAME(){return sc}handleTouchStart(t){const{time:e,pointers:i}=this._options;t.touches.length===i&&(this._timer=setTimeout(()=>{_.trigger(this._element,sc,{touch:t,time:e}),_.trigger(this._element,Hw,{touch:t})},e))}handleTouchEnd(){clearTimeout(this._timer)}_getConfig(t){const e={...Fw,...g.getDataAttributes(this._element),...t};return L(sc,e,Vw),e}}const zw="swipe",jw={threshold:"number",direction:"string"},Yw={threshold:10,direction:"all"};class Kw{constructor(t,e){this._element=t,this._startPosition=null,this._options=this._getConfig(e)}handleTouchStart(t){this._startPosition=this._getCoordinates(t)}handleTouchMove(t){if(!this._startPosition)return;const e=this._getCoordinates(t),i={x:e.x-this._startPosition.x,y:e.y-this._startPosition.y},n=this._getDirection(i);if(this._options.direction==="all"){if(n.y.value<this._options.threshold&&n.x.value<this._options.threshold)return;const r=n.y.value>n.x.value?n.y.direction:n.x.direction;_.trigger(this._element,`swipe${r}`,{touch:t}),_.trigger(this._element,"swipe",{touch:t,direction:r}),this._startPosition=null;return}const o=this._options.direction==="left"||this._options==="right"?"x":"y";n[o].direction===this._options.direction&&n[o].value>this._options.threshold&&(_.trigger(this._element,`swipe${n[o].direction}`,{touch:t}),this._startPosition=null)}handleTouchEnd(){this._startPosition=null}_getCoordinates(t){const[e]=t.touches;return{x:e.clientX,y:e.clientY}}_getDirection(t){return{x:{direction:t.x<0?"left":"right",value:Math.abs(t.x)},y:{direction:t.y<0?"up":"down",value:Math.abs(t.y)}}}_getConfig(t){const e={...Yw,...g.getDataAttributes(this._element),...t};return L(zw,e,jw),e}}const Je="pan",Uw=`${Je}start`,Xw=`${Je}end`,Gw=`${Je}move`,qw="left",Zw="right",Qw={threshold:"number",direction:"string",pointers:"number"},Jw={threshold:20,direction:"all",pointers:1};class tk extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._startTouch=null}static get NAME(){return Je}handleTouchStart(t){this._startTouch=this._getCoordinates(t),this._movedTouch=t,_.trigger(this._element,Uw,{touch:t})}handleTouchMove(t){t.type==="touchmove"&&t.preventDefault();const{threshold:e,direction:i}=this._options,n=this._getCoordinates(t),o=this._getCoordinates(this._movedTouch),r=this._getOrigin(n,this._startTouch),a=this._getOrigin(n,o),l=this._getDirection(r),c=this._getDirection(a),{x:h,y:d}=l;if(i==="all"&&(d.value>e||h.value>e)){const p=d.value>h.value?d.direction:h.direction;_.trigger(this._element,`${Je}${p}`,{touch:t}),_.trigger(this._element,Je,{...a,touch:t})}const u=i===qw||i===Zw?"x":"y";c[u].direction===i&&l[u].value>e&&_.trigger(this._element,`${Je}${i}`,{touch:t,[u]:n[u]-o[u]}),this._movedTouch=t,_.trigger(this._element,Gw,{touch:t})}handleTouchEnd(t){t.type==="touchend"&&t.preventDefault(),this._movedTouch=null,this._startTouch=null,_.trigger(this._element,Xw,{touch:t})}_getConfig(t){const e={...Jw,...g.getDataAttributes(this._element),...t};return L(Je,e,Qw),e}}const Ts="pinch",ek=`${Ts}end`,ik=`${Ts}start`,sk=`${Ts}move`,nk={threshold:"number",pointers:"number"},ok={threshold:10,pointers:2};class rk extends mn{constructor(t,e={}){super(),this._element=t,this._options=this._getConfig(e),this._startTouch=null,this._origin=null,this._touch=null,this._math=null,this._ratio=null}static get NAME(){return Ts}get isNumber(){return typeof this._startTouch=="number"&&typeof this._touch=="number"&&!isNaN(this._startTouch)&&!isNaN(this._touch)}handleTouchStart(t){if(t.touches.length!==this._options.pointers)return;t.type==="touchstart"&&t.preventDefault();const[e,i]=this._getPinchTouchOrigin(t.touches);this._touch=e,this._origin=i,this._startTouch=this._touch,_.trigger(this._element,ik,{touch:t,ratio:this._ratio,origin:this._origin})}handleTouchMove(t){const{threshold:e,pointers:i}=this._options;t.touches.length===i&&(t.type==="touchmove"&&t.preventDefault(),this._touch=this._getPinchTouchOrigin(t.touches)[0],this._ratio=this._touch/this._startTouch,this.isNumber&&(this._origin.x>e||this._origin.y>e)&&(this._startTouch=this._touch,_.trigger(this._element,Ts,{touch:t,ratio:this._ratio,origin:this._origin}),_.trigger(this._element,sk,{touch:t,ratio:this._ratio,origin:this._origin})))}handleTouchEnd(t){this.isNumber&&(this._startTouch=null,_.trigger(this._element,ek,{touch:t,ratio:this._ratio,origin:this._origin}))}_getConfig(t){const e={...ok,...g.getDataAttributes(this._element),...t};return L(Ts,e,nk),e}}const nc="tap",ak={interval:"number",time:"number",taps:"number",pointers:"number"},lk={interval:500,time:250,taps:1,pointers:1};class ck extends mn{constructor(t,e){super(),this._element=t,this._options=this._getConfig(e),this._timer=null,this._tapCount=0}static get NAME(){return nc}handleTouchStart(t){const{x:e,y:i}=this._getCoordinates(t),{interval:n,taps:o,pointers:r}=this._options;return t.touches.length===r&&(this._tapCount+=1,this._tapCount===1&&(this._timer=setTimeout(()=>{this._tapCount=0},n)),this._tapCount===o&&(clearTimeout(this._timer),this._tapCount=0,_.trigger(this._element,nc,{touch:t,origin:{x:e,y:i}}))),t}handleTouchEnd(){}handleTouchMove(){}_getConfig(t){const e={...lk,...g.getDataAttributes(this._element),...t};return L(nc,e,ak),e}}const bn="rotate",hk=`${bn}end`,dk=`${bn}start`,uk={angle:"number",pointers:"number"},pk={angle:0,pointers:2};class fk extends mn{constructor(t,e){super(),this._element=t,this._options=this._getConfig(e),this._origin={}}static get NAME(){return bn}handleTouchStart(t){t.type==="touchstart"&&t.preventDefault(),!(t.touches.length<2)&&(this._startTouch=t,this._origin={},_.trigger(this._element,dk,{touch:t}))}handleTouchMove(t){t.type==="touchmove"&&t.preventDefault();let e,i;const n=t.touches;if(n.length===1&&this._options.pointers===1){const{left:o,top:r,width:a,height:l}=this._element.getBoundingClientRect();e={x:o+a/2,y:r+l/2},i=n[0]}else if(t.touches.length===2&&this._options.pointers===2){const[o,r]=t.touches,a={x1:r.clientX,x2:o.clientX,y1:r.clientY,y2:o.clientY};e=this._getMidPoint(a),i=this._getRightMostTouch(t.touches)}else return;this.currentAngle=this._getAngle(e.x,e.y,i.clientX,i.clientY),this._origin.initialAngle?(this._origin.change=this._getAngularDistance(this._origin.previousAngle,this.currentAngle),this._origin.distance+=this._origin.change):(this._origin.initialAngle=this._origin.previousAngle=this.currentAngle,this._origin.distance=this._origin.change=0),this._origin.previousAngle=this.currentAngle,this.rotate={currentAngle:this.currentAngle,distance:this._origin.distance,change:this._origin.change},_.trigger(this._element,bn,{...this.rotate,touch:t})}handleTouchEnd(t){t.type==="touchend"&&t.preventDefault(),this._origin={},_.trigger(this._element,hk,{touch:t})}_getConfig(t){const e={...pk,...g.getDataAttributes(this._element),...t};return L(bn,e,uk),e}}const oc="touch",rc=`te.${oc}`,_k={event:"string"},gk={event:"swipe"};class Er{constructor(t,e={}){this._element=t,this._options=this._getConfig(e),this._event=this._options.event,this.swipe=this._event==="swipe"?new Kw(t,e):null,this.press=this._event==="press"?new Ww(t,e):null,this.pan=this._event==="pan"?new tk(t,e):null,this.pinch=this._event==="pinch"?new rk(t,e):null,this.tap=this._event==="tap"?new ck(t,e):null,this.rotate=this._event==="rotate"?new fk(t,e):null,this._touchStartHandler=i=>this._handleTouchStart(i),this._touchMoveHandler=i=>this._handleTouchMove(i),this._touchEndHandler=i=>this._handleTouchEnd(i),_.on(this._element,"touchstart",this._touchStartHandler),_.on(this._element,"touchmove",this._touchMoveHandler),_.on(this._element,"touchend",this._touchEndHandler),this._element&&O.setData(t,rc,this)}static get NAME(){return oc}dispose(){_.off(this._element,"touchstart",this._touchStartHandler),_.off(this._element,"touchmove",this._touchMoveHandler),_.off(this._element,"touchend",this._touchEndHandler),this.swipe=null,this.press=null,this.pan=null,this.pinch=null,this.tap=null,this.rotate=null}_getConfig(t){const e={...gk,...g.getDataAttributes(this._element),...t};return L(oc,e,_k),e}_handleTouchStart(t){this[this._event].handleTouchStart(t)}_handleTouchMove(t){this[this._event].handleTouchMove&&this[this._event].handleTouchMove(t)}_handleTouchEnd(t){this[this._event].handleTouchEnd(t)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,rc);const i=typeof t=="object"&&t;if(!(!e&&/dispose/.test(t))&&(e||(e=new Er(this,i)),typeof t=="string")){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);return e[t]}})}static getInstance(t){return O.getData(t,rc)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const ac="smoothScroll",vn=`te.${ac}`,lc=`.${vn}`,mk={container:"string",offset:"number",easing:"string",duration:"number"},bk={container:"body",offset:0,easing:"linear",duration:500},vk=`scrollStart${lc}`,yk=`scrollEnd${lc}`,Tk=`scrollCancel${lc}`;class xr{constructor(t,e={}){this._element=t,this._options=this._getConfig(e),this._href=this._element.getAttribute("href"),this.isCancel=!1,this._element&&(O.setData(t,vn,this),this._setup())}static get NAME(){return ac}get isWindow(){return this._options.container==="body"}get containerToScroll(){return this.isWindow?document.documentElement:m.findOne(this._options.container,document.documentElement)}get elFromHrefExist(){return!!m.findOne(this._href,this.containerToScroll)}get offsetFromEl(){const t=this.containerToScroll.scrollTop,e=m.findOne(this._href,this.containerToScroll);if(this.isWindow)return g.offset(e).top-this._options.offset+t;const i=e.getBoundingClientRect().y,n=this.containerToScroll.getBoundingClientRect().y;return i-n-this._options.offset+t}get easingFunction(){const t=this._options.easing,e=`_motion${t[0].toUpperCase()}${t.slice(1)}`;return this[e]?this[e]:this._motionLinear}dispose(){_.off(this._element,"click",this._handleClick),O.removeData(this._element,vn),this._element=null}cancelScroll(){this.isCancel=!0}_getConfig(t){const e={...bk,...g.getDataAttributes(this._element),...t};return L(ac,e,mk),e}_inViewport(){if(this.isWindow)return!0;const t=this.containerToScroll.getBoundingClientRect();return t.top>=0&&t.bottom<=(window.innerHeight||document.documentElement.clientHeight)}_setup(){const t=typeof this._href<"u",e=this._href.includes("#");t&&e&&this.elFromHrefExist&&(this._scrollOnClickEvent(),this._preventNativeScroll())}_scrollOnClickEvent(){_.on(this._element,"click",t=>{this._handleClick(t)})}_handleClick(t){t.preventDefault(),this.isCancel=!1,_.trigger(this._element,vk);const e=this.containerToScroll,i=this.containerToScroll.scrollTop,n=this.offsetFromEl,o=0,r=1/this._options.duration,a=4.25,l=this.easingFunction;this._inViewport()?this._scrollOnNextTick(e,i,n,o,r,a,l):(this._scrollOnNextTick(document.documentElement,document.documentElement.scrollTop,this.containerToScroll.offsetTop,o,r,a,l),setTimeout(()=>{this._scrollOnNextTick(e,i,n,o,r,a,l),this.isCancel=!1},this._options.duration))}_scrollOnNextTick(t,e,i,n,o,r,a){const l=n<0,c=n>1,h=o<=0;if(l||c||h||this.isCancel){if(this.isCancel){this.isInViewport&&(this.isCancel=!1),_.trigger(this._element,Tk);return}_.trigger(this._element,yk),t.scrollTop=i;return}t.scrollTo({top:e-(e-i)*a(n)}),n+=o*r,setTimeout(()=>{this._scrollOnNextTick(t,e,i,n,o,r,a)})}_preventDefault(t){t.preventDefault()}_preventNativeScroll(){let t=!1;try{window.addEventListener("test",null,Object.defineProperty({},"passive",{get:()=>t=!0}))}catch(n){this._scrollError=n}const e=t?{passive:!1}:!1,i="onwheel"in $("div")?"wheel":"mousewheel";this.isWindow&&(this._deleteScrollOnStart(e,i),this._addScrollOnEnd(e,i),this._addScrollOnCancel(e,i))}_deleteScrollOnStart(t,e){_.on(this._element,"scrollStart.te.smoothScroll",()=>{window.addEventListener(e,this._preventDefault,t),window.addEventListener("touchmove",this._preventDefault,t)})}_addScrollOnEnd(t,e){_.on(this._element,"scrollEnd.te.smoothScroll",()=>{window.removeEventListener(e,this._preventDefault,t),window.removeEventListener("touchmove",this._preventDefault,t)})}_addScrollOnCancel(t,e){_.on(this._element,"scrollCancel.te.smoothScroll",()=>{window.removeEventListener(e,this._preventDefault,t),window.removeEventListener("touchmove",this._preventDefault,t)})}_motionLinear(t){return t}_motionEaseInQuad(t){return t*t}_motionEaseInCubic(t){return t*t*t}_motionEaseInQuart(t){return t*t*t*t}_motionEaseInQuint(t){return t*t*t*t*t}_motionEaseInOutQuad(t){return t<.5?2*t*t:-1+(4-2*t)*t}_motionEaseInOutCubic(t){return t/=.5,t<1?t*t*t/2:(t-=2,(t*t*t+2)/2)}_motionEaseInOutQuart(t){return t/=.5,t<1?.5*t*t*t*t:(t-=2,-(t*t*t*t-2)/2)}_motionEaseInOutQuint(t){return t/=.5,t<1?t*t*t*t*t/2:(t-=2,(t*t*t*t*t+2)/2)}_motionEaseOutQuad(t){return-t*(t-2)}_motionEaseOutCubic(t){return t--,t*t*t+1}_motionEaseOutQuart(t){return t--,-(t*t*t*t-1)}_motionEaseOutQuint(t){return t--,t*t*t*t*t+1}static getInstance(t){return O.getData(t,vn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,vn);const i=typeof t=="object"&&t;if(e||(e=new xr(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Kp="lazyLoad",Cr="te.lazyLoad",Ek="[data-te-lazy-load-init]",Up="data-te-lazy-load",xk="onLoad.te.lazy",Ck="onError.te.lazy",Xp=["img","video"],Ak={lazySrc:"(string|null)",lazyDelay:"number",lazyAnimation:"string",lazyOffset:"number",lazyPlaceholder:"(string|undefined)",lazyError:"(string|undefined)"},wk={lazySrc:null,lazyDelay:500,lazyAnimation:"[fade-in_1s_ease-in-out]",lazyOffset:0};class yn{constructor(t,e){this._element=t,this._element&&O.setData(t,Cr,this),this._options=this._getConfig(e),this.scrollHandler=this._scrollHandler.bind(this),this.errorHandler=this._setElementError.bind(this),this._childrenInstances=null,this._init()}static get NAME(){return Kp}get offsetValues(){return this._element.getBoundingClientRect()}get inViewport(){if(this.parent){const t=this.parent.getBoundingClientRect();return t.y>0&&t.y<window.innerHeight&&this.offsetValues.y>=t.y&&this.offsetValues.y<=t.y+t.height&&this.offsetValues.y<=window.innerHeight}return this.offsetValues.top+this._options.lazyOffset<=window.innerHeight&&this.offsetValues.bottom>=0}get parent(){const[t]=m.parents(this._element,Ek);return t}get node(){return this._element.nodeName}get isContainer(){return!m.matches(this._element,Xp)}dispose(){O.removeData(this._element,Cr),this._animation&&(this._animation.dispose(),this._animation=null),this._element=null,this._childrenInstances&&this._childrenInstances.forEach(t=>t.dispose())}_init(){if(this._element.setAttribute(Up,""),this.isContainer){this._setupContainer();return}this._setupElement()}_setupElement(){_.one(this._element,"error",this.errorHandler),this._options.lazyPlaceholder&&this._setPlaceholder(),this._animation=new Gs(this._element,{animation:`${this._options.lazyAnimation}`,animationStart:"onLoad"}),_.one(this._element,"load",()=>this._scrollHandler()),this.parent&&_.on(this.parent,"scroll",this.scrollHandler),_.on(window,"scroll",this.scrollHandler)}_scrollHandler(){this.inViewport&&(this._timeout=setTimeout(()=>{this._setSrc(),this._element.removeAttribute(Up),this._removeAttrs(),this._animation.init()},this._options.lazyDelay),this.parent&&_.off(this.parent,"scroll",this.scrollHandler),_.off(window,"scroll",this.scrollHandler))}_setElementError(){!this._options.lazyError||this._element.src===this._options.lazyError?this._element.alt="404 not found":this._element.setAttribute("src",this._options.lazyError),_.trigger(this._element,Ck)}_setSrc(){this._element.setAttribute("src",this._options.lazySrc),_.trigger(this._element,xk)}_setPlaceholder(){this.node==="IMG"?this._element.setAttribute("src",this._options.lazyPlaceholder):this.node==="VIDEO"&&this._element.setAttribute("poster",this._options.lazyPlaceholder)}_removeAttrs(){["src","delay","animation","placeholder","offset","error"].forEach(t=>{g.removeDataAttribute(this._element,`lazy-${t}`)})}_setupContainer(){this._childrenInstances=m.children(this._element,Xp).map(t=>new yn(t,this._options))}_getConfig(t){const e={...wk,...t,...g.getDataAttributes(this._element)};return L(Kp,e,Ak),e}static getInstance(t){return O.getData(t,Cr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Cr);const i=typeof t=="object"&&t;if(e||(e=new yn(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Gp="clipboard",Tn="te.clipboard",kk=`.${Tn}`,Sk={clipboardTarget:null},Ok={clipboardTarget:"null|string"},Ik=`copy${kk}`;class Ar{constructor(t,e={}){this._element=t,this._options=e,this._element&&(O.setData(t,Tn,this),this._initCopy=this._initCopy.bind(this),this._setup())}static get NAME(){return Gp}get options(){const t={...Sk,...g.getDataAttributes(this._element),...this._options};return L(Gp,t,Ok),t}get clipboardTarget(){return m.findOne(this.options.clipboardTarget)}get copyText(){const t=this.clipboardTarget.hasAttribute("data-te-clipboard-text"),e=this.clipboardTarget.value,i=this.clipboardTarget.textContent;return t?this.clipboardTarget.getAttribute("data-te-clipboard-text"):e||i}dispose(){_.off(this._element,"click",this._initCopy),O.removeData(this._element,Tn),this._element=null}_setup(){_.on(this._element,"click",this._initCopy)}_initCopy(){const t=this._createNewInput();document.body.appendChild(t),this._selectInput(t),_.trigger(this._element,Ik,{copyText:this.copyText}),t.remove()}_createNewInput(){const t=this.clipboardTarget.tagName==="TEXTAREA"?"textarea":"input",e=$(t);return e.value=this.copyText,g.addClass(e,"-left-[9999px] absolute"),e}_selectInput(t){t.select(),t.focus(),t.setSelectionRange(0,99999),document.execCommand("copy")}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Tn);const i=typeof t=="object"&&t;if(e||(e=new Ar(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}static getInstance(t){return O.getData(t,Tn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const cc="infiniteScroll",wr=`te.${cc}`,Dk={infiniteDirection:"y"},Mk={infiniteDirection:"string"};class kr{constructor(t,e){this._element=t,this._element&&O.setData(t,wr,this),this._options=this._getConfig(e),this.scrollHandler=this._scrollHandler.bind(this),this._init()}static get NAME(){return cc}get rect(){return this._element.getBoundingClientRect()}get condition(){return this._element===window?Math.abs(window.scrollY+window.innerHeight-document.documentElement.scrollHeight)<1:this._options.infiniteDirection==="x"?this.rect.width+this._element.scrollLeft+10>=this._element.scrollWidth:Math.ceil(this.rect.height+this._element.scrollTop)>=this._element.scrollHeight}dispose(){_.off(this._element,"scroll",this.scrollHandler),O.removeData(this._element,wr),this._element=null}_init(){_.on(this._element,"scroll",()=>this._scrollHandler())}_scrollHandler(){this.condition&&_.trigger(this._element,"complete.te.infiniteScroll"),_.off(this._element,"scroll",this.scrollHandler)}_getConfig(t){const e={...Dk,...this._element!==window?g.getDataAttributes(this._element):{},...t};return L(cc,e,Mk),e}static getInstance(t){return O.getData(t,wr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,wr);const i=typeof t=="object"&&t;if(e||(e=new kr(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}function Lk({backdropID:s},t){const e=$("div");return g.addClass(e,`${t.backdrop} ${t.backdropColor}`),e.id=s,e}const En="loadingManagement",Sr=`te.${En}`,$k="[data-te-loading-icon-ref]",Rk="[data-te-loading-text-ref]",Pk=`show.te.${En}`,Nk={backdrop:"(null|boolean)",backdropID:"(null|string|number)",delay:"(null|number)",loader:"(null|string|number)",parentSelector:"(null|string)",loadingIcon:"boolean",loadingText:"boolean",scroll:"boolean"},Bk={backdrop:!0,backdropID:null,delay:0,loader:"",parentSelector:null,scroll:!0,loadingText:!0,loadingIcon:!0},Hk={loadingSpinner:"absolute top-[50%] left-[50%] -translate-x-[50%] -translate-y-[50%] flex flex-col justify-center items-center z-40",spinnerColor:"text-primary dark:text-primary-400",backdrop:"w-full h-full fixed top-0 left-0 bottom-0 right-0 z-30",backdropColor:"bg-[rgba(0,0,0,0.4)]"},Vk={loadingSpinner:"string",spinnerColor:"string",backdrop:"string",backdropColor:"string"};class Or{constructor(t,e={},i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._element&&O.setData(t,Sr,this),this._backdropElement=null,this._parentElement=m.findOne(this._options.parentSelector),this._loadingIcon=m.findOne($k,this._element),this._loadingText=m.findOne(Rk,this._element),this.init()}static get NAME(){return En}init(){const t=this._loadingIcon.cloneNode(!0),e=this._loadingText.cloneNode(!0);this._removeElementsOnStart(),setTimeout(()=>{g.addClass(this._element,`${this._classes.loadingSpinner} ${this._classes.spinnerColor}`),this._setBackdrop(),this._setLoadingIcon(t),this._setLoadingText(e),this._setScrollOption(),_.trigger(this._element,Pk)},this._options.delay)}dispose(){O.removeData(this._element,Sr),g.removeClass(this._element,`${this._classes.loadingSpinner} ${this._classes.spinnerColor}`);const t=this._options.delay;setTimeout(()=>{this._removeBackdrop(),this._backdropElement=null,this._element=null,this._options=null},t)}_setBackdrop(){const{backdrop:t}=this._options;t&&(this._backdropElement=Lk(this._options,this._classes),this._parentElement!==null?(g.addClass(this._element,"absolute"),g.addClass(this._parentElement,"relative"),g.addClass(this._backdropElement,"absolute"),this._parentElement.appendChild(this._backdropElement)):(g.addClass(this._element,"!fixed"),document.body.appendChild(this._backdropElement),document.body.appendChild(this._element)))}_removeBackdrop(){const{backdrop:t}=this._options;t&&(this._parentElement!==null?(g.removeClass(this._element,"absolute"),g.removeClass(this._parentElement,"relative"),this._backdropElement.remove()):(this._backdropElement.remove(),this._element.remove()))}_setLoadingIcon(t){if(!this._options.loadingIcon){t.remove();return}this._element.appendChild(t),t.id=this._options.loader}_setLoadingText(t){if(!this._options.loadingText){t.remove();return}this._element.appendChild(t)}_removeElementsOnStart(){this._element!==null&&(this._loadingIcon.remove(),this._loadingText.remove())}_setScrollOption(){if(this._options.scroll){if(this._parentElement===null){g.addClass(document.body,"overflow-auto");return}g.addClass(this._parentElement,"overflow-auto")}else{if(this._parentElement===null){g.addClass(document.body,"overflow-hidden");return}g.addClass(this._parentElement,"overflow-hidden")}}_getConfig(t){const e={...Bk,...g.getDataAttributes(this._element),...t};return L(En,e,Nk),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...Hk,...e,...t},L(En,t,Vk),t}static getInstance(t){return O.getData(t,Sr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}static jQueryInterface(t){return this.each(function(){let e=O.getData(this,Sr);const i=typeof t=="object"&&t;if(e||(e=new Or(this,i)),typeof t=="string"){if(typeof e[t]>"u")throw new TypeError(`No method named "${t}"`);e[t](this)}})}}const Fk=s=>{const t=/^(0?[1-9]|1[012])(:[0-5]\d) [APap][mM]$/,e=/^([0-9]|0[0-9]|1[0-9]|2[0-3]):[0-5][0-9](:[0-5][0-9])?$/;return s.match(t)||s.match(e)},Wk=s=>s&&Object.prototype.toString.call(s)==="[object Date]"&&!isNaN(s),zk=s=>s.getMonth(),jk=s=>s.getFullYear(),Yk=s=>s.match(/[^(dmy)]{1,}/g),Kk=(s,t,e,i)=>{let n;e[0]!==e[1]?n=e[0]+e[1]:n=e[0];const o=new RegExp(`[${n}]`),r=s.split(o),a=t.split(o),l=t.indexOf("mmm")!==-1,c=[];for(let b=0;b<a.length;b++)a[b].indexOf("yy")!==-1&&(c[0]={value:r[b],format:a[b]}),a[b].indexOf("m")!==-1&&(c[1]={value:r[b],format:a[b]}),a[b].indexOf("d")!==-1&&a[b].length<=2&&(c[2]={value:r[b],format:a[b]});let h;t.indexOf("mmmm")!==-1?h=i.monthsFull:h=i.monthsShort;const d=Number(c[0].value),u=l?Uk(c[1].value,h):Number(c[1].value)-1,p=Number(c[2].value);return ee(d,u,p)},Uk=(s,t)=>t.findIndex(e=>e===s),Xk=(s,t,e)=>`
+  <button type="button" class="${e.pickerIcon}" data-te-datepicker-toggle-button-ref>
+    ${s}
+  </button>
+  <button type="button" class="${e.pickerIcon}" data-te-timepicker-toggle-button-ref>
+    ${t}
+  </button>
+`,Gk=(s,t)=>`
+  <button type="button" class="${t.toggleButton}" data-te-date-timepicker-toggle-ref>
+    ${s} 
+  </button>
+`,Ir="datetimepicker",xn=`te.${Ir}`,hc=`.${xn}`,qp="data-te-datepicker-init",Zp="data-te-timepicker-init",qk="data-te-datepicker-header",Zk="data-te-datepicker-cancel-button-ref",Qk="data-te-datepicker-ok-button-ref",dc="data-te-timepicker-wrapper",Qp="data-te-timepicker-cancel",Jk="data-te-timepicker-submit",tS="data-te-timepicker-clear",Jp="data-te-buttons-timepicker",eS="data-te-date-timepicker-toggle-ref",iS="data-te-datepicker-toggle-button-ref",sS="data-te-timepicker-toggle-button-ref",nS=`[${Zp}]`,oS=`[${qp}]`,rS=`[${eS}]`,aS=`[${sS}]`,lS="[data-te-input-notch-ref]",cS="[data-te-date-timepicker-toggle-ref]",hS="[data-te-timepicker-elements-wrapper]",dS="[data-te-timepicker-clock-wrapper]",uS=`open${hc}`,pS=`close${hc}`,fS=`datetimeChange${hc}`,tf="close.te.datepicker",ef="input.te.timepicker",Es=$("div"),sf={inline:!1,toggleButton:!0,container:"body",disabled:!1,disablePast:!1,disableFuture:!1,defaultTime:"",defaultDate:"",timepicker:{},datepicker:{},showFormat:!1,dateTimepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+  <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+  </svg>`,datepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor">
+  <path fill-rule="evenodd" d="M6.75 2.25A.75.75 0 017.5 3v1.5h9V3A.75.75 0 0118 3v1.5h.75a3 3 0 013 3v11.25a3 3 0 01-3 3H5.25a3 3 0 01-3-3V7.5a3 3 0 013-3H6V3a.75.75 0 01.75-.75zm13.5 9a1.5 1.5 0 00-1.5-1.5H5.25a1.5 1.5 0 00-1.5 1.5v7.5a1.5 1.5 0 001.5 1.5h13.5a1.5 1.5 0 001.5-1.5v-7.5z" clip-rule="evenodd" />
+  </svg>`,timepickerToggleIconTemplate:`<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M12 6v6h4.5m4.5 0a9 9 0 11-18 0 9 9 0 0118 0z" />
+  </svg>`},_S={inline:"boolean",toggleButton:"boolean",container:"string",disabled:"boolean",disablePast:"boolean",disableFuture:"boolean",defaultTime:"(string|date|number)",defaultDate:"(string|date|number)",timepicker:"object",datepicker:"object",showFormat:"boolean",dateTimepickerToggleIconTemplate:"string",datepickerToggleIconTemplate:"string",timepickerToggleIconTemplate:"string"},gS={toggleButton:"flex items-center justify-content-center [&>svg]:w-5 [&>svg]:h-5 absolute outline-none border-none bg-transparent right-0.5 top-1/2 -translate-x-1/2 -translate-y-1/2 hover:text-primary focus:text-primary dark:hover:text-primary-400 dark:focus:text-primary-400 dark:text-neutral-200",pickerIcon:"[&>svg]:w-6 [&>svg]:h-6 [&>svg]:mx-auto [&>svg]:pointer-events-none w-1/2 px-1.5 py-[1px] rounded-[10px] min-h-[40px] cursor-pointer outline-none border-none text-white hover:bg-primary-600 dark:hover:bg-neutral-600",buttonsContainer:"flex justify-evenly items-end bg-primary dark:bg-zinc-800 dark:data-[te-buttons-timepicker]:bg-zinc-700",timepicker:{},datepicker:{}},mS={toggleButton:"string",pickerIcon:"string",buttonsContainer:"string",timepicker:"object",datepicker:"object"};class Dr{constructor(t,e,i){this._element=t,this._input=m.findOne("input",this._element),this._options=this._getConfig(e),this._classes=this._getClasses(i),this._timepicker=null,this._datepicker=null,this._dateValue=this._options.defaultDate?this._options.defaultDate:"",this._timeValue=this._options.defaultTime?this._options.defaultTime:"",this._isInvalidTimeFormat=!1,this._format=this._options.datepicker.format?this._options.datepicker.format:"dd/mm/yyyy",this._cancel=!1,this._scrollBar=new Qi,this._element&&O.setData(t,xn,this),this._init()}static get NAME(){return Ir}get toggleButton(){return m.findOne(rS,this._element)}get notch(){return m.findOne(lS,this._element)}dispose(){_.off(this._element,"click",this._openDatePicker),_.off(this._input,"input",this._handleInput),_.off(this._element,"click"),O.removeData(this._element,xn),this._removeTimePicker(),this._removeDatepicker(),this.toggleButton.remove(),this._options=sf,this._timepicker=null,this._datepicker=null,this._dateValue=null,this._timeValue=null,this._isInvalidTimeFormat=null}update(t={}){const e=this._getConfig({...this._options,...t});this.dispose(),this._options=e,this._init()}_init(){this._addDatepicker(),this._addTimePicker(),this._appendToggleButton(),this._listenToToggleClick(),this._listenToUserInput(),this._disableInput(),this._setInitialDefaultInput(),this._applyFormatPlaceholder(),this._options.disablePast&&this._handleTimepickerDisablePast(),this._options.disableFuture&&this._handleTimepickerDisableFuture()}_removeDatepicker(){const t=this._element.querySelector(oS);t&&t.remove()}_addDatepicker(){const t=$("div");t.id=this._element.id?`datepicker-${this._element.id}`:bt("datepicker-");const e='<input type="text">';t.innerHTML=e,t.setAttribute(qp,""),this._element.appendChild(t),g.addClass(t,"hidden");let i={...this._options.datepicker,container:this._options.container,disablePast:this._options.disablePast,disableFuture:this._options.disableFuture};(this._options.inline||this._options.datepicker.inline)&&(i={...i,inline:!0}),this._datepicker=new xl(t,i,{...this._classes.datepicker}),this._datepicker._input.value=this._dateValue}_removeTimePicker(){const t=this._element.querySelector(nS);t&&(t.remove(),this._scrollBar.reset())}_addTimePicker(){const t=$("div");t.id=this._element.id?`timepicker-${this._element.id}`:bt("timepicker-");const e='<input type="text">';t.innerHTML=e,t.setAttribute(Zp,""),this._element.appendChild(t),g.addClass(t,"hidden");let i={...this._options.timepicker,container:this._options.container};(this._options.inline||this._options.timepicker.inline)&&(i={...i,inline:!0}),this._timepicker=new Ll(t,i,{...this._classes.timepicker}),this._timepicker.input.value=this._timeValue}_addIconButtons(){if(g.addClass(Es,this._classes.buttonsContainer),Es.innerHTML=Xk(this._options.datepickerToggleIconTemplate,this._options.timepickerToggleIconTemplate,this._classes),Es.removeAttribute(Jp),!(this._options.inline||this._options.datepicker.inline)){if(this._scrollBar.hide(),this._datepicker._isOpen)m.findOne(`[${qk}]`,document.body).appendChild(Es);else if(this._timepicker._modal&&!this._options.timepicker.inline){const t=m.findOne(hS,document.body),e=m.findOne(dS,document.body);Es.setAttribute(Jp,""),t.insertBefore(Es,e)}}}_enableOrDisableToggleButton(){this._options.disabled?(this.toggleButton.disabled=!0,g.addClass(this.toggleButton,"pointer-events-none")):(this.toggleButton.disabled=!1,g.removeClass(this.toggleButton,"pointer-events-none"))}_appendToggleButton(){this._options.toggleButton&&(this._element.insertAdjacentHTML("beforeend",Gk(this._options.dateTimepickerToggleIconTemplate,this._classes)),this._enableOrDisableToggleButton())}_applyFormatPlaceholder(){this._options.showFormat&&(this._input.placeholder=this._format)}_listenToCancelClick(){const t=m.findOne(`[${Zk}]`,document.body);_.one(t,"mousedown",()=>{this._cancel=!0,this._scrollBar.reset(),_.off(t,"mousedown")})}_listenToToggleClick(){_.on(this._element,"click",cS,t=>{t.preventDefault(),this._openDatePicker()})}_listenToUserInput(){_.on(this._input,"input",t=>{this._handleInput(t.target.value)})}_disableInput(){this._options.disabled&&(this._input.disabled="true")}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...sf,...e,...t},L(Ir,t,_S),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...gS,...e,...t},L(Ir,t,mS),t}_handleInput(t){const e=t.split(", "),i=Yk(this._format),n=e[0],o=e[1]||"",r=Kk(n,this._format,i,this._datepicker._options);e.length===2&&(Wk(r)&&Fk(o)?(this._dateValue=n,this._timeValue=o,this._datepicker._input.value=this._dateValue,this._datepicker._activeDate=this._dateValue,this._datepicker._selectedYear=jk(r),this._datepicker._selectedMonth=zk(r),this._datepicker._headerDate=r,this._timepicker.input.value=this._timeValue,this._timepicker._isInvalidTimeFormat=!1):(this._datepicker._activeDate=new Date,this._datepicker._selectedDate=null,this._datepicker._selectedMonth=null,this._datepicker._selectedYear=null,this._datepicker._headerDate=null,this._datepicker._headerMonth=null,this._datepicker._headerYear=null,this._timepicker._isInvalidTimeFormat=!0))}_openDatePicker(){if(_.trigger(this._element,uS).defaultPrevented)return;this._datepicker.open(),this._options.inline||this._scrollBar.hide(),(this._options.inline||this._options.datepicker.inline)&&this._openDropdownDate(),this._addIconButtons(),this._listenToCancelClick(),this._options.inline&&this._datepicker._isOpen&&g.addClass(this.toggleButton,"pointer-events-none"),_.one(this._datepicker._element,tf,()=>{if(this._dateValue=this._datepicker._input.value,this._updateInputValue(),this._cancel){this._cancel=!1;return}let i=!1;_.on(this._datepicker.container,"click",n=>{!this._datepicker._selectedDate&&n.target.hasAttribute(Qk)||i||(this._openTimePicker(),i=!0,setTimeout(()=>{i=!1},500))}),setTimeout(()=>{m.findOne(`[${dc}]`,document.body)||this._scrollBar.reset()},10),this._options.inline&&g.removeClass(this.toggleButton,"pointer-events-none")});const e=m.findOne(aS,document.body);_.on(e,"click",()=>{this._datepicker.close(),this._scrollBar.hide(),_.trigger(this._datepicker._element,tf)})}_handleTimepickerDisablePast(){const t=new Date;t.setHours(0,0,0,0),_.on(this._datepicker._element,"dateChange.te.datepicker",()=>{this._datepicker._selectedDate.getTime()===t.getTime()?this._timepicker.update({disablePast:!0}):this._timepicker.update({disablePast:!1})})}_handleTimepickerDisableFuture(){const t=new Date;t.setHours(0,0,0,0),_.on(this._datepicker._element,"dateChange.te.datepicker",()=>{this._datepicker._selectedDate.getTime()===t.getTime()?this._timepicker.update({disableFuture:!0}):this._timepicker.update({disableFuture:!1})})}_handleEscapeKey(){_.one(document.body,"keyup",()=>{setTimeout(()=>{m.findOne(`[${dc}]`,document.body)||this._scrollBar.reset()},250)})}_handleCancelButton(){const t=m.findOne(`[${Qp}]`,document.body);_.one(t,"mousedown",()=>{this._scrollBar.reset()})}_openDropdownDate(){const t=this._datepicker._popper;t.state.elements.reference=this._input,this._scrollBar.reset()}_openTimePicker(){_.trigger(this._timepicker.elementToggle,"click"),setTimeout(()=>{if(this._addIconButtons(),(this._options.inline||this._options.timepicker.inline)&&this._openDropdownTime(),this._timepicker._modal){const t=m.findOne(`[${Qp}]`,document.body);this._handleEscapeKey(),this._handleCancelButton(),_.on(this._timepicker._modal,"click",e=>{(e.target.hasAttribute(dc)||e.target.hasAttribute(Jk))&&setTimeout(()=>{this._scrollBar.reset()},200),e.target.hasAttribute(tS)&&_.trigger(this._timepicker._element,ef),e.target.hasAttribute(iS)&&(_.trigger(t,"click"),setTimeout(()=>{this._openDatePicker(),this._scrollBar.hide()},200))})}}),_.one(this._timepicker._element,ef,()=>{this._timeValue=this._timepicker.input.value,this._updateInputValue(),_.trigger(this._element,pS)})}_openDropdownTime(){const t=this._timepicker._popper;t.state.elements.reference=this._input,t.update(),this._scrollBar.reset()}_setInitialDefaultInput(){(this._options.defaultDate||this._options.defaultTime)&&this._updateInputValue()}_updateInputValue(){this._timeValue&&this._dateValue&&(this._input.value=`${this._dateValue}, ${this._timeValue}`,_.trigger(this._element,fS,{value:this._input.value}).defaultPrevented)||(_.trigger(this._input,"focus"),this.notch&&this.notch.removeAttribute("data-te-input-focused"))}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,xn);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Dr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,xn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const Mr="sticky",Cn=`te.${Mr}`,nf=`.${Cn}`,bS=`active${nf}`,vS=`inactive${nf}`,yS={stickyAnimationSticky:"",stickyAnimationUnsticky:"",stickyBoundary:!1,stickyDelay:0,stickyDirection:"down",stickyMedia:0,stickyOffset:0,stickyPosition:"top",stickyZIndex:100},TS={stickyAnimationSticky:"string",stickyAnimationUnsticky:"string",stickyBoundary:"(boolean|string)",stickyDelay:"number",stickyDirection:"string",stickyMedia:"number",stickyOffset:"number",stickyPosition:"string",stickyZIndex:"(string|number)"},ES={stickyActive:""},xS={stickyActive:"string"};class Lr{constructor(t,e,i){this._element=t,this._hiddenElement=null,this._elementPositionStyles={},this._scrollDirection="",this._isSticked=!1,this._elementOffsetTop=null,this._scrollTop=0,this._pushPoint="",this._manuallyDeactivated=!1,this._element&&(this._options=this._getConfig(e),this._classes=this._getClasses(i),O.setData(t,Cn,this),this._init())}static get NAME(){return Mr}dispose(){const{stickyAnimationUnsticky:t}=this._options;let{animationDuration:e}=getComputedStyle(this._element);e=t!==""?parseFloat(e)*1e3:0,this._disableSticky(),setTimeout(()=>{O.removeData(this._element,Cn),this._element=null,this._options=null,this._hiddenElement=null,this._elementPositionStyles=null,this._scrollDirection=null,this._isSticked=null,this._elementOffsetTop=null,this._scrollTop=null,this._pushPoint=null,this._manuallyDeactivated=null},e)}active(){this._isSticked||(this._createHiddenElement(),this._enableSticky(),this._changeBoundaryPosition(),this._isSticked=!0,this._manuallyDeactivated=!1)}inactive(){this._isSticked&&(this._disableSticky(),this._isSticked=!1,this._manuallyDeactivated=!0)}_init(){this._userActivityListener()}_userActivityListener(){_.on(window,"resize",()=>{this._updateElementPosition(),this._updateElementOffset()}),_.on(window,"scroll",()=>{if(!this._element||window.innerWidth<=this._options.stickyMedia||this._manuallyDeactivated)return;const t=document.documentElement,{stickyDirection:e}=this._options,i=window.pageYOffset||t.scrollTop;this._updateElementOffset(),this._updatePushPoint(),this._updateScrollDirection(i),this._clearInProgressAnimations();const n=[this._scrollDirection,"both"].includes(e),o=this._pushPoint<=i,r=o&&!this._isSticked&&n,a=(!o||!n)&&this._isSticked;r&&(this._createHiddenElement(),this._enableSticky(),this._changeBoundaryPosition(),this._isSticked=!0),a&&(this._disableSticky(),this._isSticked=!1),this._isSticked&&(this._updatePosition({styles:this._elementPositionStyles}),this._changeBoundaryPosition()),this._scrollTop=i<=0?0:i})}_updatePushPoint(){this._options.stickyPosition==="top"?this._pushPoint=this._elementOffsetTop-this._options.stickyDelay:this._pushPoint=this._elementOffsetTop+this._element.height-document.body.scrollHeight+this._options.stickyDelay}_updateElementOffset(){this._hiddenElement?this._elementOffsetTop=this._hiddenElement.offsetTop:this._elementOffsetTop=this._element.offsetTop,this._options.stickyAnimationUnsticky&&(this._elementOffsetTop+=this._element.height||0)}_updateElementPosition(){if(this._hiddenElement){const{left:t}=this._hiddenElement.getBoundingClientRect();this._elementPositionStyles={left:`${t}px`}}else this._elementPositionStyles={};this._setStyle(this._element,this._elementPositionStyles)}_updateScrollDirection(t){t>this._scrollTop?this._scrollDirection="down":this._scrollDirection="up"}_clearInProgressAnimations(){const t=this._scrollDirection==="up",e=this._element.classList.contains(this._options.stickyAnimationUnsticky),i=window.scrollY<=this._elementOffsetTop-this._element.height;t&&e&&i&&(this._removeUnstickyAnimation(),this._resetStyles(),this._removeHiddenElement())}_enableSticky(){const{stickyAnimationSticky:t,stickyAnimationUnsticky:e,stickyOffset:i,stickyPosition:n,stickyZIndex:o}=this._options,{height:r,left:a,width:l}=this._element.getBoundingClientRect();t!==""&&this._toggleClass(t,e,this._element),this._toggleClass(this._classes.stickyActive,"",this._element),this._setStyle(this._element,{top:n==="top"&&`${0+i}px`,bottom:n==="bottom"&&`${0+i}px`,height:`${r}px`,width:`${l}px`,left:`${a}px`,zIndex:`${o}`,position:"fixed"}),this._hiddenElement.hidden=!1,_.trigger(this._element,bS)}_changeBoundaryPosition(){const{stickyPosition:t,stickyBoundary:e,stickyOffset:i}=this._options,{height:n}=this._element.getBoundingClientRect(),o={height:this._element.parentElement.getBoundingClientRect().height,...this._getOffset(this._element.parentElement)};let r;const a=m.findOne(e);a?r=this._getOffset(a).top-n-i:r=o.height+o[t]-n-i;const l=t==="top",c=t==="bottom",h=e,d=r<0,u=r>o.height-n;let p;l&&(d&&h?p={top:`${i+r}px`}:p={top:`${i+0}px`}),c&&(d&&h?p={bottom:`${i+r}px`}:u&&h?p={bottom:`${i+o.bottom}px`}:p={bottom:`${i+0}px`}),this._setStyle(this._element,p)}_disableSticky(){const{stickyAnimationUnsticky:t,stickyAnimationSticky:e}=this._options;let{animationDuration:i}=getComputedStyle(this._element);i=t!==""?parseFloat(i)*1e3:0,this._options.stickyAnimationUnsticky!==""&&this._toggleClass(t,e,this._element),setTimeout(()=>{this._element.classList.contains(e)||(this._removeUnstickyAnimation(),this._resetStyles(),this._removeHiddenElement(),this._toggleClass("",this._classes.stickyActive,this._element),_.trigger(this._element,vS))},i)}_createHiddenElement(){this._hiddenElement||(this._hiddenElement=this._copyElement(this._element))}_removeHiddenElement(){this._hiddenElement&&(this._hiddenElement.remove(),this._hiddenElement=null)}_removeUnstickyAnimation(){this._toggleClass("",this._options.stickyAnimationUnsticky,this._element)}_resetStyles(){this._setStyle(this._element,{top:null,bottom:null,position:null,left:null,zIndex:null,width:null,height:null})}_updatePosition({styles:t}){this._setStyle(this._element,t)}_toggleClass(t,e,i){t&&g.addClass(i,t),e&&g.removeClass(i,e)}_getOffset(t){const e=g.offset(t),i=t.getBoundingClientRect(),n=e.left===0&&e.top===0?0:window.innerHeight-i.bottom;return{...e,bottom:n}}_copyElement(t){const{height:e,width:i}=t.getBoundingClientRect(),n=t.cloneNode(!1);return n.hidden=!0,this._setStyle(n,{height:`${e}px`,width:`${i}px`,opacity:"0"}),t.parentElement.insertBefore(n,t),n}_getConfig(t={}){const e=g.getDataAttributes(this._element);return t={...yS,...e,...t},L(Mr,t,TS),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...ES,...e,...t},L(Mr,t,xS),t}_setStyle(t,e){Object.keys(e).forEach(i=>{t.style[i]=e[i]})}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Cn);const n=typeof t=="object"&&t;if(!(!i&&/dispose|hide/.test(t))&&(i||(i=new Lr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Cn)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const CS="data-te-autocomplete-dropdown-ref",AS="data-te-autocomplete-items-list-ref",wS="data-te-autocomplete-item-ref",kS="data-te-autocomplete-loader-ref";function SS(s,t){const{id:e,items:i,width:n,options:o}=s,r=$("div");g.addClass(r,t.dropdownContainer),g.addStyle(r,{width:`${n}px`}),r.setAttribute("id",e);const a=$("div");a.setAttribute(CS,""),g.addClass(a,t.dropdown);const l=$("ul"),c=o.listHeight;l.setAttribute(AS,""),g.addClass(l,t.autocompleteList),g.addClass(l,t.scrollbar),g.addStyle(l,{maxHeight:`${c}px`}),l.setAttribute("role","listbox");const h=of(i,o);return l.innerHTML=h,a.appendChild(l),r.appendChild(a),r}function of(s=[],t,e){const i=t.displayValue,n=t.itemContent;return`
+    ${s.map((o,r)=>{const a=typeof n=="function"?To(n(o),Pd,null):i(o);return`<li data-te-index="${r}" role="option" class="${e}" ${wS} >${a}</li>`}).join("")}
+  `}function OS(s){const t=$("div");t.setAttribute(kS,""),g.addClass(t,s.autocompleteLoader),g.addClass(t,s.spinnerIcon),t.setAttribute("role","status");const e='<span class="absolute -m-px h-px w-px overflow-hidden whitespace-nowrap border-0 p-0 [clip:rect(0,0,0,0)]">Loading...</span>';return t.innerHTML=e,t}function IS(s,t){return`<li class="${t.autocompleteItem}">${s}</li>`}const uc="autocomplete",An="te.autocomplete",xs="data-te-input-state-active",pc="data-te-autocomplete-item-active",rf="data-te-input-focused",af="data-te-autocomplete-state-open",DS="data-te-autocomplete-custom-content-ref",MS="[data-te-autocomplete-dropdown-ref]",$r="[data-te-autocomplete-items-list-ref]",lf="[data-te-autocomplete-item-ref]",LS="[data-te-autocomplete-loader-ref]",$S=`[${DS}]`,RS="[data-te-input-notch-ref]",Rr=`.${An}`,PS=`close${Rr}`,NS=`open${Rr}`,cf=`itemSelect${Rr}`,BS=`update${Rr}`,HS={autoSelect:!1,container:"body",customContent:"",debounce:300,displayValue:s=>s,filter:null,itemContent:null,listHeight:190,loaderCloseDelay:300,noResults:"No results found",threshold:0},VS={autoSelect:"boolean",container:"string",customContent:"string",debounce:"number",displayValue:"function",filter:"(null|function)",itemContent:"(null|function)",listHeight:"number",loaderCloseDelay:"number",noResults:"string",threshold:"number"},FS={autocompleteItem:"flex flex-row items-center justify-between w-full px-4 py-[0.4375rem] truncate text-gray-700 bg-transparent select-none cursor-pointer hover:[&:not([data-te-autocomplete-option-disabled])]:bg-black/5 data-[te-autocomplete-item-active]:bg-black/5 data-[data-te-autocomplete-option-disabled]:text-gray-400 data-[data-te-autocomplete-option-disabled]:cursor-default dark:text-gray-200 dark:hover:[&:not([data-te-autocomplete-option-disabled])]:bg-white/30 dark:data-[te-autocomplete-item-active]:bg-white/30",autocompleteList:"list-none m-0 p-0 overflow-y-auto",autocompleteLoader:"absolute right-1 top-2 w-[1.4rem] h-[1.4rem] border-[0.15em]",dropdown:"relative outline-none min-w-[100px] m-0 scale-y-[0.8] opacity-0 bg-white shadow-[0_2px_5px_0_rgba(0,0,0,0.16),_0_2px_10px_0_rgba(0,0,0,0.12)] transition duration-200 motion-reduce:transition-none data-[te-autocomplete-state-open]:scale-y-100 data-[te-autocomplete-state-open]:opacity-100 dark:bg-zinc-700",dropdownContainer:"z-[1070]",scrollbar:"[&::-webkit-scrollbar]:w-1 [&::-webkit-scrollbar]:h-1 [&::-webkit-scrollbar-button]:block [&::-webkit-scrollbar-button]:h-0 [&::-webkit-scrollbar-button]:bg-transparent [&::-webkit-scrollbar-track-piece]:bg-transparent [&::-webkit-scrollbar-track-piece]:rounded-none [&::-webkit-scrollbar-track-piece]: [&::-webkit-scrollbar-track-piece]:rounded-l [&::-webkit-scrollbar-thumb]:h-[50px] [&::-webkit-scrollbar-thumb]:bg-[#999] [&::-webkit-scrollbar-thumb]:rounded",spinnerIcon:"inline-block h-8 w-8 animate-spin rounded-full border-4 border-solid border-current border-r-transparent align-[-0.125em] motion-reduce:animate-[spin_1.5s_linear_infinite]"},WS={autocompleteItem:"string",autocompleteList:"string",autocompleteLoader:"string",dropdown:"string",dropdownContainer:"string",scrollbar:"string",spinnerIcon:"string"};class Pr{constructor(t,e,i){this._element=t,this._options=this._getConfig(e),this._classes=this._getClasses(i),this._getContainer(),this._input=m.findOne("input",t),this._notch=m.findOne(RS,t),this._customContent=m.findOne($S,t),this._loader=OS(this._classes),this._popper=null,this._debounceTimeoutId=null,this._loaderTimeout=null,this._activeItemIndex=-1,this._activeItem=null,this._filteredResults=null,this._lastQueryValue=null,this._canOpenOnFocus=!0,this._isOpen=!1,this._outsideClickHandler=this._handleOutsideClick.bind(this),this._inputFocusHandler=this._handleInputFocus.bind(this),this._userInputHandler=this._handleUserInput.bind(this),this._keydownHandler=this._handleKeydown.bind(this),t&&O.setData(t,An,this),this._init()}static get NAME(){return uc}get filter(){return this._options.filter}get dropdown(){return m.findOne(MS,this._dropdownContainer)}get items(){return m.find(lf,this._dropdownContainer)}get itemsList(){return m.findOne($r,this._dropdownContainer)}initSearch(t){this._filterResults(t)}_getContainer(){this._container=m.findOne(this._options.container)}_getConfig(t){const e=g.getDataAttributes(this._element);return t={...HS,...e,...t},L(uc,t,VS),t}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...FS,...e,...t},L(uc,t,WS),t}_init(){this._initDropdown(),this._updateInputState(),this._setInputAriaAttributes(),this._listenToInputFocus(),this._listenToUserInput(),this._listenToKeydown()}_initDropdown(){this._dropdownContainerId=this._element.id?`autocomplete-dropdown-${this._element.id}`:bt("autocomplete-dropdown-");const t={id:this._dropdownContainerId,items:[],width:this._input.offsetWidth,options:this._options};if(this._dropdownContainer=SS(t,this._classes),this._options.customContent!==""){const e=this._options.customContent,i=To(e,Pd,null);this.dropdown.insertAdjacentHTML("beforeend",i)}}_setInputAriaAttributes(){this._input.setAttribute("role","combobox"),this._input.setAttribute("aria-expanded",!1),this._input.setAttribute("aria-owns",this._dropdownContainerId),this._input.setAttribute("aria-haspopup",!0),this._input.setAttribute("autocomplete","off")}_updateInputState(){var t,e;this._input.value!==""||this._isOpen?(this._input.setAttribute(xs,""),(t=this._notch)==null||t.setAttribute(xs,"")):(this._input.removeAttribute(xs),(e=this._notch)==null||e.removeAttribute(xs))}_listenToInputFocus(){_.on(this._input,"focus",this._inputFocusHandler)}_handleInputFocus(t){const{value:e}=t.target,i=this._options.threshold;if(!this._canOpenOnFocus){this._canOpenOnFocus=!0;return}e.length<i||(this._lastQueryValue!==e?this._filterResults(e):this.open())}_listenToWindowResize(){_.on(window,"resize",this._handleWindowResize.bind(this))}_handleWindowResize(){this._dropdownContainer&&this._updateDropdownWidth()}_updateDropdownWidth(){const t=this._input.offsetWidth;g.addStyle(this._dropdownContainer,{width:`${t}px`})}_listenToUserInput(){_.on(this._input,"input",this._userInputHandler)}_handleUserInput(t){const{value:e}=t.target,i=this._options.threshold,n=this._options.debounce;if(this.filter){if(e.length<i){this._isOpen&&this.close();return}this._debounceFilter(e,n)}}_debounceFilter(t,e){this._debounceTimeoutId&&clearTimeout(this._debounceTimeoutId),this._debounceTimeoutId=setTimeout(()=>{this._filterResults(t)},e)}_filterResults(t){this._lastQueryValue=t;const e=this.filter(t);this._isPromise(e)?this._asyncUpdateResults(e):this._updateResults(e)}_isPromise(t){return!!t&&typeof t.then=="function"}_asyncUpdateResults(t){this._resetActiveItem(),this._showLoader(),t.then(e=>{this._updateResults(e),this._loaderTimeout=setTimeout(()=>{this._hideLoader(),this._loaderTimeout=null},this._options.loaderCloseDelay)})}_resetActiveItem(){const t=this._activeItem;t&&(t.removeAttribute(pc),this._activeItem=null,this._activeItemIndex=-1)}_showLoader(){this._element.appendChild(this._loader)}_hideLoader(){m.findOne(LS,this._element)&&this._element.removeChild(this._loader)}_updateResults(t){this._resetActiveItem(),this._filteredResults=t,_.trigger(this._element,BS,{results:t});const e=m.findOne($r,this._dropdownContainer),i=of(t,this._options,this._classes.autocompleteItem),n=IS(this._options.noResults,this._classes);t.length===0&&this._options.noResults!==""?e.innerHTML=n:e.innerHTML=i,this._isOpen||this.open(),this._popper&&this._popper.forceUpdate()}_listenToKeydown(){_.on(this._element,"keydown",this._keydownHandler)}_handleKeydown(t){this._isOpen?this._handleOpenKeydown(t):this._handleClosedKeydown(t)}_handleOpenKeydown(t){const e=t.keyCode;if(e===Ci&&this._options.autoSelect&&this._selectActiveItem(),e===xi||e===ut&&t.altKey){this.close(),this._input.focus();return}if(e===xi||e===ut&&t.altKey||e===Ci){this.close(),this._input.focus();return}switch(e){case ht:this._setActiveItem(this._activeItemIndex+1),this._scrollToItem(this._activeItem);break;case ut:this._setActiveItem(this._activeItemIndex-1),this._scrollToItem(this._activeItem);break;case Ti:this._activeItemIndex>-1?(this._setActiveItem(0),this._scrollToItem(this._activeItem)):this._input.setSelectionRange(0,0);break;case Ei:if(this._activeItemIndex>-1)this._setActiveItem(this.items.length-1),this._scrollToItem(this._activeItem);else{const n=this._input.value.length;this._input.setSelectionRange(n,n)}break;case Et:if(t.preventDefault(),this._activeItemIndex>-1){const n=this._filteredResults[this._activeItemIndex];this._handleSelection(n)}return;default:return}t.preventDefault()}_setActiveItem(t){const e=this.items;e[t]&&this._updateActiveItem(e[t],t)}_updateActiveItem(t,e){const i=this._activeItem;i&&i.removeAttribute(pc),t.setAttribute(pc,""),this._activeItemIndex=e,this._activeItem=t}_scrollToItem(t){if(!t)return;const e=this.itemsList,i=e.offsetHeight,n=this.items.indexOf(t),o=t.offsetHeight,r=e.scrollTop;if(n>-1){const a=n*o,l=a+o>r+i;a<r?e.scrollTop=a:l?e.scrollTop=a-i+o:e.scrollTop=r}}_handleClosedKeydown(t){t.key==="Enter"&&t.preventDefault();const e=t.keyCode;(e===Et||e===ht||e===ht)&&this.open()}open(){this._lastQueryValue===null&&this._filterResults("");const t=_.trigger(this._element,NS);this._isOpen||t.defaultPrevented||(this._updateDropdownWidth(),this._listenToWindowResize(),this._popper=Fe(this._element,this._dropdownContainer,{modifiers:[{name:"offset",options:{offset:[0,1]}}]}),this._container.appendChild(this._dropdownContainer),this._listenToOutsideClick(),this._listenToItemsClick(),setTimeout(()=>{this.dropdown.setAttribute(af,""),this._isOpen=!0,this._setInputActiveStyles(),this._updateInputState()},0))}_listenToOutsideClick(){_.on(document,"click",this._outsideClickHandler)}_handleOutsideClick(t){const e=this._input===t.target,i=t.target===this._dropdownContainer,n=this._dropdownContainer&&this._dropdownContainer.contains(t.target);!e&&!i&&!n&&this.close()}_listenToItemsClick(){const t=m.findOne($r,this._dropdownContainer);_.on(t,"click",this._handleItemsClick.bind(this))}_handleItemsClick(t){const e=m.closest(t.target,lf),i=g.getDataAttribute(e,"index"),n=this._filteredResults[i];this._handleSelection(n)}_selectActiveItem(){const t=this._filteredResults[this._activeItemIndex];if(!t)return;const e=this._options.displayValue(t);_.trigger(this._element,cf,{value:t}).defaultPrevented||setTimeout(()=>{this._canOpenOnFocus=!1,this._updateInputValue(e),this._updateInputState()},0)}_handleSelection(t){const e=this._options.displayValue(t),i=_.trigger(this._element,cf,{value:t});t!==void 0&&(i.defaultPrevented||setTimeout(()=>{this._canOpenOnFocus=!1,this._updateInputValue(e),this._updateInputState(),this._input.focus(),this.close()},0))}_updateInputValue(t){this._input.value=t}_setInputActiveStyles(){this._input.setAttribute(rf,"")}close(){var e;const t=_.trigger(this._element,PS);!this._isOpen||t.defaultPrevented||(this._resetActiveItem(),this._removeDropdownEvents(),this.dropdown.removeAttribute(af),_.on(this.dropdown,"transitionend",this._handleDropdownTransitionEnd.bind(this)),this._input.removeAttribute(rf),this._input.value||(this._input.removeAttribute(xs),(e=this._notch)==null||e.removeAttribute(xs)))}_removeDropdownEvents(){const t=m.findOne($r,this._dropdownContainer);_.off(t,"click"),_.off(document,"click",this._outsideClickHandler),_.off(window,"resize",this._handleWindowResize.bind(this))}_handleDropdownTransitionEnd(t){this._isOpen&&t&&t.propertyName==="opacity"&&(this._popper.destroy(),this._dropdownContainer&&this._container.removeChild(this._dropdownContainer),this._isOpen=!1,_.off(this.dropdown,"transitionend"),this._canOpenOnFocus=!0)}dispose(){this._isOpen&&this.close(),this._removeInputAndElementEvents(),this._dropdownContainer.remove(),O.removeData(this._element,An)}_removeInputAndElementEvents(){_.off(this._input,"focus",this._inputFocusHandler),_.off(this._input,"input",this._userInputHandler),_.off(this._element,"keydown",this._keydownHandler)}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,An);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Pr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,An)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const zS=(s,t)=>`<div class="${s.connectContainer}" ${t}>
+  <div class="${s.connect}"></div>
+  </div>`,jS=(s,t)=>`<div class="${s.hand}" ${t}>
+    <span></span>
+  </div>`,YS=(s,t)=>`
+    <span class="${s.tooltip}" ${t}>
+      <span class="${s.tooltipValue}"></span>
+    </span>
+    `,Si=s=>s.type==="touchmove"?s.touches[0].clientX:s.clientX,Nr="multiRangeSlider",Br=`te.${Nr}`,hf=`valueChanged${`.${Br}`}`,Oi="data-te-active",df="data-te-multi-range-slider-hand-ref",uf="data-te-multi-range-slider-connect-ref",pf="data-te-multi-range-slider-tooltip-ref",KS={max:"number",min:"number",numberOfRanges:"number",startValues:"(array|string)",step:"(string|null|number)",tooltip:"boolean"},US={max:100,min:0,numberOfRanges:2,startValues:[0,100],step:null,tooltip:!1},XS={connect:"z-10 h-full w-full bg-[#eee] will-change-transform dark:bg-[#4f4f4f]",connectContainer:"relative border-[1px] border-[#eee] z-0 h-full w-full overflow-hidden dark:border-[#4f4f4f]",container:"apperance-none relative m-auto w-full cursor-pointer h-1 border-0 bg-transparent p-0 focus:outline-none dark:border-[#4f4f4f]",hand:"apperance-none absolute top-[50%] border-0 -mt-1 h-4 w-4 cursor-pointer rounded-[50%] border-0 bg-primary transition-colors ease-in-out will-change-transform active:bg-[#c4d4ef] active:z-60",tooltip:"absolute -top-[18px] origin-[50%_50%] -translate-x-[6px] -rotate-45 scale-0 rounded-bl-none rounded-br-2xl rounded-tl-2xl rounded-tr-2xl bg-primary text-white transition-all duration-[200ms] data-[te-active]:-top-[38px] data-[te-active]:scale-100",tooltipValue:"block h-[30px] w-[30px] -translate-x-[6px] translate-y-[6px] rotate-45 text-center text-[10px]"},GS={container:"string",connectContainer:"string",connect:"string",hand:"string",tooltip:"string",tooltipValue:"string"};class Hr extends Mt{constructor(t,e,i){super(t),this._options=this._getConfig(e),this._mousemove=!1,this._classes=this._getClasses(i),this._maxTranslation=null,this._minTranslation=null,this._currentStepValue=null,this._canChangeStep=!1,this.init()}static get NAME(){return Nr}get hands(){return m.find(`[${df}]`,this._element)}get connect(){return m.findOne(`[${uf}]`,this._element)}get leftConnectRect(){return this.connect.getBoundingClientRect().left}get handActive(){return m.findOne(`[${Oi}]`)}get activeTooltipValue(){return m.find(`[${pf}]`).filter(n=>n.hasAttribute(Oi))[0].children[0]}init(){this._setContainerClasses(),this._setRangeConnectsElement(),this._setRangeHandleElements(),this._setMaxAndMinTranslation(),this._setTransofrmationOnStart(),this._handleClickEventOnHand(),this._handleEndMoveEventDocument(),this._handleClickOnRange(),this._setTooltipToHand()}dispose(){O.removeData(this._element,Br),this._options=null,this._mousemove=null,this._maxTranslation=null,this._minTranslation=null,this._currentStepValue=null,this._canChangeStep=null,this.hands.forEach(t=>{ct.off(t,"mousedown touchstart"),ct.off(t,"mouseup touchend")}),ct.off(document,"mousemove touchmove"),ct.off(document,"mouseup touchend"),ct.off(this.connect,"mousedown touchstart")}_setMaxAndMinTranslation(){this._maxTranslation=this.connect.offsetWidth-this.hands[0].offsetWidth/2,this._minTranslation=this.connect.offsetLeft-this.hands[0].offsetWidth/2}_setTransofrmationOnStart(){const{max:t,min:e}=this._options;let{startValues:i}=this._options;typeof i=="string"&&(i=JSON.parse(i.replace(/'/g,'"'))),i.length===0?this.hands.forEach(n=>{g.setDataAttribute(n,"translation",Math.round(this._minTranslation)),g.addStyle(n,{transform:`translate(${this._minTranslation}px,-25%)`})}):this.hands.forEach((n,o)=>{if(i[o]>t||i[o]<e)return;if(i[o]===void 0){g.setDataAttribute(n,"translation",Math.round(this._maxTranslation)),g.addStyle(n,{transform:`translate(${this._maxTranslation}px,-25%)`,zIndex:this.hands.length-o});return}const a=(i[o]-e)/(t-e)*this.connect.offsetWidth-n.offsetWidth/2;g.setDataAttribute(n,"translation",Math.round(a)),g.addStyle(n,{transform:`translate(${a}px,-25%)`,zIndex:this.hands.length-o})})}_handleOutOfMaxRangeValue(t,e){this._updateHand(t,this._maxTranslation),this._options.tooltip&&(this.activeTooltipValue.innerText=e)}_handleOutOfMinRangeValue(t,e){this._updateHand(t,this._minTranslation),this._options.tooltip&&(this.activeTooltipValue.innerText=e)}_handleNormalMove(t,e,i){this._updateHand(t,e),this._options.tooltip&&(this.activeTooltipValue.innerText=Math.round(i))}_handleClickEventOnHand(){const{max:t,min:e,step:i}=this._options;this.hands.forEach(n=>{ct.on(n,"mousedown touchstart",o=>{if(this._mousemove=!0,n.setAttribute(Oi,""),this._options.tooltip&&n.children[1].setAttribute(Oi,""),this._handleMoveEvent(n),this._handleEndMoveEvent(n,o),!this._canChangeStep&&i!==null)return;const r=Si(o)-this.leftConnectRect-n.offsetWidth/2,a=(Si(o)-this.leftConnectRect)/(this.connect.offsetWidth/(t-e))%(t-e);r>=this._maxTranslation?this._handleOutOfMaxRangeValue(n,t):r<=this._minTranslation?this._handleOutOfMinRangeValue(n,e):this._handleNormalMove(n,r,a)})})}_setContainerClasses(){g.addClass(this._element,this._classes.container)}_setRangeConnectsElement(){this._element.insertAdjacentHTML("afterbegin",zS({connectContainer:this._classes.connectContainer,connect:this._classes.connect},uf))}_setRangeHandleElements(){for(let t=0;t<this._options.numberOfRanges;t++)this._element.insertAdjacentHTML("beforeend",jS({hand:this._classes.hand},df));this.hands.forEach((t,e)=>{t.setAttribute("aria-orientation","horizontal"),t.setAttribute("role","slider"),g.setDataAttribute(t,"handle",e)})}_setTooltipToHand(){this._options.tooltip&&this.hands.forEach(t=>t.insertAdjacentHTML("beforeend",YS({tooltip:this._classes.tooltip,tooltipValue:this._classes.tooltipValue},pf)))}_handleMoveEvent(t){const{tooltip:e,step:i}=this._options;ct.on(document,"mousemove touchmove",n=>{n.type==="mousemove"&&n.preventDefault();const{max:o,min:r,numberOfRanges:a}=this._options;if(t.hasAttribute(Oi)){const l=(Si(n)-this.leftConnectRect)/this.connect.offsetWidth*o;let c=(Si(n)-this.leftConnectRect)/(this.connect.offsetWidth/(o-r))%(o-r)+r;if((this._currentStepValue===Math.round(c)||Math.round(c)%i!==0)&&i!==null){this._canChangeStep=!1;return}this._canChangeStep=!0;let h=Si(n)-this.leftConnectRect-t.offsetWidth/2;const d=g.getDataAttribute(this.handActive,"handle"),u=g.getDataAttribute(this.handActive,"translation");if(c<r)h=r-t.offsetWidth/2,c=r;else if(l>=o)return;const p=this.hands.map(f=>g.getDataAttribute(f,"translation"));if(a<2)Math.round(c)%i===0&&i!==null?(this._currentStepValue=Math.round(c),g.addStyle(t,{transform:`translate(${h}px,-25%)`}),e&&(this.activeTooltipValue.innerText=Math.round(c))):i===null&&(g.addStyle(t,{transform:`translate(${h}px,-25%)`}),e&&(this.activeTooltipValue.innerText=Math.round(c))),g.setDataAttribute(t,"translation",h);else{const f=d>0&&d<a-1;let b=h,v=!1;const y=p[d+1],T=p[d-1];d===0&&u>=y?(b=y,v=h<=b):d===a-1&&u<=T?(b=T,v=h>=b):f&&(u>=y||u<=T)&&(b=u>=y?y:T,v=b===y?h<=b:h>=b),Math.round(c)%i===0&&i!==null?(this._currentStepValue=Math.round(c),g.addStyle(t,{transform:`translate(${b}px,-25%)`}),e&&b===h&&this.activeTooltipValue!==null&&(this.activeTooltipValue.innerText=Math.round(c))):i===null&&(g.addStyle(t,{transform:`translate(${b}px,-25%)`}),e&&b===h&&this.activeTooltipValue!==null&&(this.activeTooltipValue.innerText=Math.round(c))),g.setDataAttribute(t,"translation",v?h:b)}this._canChangeStep&&this._handleEventChangeValuesOnRange()}})}_handleEventChangeValuesOnRange(){const{max:t,min:e,numberOfRanges:i}=this._options,n=r=>{const a=r.getBoundingClientRect().left-this.leftConnectRect+r.offsetWidth/2;let l=a/(this.connect.offsetWidth/(t-e))%(t-e);return a===this.connect.offsetWidth?l=t:l+=e,g.setDataAttribute(r,"value",Math.round(l*10)/10),{value:l}};if(i<2){const{value:r}=n(this.hands[0]);_.trigger(this._element,hf,{values:{value:r+e,rounded:Math.round(r+e)}});return}const o=this.hands.map(r=>n(r));_.trigger(this._element,hf,{values:{value:o.map(({value:r})=>r+e),rounded:o.map(({value:r})=>Math.round(r+e))}})}_resetHandState(t,e){_.off(t,e),t.removeAttribute(Oi),this._options.tooltip&&t.children[1].removeAttribute(Oi)}_handleEndMoveEventDocument(){ct.on(document,"mouseup touchend",()=>{this._mousemove&&(this.hands.forEach(t=>{this._resetHandState(t,"mousemove")}),ct.off(document,"mousemove touchmove"),this._mousemove=!1)})}_handleEndMoveEvent(t){ct.on(t,"mouseup touchend",()=>{this._resetHandState(t,"mousemove"),ct.off(document,"mousemove touchmove"),this._mousemove=!1})}_handleClickOnRange(){this._options.step===null&&ct.on(this.connect,"mousedown touchstart",t=>{const e=[];let i=0;if(this.hands.forEach(n=>{this._mousemove=!0;const o=Si(t),r=n.offsetWidth,a=g.getDataAttribute(n,"translation"),l=o-this.leftConnectRect-r/2;this._options.numberOfRanges<2?this._updateHand(n,l):(e.push(Math.abs(l-a)),e.forEach((c,h)=>{c<e[i]&&(i=h)}))}),this._options.numberOfRanges>=2){const n=Si(t)-this.leftConnectRect-this.hands[i].offsetWidth/2;this._updateAdjacentHands(i,n)}this._handleEventChangeValuesOnRange()})}_updateHand(t,e){g.addStyle(t,{transform:`translate(${e}px,-25%)`}),g.setDataAttribute(t,"translation",e)}_updateAdjacentHands(t,e){const i=this.hands[t+1],n=this.hands[t-1],o=i?g.getDataAttribute(i,"translation"):void 0,r=n?g.getDataAttribute(n,"translation"):void 0;i&&e>o?this._updateHand(i,e):n&&e<r?this._updateHand(n,e):this._updateHand(this.hands[t],e)}_getConfig(t){const e={...US,...g.getDataAttributes(this._element),...t};return L(Nr,e,KS),e}_getClasses(t){const e=g.getDataClassAttributes(this._element);return t={...XS,...e,...t},L(Nr,t,GS),t}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Br);const n=typeof t=="object"&&t;if(!(!i&&/dispose|hide/.test(t))&&(i||(i=new Hr(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Br)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}const qS=s=>{ph(()=>{const t=uh();if(t){const e=s.NAME,i=t.fn[e];t.fn[e]=s.jQueryInterface,t.fn[e].Constructor=s,t.fn[e].noConflict=()=>(t.fn[e]=i,s.jQueryInterface)}})},ZS=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,function(e){e.preventDefault(),s.getOrCreateInstance(this).toggle()})},QS=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){if(["A","AREA"].includes(this.tagName)&&e.preventDefault(),ci(this))return;s.getOrCreateInstance(this).show()})},JS=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){const i=Ne(this);if(["A","AREA"].includes(this.tagName)&&e.preventDefault(),ci(this))return;_.one(i,s.EVENT_HIDDEN,()=>{ae(this)&&this.focus()});const n=m.findOne(s.OPEN_SELECTOR);n&&n!==i&&s.getInstance(n).hide(),s.getOrCreateInstance(i).toggle(this)})},tO=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,e=>{e.preventDefault();const i=e.target.closest(t);s.getOrCreateInstance(i).toggle()})},eO=(s,t)=>{_.on(document,`click.te.${s.NAME}`,t,function(e){const i=Ne(this);["A","AREA"].includes(this.tagName)&&e.preventDefault(),_.one(i,s.EVENT_SHOW,r=>{r.defaultPrevented||_.one(i,s.EVENT_HIDDEN,()=>{ae(this)&&this.focus()})});const n=m.findOne(`[${s.OPEN_SELECTOR}="true"]`);n&&s.getInstance(n).hide(),s.getOrCreateInstance(i).toggle(this)})},iO=(s,t)=>{_.one(document,"mousedown",t,s.autoInitial(new s))},sO=(s,t)=>{_.on(document,`click.te.${s.NAME}.data-api`,t,function(e){(e.target.tagName==="A"||e.delegateTarget&&e.delegateTarget.tagName==="A")&&e.preventDefault();const i=Ca(this);m.find(i).forEach(o=>{s.getOrCreateInstance(o,{toggle:!1}).toggle()})})},nO=(s,t)=>{[].slice.call(document.querySelectorAll(t)).map(function(i){return new s(i)})},oO=(s,t)=>{[].slice.call(document.querySelectorAll(t)).map(function(i){return new s(i)})},rO=(s,t)=>{m.find(t).forEach(e=>{new s(e)}),_.on(document,`click.te.${s.NAME}.data-api`,`${t} img:not([data-te-lightbox-disabled])`,s.toggle())},aO=(s,t)=>{const e=o=>o[0]==="{"&&o[o.length-1]==="}"||o[0]==="["&&o[o.length-1]==="]",i=o=>typeof o!="string"?o:e(o)?JSON.parse(o.replace(/'/g,'"')):o,n=o=>{const r={};return Object.keys(o).forEach(a=>{if(a.match(/dataset.*/)){const l=a.slice(7,8).toLowerCase().concat(a.slice(8));r[l]=i(o[a])}}),r};m.find(t).forEach(o=>{if(g.getDataAttribute(o,"chart")!=="bubble"&&g.getDataAttribute(o,"chart")!=="scatter"){const r=g.getDataAttributes(o),a={data:{datasets:[n(r)]}};return r.chart&&(a.type=r.chart),r.labels&&(a.data.labels=JSON.parse(r.labels.replace(/'/g,'"'))),new s(o,{...a,...ln[a.type]})}return null})};class lO{constructor(){this.inits=[]}get initialized(){return this.inits}isInited(t){return this.inits.includes(t)}add(t){this.isInited(t)||this.inits.push(t)}}const fc=new lO,wn={alert:{name:"Alert",selector:"[data-te-alert-init]",isToggler:!1},animation:{name:"Animate",selector:"[data-te-animation-init]",isToggler:!1},carousel:{name:"Carousel",selector:"[data-te-carousel-init]",isToggler:!1},chips:{name:"ChipsInput",selector:"[data-te-chips-input-init]",isToggler:!1},chip:{name:"Chip",selector:"[data-te-chip-init]",isToggler:!1,onInit:"init"},datepicker:{name:"Datepicker",selector:"[data-te-datepicker-init]",isToggler:!1},datetimepicker:{name:"Datetimepicker",selector:"[data-te-date-timepicker-init]",isToggler:!1},input:{name:"Input",selector:"[data-te-input-wrapper-init]",isToggler:!1},perfectScrollbar:{name:"PerfectScrollbar",selector:"[data-te-perfect-scrollbar-init]",isToggler:!1},rating:{name:"Rating",selector:"[data-te-rating-init]",isToggler:!1},scrollspy:{name:"ScrollSpy",selector:"[data-te-spy='scroll']",isToggler:!1},select:{name:"Select",selector:"[data-te-select-init]",isToggler:!1},sidenav:{name:"Sidenav",selector:"[data-te-sidenav-init]",isToggler:!1},stepper:{name:"Stepper",selector:"[data-te-stepper-init]",isToggler:!1},timepicker:{name:"Timepicker",selector:"[data-te-timepicker-init]",isToggler:!1},toast:{name:"Toast",selector:"[data-te-toast-init]",isToggler:!1},datatable:{name:"Datatable",selector:"[data-te-datatable-init]"},popconfirm:{name:"Popconfirm",selector:"[data-te-toggle='popconfirm']"},validation:{name:"Validation",selector:"[data-te-validation-init]"},smoothScroll:{name:"SmoothScroll",selector:"a[data-te-smooth-scroll-init]"},lazyLoad:{name:"LazyLoad",selector:"[data-te-lazy-load-init]"},clipboard:{name:"Clipboard",selector:"[data-te-clipboard-init]"},infiniteScroll:{name:"InfiniteScroll",selector:"[data-te-infinite-scroll-init]"},loadingManagement:{name:"LoadingManagement",selector:"[data-te-loading-management-init]"},sticky:{name:"Sticky",selector:"[data-te-sticky-init]"},multiRangeSlider:{name:"MultiRangeSlider",selector:"[data-te-multi-range-slider-init]"},chart:{name:"Chart",selector:"[data-te-chart]",isToggler:!1,advanced:aO},button:{name:"Button",selector:"[data-te-toggle='button']",isToggler:!0,callback:tO},collapse:{name:"Collapse",selector:"[data-te-collapse-init]",isToggler:!0,callback:sO},dropdown:{name:"Dropdown",selector:"[data-te-dropdown-toggle-ref]",isToggler:!0,callback:ZS},modal:{name:"Modal",selector:"[data-te-toggle='modal']",isToggler:!0,callback:eO},ripple:{name:"Ripple",selector:"[data-te-ripple-init]",isToggler:!0,callback:iO},offcanvas:{name:"Offcanvas",selector:"[data-te-offcanvas-toggle]",isToggler:!0,callback:JS},tab:{name:"Tab",selector:"[data-te-toggle='tab'], [data-te-toggle='pill'], [data-te-toggle='list']",isToggler:!0,callback:QS},tooltip:{name:"Tooltip",selector:"[data-te-toggle='tooltip']",isToggler:!1,callback:nO},popover:{name:"Popover",selector:"[data-te-toggle='popover']",isToggler:!0,callback:oO},lightbox:{name:"Lightbox",selector:"[data-te-lightbox-init]",isToggler:!0,callback:rO},touch:{name:"Touch",selector:"[data-te-touch-init]"}},cO=s=>wn[s.NAME]||null,hO=(s,t)=>{if(!s||!t.allowReinits&&fc.isInited(s.NAME))return;fc.add(s.NAME);const e=cO(s),i=(e==null?void 0:e.isToggler)||!1;if(qS(s),e!=null&&e.advanced){e==null||e.advanced(s,e==null?void 0:e.selector);return}if(i){e==null||e.callback(s,e==null?void 0:e.selector);return}m.find(e==null?void 0:e.selector).forEach(n=>{let o=s.getInstance(n);o||(o=new s(n),e!=null&&e.onInit&&o[e.onInit]())})},dO=(s,t)=>{s.forEach(e=>hO(e,t))},uO={allowReinits:!1,checkOtherImports:!1},ff=(s,t={})=>{t={...uO,...t};const e=Object.keys(wn).map(i=>{if(!!document.querySelector(wn[i].selector)){const o=s[wn[i].name];return!o&&!fc.isInited(i)&&t.checkOtherImports&&console.warn(`Please import ${wn[i].name} from "tw-elements" package and add it to a object parameter inside "initTE" function`),o}});dO(e,t)},_f="sidenav",Vr="te.sidenav",pO="data-te-sidenav-rotate-icon-ref",_c="[data-te-sidenav-toggle-ref]",fO="[data-te-collapse-init]",_O='[data-te-sidenav-slim="true"]',gO='[data-te-sidenav-slim="false"]',mO="[data-te-sidenav-menu-ref]",Cs="[data-te-sidenav-collapse-ref]",kn="[data-te-sidenav-link-ref]",bO=et()?100:-100,vO=et()?-100:100,yO={sidenavAccordion:"(boolean)",sidenavBackdrop:"(boolean)",sidenavBackdropClass:"(null|string)",sidenavCloseOnEsc:"(boolean)",sidenavColor:"(string)",sidenavContent:"(null|string)",sidenavExpandable:"(boolean)",sidenavExpandOnHover:"(boolean)",sidenavFocusTrap:"(boolean)",sidenavHidden:"(boolean)",sidenavMode:"(string)",sidenavModeBreakpointOver:"(null|string|number)",sidenavModeBreakpointSide:"(null|string|number)",sidenavModeBreakpointPush:"(null|string|number)",sidenavBreakpointSm:"(number)",sidenavBreakpointMd:"(number)",sidenavBreakpointLg:"(number)",sidenavBreakpointXl:"(number)",sidenavBreakpoint2xl:"(number)",sidenavScrollContainer:"(null|string)",sidenavSlim:"(boolean)",sidenavSlimCollapsed:"(boolean)",sidenavSlimWidth:"(number)",sidenavPosition:"(string)",sidenavRight:"(boolean)",sidenavTransitionDuration:"(number)",sidenavWidth:"(number)"},TO={sidenavAccordion:!1,sidenavBackdrop:!0,sidenavBackdropClass:null,sidenavCloseOnEsc:!0,sidenavColor:"primary",sidenavContent:null,sidenavExpandable:!0,sidenavExpandOnHover:!1,sidenavFocusTrap:!0,sidenavHidden:!0,sidenavMode:"over",sidenavModeBreakpointOver:null,sidenavModeBreakpointSide:null,sidenavModeBreakpointPush:null,sidenavBreakpointSm:640,sidenavBreakpointMd:768,sidenavBreakpointLg:1024,sidenavBreakpointXl:1280,sidenavBreakpoint2xl:1536,sidenavScrollContainer:null,sidenavSlim:!1,sidenavSlimCollapsed:!1,sidenavSlimWidth:77,sidenavPosition:"fixed",sidenavRight:!1,sidenavTransitionDuration:300,sidenavWidth:240};class Ii{constructor(t,e={}){ke(this,"_addBackdropOnInit",()=>{this._options.sidenavHidden||(this._backdrop.show(),_.off(this._element,"transitionend",this._addBackdropOnInit))});this._element=t,this._options=e,this._ID=bt(""),this._content=null,this._initialContentStyle=null,this._slimCollapsed=!1,this._activeNode=null,this._tempSlim=!1,this._backdrop=this._initializeBackDrop(),this._focusTrap=null,this._perfectScrollbar=null,this._touch=null,this._setModeFromBreakpoints(),this.escHandler=i=>{i.keyCode===xi&&this.toggler&&ae(this.toggler)&&(this._update(!1),_.off(window,"keydown",this.escHandler))},this.hashHandler=()=>{this._setActiveElements()},t&&(O.setData(t,Vr,this),this._setup()),this.options.sidenavBackdrop&&!this.options.sidenavHidden&&this.options.sidenavMode==="over"&&_.on(this._element,"transitionend",this._addBackdropOnInit),this._didInit=!1,this._init()}static get NAME(){return _f}get container(){if(this.options.sidenavPosition==="fixed")return m.findOne("body");const t=e=>!e.parentNode||e.parentNode===document?e:e.parentNode.style.position==="relative"||e.parentNode.classList.contains("relative")?e.parentNode:t(e.parentNode);return t(this._element)}get isVisible(){let t=0,e=window.innerWidth;if(this.options.sidenavPosition!=="fixed"){const n=this.container.getBoundingClientRect();t=n.x,e=n.x+n.width}const{x:i}=this._element.getBoundingClientRect();if(this.options.sidenavRight&&!et()||!this.options.sidenavRight&&et()){let n=0;if(this.container.scrollHeight>this.container.clientHeight&&(n=this.container.offsetWidth-this.container.clientWidth),this.container.tagName==="BODY"){const o=document.documentElement.clientWidth;n=Math.abs(window.innerWidth-o)}return Math.abs(i+n-e)>10}return Math.abs(i-t)<10}get links(){return m.find(kn,this._element)}get navigation(){return m.find(mO,this._element)}get options(){const t={...TO,...g.getDataAttributes(this._element),...this._options};return L(_f,t,yO),t}get sidenavStyle(){return{width:`${this.width}px`,height:this.options.sidenavPosition==="fixed"?"100vh":"100%",position:this.options.sidenavPosition,transition:`all ${this.transitionDuration} linear`}}get toggler(){return m.find(_c).find(e=>{const i=g.getDataAttribute(e,"target");return m.findOne(i)===this._element})}get transitionDuration(){return`${this.options.sidenavTransitionDuration/1e3}s`}get translation(){return this.options.sidenavRight?vO:bO}get width(){return this._slimCollapsed?this.options.sidenavSlimWidth:this.options.sidenavWidth}get isBackdropVisible(){return!!this._backdrop._element}changeMode(t){this._setMode(t)}dispose(){_.off(window,"keydown",this.escHandler),this.options.sidenavBackdrop&&this._backdrop.dispose(),_.off(window,"hashchange",this.hashHandler),this._touch.dispose(),O.removeData(this._element,Vr),this._element=null}hide(){this._emitEvents(!1),this._update(!1),this._options.sidenavBackdrop&&this.isBackdropVisible&&this._backdrop.hide()}show(){this._emitEvents(!0),this._update(!0),this._options.sidenavBackdrop&&this._options.sidenavMode==="over"&&this._backdrop.show()}toggle(){this._emitEvents(!this.isVisible),this._update(!this.isVisible)}toggleSlim(){this._setSlim(!this._slimCollapsed)}update(t){this._options=t,this._setup()}getBreakpoint(t){return this._transformBreakpointValuesToObject()[t]}_init(){this._didInit||(_.on(document,"click",_c,Ii.toggleSidenav()),this._didInit=!0)}_transformBreakpointValuesToObject(){return{sm:this.options.sidenavBreakpointSm,md:this.options.sidenavBreakpointMd,lg:this.options.sidenavBreakpointLg,xl:this.options.sidenavBreakpointXl,"2xl":this.options.sidenavBreakpoint2xl}}_setModeFromBreakpoints(){const t=window.innerWidth,e=this._transformBreakpointValuesToObject();if(t===void 0||!e)return;const i=typeof this.options.sidenavModeBreakpointOver=="number"?t-this.options.sidenavModeBreakpointOver:t-e[this.options.sidenavModeBreakpointOver],n=typeof this.options.sidenavModeBreakpointSide=="number"?t-this.options.sidenavModeBreakpointSide:t-e[this.options.sidenavModeBreakpointSide],o=typeof this.options.sidenavModeBreakpointPush=="number"?t-this.options.sidenavModeBreakpointPush:t-e[this.options.sidenavModeBreakpointPush],r=(l,c)=>l-c<0?-1:c-l<0?1:0,a=[i,n,o].filter(l=>l!=null&&l>=0).sort(r)[0];i>0&&i===a?(this._options.sidenavMode="over",this._options.sidenavHidden=!0):n>0&&n===a?this._options.sidenavMode="side":o>0&&o===a&&(this._options.sidenavMode="push")}_collapseItems(){this.navigation.forEach(t=>{m.find(Cs,t).forEach(i=>{ce.getInstance(i).hide()})})}_getOffsetValue(t,{index:e,property:i,offsets:n}){const o=this._getPxValue(this._initialContentStyle[e][n[i].property]),r=t?n[i].value:0;return o+r}_getProperty(...t){return t.map((e,i)=>i===0?e:e[0].toUpperCase().concat(e.slice(1))).join("")}_getPxValue(t){return t?parseFloat(t):0}_handleSwipe(t,e){e&&this._slimCollapsed&&this.options.sidenavSlim&&this.options.sidenavExpandable?this.toggleSlim():e||(this._slimCollapsed||!this.options.sidenavSlim||!this.options.sidenavExpandable?this.toggler&&ae(this.toggler)&&this.toggle():this.toggleSlim())}_isActive(t,e){return e?e===t:t.attributes.href?new URL(t,window.location.href).href===window.location.href:!1}_isAllToBeCollapsed(){return m.find(fO,this._element).filter(i=>i.getAttribute("aria-expanded")==="true").length===0}_isAllCollapsed(){return m.find(Cs,this._element).filter(t=>ae(t)).length===0}_initializeBackDrop(){if(!this.options.sidenavBackdrop)return;const t=this.options.sidenavBackdropClass?this.options.sidenavBackdropClass.split(" "):this.options.sidenavPosition?["opacity-50","transition-all","duration-300","ease-in-out",this.options.sidenavPosition,"top-0","left-0","z-50","bg-black/10","dark:bg-black-60","w-full","h-full",this._element.id]:null;return new Qa({isVisible:this.options.sidenavBackdrop,isAnimated:!0,rootElement:this._element.parentNode,backdropClasses:t,clickCallback:()=>this.hide()})}_updateBackdrop(t){if(this.options.sidenavMode==="over"){t?this._backdrop.show():this.isBackdropVisible&&this._backdrop.hide();return}this.isBackdropVisible&&this._backdrop.hide()}_setup(){this._setupTouch(),this.options.sidenavFocusTrap&&this._setupFocusTrap(),this._setupCollapse(),this.options.sidenavSlim&&this._setupSlim(),this._setupInitialStyling(),this._setupScrolling(),this.options.sidenavContent&&this._setupContent(),this._setupActiveState(),this._setupRippleEffect(),this.options.sidenavHidden||this._updateOffsets(!0,!0),this.options.sidenavMode==="over"&&this._setTabindex(!0)}_setupActiveState(){this._setActiveElements(),this.links.forEach(t=>{_.on(t,"click",()=>this._setActiveElements(t)),_.on(t,"keydown",e=>{e.keyCode===Et&&this._setActiveElements(t)})}),_.on(window,"hashchange",this.hashHandler)}_setupCollapse(){this.navigation.forEach((t,e)=>{m.find(Cs,t).forEach((n,o)=>this._setupCollapseList({list:n,index:o,menu:t,menuIndex:e}))})}_generateCollpaseID(t,e){return`sidenav-collapse-${this._ID}-${e}-${t}`}_setupCollapseList({list:t,index:e,menu:i,menuIndex:n}){const o=this._generateCollpaseID(e,n);t.setAttribute("id",o),t.setAttribute("data-te-collapse-item","");const[r]=m.prev(t,kn);g.setDataAttribute(r,"collapse-init",""),r.setAttribute("href",`#${o}`),r.setAttribute("role","button");const a=ce.getInstance(t)||new ce(t,{toggle:!1,parent:this.options.sidenavAccordion?i:t});(t.dataset.teSidenavStateShow===""||t.dataset.teCollapseShow==="")&&this._rotateArrow(r,!1),_.on(r,"click",l=>{this._toggleCategory(l,a,t),this._tempSlim&&this._isAllToBeCollapsed()&&(this._setSlim(!0),this._tempSlim=!1),this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()}),_.on(t,"show.te.collapse",()=>this._rotateArrow(r,!1)),_.on(t,"hide.te.collapse",()=>this._rotateArrow(r,!0)),_.on(t,"shown.te.collapse",()=>{this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()}),_.on(t,"hidden.te.collapse",()=>{this._tempSlim&&this._isAllCollapsed()&&(this._setSlim(!0),this._tempSlim=!1),this.options.sidenavMode==="over"&&this._focusTrap&&this._focusTrap.update()})}_setupContent(){this._content=m.find(this.options.sidenavContent),this._content.forEach(t=>{const e=["!p","!m","!px","!pl","!pr","!mx","!ml","!mr","!-p","!-m","!-px","!-pl","!-pr","!-mx","!-ml","!-mr"];[...t.classList].filter(n=>e.findIndex(o=>n.includes(o))>=0).forEach(n=>t.classList.remove(n))}),this._initialContentStyle=this._content.map(t=>{const{paddingLeft:e,paddingRight:i,marginLeft:n,marginRight:o,transition:r}=window.getComputedStyle(t);return{paddingLeft:e,paddingRight:i,marginLeft:n,marginRight:o,transition:r}})}_setupFocusTrap(){this._focusTrap=new Vs(this._element,{event:"keydown",condition:t=>t.keyCode===Ci,onlyVisible:!0},this.toggler)}_setupInitialStyling(){this._setColor(),g.style(this._element,this.sidenavStyle)}_setupScrolling(){let t=this._element;if(this.options.sidenavScrollContainer){t=m.findOne(this.options.sidenavScrollContainer,this._element);const i=dm(t.parentNode.children).filter(n=>n!==t).reduce((n,o)=>n+o.clientHeight,0);g.style(t,{maxHeight:`calc(100% - ${i}px)`,position:"relative"})}this._perfectScrollbar=new ms(t,{suppressScrollX:!0,handlers:["click-rail","drag-thumb","wheel","touch"]})}_setupSlim(){this._slimCollapsed=this.options.sidenavSlimCollapsed,this._toggleSlimDisplay(this._slimCollapsed),this.options.sidenavExpandOnHover&&(this._element.addEventListener("mouseenter",()=>{this._slimCollapsed&&this._setSlim(!1)}),this._element.addEventListener("mouseleave",()=>{this._slimCollapsed||this._setSlim(!0)}))}_setupRippleEffect(){this.links.forEach(t=>{let e=Ye.getInstance(t),i=this.options.sidenavColor;if(e&&e._options.sidenavColor!==this.options.sidenavColor)e.dispose();else if(e)return;(localStorage.theme==="dark"||!("theme"in localStorage)&&window.matchMedia("(prefers-color-scheme: dark)").matches)&&(i="white"),e=new Ye(t,{rippleColor:i})})}_setupTouch(){this._touch=new pE(this._element,"swipe",{threshold:20}),this._touch.init(),_.on(this._element,"swipeleft",t=>this._handleSwipe(t,this.options.sidenavRight)),_.on(this._element,"swiperight",t=>this._handleSwipe(t,!this.options.sidenavRight))}_setActive(t,e){t.setAttribute("data-te-sidebar-state-active",""),this._activeNode&&t.removeAttribute("data-te-sidebar-state-active"),this._activeNode=t;const[i]=m.parents(this._activeNode,Cs);if(!i){this._setActiveCategory();return}const[n]=m.prev(i,kn);this._setActiveCategory(n),!e&&!this._slimCollapsed&&ce.getInstance(i).show()}_setActiveCategory(t){this.navigation.forEach(e=>{m.find(Cs,e).forEach(n=>{const[o]=m.prev(n,kn);o!==t?o.removeAttribute("data-te-sidenav-state-active"):o.setAttribute("data-te-sidenav-state-active","")})})}_setActiveElements(t){this.navigation.forEach(e=>{m.find(kn,e).filter(n=>m.next(n,Cs).length===0).forEach(n=>{this._isActive(n,t)&&n!==this._activeNode&&this._setActive(n,t)})}),t&&this._updateFocus(this.isVisible)}_setColor(){const t=["primary","secondary","success","info","warning","danger","light","dark"],{sidenavColor:e}=this.options,i=t.includes(e)?e:"primary";t.forEach(n=>{this._element.classList.remove(`sidenav-${n}`)}),g.addClass(this._element,`sidenav-${i}`)}_setContentOffsets(t,e,i){this._content.forEach((n,o)=>{const r=this._getOffsetValue(t,{index:o,property:"padding",offsets:e}),a=this._getOffsetValue(t,{index:o,property:"margin",offsets:e}),l={};if(i||(l.transition=`all ${this.transitionDuration} linear`),l[e.padding.property]=`${r}px`,l[e.margin.property]=`${a}px`,g.style(n,l),!!t){if(i){g.style(n,{transition:this._initialContentStyle[o].transition});return}_.on(n,"transitionend",()=>{g.style(n,{transition:this._initialContentStyle[o].transition})})}})}_setMode(t){this.options.sidenavMode!==t&&(this._options.sidenavMode=t,this._update(this.isVisible))}_setSlim(t){const e=t?["collapse","collapsed"]:["expand","expanded"];this._triggerEvents(...e),t&&this._collapseItems(),this._slimCollapsed=t,this._toggleSlimDisplay(t),g.style(this._element,{width:`${this.width}px`}),this._updateOffsets(this.isVisible)}_setTabindex(t){this.links.forEach(e=>{e.tabIndex=t?0:-1})}_emitEvents(t){const e=t?["show","shown"]:["hide","hidden"];this._triggerEvents(...e)}_rotateArrow(t,e){const[i]=m.children(t,`[${pO}]`);i&&(e?g.removeClass(i,"rotate-180"):g.addClass(i,"rotate-180"))}_toggleCategory(t,e){t.preventDefault(),e.toggle(),this._slimCollapsed&&this.options.sidenavExpandable&&(this._tempSlim=!0,this._setSlim(!1))}_toggleSlimDisplay(t){const e=m.find(_O,this._element),i=m.find(gO,this._element),n=()=>{e.forEach(o=>{g.style(o,{display:this._slimCollapsed?"unset":"none"})}),i.forEach(o=>{g.style(o,{display:this._slimCollapsed?"none":"unset"})})};t?setTimeout(()=>n(),this.options.sidenavTransitionDuration):n()}async _triggerEvents(t,e){_.trigger(this._element,`${t}.te.sidenav`),e&&await setTimeout(()=>{_.trigger(this._element,`${e}.te.sidenav`)},this.options.sidenavTransitionDuration+5)}_isiPhone(){return/iPhone|iPod/i.test(navigator.userAgent)}_update(t){t&&this._isiPhone()&&g.addClass(this._element,"ps--scrolling-y"),this.toggler&&this._updateTogglerAria(t),this._updateDisplay(t),this.options.sidenavBackdrop&&this._updateBackdrop(t),this._updateOffsets(t),t&&this.options.sidenavCloseOnEsc&&this.options.sidenavMode!=="side"&&_.on(window,"keydown",this.escHandler),this.options.sidenavFocusTrap&&this._updateFocus(t)}_updateDisplay(t){const e=t?0:this.translation;g.style(this._element,{transform:`translateX(${e}%)`})}_updateFocus(t){if(this._setTabindex(t),this.options.sidenavMode==="over"&&this.options.sidenavFocusTrap){if(t){this._focusTrap.trap();return}this._focusTrap.disable()}this._focusTrap.disable()}_updateOffsets(t,e=!1){const[i,n]=this.options.sidenavRight?["right","left"]:["left","right"],o={property:this._getProperty("padding",i),value:this.options.sidenavMode==="over"?0:this.width},r={property:this._getProperty("margin",n),value:this.options.sidenavMode==="push"?-1*this.width:0};_.trigger(this._element,"update.te.sidenav",{margin:r,padding:o}),this._content&&(this._content.className="",this._setContentOffsets(t,{padding:o,margin:r},e))}_updateTogglerAria(t){this.toggler.setAttribute("aria-expanded",t)}static toggleSidenav(){return function(t){const e=m.closest(t.target,_c),i=g.getDataAttributes(e).target;m.find(i).forEach(n=>{(Ii.getInstance(n)||new Ii(n)).toggle()})}}static jQueryInterface(t,e){return this.each(function(){let i=O.getData(this,Vr);const n=typeof t=="object"&&t;if(!(!i&&/dispose/.test(t))&&(i||(i=new Ii(this,n)),typeof t=="string")){if(typeof i[t]>"u")throw new TypeError(`No method named "${t}"`);i[t](e)}})}static getInstance(t){return O.getData(t,Vr)}static getOrCreateInstance(t,e={}){return this.getInstance(t)||new this(t,typeof e=="object"?e:null)}}ff({Animate:Gs,Alert:Ws,Button:ao,ChipsInput:gp,Chip:ki,Dropdown:Ft,Carousel:he,Collapse:ce,Offcanvas:ts,Modal:Ys,Popover:Eo,ScrollSpy:xo,Select:on,Tab:wo,Toast:Xs,Tooltip:is,Ripple:Ye,Datepicker:xl,Timepicker:Ll,Sidenav:Ii,Stepper:Wu,Input:Z,PerfectScrollbar:ms,Rating:Bp,Chart:yp,Datatable:pr,Popconfirm:_r,SmoothScroll:xr,Lightbox:ys,Validation:Tr,Touch:Er,LazyLoad:yn,Datetimepicker:Dr,Clipboard:Ar,InfiniteScroll:kr,LoadingManagement:Or,Autocomplete:Pr,Sticky:Lr,MultiRangeSlider:Hr});/*!
+ * Chart.js v3.9.1
+ * https://www.chartjs.org
+ * (c) 2022 Chart.js Contributors
+ * Released under the MIT License
+ */function Oe(){}const EO=function(){let s=0;return function(){return s++}}();function H(s){return s===null||typeof s>"u"}function Q(s){if(Array.isArray&&Array.isArray(s))return!0;const t=Object.prototype.toString.call(s);return t.slice(0,7)==="[object"&&t.slice(-6)==="Array]"}function V(s){return s!==null&&Object.prototype.toString.call(s)==="[object Object]"}const rt=s=>(typeof s=="number"||s instanceof Number)&&isFinite(+s);function zt(s,t){return rt(s)?s:t}function B(s,t){return typeof s>"u"?t:s}const xO=(s,t)=>typeof s=="string"&&s.endsWith("%")?parseFloat(s)/100:s/t,gf=(s,t)=>typeof s=="string"&&s.endsWith("%")?parseFloat(s)/100*t:+s;function G(s,t,e){if(s&&typeof s.call=="function")return s.apply(e,t)}function U(s,t,e,i){let n,o,r;if(Q(s))if(o=s.length,i)for(n=o-1;n>=0;n--)t.call(e,s[n],n);else for(n=0;n<o;n++)t.call(e,s[n],n);else if(V(s))for(r=Object.keys(s),o=r.length,n=0;n<o;n++)t.call(e,s[r[n]],r[n])}function Fr(s,t){let e,i,n,o;if(!s||!t||s.length!==t.length)return!1;for(e=0,i=s.length;e<i;++e)if(n=s[e],o=t[e],n.datasetIndex!==o.datasetIndex||n.index!==o.index)return!1;return!0}function Wr(s){if(Q(s))return s.map(Wr);if(V(s)){const t=Object.create(null),e=Object.keys(s),i=e.length;let n=0;for(;n<i;++n)t[e[n]]=Wr(s[e[n]]);return t}return s}function mf(s){return["__proto__","prototype","constructor"].indexOf(s)===-1}function CO(s,t,e,i){if(!mf(s))return;const n=t[s],o=e[s];V(n)&&V(o)?Te(n,o,i):t[s]=Wr(o)}function Te(s,t,e){const i=Q(t)?t:[t],n=i.length;if(!V(s))return s;e=e||{};const o=e.merger||CO;for(let r=0;r<n;++r){if(t=i[r],!V(t))continue;const a=Object.keys(t);for(let l=0,c=a.length;l<c;++l)o(a[l],s,t,e)}return s}function Sn(s,t){return Te(s,t,{merger:AO})}function AO(s,t,e){if(!mf(s))return;const i=t[s],n=e[s];V(i)&&V(n)?Sn(i,n):Object.prototype.hasOwnProperty.call(t,s)||(t[s]=Wr(n))}const bf={"":s=>s,x:s=>s.x,y:s=>s.y};function ti(s,t){return(bf[t]||(bf[t]=wO(t)))(s)}function wO(s){const t=kO(s);return e=>{for(const i of t){if(i==="")break;e=e&&e[i]}return e}}function kO(s){const t=s.split("."),e=[];let i="";for(const n of t)i+=n,i.endsWith("\\")?i=i.slice(0,-1)+".":(e.push(i),i="");return e}function gc(s){return s.charAt(0).toUpperCase()+s.slice(1)}const jt=s=>typeof s<"u",ei=s=>typeof s=="function",vf=(s,t)=>{if(s.size!==t.size)return!1;for(const e of s)if(!t.has(e))return!1;return!0};function SO(s){return s.type==="mouseup"||s.type==="click"||s.type==="contextmenu"}const it=Math.PI,q=2*it,OO=q+it,zr=Number.POSITIVE_INFINITY,IO=it/180,nt=it/2,On=it/4,yf=it*2/3,Yt=Math.log10,Ee=Math.sign;function Tf(s){const t=Math.round(s);s=In(s,t,s/1e3)?t:s;const e=Math.pow(10,Math.floor(Yt(s))),i=s/e;return(i<=1?1:i<=2?2:i<=5?5:10)*e}function DO(s){const t=[],e=Math.sqrt(s);let i;for(i=1;i<e;i++)s%i===0&&(t.push(i),t.push(s/i));return e===(e|0)&&t.push(e),t.sort((n,o)=>n-o).pop(),t}function As(s){return!isNaN(parseFloat(s))&&isFinite(s)}function In(s,t,e){return Math.abs(s-t)<e}function MO(s,t){const e=Math.round(s);return e-t<=s&&e+t>=s}function Ef(s,t,e){let i,n,o;for(i=0,n=s.length;i<n;i++)o=s[i][e],isNaN(o)||(t.min=Math.min(t.min,o),t.max=Math.max(t.max,o))}function se(s){return s*(it/180)}function mc(s){return s*(180/it)}function xf(s){if(!rt(s))return;let t=1,e=0;for(;Math.round(s*t)/t!==s;)t*=10,e++;return e}function Cf(s,t){const e=t.x-s.x,i=t.y-s.y,n=Math.sqrt(e*e+i*i);let o=Math.atan2(i,e);return o<-.5*it&&(o+=q),{angle:o,distance:n}}function bc(s,t){return Math.sqrt(Math.pow(t.x-s.x,2)+Math.pow(t.y-s.y,2))}function LO(s,t){return(s-t+OO)%q-it}function Vt(s){return(s%q+q)%q}function Dn(s,t,e,i){const n=Vt(s),o=Vt(t),r=Vt(e),a=Vt(o-n),l=Vt(r-n),c=Vt(n-o),h=Vt(n-r);return n===o||n===r||i&&o===r||a>l&&c<h}function dt(s,t,e){return Math.max(t,Math.min(e,s))}function $O(s){return dt(s,-32768,32767)}function Ie(s,t,e,i=1e-6){return s>=Math.min(t,e)-i&&s<=Math.max(t,e)+i}function vc(s,t,e){e=e||(r=>s[r]<t);let i=s.length-1,n=0,o;for(;i-n>1;)o=n+i>>1,e(o)?n=o:i=o;return{lo:n,hi:i}}const De=(s,t,e,i)=>vc(s,e,i?n=>s[n][t]<=e:n=>s[n][t]<e),RO=(s,t,e)=>vc(s,e,i=>s[i][t]>=e);function PO(s,t,e){let i=0,n=s.length;for(;i<n&&s[i]<t;)i++;for(;n>i&&s[n-1]>e;)n--;return i>0||n<s.length?s.slice(i,n):s}const Af=["push","pop","shift","splice","unshift"];function NO(s,t){if(s._chartjs){s._chartjs.listeners.push(t);return}Object.defineProperty(s,"_chartjs",{configurable:!0,enumerable:!1,value:{listeners:[t]}}),Af.forEach(e=>{const i="_onData"+gc(e),n=s[e];Object.defineProperty(s,e,{configurable:!0,enumerable:!1,value(...o){const r=n.apply(this,o);return s._chartjs.listeners.forEach(a=>{typeof a[i]=="function"&&a[i](...o)}),r}})})}function wf(s,t){const e=s._chartjs;if(!e)return;const i=e.listeners,n=i.indexOf(t);n!==-1&&i.splice(n,1),!(i.length>0)&&(Af.forEach(o=>{delete s[o]}),delete s._chartjs)}function kf(s){const t=new Set;let e,i;for(e=0,i=s.length;e<i;++e)t.add(s[e]);return t.size===i?s:Array.from(t)}const Sf=function(){return typeof window>"u"?function(s){return s()}:window.requestAnimationFrame}();function Of(s,t,e){const i=e||(r=>Array.prototype.slice.call(r));let n=!1,o=[];return function(...r){o=i(r),n||(n=!0,Sf.call(window,()=>{n=!1,s.apply(t,o)}))}}function BO(s,t){let e;return function(...i){return t?(clearTimeout(e),e=setTimeout(s,t,i)):s.apply(this,i),t}}const yc=s=>s==="start"?"left":s==="end"?"right":"center",gt=(s,t,e)=>s==="start"?t:s==="end"?e:(t+e)/2,HO=(s,t,e,i)=>s===(i?"left":"right")?e:s==="center"?(t+e)/2:t;function If(s,t,e){const i=t.length;let n=0,o=i;if(s._sorted){const{iScale:r,_parsed:a}=s,l=r.axis,{min:c,max:h,minDefined:d,maxDefined:u}=r.getUserBounds();d&&(n=dt(Math.min(De(a,r.axis,c).lo,e?i:De(t,l,r.getPixelForValue(c)).lo),0,i-1)),u?o=dt(Math.max(De(a,r.axis,h,!0).hi+1,e?0:De(t,l,r.getPixelForValue(h),!0).hi+1),n,i)-n:o=i-n}return{start:n,count:o}}function Df(s){const{xScale:t,yScale:e,_scaleRanges:i}=s,n={xmin:t.min,xmax:t.max,ymin:e.min,ymax:e.max};if(!i)return s._scaleRanges=n,!0;const o=i.xmin!==t.min||i.xmax!==t.max||i.ymin!==e.min||i.ymax!==e.max;return Object.assign(i,n),o}const jr=s=>s===0||s===1,Mf=(s,t,e)=>-(Math.pow(2,10*(s-=1))*Math.sin((s-t)*q/e)),Lf=(s,t,e)=>Math.pow(2,-10*s)*Math.sin((s-t)*q/e)+1,Mn={linear:s=>s,easeInQuad:s=>s*s,easeOutQuad:s=>-s*(s-2),easeInOutQuad:s=>(s/=.5)<1?.5*s*s:-.5*(--s*(s-2)-1),easeInCubic:s=>s*s*s,easeOutCubic:s=>(s-=1)*s*s+1,easeInOutCubic:s=>(s/=.5)<1?.5*s*s*s:.5*((s-=2)*s*s+2),easeInQuart:s=>s*s*s*s,easeOutQuart:s=>-((s-=1)*s*s*s-1),easeInOutQuart:s=>(s/=.5)<1?.5*s*s*s*s:-.5*((s-=2)*s*s*s-2),easeInQuint:s=>s*s*s*s*s,easeOutQuint:s=>(s-=1)*s*s*s*s+1,easeInOutQuint:s=>(s/=.5)<1?.5*s*s*s*s*s:.5*((s-=2)*s*s*s*s+2),easeInSine:s=>-Math.cos(s*nt)+1,easeOutSine:s=>Math.sin(s*nt),easeInOutSine:s=>-.5*(Math.cos(it*s)-1),easeInExpo:s=>s===0?0:Math.pow(2,10*(s-1)),easeOutExpo:s=>s===1?1:-Math.pow(2,-10*s)+1,easeInOutExpo:s=>jr(s)?s:s<.5?.5*Math.pow(2,10*(s*2-1)):.5*(-Math.pow(2,-10*(s*2-1))+2),easeInCirc:s=>s>=1?s:-(Math.sqrt(1-s*s)-1),easeOutCirc:s=>Math.sqrt(1-(s-=1)*s),easeInOutCirc:s=>(s/=.5)<1?-.5*(Math.sqrt(1-s*s)-1):.5*(Math.sqrt(1-(s-=2)*s)+1),easeInElastic:s=>jr(s)?s:Mf(s,.075,.3),easeOutElastic:s=>jr(s)?s:Lf(s,.075,.3),easeInOutElastic(s){return jr(s)?s:s<.5?.5*Mf(s*2,.1125,.45):.5+.5*Lf(s*2-1,.1125,.45)},easeInBack(s){return s*s*((1.70158+1)*s-1.70158)},easeOutBack(s){return(s-=1)*s*((1.70158+1)*s+1.70158)+1},easeInOutBack(s){let t=1.70158;return(s/=.5)<1?.5*(s*s*(((t*=1.525)+1)*s-t)):.5*((s-=2)*s*(((t*=1.525)+1)*s+t)+2)},easeInBounce:s=>1-Mn.easeOutBounce(1-s),easeOutBounce(s){return s<1/2.75?7.5625*s*s:s<2/2.75?7.5625*(s-=1.5/2.75)*s+.75:s<2.5/2.75?7.5625*(s-=2.25/2.75)*s+.9375:7.5625*(s-=2.625/2.75)*s+.984375},easeInOutBounce:s=>s<.5?Mn.easeInBounce(s*2)*.5:Mn.easeOutBounce(s*2-1)*.5+.5};/*!
+ * @kurkle/color v0.2.1
+ * https://github.com/kurkle/color#readme
+ * (c) 2022 Jukka Kurkela
+ * Released under the MIT License
+ */function Ln(s){return s+.5|0}const ii=(s,t,e)=>Math.max(Math.min(s,e),t);function $n(s){return ii(Ln(s*2.55),0,255)}function si(s){return ii(Ln(s*255),0,255)}function Me(s){return ii(Ln(s/2.55)/100,0,1)}function $f(s){return ii(Ln(s*100),0,100)}const Kt={0:0,1:1,2:2,3:3,4:4,5:5,6:6,7:7,8:8,9:9,A:10,B:11,C:12,D:13,E:14,F:15,a:10,b:11,c:12,d:13,e:14,f:15},Tc=[..."0123456789ABCDEF"],VO=s=>Tc[s&15],FO=s=>Tc[(s&240)>>4]+Tc[s&15],Yr=s=>(s&240)>>4===(s&15),WO=s=>Yr(s.r)&&Yr(s.g)&&Yr(s.b)&&Yr(s.a);function zO(s){var t=s.length,e;return s[0]==="#"&&(t===4||t===5?e={r:255&Kt[s[1]]*17,g:255&Kt[s[2]]*17,b:255&Kt[s[3]]*17,a:t===5?Kt[s[4]]*17:255}:(t===7||t===9)&&(e={r:Kt[s[1]]<<4|Kt[s[2]],g:Kt[s[3]]<<4|Kt[s[4]],b:Kt[s[5]]<<4|Kt[s[6]],a:t===9?Kt[s[7]]<<4|Kt[s[8]]:255})),e}const jO=(s,t)=>s<255?t(s):"";function YO(s){var t=WO(s)?VO:FO;return s?"#"+t(s.r)+t(s.g)+t(s.b)+jO(s.a,t):void 0}const KO=/^(hsla?|hwb|hsv)\(\s*([-+.e\d]+)(?:deg)?[\s,]+([-+.e\d]+)%[\s,]+([-+.e\d]+)%(?:[\s,]+([-+.e\d]+)(%)?)?\s*\)$/;function Rf(s,t,e){const i=t*Math.min(e,1-e),n=(o,r=(o+s/30)%12)=>e-i*Math.max(Math.min(r-3,9-r,1),-1);return[n(0),n(8),n(4)]}function UO(s,t,e){const i=(n,o=(n+s/60)%6)=>e-e*t*Math.max(Math.min(o,4-o,1),0);return[i(5),i(3),i(1)]}function XO(s,t,e){const i=Rf(s,1,.5);let n;for(t+e>1&&(n=1/(t+e),t*=n,e*=n),n=0;n<3;n++)i[n]*=1-t-e,i[n]+=t;return i}function GO(s,t,e,i,n){return s===n?(t-e)/i+(t<e?6:0):t===n?(e-s)/i+2:(s-t)/i+4}function Ec(s){const e=s.r/255,i=s.g/255,n=s.b/255,o=Math.max(e,i,n),r=Math.min(e,i,n),a=(o+r)/2;let l,c,h;return o!==r&&(h=o-r,c=a>.5?h/(2-o-r):h/(o+r),l=GO(e,i,n,h,o),l=l*60+.5),[l|0,c||0,a]}function xc(s,t,e,i){return(Array.isArray(t)?s(t[0],t[1],t[2]):s(t,e,i)).map(si)}function Cc(s,t,e){return xc(Rf,s,t,e)}function qO(s,t,e){return xc(XO,s,t,e)}function ZO(s,t,e){return xc(UO,s,t,e)}function Pf(s){return(s%360+360)%360}function QO(s){const t=KO.exec(s);let e=255,i;if(!t)return;t[5]!==i&&(e=t[6]?$n(+t[5]):si(+t[5]));const n=Pf(+t[2]),o=+t[3]/100,r=+t[4]/100;return t[1]==="hwb"?i=qO(n,o,r):t[1]==="hsv"?i=ZO(n,o,r):i=Cc(n,o,r),{r:i[0],g:i[1],b:i[2],a:e}}function JO(s,t){var e=Ec(s);e[0]=Pf(e[0]+t),e=Cc(e),s.r=e[0],s.g=e[1],s.b=e[2]}function tI(s){if(!s)return;const t=Ec(s),e=t[0],i=$f(t[1]),n=$f(t[2]);return s.a<255?`hsla(${e}, ${i}%, ${n}%, ${Me(s.a)})`:`hsl(${e}, ${i}%, ${n}%)`}const Nf={x:"dark",Z:"light",Y:"re",X:"blu",W:"gr",V:"medium",U:"slate",A:"ee",T:"ol",S:"or",B:"ra",C:"lateg",D:"ights",R:"in",Q:"turquois",E:"hi",P:"ro",O:"al",N:"le",M:"de",L:"yello",F:"en",K:"ch",G:"arks",H:"ea",I:"ightg",J:"wh"},Bf={OiceXe:"f0f8ff",antiquewEte:"faebd7",aqua:"ffff",aquamarRe:"7fffd4",azuY:"f0ffff",beige:"f5f5dc",bisque:"ffe4c4",black:"0",blanKedOmond:"ffebcd",Xe:"ff",XeviTet:"8a2be2",bPwn:"a52a2a",burlywood:"deb887",caMtXe:"5f9ea0",KartYuse:"7fff00",KocTate:"d2691e",cSO:"ff7f50",cSnflowerXe:"6495ed",cSnsilk:"fff8dc",crimson:"dc143c",cyan:"ffff",xXe:"8b",xcyan:"8b8b",xgTMnPd:"b8860b",xWay:"a9a9a9",xgYF:"6400",xgYy:"a9a9a9",xkhaki:"bdb76b",xmagFta:"8b008b",xTivegYF:"556b2f",xSange:"ff8c00",xScEd:"9932cc",xYd:"8b0000",xsOmon:"e9967a",xsHgYF:"8fbc8f",xUXe:"483d8b",xUWay:"2f4f4f",xUgYy:"2f4f4f",xQe:"ced1",xviTet:"9400d3",dAppRk:"ff1493",dApskyXe:"bfff",dimWay:"696969",dimgYy:"696969",dodgerXe:"1e90ff",fiYbrick:"b22222",flSOwEte:"fffaf0",foYstWAn:"228b22",fuKsia:"ff00ff",gaRsbSo:"dcdcdc",ghostwEte:"f8f8ff",gTd:"ffd700",gTMnPd:"daa520",Way:"808080",gYF:"8000",gYFLw:"adff2f",gYy:"808080",honeyMw:"f0fff0",hotpRk:"ff69b4",RdianYd:"cd5c5c",Rdigo:"4b0082",ivSy:"fffff0",khaki:"f0e68c",lavFMr:"e6e6fa",lavFMrXsh:"fff0f5",lawngYF:"7cfc00",NmoncEffon:"fffacd",ZXe:"add8e6",ZcSO:"f08080",Zcyan:"e0ffff",ZgTMnPdLw:"fafad2",ZWay:"d3d3d3",ZgYF:"90ee90",ZgYy:"d3d3d3",ZpRk:"ffb6c1",ZsOmon:"ffa07a",ZsHgYF:"20b2aa",ZskyXe:"87cefa",ZUWay:"778899",ZUgYy:"778899",ZstAlXe:"b0c4de",ZLw:"ffffe0",lime:"ff00",limegYF:"32cd32",lRF:"faf0e6",magFta:"ff00ff",maPon:"800000",VaquamarRe:"66cdaa",VXe:"cd",VScEd:"ba55d3",VpurpN:"9370db",VsHgYF:"3cb371",VUXe:"7b68ee",VsprRggYF:"fa9a",VQe:"48d1cc",VviTetYd:"c71585",midnightXe:"191970",mRtcYam:"f5fffa",mistyPse:"ffe4e1",moccasR:"ffe4b5",navajowEte:"ffdead",navy:"80",Tdlace:"fdf5e6",Tive:"808000",TivedBb:"6b8e23",Sange:"ffa500",SangeYd:"ff4500",ScEd:"da70d6",pOegTMnPd:"eee8aa",pOegYF:"98fb98",pOeQe:"afeeee",pOeviTetYd:"db7093",papayawEp:"ffefd5",pHKpuff:"ffdab9",peru:"cd853f",pRk:"ffc0cb",plum:"dda0dd",powMrXe:"b0e0e6",purpN:"800080",YbeccapurpN:"663399",Yd:"ff0000",Psybrown:"bc8f8f",PyOXe:"4169e1",saddNbPwn:"8b4513",sOmon:"fa8072",sandybPwn:"f4a460",sHgYF:"2e8b57",sHshell:"fff5ee",siFna:"a0522d",silver:"c0c0c0",skyXe:"87ceeb",UXe:"6a5acd",UWay:"708090",UgYy:"708090",snow:"fffafa",sprRggYF:"ff7f",stAlXe:"4682b4",tan:"d2b48c",teO:"8080",tEstN:"d8bfd8",tomato:"ff6347",Qe:"40e0d0",viTet:"ee82ee",JHt:"f5deb3",wEte:"ffffff",wEtesmoke:"f5f5f5",Lw:"ffff00",LwgYF:"9acd32"};function eI(){const s={},t=Object.keys(Bf),e=Object.keys(Nf);let i,n,o,r,a;for(i=0;i<t.length;i++){for(r=a=t[i],n=0;n<e.length;n++)o=e[n],a=a.replace(o,Nf[o]);o=parseInt(Bf[r],16),s[a]=[o>>16&255,o>>8&255,o&255]}return s}let Kr;function iI(s){Kr||(Kr=eI(),Kr.transparent=[0,0,0,0]);const t=Kr[s.toLowerCase()];return t&&{r:t[0],g:t[1],b:t[2],a:t.length===4?t[3]:255}}const sI=/^rgba?\(\s*([-+.\d]+)(%)?[\s,]+([-+.e\d]+)(%)?[\s,]+([-+.e\d]+)(%)?(?:[\s,/]+([-+.e\d]+)(%)?)?\s*\)$/;function nI(s){const t=sI.exec(s);let e=255,i,n,o;if(t){if(t[7]!==i){const r=+t[7];e=t[8]?$n(r):ii(r*255,0,255)}return i=+t[1],n=+t[3],o=+t[5],i=255&(t[2]?$n(i):ii(i,0,255)),n=255&(t[4]?$n(n):ii(n,0,255)),o=255&(t[6]?$n(o):ii(o,0,255)),{r:i,g:n,b:o,a:e}}}function oI(s){return s&&(s.a<255?`rgba(${s.r}, ${s.g}, ${s.b}, ${Me(s.a)})`:`rgb(${s.r}, ${s.g}, ${s.b})`)}const Ac=s=>s<=.0031308?s*12.92:Math.pow(s,1/2.4)*1.055-.055,ws=s=>s<=.04045?s/12.92:Math.pow((s+.055)/1.055,2.4);function rI(s,t,e){const i=ws(Me(s.r)),n=ws(Me(s.g)),o=ws(Me(s.b));return{r:si(Ac(i+e*(ws(Me(t.r))-i))),g:si(Ac(n+e*(ws(Me(t.g))-n))),b:si(Ac(o+e*(ws(Me(t.b))-o))),a:s.a+e*(t.a-s.a)}}function Ur(s,t,e){if(s){let i=Ec(s);i[t]=Math.max(0,Math.min(i[t]+i[t]*e,t===0?360:1)),i=Cc(i),s.r=i[0],s.g=i[1],s.b=i[2]}}function Hf(s,t){return s&&Object.assign(t||{},s)}function Vf(s){var t={r:0,g:0,b:0,a:255};return Array.isArray(s)?s.length>=3&&(t={r:s[0],g:s[1],b:s[2],a:255},s.length>3&&(t.a=si(s[3]))):(t=Hf(s,{r:0,g:0,b:0,a:1}),t.a=si(t.a)),t}function aI(s){return s.charAt(0)==="r"?nI(s):QO(s)}class Xr{constructor(t){if(t instanceof Xr)return t;const e=typeof t;let i;e==="object"?i=Vf(t):e==="string"&&(i=zO(t)||iI(t)||aI(t)),this._rgb=i,this._valid=!!i}get valid(){return this._valid}get rgb(){var t=Hf(this._rgb);return t&&(t.a=Me(t.a)),t}set rgb(t){this._rgb=Vf(t)}rgbString(){return this._valid?oI(this._rgb):void 0}hexString(){return this._valid?YO(this._rgb):void 0}hslString(){return this._valid?tI(this._rgb):void 0}mix(t,e){if(t){const i=this.rgb,n=t.rgb;let o;const r=e===o?.5:e,a=2*r-1,l=i.a-n.a,c=((a*l===-1?a:(a+l)/(1+a*l))+1)/2;o=1-c,i.r=255&c*i.r+o*n.r+.5,i.g=255&c*i.g+o*n.g+.5,i.b=255&c*i.b+o*n.b+.5,i.a=r*i.a+(1-r)*n.a,this.rgb=i}return this}interpolate(t,e){return t&&(this._rgb=rI(this._rgb,t._rgb,e)),this}clone(){return new Xr(this.rgb)}alpha(t){return this._rgb.a=si(t),this}clearer(t){const e=this._rgb;return e.a*=1-t,this}greyscale(){const t=this._rgb,e=Ln(t.r*.3+t.g*.59+t.b*.11);return t.r=t.g=t.b=e,this}opaquer(t){const e=this._rgb;return e.a*=1+t,this}negate(){const t=this._rgb;return t.r=255-t.r,t.g=255-t.g,t.b=255-t.b,this}lighten(t){return Ur(this._rgb,2,t),this}darken(t){return Ur(this._rgb,2,-t),this}saturate(t){return Ur(this._rgb,1,t),this}desaturate(t){return Ur(this._rgb,1,-t),this}rotate(t){return JO(this._rgb,t),this}}function Ff(s){return new Xr(s)}function Wf(s){if(s&&typeof s=="object"){const t=s.toString();return t==="[object CanvasPattern]"||t==="[object CanvasGradient]"}return!1}function zf(s){return Wf(s)?s:Ff(s)}function wc(s){return Wf(s)?s:Ff(s).saturate(.5).darken(.1).hexString()}const Di=Object.create(null),kc=Object.create(null);function Rn(s,t){if(!t)return s;const e=t.split(".");for(let i=0,n=e.length;i<n;++i){const o=e[i];s=s[o]||(s[o]=Object.create(null))}return s}function Sc(s,t,e){return typeof t=="string"?Te(Rn(s,t),e):Te(Rn(s,""),t)}class lI{constructor(t){this.animation=void 0,this.backgroundColor="rgba(0,0,0,0.1)",this.borderColor="rgba(0,0,0,0.1)",this.color="#666",this.datasets={},this.devicePixelRatio=e=>e.chart.platform.getDevicePixelRatio(),this.elements={},this.events=["mousemove","mouseout","click","touchstart","touchmove"],this.font={family:"'Helvetica Neue', 'Helvetica', 'Arial', sans-serif",size:12,style:"normal",lineHeight:1.2,weight:null},this.hover={},this.hoverBackgroundColor=(e,i)=>wc(i.backgroundColor),this.hoverBorderColor=(e,i)=>wc(i.borderColor),this.hoverColor=(e,i)=>wc(i.color),this.indexAxis="x",this.interaction={mode:"nearest",intersect:!0,includeInvisible:!1},this.maintainAspectRatio=!0,this.onHover=null,this.onClick=null,this.parsing=!0,this.plugins={},this.responsive=!0,this.scale=void 0,this.scales={},this.showLine=!0,this.drawActiveElementsOnTop=!0,this.describe(t)}set(t,e){return Sc(this,t,e)}get(t){return Rn(this,t)}describe(t,e){return Sc(kc,t,e)}override(t,e){return Sc(Di,t,e)}route(t,e,i,n){const o=Rn(this,t),r=Rn(this,i),a="_"+e;Object.defineProperties(o,{[a]:{value:o[e],writable:!0},[e]:{enumerable:!0,get(){const l=this[a],c=r[n];return V(l)?Object.assign({},c,l):B(l,c)},set(l){this[a]=l}}})}}var F=new lI({_scriptable:s=>!s.startsWith("on"),_indexable:s=>s!=="events",hover:{_fallback:"interaction"},interaction:{_scriptable:!1,_indexable:!1}});function cI(s){return!s||H(s.size)||H(s.family)?null:(s.style?s.style+" ":"")+(s.weight?s.weight+" ":"")+s.size+"px "+s.family}function Gr(s,t,e,i,n){let o=t[n];return o||(o=t[n]=s.measureText(n).width,e.push(n)),o>i&&(i=o),i}function hI(s,t,e,i){i=i||{};let n=i.data=i.data||{},o=i.garbageCollect=i.garbageCollect||[];i.font!==t&&(n=i.data={},o=i.garbageCollect=[],i.font=t),s.save(),s.font=t;let r=0;const a=e.length;let l,c,h,d,u;for(l=0;l<a;l++)if(d=e[l],d!=null&&Q(d)!==!0)r=Gr(s,n,o,r,d);else if(Q(d))for(c=0,h=d.length;c<h;c++)u=d[c],u!=null&&!Q(u)&&(r=Gr(s,n,o,r,u));s.restore();const p=o.length/2;if(p>e.length){for(l=0;l<p;l++)delete n[o[l]];o.splice(0,p)}return r}function Mi(s,t,e){const i=s.currentDevicePixelRatio,n=e!==0?Math.max(e/2,.5):0;return Math.round((t-n)*i)/i+n}function jf(s,t){t=t||s.getContext("2d"),t.save(),t.resetTransform(),t.clearRect(0,0,s.width,s.height),t.restore()}function Oc(s,t,e,i){Yf(s,t,e,i,null)}function Yf(s,t,e,i,n){let o,r,a,l,c,h;const d=t.pointStyle,u=t.rotation,p=t.radius;let f=(u||0)*IO;if(d&&typeof d=="object"&&(o=d.toString(),o==="[object HTMLImageElement]"||o==="[object HTMLCanvasElement]")){s.save(),s.translate(e,i),s.rotate(f),s.drawImage(d,-d.width/2,-d.height/2,d.width,d.height),s.restore();return}if(!(isNaN(p)||p<=0)){switch(s.beginPath(),d){default:n?s.ellipse(e,i,n/2,p,0,0,q):s.arc(e,i,p,0,q),s.closePath();break;case"triangle":s.moveTo(e+Math.sin(f)*p,i-Math.cos(f)*p),f+=yf,s.lineTo(e+Math.sin(f)*p,i-Math.cos(f)*p),f+=yf,s.lineTo(e+Math.sin(f)*p,i-Math.cos(f)*p),s.closePath();break;case"rectRounded":c=p*.516,l=p-c,r=Math.cos(f+On)*l,a=Math.sin(f+On)*l,s.arc(e-r,i-a,c,f-it,f-nt),s.arc(e+a,i-r,c,f-nt,f),s.arc(e+r,i+a,c,f,f+nt),s.arc(e-a,i+r,c,f+nt,f+it),s.closePath();break;case"rect":if(!u){l=Math.SQRT1_2*p,h=n?n/2:l,s.rect(e-h,i-l,2*h,2*l);break}f+=On;case"rectRot":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+a,i-r),s.lineTo(e+r,i+a),s.lineTo(e-a,i+r),s.closePath();break;case"crossRot":f+=On;case"cross":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r);break;case"star":r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r),f+=On,r=Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a),s.moveTo(e+a,i-r),s.lineTo(e-a,i+r);break;case"line":r=n?n/2:Math.cos(f)*p,a=Math.sin(f)*p,s.moveTo(e-r,i-a),s.lineTo(e+r,i+a);break;case"dash":s.moveTo(e,i),s.lineTo(e+Math.cos(f)*p,i+Math.sin(f)*p);break}s.fill(),t.borderWidth>0&&s.stroke()}}function Pn(s,t,e){return e=e||.5,!t||s&&s.x>t.left-e&&s.x<t.right+e&&s.y>t.top-e&&s.y<t.bottom+e}function qr(s,t){s.save(),s.beginPath(),s.rect(t.left,t.top,t.right-t.left,t.bottom-t.top),s.clip()}function Zr(s){s.restore()}function dI(s,t,e,i,n){if(!t)return s.lineTo(e.x,e.y);if(n==="middle"){const o=(t.x+e.x)/2;s.lineTo(o,t.y),s.lineTo(o,e.y)}else n==="after"!=!!i?s.lineTo(t.x,e.y):s.lineTo(e.x,t.y);s.lineTo(e.x,e.y)}function uI(s,t,e,i){if(!t)return s.lineTo(e.x,e.y);s.bezierCurveTo(i?t.cp1x:t.cp2x,i?t.cp1y:t.cp2y,i?e.cp2x:e.cp1x,i?e.cp2y:e.cp1y,e.x,e.y)}function Li(s,t,e,i,n,o={}){const r=Q(t)?t:[t],a=o.strokeWidth>0&&o.strokeColor!=="";let l,c;for(s.save(),s.font=n.string,pI(s,o),l=0;l<r.length;++l)c=r[l],a&&(o.strokeColor&&(s.strokeStyle=o.strokeColor),H(o.strokeWidth)||(s.lineWidth=o.strokeWidth),s.strokeText(c,e,i,o.maxWidth)),s.fillText(c,e,i,o.maxWidth),fI(s,e,i,c,o),i+=n.lineHeight;s.restore()}function pI(s,t){t.translation&&s.translate(t.translation[0],t.translation[1]),H(t.rotation)||s.rotate(t.rotation),t.color&&(s.fillStyle=t.color),t.textAlign&&(s.textAlign=t.textAlign),t.textBaseline&&(s.textBaseline=t.textBaseline)}function fI(s,t,e,i,n){if(n.strikethrough||n.underline){const o=s.measureText(i),r=t-o.actualBoundingBoxLeft,a=t+o.actualBoundingBoxRight,l=e-o.actualBoundingBoxAscent,c=e+o.actualBoundingBoxDescent,h=n.strikethrough?(l+c)/2:c;s.strokeStyle=s.fillStyle,s.beginPath(),s.lineWidth=n.decorationWidth||2,s.moveTo(r,h),s.lineTo(a,h),s.stroke()}}function Nn(s,t){const{x:e,y:i,w:n,h:o,radius:r}=t;s.arc(e+r.topLeft,i+r.topLeft,r.topLeft,-nt,it,!0),s.lineTo(e,i+o-r.bottomLeft),s.arc(e+r.bottomLeft,i+o-r.bottomLeft,r.bottomLeft,it,nt,!0),s.lineTo(e+n-r.bottomRight,i+o),s.arc(e+n-r.bottomRight,i+o-r.bottomRight,r.bottomRight,nt,0,!0),s.lineTo(e+n,i+r.topRight),s.arc(e+n-r.topRight,i+r.topRight,r.topRight,0,-nt,!0),s.lineTo(e+r.topLeft,i)}const _I=new RegExp(/^(normal|(\d+(?:\.\d+)?)(px|em|%)?)$/),gI=new RegExp(/^(normal|italic|initial|inherit|unset|(oblique( -?[0-9]?[0-9]deg)?))$/);function mI(s,t){const e=(""+s).match(_I);if(!e||e[1]==="normal")return t*1.2;switch(s=+e[2],e[3]){case"px":return s;case"%":s/=100;break}return t*s}const bI=s=>+s||0;function Ic(s,t){const e={},i=V(t),n=i?Object.keys(t):t,o=V(s)?i?r=>B(s[r],s[t[r]]):r=>s[r]:()=>s;for(const r of n)e[r]=bI(o(r));return e}function Kf(s){return Ic(s,{top:"y",right:"x",bottom:"y",left:"x"})}function $i(s){return Ic(s,["topLeft","topRight","bottomLeft","bottomRight"])}function pt(s){const t=Kf(s);return t.width=t.left+t.right,t.height=t.top+t.bottom,t}function lt(s,t){s=s||{},t=t||F.font;let e=B(s.size,t.size);typeof e=="string"&&(e=parseInt(e,10));let i=B(s.style,t.style);i&&!(""+i).match(gI)&&(console.warn('Invalid font style specified: "'+i+'"'),i="");const n={family:B(s.family,t.family),lineHeight:mI(B(s.lineHeight,t.lineHeight),e),size:e,style:i,weight:B(s.weight,t.weight),string:""};return n.string=cI(n),n}function tt(s,t,e,i){let n=!0,o,r,a;for(o=0,r=s.length;o<r;++o)if(a=s[o],a!==void 0&&(t!==void 0&&typeof a=="function"&&(a=a(t),n=!1),e!==void 0&&Q(a)&&(a=a[e%a.length],n=!1),a!==void 0))return i&&!n&&(i.cacheable=!1),a}function vI(s,t,e){const{min:i,max:n}=s,o=gf(t,(n-i)/2),r=(a,l)=>e&&a===0?0:a+l;return{min:r(i,-Math.abs(o)),max:r(n,o)}}function ni(s,t){return Object.assign(Object.create(s),t)}function Dc(s,t=[""],e=s,i,n=()=>s[0]){jt(i)||(i=Zf("_fallback",s));const o={[Symbol.toStringTag]:"Object",_cacheable:!0,_scopes:s,_rootScopes:e,_fallback:i,_getTarget:n,override:r=>Dc([r,...s],t,e,i)};return new Proxy(o,{deleteProperty(r,a){return delete r[a],delete r._keys,delete s[0][a],!0},get(r,a){return Xf(r,a,()=>kI(a,t,s,r))},getOwnPropertyDescriptor(r,a){return Reflect.getOwnPropertyDescriptor(r._scopes[0],a)},getPrototypeOf(){return Reflect.getPrototypeOf(s[0])},has(r,a){return Qf(r).includes(a)},ownKeys(r){return Qf(r)},set(r,a,l){const c=r._storage||(r._storage=n());return r[a]=c[a]=l,delete r._keys,!0}})}function ks(s,t,e,i){const n={_cacheable:!1,_proxy:s,_context:t,_subProxy:e,_stack:new Set,_descriptors:Uf(s,i),setContext:o=>ks(s,o,e,i),override:o=>ks(s.override(o),t,e,i)};return new Proxy(n,{deleteProperty(o,r){return delete o[r],delete s[r],!0},get(o,r,a){return Xf(o,r,()=>TI(o,r,a))},getOwnPropertyDescriptor(o,r){return o._descriptors.allKeys?Reflect.has(s,r)?{enumerable:!0,configurable:!0}:void 0:Reflect.getOwnPropertyDescriptor(s,r)},getPrototypeOf(){return Reflect.getPrototypeOf(s)},has(o,r){return Reflect.has(s,r)},ownKeys(){return Reflect.ownKeys(s)},set(o,r,a){return s[r]=a,delete o[r],!0}})}function Uf(s,t={scriptable:!0,indexable:!0}){const{_scriptable:e=t.scriptable,_indexable:i=t.indexable,_allKeys:n=t.allKeys}=s;return{allKeys:n,scriptable:e,indexable:i,isScriptable:ei(e)?e:()=>e,isIndexable:ei(i)?i:()=>i}}const yI=(s,t)=>s?s+gc(t):t,Mc=(s,t)=>V(t)&&s!=="adapters"&&(Object.getPrototypeOf(t)===null||t.constructor===Object);function Xf(s,t,e){if(Object.prototype.hasOwnProperty.call(s,t))return s[t];const i=e();return s[t]=i,i}function TI(s,t,e){const{_proxy:i,_context:n,_subProxy:o,_descriptors:r}=s;let a=i[t];return ei(a)&&r.isScriptable(t)&&(a=EI(t,a,s,e)),Q(a)&&a.length&&(a=xI(t,a,s,r.isIndexable)),Mc(t,a)&&(a=ks(a,n,o&&o[t],r)),a}function EI(s,t,e,i){const{_proxy:n,_context:o,_subProxy:r,_stack:a}=e;if(a.has(s))throw new Error("Recursion detected: "+Array.from(a).join("->")+"->"+s);return a.add(s),t=t(o,r||i),a.delete(s),Mc(s,t)&&(t=Lc(n._scopes,n,s,t)),t}function xI(s,t,e,i){const{_proxy:n,_context:o,_subProxy:r,_descriptors:a}=e;if(jt(o.index)&&i(s))t=t[o.index%t.length];else if(V(t[0])){const l=t,c=n._scopes.filter(h=>h!==l);t=[];for(const h of l){const d=Lc(c,n,s,h);t.push(ks(d,o,r&&r[s],a))}}return t}function Gf(s,t,e){return ei(s)?s(t,e):s}const CI=(s,t)=>s===!0?t:typeof s=="string"?ti(t,s):void 0;function AI(s,t,e,i,n){for(const o of t){const r=CI(e,o);if(r){s.add(r);const a=Gf(r._fallback,e,n);if(jt(a)&&a!==e&&a!==i)return a}else if(r===!1&&jt(i)&&e!==i)return null}return!1}function Lc(s,t,e,i){const n=t._rootScopes,o=Gf(t._fallback,e,i),r=[...s,...n],a=new Set;a.add(i);let l=qf(a,r,e,o||e,i);return l===null||jt(o)&&o!==e&&(l=qf(a,r,o,l,i),l===null)?!1:Dc(Array.from(a),[""],n,o,()=>wI(t,e,i))}function qf(s,t,e,i,n){for(;e;)e=AI(s,t,e,i,n);return e}function wI(s,t,e){const i=s._getTarget();t in i||(i[t]={});const n=i[t];return Q(n)&&V(e)?e:n}function kI(s,t,e,i){let n;for(const o of t)if(n=Zf(yI(o,s),e),jt(n))return Mc(s,n)?Lc(e,i,s,n):n}function Zf(s,t){for(const e of t){if(!e)continue;const i=e[s];if(jt(i))return i}}function Qf(s){let t=s._keys;return t||(t=s._keys=SI(s._scopes)),t}function SI(s){const t=new Set;for(const e of s)for(const i of Object.keys(e).filter(n=>!n.startsWith("_")))t.add(i);return Array.from(t)}function Jf(s,t,e,i){const{iScale:n}=s,{key:o="r"}=this._parsing,r=new Array(i);let a,l,c,h;for(a=0,l=i;a<l;++a)c=a+e,h=t[c],r[a]={r:n.parse(ti(h,o),c)};return r}const OI=Number.EPSILON||1e-14,Ss=(s,t)=>t<s.length&&!s[t].skip&&s[t],t_=s=>s==="x"?"y":"x";function II(s,t,e,i){const n=s.skip?t:s,o=t,r=e.skip?t:e,a=bc(o,n),l=bc(r,o);let c=a/(a+l),h=l/(a+l);c=isNaN(c)?0:c,h=isNaN(h)?0:h;const d=i*c,u=i*h;return{previous:{x:o.x-d*(r.x-n.x),y:o.y-d*(r.y-n.y)},next:{x:o.x+u*(r.x-n.x),y:o.y+u*(r.y-n.y)}}}function DI(s,t,e){const i=s.length;let n,o,r,a,l,c=Ss(s,0);for(let h=0;h<i-1;++h)if(l=c,c=Ss(s,h+1),!(!l||!c)){if(In(t[h],0,OI)){e[h]=e[h+1]=0;continue}n=e[h]/t[h],o=e[h+1]/t[h],a=Math.pow(n,2)+Math.pow(o,2),!(a<=9)&&(r=3/Math.sqrt(a),e[h]=n*r*t[h],e[h+1]=o*r*t[h])}}function MI(s,t,e="x"){const i=t_(e),n=s.length;let o,r,a,l=Ss(s,0);for(let c=0;c<n;++c){if(r=a,a=l,l=Ss(s,c+1),!a)continue;const h=a[e],d=a[i];r&&(o=(h-r[e])/3,a[`cp1${e}`]=h-o,a[`cp1${i}`]=d-o*t[c]),l&&(o=(l[e]-h)/3,a[`cp2${e}`]=h+o,a[`cp2${i}`]=d+o*t[c])}}function LI(s,t="x"){const e=t_(t),i=s.length,n=Array(i).fill(0),o=Array(i);let r,a,l,c=Ss(s,0);for(r=0;r<i;++r)if(a=l,l=c,c=Ss(s,r+1),!!l){if(c){const h=c[t]-l[t];n[r]=h!==0?(c[e]-l[e])/h:0}o[r]=a?c?Ee(n[r-1])!==Ee(n[r])?0:(n[r-1]+n[r])/2:n[r-1]:n[r]}DI(s,n,o),MI(s,o,t)}function Qr(s,t,e){return Math.max(Math.min(s,e),t)}function $I(s,t){let e,i,n,o,r,a=Pn(s[0],t);for(e=0,i=s.length;e<i;++e)r=o,o=a,a=e<i-1&&Pn(s[e+1],t),o&&(n=s[e],r&&(n.cp1x=Qr(n.cp1x,t.left,t.right),n.cp1y=Qr(n.cp1y,t.top,t.bottom)),a&&(n.cp2x=Qr(n.cp2x,t.left,t.right),n.cp2y=Qr(n.cp2y,t.top,t.bottom)))}function RI(s,t,e,i,n){let o,r,a,l;if(t.spanGaps&&(s=s.filter(c=>!c.skip)),t.cubicInterpolationMode==="monotone")LI(s,n);else{let c=i?s[s.length-1]:s[0];for(o=0,r=s.length;o<r;++o)a=s[o],l=II(c,a,s[Math.min(o+1,r-(i?0:1))%r],t.tension),a.cp1x=l.previous.x,a.cp1y=l.previous.y,a.cp2x=l.next.x,a.cp2y=l.next.y,c=a}t.capBezierPoints&&$I(s,e)}function e_(){return typeof window<"u"&&typeof document<"u"}function $c(s){let t=s.parentNode;return t&&t.toString()==="[object ShadowRoot]"&&(t=t.host),t}function Jr(s,t,e){let i;return typeof s=="string"?(i=parseInt(s,10),s.indexOf("%")!==-1&&(i=i/100*t.parentNode[e])):i=s,i}const ta=s=>window.getComputedStyle(s,null);function PI(s,t){return ta(s).getPropertyValue(t)}const NI=["top","right","bottom","left"];function Ri(s,t,e){const i={};e=e?"-"+e:"";for(let n=0;n<4;n++){const o=NI[n];i[o]=parseFloat(s[t+"-"+o+e])||0}return i.width=i.left+i.right,i.height=i.top+i.bottom,i}const BI=(s,t,e)=>(s>0||t>0)&&(!e||!e.shadowRoot);function HI(s,t){const e=s.touches,i=e&&e.length?e[0]:s,{offsetX:n,offsetY:o}=i;let r=!1,a,l;if(BI(n,o,s.target))a=n,l=o;else{const c=t.getBoundingClientRect();a=i.clientX-c.left,l=i.clientY-c.top,r=!0}return{x:a,y:l,box:r}}function Pi(s,t){if("native"in s)return s;const{canvas:e,currentDevicePixelRatio:i}=t,n=ta(e),o=n.boxSizing==="border-box",r=Ri(n,"padding"),a=Ri(n,"border","width"),{x:l,y:c,box:h}=HI(s,e),d=r.left+(h&&a.left),u=r.top+(h&&a.top);let{width:p,height:f}=t;return o&&(p-=r.width+a.width,f-=r.height+a.height),{x:Math.round((l-d)/p*e.width/i),y:Math.round((c-u)/f*e.height/i)}}function VI(s,t,e){let i,n;if(t===void 0||e===void 0){const o=$c(s);if(!o)t=s.clientWidth,e=s.clientHeight;else{const r=o.getBoundingClientRect(),a=ta(o),l=Ri(a,"border","width"),c=Ri(a,"padding");t=r.width-c.width-l.width,e=r.height-c.height-l.height,i=Jr(a.maxWidth,o,"clientWidth"),n=Jr(a.maxHeight,o,"clientHeight")}}return{width:t,height:e,maxWidth:i||zr,maxHeight:n||zr}}const Rc=s=>Math.round(s*10)/10;function FI(s,t,e,i){const n=ta(s),o=Ri(n,"margin"),r=Jr(n.maxWidth,s,"clientWidth")||zr,a=Jr(n.maxHeight,s,"clientHeight")||zr,l=VI(s,t,e);let{width:c,height:h}=l;if(n.boxSizing==="content-box"){const d=Ri(n,"border","width"),u=Ri(n,"padding");c-=u.width+d.width,h-=u.height+d.height}return c=Math.max(0,c-o.width),h=Math.max(0,i?Math.floor(c/i):h-o.height),c=Rc(Math.min(c,r,l.maxWidth)),h=Rc(Math.min(h,a,l.maxHeight)),c&&!h&&(h=Rc(c/2)),{width:c,height:h}}function i_(s,t,e){const i=t||1,n=Math.floor(s.height*i),o=Math.floor(s.width*i);s.height=n/i,s.width=o/i;const r=s.canvas;return r.style&&(e||!r.style.height&&!r.style.width)&&(r.style.height=`${s.height}px`,r.style.width=`${s.width}px`),s.currentDevicePixelRatio!==i||r.height!==n||r.width!==o?(s.currentDevicePixelRatio=i,r.height=n,r.width=o,s.ctx.setTransform(i,0,0,i,0,0),!0):!1}const WI=function(){let s=!1;try{const t={get passive(){return s=!0,!1}};window.addEventListener("test",null,t),window.removeEventListener("test",null,t)}catch{}return s}();function s_(s,t){const e=PI(s,t),i=e&&e.match(/^(\d+)(\.\d+)?px$/);return i?+i[1]:void 0}function Ni(s,t,e,i){return{x:s.x+e*(t.x-s.x),y:s.y+e*(t.y-s.y)}}function zI(s,t,e,i){return{x:s.x+e*(t.x-s.x),y:i==="middle"?e<.5?s.y:t.y:i==="after"?e<1?s.y:t.y:e>0?t.y:s.y}}function jI(s,t,e,i){const n={x:s.cp2x,y:s.cp2y},o={x:t.cp1x,y:t.cp1y},r=Ni(s,n,e),a=Ni(n,o,e),l=Ni(o,t,e),c=Ni(r,a,e),h=Ni(a,l,e);return Ni(c,h,e)}const n_=new Map;function YI(s,t){t=t||{};const e=s+JSON.stringify(t);let i=n_.get(e);return i||(i=new Intl.NumberFormat(s,t),n_.set(e,i)),i}function Bn(s,t,e){return YI(t,e).format(s)}const KI=function(s,t){return{x(e){return s+s+t-e},setWidth(e){t=e},textAlign(e){return e==="center"?e:e==="right"?"left":"right"},xPlus(e,i){return e-i},leftForLtr(e,i){return e-i}}},UI=function(){return{x(s){return s},setWidth(s){},textAlign(s){return s},xPlus(s,t){return s+t},leftForLtr(s,t){return s}}};function Os(s,t,e){return s?KI(t,e):UI()}function o_(s,t){let e,i;(t==="ltr"||t==="rtl")&&(e=s.canvas.style,i=[e.getPropertyValue("direction"),e.getPropertyPriority("direction")],e.setProperty("direction",t,"important"),s.prevTextDirection=i)}function r_(s,t){t!==void 0&&(delete s.prevTextDirection,s.canvas.style.setProperty("direction",t[0],t[1]))}function a_(s){return s==="angle"?{between:Dn,compare:LO,normalize:Vt}:{between:Ie,compare:(t,e)=>t-e,normalize:t=>t}}function l_({start:s,end:t,count:e,loop:i,style:n}){return{start:s%e,end:t%e,loop:i&&(t-s+1)%e===0,style:n}}function XI(s,t,e){const{property:i,start:n,end:o}=e,{between:r,normalize:a}=a_(i),l=t.length;let{start:c,end:h,loop:d}=s,u,p;if(d){for(c+=l,h+=l,u=0,p=l;u<p&&r(a(t[c%l][i]),n,o);++u)c--,h--;c%=l,h%=l}return h<c&&(h+=l),{start:c,end:h,loop:d,style:s.style}}function c_(s,t,e){if(!e)return[s];const{property:i,start:n,end:o}=e,r=t.length,{compare:a,between:l,normalize:c}=a_(i),{start:h,end:d,loop:u,style:p}=XI(s,t,e),f=[];let b=!1,v=null,y,T,x;const E=()=>l(n,x,y)&&a(n,x)!==0,C=()=>a(o,y)===0||l(o,x,y),A=()=>b||E(),w=()=>!b||C();for(let S=h,k=h;S<=d;++S)T=t[S%r],!T.skip&&(y=c(T[i]),y!==x&&(b=l(y,n,o),v===null&&A()&&(v=a(y,n)===0?S:k),v!==null&&w()&&(f.push(l_({start:v,end:S,loop:u,count:r,style:p})),v=null),k=S,x=y));return v!==null&&f.push(l_({start:v,end:d,loop:u,count:r,style:p})),f}function h_(s,t){const e=[],i=s.segments;for(let n=0;n<i.length;n++){const o=c_(i[n],s.points,t);o.length&&e.push(...o)}return e}function GI(s,t,e,i){let n=0,o=t-1;if(e&&!i)for(;n<t&&!s[n].skip;)n++;for(;n<t&&s[n].skip;)n++;for(n%=t,e&&(o+=n);o>n&&s[o%t].skip;)o--;return o%=t,{start:n,end:o}}function qI(s,t,e,i){const n=s.length,o=[];let r=t,a=s[t],l;for(l=t+1;l<=e;++l){const c=s[l%n];c.skip||c.stop?a.skip||(i=!1,o.push({start:t%n,end:(l-1)%n,loop:i}),t=r=c.stop?l:null):(r=l,a.skip&&(t=l)),a=c}return r!==null&&o.push({start:t%n,end:r%n,loop:i}),o}function ZI(s,t){const e=s.points,i=s.options.spanGaps,n=e.length;if(!n)return[];const o=!!s._loop,{start:r,end:a}=GI(e,n,o,i);if(i===!0)return d_(s,[{start:r,end:a,loop:o}],e,t);const l=a<r?a+n:a,c=!!s._fullLoop&&r===0&&a===n-1;return d_(s,qI(e,r,l,c),e,t)}function d_(s,t,e,i){return!i||!i.setContext||!e?t:QI(s,t,e,i)}function QI(s,t,e,i){const n=s._chart.getContext(),o=u_(s.options),{_datasetIndex:r,options:{spanGaps:a}}=s,l=e.length,c=[];let h=o,d=t[0].start,u=d;function p(f,b,v,y){const T=a?-1:1;if(f!==b){for(f+=l;e[f%l].skip;)f-=T;for(;e[b%l].skip;)b+=T;f%l!==b%l&&(c.push({start:f%l,end:b%l,loop:v,style:y}),h=y,d=b%l)}}for(const f of t){d=a?d:f.start;let b=e[d%l],v;for(u=d+1;u<=f.end;u++){const y=e[u%l];v=u_(i.setContext(ni(n,{type:"segment",p0:b,p1:y,p0DataIndex:(u-1)%l,p1DataIndex:u%l,datasetIndex:r}))),JI(v,h)&&p(d,u-1,f.loop,h),b=y,h=v}d<u-1&&p(d,u-1,f.loop,h)}return c}function u_(s){return{backgroundColor:s.backgroundColor,borderCapStyle:s.borderCapStyle,borderDash:s.borderDash,borderDashOffset:s.borderDashOffset,borderJoinStyle:s.borderJoinStyle,borderWidth:s.borderWidth,borderColor:s.borderColor}}function JI(s,t){return t&&JSON.stringify(s)!==JSON.stringify(t)}/*!
+ * Chart.js v3.9.1
+ * https://www.chartjs.org
+ * (c) 2022 Chart.js Contributors
+ * Released under the MIT License
+ */class tD{constructor(){this._request=null,this._charts=new Map,this._running=!1,this._lastDate=void 0}_notify(t,e,i,n){const o=e.listeners[n],r=e.duration;o.forEach(a=>a({chart:t,initial:e.initial,numSteps:r,currentStep:Math.min(i-e.start,r)}))}_refresh(){this._request||(this._running=!0,this._request=Sf.call(window,()=>{this._update(),this._request=null,this._running&&this._refresh()}))}_update(t=Date.now()){let e=0;this._charts.forEach((i,n)=>{if(!i.running||!i.items.length)return;const o=i.items;let r=o.length-1,a=!1,l;for(;r>=0;--r)l=o[r],l._active?(l._total>i.duration&&(i.duration=l._total),l.tick(t),a=!0):(o[r]=o[o.length-1],o.pop());a&&(n.draw(),this._notify(n,i,t,"progress")),o.length||(i.running=!1,this._notify(n,i,t,"complete"),i.initial=!1),e+=o.length}),this._lastDate=t,e===0&&(this._running=!1)}_getAnims(t){const e=this._charts;let i=e.get(t);return i||(i={running:!1,initial:!0,items:[],listeners:{complete:[],progress:[]}},e.set(t,i)),i}listen(t,e,i){this._getAnims(t).listeners[e].push(i)}add(t,e){!e||!e.length||this._getAnims(t).items.push(...e)}has(t){return this._getAnims(t).items.length>0}start(t){const e=this._charts.get(t);e&&(e.running=!0,e.start=Date.now(),e.duration=e.items.reduce((i,n)=>Math.max(i,n._duration),0),this._refresh())}running(t){if(!this._running)return!1;const e=this._charts.get(t);return!(!e||!e.running||!e.items.length)}stop(t){const e=this._charts.get(t);if(!e||!e.items.length)return;const i=e.items;let n=i.length-1;for(;n>=0;--n)i[n].cancel();e.items=[],this._notify(t,e,Date.now(),"complete")}remove(t){return this._charts.delete(t)}}var xe=new tD;const p_="transparent",eD={boolean(s,t,e){return e>.5?t:s},color(s,t,e){const i=zf(s||p_),n=i.valid&&zf(t||p_);return n&&n.valid?n.mix(i,e).hexString():t},number(s,t,e){return s+(t-s)*e}};class f_{constructor(t,e,i,n){const o=e[i];n=tt([t.to,n,o,t.from]);const r=tt([t.from,o,n]);this._active=!0,this._fn=t.fn||eD[t.type||typeof r],this._easing=Mn[t.easing]||Mn.linear,this._start=Math.floor(Date.now()+(t.delay||0)),this._duration=this._total=Math.floor(t.duration),this._loop=!!t.loop,this._target=e,this._prop=i,this._from=r,this._to=n,this._promises=void 0}active(){return this._active}update(t,e,i){if(this._active){this._notify(!1);const n=this._target[this._prop],o=i-this._start,r=this._duration-o;this._start=i,this._duration=Math.floor(Math.max(r,t.duration)),this._total+=o,this._loop=!!t.loop,this._to=tt([t.to,e,n,t.from]),this._from=tt([t.from,n,e])}}cancel(){this._active&&(this.tick(Date.now()),this._active=!1,this._notify(!1))}tick(t){const e=t-this._start,i=this._duration,n=this._prop,o=this._from,r=this._loop,a=this._to;let l;if(this._active=o!==a&&(r||e<i),!this._active){this._target[n]=a,this._notify(!0);return}if(e<0){this._target[n]=o;return}l=e/i%2,l=r&&l>1?2-l:l,l=this._easing(Math.min(1,Math.max(0,l))),this._target[n]=this._fn(o,a,l)}wait(){const t=this._promises||(this._promises=[]);return new Promise((e,i)=>{t.push({res:e,rej:i})})}_notify(t){const e=t?"res":"rej",i=this._promises||[];for(let n=0;n<i.length;n++)i[n][e]()}}const iD=["x","y","borderWidth","radius","tension"],sD=["color","borderColor","backgroundColor"];F.set("animation",{delay:void 0,duration:1e3,easing:"easeOutQuart",fn:void 0,from:void 0,loop:void 0,to:void 0,type:void 0});const nD=Object.keys(F.animation);F.describe("animation",{_fallback:!1,_indexable:!1,_scriptable:s=>s!=="onProgress"&&s!=="onComplete"&&s!=="fn"}),F.set("animations",{colors:{type:"color",properties:sD},numbers:{type:"number",properties:iD}}),F.describe("animations",{_fallback:"animation"}),F.set("transitions",{active:{animation:{duration:400}},resize:{animation:{duration:0}},show:{animations:{colors:{from:"transparent"},visible:{type:"boolean",duration:0}}},hide:{animations:{colors:{to:"transparent"},visible:{type:"boolean",easing:"linear",fn:s=>s|0}}}});class Pc{constructor(t,e){this._chart=t,this._properties=new Map,this.configure(e)}configure(t){if(!V(t))return;const e=this._properties;Object.getOwnPropertyNames(t).forEach(i=>{const n=t[i];if(!V(n))return;const o={};for(const r of nD)o[r]=n[r];(Q(n.properties)&&n.properties||[i]).forEach(r=>{(r===i||!e.has(r))&&e.set(r,o)})})}_animateOptions(t,e){const i=e.options,n=rD(t,i);if(!n)return[];const o=this._createAnimations(n,i);return i.$shared&&oD(t.options.$animations,i).then(()=>{t.options=i},()=>{}),o}_createAnimations(t,e){const i=this._properties,n=[],o=t.$animations||(t.$animations={}),r=Object.keys(e),a=Date.now();let l;for(l=r.length-1;l>=0;--l){const c=r[l];if(c.charAt(0)==="$")continue;if(c==="options"){n.push(...this._animateOptions(t,e));continue}const h=e[c];let d=o[c];const u=i.get(c);if(d)if(u&&d.active()){d.update(u,h,a);continue}else d.cancel();if(!u||!u.duration){t[c]=h;continue}o[c]=d=new f_(u,t,c,h),n.push(d)}return n}update(t,e){if(this._properties.size===0){Object.assign(t,e);return}const i=this._createAnimations(t,e);if(i.length)return xe.add(this._chart,i),!0}}function oD(s,t){const e=[],i=Object.keys(t);for(let n=0;n<i.length;n++){const o=s[i[n]];o&&o.active()&&e.push(o.wait())}return Promise.all(e)}function rD(s,t){if(!t)return;let e=s.options;if(!e){s.options=t;return}return e.$shared&&(s.options=e=Object.assign({},e,{$shared:!1,$animations:{}})),e}function __(s,t){const e=s&&s.options||{},i=e.reverse,n=e.min===void 0?t:0,o=e.max===void 0?t:0;return{start:i?o:n,end:i?n:o}}function aD(s,t,e){if(e===!1)return!1;const i=__(s,e),n=__(t,e);return{top:n.end,right:i.end,bottom:n.start,left:i.start}}function lD(s){let t,e,i,n;return V(s)?(t=s.top,e=s.right,i=s.bottom,n=s.left):t=e=i=n=s,{top:t,right:e,bottom:i,left:n,disabled:s===!1}}function g_(s,t){const e=[],i=s._getSortedDatasetMetas(t);let n,o;for(n=0,o=i.length;n<o;++n)e.push(i[n].index);return e}function m_(s,t,e,i={}){const n=s.keys,o=i.mode==="single";let r,a,l,c;if(t!==null){for(r=0,a=n.length;r<a;++r){if(l=+n[r],l===e){if(i.all)continue;break}c=s.values[l],rt(c)&&(o||t===0||Ee(t)===Ee(c))&&(t+=c)}return t}}function cD(s){const t=Object.keys(s),e=new Array(t.length);let i,n,o;for(i=0,n=t.length;i<n;++i)o=t[i],e[i]={x:o,y:s[o]};return e}function b_(s,t){const e=s&&s.options.stacked;return e||e===void 0&&t.stack!==void 0}function hD(s,t,e){return`${s.id}.${t.id}.${e.stack||e.type}`}function dD(s){const{min:t,max:e,minDefined:i,maxDefined:n}=s.getUserBounds();return{min:i?t:Number.NEGATIVE_INFINITY,max:n?e:Number.POSITIVE_INFINITY}}function uD(s,t,e){const i=s[t]||(s[t]={});return i[e]||(i[e]={})}function v_(s,t,e,i){for(const n of t.getMatchingVisibleMetas(i).reverse()){const o=s[n.index];if(e&&o>0||!e&&o<0)return n.index}return null}function y_(s,t){const{chart:e,_cachedMeta:i}=s,n=e._stacks||(e._stacks={}),{iScale:o,vScale:r,index:a}=i,l=o.axis,c=r.axis,h=hD(o,r,i),d=t.length;let u;for(let p=0;p<d;++p){const f=t[p],{[l]:b,[c]:v}=f,y=f._stacks||(f._stacks={});u=y[c]=uD(n,h,b),u[a]=v,u._top=v_(u,r,!0,i.type),u._bottom=v_(u,r,!1,i.type)}}function Nc(s,t){const e=s.scales;return Object.keys(e).filter(i=>e[i].axis===t).shift()}function pD(s,t){return ni(s,{active:!1,dataset:void 0,datasetIndex:t,index:t,mode:"default",type:"dataset"})}function fD(s,t,e){return ni(s,{active:!1,dataIndex:t,parsed:void 0,raw:void 0,element:e,index:t,mode:"default",type:"data"})}function Hn(s,t){const e=s.controller.index,i=s.vScale&&s.vScale.axis;if(i){t=t||s._parsed;for(const n of t){const o=n._stacks;if(!o||o[i]===void 0||o[i][e]===void 0)return;delete o[i][e]}}}const Bc=s=>s==="reset"||s==="none",T_=(s,t)=>t?s:Object.assign({},s),_D=(s,t,e)=>s&&!t.hidden&&t._stacked&&{keys:g_(e,!0),values:null};class Ut{constructor(t,e){this.chart=t,this._ctx=t.ctx,this.index=e,this._cachedDataOpts={},this._cachedMeta=this.getMeta(),this._type=this._cachedMeta.type,this.options=void 0,this._parsing=!1,this._data=void 0,this._objectData=void 0,this._sharedOptions=void 0,this._drawStart=void 0,this._drawCount=void 0,this.enableOptionSharing=!1,this.supportsDecimation=!1,this.$context=void 0,this._syncList=[],this.initialize()}initialize(){const t=this._cachedMeta;this.configure(),this.linkScales(),t._stacked=b_(t.vScale,t),this.addElements()}updateIndex(t){this.index!==t&&Hn(this._cachedMeta),this.index=t}linkScales(){const t=this.chart,e=this._cachedMeta,i=this.getDataset(),n=(d,u,p,f)=>d==="x"?u:d==="r"?f:p,o=e.xAxisID=B(i.xAxisID,Nc(t,"x")),r=e.yAxisID=B(i.yAxisID,Nc(t,"y")),a=e.rAxisID=B(i.rAxisID,Nc(t,"r")),l=e.indexAxis,c=e.iAxisID=n(l,o,r,a),h=e.vAxisID=n(l,r,o,a);e.xScale=this.getScaleForId(o),e.yScale=this.getScaleForId(r),e.rScale=this.getScaleForId(a),e.iScale=this.getScaleForId(c),e.vScale=this.getScaleForId(h)}getDataset(){return this.chart.data.datasets[this.index]}getMeta(){return this.chart.getDatasetMeta(this.index)}getScaleForId(t){return this.chart.scales[t]}_getOtherScale(t){const e=this._cachedMeta;return t===e.iScale?e.vScale:e.iScale}reset(){this._update("reset")}_destroy(){const t=this._cachedMeta;this._data&&wf(this._data,this),t._stacked&&Hn(t)}_dataCheck(){const t=this.getDataset(),e=t.data||(t.data=[]),i=this._data;if(V(e))this._data=cD(e);else if(i!==e){if(i){wf(i,this);const n=this._cachedMeta;Hn(n),n._parsed=[]}e&&Object.isExtensible(e)&&NO(e,this),this._syncList=[],this._data=e}}addElements(){const t=this._cachedMeta;this._dataCheck(),this.datasetElementType&&(t.dataset=new this.datasetElementType)}buildOrUpdateElements(t){const e=this._cachedMeta,i=this.getDataset();let n=!1;this._dataCheck();const o=e._stacked;e._stacked=b_(e.vScale,e),e.stack!==i.stack&&(n=!0,Hn(e),e.stack=i.stack),this._resyncElements(t),(n||o!==e._stacked)&&y_(this,e._parsed)}configure(){const t=this.chart.config,e=t.datasetScopeKeys(this._type),i=t.getOptionScopes(this.getDataset(),e,!0);this.options=t.createResolver(i,this.getContext()),this._parsing=this.options.parsing,this._cachedDataOpts={}}parse(t,e){const{_cachedMeta:i,_data:n}=this,{iScale:o,_stacked:r}=i,a=o.axis;let l=t===0&&e===n.length?!0:i._sorted,c=t>0&&i._parsed[t-1],h,d,u;if(this._parsing===!1)i._parsed=n,i._sorted=!0,u=n;else{Q(n[t])?u=this.parseArrayData(i,n,t,e):V(n[t])?u=this.parseObjectData(i,n,t,e):u=this.parsePrimitiveData(i,n,t,e);const p=()=>d[a]===null||c&&d[a]<c[a];for(h=0;h<e;++h)i._parsed[h+t]=d=u[h],l&&(p()&&(l=!1),c=d);i._sorted=l}r&&y_(this,u)}parsePrimitiveData(t,e,i,n){const{iScale:o,vScale:r}=t,a=o.axis,l=r.axis,c=o.getLabels(),h=o===r,d=new Array(n);let u,p,f;for(u=0,p=n;u<p;++u)f=u+i,d[u]={[a]:h||o.parse(c[f],f),[l]:r.parse(e[f],f)};return d}parseArrayData(t,e,i,n){const{xScale:o,yScale:r}=t,a=new Array(n);let l,c,h,d;for(l=0,c=n;l<c;++l)h=l+i,d=e[h],a[l]={x:o.parse(d[0],h),y:r.parse(d[1],h)};return a}parseObjectData(t,e,i,n){const{xScale:o,yScale:r}=t,{xAxisKey:a="x",yAxisKey:l="y"}=this._parsing,c=new Array(n);let h,d,u,p;for(h=0,d=n;h<d;++h)u=h+i,p=e[u],c[h]={x:o.parse(ti(p,a),u),y:r.parse(ti(p,l),u)};return c}getParsed(t){return this._cachedMeta._parsed[t]}getDataElement(t){return this._cachedMeta.data[t]}applyStack(t,e,i){const n=this.chart,o=this._cachedMeta,r=e[t.axis],a={keys:g_(n,!0),values:e._stacks[t.axis]};return m_(a,r,o.index,{mode:i})}updateRangeFromParsed(t,e,i,n){const o=i[e.axis];let r=o===null?NaN:o;const a=n&&i._stacks[e.axis];n&&a&&(n.values=a,r=m_(n,o,this._cachedMeta.index)),t.min=Math.min(t.min,r),t.max=Math.max(t.max,r)}getMinMax(t,e){const i=this._cachedMeta,n=i._parsed,o=i._sorted&&t===i.iScale,r=n.length,a=this._getOtherScale(t),l=_D(e,i,this.chart),c={min:Number.POSITIVE_INFINITY,max:Number.NEGATIVE_INFINITY},{min:h,max:d}=dD(a);let u,p;function f(){p=n[u];const b=p[a.axis];return!rt(p[t.axis])||h>b||d<b}for(u=0;u<r&&!(!f()&&(this.updateRangeFromParsed(c,t,p,l),o));++u);if(o){for(u=r-1;u>=0;--u)if(!f()){this.updateRangeFromParsed(c,t,p,l);break}}return c}getAllParsedValues(t){const e=this._cachedMeta._parsed,i=[];let n,o,r;for(n=0,o=e.length;n<o;++n)r=e[n][t.axis],rt(r)&&i.push(r);return i}getMaxOverflow(){return!1}getLabelAndValue(t){const e=this._cachedMeta,i=e.iScale,n=e.vScale,o=this.getParsed(t);return{label:i?""+i.getLabelForValue(o[i.axis]):"",value:n?""+n.getLabelForValue(o[n.axis]):""}}_update(t){const e=this._cachedMeta;this.update(t||"default"),e._clip=lD(B(this.options.clip,aD(e.xScale,e.yScale,this.getMaxOverflow())))}update(t){}draw(){const t=this._ctx,e=this.chart,i=this._cachedMeta,n=i.data||[],o=e.chartArea,r=[],a=this._drawStart||0,l=this._drawCount||n.length-a,c=this.options.drawActiveElementsOnTop;let h;for(i.dataset&&i.dataset.draw(t,o,a,l),h=a;h<a+l;++h){const d=n[h];d.hidden||(d.active&&c?r.push(d):d.draw(t,o))}for(h=0;h<r.length;++h)r[h].draw(t,o)}getStyle(t,e){const i=e?"active":"default";return t===void 0&&this._cachedMeta.dataset?this.resolveDatasetElementOptions(i):this.resolveDataElementOptions(t||0,i)}getContext(t,e,i){const n=this.getDataset();let o;if(t>=0&&t<this._cachedMeta.data.length){const r=this._cachedMeta.data[t];o=r.$context||(r.$context=fD(this.getContext(),t,r)),o.parsed=this.getParsed(t),o.raw=n.data[t],o.index=o.dataIndex=t}else o=this.$context||(this.$context=pD(this.chart.getContext(),this.index)),o.dataset=n,o.index=o.datasetIndex=this.index;return o.active=!!e,o.mode=i,o}resolveDatasetElementOptions(t){return this._resolveElementOptions(this.datasetElementType.id,t)}resolveDataElementOptions(t,e){return this._resolveElementOptions(this.dataElementType.id,e,t)}_resolveElementOptions(t,e="default",i){const n=e==="active",o=this._cachedDataOpts,r=t+"-"+e,a=o[r],l=this.enableOptionSharing&&jt(i);if(a)return T_(a,l);const c=this.chart.config,h=c.datasetElementScopeKeys(this._type,t),d=n?[`${t}Hover`,"hover",t,""]:[t,""],u=c.getOptionScopes(this.getDataset(),h),p=Object.keys(F.elements[t]),f=()=>this.getContext(i,n),b=c.resolveNamedOptions(u,p,f,d);return b.$shared&&(b.$shared=l,o[r]=Object.freeze(T_(b,l))),b}_resolveAnimations(t,e,i){const n=this.chart,o=this._cachedDataOpts,r=`animation-${e}`,a=o[r];if(a)return a;let l;if(n.options.animation!==!1){const h=this.chart.config,d=h.datasetAnimationScopeKeys(this._type,e),u=h.getOptionScopes(this.getDataset(),d);l=h.createResolver(u,this.getContext(t,i,e))}const c=new Pc(n,l&&l.animations);return l&&l._cacheable&&(o[r]=Object.freeze(c)),c}getSharedOptions(t){if(t.$shared)return this._sharedOptions||(this._sharedOptions=Object.assign({},t))}includeOptions(t,e){return!e||Bc(t)||this.chart._animationsDisabled}_getSharedOptions(t,e){const i=this.resolveDataElementOptions(t,e),n=this._sharedOptions,o=this.getSharedOptions(i),r=this.includeOptions(e,o)||o!==n;return this.updateSharedOptions(o,e,i),{sharedOptions:o,includeOptions:r}}updateElement(t,e,i,n){Bc(n)?Object.assign(t,i):this._resolveAnimations(e,n).update(t,i)}updateSharedOptions(t,e,i){t&&!Bc(e)&&this._resolveAnimations(void 0,e).update(t,i)}_setStyle(t,e,i,n){t.active=n;const o=this.getStyle(e,n);this._resolveAnimations(e,i,n).update(t,{options:!n&&this.getSharedOptions(o)||o})}removeHoverStyle(t,e,i){this._setStyle(t,i,"active",!1)}setHoverStyle(t,e,i){this._setStyle(t,i,"active",!0)}_removeDatasetHoverStyle(){const t=this._cachedMeta.dataset;t&&this._setStyle(t,void 0,"active",!1)}_setDatasetHoverStyle(){const t=this._cachedMeta.dataset;t&&this._setStyle(t,void 0,"active",!0)}_resyncElements(t){const e=this._data,i=this._cachedMeta.data;for(const[a,l,c]of this._syncList)this[a](l,c);this._syncList=[];const n=i.length,o=e.length,r=Math.min(o,n);r&&this.parse(0,r),o>n?this._insertElements(n,o-n,t):o<n&&this._removeElements(o,n-o)}_insertElements(t,e,i=!0){const n=this._cachedMeta,o=n.data,r=t+e;let a;const l=c=>{for(c.length+=e,a=c.length-1;a>=r;a--)c[a]=c[a-e]};for(l(o),a=t;a<r;++a)o[a]=new this.dataElementType;this._parsing&&l(n._parsed),this.parse(t,e),i&&this.updateElements(o,t,e,"reset")}updateElements(t,e,i,n){}_removeElements(t,e){const i=this._cachedMeta;if(this._parsing){const n=i._parsed.splice(t,e);i._stacked&&Hn(i,n)}i.data.splice(t,e)}_sync(t){if(this._parsing)this._syncList.push(t);else{const[e,i,n]=t;this[e](i,n)}this.chart._dataChanges.push([this.index,...t])}_onDataPush(){const t=arguments.length;this._sync(["_insertElements",this.getDataset().data.length-t,t])}_onDataPop(){this._sync(["_removeElements",this._cachedMeta.data.length-1,1])}_onDataShift(){this._sync(["_removeElements",0,1])}_onDataSplice(t,e){e&&this._sync(["_removeElements",t,e]);const i=arguments.length-2;i&&this._sync(["_insertElements",t,i])}_onDataUnshift(){this._sync(["_insertElements",0,arguments.length])}}Ut.defaults={},Ut.prototype.datasetElementType=null,Ut.prototype.dataElementType=null;function gD(s,t){if(!s._cache.$bar){const e=s.getMatchingVisibleMetas(t);let i=[];for(let n=0,o=e.length;n<o;n++)i=i.concat(e[n].controller.getAllParsedValues(s));s._cache.$bar=kf(i.sort((n,o)=>n-o))}return s._cache.$bar}function mD(s){const t=s.iScale,e=gD(t,s.type);let i=t._length,n,o,r,a;const l=()=>{r===32767||r===-32768||(jt(a)&&(i=Math.min(i,Math.abs(r-a)||i)),a=r)};for(n=0,o=e.length;n<o;++n)r=t.getPixelForValue(e[n]),l();for(a=void 0,n=0,o=t.ticks.length;n<o;++n)r=t.getPixelForTick(n),l();return i}function bD(s,t,e,i){const n=e.barThickness;let o,r;return H(n)?(o=t.min*e.categoryPercentage,r=e.barPercentage):(o=n*i,r=1),{chunk:o/i,ratio:r,start:t.pixels[s]-o/2}}function vD(s,t,e,i){const n=t.pixels,o=n[s];let r=s>0?n[s-1]:null,a=s<n.length-1?n[s+1]:null;const l=e.categoryPercentage;r===null&&(r=o-(a===null?t.end-t.start:a-o)),a===null&&(a=o+o-r);const c=o-(o-Math.min(r,a))/2*l;return{chunk:Math.abs(a-r)/2*l/i,ratio:e.barPercentage,start:c}}function yD(s,t,e,i){const n=e.parse(s[0],i),o=e.parse(s[1],i),r=Math.min(n,o),a=Math.max(n,o);let l=r,c=a;Math.abs(r)>Math.abs(a)&&(l=a,c=r),t[e.axis]=c,t._custom={barStart:l,barEnd:c,start:n,end:o,min:r,max:a}}function E_(s,t,e,i){return Q(s)?yD(s,t,e,i):t[e.axis]=e.parse(s,i),t}function x_(s,t,e,i){const n=s.iScale,o=s.vScale,r=n.getLabels(),a=n===o,l=[];let c,h,d,u;for(c=e,h=e+i;c<h;++c)u=t[c],d={},d[n.axis]=a||n.parse(r[c],c),l.push(E_(u,d,o,c));return l}function Hc(s){return s&&s.barStart!==void 0&&s.barEnd!==void 0}function TD(s,t,e){return s!==0?Ee(s):(t.isHorizontal()?1:-1)*(t.min>=e?1:-1)}function ED(s){let t,e,i,n,o;return s.horizontal?(t=s.base>s.x,e="left",i="right"):(t=s.base<s.y,e="bottom",i="top"),t?(n="end",o="start"):(n="start",o="end"),{start:e,end:i,reverse:t,top:n,bottom:o}}function xD(s,t,e,i){let n=t.borderSkipped;const o={};if(!n){s.borderSkipped=o;return}if(n===!0){s.borderSkipped={top:!0,right:!0,bottom:!0,left:!0};return}const{start:r,end:a,reverse:l,top:c,bottom:h}=ED(s);n==="middle"&&e&&(s.enableBorderRadius=!0,(e._top||0)===i?n=c:(e._bottom||0)===i?n=h:(o[C_(h,r,a,l)]=!0,n=c)),o[C_(n,r,a,l)]=!0,s.borderSkipped=o}function C_(s,t,e,i){return i?(s=CD(s,t,e),s=A_(s,e,t)):s=A_(s,t,e),s}function CD(s,t,e){return s===t?e:s===e?t:s}function A_(s,t,e){return s==="start"?t:s==="end"?e:s}function AD(s,{inflateAmount:t},e){s.inflateAmount=t==="auto"?e===1?.33:0:t}class Vn extends Ut{parsePrimitiveData(t,e,i,n){return x_(t,e,i,n)}parseArrayData(t,e,i,n){return x_(t,e,i,n)}parseObjectData(t,e,i,n){const{iScale:o,vScale:r}=t,{xAxisKey:a="x",yAxisKey:l="y"}=this._parsing,c=o.axis==="x"?a:l,h=r.axis==="x"?a:l,d=[];let u,p,f,b;for(u=i,p=i+n;u<p;++u)b=e[u],f={},f[o.axis]=o.parse(ti(b,c),u),d.push(E_(ti(b,h),f,r,u));return d}updateRangeFromParsed(t,e,i,n){super.updateRangeFromParsed(t,e,i,n);const o=i._custom;o&&e===this._cachedMeta.vScale&&(t.min=Math.min(t.min,o.min),t.max=Math.max(t.max,o.max))}getMaxOverflow(){return 0}getLabelAndValue(t){const e=this._cachedMeta,{iScale:i,vScale:n}=e,o=this.getParsed(t),r=o._custom,a=Hc(r)?"["+r.start+", "+r.end+"]":""+n.getLabelForValue(o[n.axis]);return{label:""+i.getLabelForValue(o[i.axis]),value:a}}initialize(){this.enableOptionSharing=!0,super.initialize();const t=this._cachedMeta;t.stack=this.getDataset().stack}update(t){const e=this._cachedMeta;this.updateElements(e.data,0,e.data.length,t)}updateElements(t,e,i,n){const o=n==="reset",{index:r,_cachedMeta:{vScale:a}}=this,l=a.getBasePixel(),c=a.isHorizontal(),h=this._getRuler(),{sharedOptions:d,includeOptions:u}=this._getSharedOptions(e,n);for(let p=e;p<e+i;p++){const f=this.getParsed(p),b=o||H(f[a.axis])?{base:l,head:l}:this._calculateBarValuePixels(p),v=this._calculateBarIndexPixels(p,h),y=(f._stacks||{})[a.axis],T={horizontal:c,base:b.base,enableBorderRadius:!y||Hc(f._custom)||r===y._top||r===y._bottom,x:c?b.head:v.center,y:c?v.center:b.head,height:c?v.size:Math.abs(b.size),width:c?Math.abs(b.size):v.size};u&&(T.options=d||this.resolveDataElementOptions(p,t[p].active?"active":n));const x=T.options||t[p].options;xD(T,x,y,r),AD(T,x,h.ratio),this.updateElement(t[p],p,T,n)}}_getStacks(t,e){const{iScale:i}=this._cachedMeta,n=i.getMatchingVisibleMetas(this._type).filter(l=>l.controller.options.grouped),o=i.options.stacked,r=[],a=l=>{const c=l.controller.getParsed(e),h=c&&c[l.vScale.axis];if(H(h)||isNaN(h))return!0};for(const l of n)if(!(e!==void 0&&a(l))&&((o===!1||r.indexOf(l.stack)===-1||o===void 0&&l.stack===void 0)&&r.push(l.stack),l.index===t))break;return r.length||r.push(void 0),r}_getStackCount(t){return this._getStacks(void 0,t).length}_getStackIndex(t,e,i){const n=this._getStacks(t,i),o=e!==void 0?n.indexOf(e):-1;return o===-1?n.length-1:o}_getRuler(){const t=this.options,e=this._cachedMeta,i=e.iScale,n=[];let o,r;for(o=0,r=e.data.length;o<r;++o)n.push(i.getPixelForValue(this.getParsed(o)[i.axis],o));const a=t.barThickness;return{min:a||mD(e),pixels:n,start:i._startPixel,end:i._endPixel,stackCount:this._getStackCount(),scale:i,grouped:t.grouped,ratio:a?1:t.categoryPercentage*t.barPercentage}}_calculateBarValuePixels(t){const{_cachedMeta:{vScale:e,_stacked:i},options:{base:n,minBarLength:o}}=this,r=n||0,a=this.getParsed(t),l=a._custom,c=Hc(l);let h=a[e.axis],d=0,u=i?this.applyStack(e,a,i):h,p,f;u!==h&&(d=u-h,u=h),c&&(h=l.barStart,u=l.barEnd-l.barStart,h!==0&&Ee(h)!==Ee(l.barEnd)&&(d=0),d+=h);const b=!H(n)&&!c?n:d;let v=e.getPixelForValue(b);if(this.chart.getDataVisibility(t)?p=e.getPixelForValue(d+u):p=v,f=p-v,Math.abs(f)<o){f=TD(f,e,r)*o,h===r&&(v-=f/2);const y=e.getPixelForDecimal(0),T=e.getPixelForDecimal(1),x=Math.min(y,T),E=Math.max(y,T);v=Math.max(Math.min(v,E),x),p=v+f}if(v===e.getPixelForValue(r)){const y=Ee(f)*e.getLineWidthForValue(r)/2;v+=y,f-=y}return{size:f,base:v,head:p,center:p+f/2}}_calculateBarIndexPixels(t,e){const i=e.scale,n=this.options,o=n.skipNull,r=B(n.maxBarThickness,1/0);let a,l;if(e.grouped){const c=o?this._getStackCount(t):e.stackCount,h=n.barThickness==="flex"?vD(t,e,n,c):bD(t,e,n,c),d=this._getStackIndex(this.index,this._cachedMeta.stack,o?t:void 0);a=h.start+h.chunk*d+h.chunk/2,l=Math.min(r,h.chunk*h.ratio)}else a=i.getPixelForValue(this.getParsed(t)[i.axis],t),l=Math.min(r,e.min*e.ratio);return{base:a-l/2,head:a+l/2,center:a,size:l}}draw(){const t=this._cachedMeta,e=t.vScale,i=t.data,n=i.length;let o=0;for(;o<n;++o)this.getParsed(o)[e.axis]!==null&&i[o].draw(this._ctx)}}Vn.id="bar",Vn.defaults={datasetElementType:!1,dataElementType:"bar",categoryPercentage:.8,barPercentage:.9,grouped:!0,animations:{numbers:{type:"number",properties:["x","y","base","width","height"]}}},Vn.overrides={scales:{_index_:{type:"category",offset:!0,grid:{offset:!0}},_value_:{type:"linear",beginAtZero:!0}}};class Fn extends Ut{initialize(){this.enableOptionSharing=!0,super.initialize()}parsePrimitiveData(t,e,i,n){const o=super.parsePrimitiveData(t,e,i,n);for(let r=0;r<o.length;r++)o[r]._custom=this.resolveDataElementOptions(r+i).radius;return o}parseArrayData(t,e,i,n){const o=super.parseArrayData(t,e,i,n);for(let r=0;r<o.length;r++){const a=e[i+r];o[r]._custom=B(a[2],this.resolveDataElementOptions(r+i).radius)}return o}parseObjectData(t,e,i,n){const o=super.parseObjectData(t,e,i,n);for(let r=0;r<o.length;r++){const a=e[i+r];o[r]._custom=B(a&&a.r&&+a.r,this.resolveDataElementOptions(r+i).radius)}return o}getMaxOverflow(){const t=this._cachedMeta.data;let e=0;for(let i=t.length-1;i>=0;--i)e=Math.max(e,t[i].size(this.resolveDataElementOptions(i))/2);return e>0&&e}getLabelAndValue(t){const e=this._cachedMeta,{xScale:i,yScale:n}=e,o=this.getParsed(t),r=i.getLabelForValue(o.x),a=n.getLabelForValue(o.y),l=o._custom;return{label:e.label,value:"("+r+", "+a+(l?", "+l:"")+")"}}update(t){const e=this._cachedMeta.data;this.updateElements(e,0,e.length,t)}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a}=this._cachedMeta,{sharedOptions:l,includeOptions:c}=this._getSharedOptions(e,n),h=r.axis,d=a.axis;for(let u=e;u<e+i;u++){const p=t[u],f=!o&&this.getParsed(u),b={},v=b[h]=o?r.getPixelForDecimal(.5):r.getPixelForValue(f[h]),y=b[d]=o?a.getBasePixel():a.getPixelForValue(f[d]);b.skip=isNaN(v)||isNaN(y),c&&(b.options=l||this.resolveDataElementOptions(u,p.active?"active":n),o&&(b.options.radius=0)),this.updateElement(p,u,b,n)}}resolveDataElementOptions(t,e){const i=this.getParsed(t);let n=super.resolveDataElementOptions(t,e);n.$shared&&(n=Object.assign({},n,{$shared:!1}));const o=n.radius;return e!=="active"&&(n.radius=0),n.radius+=B(i&&i._custom,o),n}}Fn.id="bubble",Fn.defaults={datasetElementType:!1,dataElementType:"point",animations:{numbers:{type:"number",properties:["x","y","borderWidth","radius"]}}},Fn.overrides={scales:{x:{type:"linear"},y:{type:"linear"}},plugins:{tooltip:{callbacks:{title(){return""}}}}};function wD(s,t,e){let i=1,n=1,o=0,r=0;if(t<q){const a=s,l=a+t,c=Math.cos(a),h=Math.sin(a),d=Math.cos(l),u=Math.sin(l),p=(x,E,C)=>Dn(x,a,l,!0)?1:Math.max(E,E*e,C,C*e),f=(x,E,C)=>Dn(x,a,l,!0)?-1:Math.min(E,E*e,C,C*e),b=p(0,c,d),v=p(nt,h,u),y=f(it,c,d),T=f(it+nt,h,u);i=(b-y)/2,n=(v-T)/2,o=-(b+y)/2,r=-(v+T)/2}return{ratioX:i,ratioY:n,offsetX:o,offsetY:r}}class Bi extends Ut{constructor(t,e){super(t,e),this.enableOptionSharing=!0,this.innerRadius=void 0,this.outerRadius=void 0,this.offsetX=void 0,this.offsetY=void 0}linkScales(){}parse(t,e){const i=this.getDataset().data,n=this._cachedMeta;if(this._parsing===!1)n._parsed=i;else{let o=l=>+i[l];if(V(i[t])){const{key:l="value"}=this._parsing;o=c=>+ti(i[c],l)}let r,a;for(r=t,a=t+e;r<a;++r)n._parsed[r]=o(r)}}_getRotation(){return se(this.options.rotation-90)}_getCircumference(){return se(this.options.circumference)}_getRotationExtents(){let t=q,e=-q;for(let i=0;i<this.chart.data.datasets.length;++i)if(this.chart.isDatasetVisible(i)){const n=this.chart.getDatasetMeta(i).controller,o=n._getRotation(),r=n._getCircumference();t=Math.min(t,o),e=Math.max(e,o+r)}return{rotation:t,circumference:e-t}}update(t){const e=this.chart,{chartArea:i}=e,n=this._cachedMeta,o=n.data,r=this.getMaxBorderWidth()+this.getMaxOffset(o)+this.options.spacing,a=Math.max((Math.min(i.width,i.height)-r)/2,0),l=Math.min(xO(this.options.cutout,a),1),c=this._getRingWeight(this.index),{circumference:h,rotation:d}=this._getRotationExtents(),{ratioX:u,ratioY:p,offsetX:f,offsetY:b}=wD(d,h,l),v=(i.width-r)/u,y=(i.height-r)/p,T=Math.max(Math.min(v,y)/2,0),x=gf(this.options.radius,T),E=Math.max(x*l,0),C=(x-E)/this._getVisibleDatasetWeightTotal();this.offsetX=f*x,this.offsetY=b*x,n.total=this.calculateTotal(),this.outerRadius=x-C*this._getRingWeightOffset(this.index),this.innerRadius=Math.max(this.outerRadius-C*c,0),this.updateElements(o,0,o.length,t)}_circumference(t,e){const i=this.options,n=this._cachedMeta,o=this._getCircumference();return e&&i.animation.animateRotate||!this.chart.getDataVisibility(t)||n._parsed[t]===null||n.data[t].hidden?0:this.calculateCircumference(n._parsed[t]*o/q)}updateElements(t,e,i,n){const o=n==="reset",r=this.chart,a=r.chartArea,c=r.options.animation,h=(a.left+a.right)/2,d=(a.top+a.bottom)/2,u=o&&c.animateScale,p=u?0:this.innerRadius,f=u?0:this.outerRadius,{sharedOptions:b,includeOptions:v}=this._getSharedOptions(e,n);let y=this._getRotation(),T;for(T=0;T<e;++T)y+=this._circumference(T,o);for(T=e;T<e+i;++T){const x=this._circumference(T,o),E=t[T],C={x:h+this.offsetX,y:d+this.offsetY,startAngle:y,endAngle:y+x,circumference:x,outerRadius:f,innerRadius:p};v&&(C.options=b||this.resolveDataElementOptions(T,E.active?"active":n)),y+=x,this.updateElement(E,T,C,n)}}calculateTotal(){const t=this._cachedMeta,e=t.data;let i=0,n;for(n=0;n<e.length;n++){const o=t._parsed[n];o!==null&&!isNaN(o)&&this.chart.getDataVisibility(n)&&!e[n].hidden&&(i+=Math.abs(o))}return i}calculateCircumference(t){const e=this._cachedMeta.total;return e>0&&!isNaN(t)?q*(Math.abs(t)/e):0}getLabelAndValue(t){const e=this._cachedMeta,i=this.chart,n=i.data.labels||[],o=Bn(e._parsed[t],i.options.locale);return{label:n[t]||"",value:o}}getMaxBorderWidth(t){let e=0;const i=this.chart;let n,o,r,a,l;if(!t){for(n=0,o=i.data.datasets.length;n<o;++n)if(i.isDatasetVisible(n)){r=i.getDatasetMeta(n),t=r.data,a=r.controller;break}}if(!t)return 0;for(n=0,o=t.length;n<o;++n)l=a.resolveDataElementOptions(n),l.borderAlign!=="inner"&&(e=Math.max(e,l.borderWidth||0,l.hoverBorderWidth||0));return e}getMaxOffset(t){let e=0;for(let i=0,n=t.length;i<n;++i){const o=this.resolveDataElementOptions(i);e=Math.max(e,o.offset||0,o.hoverOffset||0)}return e}_getRingWeightOffset(t){let e=0;for(let i=0;i<t;++i)this.chart.isDatasetVisible(i)&&(e+=this._getRingWeight(i));return e}_getRingWeight(t){return Math.max(B(this.chart.data.datasets[t].weight,1),0)}_getVisibleDatasetWeightTotal(){return this._getRingWeightOffset(this.chart.data.datasets.length)||1}}Bi.id="doughnut",Bi.defaults={datasetElementType:!1,dataElementType:"arc",animation:{animateRotate:!0,animateScale:!1},animations:{numbers:{type:"number",properties:["circumference","endAngle","innerRadius","outerRadius","startAngle","x","y","offset","borderWidth","spacing"]}},cutout:"50%",rotation:0,circumference:360,radius:"100%",spacing:0,indexAxis:"r"},Bi.descriptors={_scriptable:s=>s!=="spacing",_indexable:s=>s!=="spacing"},Bi.overrides={aspectRatio:1,plugins:{legend:{labels:{generateLabels(s){const t=s.data;if(t.labels.length&&t.datasets.length){const{labels:{pointStyle:e}}=s.legend.options;return t.labels.map((i,n)=>{const r=s.getDatasetMeta(0).controller.getStyle(n);return{text:i,fillStyle:r.backgroundColor,strokeStyle:r.borderColor,lineWidth:r.borderWidth,pointStyle:e,hidden:!s.getDataVisibility(n),index:n}})}return[]}},onClick(s,t,e){e.chart.toggleDataVisibility(t.index),e.chart.update()}},tooltip:{callbacks:{title(){return""},label(s){let t=s.label;const e=": "+s.formattedValue;return Q(t)?(t=t.slice(),t[0]+=e):t+=e,t}}}}};class Wn extends Ut{initialize(){this.enableOptionSharing=!0,this.supportsDecimation=!0,super.initialize()}update(t){const e=this._cachedMeta,{dataset:i,data:n=[],_dataset:o}=e,r=this.chart._animationsDisabled;let{start:a,count:l}=If(e,n,r);this._drawStart=a,this._drawCount=l,Df(e)&&(a=0,l=n.length),i._chart=this.chart,i._datasetIndex=this.index,i._decimated=!!o._decimated,i.points=n;const c=this.resolveDatasetElementOptions(t);this.options.showLine||(c.borderWidth=0),c.segment=this.options.segment,this.updateElement(i,void 0,{animated:!r,options:c},t),this.updateElements(n,a,l,t)}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a,_stacked:l,_dataset:c}=this._cachedMeta,{sharedOptions:h,includeOptions:d}=this._getSharedOptions(e,n),u=r.axis,p=a.axis,{spanGaps:f,segment:b}=this.options,v=As(f)?f:Number.POSITIVE_INFINITY,y=this.chart._animationsDisabled||o||n==="none";let T=e>0&&this.getParsed(e-1);for(let x=e;x<e+i;++x){const E=t[x],C=this.getParsed(x),A=y?E:{},w=H(C[p]),S=A[u]=r.getPixelForValue(C[u],x),k=A[p]=o||w?a.getBasePixel():a.getPixelForValue(l?this.applyStack(a,C,l):C[p],x);A.skip=isNaN(S)||isNaN(k)||w,A.stop=x>0&&Math.abs(C[u]-T[u])>v,b&&(A.parsed=C,A.raw=c.data[x]),d&&(A.options=h||this.resolveDataElementOptions(x,E.active?"active":n)),y||this.updateElement(E,x,A,n),T=C}}getMaxOverflow(){const t=this._cachedMeta,e=t.dataset,i=e.options&&e.options.borderWidth||0,n=t.data||[];if(!n.length)return i;const o=n[0].size(this.resolveDataElementOptions(0)),r=n[n.length-1].size(this.resolveDataElementOptions(n.length-1));return Math.max(i,o,r)/2}draw(){const t=this._cachedMeta;t.dataset.updateControlPoints(this.chart.chartArea,t.iScale.axis),super.draw()}}Wn.id="line",Wn.defaults={datasetElementType:"line",dataElementType:"point",showLine:!0,spanGaps:!1},Wn.overrides={scales:{_index_:{type:"category"},_value_:{type:"linear"}}};class zn extends Ut{constructor(t,e){super(t,e),this.innerRadius=void 0,this.outerRadius=void 0}getLabelAndValue(t){const e=this._cachedMeta,i=this.chart,n=i.data.labels||[],o=Bn(e._parsed[t].r,i.options.locale);return{label:n[t]||"",value:o}}parseObjectData(t,e,i,n){return Jf.bind(this)(t,e,i,n)}update(t){const e=this._cachedMeta.data;this._updateRadius(),this.updateElements(e,0,e.length,t)}getMinMax(){const t=this._cachedMeta,e={min:Number.POSITIVE_INFINITY,max:Number.NEGATIVE_INFINITY};return t.data.forEach((i,n)=>{const o=this.getParsed(n).r;!isNaN(o)&&this.chart.getDataVisibility(n)&&(o<e.min&&(e.min=o),o>e.max&&(e.max=o))}),e}_updateRadius(){const t=this.chart,e=t.chartArea,i=t.options,n=Math.min(e.right-e.left,e.bottom-e.top),o=Math.max(n/2,0),r=Math.max(i.cutoutPercentage?o/100*i.cutoutPercentage:1,0),a=(o-r)/t.getVisibleDatasetCount();this.outerRadius=o-a*this.index,this.innerRadius=this.outerRadius-a}updateElements(t,e,i,n){const o=n==="reset",r=this.chart,l=r.options.animation,c=this._cachedMeta.rScale,h=c.xCenter,d=c.yCenter,u=c.getIndexAngle(0)-.5*it;let p=u,f;const b=360/this.countVisibleElements();for(f=0;f<e;++f)p+=this._computeAngle(f,n,b);for(f=e;f<e+i;f++){const v=t[f];let y=p,T=p+this._computeAngle(f,n,b),x=r.getDataVisibility(f)?c.getDistanceFromCenterForValue(this.getParsed(f).r):0;p=T,o&&(l.animateScale&&(x=0),l.animateRotate&&(y=T=u));const E={x:h,y:d,innerRadius:0,outerRadius:x,startAngle:y,endAngle:T,options:this.resolveDataElementOptions(f,v.active?"active":n)};this.updateElement(v,f,E,n)}}countVisibleElements(){const t=this._cachedMeta;let e=0;return t.data.forEach((i,n)=>{!isNaN(this.getParsed(n).r)&&this.chart.getDataVisibility(n)&&e++}),e}_computeAngle(t,e,i){return this.chart.getDataVisibility(t)?se(this.resolveDataElementOptions(t,e).angle||i):0}}zn.id="polarArea",zn.defaults={dataElementType:"arc",animation:{animateRotate:!0,animateScale:!0},animations:{numbers:{type:"number",properties:["x","y","startAngle","endAngle","innerRadius","outerRadius"]}},indexAxis:"r",startAngle:0},zn.overrides={aspectRatio:1,plugins:{legend:{labels:{generateLabels(s){const t=s.data;if(t.labels.length&&t.datasets.length){const{labels:{pointStyle:e}}=s.legend.options;return t.labels.map((i,n)=>{const r=s.getDatasetMeta(0).controller.getStyle(n);return{text:i,fillStyle:r.backgroundColor,strokeStyle:r.borderColor,lineWidth:r.borderWidth,pointStyle:e,hidden:!s.getDataVisibility(n),index:n}})}return[]}},onClick(s,t,e){e.chart.toggleDataVisibility(t.index),e.chart.update()}},tooltip:{callbacks:{title(){return""},label(s){return s.chart.data.labels[s.dataIndex]+": "+s.formattedValue}}}},scales:{r:{type:"radialLinear",angleLines:{display:!1},beginAtZero:!0,grid:{circular:!0},pointLabels:{display:!1},startAngle:0}}};class ea extends Bi{}ea.id="pie",ea.defaults={cutout:0,rotation:0,circumference:360,radius:"100%"};class jn extends Ut{getLabelAndValue(t){const e=this._cachedMeta.vScale,i=this.getParsed(t);return{label:e.getLabels()[t],value:""+e.getLabelForValue(i[e.axis])}}parseObjectData(t,e,i,n){return Jf.bind(this)(t,e,i,n)}update(t){const e=this._cachedMeta,i=e.dataset,n=e.data||[],o=e.iScale.getLabels();if(i.points=n,t!=="resize"){const r=this.resolveDatasetElementOptions(t);this.options.showLine||(r.borderWidth=0);const a={_loop:!0,_fullLoop:o.length===n.length,options:r};this.updateElement(i,void 0,a,t)}this.updateElements(n,0,n.length,t)}updateElements(t,e,i,n){const o=this._cachedMeta.rScale,r=n==="reset";for(let a=e;a<e+i;a++){const l=t[a],c=this.resolveDataElementOptions(a,l.active?"active":n),h=o.getPointPositionForValue(a,this.getParsed(a).r),d=r?o.xCenter:h.x,u=r?o.yCenter:h.y,p={x:d,y:u,angle:h.angle,skip:isNaN(d)||isNaN(u),options:c};this.updateElement(l,a,p,n)}}}jn.id="radar",jn.defaults={datasetElementType:"line",dataElementType:"point",indexAxis:"r",showLine:!0,elements:{line:{fill:"start"}}},jn.overrides={aspectRatio:1,scales:{r:{type:"radialLinear"}}};let Xt=class{constructor(){this.x=void 0,this.y=void 0,this.active=!1,this.options=void 0,this.$animations=void 0}tooltipPosition(t){const{x:e,y:i}=this.getProps(["x","y"],t);return{x:e,y:i}}hasValue(){return As(this.x)&&As(this.y)}getProps(t,e){const i=this.$animations;if(!e||!i)return this;const n={};return t.forEach(o=>{n[o]=i[o]&&i[o].active()?i[o]._to:this[o]}),n}};Xt.defaults={},Xt.defaultRoutes=void 0;const w_={values(s){return Q(s)?s:""+s},numeric(s,t,e){if(s===0)return"0";const i=this.chart.options.locale;let n,o=s;if(e.length>1){const c=Math.max(Math.abs(e[0].value),Math.abs(e[e.length-1].value));(c<1e-4||c>1e15)&&(n="scientific"),o=kD(s,e)}const r=Yt(Math.abs(o)),a=Math.max(Math.min(-1*Math.floor(r),20),0),l={notation:n,minimumFractionDigits:a,maximumFractionDigits:a};return Object.assign(l,this.options.ticks.format),Bn(s,i,l)},logarithmic(s,t,e){if(s===0)return"0";const i=s/Math.pow(10,Math.floor(Yt(s)));return i===1||i===2||i===5?w_.numeric.call(this,s,t,e):""}};function kD(s,t){let e=t.length>3?t[2].value-t[1].value:t[1].value-t[0].value;return Math.abs(e)>=1&&s!==Math.floor(s)&&(e=s-Math.floor(s)),e}var Yn={formatters:w_};F.set("scale",{display:!0,offset:!1,reverse:!1,beginAtZero:!1,bounds:"ticks",grace:0,grid:{display:!0,lineWidth:1,drawBorder:!0,drawOnChartArea:!0,drawTicks:!0,tickLength:8,tickWidth:(s,t)=>t.lineWidth,tickColor:(s,t)=>t.color,offset:!1,borderDash:[],borderDashOffset:0,borderWidth:1},title:{display:!1,text:"",padding:{top:4,bottom:4}},ticks:{minRotation:0,maxRotation:50,mirror:!1,textStrokeWidth:0,textStrokeColor:"",padding:3,display:!0,autoSkip:!0,autoSkipPadding:3,labelOffset:0,callback:Yn.formatters.values,minor:{},major:{},align:"center",crossAlign:"near",showLabelBackdrop:!1,backdropColor:"rgba(255, 255, 255, 0.75)",backdropPadding:2}}),F.route("scale.ticks","color","","color"),F.route("scale.grid","color","","borderColor"),F.route("scale.grid","borderColor","","borderColor"),F.route("scale.title","color","","color"),F.describe("scale",{_fallback:!1,_scriptable:s=>!s.startsWith("before")&&!s.startsWith("after")&&s!=="callback"&&s!=="parser",_indexable:s=>s!=="borderDash"&&s!=="tickBorderDash"}),F.describe("scales",{_fallback:"scale"}),F.describe("scale.ticks",{_scriptable:s=>s!=="backdropPadding"&&s!=="callback",_indexable:s=>s!=="backdropPadding"});function SD(s,t){const e=s.options.ticks,i=e.maxTicksLimit||OD(s),n=e.major.enabled?DD(t):[],o=n.length,r=n[0],a=n[o-1],l=[];if(o>i)return MD(t,l,n,o/i),l;const c=ID(n,t,i);if(o>0){let h,d;const u=o>1?Math.round((a-r)/(o-1)):null;for(ia(t,l,c,H(u)?0:r-u,r),h=0,d=o-1;h<d;h++)ia(t,l,c,n[h],n[h+1]);return ia(t,l,c,a,H(u)?t.length:a+u),l}return ia(t,l,c),l}function OD(s){const t=s.options.offset,e=s._tickSize(),i=s._length/e+(t?0:1),n=s._maxLength/e;return Math.floor(Math.min(i,n))}function ID(s,t,e){const i=LD(s),n=t.length/e;if(!i)return Math.max(n,1);const o=DO(i);for(let r=0,a=o.length-1;r<a;r++){const l=o[r];if(l>n)return l}return Math.max(n,1)}function DD(s){const t=[];let e,i;for(e=0,i=s.length;e<i;e++)s[e].major&&t.push(e);return t}function MD(s,t,e,i){let n=0,o=e[0],r;for(i=Math.ceil(i),r=0;r<s.length;r++)r===o&&(t.push(s[r]),n++,o=e[n*i])}function ia(s,t,e,i,n){const o=B(i,0),r=Math.min(B(n,s.length),s.length);let a=0,l,c,h;for(e=Math.ceil(e),n&&(l=n-i,e=l/Math.floor(l/e)),h=o;h<0;)a++,h=Math.round(o+a*e);for(c=Math.max(o,0);c<r;c++)c===h&&(t.push(s[c]),a++,h=Math.round(o+a*e))}function LD(s){const t=s.length;let e,i;if(t<2)return!1;for(i=s[0],e=1;e<t;++e)if(s[e]-s[e-1]!==i)return!1;return i}const $D=s=>s==="left"?"right":s==="right"?"left":s,k_=(s,t,e)=>t==="top"||t==="left"?s[t]+e:s[t]-e;function S_(s,t){const e=[],i=s.length/t,n=s.length;let o=0;for(;o<n;o+=i)e.push(s[Math.floor(o)]);return e}function RD(s,t,e){const i=s.ticks.length,n=Math.min(t,i-1),o=s._startPixel,r=s._endPixel,a=1e-6;let l=s.getPixelForTick(n),c;if(!(e&&(i===1?c=Math.max(l-o,r-l):t===0?c=(s.getPixelForTick(1)-l)/2:c=(l-s.getPixelForTick(n-1))/2,l+=n<t?c:-c,l<o-a||l>r+a)))return l}function PD(s,t){U(s,e=>{const i=e.gc,n=i.length/2;let o;if(n>t){for(o=0;o<n;++o)delete e.data[i[o]];i.splice(0,n)}})}function Kn(s){return s.drawTicks?s.tickLength:0}function O_(s,t){if(!s.display)return 0;const e=lt(s.font,t),i=pt(s.padding);return(Q(s.text)?s.text.length:1)*e.lineHeight+i.height}function ND(s,t){return ni(s,{scale:t,type:"scale"})}function BD(s,t,e){return ni(s,{tick:e,index:t,type:"tick"})}function HD(s,t,e){let i=yc(s);return(e&&t!=="right"||!e&&t==="right")&&(i=$D(i)),i}function VD(s,t,e,i){const{top:n,left:o,bottom:r,right:a,chart:l}=s,{chartArea:c,scales:h}=l;let d=0,u,p,f;const b=r-n,v=a-o;if(s.isHorizontal()){if(p=gt(i,o,a),V(e)){const y=Object.keys(e)[0],T=e[y];f=h[y].getPixelForValue(T)+b-t}else e==="center"?f=(c.bottom+c.top)/2+b-t:f=k_(s,e,t);u=a-o}else{if(V(e)){const y=Object.keys(e)[0],T=e[y];p=h[y].getPixelForValue(T)-v+t}else e==="center"?p=(c.left+c.right)/2-v+t:p=k_(s,e,t);f=gt(i,r,n),d=e==="left"?-nt:nt}return{titleX:p,titleY:f,maxWidth:u,rotation:d}}class oi extends Xt{constructor(t){super(),this.id=t.id,this.type=t.type,this.options=void 0,this.ctx=t.ctx,this.chart=t.chart,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.width=void 0,this.height=void 0,this._margins={left:0,right:0,top:0,bottom:0},this.maxWidth=void 0,this.maxHeight=void 0,this.paddingTop=void 0,this.paddingBottom=void 0,this.paddingLeft=void 0,this.paddingRight=void 0,this.axis=void 0,this.labelRotation=void 0,this.min=void 0,this.max=void 0,this._range=void 0,this.ticks=[],this._gridLineItems=null,this._labelItems=null,this._labelSizes=null,this._length=0,this._maxLength=0,this._longestTextCache={},this._startPixel=void 0,this._endPixel=void 0,this._reversePixels=!1,this._userMax=void 0,this._userMin=void 0,this._suggestedMax=void 0,this._suggestedMin=void 0,this._ticksLength=0,this._borderValue=0,this._cache={},this._dataLimitsCached=!1,this.$context=void 0}init(t){this.options=t.setContext(this.getContext()),this.axis=t.axis,this._userMin=this.parse(t.min),this._userMax=this.parse(t.max),this._suggestedMin=this.parse(t.suggestedMin),this._suggestedMax=this.parse(t.suggestedMax)}parse(t,e){return t}getUserBounds(){let{_userMin:t,_userMax:e,_suggestedMin:i,_suggestedMax:n}=this;return t=zt(t,Number.POSITIVE_INFINITY),e=zt(e,Number.NEGATIVE_INFINITY),i=zt(i,Number.POSITIVE_INFINITY),n=zt(n,Number.NEGATIVE_INFINITY),{min:zt(t,i),max:zt(e,n),minDefined:rt(t),maxDefined:rt(e)}}getMinMax(t){let{min:e,max:i,minDefined:n,maxDefined:o}=this.getUserBounds(),r;if(n&&o)return{min:e,max:i};const a=this.getMatchingVisibleMetas();for(let l=0,c=a.length;l<c;++l)r=a[l].controller.getMinMax(this,t),n||(e=Math.min(e,r.min)),o||(i=Math.max(i,r.max));return e=o&&e>i?i:e,i=n&&e>i?e:i,{min:zt(e,zt(i,e)),max:zt(i,zt(e,i))}}getPadding(){return{left:this.paddingLeft||0,top:this.paddingTop||0,right:this.paddingRight||0,bottom:this.paddingBottom||0}}getTicks(){return this.ticks}getLabels(){const t=this.chart.data;return this.options.labels||(this.isHorizontal()?t.xLabels:t.yLabels)||t.labels||[]}beforeLayout(){this._cache={},this._dataLimitsCached=!1}beforeUpdate(){G(this.options.beforeUpdate,[this])}update(t,e,i){const{beginAtZero:n,grace:o,ticks:r}=this.options,a=r.sampleSize;this.beforeUpdate(),this.maxWidth=t,this.maxHeight=e,this._margins=i=Object.assign({left:0,right:0,top:0,bottom:0},i),this.ticks=null,this._labelSizes=null,this._gridLineItems=null,this._labelItems=null,this.beforeSetDimensions(),this.setDimensions(),this.afterSetDimensions(),this._maxLength=this.isHorizontal()?this.width+i.left+i.right:this.height+i.top+i.bottom,this._dataLimitsCached||(this.beforeDataLimits(),this.determineDataLimits(),this.afterDataLimits(),this._range=vI(this,o,n),this._dataLimitsCached=!0),this.beforeBuildTicks(),this.ticks=this.buildTicks()||[],this.afterBuildTicks();const l=a<this.ticks.length;this._convertTicksToLabels(l?S_(this.ticks,a):this.ticks),this.configure(),this.beforeCalculateLabelRotation(),this.calculateLabelRotation(),this.afterCalculateLabelRotation(),r.display&&(r.autoSkip||r.source==="auto")&&(this.ticks=SD(this,this.ticks),this._labelSizes=null,this.afterAutoSkip()),l&&this._convertTicksToLabels(this.ticks),this.beforeFit(),this.fit(),this.afterFit(),this.afterUpdate()}configure(){let t=this.options.reverse,e,i;this.isHorizontal()?(e=this.left,i=this.right):(e=this.top,i=this.bottom,t=!t),this._startPixel=e,this._endPixel=i,this._reversePixels=t,this._length=i-e,this._alignToPixels=this.options.alignToPixels}afterUpdate(){G(this.options.afterUpdate,[this])}beforeSetDimensions(){G(this.options.beforeSetDimensions,[this])}setDimensions(){this.isHorizontal()?(this.width=this.maxWidth,this.left=0,this.right=this.width):(this.height=this.maxHeight,this.top=0,this.bottom=this.height),this.paddingLeft=0,this.paddingTop=0,this.paddingRight=0,this.paddingBottom=0}afterSetDimensions(){G(this.options.afterSetDimensions,[this])}_callHooks(t){this.chart.notifyPlugins(t,this.getContext()),G(this.options[t],[this])}beforeDataLimits(){this._callHooks("beforeDataLimits")}determineDataLimits(){}afterDataLimits(){this._callHooks("afterDataLimits")}beforeBuildTicks(){this._callHooks("beforeBuildTicks")}buildTicks(){return[]}afterBuildTicks(){this._callHooks("afterBuildTicks")}beforeTickToLabelConversion(){G(this.options.beforeTickToLabelConversion,[this])}generateTickLabels(t){const e=this.options.ticks;let i,n,o;for(i=0,n=t.length;i<n;i++)o=t[i],o.label=G(e.callback,[o.value,i,t],this)}afterTickToLabelConversion(){G(this.options.afterTickToLabelConversion,[this])}beforeCalculateLabelRotation(){G(this.options.beforeCalculateLabelRotation,[this])}calculateLabelRotation(){const t=this.options,e=t.ticks,i=this.ticks.length,n=e.minRotation||0,o=e.maxRotation;let r=n,a,l,c;if(!this._isVisible()||!e.display||n>=o||i<=1||!this.isHorizontal()){this.labelRotation=n;return}const h=this._getLabelSizes(),d=h.widest.width,u=h.highest.height,p=dt(this.chart.width-d,0,this.maxWidth);a=t.offset?this.maxWidth/i:p/(i-1),d+6>a&&(a=p/(i-(t.offset?.5:1)),l=this.maxHeight-Kn(t.grid)-e.padding-O_(t.title,this.chart.options.font),c=Math.sqrt(d*d+u*u),r=mc(Math.min(Math.asin(dt((h.highest.height+6)/a,-1,1)),Math.asin(dt(l/c,-1,1))-Math.asin(dt(u/c,-1,1)))),r=Math.max(n,Math.min(o,r))),this.labelRotation=r}afterCalculateLabelRotation(){G(this.options.afterCalculateLabelRotation,[this])}afterAutoSkip(){}beforeFit(){G(this.options.beforeFit,[this])}fit(){const t={width:0,height:0},{chart:e,options:{ticks:i,title:n,grid:o}}=this,r=this._isVisible(),a=this.isHorizontal();if(r){const l=O_(n,e.options.font);if(a?(t.width=this.maxWidth,t.height=Kn(o)+l):(t.height=this.maxHeight,t.width=Kn(o)+l),i.display&&this.ticks.length){const{first:c,last:h,widest:d,highest:u}=this._getLabelSizes(),p=i.padding*2,f=se(this.labelRotation),b=Math.cos(f),v=Math.sin(f);if(a){const y=i.mirror?0:v*d.width+b*u.height;t.height=Math.min(this.maxHeight,t.height+y+p)}else{const y=i.mirror?0:b*d.width+v*u.height;t.width=Math.min(this.maxWidth,t.width+y+p)}this._calculatePadding(c,h,v,b)}}this._handleMargins(),a?(this.width=this._length=e.width-this._margins.left-this._margins.right,this.height=t.height):(this.width=t.width,this.height=this._length=e.height-this._margins.top-this._margins.bottom)}_calculatePadding(t,e,i,n){const{ticks:{align:o,padding:r},position:a}=this.options,l=this.labelRotation!==0,c=a!=="top"&&this.axis==="x";if(this.isHorizontal()){const h=this.getPixelForTick(0)-this.left,d=this.right-this.getPixelForTick(this.ticks.length-1);let u=0,p=0;l?c?(u=n*t.width,p=i*e.height):(u=i*t.height,p=n*e.width):o==="start"?p=e.width:o==="end"?u=t.width:o!=="inner"&&(u=t.width/2,p=e.width/2),this.paddingLeft=Math.max((u-h+r)*this.width/(this.width-h),0),this.paddingRight=Math.max((p-d+r)*this.width/(this.width-d),0)}else{let h=e.height/2,d=t.height/2;o==="start"?(h=0,d=t.height):o==="end"&&(h=e.height,d=0),this.paddingTop=h+r,this.paddingBottom=d+r}}_handleMargins(){this._margins&&(this._margins.left=Math.max(this.paddingLeft,this._margins.left),this._margins.top=Math.max(this.paddingTop,this._margins.top),this._margins.right=Math.max(this.paddingRight,this._margins.right),this._margins.bottom=Math.max(this.paddingBottom,this._margins.bottom))}afterFit(){G(this.options.afterFit,[this])}isHorizontal(){const{axis:t,position:e}=this.options;return e==="top"||e==="bottom"||t==="x"}isFullSize(){return this.options.fullSize}_convertTicksToLabels(t){this.beforeTickToLabelConversion(),this.generateTickLabels(t);let e,i;for(e=0,i=t.length;e<i;e++)H(t[e].label)&&(t.splice(e,1),i--,e--);this.afterTickToLabelConversion()}_getLabelSizes(){let t=this._labelSizes;if(!t){const e=this.options.ticks.sampleSize;let i=this.ticks;e<i.length&&(i=S_(i,e)),this._labelSizes=t=this._computeLabelSizes(i,i.length)}return t}_computeLabelSizes(t,e){const{ctx:i,_longestTextCache:n}=this,o=[],r=[];let a=0,l=0,c,h,d,u,p,f,b,v,y,T,x;for(c=0;c<e;++c){if(u=t[c].label,p=this._resolveTickFontOptions(c),i.font=f=p.string,b=n[f]=n[f]||{data:{},gc:[]},v=p.lineHeight,y=T=0,!H(u)&&!Q(u))y=Gr(i,b.data,b.gc,y,u),T=v;else if(Q(u))for(h=0,d=u.length;h<d;++h)x=u[h],!H(x)&&!Q(x)&&(y=Gr(i,b.data,b.gc,y,x),T+=v);o.push(y),r.push(T),a=Math.max(y,a),l=Math.max(T,l)}PD(n,e);const E=o.indexOf(a),C=r.indexOf(l),A=w=>({width:o[w]||0,height:r[w]||0});return{first:A(0),last:A(e-1),widest:A(E),highest:A(C),widths:o,heights:r}}getLabelForValue(t){return t}getPixelForValue(t,e){return NaN}getValueForPixel(t){}getPixelForTick(t){const e=this.ticks;return t<0||t>e.length-1?null:this.getPixelForValue(e[t].value)}getPixelForDecimal(t){this._reversePixels&&(t=1-t);const e=this._startPixel+t*this._length;return $O(this._alignToPixels?Mi(this.chart,e,0):e)}getDecimalForPixel(t){const e=(t-this._startPixel)/this._length;return this._reversePixels?1-e:e}getBasePixel(){return this.getPixelForValue(this.getBaseValue())}getBaseValue(){const{min:t,max:e}=this;return t<0&&e<0?e:t>0&&e>0?t:0}getContext(t){const e=this.ticks||[];if(t>=0&&t<e.length){const i=e[t];return i.$context||(i.$context=BD(this.getContext(),t,i))}return this.$context||(this.$context=ND(this.chart.getContext(),this))}_tickSize(){const t=this.options.ticks,e=se(this.labelRotation),i=Math.abs(Math.cos(e)),n=Math.abs(Math.sin(e)),o=this._getLabelSizes(),r=t.autoSkipPadding||0,a=o?o.widest.width+r:0,l=o?o.highest.height+r:0;return this.isHorizontal()?l*i>a*n?a/i:l/n:l*n<a*i?l/i:a/n}_isVisible(){const t=this.options.display;return t!=="auto"?!!t:this.getMatchingVisibleMetas().length>0}_computeGridLineItems(t){const e=this.axis,i=this.chart,n=this.options,{grid:o,position:r}=n,a=o.offset,l=this.isHorizontal(),h=this.ticks.length+(a?1:0),d=Kn(o),u=[],p=o.setContext(this.getContext()),f=p.drawBorder?p.borderWidth:0,b=f/2,v=function(R){return Mi(i,R,f)};let y,T,x,E,C,A,w,S,k,D,I,M;if(r==="top")y=v(this.bottom),A=this.bottom-d,S=y-b,D=v(t.top)+b,M=t.bottom;else if(r==="bottom")y=v(this.top),D=t.top,M=v(t.bottom)-b,A=y+b,S=this.top+d;else if(r==="left")y=v(this.right),C=this.right-d,w=y-b,k=v(t.left)+b,I=t.right;else if(r==="right")y=v(this.left),k=t.left,I=v(t.right)-b,C=y+b,w=this.left+d;else if(e==="x"){if(r==="center")y=v((t.top+t.bottom)/2+.5);else if(V(r)){const R=Object.keys(r)[0],z=r[R];y=v(this.chart.scales[R].getPixelForValue(z))}D=t.top,M=t.bottom,A=y+b,S=A+d}else if(e==="y"){if(r==="center")y=v((t.left+t.right)/2);else if(V(r)){const R=Object.keys(r)[0],z=r[R];y=v(this.chart.scales[R].getPixelForValue(z))}C=y-b,w=C-d,k=t.left,I=t.right}const P=B(n.ticks.maxTicksLimit,h),X=Math.max(1,Math.ceil(h/P));for(T=0;T<h;T+=X){const R=o.setContext(this.getContext(T)),z=R.lineWidth,Y=R.color,Gt=R.borderDash||[],oe=R.borderDashOffset,re=R.tickWidth,li=R.tickColor,qt=R.tickBorderDash||[],Ae=R.tickBorderDashOffset;x=RD(this,T,a),x!==void 0&&(E=Mi(i,x,z),l?C=w=k=I=E:A=S=D=M=E,u.push({tx1:C,ty1:A,tx2:w,ty2:S,x1:k,y1:D,x2:I,y2:M,width:z,color:Y,borderDash:Gt,borderDashOffset:oe,tickWidth:re,tickColor:li,tickBorderDash:qt,tickBorderDashOffset:Ae}))}return this._ticksLength=h,this._borderValue=y,u}_computeLabelItems(t){const e=this.axis,i=this.options,{position:n,ticks:o}=i,r=this.isHorizontal(),a=this.ticks,{align:l,crossAlign:c,padding:h,mirror:d}=o,u=Kn(i.grid),p=u+h,f=d?-h:p,b=-se(this.labelRotation),v=[];let y,T,x,E,C,A,w,S,k,D,I,M,P="middle";if(n==="top")A=this.bottom-f,w=this._getXAxisLabelAlignment();else if(n==="bottom")A=this.top+f,w=this._getXAxisLabelAlignment();else if(n==="left"){const R=this._getYAxisLabelAlignment(u);w=R.textAlign,C=R.x}else if(n==="right"){const R=this._getYAxisLabelAlignment(u);w=R.textAlign,C=R.x}else if(e==="x"){if(n==="center")A=(t.top+t.bottom)/2+p;else if(V(n)){const R=Object.keys(n)[0],z=n[R];A=this.chart.scales[R].getPixelForValue(z)+p}w=this._getXAxisLabelAlignment()}else if(e==="y"){if(n==="center")C=(t.left+t.right)/2-p;else if(V(n)){const R=Object.keys(n)[0],z=n[R];C=this.chart.scales[R].getPixelForValue(z)}w=this._getYAxisLabelAlignment(u).textAlign}e==="y"&&(l==="start"?P="top":l==="end"&&(P="bottom"));const X=this._getLabelSizes();for(y=0,T=a.length;y<T;++y){x=a[y],E=x.label;const R=o.setContext(this.getContext(y));S=this.getPixelForTick(y)+o.labelOffset,k=this._resolveTickFontOptions(y),D=k.lineHeight,I=Q(E)?E.length:1;const z=I/2,Y=R.color,Gt=R.textStrokeColor,oe=R.textStrokeWidth;let re=w;r?(C=S,w==="inner"&&(y===T-1?re=this.options.reverse?"left":"right":y===0?re=this.options.reverse?"right":"left":re="center"),n==="top"?c==="near"||b!==0?M=-I*D+D/2:c==="center"?M=-X.highest.height/2-z*D+D:M=-X.highest.height+D/2:c==="near"||b!==0?M=D/2:c==="center"?M=X.highest.height/2-z*D:M=X.highest.height-I*D,d&&(M*=-1)):(A=S,M=(1-I)*D/2);let li;if(R.showLabelBackdrop){const qt=pt(R.backdropPadding),Ae=X.heights[y],we=X.widths[y];let Zt=A+M-qt.top,Pe=C-qt.left;switch(P){case"middle":Zt-=Ae/2;break;case"bottom":Zt-=Ae;break}switch(w){case"center":Pe-=we/2;break;case"right":Pe-=we;break}li={left:Pe,top:Zt,width:we+qt.width,height:Ae+qt.height,color:R.backdropColor}}v.push({rotation:b,label:E,font:k,color:Y,strokeColor:Gt,strokeWidth:oe,textOffset:M,textAlign:re,textBaseline:P,translation:[C,A],backdrop:li})}return v}_getXAxisLabelAlignment(){const{position:t,ticks:e}=this.options;if(-se(this.labelRotation))return t==="top"?"left":"right";let n="center";return e.align==="start"?n="left":e.align==="end"?n="right":e.align==="inner"&&(n="inner"),n}_getYAxisLabelAlignment(t){const{position:e,ticks:{crossAlign:i,mirror:n,padding:o}}=this.options,r=this._getLabelSizes(),a=t+o,l=r.widest.width;let c,h;return e==="left"?n?(h=this.right+o,i==="near"?c="left":i==="center"?(c="center",h+=l/2):(c="right",h+=l)):(h=this.right-a,i==="near"?c="right":i==="center"?(c="center",h-=l/2):(c="left",h=this.left)):e==="right"?n?(h=this.left+o,i==="near"?c="right":i==="center"?(c="center",h-=l/2):(c="left",h-=l)):(h=this.left+a,i==="near"?c="left":i==="center"?(c="center",h+=l/2):(c="right",h=this.right)):c="right",{textAlign:c,x:h}}_computeLabelArea(){if(this.options.ticks.mirror)return;const t=this.chart,e=this.options.position;if(e==="left"||e==="right")return{top:0,left:this.left,bottom:t.height,right:this.right};if(e==="top"||e==="bottom")return{top:this.top,left:0,bottom:this.bottom,right:t.width}}drawBackground(){const{ctx:t,options:{backgroundColor:e},left:i,top:n,width:o,height:r}=this;e&&(t.save(),t.fillStyle=e,t.fillRect(i,n,o,r),t.restore())}getLineWidthForValue(t){const e=this.options.grid;if(!this._isVisible()||!e.display)return 0;const n=this.ticks.findIndex(o=>o.value===t);return n>=0?e.setContext(this.getContext(n)).lineWidth:0}drawGrid(t){const e=this.options.grid,i=this.ctx,n=this._gridLineItems||(this._gridLineItems=this._computeGridLineItems(t));let o,r;const a=(l,c,h)=>{!h.width||!h.color||(i.save(),i.lineWidth=h.width,i.strokeStyle=h.color,i.setLineDash(h.borderDash||[]),i.lineDashOffset=h.borderDashOffset,i.beginPath(),i.moveTo(l.x,l.y),i.lineTo(c.x,c.y),i.stroke(),i.restore())};if(e.display)for(o=0,r=n.length;o<r;++o){const l=n[o];e.drawOnChartArea&&a({x:l.x1,y:l.y1},{x:l.x2,y:l.y2},l),e.drawTicks&&a({x:l.tx1,y:l.ty1},{x:l.tx2,y:l.ty2},{color:l.tickColor,width:l.tickWidth,borderDash:l.tickBorderDash,borderDashOffset:l.tickBorderDashOffset})}}drawBorder(){const{chart:t,ctx:e,options:{grid:i}}=this,n=i.setContext(this.getContext()),o=i.drawBorder?n.borderWidth:0;if(!o)return;const r=i.setContext(this.getContext(0)).lineWidth,a=this._borderValue;let l,c,h,d;this.isHorizontal()?(l=Mi(t,this.left,o)-o/2,c=Mi(t,this.right,r)+r/2,h=d=a):(h=Mi(t,this.top,o)-o/2,d=Mi(t,this.bottom,r)+r/2,l=c=a),e.save(),e.lineWidth=n.borderWidth,e.strokeStyle=n.borderColor,e.beginPath(),e.moveTo(l,h),e.lineTo(c,d),e.stroke(),e.restore()}drawLabels(t){if(!this.options.ticks.display)return;const i=this.ctx,n=this._computeLabelArea();n&&qr(i,n);const o=this._labelItems||(this._labelItems=this._computeLabelItems(t));let r,a;for(r=0,a=o.length;r<a;++r){const l=o[r],c=l.font,h=l.label;l.backdrop&&(i.fillStyle=l.backdrop.color,i.fillRect(l.backdrop.left,l.backdrop.top,l.backdrop.width,l.backdrop.height));let d=l.textOffset;Li(i,h,0,d,c,l)}n&&Zr(i)}drawTitle(){const{ctx:t,options:{position:e,title:i,reverse:n}}=this;if(!i.display)return;const o=lt(i.font),r=pt(i.padding),a=i.align;let l=o.lineHeight/2;e==="bottom"||e==="center"||V(e)?(l+=r.bottom,Q(i.text)&&(l+=o.lineHeight*(i.text.length-1))):l+=r.top;const{titleX:c,titleY:h,maxWidth:d,rotation:u}=VD(this,l,e,a);Li(t,i.text,0,0,o,{color:i.color,maxWidth:d,rotation:u,textAlign:HD(a,e,n),textBaseline:"middle",translation:[c,h]})}draw(t){this._isVisible()&&(this.drawBackground(),this.drawGrid(t),this.drawBorder(),this.drawTitle(),this.drawLabels(t))}_layers(){const t=this.options,e=t.ticks&&t.ticks.z||0,i=B(t.grid&&t.grid.z,-1);return!this._isVisible()||this.draw!==oi.prototype.draw?[{z:e,draw:n=>{this.draw(n)}}]:[{z:i,draw:n=>{this.drawBackground(),this.drawGrid(n),this.drawTitle()}},{z:i+1,draw:()=>{this.drawBorder()}},{z:e,draw:n=>{this.drawLabels(n)}}]}getMatchingVisibleMetas(t){const e=this.chart.getSortedVisibleDatasetMetas(),i=this.axis+"AxisID",n=[];let o,r;for(o=0,r=e.length;o<r;++o){const a=e[o];a[i]===this.id&&(!t||a.type===t)&&n.push(a)}return n}_resolveTickFontOptions(t){const e=this.options.ticks.setContext(this.getContext(t));return lt(e.font)}_maxDigits(){const t=this._resolveTickFontOptions(0).lineHeight;return(this.isHorizontal()?this.width:this.height)/t}}class sa{constructor(t,e,i){this.type=t,this.scope=e,this.override=i,this.items=Object.create(null)}isForType(t){return Object.prototype.isPrototypeOf.call(this.type.prototype,t.prototype)}register(t){const e=Object.getPrototypeOf(t);let i;zD(e)&&(i=this.register(e));const n=this.items,o=t.id,r=this.scope+"."+o;if(!o)throw new Error("class does not have id: "+t);return o in n||(n[o]=t,FD(t,r,i),this.override&&F.override(t.id,t.overrides)),r}get(t){return this.items[t]}unregister(t){const e=this.items,i=t.id,n=this.scope;i in e&&delete e[i],n&&i in F[n]&&(delete F[n][i],this.override&&delete Di[i])}}function FD(s,t,e){const i=Te(Object.create(null),[e?F.get(e):{},F.get(t),s.defaults]);F.set(t,i),s.defaultRoutes&&WD(t,s.defaultRoutes),s.descriptors&&F.describe(t,s.descriptors)}function WD(s,t){Object.keys(t).forEach(e=>{const i=e.split("."),n=i.pop(),o=[s].concat(i).join("."),r=t[e].split("."),a=r.pop(),l=r.join(".");F.route(o,n,l,a)})}function zD(s){return"id"in s&&"defaults"in s}class jD{constructor(){this.controllers=new sa(Ut,"datasets",!0),this.elements=new sa(Xt,"elements"),this.plugins=new sa(Object,"plugins"),this.scales=new sa(oi,"scales"),this._typedRegistries=[this.controllers,this.scales,this.elements]}add(...t){this._each("register",t)}remove(...t){this._each("unregister",t)}addControllers(...t){this._each("register",t,this.controllers)}addElements(...t){this._each("register",t,this.elements)}addPlugins(...t){this._each("register",t,this.plugins)}addScales(...t){this._each("register",t,this.scales)}getController(t){return this._get(t,this.controllers,"controller")}getElement(t){return this._get(t,this.elements,"element")}getPlugin(t){return this._get(t,this.plugins,"plugin")}getScale(t){return this._get(t,this.scales,"scale")}removeControllers(...t){this._each("unregister",t,this.controllers)}removeElements(...t){this._each("unregister",t,this.elements)}removePlugins(...t){this._each("unregister",t,this.plugins)}removeScales(...t){this._each("unregister",t,this.scales)}_each(t,e,i){[...e].forEach(n=>{const o=i||this._getRegistryForType(n);i||o.isForType(n)||o===this.plugins&&n.id?this._exec(t,o,n):U(n,r=>{const a=i||this._getRegistryForType(r);this._exec(t,a,r)})})}_exec(t,e,i){const n=gc(t);G(i["before"+n],[],i),e[t](i),G(i["after"+n],[],i)}_getRegistryForType(t){for(let e=0;e<this._typedRegistries.length;e++){const i=this._typedRegistries[e];if(i.isForType(t))return i}return this.plugins}_get(t,e,i){const n=e.get(t);if(n===void 0)throw new Error('"'+t+'" is not a registered '+i+".");return n}}var ne=new jD;class Un extends Ut{update(t){const e=this._cachedMeta,{data:i=[]}=e,n=this.chart._animationsDisabled;let{start:o,count:r}=If(e,i,n);if(this._drawStart=o,this._drawCount=r,Df(e)&&(o=0,r=i.length),this.options.showLine){const{dataset:a,_dataset:l}=e;a._chart=this.chart,a._datasetIndex=this.index,a._decimated=!!l._decimated,a.points=i;const c=this.resolveDatasetElementOptions(t);c.segment=this.options.segment,this.updateElement(a,void 0,{animated:!n,options:c},t)}this.updateElements(i,o,r,t)}addElements(){const{showLine:t}=this.options;!this.datasetElementType&&t&&(this.datasetElementType=ne.getElement("line")),super.addElements()}updateElements(t,e,i,n){const o=n==="reset",{iScale:r,vScale:a,_stacked:l,_dataset:c}=this._cachedMeta,h=this.resolveDataElementOptions(e,n),d=this.getSharedOptions(h),u=this.includeOptions(n,d),p=r.axis,f=a.axis,{spanGaps:b,segment:v}=this.options,y=As(b)?b:Number.POSITIVE_INFINITY,T=this.chart._animationsDisabled||o||n==="none";let x=e>0&&this.getParsed(e-1);for(let E=e;E<e+i;++E){const C=t[E],A=this.getParsed(E),w=T?C:{},S=H(A[f]),k=w[p]=r.getPixelForValue(A[p],E),D=w[f]=o||S?a.getBasePixel():a.getPixelForValue(l?this.applyStack(a,A,l):A[f],E);w.skip=isNaN(k)||isNaN(D)||S,w.stop=E>0&&Math.abs(A[p]-x[p])>y,v&&(w.parsed=A,w.raw=c.data[E]),u&&(w.options=d||this.resolveDataElementOptions(E,C.active?"active":n)),T||this.updateElement(C,E,w,n),x=A}this.updateSharedOptions(d,n,h)}getMaxOverflow(){const t=this._cachedMeta,e=t.data||[];if(!this.options.showLine){let a=0;for(let l=e.length-1;l>=0;--l)a=Math.max(a,e[l].size(this.resolveDataElementOptions(l))/2);return a>0&&a}const i=t.dataset,n=i.options&&i.options.borderWidth||0;if(!e.length)return n;const o=e[0].size(this.resolveDataElementOptions(0)),r=e[e.length-1].size(this.resolveDataElementOptions(e.length-1));return Math.max(n,o,r)/2}}Un.id="scatter",Un.defaults={datasetElementType:!1,dataElementType:"point",showLine:!1,fill:!1},Un.overrides={interaction:{mode:"point"},plugins:{tooltip:{callbacks:{title(){return""},label(s){return"("+s.label+", "+s.formattedValue+")"}}}},scales:{x:{type:"linear"},y:{type:"linear"}}};var I_=Object.freeze({__proto__:null,BarController:Vn,BubbleController:Fn,DoughnutController:Bi,LineController:Wn,PolarAreaController:zn,PieController:ea,RadarController:jn,ScatterController:Un});function Hi(){throw new Error("This method is not implemented: Check that a complete date adapter is provided.")}class Vc{constructor(t){this.options=t||{}}init(t){}formats(){return Hi()}parse(t,e){return Hi()}format(t,e){return Hi()}add(t,e,i){return Hi()}diff(t,e,i){return Hi()}startOf(t,e,i){return Hi()}endOf(t,e){return Hi()}}Vc.override=function(s){Object.assign(Vc.prototype,s)};var D_={_date:Vc};function YD(s,t,e,i){const{controller:n,data:o,_sorted:r}=s,a=n._cachedMeta.iScale;if(a&&t===a.axis&&t!=="r"&&r&&o.length){const l=a._reversePixels?RO:De;if(i){if(n._sharedOptions){const c=o[0],h=typeof c.getRange=="function"&&c.getRange(t);if(h){const d=l(o,t,e-h),u=l(o,t,e+h);return{lo:d.lo,hi:u.hi}}}}else return l(o,t,e)}return{lo:0,hi:o.length-1}}function Xn(s,t,e,i,n){const o=s.getSortedVisibleDatasetMetas(),r=e[t];for(let a=0,l=o.length;a<l;++a){const{index:c,data:h}=o[a],{lo:d,hi:u}=YD(o[a],t,r,n);for(let p=d;p<=u;++p){const f=h[p];f.skip||i(f,c,p)}}}function KD(s){const t=s.indexOf("x")!==-1,e=s.indexOf("y")!==-1;return function(i,n){const o=t?Math.abs(i.x-n.x):0,r=e?Math.abs(i.y-n.y):0;return Math.sqrt(Math.pow(o,2)+Math.pow(r,2))}}function Fc(s,t,e,i,n){const o=[];return!n&&!s.isPointInArea(t)||Xn(s,e,t,function(a,l,c){!n&&!Pn(a,s.chartArea,0)||a.inRange(t.x,t.y,i)&&o.push({element:a,datasetIndex:l,index:c})},!0),o}function UD(s,t,e,i){let n=[];function o(r,a,l){const{startAngle:c,endAngle:h}=r.getProps(["startAngle","endAngle"],i),{angle:d}=Cf(r,{x:t.x,y:t.y});Dn(d,c,h)&&n.push({element:r,datasetIndex:a,index:l})}return Xn(s,e,t,o),n}function XD(s,t,e,i,n,o){let r=[];const a=KD(e);let l=Number.POSITIVE_INFINITY;function c(h,d,u){const p=h.inRange(t.x,t.y,n);if(i&&!p)return;const f=h.getCenterPoint(n);if(!(!!o||s.isPointInArea(f))&&!p)return;const v=a(t,f);v<l?(r=[{element:h,datasetIndex:d,index:u}],l=v):v===l&&r.push({element:h,datasetIndex:d,index:u})}return Xn(s,e,t,c),r}function Wc(s,t,e,i,n,o){return!o&&!s.isPointInArea(t)?[]:e==="r"&&!i?UD(s,t,e,n):XD(s,t,e,i,n,o)}function M_(s,t,e,i,n){const o=[],r=e==="x"?"inXRange":"inYRange";let a=!1;return Xn(s,e,t,(l,c,h)=>{l[r](t[e],n)&&(o.push({element:l,datasetIndex:c,index:h}),a=a||l.inRange(t.x,t.y,n))}),i&&!a?[]:o}var L_={evaluateInteractionItems:Xn,modes:{index(s,t,e,i){const n=Pi(t,s),o=e.axis||"x",r=e.includeInvisible||!1,a=e.intersect?Fc(s,n,o,i,r):Wc(s,n,o,!1,i,r),l=[];return a.length?(s.getSortedVisibleDatasetMetas().forEach(c=>{const h=a[0].index,d=c.data[h];d&&!d.skip&&l.push({element:d,datasetIndex:c.index,index:h})}),l):[]},dataset(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;let a=e.intersect?Fc(s,n,o,i,r):Wc(s,n,o,!1,i,r);if(a.length>0){const l=a[0].datasetIndex,c=s.getDatasetMeta(l).data;a=[];for(let h=0;h<c.length;++h)a.push({element:c[h],datasetIndex:l,index:h})}return a},point(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;return Fc(s,n,o,i,r)},nearest(s,t,e,i){const n=Pi(t,s),o=e.axis||"xy",r=e.includeInvisible||!1;return Wc(s,n,o,e.intersect,i,r)},x(s,t,e,i){const n=Pi(t,s);return M_(s,n,"x",e.intersect,i)},y(s,t,e,i){const n=Pi(t,s);return M_(s,n,"y",e.intersect,i)}}};const $_=["left","top","right","bottom"];function Gn(s,t){return s.filter(e=>e.pos===t)}function R_(s,t){return s.filter(e=>$_.indexOf(e.pos)===-1&&e.box.axis===t)}function qn(s,t){return s.sort((e,i)=>{const n=t?i:e,o=t?e:i;return n.weight===o.weight?n.index-o.index:n.weight-o.weight})}function GD(s){const t=[];let e,i,n,o,r,a;for(e=0,i=(s||[]).length;e<i;++e)n=s[e],{position:o,options:{stack:r,stackWeight:a=1}}=n,t.push({index:e,box:n,pos:o,horizontal:n.isHorizontal(),weight:n.weight,stack:r&&o+r,stackWeight:a});return t}function qD(s){const t={};for(const e of s){const{stack:i,pos:n,stackWeight:o}=e;if(!i||!$_.includes(n))continue;const r=t[i]||(t[i]={count:0,placed:0,weight:0,size:0});r.count++,r.weight+=o}return t}function ZD(s,t){const e=qD(s),{vBoxMaxWidth:i,hBoxMaxHeight:n}=t;let o,r,a;for(o=0,r=s.length;o<r;++o){a=s[o];const{fullSize:l}=a.box,c=e[a.stack],h=c&&a.stackWeight/c.weight;a.horizontal?(a.width=h?h*i:l&&t.availableWidth,a.height=n):(a.width=i,a.height=h?h*n:l&&t.availableHeight)}return e}function QD(s){const t=GD(s),e=qn(t.filter(c=>c.box.fullSize),!0),i=qn(Gn(t,"left"),!0),n=qn(Gn(t,"right")),o=qn(Gn(t,"top"),!0),r=qn(Gn(t,"bottom")),a=R_(t,"x"),l=R_(t,"y");return{fullSize:e,leftAndTop:i.concat(o),rightAndBottom:n.concat(l).concat(r).concat(a),chartArea:Gn(t,"chartArea"),vertical:i.concat(n).concat(l),horizontal:o.concat(r).concat(a)}}function P_(s,t,e,i){return Math.max(s[e],t[e])+Math.max(s[i],t[i])}function N_(s,t){s.top=Math.max(s.top,t.top),s.left=Math.max(s.left,t.left),s.bottom=Math.max(s.bottom,t.bottom),s.right=Math.max(s.right,t.right)}function JD(s,t,e,i){const{pos:n,box:o}=e,r=s.maxPadding;if(!V(n)){e.size&&(s[n]-=e.size);const d=i[e.stack]||{size:0,count:1};d.size=Math.max(d.size,e.horizontal?o.height:o.width),e.size=d.size/d.count,s[n]+=e.size}o.getPadding&&N_(r,o.getPadding());const a=Math.max(0,t.outerWidth-P_(r,s,"left","right")),l=Math.max(0,t.outerHeight-P_(r,s,"top","bottom")),c=a!==s.w,h=l!==s.h;return s.w=a,s.h=l,e.horizontal?{same:c,other:h}:{same:h,other:c}}function t1(s){const t=s.maxPadding;function e(i){const n=Math.max(t[i]-s[i],0);return s[i]+=n,n}s.y+=e("top"),s.x+=e("left"),e("right"),e("bottom")}function e1(s,t){const e=t.maxPadding;function i(n){const o={left:0,top:0,right:0,bottom:0};return n.forEach(r=>{o[r]=Math.max(t[r],e[r])}),o}return i(s?["left","right"]:["top","bottom"])}function Zn(s,t,e,i){const n=[];let o,r,a,l,c,h;for(o=0,r=s.length,c=0;o<r;++o){a=s[o],l=a.box,l.update(a.width||t.w,a.height||t.h,e1(a.horizontal,t));const{same:d,other:u}=JD(t,e,a,i);c|=d&&n.length,h=h||u,l.fullSize||n.push(a)}return c&&Zn(n,t,e,i)||h}function na(s,t,e,i,n){s.top=e,s.left=t,s.right=t+i,s.bottom=e+n,s.width=i,s.height=n}function B_(s,t,e,i){const n=e.padding;let{x:o,y:r}=t;for(const a of s){const l=a.box,c=i[a.stack]||{count:1,placed:0,weight:1},h=a.stackWeight/c.weight||1;if(a.horizontal){const d=t.w*h,u=c.size||l.height;jt(c.start)&&(r=c.start),l.fullSize?na(l,n.left,r,e.outerWidth-n.right-n.left,u):na(l,t.left+c.placed,r,d,u),c.start=r,c.placed+=d,r=l.bottom}else{const d=t.h*h,u=c.size||l.width;jt(c.start)&&(o=c.start),l.fullSize?na(l,o,n.top,u,e.outerHeight-n.bottom-n.top):na(l,o,t.top+c.placed,u,d),c.start=o,c.placed+=d,o=l.right}}t.x=o,t.y=r}F.set("layout",{autoPadding:!0,padding:{top:0,right:0,bottom:0,left:0}});var ft={addBox(s,t){s.boxes||(s.boxes=[]),t.fullSize=t.fullSize||!1,t.position=t.position||"top",t.weight=t.weight||0,t._layers=t._layers||function(){return[{z:0,draw(e){t.draw(e)}}]},s.boxes.push(t)},removeBox(s,t){const e=s.boxes?s.boxes.indexOf(t):-1;e!==-1&&s.boxes.splice(e,1)},configure(s,t,e){t.fullSize=e.fullSize,t.position=e.position,t.weight=e.weight},update(s,t,e,i){if(!s)return;const n=pt(s.options.layout.padding),o=Math.max(t-n.width,0),r=Math.max(e-n.height,0),a=QD(s.boxes),l=a.vertical,c=a.horizontal;U(s.boxes,b=>{typeof b.beforeLayout=="function"&&b.beforeLayout()});const h=l.reduce((b,v)=>v.box.options&&v.box.options.display===!1?b:b+1,0)||1,d=Object.freeze({outerWidth:t,outerHeight:e,padding:n,availableWidth:o,availableHeight:r,vBoxMaxWidth:o/2/h,hBoxMaxHeight:r/2}),u=Object.assign({},n);N_(u,pt(i));const p=Object.assign({maxPadding:u,w:o,h:r,x:n.left,y:n.top},n),f=ZD(l.concat(c),d);Zn(a.fullSize,p,d,f),Zn(l,p,d,f),Zn(c,p,d,f)&&Zn(l,p,d,f),t1(p),B_(a.leftAndTop,p,d,f),p.x+=p.w,p.y+=p.h,B_(a.rightAndBottom,p,d,f),s.chartArea={left:p.left,top:p.top,right:p.left+p.w,bottom:p.top+p.h,height:p.h,width:p.w},U(a.chartArea,b=>{const v=b.box;Object.assign(v,s.chartArea),v.update(p.w,p.h,{left:0,top:0,right:0,bottom:0})})}};class zc{acquireContext(t,e){}releaseContext(t){return!1}addEventListener(t,e,i){}removeEventListener(t,e,i){}getDevicePixelRatio(){return 1}getMaximumSize(t,e,i,n){return e=Math.max(0,e||t.width),i=i||t.height,{width:e,height:Math.max(0,n?Math.floor(e/n):i)}}isAttached(t){return!0}updateConfig(t){}}class H_ extends zc{acquireContext(t){return t&&t.getContext&&t.getContext("2d")||null}updateConfig(t){t.options.animation=!1}}const oa="$chartjs",i1={touchstart:"mousedown",touchmove:"mousemove",touchend:"mouseup",pointerenter:"mouseenter",pointerdown:"mousedown",pointermove:"mousemove",pointerup:"mouseup",pointerleave:"mouseout",pointerout:"mouseout"},V_=s=>s===null||s==="";function s1(s,t){const e=s.style,i=s.getAttribute("height"),n=s.getAttribute("width");if(s[oa]={initial:{height:i,width:n,style:{display:e.display,height:e.height,width:e.width}}},e.display=e.display||"block",e.boxSizing=e.boxSizing||"border-box",V_(n)){const o=s_(s,"width");o!==void 0&&(s.width=o)}if(V_(i))if(s.style.height==="")s.height=s.width/(t||2);else{const o=s_(s,"height");o!==void 0&&(s.height=o)}return s}const F_=WI?{passive:!0}:!1;function n1(s,t,e){s.addEventListener(t,e,F_)}function o1(s,t,e){s.canvas.removeEventListener(t,e,F_)}function r1(s,t){const e=i1[s.type]||s.type,{x:i,y:n}=Pi(s,t);return{type:e,chart:t,native:s,x:i!==void 0?i:null,y:n!==void 0?n:null}}function ra(s,t){for(const e of s)if(e===t||e.contains(t))return!0}function a1(s,t,e){const i=s.canvas,n=new MutationObserver(o=>{let r=!1;for(const a of o)r=r||ra(a.addedNodes,i),r=r&&!ra(a.removedNodes,i);r&&e()});return n.observe(document,{childList:!0,subtree:!0}),n}function l1(s,t,e){const i=s.canvas,n=new MutationObserver(o=>{let r=!1;for(const a of o)r=r||ra(a.removedNodes,i),r=r&&!ra(a.addedNodes,i);r&&e()});return n.observe(document,{childList:!0,subtree:!0}),n}const Qn=new Map;let W_=0;function z_(){const s=window.devicePixelRatio;s!==W_&&(W_=s,Qn.forEach((t,e)=>{e.currentDevicePixelRatio!==s&&t()}))}function c1(s,t){Qn.size||window.addEventListener("resize",z_),Qn.set(s,t)}function h1(s){Qn.delete(s),Qn.size||window.removeEventListener("resize",z_)}function d1(s,t,e){const i=s.canvas,n=i&&$c(i);if(!n)return;const o=Of((a,l)=>{const c=n.clientWidth;e(a,l),c<n.clientWidth&&e()},window),r=new ResizeObserver(a=>{const l=a[0],c=l.contentRect.width,h=l.contentRect.height;c===0&&h===0||o(c,h)});return r.observe(n),c1(s,o),r}function jc(s,t,e){e&&e.disconnect(),t==="resize"&&h1(s)}function u1(s,t,e){const i=s.canvas,n=Of(o=>{s.ctx!==null&&e(r1(o,s))},s,o=>{const r=o[0];return[r,r.offsetX,r.offsetY]});return n1(i,t,n),n}class j_ extends zc{acquireContext(t,e){const i=t&&t.getContext&&t.getContext("2d");return i&&i.canvas===t?(s1(t,e),i):null}releaseContext(t){const e=t.canvas;if(!e[oa])return!1;const i=e[oa].initial;["height","width"].forEach(o=>{const r=i[o];H(r)?e.removeAttribute(o):e.setAttribute(o,r)});const n=i.style||{};return Object.keys(n).forEach(o=>{e.style[o]=n[o]}),e.width=e.width,delete e[oa],!0}addEventListener(t,e,i){this.removeEventListener(t,e);const n=t.$proxies||(t.$proxies={}),r={attach:a1,detach:l1,resize:d1}[e]||u1;n[e]=r(t,e,i)}removeEventListener(t,e){const i=t.$proxies||(t.$proxies={}),n=i[e];if(!n)return;({attach:jc,detach:jc,resize:jc}[e]||o1)(t,e,n),i[e]=void 0}getDevicePixelRatio(){return window.devicePixelRatio}getMaximumSize(t,e,i,n){return FI(t,e,i,n)}isAttached(t){const e=$c(t);return!!(e&&e.isConnected)}}function Y_(s){return!e_()||typeof OffscreenCanvas<"u"&&s instanceof OffscreenCanvas?H_:j_}class p1{constructor(){this._init=[]}notify(t,e,i,n){e==="beforeInit"&&(this._init=this._createDescriptors(t,!0),this._notify(this._init,t,"install"));const o=n?this._descriptors(t).filter(n):this._descriptors(t),r=this._notify(o,t,e,i);return e==="afterDestroy"&&(this._notify(o,t,"stop"),this._notify(this._init,t,"uninstall")),r}_notify(t,e,i,n){n=n||{};for(const o of t){const r=o.plugin,a=r[i],l=[e,n,o.options];if(G(a,l,r)===!1&&n.cancelable)return!1}return!0}invalidate(){H(this._cache)||(this._oldCache=this._cache,this._cache=void 0)}_descriptors(t){if(this._cache)return this._cache;const e=this._cache=this._createDescriptors(t);return this._notifyStateChanges(t),e}_createDescriptors(t,e){const i=t&&t.config,n=B(i.options&&i.options.plugins,{}),o=f1(i);return n===!1&&!e?[]:g1(t,o,n,e)}_notifyStateChanges(t){const e=this._oldCache||[],i=this._cache,n=(o,r)=>o.filter(a=>!r.some(l=>a.plugin.id===l.plugin.id));this._notify(n(e,i),t,"stop"),this._notify(n(i,e),t,"start")}}function f1(s){const t={},e=[],i=Object.keys(ne.plugins.items);for(let o=0;o<i.length;o++)e.push(ne.getPlugin(i[o]));const n=s.plugins||[];for(let o=0;o<n.length;o++){const r=n[o];e.indexOf(r)===-1&&(e.push(r),t[r.id]=!0)}return{plugins:e,localIds:t}}function _1(s,t){return!t&&s===!1?null:s===!0?{}:s}function g1(s,{plugins:t,localIds:e},i,n){const o=[],r=s.getContext();for(const a of t){const l=a.id,c=_1(i[l],n);c!==null&&o.push({plugin:a,options:m1(s.config,{plugin:a,local:e[l]},c,r)})}return o}function m1(s,{plugin:t,local:e},i,n){const o=s.pluginScopeKeys(t),r=s.getOptionScopes(i,o);return e&&t.defaults&&r.push(t.defaults),s.createResolver(r,n,[""],{scriptable:!1,indexable:!1,allKeys:!0})}function Yc(s,t){const e=F.datasets[s]||{};return((t.datasets||{})[s]||{}).indexAxis||t.indexAxis||e.indexAxis||"x"}function b1(s,t){let e=s;return s==="_index_"?e=t:s==="_value_"&&(e=t==="x"?"y":"x"),e}function v1(s,t){return s===t?"_index_":"_value_"}function y1(s){if(s==="top"||s==="bottom")return"x";if(s==="left"||s==="right")return"y"}function Kc(s,t){return s==="x"||s==="y"?s:t.axis||y1(t.position)||s.charAt(0).toLowerCase()}function T1(s,t){const e=Di[s.type]||{scales:{}},i=t.scales||{},n=Yc(s.type,t),o=Object.create(null),r=Object.create(null);return Object.keys(i).forEach(a=>{const l=i[a];if(!V(l))return console.error(`Invalid scale configuration for scale: ${a}`);if(l._proxy)return console.warn(`Ignoring resolver passed as options for scale: ${a}`);const c=Kc(a,l),h=v1(c,n),d=e.scales||{};o[c]=o[c]||a,r[a]=Sn(Object.create(null),[{axis:c},l,d[c],d[h]])}),s.data.datasets.forEach(a=>{const l=a.type||s.type,c=a.indexAxis||Yc(l,t),d=(Di[l]||{}).scales||{};Object.keys(d).forEach(u=>{const p=b1(u,c),f=a[p+"AxisID"]||o[p]||p;r[f]=r[f]||Object.create(null),Sn(r[f],[{axis:p},i[f],d[u]])})}),Object.keys(r).forEach(a=>{const l=r[a];Sn(l,[F.scales[l.type],F.scale])}),r}function K_(s){const t=s.options||(s.options={});t.plugins=B(t.plugins,{}),t.scales=T1(s,t)}function U_(s){return s=s||{},s.datasets=s.datasets||[],s.labels=s.labels||[],s}function E1(s){return s=s||{},s.data=U_(s.data),K_(s),s}const X_=new Map,G_=new Set;function aa(s,t){let e=X_.get(s);return e||(e=t(),X_.set(s,e),G_.add(e)),e}const Jn=(s,t,e)=>{const i=ti(t,e);i!==void 0&&s.add(i)};class x1{constructor(t){this._config=E1(t),this._scopeCache=new Map,this._resolverCache=new Map}get platform(){return this._config.platform}get type(){return this._config.type}set type(t){this._config.type=t}get data(){return this._config.data}set data(t){this._config.data=U_(t)}get options(){return this._config.options}set options(t){this._config.options=t}get plugins(){return this._config.plugins}update(){const t=this._config;this.clearCache(),K_(t)}clearCache(){this._scopeCache.clear(),this._resolverCache.clear()}datasetScopeKeys(t){return aa(t,()=>[[`datasets.${t}`,""]])}datasetAnimationScopeKeys(t,e){return aa(`${t}.transition.${e}`,()=>[[`datasets.${t}.transitions.${e}`,`transitions.${e}`],[`datasets.${t}`,""]])}datasetElementScopeKeys(t,e){return aa(`${t}-${e}`,()=>[[`datasets.${t}.elements.${e}`,`datasets.${t}`,`elements.${e}`,""]])}pluginScopeKeys(t){const e=t.id,i=this.type;return aa(`${i}-plugin-${e}`,()=>[[`plugins.${e}`,...t.additionalOptionScopes||[]]])}_cachedScopes(t,e){const i=this._scopeCache;let n=i.get(t);return(!n||e)&&(n=new Map,i.set(t,n)),n}getOptionScopes(t,e,i){const{options:n,type:o}=this,r=this._cachedScopes(t,i),a=r.get(e);if(a)return a;const l=new Set;e.forEach(h=>{t&&(l.add(t),h.forEach(d=>Jn(l,t,d))),h.forEach(d=>Jn(l,n,d)),h.forEach(d=>Jn(l,Di[o]||{},d)),h.forEach(d=>Jn(l,F,d)),h.forEach(d=>Jn(l,kc,d))});const c=Array.from(l);return c.length===0&&c.push(Object.create(null)),G_.has(e)&&r.set(e,c),c}chartOptionScopes(){const{options:t,type:e}=this;return[t,Di[e]||{},F.datasets[e]||{},{type:e},F,kc]}resolveNamedOptions(t,e,i,n=[""]){const o={$shared:!0},{resolver:r,subPrefixes:a}=q_(this._resolverCache,t,n);let l=r;if(A1(r,e)){o.$shared=!1,i=ei(i)?i():i;const c=this.createResolver(t,i,a);l=ks(r,i,c)}for(const c of e)o[c]=l[c];return o}createResolver(t,e,i=[""],n){const{resolver:o}=q_(this._resolverCache,t,i);return V(e)?ks(o,e,void 0,n):o}}function q_(s,t,e){let i=s.get(t);i||(i=new Map,s.set(t,i));const n=e.join();let o=i.get(n);return o||(o={resolver:Dc(t,e),subPrefixes:e.filter(a=>!a.toLowerCase().includes("hover"))},i.set(n,o)),o}const C1=s=>V(s)&&Object.getOwnPropertyNames(s).reduce((t,e)=>t||ei(s[e]),!1);function A1(s,t){const{isScriptable:e,isIndexable:i}=Uf(s);for(const n of t){const o=e(n),r=i(n),a=(r||o)&&s[n];if(o&&(ei(a)||C1(a))||r&&Q(a))return!0}return!1}var w1="3.9.1";const k1=["top","bottom","left","right","chartArea"];function Z_(s,t){return s==="top"||s==="bottom"||k1.indexOf(s)===-1&&t==="x"}function Q_(s,t){return function(e,i){return e[s]===i[s]?e[t]-i[t]:e[s]-i[s]}}function J_(s){const t=s.chart,e=t.options.animation;t.notifyPlugins("afterRender"),G(e&&e.onComplete,[s],t)}function S1(s){const t=s.chart,e=t.options.animation;G(e&&e.onProgress,[s],t)}function tg(s){return e_()&&typeof s=="string"?s=document.getElementById(s):s&&s.length&&(s=s[0]),s&&s.canvas&&(s=s.canvas),s}const la={},eg=s=>{const t=tg(s);return Object.values(la).filter(e=>e.canvas===t).pop()};function O1(s,t,e){const i=Object.keys(s);for(const n of i){const o=+n;if(o>=t){const r=s[n];delete s[n],(e>0||o>t)&&(s[o+e]=r)}}}function I1(s,t,e,i){return!e||s.type==="mouseout"?null:i?t:s}class Uc{constructor(t,e){const i=this.config=new x1(e),n=tg(t),o=eg(n);if(o)throw new Error("Canvas is already in use. Chart with ID '"+o.id+"' must be destroyed before the canvas with ID '"+o.canvas.id+"' can be reused.");const r=i.createResolver(i.chartOptionScopes(),this.getContext());this.platform=new(i.platform||Y_(n)),this.platform.updateConfig(i);const a=this.platform.acquireContext(n,r.aspectRatio),l=a&&a.canvas,c=l&&l.height,h=l&&l.width;if(this.id=EO(),this.ctx=a,this.canvas=l,this.width=h,this.height=c,this._options=r,this._aspectRatio=this.aspectRatio,this._layers=[],this._metasets=[],this._stacks=void 0,this.boxes=[],this.currentDevicePixelRatio=void 0,this.chartArea=void 0,this._active=[],this._lastEvent=void 0,this._listeners={},this._responsiveListeners=void 0,this._sortedMetasets=[],this.scales={},this._plugins=new p1,this.$proxies={},this._hiddenIndices={},this.attached=!1,this._animationsDisabled=void 0,this.$context=void 0,this._doResize=BO(d=>this.update(d),r.resizeDelay||0),this._dataChanges=[],la[this.id]=this,!a||!l){console.error("Failed to create chart: can't acquire context from the given item");return}xe.listen(this,"complete",J_),xe.listen(this,"progress",S1),this._initialize(),this.attached&&this.update()}get aspectRatio(){const{options:{aspectRatio:t,maintainAspectRatio:e},width:i,height:n,_aspectRatio:o}=this;return H(t)?e&&o?o:n?i/n:null:t}get data(){return this.config.data}set data(t){this.config.data=t}get options(){return this._options}set options(t){this.config.options=t}_initialize(){return this.notifyPlugins("beforeInit"),this.options.responsive?this.resize():i_(this,this.options.devicePixelRatio),this.bindEvents(),this.notifyPlugins("afterInit"),this}clear(){return jf(this.canvas,this.ctx),this}stop(){return xe.stop(this),this}resize(t,e){xe.running(this)?this._resizeBeforeDraw={width:t,height:e}:this._resize(t,e)}_resize(t,e){const i=this.options,n=this.canvas,o=i.maintainAspectRatio&&this.aspectRatio,r=this.platform.getMaximumSize(n,t,e,o),a=i.devicePixelRatio||this.platform.getDevicePixelRatio(),l=this.width?"resize":"attach";this.width=r.width,this.height=r.height,this._aspectRatio=this.aspectRatio,i_(this,a,!0)&&(this.notifyPlugins("resize",{size:r}),G(i.onResize,[this,r],this),this.attached&&this._doResize(l)&&this.render())}ensureScalesHaveIDs(){const e=this.options.scales||{};U(e,(i,n)=>{i.id=n})}buildOrUpdateScales(){const t=this.options,e=t.scales,i=this.scales,n=Object.keys(i).reduce((r,a)=>(r[a]=!1,r),{});let o=[];e&&(o=o.concat(Object.keys(e).map(r=>{const a=e[r],l=Kc(r,a),c=l==="r",h=l==="x";return{options:a,dposition:c?"chartArea":h?"bottom":"left",dtype:c?"radialLinear":h?"category":"linear"}}))),U(o,r=>{const a=r.options,l=a.id,c=Kc(l,a),h=B(a.type,r.dtype);(a.position===void 0||Z_(a.position,c)!==Z_(r.dposition))&&(a.position=r.dposition),n[l]=!0;let d=null;if(l in i&&i[l].type===h)d=i[l];else{const u=ne.getScale(h);d=new u({id:l,type:h,ctx:this.ctx,chart:this}),i[d.id]=d}d.init(a,t)}),U(n,(r,a)=>{r||delete i[a]}),U(i,r=>{ft.configure(this,r,r.options),ft.addBox(this,r)})}_updateMetasets(){const t=this._metasets,e=this.data.datasets.length,i=t.length;if(t.sort((n,o)=>n.index-o.index),i>e){for(let n=e;n<i;++n)this._destroyDatasetMeta(n);t.splice(e,i-e)}this._sortedMetasets=t.slice(0).sort(Q_("order","index"))}_removeUnreferencedMetasets(){const{_metasets:t,data:{datasets:e}}=this;t.length>e.length&&delete this._stacks,t.forEach((i,n)=>{e.filter(o=>o===i._dataset).length===0&&this._destroyDatasetMeta(n)})}buildOrUpdateControllers(){const t=[],e=this.data.datasets;let i,n;for(this._removeUnreferencedMetasets(),i=0,n=e.length;i<n;i++){const o=e[i];let r=this.getDatasetMeta(i);const a=o.type||this.config.type;if(r.type&&r.type!==a&&(this._destroyDatasetMeta(i),r=this.getDatasetMeta(i)),r.type=a,r.indexAxis=o.indexAxis||Yc(a,this.options),r.order=o.order||0,r.index=i,r.label=""+o.label,r.visible=this.isDatasetVisible(i),r.controller)r.controller.updateIndex(i),r.controller.linkScales();else{const l=ne.getController(a),{datasetElementType:c,dataElementType:h}=F.datasets[a];Object.assign(l.prototype,{dataElementType:ne.getElement(h),datasetElementType:c&&ne.getElement(c)}),r.controller=new l(this,i),t.push(r.controller)}}return this._updateMetasets(),t}_resetElements(){U(this.data.datasets,(t,e)=>{this.getDatasetMeta(e).controller.reset()},this)}reset(){this._resetElements(),this.notifyPlugins("reset")}update(t){const e=this.config;e.update();const i=this._options=e.createResolver(e.chartOptionScopes(),this.getContext()),n=this._animationsDisabled=!i.animation;if(this._updateScales(),this._checkEventBindings(),this._updateHiddenIndices(),this._plugins.invalidate(),this.notifyPlugins("beforeUpdate",{mode:t,cancelable:!0})===!1)return;const o=this.buildOrUpdateControllers();this.notifyPlugins("beforeElementsUpdate");let r=0;for(let c=0,h=this.data.datasets.length;c<h;c++){const{controller:d}=this.getDatasetMeta(c),u=!n&&o.indexOf(d)===-1;d.buildOrUpdateElements(u),r=Math.max(+d.getMaxOverflow(),r)}r=this._minPadding=i.layout.autoPadding?r:0,this._updateLayout(r),n||U(o,c=>{c.reset()}),this._updateDatasets(t),this.notifyPlugins("afterUpdate",{mode:t}),this._layers.sort(Q_("z","_idx"));const{_active:a,_lastEvent:l}=this;l?this._eventHandler(l,!0):a.length&&this._updateHoverStyles(a,a,!0),this.render()}_updateScales(){U(this.scales,t=>{ft.removeBox(this,t)}),this.ensureScalesHaveIDs(),this.buildOrUpdateScales()}_checkEventBindings(){const t=this.options,e=new Set(Object.keys(this._listeners)),i=new Set(t.events);(!vf(e,i)||!!this._responsiveListeners!==t.responsive)&&(this.unbindEvents(),this.bindEvents())}_updateHiddenIndices(){const{_hiddenIndices:t}=this,e=this._getUniformDataChanges()||[];for(const{method:i,start:n,count:o}of e){const r=i==="_removeElements"?-o:o;O1(t,n,r)}}_getUniformDataChanges(){const t=this._dataChanges;if(!t||!t.length)return;this._dataChanges=[];const e=this.data.datasets.length,i=o=>new Set(t.filter(r=>r[0]===o).map((r,a)=>a+","+r.splice(1).join(","))),n=i(0);for(let o=1;o<e;o++)if(!vf(n,i(o)))return;return Array.from(n).map(o=>o.split(",")).map(o=>({method:o[1],start:+o[2],count:+o[3]}))}_updateLayout(t){if(this.notifyPlugins("beforeLayout",{cancelable:!0})===!1)return;ft.update(this,this.width,this.height,t);const e=this.chartArea,i=e.width<=0||e.height<=0;this._layers=[],U(this.boxes,n=>{i&&n.position==="chartArea"||(n.configure&&n.configure(),this._layers.push(...n._layers()))},this),this._layers.forEach((n,o)=>{n._idx=o}),this.notifyPlugins("afterLayout")}_updateDatasets(t){if(this.notifyPlugins("beforeDatasetsUpdate",{mode:t,cancelable:!0})!==!1){for(let e=0,i=this.data.datasets.length;e<i;++e)this.getDatasetMeta(e).controller.configure();for(let e=0,i=this.data.datasets.length;e<i;++e)this._updateDataset(e,ei(t)?t({datasetIndex:e}):t);this.notifyPlugins("afterDatasetsUpdate",{mode:t})}}_updateDataset(t,e){const i=this.getDatasetMeta(t),n={meta:i,index:t,mode:e,cancelable:!0};this.notifyPlugins("beforeDatasetUpdate",n)!==!1&&(i.controller._update(e),n.cancelable=!1,this.notifyPlugins("afterDatasetUpdate",n))}render(){this.notifyPlugins("beforeRender",{cancelable:!0})!==!1&&(xe.has(this)?this.attached&&!xe.running(this)&&xe.start(this):(this.draw(),J_({chart:this})))}draw(){let t;if(this._resizeBeforeDraw){const{width:i,height:n}=this._resizeBeforeDraw;this._resize(i,n),this._resizeBeforeDraw=null}if(this.clear(),this.width<=0||this.height<=0||this.notifyPlugins("beforeDraw",{cancelable:!0})===!1)return;const e=this._layers;for(t=0;t<e.length&&e[t].z<=0;++t)e[t].draw(this.chartArea);for(this._drawDatasets();t<e.length;++t)e[t].draw(this.chartArea);this.notifyPlugins("afterDraw")}_getSortedDatasetMetas(t){const e=this._sortedMetasets,i=[];let n,o;for(n=0,o=e.length;n<o;++n){const r=e[n];(!t||r.visible)&&i.push(r)}return i}getSortedVisibleDatasetMetas(){return this._getSortedDatasetMetas(!0)}_drawDatasets(){if(this.notifyPlugins("beforeDatasetsDraw",{cancelable:!0})===!1)return;const t=this.getSortedVisibleDatasetMetas();for(let e=t.length-1;e>=0;--e)this._drawDataset(t[e]);this.notifyPlugins("afterDatasetsDraw")}_drawDataset(t){const e=this.ctx,i=t._clip,n=!i.disabled,o=this.chartArea,r={meta:t,index:t.index,cancelable:!0};this.notifyPlugins("beforeDatasetDraw",r)!==!1&&(n&&qr(e,{left:i.left===!1?0:o.left-i.left,right:i.right===!1?this.width:o.right+i.right,top:i.top===!1?0:o.top-i.top,bottom:i.bottom===!1?this.height:o.bottom+i.bottom}),t.controller.draw(),n&&Zr(e),r.cancelable=!1,this.notifyPlugins("afterDatasetDraw",r))}isPointInArea(t){return Pn(t,this.chartArea,this._minPadding)}getElementsAtEventForMode(t,e,i,n){const o=L_.modes[e];return typeof o=="function"?o(this,t,i,n):[]}getDatasetMeta(t){const e=this.data.datasets[t],i=this._metasets;let n=i.filter(o=>o&&o._dataset===e).pop();return n||(n={type:null,data:[],dataset:null,controller:null,hidden:null,xAxisID:null,yAxisID:null,order:e&&e.order||0,index:t,_dataset:e,_parsed:[],_sorted:!1},i.push(n)),n}getContext(){return this.$context||(this.$context=ni(null,{chart:this,type:"chart"}))}getVisibleDatasetCount(){return this.getSortedVisibleDatasetMetas().length}isDatasetVisible(t){const e=this.data.datasets[t];if(!e)return!1;const i=this.getDatasetMeta(t);return typeof i.hidden=="boolean"?!i.hidden:!e.hidden}setDatasetVisibility(t,e){const i=this.getDatasetMeta(t);i.hidden=!e}toggleDataVisibility(t){this._hiddenIndices[t]=!this._hiddenIndices[t]}getDataVisibility(t){return!this._hiddenIndices[t]}_updateVisibility(t,e,i){const n=i?"show":"hide",o=this.getDatasetMeta(t),r=o.controller._resolveAnimations(void 0,n);jt(e)?(o.data[e].hidden=!i,this.update()):(this.setDatasetVisibility(t,i),r.update(o,{visible:i}),this.update(a=>a.datasetIndex===t?n:void 0))}hide(t,e){this._updateVisibility(t,e,!1)}show(t,e){this._updateVisibility(t,e,!0)}_destroyDatasetMeta(t){const e=this._metasets[t];e&&e.controller&&e.controller._destroy(),delete this._metasets[t]}_stop(){let t,e;for(this.stop(),xe.remove(this),t=0,e=this.data.datasets.length;t<e;++t)this._destroyDatasetMeta(t)}destroy(){this.notifyPlugins("beforeDestroy");const{canvas:t,ctx:e}=this;this._stop(),this.config.clearCache(),t&&(this.unbindEvents(),jf(t,e),this.platform.releaseContext(e),this.canvas=null,this.ctx=null),this.notifyPlugins("destroy"),delete la[this.id],this.notifyPlugins("afterDestroy")}toBase64Image(...t){return this.canvas.toDataURL(...t)}bindEvents(){this.bindUserEvents(),this.options.responsive?this.bindResponsiveEvents():this.attached=!0}bindUserEvents(){const t=this._listeners,e=this.platform,i=(o,r)=>{e.addEventListener(this,o,r),t[o]=r},n=(o,r,a)=>{o.offsetX=r,o.offsetY=a,this._eventHandler(o)};U(this.options.events,o=>i(o,n))}bindResponsiveEvents(){this._responsiveListeners||(this._responsiveListeners={});const t=this._responsiveListeners,e=this.platform,i=(l,c)=>{e.addEventListener(this,l,c),t[l]=c},n=(l,c)=>{t[l]&&(e.removeEventListener(this,l,c),delete t[l])},o=(l,c)=>{this.canvas&&this.resize(l,c)};let r;const a=()=>{n("attach",a),this.attached=!0,this.resize(),i("resize",o),i("detach",r)};r=()=>{this.attached=!1,n("resize",o),this._stop(),this._resize(0,0),i("attach",a)},e.isAttached(this.canvas)?a():r()}unbindEvents(){U(this._listeners,(t,e)=>{this.platform.removeEventListener(this,e,t)}),this._listeners={},U(this._responsiveListeners,(t,e)=>{this.platform.removeEventListener(this,e,t)}),this._responsiveListeners=void 0}updateHoverStyle(t,e,i){const n=i?"set":"remove";let o,r,a,l;for(e==="dataset"&&(o=this.getDatasetMeta(t[0].datasetIndex),o.controller["_"+n+"DatasetHoverStyle"]()),a=0,l=t.length;a<l;++a){r=t[a];const c=r&&this.getDatasetMeta(r.datasetIndex).controller;c&&c[n+"HoverStyle"](r.element,r.datasetIndex,r.index)}}getActiveElements(){return this._active||[]}setActiveElements(t){const e=this._active||[],i=t.map(({datasetIndex:o,index:r})=>{const a=this.getDatasetMeta(o);if(!a)throw new Error("No dataset found at index "+o);return{datasetIndex:o,element:a.data[r],index:r}});!Fr(i,e)&&(this._active=i,this._lastEvent=null,this._updateHoverStyles(i,e))}notifyPlugins(t,e,i){return this._plugins.notify(this,t,e,i)}_updateHoverStyles(t,e,i){const n=this.options.hover,o=(l,c)=>l.filter(h=>!c.some(d=>h.datasetIndex===d.datasetIndex&&h.index===d.index)),r=o(e,t),a=i?t:o(t,e);r.length&&this.updateHoverStyle(r,n.mode,!1),a.length&&n.mode&&this.updateHoverStyle(a,n.mode,!0)}_eventHandler(t,e){const i={event:t,replay:e,cancelable:!0,inChartArea:this.isPointInArea(t)},n=r=>(r.options.events||this.options.events).includes(t.native.type);if(this.notifyPlugins("beforeEvent",i,n)===!1)return;const o=this._handleEvent(t,e,i.inChartArea);return i.cancelable=!1,this.notifyPlugins("afterEvent",i,n),(o||i.changed)&&this.render(),this}_handleEvent(t,e,i){const{_active:n=[],options:o}=this,r=e,a=this._getActiveElements(t,n,i,r),l=SO(t),c=I1(t,this._lastEvent,i,l);i&&(this._lastEvent=null,G(o.onHover,[t,a,this],this),l&&G(o.onClick,[t,a,this],this));const h=!Fr(a,n);return(h||e)&&(this._active=a,this._updateHoverStyles(a,n,e)),this._lastEvent=c,h}_getActiveElements(t,e,i,n){if(t.type==="mouseout")return[];if(!i)return e;const o=this.options.hover;return this.getElementsAtEventForMode(t,o.mode,o,n)}}const ig=()=>U(Uc.instances,s=>s._plugins.invalidate()),ri=!0;Object.defineProperties(Uc,{defaults:{enumerable:ri,value:F},instances:{enumerable:ri,value:la},overrides:{enumerable:ri,value:Di},registry:{enumerable:ri,value:ne},version:{enumerable:ri,value:w1},getChart:{enumerable:ri,value:eg},register:{enumerable:ri,value:(...s)=>{ne.add(...s),ig()}},unregister:{enumerable:ri,value:(...s)=>{ne.remove(...s),ig()}}});function sg(s,t,e){const{startAngle:i,pixelMargin:n,x:o,y:r,outerRadius:a,innerRadius:l}=t;let c=n/a;s.beginPath(),s.arc(o,r,a,i-c,e+c),l>n?(c=n/l,s.arc(o,r,l,e+c,i-c,!0)):s.arc(o,r,n,e+nt,i-nt),s.closePath(),s.clip()}function D1(s){return Ic(s,["outerStart","outerEnd","innerStart","innerEnd"])}function M1(s,t,e,i){const n=D1(s.options.borderRadius),o=(e-t)/2,r=Math.min(o,i*t/2),a=l=>{const c=(e-Math.min(o,l))*i/2;return dt(l,0,Math.min(o,c))};return{outerStart:a(n.outerStart),outerEnd:a(n.outerEnd),innerStart:dt(n.innerStart,0,r),innerEnd:dt(n.innerEnd,0,r)}}function Is(s,t,e,i){return{x:e+s*Math.cos(t),y:i+s*Math.sin(t)}}function Xc(s,t,e,i,n,o){const{x:r,y:a,startAngle:l,pixelMargin:c,innerRadius:h}=t,d=Math.max(t.outerRadius+i+e-c,0),u=h>0?h+i+e+c:0;let p=0;const f=n-l;if(i){const R=h>0?h-i:0,z=d>0?d-i:0,Y=(R+z)/2,Gt=Y!==0?f*Y/(Y+i):f;p=(f-Gt)/2}const b=Math.max(.001,f*d-e/it)/d,v=(f-b)/2,y=l+v+p,T=n-v-p,{outerStart:x,outerEnd:E,innerStart:C,innerEnd:A}=M1(t,u,d,T-y),w=d-x,S=d-E,k=y+x/w,D=T-E/S,I=u+C,M=u+A,P=y+C/I,X=T-A/M;if(s.beginPath(),o){if(s.arc(r,a,d,k,D),E>0){const Y=Is(S,D,r,a);s.arc(Y.x,Y.y,E,D,T+nt)}const R=Is(M,T,r,a);if(s.lineTo(R.x,R.y),A>0){const Y=Is(M,X,r,a);s.arc(Y.x,Y.y,A,T+nt,X+Math.PI)}if(s.arc(r,a,u,T-A/u,y+C/u,!0),C>0){const Y=Is(I,P,r,a);s.arc(Y.x,Y.y,C,P+Math.PI,y-nt)}const z=Is(w,y,r,a);if(s.lineTo(z.x,z.y),x>0){const Y=Is(w,k,r,a);s.arc(Y.x,Y.y,x,y-nt,k)}}else{s.moveTo(r,a);const R=Math.cos(k)*d+r,z=Math.sin(k)*d+a;s.lineTo(R,z);const Y=Math.cos(D)*d+r,Gt=Math.sin(D)*d+a;s.lineTo(Y,Gt)}s.closePath()}function L1(s,t,e,i,n){const{fullCircles:o,startAngle:r,circumference:a}=t;let l=t.endAngle;if(o){Xc(s,t,e,i,r+q,n);for(let c=0;c<o;++c)s.fill();isNaN(a)||(l=r+a%q,a%q===0&&(l+=q))}return Xc(s,t,e,i,l,n),s.fill(),l}function $1(s,t,e){const{x:i,y:n,startAngle:o,pixelMargin:r,fullCircles:a}=t,l=Math.max(t.outerRadius-r,0),c=t.innerRadius+r;let h;for(e&&sg(s,t,o+q),s.beginPath(),s.arc(i,n,c,o+q,o,!0),h=0;h<a;++h)s.stroke();for(s.beginPath(),s.arc(i,n,l,o,o+q),h=0;h<a;++h)s.stroke()}function R1(s,t,e,i,n,o){const{options:r}=t,{borderWidth:a,borderJoinStyle:l}=r,c=r.borderAlign==="inner";a&&(c?(s.lineWidth=a*2,s.lineJoin=l||"round"):(s.lineWidth=a,s.lineJoin=l||"bevel"),t.fullCircles&&$1(s,t,c),c&&sg(s,t,n),Xc(s,t,e,i,n,o),s.stroke())}class Ds extends Xt{constructor(t){super(),this.options=void 0,this.circumference=void 0,this.startAngle=void 0,this.endAngle=void 0,this.innerRadius=void 0,this.outerRadius=void 0,this.pixelMargin=0,this.fullCircles=0,t&&Object.assign(this,t)}inRange(t,e,i){const n=this.getProps(["x","y"],i),{angle:o,distance:r}=Cf(n,{x:t,y:e}),{startAngle:a,endAngle:l,innerRadius:c,outerRadius:h,circumference:d}=this.getProps(["startAngle","endAngle","innerRadius","outerRadius","circumference"],i),u=this.options.spacing/2,f=B(d,l-a)>=q||Dn(o,a,l),b=Ie(r,c+u,h+u);return f&&b}getCenterPoint(t){const{x:e,y:i,startAngle:n,endAngle:o,innerRadius:r,outerRadius:a}=this.getProps(["x","y","startAngle","endAngle","innerRadius","outerRadius","circumference"],t),{offset:l,spacing:c}=this.options,h=(n+o)/2,d=(r+a+c+l)/2;return{x:e+Math.cos(h)*d,y:i+Math.sin(h)*d}}tooltipPosition(t){return this.getCenterPoint(t)}draw(t){const{options:e,circumference:i}=this,n=(e.offset||0)/2,o=(e.spacing||0)/2,r=e.circular;if(this.pixelMargin=e.borderAlign==="inner"?.33:0,this.fullCircles=i>q?Math.floor(i/q):0,i===0||this.innerRadius<0||this.outerRadius<0)return;t.save();let a=0;if(n){a=n/2;const c=(this.startAngle+this.endAngle)/2;t.translate(Math.cos(c)*a,Math.sin(c)*a),this.circumference>=it&&(a=n)}t.fillStyle=e.backgroundColor,t.strokeStyle=e.borderColor;const l=L1(t,this,a,o,r);R1(t,this,a,o,l,r),t.restore()}}Ds.id="arc",Ds.defaults={borderAlign:"center",borderColor:"#fff",borderJoinStyle:void 0,borderRadius:0,borderWidth:2,offset:0,spacing:0,angle:void 0,circular:!0},Ds.defaultRoutes={backgroundColor:"backgroundColor"};function ng(s,t,e=t){s.lineCap=B(e.borderCapStyle,t.borderCapStyle),s.setLineDash(B(e.borderDash,t.borderDash)),s.lineDashOffset=B(e.borderDashOffset,t.borderDashOffset),s.lineJoin=B(e.borderJoinStyle,t.borderJoinStyle),s.lineWidth=B(e.borderWidth,t.borderWidth),s.strokeStyle=B(e.borderColor,t.borderColor)}function P1(s,t,e){s.lineTo(e.x,e.y)}function N1(s){return s.stepped?dI:s.tension||s.cubicInterpolationMode==="monotone"?uI:P1}function og(s,t,e={}){const i=s.length,{start:n=0,end:o=i-1}=e,{start:r,end:a}=t,l=Math.max(n,r),c=Math.min(o,a),h=n<r&&o<r||n>a&&o>a;return{count:i,start:l,loop:t.loop,ilen:c<l&&!h?i+c-l:c-l}}function B1(s,t,e,i){const{points:n,options:o}=t,{count:r,start:a,loop:l,ilen:c}=og(n,e,i),h=N1(o);let{move:d=!0,reverse:u}=i||{},p,f,b;for(p=0;p<=c;++p)f=n[(a+(u?c-p:p))%r],!f.skip&&(d?(s.moveTo(f.x,f.y),d=!1):h(s,b,f,u,o.stepped),b=f);return l&&(f=n[(a+(u?c:0))%r],h(s,b,f,u,o.stepped)),!!l}function H1(s,t,e,i){const n=t.points,{count:o,start:r,ilen:a}=og(n,e,i),{move:l=!0,reverse:c}=i||{};let h=0,d=0,u,p,f,b,v,y;const T=E=>(r+(c?a-E:E))%o,x=()=>{b!==v&&(s.lineTo(h,v),s.lineTo(h,b),s.lineTo(h,y))};for(l&&(p=n[T(0)],s.moveTo(p.x,p.y)),u=0;u<=a;++u){if(p=n[T(u)],p.skip)continue;const E=p.x,C=p.y,A=E|0;A===f?(C<b?b=C:C>v&&(v=C),h=(d*h+E)/++d):(x(),s.lineTo(E,C),f=A,d=0,b=v=C),y=C}x()}function Gc(s){const t=s.options,e=t.borderDash&&t.borderDash.length;return!s._decimated&&!s._loop&&!t.tension&&t.cubicInterpolationMode!=="monotone"&&!t.stepped&&!e?H1:B1}function V1(s){return s.stepped?zI:s.tension||s.cubicInterpolationMode==="monotone"?jI:Ni}function F1(s,t,e,i){let n=t._path;n||(n=t._path=new Path2D,t.path(n,e,i)&&n.closePath()),ng(s,t.options),s.stroke(n)}function W1(s,t,e,i){const{segments:n,options:o}=t,r=Gc(t);for(const a of n)ng(s,o,a.style),s.beginPath(),r(s,t,a,{start:e,end:e+i-1})&&s.closePath(),s.stroke()}const z1=typeof Path2D=="function";function j1(s,t,e,i){z1&&!t.options.segment?F1(s,t,e,i):W1(s,t,e,i)}class Le extends Xt{constructor(t){super(),this.animated=!0,this.options=void 0,this._chart=void 0,this._loop=void 0,this._fullLoop=void 0,this._path=void 0,this._points=void 0,this._segments=void 0,this._decimated=!1,this._pointsUpdated=!1,this._datasetIndex=void 0,t&&Object.assign(this,t)}updateControlPoints(t,e){const i=this.options;if((i.tension||i.cubicInterpolationMode==="monotone")&&!i.stepped&&!this._pointsUpdated){const n=i.spanGaps?this._loop:this._fullLoop;RI(this._points,i,t,n,e),this._pointsUpdated=!0}}set points(t){this._points=t,delete this._segments,delete this._path,this._pointsUpdated=!1}get points(){return this._points}get segments(){return this._segments||(this._segments=ZI(this,this.options.segment))}first(){const t=this.segments,e=this.points;return t.length&&e[t[0].start]}last(){const t=this.segments,e=this.points,i=t.length;return i&&e[t[i-1].end]}interpolate(t,e){const i=this.options,n=t[e],o=this.points,r=h_(this,{property:e,start:n,end:n});if(!r.length)return;const a=[],l=V1(i);let c,h;for(c=0,h=r.length;c<h;++c){const{start:d,end:u}=r[c],p=o[d],f=o[u];if(p===f){a.push(p);continue}const b=Math.abs((n-p[e])/(f[e]-p[e])),v=l(p,f,b,i.stepped);v[e]=t[e],a.push(v)}return a.length===1?a[0]:a}pathSegment(t,e,i){return Gc(this)(t,this,e,i)}path(t,e,i){const n=this.segments,o=Gc(this);let r=this._loop;e=e||0,i=i||this.points.length-e;for(const a of n)r&=o(t,this,a,{start:e,end:e+i-1});return!!r}draw(t,e,i,n){const o=this.options||{};(this.points||[]).length&&o.borderWidth&&(t.save(),j1(t,this,i,n),t.restore()),this.animated&&(this._pointsUpdated=!1,this._path=void 0)}}Le.id="line",Le.defaults={borderCapStyle:"butt",borderDash:[],borderDashOffset:0,borderJoinStyle:"miter",borderWidth:3,capBezierPoints:!0,cubicInterpolationMode:"default",fill:!1,spanGaps:!1,stepped:!1,tension:0},Le.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"},Le.descriptors={_scriptable:!0,_indexable:s=>s!=="borderDash"&&s!=="fill"};function rg(s,t,e,i){const n=s.options,{[e]:o}=s.getProps([e],i);return Math.abs(t-o)<n.radius+n.hitRadius}class Ms extends Xt{constructor(t){super(),this.options=void 0,this.parsed=void 0,this.skip=void 0,this.stop=void 0,t&&Object.assign(this,t)}inRange(t,e,i){const n=this.options,{x:o,y:r}=this.getProps(["x","y"],i);return Math.pow(t-o,2)+Math.pow(e-r,2)<Math.pow(n.hitRadius+n.radius,2)}inXRange(t,e){return rg(this,t,"x",e)}inYRange(t,e){return rg(this,t,"y",e)}getCenterPoint(t){const{x:e,y:i}=this.getProps(["x","y"],t);return{x:e,y:i}}size(t){t=t||this.options||{};let e=t.radius||0;e=Math.max(e,e&&t.hoverRadius||0);const i=e&&t.borderWidth||0;return(e+i)*2}draw(t,e){const i=this.options;this.skip||i.radius<.1||!Pn(this,e,this.size(i)/2)||(t.strokeStyle=i.borderColor,t.lineWidth=i.borderWidth,t.fillStyle=i.backgroundColor,Oc(t,i,this.x,this.y))}getRange(){const t=this.options||{};return t.radius+t.hitRadius}}Ms.id="point",Ms.defaults={borderWidth:1,hitRadius:1,hoverBorderWidth:1,hoverRadius:4,pointStyle:"circle",radius:3,rotation:0},Ms.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"};function ag(s,t){const{x:e,y:i,base:n,width:o,height:r}=s.getProps(["x","y","base","width","height"],t);let a,l,c,h,d;return s.horizontal?(d=r/2,a=Math.min(e,n),l=Math.max(e,n),c=i-d,h=i+d):(d=o/2,a=e-d,l=e+d,c=Math.min(i,n),h=Math.max(i,n)),{left:a,top:c,right:l,bottom:h}}function ai(s,t,e,i){return s?0:dt(t,e,i)}function Y1(s,t,e){const i=s.options.borderWidth,n=s.borderSkipped,o=Kf(i);return{t:ai(n.top,o.top,0,e),r:ai(n.right,o.right,0,t),b:ai(n.bottom,o.bottom,0,e),l:ai(n.left,o.left,0,t)}}function K1(s,t,e){const{enableBorderRadius:i}=s.getProps(["enableBorderRadius"]),n=s.options.borderRadius,o=$i(n),r=Math.min(t,e),a=s.borderSkipped,l=i||V(n);return{topLeft:ai(!l||a.top||a.left,o.topLeft,0,r),topRight:ai(!l||a.top||a.right,o.topRight,0,r),bottomLeft:ai(!l||a.bottom||a.left,o.bottomLeft,0,r),bottomRight:ai(!l||a.bottom||a.right,o.bottomRight,0,r)}}function U1(s){const t=ag(s),e=t.right-t.left,i=t.bottom-t.top,n=Y1(s,e/2,i/2),o=K1(s,e/2,i/2);return{outer:{x:t.left,y:t.top,w:e,h:i,radius:o},inner:{x:t.left+n.l,y:t.top+n.t,w:e-n.l-n.r,h:i-n.t-n.b,radius:{topLeft:Math.max(0,o.topLeft-Math.max(n.t,n.l)),topRight:Math.max(0,o.topRight-Math.max(n.t,n.r)),bottomLeft:Math.max(0,o.bottomLeft-Math.max(n.b,n.l)),bottomRight:Math.max(0,o.bottomRight-Math.max(n.b,n.r))}}}}function qc(s,t,e,i){const n=t===null,o=e===null,a=s&&!(n&&o)&&ag(s,i);return a&&(n||Ie(t,a.left,a.right))&&(o||Ie(e,a.top,a.bottom))}function X1(s){return s.topLeft||s.topRight||s.bottomLeft||s.bottomRight}function G1(s,t){s.rect(t.x,t.y,t.w,t.h)}function Zc(s,t,e={}){const i=s.x!==e.x?-t:0,n=s.y!==e.y?-t:0,o=(s.x+s.w!==e.x+e.w?t:0)-i,r=(s.y+s.h!==e.y+e.h?t:0)-n;return{x:s.x+i,y:s.y+n,w:s.w+o,h:s.h+r,radius:s.radius}}class Ls extends Xt{constructor(t){super(),this.options=void 0,this.horizontal=void 0,this.base=void 0,this.width=void 0,this.height=void 0,this.inflateAmount=void 0,t&&Object.assign(this,t)}draw(t){const{inflateAmount:e,options:{borderColor:i,backgroundColor:n}}=this,{inner:o,outer:r}=U1(this),a=X1(r.radius)?Nn:G1;t.save(),(r.w!==o.w||r.h!==o.h)&&(t.beginPath(),a(t,Zc(r,e,o)),t.clip(),a(t,Zc(o,-e,r)),t.fillStyle=i,t.fill("evenodd")),t.beginPath(),a(t,Zc(o,e)),t.fillStyle=n,t.fill(),t.restore()}inRange(t,e,i){return qc(this,t,e,i)}inXRange(t,e){return qc(this,t,null,e)}inYRange(t,e){return qc(this,null,t,e)}getCenterPoint(t){const{x:e,y:i,base:n,horizontal:o}=this.getProps(["x","y","base","horizontal"],t);return{x:o?(e+n)/2:e,y:o?i:(i+n)/2}}getRange(t){return t==="x"?this.width/2:this.height/2}}Ls.id="bar",Ls.defaults={borderSkipped:"start",borderWidth:0,borderRadius:0,inflateAmount:"auto",pointStyle:void 0},Ls.defaultRoutes={backgroundColor:"backgroundColor",borderColor:"borderColor"};var lg=Object.freeze({__proto__:null,ArcElement:Ds,LineElement:Le,PointElement:Ms,BarElement:Ls});function q1(s,t,e,i,n){const o=n.samples||i;if(o>=e)return s.slice(t,t+e);const r=[],a=(e-2)/(o-2);let l=0;const c=t+e-1;let h=t,d,u,p,f,b;for(r[l++]=s[h],d=0;d<o-2;d++){let v=0,y=0,T;const x=Math.floor((d+1)*a)+1+t,E=Math.min(Math.floor((d+2)*a)+1,e)+t,C=E-x;for(T=x;T<E;T++)v+=s[T].x,y+=s[T].y;v/=C,y/=C;const A=Math.floor(d*a)+1+t,w=Math.min(Math.floor((d+1)*a)+1,e)+t,{x:S,y:k}=s[h];for(p=f=-1,T=A;T<w;T++)f=.5*Math.abs((S-v)*(s[T].y-k)-(S-s[T].x)*(y-k)),f>p&&(p=f,u=s[T],b=T);r[l++]=u,h=b}return r[l++]=s[c],r}function Z1(s,t,e,i){let n=0,o=0,r,a,l,c,h,d,u,p,f,b;const v=[],y=t+e-1,T=s[t].x,E=s[y].x-T;for(r=t;r<t+e;++r){a=s[r],l=(a.x-T)/E*i,c=a.y;const C=l|0;if(C===h)c<f?(f=c,d=r):c>b&&(b=c,u=r),n=(o*n+a.x)/++o;else{const A=r-1;if(!H(d)&&!H(u)){const w=Math.min(d,u),S=Math.max(d,u);w!==p&&w!==A&&v.push({...s[w],x:n}),S!==p&&S!==A&&v.push({...s[S],x:n})}r>0&&A!==p&&v.push(s[A]),v.push(a),h=C,o=0,f=b=c,d=u=p=r}}return v}function cg(s){if(s._decimated){const t=s._data;delete s._decimated,delete s._data,Object.defineProperty(s,"data",{value:t})}}function hg(s){s.data.datasets.forEach(t=>{cg(t)})}function Q1(s,t){const e=t.length;let i=0,n;const{iScale:o}=s,{min:r,max:a,minDefined:l,maxDefined:c}=o.getUserBounds();return l&&(i=dt(De(t,o.axis,r).lo,0,e-1)),c?n=dt(De(t,o.axis,a).hi+1,i,e)-i:n=e-i,{start:i,count:n}}var dg={id:"decimation",defaults:{algorithm:"min-max",enabled:!1},beforeElementsUpdate:(s,t,e)=>{if(!e.enabled){hg(s);return}const i=s.width;s.data.datasets.forEach((n,o)=>{const{_data:r,indexAxis:a}=n,l=s.getDatasetMeta(o),c=r||n.data;if(tt([a,s.options.indexAxis])==="y"||!l.controller.supportsDecimation)return;const h=s.scales[l.xAxisID];if(h.type!=="linear"&&h.type!=="time"||s.options.parsing)return;let{start:d,count:u}=Q1(l,c);const p=e.threshold||4*i;if(u<=p){cg(n);return}H(r)&&(n._data=c,delete n.data,Object.defineProperty(n,"data",{configurable:!0,enumerable:!0,get:function(){return this._decimated},set:function(b){this._data=b}}));let f;switch(e.algorithm){case"lttb":f=q1(c,d,u,i,e);break;case"min-max":f=Z1(c,d,u,i);break;default:throw new Error(`Unsupported decimation algorithm '${e.algorithm}'`)}n._decimated=f})},destroy(s){hg(s)}};function J1(s,t,e){const i=s.segments,n=s.points,o=t.points,r=[];for(const a of i){let{start:l,end:c}=a;c=Jc(l,c,n);const h=Qc(e,n[l],n[c],a.loop);if(!t.segments){r.push({source:a,target:h,start:n[l],end:n[c]});continue}const d=h_(t,h);for(const u of d){const p=Qc(e,o[u.start],o[u.end],u.loop),f=c_(a,n,p);for(const b of f)r.push({source:b,target:u,start:{[e]:ug(h,p,"start",Math.max)},end:{[e]:ug(h,p,"end",Math.min)}})}}return r}function Qc(s,t,e,i){if(i)return;let n=t[s],o=e[s];return s==="angle"&&(n=Vt(n),o=Vt(o)),{property:s,start:n,end:o}}function tM(s,t){const{x:e=null,y:i=null}=s||{},n=t.points,o=[];return t.segments.forEach(({start:r,end:a})=>{a=Jc(r,a,n);const l=n[r],c=n[a];i!==null?(o.push({x:l.x,y:i}),o.push({x:c.x,y:i})):e!==null&&(o.push({x:e,y:l.y}),o.push({x:e,y:c.y}))}),o}function Jc(s,t,e){for(;t>s;t--){const i=e[t];if(!isNaN(i.x)&&!isNaN(i.y))break}return t}function ug(s,t,e,i){return s&&t?i(s[e],t[e]):s?s[e]:t?t[e]:0}function pg(s,t){let e=[],i=!1;return Q(s)?(i=!0,e=s):e=tM(s,t),e.length?new Le({points:e,options:{tension:0},_loop:i,_fullLoop:i}):null}function fg(s){return s&&s.fill!==!1}function eM(s,t,e){let n=s[t].fill;const o=[t];let r;if(!e)return n;for(;n!==!1&&o.indexOf(n)===-1;){if(!rt(n))return n;if(r=s[n],!r)return!1;if(r.visible)return n;o.push(n),n=r.fill}return!1}function iM(s,t,e){const i=rM(s);if(V(i))return isNaN(i.value)?!1:i;let n=parseFloat(i);return rt(n)&&Math.floor(n)===n?sM(i[0],t,n,e):["origin","start","end","stack","shape"].indexOf(i)>=0&&i}function sM(s,t,e,i){return(s==="-"||s==="+")&&(e=t+e),e===t||e<0||e>=i?!1:e}function nM(s,t){let e=null;return s==="start"?e=t.bottom:s==="end"?e=t.top:V(s)?e=t.getPixelForValue(s.value):t.getBasePixel&&(e=t.getBasePixel()),e}function oM(s,t,e){let i;return s==="start"?i=e:s==="end"?i=t.options.reverse?t.min:t.max:V(s)?i=s.value:i=t.getBaseValue(),i}function rM(s){const t=s.options,e=t.fill;let i=B(e&&e.target,e);return i===void 0&&(i=!!t.backgroundColor),i===!1||i===null?!1:i===!0?"origin":i}function aM(s){const{scale:t,index:e,line:i}=s,n=[],o=i.segments,r=i.points,a=lM(t,e);a.push(pg({x:null,y:t.bottom},i));for(let l=0;l<o.length;l++){const c=o[l];for(let h=c.start;h<=c.end;h++)cM(n,r[h],a)}return new Le({points:n,options:{}})}function lM(s,t){const e=[],i=s.getMatchingVisibleMetas("line");for(let n=0;n<i.length;n++){const o=i[n];if(o.index===t)break;o.hidden||e.unshift(o.dataset)}return e}function cM(s,t,e){const i=[];for(let n=0;n<e.length;n++){const o=e[n],{first:r,last:a,point:l}=hM(o,t,"x");if(!(!l||r&&a)){if(r)i.unshift(l);else if(s.push(l),!a)break}}s.push(...i)}function hM(s,t,e){const i=s.interpolate(t,e);if(!i)return{};const n=i[e],o=s.segments,r=s.points;let a=!1,l=!1;for(let c=0;c<o.length;c++){const h=o[c],d=r[h.start][e],u=r[h.end][e];if(Ie(n,d,u)){a=n===d,l=n===u;break}}return{first:a,last:l,point:i}}class _g{constructor(t){this.x=t.x,this.y=t.y,this.radius=t.radius}pathSegment(t,e,i){const{x:n,y:o,radius:r}=this;return e=e||{start:0,end:q},t.arc(n,o,r,e.end,e.start,!0),!i.bounds}interpolate(t){const{x:e,y:i,radius:n}=this,o=t.angle;return{x:e+Math.cos(o)*n,y:i+Math.sin(o)*n,angle:o}}}function dM(s){const{chart:t,fill:e,line:i}=s;if(rt(e))return uM(t,e);if(e==="stack")return aM(s);if(e==="shape")return!0;const n=pM(s);return n instanceof _g?n:pg(n,i)}function uM(s,t){const e=s.getDatasetMeta(t);return e&&s.isDatasetVisible(t)?e.dataset:null}function pM(s){return(s.scale||{}).getPointPositionForValue?_M(s):fM(s)}function fM(s){const{scale:t={},fill:e}=s,i=nM(e,t);if(rt(i)){const n=t.isHorizontal();return{x:n?i:null,y:n?null:i}}return null}function _M(s){const{scale:t,fill:e}=s,i=t.options,n=t.getLabels().length,o=i.reverse?t.max:t.min,r=oM(e,t,o),a=[];if(i.grid.circular){const l=t.getPointPositionForValue(0,o);return new _g({x:l.x,y:l.y,radius:t.getDistanceFromCenterForValue(r)})}for(let l=0;l<n;++l)a.push(t.getPointPositionForValue(l,r));return a}function th(s,t,e){const i=dM(t),{line:n,scale:o,axis:r}=t,a=n.options,l=a.fill,c=a.backgroundColor,{above:h=c,below:d=c}=l||{};i&&n.points.length&&(qr(s,e),gM(s,{line:n,target:i,above:h,below:d,area:e,scale:o,axis:r}),Zr(s))}function gM(s,t){const{line:e,target:i,above:n,below:o,area:r,scale:a}=t,l=e._loop?"angle":t.axis;s.save(),l==="x"&&o!==n&&(gg(s,i,r.top),mg(s,{line:e,target:i,color:n,scale:a,property:l}),s.restore(),s.save(),gg(s,i,r.bottom)),mg(s,{line:e,target:i,color:o,scale:a,property:l}),s.restore()}function gg(s,t,e){const{segments:i,points:n}=t;let o=!0,r=!1;s.beginPath();for(const a of i){const{start:l,end:c}=a,h=n[l],d=n[Jc(l,c,n)];o?(s.moveTo(h.x,h.y),o=!1):(s.lineTo(h.x,e),s.lineTo(h.x,h.y)),r=!!t.pathSegment(s,a,{move:r}),r?s.closePath():s.lineTo(d.x,e)}s.lineTo(t.first().x,e),s.closePath(),s.clip()}function mg(s,t){const{line:e,target:i,property:n,color:o,scale:r}=t,a=J1(e,i,n);for(const{source:l,target:c,start:h,end:d}of a){const{style:{backgroundColor:u=o}={}}=l,p=i!==!0;s.save(),s.fillStyle=u,mM(s,r,p&&Qc(n,h,d)),s.beginPath();const f=!!e.pathSegment(s,l);let b;if(p){f?s.closePath():bg(s,i,d,n);const v=!!i.pathSegment(s,c,{move:f,reverse:!0});b=f&&v,b||bg(s,i,h,n)}s.closePath(),s.fill(b?"evenodd":"nonzero"),s.restore()}}function mM(s,t,e){const{top:i,bottom:n}=t.chart.chartArea,{property:o,start:r,end:a}=e||{};o==="x"&&(s.beginPath(),s.rect(r,i,a-r,n-i),s.clip())}function bg(s,t,e,i){const n=t.interpolate(e,i);n&&s.lineTo(n.x,n.y)}var vg={id:"filler",afterDatasetsUpdate(s,t,e){const i=(s.data.datasets||[]).length,n=[];let o,r,a,l;for(r=0;r<i;++r)o=s.getDatasetMeta(r),a=o.dataset,l=null,a&&a.options&&a instanceof Le&&(l={visible:s.isDatasetVisible(r),index:r,fill:iM(a,r,i),chart:s,axis:o.controller.options.indexAxis,scale:o.vScale,line:a}),o.$filler=l,n.push(l);for(r=0;r<i;++r)l=n[r],!(!l||l.fill===!1)&&(l.fill=eM(n,r,e.propagate))},beforeDraw(s,t,e){const i=e.drawTime==="beforeDraw",n=s.getSortedVisibleDatasetMetas(),o=s.chartArea;for(let r=n.length-1;r>=0;--r){const a=n[r].$filler;a&&(a.line.updateControlPoints(o,a.axis),i&&a.fill&&th(s.ctx,a,o))}},beforeDatasetsDraw(s,t,e){if(e.drawTime!=="beforeDatasetsDraw")return;const i=s.getSortedVisibleDatasetMetas();for(let n=i.length-1;n>=0;--n){const o=i[n].$filler;fg(o)&&th(s.ctx,o,s.chartArea)}},beforeDatasetDraw(s,t,e){const i=t.meta.$filler;!fg(i)||e.drawTime!=="beforeDatasetDraw"||th(s.ctx,i,s.chartArea)},defaults:{propagate:!0,drawTime:"beforeDatasetDraw"}};const yg=(s,t)=>{let{boxHeight:e=t,boxWidth:i=t}=s;return s.usePointStyle&&(e=Math.min(e,t),i=s.pointStyleWidth||Math.min(i,t)),{boxWidth:i,boxHeight:e,itemHeight:Math.max(t,e)}},bM=(s,t)=>s!==null&&t!==null&&s.datasetIndex===t.datasetIndex&&s.index===t.index;class Tg extends Xt{constructor(t){super(),this._added=!1,this.legendHitBoxes=[],this._hoveredItem=null,this.doughnutMode=!1,this.chart=t.chart,this.options=t.options,this.ctx=t.ctx,this.legendItems=void 0,this.columnSizes=void 0,this.lineWidths=void 0,this.maxHeight=void 0,this.maxWidth=void 0,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.height=void 0,this.width=void 0,this._margins=void 0,this.position=void 0,this.weight=void 0,this.fullSize=void 0}update(t,e,i){this.maxWidth=t,this.maxHeight=e,this._margins=i,this.setDimensions(),this.buildLabels(),this.fit()}setDimensions(){this.isHorizontal()?(this.width=this.maxWidth,this.left=this._margins.left,this.right=this.width):(this.height=this.maxHeight,this.top=this._margins.top,this.bottom=this.height)}buildLabels(){const t=this.options.labels||{};let e=G(t.generateLabels,[this.chart],this)||[];t.filter&&(e=e.filter(i=>t.filter(i,this.chart.data))),t.sort&&(e=e.sort((i,n)=>t.sort(i,n,this.chart.data))),this.options.reverse&&e.reverse(),this.legendItems=e}fit(){const{options:t,ctx:e}=this;if(!t.display){this.width=this.height=0;return}const i=t.labels,n=lt(i.font),o=n.size,r=this._computeTitleHeight(),{boxWidth:a,itemHeight:l}=yg(i,o);let c,h;e.font=n.string,this.isHorizontal()?(c=this.maxWidth,h=this._fitRows(r,o,a,l)+10):(h=this.maxHeight,c=this._fitCols(r,o,a,l)+10),this.width=Math.min(c,t.maxWidth||this.maxWidth),this.height=Math.min(h,t.maxHeight||this.maxHeight)}_fitRows(t,e,i,n){const{ctx:o,maxWidth:r,options:{labels:{padding:a}}}=this,l=this.legendHitBoxes=[],c=this.lineWidths=[0],h=n+a;let d=t;o.textAlign="left",o.textBaseline="middle";let u=-1,p=-h;return this.legendItems.forEach((f,b)=>{const v=i+e/2+o.measureText(f.text).width;(b===0||c[c.length-1]+v+2*a>r)&&(d+=h,c[c.length-(b>0?0:1)]=0,p+=h,u++),l[b]={left:0,top:p,row:u,width:v,height:n},c[c.length-1]+=v+a}),d}_fitCols(t,e,i,n){const{ctx:o,maxHeight:r,options:{labels:{padding:a}}}=this,l=this.legendHitBoxes=[],c=this.columnSizes=[],h=r-t;let d=a,u=0,p=0,f=0,b=0;return this.legendItems.forEach((v,y)=>{const T=i+e/2+o.measureText(v.text).width;y>0&&p+n+2*a>h&&(d+=u+a,c.push({width:u,height:p}),f+=u+a,b++,u=p=0),l[y]={left:f,top:p,col:b,width:T,height:n},u=Math.max(u,T),p+=n+a}),d+=u,c.push({width:u,height:p}),d}adjustHitBoxes(){if(!this.options.display)return;const t=this._computeTitleHeight(),{legendHitBoxes:e,options:{align:i,labels:{padding:n},rtl:o}}=this,r=Os(o,this.left,this.width);if(this.isHorizontal()){let a=0,l=gt(i,this.left+n,this.right-this.lineWidths[a]);for(const c of e)a!==c.row&&(a=c.row,l=gt(i,this.left+n,this.right-this.lineWidths[a])),c.top+=this.top+t+n,c.left=r.leftForLtr(r.x(l),c.width),l+=c.width+n}else{let a=0,l=gt(i,this.top+t+n,this.bottom-this.columnSizes[a].height);for(const c of e)c.col!==a&&(a=c.col,l=gt(i,this.top+t+n,this.bottom-this.columnSizes[a].height)),c.top=l,c.left+=this.left+n,c.left=r.leftForLtr(r.x(c.left),c.width),l+=c.height+n}}isHorizontal(){return this.options.position==="top"||this.options.position==="bottom"}draw(){if(this.options.display){const t=this.ctx;qr(t,this),this._draw(),Zr(t)}}_draw(){const{options:t,columnSizes:e,lineWidths:i,ctx:n}=this,{align:o,labels:r}=t,a=F.color,l=Os(t.rtl,this.left,this.width),c=lt(r.font),{color:h,padding:d}=r,u=c.size,p=u/2;let f;this.drawTitle(),n.textAlign=l.textAlign("left"),n.textBaseline="middle",n.lineWidth=.5,n.font=c.string;const{boxWidth:b,boxHeight:v,itemHeight:y}=yg(r,u),T=function(w,S,k){if(isNaN(b)||b<=0||isNaN(v)||v<0)return;n.save();const D=B(k.lineWidth,1);if(n.fillStyle=B(k.fillStyle,a),n.lineCap=B(k.lineCap,"butt"),n.lineDashOffset=B(k.lineDashOffset,0),n.lineJoin=B(k.lineJoin,"miter"),n.lineWidth=D,n.strokeStyle=B(k.strokeStyle,a),n.setLineDash(B(k.lineDash,[])),r.usePointStyle){const I={radius:v*Math.SQRT2/2,pointStyle:k.pointStyle,rotation:k.rotation,borderWidth:D},M=l.xPlus(w,b/2),P=S+p;Yf(n,I,M,P,r.pointStyleWidth&&b)}else{const I=S+Math.max((u-v)/2,0),M=l.leftForLtr(w,b),P=$i(k.borderRadius);n.beginPath(),Object.values(P).some(X=>X!==0)?Nn(n,{x:M,y:I,w:b,h:v,radius:P}):n.rect(M,I,b,v),n.fill(),D!==0&&n.stroke()}n.restore()},x=function(w,S,k){Li(n,k.text,w,S+y/2,c,{strikethrough:k.hidden,textAlign:l.textAlign(k.textAlign)})},E=this.isHorizontal(),C=this._computeTitleHeight();E?f={x:gt(o,this.left+d,this.right-i[0]),y:this.top+d+C,line:0}:f={x:this.left+d,y:gt(o,this.top+C+d,this.bottom-e[0].height),line:0},o_(this.ctx,t.textDirection);const A=y+d;this.legendItems.forEach((w,S)=>{n.strokeStyle=w.fontColor||h,n.fillStyle=w.fontColor||h;const k=n.measureText(w.text).width,D=l.textAlign(w.textAlign||(w.textAlign=r.textAlign)),I=b+p+k;let M=f.x,P=f.y;l.setWidth(this.width),E?S>0&&M+I+d>this.right&&(P=f.y+=A,f.line++,M=f.x=gt(o,this.left+d,this.right-i[f.line])):S>0&&P+A>this.bottom&&(M=f.x=M+e[f.line].width+d,f.line++,P=f.y=gt(o,this.top+C+d,this.bottom-e[f.line].height));const X=l.x(M);T(X,P,w),M=HO(D,M+b+p,E?M+I:this.right,t.rtl),x(l.x(M),P,w),E?f.x+=I+d:f.y+=A}),r_(this.ctx,t.textDirection)}drawTitle(){const t=this.options,e=t.title,i=lt(e.font),n=pt(e.padding);if(!e.display)return;const o=Os(t.rtl,this.left,this.width),r=this.ctx,a=e.position,l=i.size/2,c=n.top+l;let h,d=this.left,u=this.width;if(this.isHorizontal())u=Math.max(...this.lineWidths),h=this.top+c,d=gt(t.align,d,this.right-u);else{const f=this.columnSizes.reduce((b,v)=>Math.max(b,v.height),0);h=c+gt(t.align,this.top,this.bottom-f-t.labels.padding-this._computeTitleHeight())}const p=gt(a,d,d+u);r.textAlign=o.textAlign(yc(a)),r.textBaseline="middle",r.strokeStyle=e.color,r.fillStyle=e.color,r.font=i.string,Li(r,e.text,p,h,i)}_computeTitleHeight(){const t=this.options.title,e=lt(t.font),i=pt(t.padding);return t.display?e.lineHeight+i.height:0}_getLegendItemAt(t,e){let i,n,o;if(Ie(t,this.left,this.right)&&Ie(e,this.top,this.bottom)){for(o=this.legendHitBoxes,i=0;i<o.length;++i)if(n=o[i],Ie(t,n.left,n.left+n.width)&&Ie(e,n.top,n.top+n.height))return this.legendItems[i]}return null}handleEvent(t){const e=this.options;if(!vM(t.type,e))return;const i=this._getLegendItemAt(t.x,t.y);if(t.type==="mousemove"||t.type==="mouseout"){const n=this._hoveredItem,o=bM(n,i);n&&!o&&G(e.onLeave,[t,n,this],this),this._hoveredItem=i,i&&!o&&G(e.onHover,[t,i,this],this)}else i&&G(e.onClick,[t,i,this],this)}}function vM(s,t){return!!((s==="mousemove"||s==="mouseout")&&(t.onHover||t.onLeave)||t.onClick&&(s==="click"||s==="mouseup"))}var Eg={id:"legend",_element:Tg,start(s,t,e){const i=s.legend=new Tg({ctx:s.ctx,options:e,chart:s});ft.configure(s,i,e),ft.addBox(s,i)},stop(s){ft.removeBox(s,s.legend),delete s.legend},beforeUpdate(s,t,e){const i=s.legend;ft.configure(s,i,e),i.options=e},afterUpdate(s){const t=s.legend;t.buildLabels(),t.adjustHitBoxes()},afterEvent(s,t){t.replay||s.legend.handleEvent(t.event)},defaults:{display:!0,position:"top",align:"center",fullSize:!0,reverse:!1,weight:1e3,onClick(s,t,e){const i=t.datasetIndex,n=e.chart;n.isDatasetVisible(i)?(n.hide(i),t.hidden=!0):(n.show(i),t.hidden=!1)},onHover:null,onLeave:null,labels:{color:s=>s.chart.options.color,boxWidth:40,padding:10,generateLabels(s){const t=s.data.datasets,{labels:{usePointStyle:e,pointStyle:i,textAlign:n,color:o}}=s.legend.options;return s._getSortedDatasetMetas().map(r=>{const a=r.controller.getStyle(e?0:void 0),l=pt(a.borderWidth);return{text:t[r.index].label,fillStyle:a.backgroundColor,fontColor:o,hidden:!r.visible,lineCap:a.borderCapStyle,lineDash:a.borderDash,lineDashOffset:a.borderDashOffset,lineJoin:a.borderJoinStyle,lineWidth:(l.width+l.height)/4,strokeStyle:a.borderColor,pointStyle:i||a.pointStyle,rotation:a.rotation,textAlign:n||a.textAlign,borderRadius:0,datasetIndex:r.index}},this)}},title:{color:s=>s.chart.options.color,display:!1,position:"center",text:""}},descriptors:{_scriptable:s=>!s.startsWith("on"),labels:{_scriptable:s=>!["generateLabels","filter","sort"].includes(s)}}};class eh extends Xt{constructor(t){super(),this.chart=t.chart,this.options=t.options,this.ctx=t.ctx,this._padding=void 0,this.top=void 0,this.bottom=void 0,this.left=void 0,this.right=void 0,this.width=void 0,this.height=void 0,this.position=void 0,this.weight=void 0,this.fullSize=void 0}update(t,e){const i=this.options;if(this.left=0,this.top=0,!i.display){this.width=this.height=this.right=this.bottom=0;return}this.width=this.right=t,this.height=this.bottom=e;const n=Q(i.text)?i.text.length:1;this._padding=pt(i.padding);const o=n*lt(i.font).lineHeight+this._padding.height;this.isHorizontal()?this.height=o:this.width=o}isHorizontal(){const t=this.options.position;return t==="top"||t==="bottom"}_drawArgs(t){const{top:e,left:i,bottom:n,right:o,options:r}=this,a=r.align;let l=0,c,h,d;return this.isHorizontal()?(h=gt(a,i,o),d=e+t,c=o-i):(r.position==="left"?(h=i+t,d=gt(a,n,e),l=it*-.5):(h=o-t,d=gt(a,e,n),l=it*.5),c=n-e),{titleX:h,titleY:d,maxWidth:c,rotation:l}}draw(){const t=this.ctx,e=this.options;if(!e.display)return;const i=lt(e.font),o=i.lineHeight/2+this._padding.top,{titleX:r,titleY:a,maxWidth:l,rotation:c}=this._drawArgs(o);Li(t,e.text,0,0,i,{color:e.color,maxWidth:l,rotation:c,textAlign:yc(e.align),textBaseline:"middle",translation:[r,a]})}}function yM(s,t){const e=new eh({ctx:s.ctx,options:t,chart:s});ft.configure(s,e,t),ft.addBox(s,e),s.titleBlock=e}var xg={id:"title",_element:eh,start(s,t,e){yM(s,e)},stop(s){const t=s.titleBlock;ft.removeBox(s,t),delete s.titleBlock},beforeUpdate(s,t,e){const i=s.titleBlock;ft.configure(s,i,e),i.options=e},defaults:{align:"center",display:!1,font:{weight:"bold"},fullSize:!0,padding:10,position:"top",text:"",weight:2e3},defaultRoutes:{color:"color"},descriptors:{_scriptable:!0,_indexable:!1}};const ca=new WeakMap;var Cg={id:"subtitle",start(s,t,e){const i=new eh({ctx:s.ctx,options:e,chart:s});ft.configure(s,i,e),ft.addBox(s,i),ca.set(s,i)},stop(s){ft.removeBox(s,ca.get(s)),ca.delete(s)},beforeUpdate(s,t,e){const i=ca.get(s);ft.configure(s,i,e),i.options=e},defaults:{align:"center",display:!1,font:{weight:"normal"},fullSize:!0,padding:0,position:"top",text:"",weight:1500},defaultRoutes:{color:"color"},descriptors:{_scriptable:!0,_indexable:!1}};const to={average(s){if(!s.length)return!1;let t,e,i=0,n=0,o=0;for(t=0,e=s.length;t<e;++t){const r=s[t].element;if(r&&r.hasValue()){const a=r.tooltipPosition();i+=a.x,n+=a.y,++o}}return{x:i/o,y:n/o}},nearest(s,t){if(!s.length)return!1;let e=t.x,i=t.y,n=Number.POSITIVE_INFINITY,o,r,a;for(o=0,r=s.length;o<r;++o){const l=s[o].element;if(l&&l.hasValue()){const c=l.getCenterPoint(),h=bc(t,c);h<n&&(n=h,a=l)}}if(a){const l=a.tooltipPosition();e=l.x,i=l.y}return{x:e,y:i}}};function Ce(s,t){return t&&(Q(t)?Array.prototype.push.apply(s,t):s.push(t)),s}function $e(s){return(typeof s=="string"||s instanceof String)&&s.indexOf(`
+`)>-1?s.split(`
+`):s}function TM(s,t){const{element:e,datasetIndex:i,index:n}=t,o=s.getDatasetMeta(i).controller,{label:r,value:a}=o.getLabelAndValue(n);return{chart:s,label:r,parsed:o.getParsed(n),raw:s.data.datasets[i].data[n],formattedValue:a,dataset:o.getDataset(),dataIndex:n,datasetIndex:i,element:e}}function Ag(s,t){const e=s.chart.ctx,{body:i,footer:n,title:o}=s,{boxWidth:r,boxHeight:a}=t,l=lt(t.bodyFont),c=lt(t.titleFont),h=lt(t.footerFont),d=o.length,u=n.length,p=i.length,f=pt(t.padding);let b=f.height,v=0,y=i.reduce((E,C)=>E+C.before.length+C.lines.length+C.after.length,0);if(y+=s.beforeBody.length+s.afterBody.length,d&&(b+=d*c.lineHeight+(d-1)*t.titleSpacing+t.titleMarginBottom),y){const E=t.displayColors?Math.max(a,l.lineHeight):l.lineHeight;b+=p*E+(y-p)*l.lineHeight+(y-1)*t.bodySpacing}u&&(b+=t.footerMarginTop+u*h.lineHeight+(u-1)*t.footerSpacing);let T=0;const x=function(E){v=Math.max(v,e.measureText(E).width+T)};return e.save(),e.font=c.string,U(s.title,x),e.font=l.string,U(s.beforeBody.concat(s.afterBody),x),T=t.displayColors?r+2+t.boxPadding:0,U(i,E=>{U(E.before,x),U(E.lines,x),U(E.after,x)}),T=0,e.font=h.string,U(s.footer,x),e.restore(),v+=f.width,{width:v,height:b}}function EM(s,t){const{y:e,height:i}=t;return e<i/2?"top":e>s.height-i/2?"bottom":"center"}function xM(s,t,e,i){const{x:n,width:o}=i,r=e.caretSize+e.caretPadding;if(s==="left"&&n+o+r>t.width||s==="right"&&n-o-r<0)return!0}function CM(s,t,e,i){const{x:n,width:o}=e,{width:r,chartArea:{left:a,right:l}}=s;let c="center";return i==="center"?c=n<=(a+l)/2?"left":"right":n<=o/2?c="left":n>=r-o/2&&(c="right"),xM(c,s,t,e)&&(c="center"),c}function wg(s,t,e){const i=e.yAlign||t.yAlign||EM(s,e);return{xAlign:e.xAlign||t.xAlign||CM(s,t,e,i),yAlign:i}}function AM(s,t){let{x:e,width:i}=s;return t==="right"?e-=i:t==="center"&&(e-=i/2),e}function wM(s,t,e){let{y:i,height:n}=s;return t==="top"?i+=e:t==="bottom"?i-=n+e:i-=n/2,i}function kg(s,t,e,i){const{caretSize:n,caretPadding:o,cornerRadius:r}=s,{xAlign:a,yAlign:l}=e,c=n+o,{topLeft:h,topRight:d,bottomLeft:u,bottomRight:p}=$i(r);let f=AM(t,a);const b=wM(t,l,c);return l==="center"?a==="left"?f+=c:a==="right"&&(f-=c):a==="left"?f-=Math.max(h,u)+n:a==="right"&&(f+=Math.max(d,p)+n),{x:dt(f,0,i.width-t.width),y:dt(b,0,i.height-t.height)}}function ha(s,t,e){const i=pt(e.padding);return t==="center"?s.x+s.width/2:t==="right"?s.x+s.width-i.right:s.x+i.left}function Sg(s){return Ce([],$e(s))}function kM(s,t,e){return ni(s,{tooltip:t,tooltipItems:e,type:"tooltip"})}function Og(s,t){const e=t&&t.dataset&&t.dataset.tooltip&&t.dataset.tooltip.callbacks;return e?s.override(e):s}class ih extends Xt{constructor(t){super(),this.opacity=0,this._active=[],this._eventPosition=void 0,this._size=void 0,this._cachedAnimations=void 0,this._tooltipItems=[],this.$animations=void 0,this.$context=void 0,this.chart=t.chart||t._chart,this._chart=this.chart,this.options=t.options,this.dataPoints=void 0,this.title=void 0,this.beforeBody=void 0,this.body=void 0,this.afterBody=void 0,this.footer=void 0,this.xAlign=void 0,this.yAlign=void 0,this.x=void 0,this.y=void 0,this.height=void 0,this.width=void 0,this.caretX=void 0,this.caretY=void 0,this.labelColors=void 0,this.labelPointStyles=void 0,this.labelTextColors=void 0}initialize(t){this.options=t,this._cachedAnimations=void 0,this.$context=void 0}_resolveAnimations(){const t=this._cachedAnimations;if(t)return t;const e=this.chart,i=this.options.setContext(this.getContext()),n=i.enabled&&e.options.animation&&i.animations,o=new Pc(this.chart,n);return n._cacheable&&(this._cachedAnimations=Object.freeze(o)),o}getContext(){return this.$context||(this.$context=kM(this.chart.getContext(),this,this._tooltipItems))}getTitle(t,e){const{callbacks:i}=e,n=i.beforeTitle.apply(this,[t]),o=i.title.apply(this,[t]),r=i.afterTitle.apply(this,[t]);let a=[];return a=Ce(a,$e(n)),a=Ce(a,$e(o)),a=Ce(a,$e(r)),a}getBeforeBody(t,e){return Sg(e.callbacks.beforeBody.apply(this,[t]))}getBody(t,e){const{callbacks:i}=e,n=[];return U(t,o=>{const r={before:[],lines:[],after:[]},a=Og(i,o);Ce(r.before,$e(a.beforeLabel.call(this,o))),Ce(r.lines,a.label.call(this,o)),Ce(r.after,$e(a.afterLabel.call(this,o))),n.push(r)}),n}getAfterBody(t,e){return Sg(e.callbacks.afterBody.apply(this,[t]))}getFooter(t,e){const{callbacks:i}=e,n=i.beforeFooter.apply(this,[t]),o=i.footer.apply(this,[t]),r=i.afterFooter.apply(this,[t]);let a=[];return a=Ce(a,$e(n)),a=Ce(a,$e(o)),a=Ce(a,$e(r)),a}_createItems(t){const e=this._active,i=this.chart.data,n=[],o=[],r=[];let a=[],l,c;for(l=0,c=e.length;l<c;++l)a.push(TM(this.chart,e[l]));return t.filter&&(a=a.filter((h,d,u)=>t.filter(h,d,u,i))),t.itemSort&&(a=a.sort((h,d)=>t.itemSort(h,d,i))),U(a,h=>{const d=Og(t.callbacks,h);n.push(d.labelColor.call(this,h)),o.push(d.labelPointStyle.call(this,h)),r.push(d.labelTextColor.call(this,h))}),this.labelColors=n,this.labelPointStyles=o,this.labelTextColors=r,this.dataPoints=a,a}update(t,e){const i=this.options.setContext(this.getContext()),n=this._active;let o,r=[];if(!n.length)this.opacity!==0&&(o={opacity:0});else{const a=to[i.position].call(this,n,this._eventPosition);r=this._createItems(i),this.title=this.getTitle(r,i),this.beforeBody=this.getBeforeBody(r,i),this.body=this.getBody(r,i),this.afterBody=this.getAfterBody(r,i),this.footer=this.getFooter(r,i);const l=this._size=Ag(this,i),c=Object.assign({},a,l),h=wg(this.chart,i,c),d=kg(i,c,h,this.chart);this.xAlign=h.xAlign,this.yAlign=h.yAlign,o={opacity:1,x:d.x,y:d.y,width:l.width,height:l.height,caretX:a.x,caretY:a.y}}this._tooltipItems=r,this.$context=void 0,o&&this._resolveAnimations().update(this,o),t&&i.external&&i.external.call(this,{chart:this.chart,tooltip:this,replay:e})}drawCaret(t,e,i,n){const o=this.getCaretPosition(t,i,n);e.lineTo(o.x1,o.y1),e.lineTo(o.x2,o.y2),e.lineTo(o.x3,o.y3)}getCaretPosition(t,e,i){const{xAlign:n,yAlign:o}=this,{caretSize:r,cornerRadius:a}=i,{topLeft:l,topRight:c,bottomLeft:h,bottomRight:d}=$i(a),{x:u,y:p}=t,{width:f,height:b}=e;let v,y,T,x,E,C;return o==="center"?(E=p+b/2,n==="left"?(v=u,y=v-r,x=E+r,C=E-r):(v=u+f,y=v+r,x=E-r,C=E+r),T=v):(n==="left"?y=u+Math.max(l,h)+r:n==="right"?y=u+f-Math.max(c,d)-r:y=this.caretX,o==="top"?(x=p,E=x-r,v=y-r,T=y+r):(x=p+b,E=x+r,v=y+r,T=y-r),C=x),{x1:v,x2:y,x3:T,y1:x,y2:E,y3:C}}drawTitle(t,e,i){const n=this.title,o=n.length;let r,a,l;if(o){const c=Os(i.rtl,this.x,this.width);for(t.x=ha(this,i.titleAlign,i),e.textAlign=c.textAlign(i.titleAlign),e.textBaseline="middle",r=lt(i.titleFont),a=i.titleSpacing,e.fillStyle=i.titleColor,e.font=r.string,l=0;l<o;++l)e.fillText(n[l],c.x(t.x),t.y+r.lineHeight/2),t.y+=r.lineHeight+a,l+1===o&&(t.y+=i.titleMarginBottom-a)}}_drawColorBox(t,e,i,n,o){const r=this.labelColors[i],a=this.labelPointStyles[i],{boxHeight:l,boxWidth:c,boxPadding:h}=o,d=lt(o.bodyFont),u=ha(this,"left",o),p=n.x(u),f=l<d.lineHeight?(d.lineHeight-l)/2:0,b=e.y+f;if(o.usePointStyle){const v={radius:Math.min(c,l)/2,pointStyle:a.pointStyle,rotation:a.rotation,borderWidth:1},y=n.leftForLtr(p,c)+c/2,T=b+l/2;t.strokeStyle=o.multiKeyBackground,t.fillStyle=o.multiKeyBackground,Oc(t,v,y,T),t.strokeStyle=r.borderColor,t.fillStyle=r.backgroundColor,Oc(t,v,y,T)}else{t.lineWidth=V(r.borderWidth)?Math.max(...Object.values(r.borderWidth)):r.borderWidth||1,t.strokeStyle=r.borderColor,t.setLineDash(r.borderDash||[]),t.lineDashOffset=r.borderDashOffset||0;const v=n.leftForLtr(p,c-h),y=n.leftForLtr(n.xPlus(p,1),c-h-2),T=$i(r.borderRadius);Object.values(T).some(x=>x!==0)?(t.beginPath(),t.fillStyle=o.multiKeyBackground,Nn(t,{x:v,y:b,w:c,h:l,radius:T}),t.fill(),t.stroke(),t.fillStyle=r.backgroundColor,t.beginPath(),Nn(t,{x:y,y:b+1,w:c-2,h:l-2,radius:T}),t.fill()):(t.fillStyle=o.multiKeyBackground,t.fillRect(v,b,c,l),t.strokeRect(v,b,c,l),t.fillStyle=r.backgroundColor,t.fillRect(y,b+1,c-2,l-2))}t.fillStyle=this.labelTextColors[i]}drawBody(t,e,i){const{body:n}=this,{bodySpacing:o,bodyAlign:r,displayColors:a,boxHeight:l,boxWidth:c,boxPadding:h}=i,d=lt(i.bodyFont);let u=d.lineHeight,p=0;const f=Os(i.rtl,this.x,this.width),b=function(S){e.fillText(S,f.x(t.x+p),t.y+u/2),t.y+=u+o},v=f.textAlign(r);let y,T,x,E,C,A,w;for(e.textAlign=r,e.textBaseline="middle",e.font=d.string,t.x=ha(this,v,i),e.fillStyle=i.bodyColor,U(this.beforeBody,b),p=a&&v!=="right"?r==="center"?c/2+h:c+2+h:0,E=0,A=n.length;E<A;++E){for(y=n[E],T=this.labelTextColors[E],e.fillStyle=T,U(y.before,b),x=y.lines,a&&x.length&&(this._drawColorBox(e,t,E,f,i),u=Math.max(d.lineHeight,l)),C=0,w=x.length;C<w;++C)b(x[C]),u=d.lineHeight;U(y.after,b)}p=0,u=d.lineHeight,U(this.afterBody,b),t.y-=o}drawFooter(t,e,i){const n=this.footer,o=n.length;let r,a;if(o){const l=Os(i.rtl,this.x,this.width);for(t.x=ha(this,i.footerAlign,i),t.y+=i.footerMarginTop,e.textAlign=l.textAlign(i.footerAlign),e.textBaseline="middle",r=lt(i.footerFont),e.fillStyle=i.footerColor,e.font=r.string,a=0;a<o;++a)e.fillText(n[a],l.x(t.x),t.y+r.lineHeight/2),t.y+=r.lineHeight+i.footerSpacing}}drawBackground(t,e,i,n){const{xAlign:o,yAlign:r}=this,{x:a,y:l}=t,{width:c,height:h}=i,{topLeft:d,topRight:u,bottomLeft:p,bottomRight:f}=$i(n.cornerRadius);e.fillStyle=n.backgroundColor,e.strokeStyle=n.borderColor,e.lineWidth=n.borderWidth,e.beginPath(),e.moveTo(a+d,l),r==="top"&&this.drawCaret(t,e,i,n),e.lineTo(a+c-u,l),e.quadraticCurveTo(a+c,l,a+c,l+u),r==="center"&&o==="right"&&this.drawCaret(t,e,i,n),e.lineTo(a+c,l+h-f),e.quadraticCurveTo(a+c,l+h,a+c-f,l+h),r==="bottom"&&this.drawCaret(t,e,i,n),e.lineTo(a+p,l+h),e.quadraticCurveTo(a,l+h,a,l+h-p),r==="center"&&o==="left"&&this.drawCaret(t,e,i,n),e.lineTo(a,l+d),e.quadraticCurveTo(a,l,a+d,l),e.closePath(),e.fill(),n.borderWidth>0&&e.stroke()}_updateAnimationTarget(t){const e=this.chart,i=this.$animations,n=i&&i.x,o=i&&i.y;if(n||o){const r=to[t.position].call(this,this._active,this._eventPosition);if(!r)return;const a=this._size=Ag(this,t),l=Object.assign({},r,this._size),c=wg(e,t,l),h=kg(t,l,c,e);(n._to!==h.x||o._to!==h.y)&&(this.xAlign=c.xAlign,this.yAlign=c.yAlign,this.width=a.width,this.height=a.height,this.caretX=r.x,this.caretY=r.y,this._resolveAnimations().update(this,h))}}_willRender(){return!!this.opacity}draw(t){const e=this.options.setContext(this.getContext());let i=this.opacity;if(!i)return;this._updateAnimationTarget(e);const n={width:this.width,height:this.height},o={x:this.x,y:this.y};i=Math.abs(i)<.001?0:i;const r=pt(e.padding),a=this.title.length||this.beforeBody.length||this.body.length||this.afterBody.length||this.footer.length;e.enabled&&a&&(t.save(),t.globalAlpha=i,this.drawBackground(o,t,n,e),o_(t,e.textDirection),o.y+=r.top,this.drawTitle(o,t,e),this.drawBody(o,t,e),this.drawFooter(o,t,e),r_(t,e.textDirection),t.restore())}getActiveElements(){return this._active||[]}setActiveElements(t,e){const i=this._active,n=t.map(({datasetIndex:a,index:l})=>{const c=this.chart.getDatasetMeta(a);if(!c)throw new Error("Cannot find a dataset at index "+a);return{datasetIndex:a,element:c.data[l],index:l}}),o=!Fr(i,n),r=this._positionChanged(n,e);(o||r)&&(this._active=n,this._eventPosition=e,this._ignoreReplayEvents=!0,this.update(!0))}handleEvent(t,e,i=!0){if(e&&this._ignoreReplayEvents)return!1;this._ignoreReplayEvents=!1;const n=this.options,o=this._active||[],r=this._getActiveElements(t,o,e,i),a=this._positionChanged(r,t),l=e||!Fr(r,o)||a;return l&&(this._active=r,(n.enabled||n.external)&&(this._eventPosition={x:t.x,y:t.y},this.update(!0,e))),l}_getActiveElements(t,e,i,n){const o=this.options;if(t.type==="mouseout")return[];if(!n)return e;const r=this.chart.getElementsAtEventForMode(t,o.mode,o,i);return o.reverse&&r.reverse(),r}_positionChanged(t,e){const{caretX:i,caretY:n,options:o}=this,r=to[o.position].call(this,t,e);return r!==!1&&(i!==r.x||n!==r.y)}}ih.positioners=to;var Ig={id:"tooltip",_element:ih,positioners:to,afterInit(s,t,e){e&&(s.tooltip=new ih({chart:s,options:e}))},beforeUpdate(s,t,e){s.tooltip&&s.tooltip.initialize(e)},reset(s,t,e){s.tooltip&&s.tooltip.initialize(e)},afterDraw(s){const t=s.tooltip;if(t&&t._willRender()){const e={tooltip:t};if(s.notifyPlugins("beforeTooltipDraw",e)===!1)return;t.draw(s.ctx),s.notifyPlugins("afterTooltipDraw",e)}},afterEvent(s,t){if(s.tooltip){const e=t.replay;s.tooltip.handleEvent(t.event,e,t.inChartArea)&&(t.changed=!0)}},defaults:{enabled:!0,external:null,position:"average",backgroundColor:"rgba(0,0,0,0.8)",titleColor:"#fff",titleFont:{weight:"bold"},titleSpacing:2,titleMarginBottom:6,titleAlign:"left",bodyColor:"#fff",bodySpacing:2,bodyFont:{},bodyAlign:"left",footerColor:"#fff",footerSpacing:2,footerMarginTop:6,footerFont:{weight:"bold"},footerAlign:"left",padding:6,caretPadding:2,caretSize:5,cornerRadius:6,boxHeight:(s,t)=>t.bodyFont.size,boxWidth:(s,t)=>t.bodyFont.size,multiKeyBackground:"#fff",displayColors:!0,boxPadding:0,borderColor:"rgba(0,0,0,0)",borderWidth:0,animation:{duration:400,easing:"easeOutQuart"},animations:{numbers:{type:"number",properties:["x","y","width","height","caretX","caretY"]},opacity:{easing:"linear",duration:200}},callbacks:{beforeTitle:Oe,title(s){if(s.length>0){const t=s[0],e=t.chart.data.labels,i=e?e.length:0;if(this&&this.options&&this.options.mode==="dataset")return t.dataset.label||"";if(t.label)return t.label;if(i>0&&t.dataIndex<i)return e[t.dataIndex]}return""},afterTitle:Oe,beforeBody:Oe,beforeLabel:Oe,label(s){if(this&&this.options&&this.options.mode==="dataset")return s.label+": "+s.formattedValue||s.formattedValue;let t=s.dataset.label||"";t&&(t+=": ");const e=s.formattedValue;return H(e)||(t+=e),t},labelColor(s){const e=s.chart.getDatasetMeta(s.datasetIndex).controller.getStyle(s.dataIndex);return{borderColor:e.borderColor,backgroundColor:e.backgroundColor,borderWidth:e.borderWidth,borderDash:e.borderDash,borderDashOffset:e.borderDashOffset,borderRadius:0}},labelTextColor(){return this.options.bodyColor},labelPointStyle(s){const e=s.chart.getDatasetMeta(s.datasetIndex).controller.getStyle(s.dataIndex);return{pointStyle:e.pointStyle,rotation:e.rotation}},afterLabel:Oe,afterBody:Oe,beforeFooter:Oe,footer:Oe,afterFooter:Oe}},defaultRoutes:{bodyFont:"font",footerFont:"font",titleFont:"font"},descriptors:{_scriptable:s=>s!=="filter"&&s!=="itemSort"&&s!=="external",_indexable:!1,callbacks:{_scriptable:!1,_indexable:!1},animation:{_fallback:!1},animations:{_fallback:"animation"}},additionalOptionScopes:["interaction"]},Dg=Object.freeze({__proto__:null,Decimation:dg,Filler:vg,Legend:Eg,SubTitle:Cg,Title:xg,Tooltip:Ig});const SM=(s,t,e,i)=>(typeof t=="string"?(e=s.push(t)-1,i.unshift({index:e,label:t})):isNaN(t)&&(e=null),e);function OM(s,t,e,i){const n=s.indexOf(t);if(n===-1)return SM(s,t,e,i);const o=s.lastIndexOf(t);return n!==o?e:n}const IM=(s,t)=>s===null?null:dt(Math.round(s),0,t);class eo extends oi{constructor(t){super(t),this._startValue=void 0,this._valueRange=0,this._addedLabels=[]}init(t){const e=this._addedLabels;if(e.length){const i=this.getLabels();for(const{index:n,label:o}of e)i[n]===o&&i.splice(n,1);this._addedLabels=[]}super.init(t)}parse(t,e){if(H(t))return null;const i=this.getLabels();return e=isFinite(e)&&i[e]===t?e:OM(i,t,B(e,t),this._addedLabels),IM(e,i.length-1)}determineDataLimits(){const{minDefined:t,maxDefined:e}=this.getUserBounds();let{min:i,max:n}=this.getMinMax(!0);this.options.bounds==="ticks"&&(t||(i=0),e||(n=this.getLabels().length-1)),this.min=i,this.max=n}buildTicks(){const t=this.min,e=this.max,i=this.options.offset,n=[];let o=this.getLabels();o=t===0&&e===o.length-1?o:o.slice(t,e+1),this._valueRange=Math.max(o.length-(i?0:1),1),this._startValue=this.min-(i?.5:0);for(let r=t;r<=e;r++)n.push({value:r});return n}getLabelForValue(t){const e=this.getLabels();return t>=0&&t<e.length?e[t]:t}configure(){super.configure(),this.isHorizontal()||(this._reversePixels=!this._reversePixels)}getPixelForValue(t){return typeof t!="number"&&(t=this.parse(t)),t===null?NaN:this.getPixelForDecimal((t-this._startValue)/this._valueRange)}getPixelForTick(t){const e=this.ticks;return t<0||t>e.length-1?null:this.getPixelForValue(e[t].value)}getValueForPixel(t){return Math.round(this._startValue+this.getDecimalForPixel(t)*this._valueRange)}getBasePixel(){return this.bottom}}eo.id="category",eo.defaults={ticks:{callback:eo.prototype.getLabelForValue}};function DM(s,t){const e=[],{bounds:n,step:o,min:r,max:a,precision:l,count:c,maxTicks:h,maxDigits:d,includeBounds:u}=s,p=o||1,f=h-1,{min:b,max:v}=t,y=!H(r),T=!H(a),x=!H(c),E=(v-b)/(d+1);let C=Tf((v-b)/f/p)*p,A,w,S,k;if(C<1e-14&&!y&&!T)return[{value:b},{value:v}];k=Math.ceil(v/C)-Math.floor(b/C),k>f&&(C=Tf(k*C/f/p)*p),H(l)||(A=Math.pow(10,l),C=Math.ceil(C*A)/A),n==="ticks"?(w=Math.floor(b/C)*C,S=Math.ceil(v/C)*C):(w=b,S=v),y&&T&&o&&MO((a-r)/o,C/1e3)?(k=Math.round(Math.min((a-r)/C,h)),C=(a-r)/k,w=r,S=a):x?(w=y?r:w,S=T?a:S,k=c-1,C=(S-w)/k):(k=(S-w)/C,In(k,Math.round(k),C/1e3)?k=Math.round(k):k=Math.ceil(k));const D=Math.max(xf(C),xf(w));A=Math.pow(10,H(l)?D:l),w=Math.round(w*A)/A,S=Math.round(S*A)/A;let I=0;for(y&&(u&&w!==r?(e.push({value:r}),w<r&&I++,In(Math.round((w+I*C)*A)/A,r,Mg(r,E,s))&&I++):w<r&&I++);I<k;++I)e.push({value:Math.round((w+I*C)*A)/A});return T&&u&&S!==a?e.length&&In(e[e.length-1].value,a,Mg(a,E,s))?e[e.length-1].value=a:e.push({value:a}):(!T||S===a)&&e.push({value:S}),e}function Mg(s,t,{horizontal:e,minRotation:i}){const n=se(i),o=(e?Math.sin(n):Math.cos(n))||.001,r=.75*t*(""+s).length;return Math.min(t/o,r)}class da extends oi{constructor(t){super(t),this.start=void 0,this.end=void 0,this._startValue=void 0,this._endValue=void 0,this._valueRange=0}parse(t,e){return H(t)||(typeof t=="number"||t instanceof Number)&&!isFinite(+t)?null:+t}handleTickRangeOptions(){const{beginAtZero:t}=this.options,{minDefined:e,maxDefined:i}=this.getUserBounds();let{min:n,max:o}=this;const r=l=>n=e?n:l,a=l=>o=i?o:l;if(t){const l=Ee(n),c=Ee(o);l<0&&c<0?a(0):l>0&&c>0&&r(0)}if(n===o){let l=1;(o>=Number.MAX_SAFE_INTEGER||n<=Number.MIN_SAFE_INTEGER)&&(l=Math.abs(o*.05)),a(o+l),t||r(n-l)}this.min=n,this.max=o}getTickLimit(){const t=this.options.ticks;let{maxTicksLimit:e,stepSize:i}=t,n;return i?(n=Math.ceil(this.max/i)-Math.floor(this.min/i)+1,n>1e3&&(console.warn(`scales.${this.id}.ticks.stepSize: ${i} would result generating up to ${n} ticks. Limiting to 1000.`),n=1e3)):(n=this.computeTickLimit(),e=e||11),e&&(n=Math.min(e,n)),n}computeTickLimit(){return Number.POSITIVE_INFINITY}buildTicks(){const t=this.options,e=t.ticks;let i=this.getTickLimit();i=Math.max(2,i);const n={maxTicks:i,bounds:t.bounds,min:t.min,max:t.max,precision:e.precision,step:e.stepSize,count:e.count,maxDigits:this._maxDigits(),horizontal:this.isHorizontal(),minRotation:e.minRotation||0,includeBounds:e.includeBounds!==!1},o=this._range||this,r=DM(n,o);return t.bounds==="ticks"&&Ef(r,this,"value"),t.reverse?(r.reverse(),this.start=this.max,this.end=this.min):(this.start=this.min,this.end=this.max),r}configure(){const t=this.ticks;let e=this.min,i=this.max;if(super.configure(),this.options.offset&&t.length){const n=(i-e)/Math.max(t.length-1,1)/2;e-=n,i+=n}this._startValue=e,this._endValue=i,this._valueRange=i-e}getLabelForValue(t){return Bn(t,this.chart.options.locale,this.options.ticks.format)}}class ua extends da{determineDataLimits(){const{min:t,max:e}=this.getMinMax(!0);this.min=rt(t)?t:0,this.max=rt(e)?e:1,this.handleTickRangeOptions()}computeTickLimit(){const t=this.isHorizontal(),e=t?this.width:this.height,i=se(this.options.ticks.minRotation),n=(t?Math.sin(i):Math.cos(i))||.001,o=this._resolveTickFontOptions(0);return Math.ceil(e/Math.min(40,o.lineHeight/n))}getPixelForValue(t){return t===null?NaN:this.getPixelForDecimal((t-this._startValue)/this._valueRange)}getValueForPixel(t){return this._startValue+this.getDecimalForPixel(t)*this._valueRange}}ua.id="linear",ua.defaults={ticks:{callback:Yn.formatters.numeric}};function Lg(s){return s/Math.pow(10,Math.floor(Yt(s)))===1}function MM(s,t){const e=Math.floor(Yt(t.max)),i=Math.ceil(t.max/Math.pow(10,e)),n=[];let o=zt(s.min,Math.pow(10,Math.floor(Yt(t.min)))),r=Math.floor(Yt(o)),a=Math.floor(o/Math.pow(10,r)),l=r<0?Math.pow(10,Math.abs(r)):1;do n.push({value:o,major:Lg(o)}),++a,a===10&&(a=1,++r,l=r>=0?1:l),o=Math.round(a*Math.pow(10,r)*l)/l;while(r<e||r===e&&a<i);const c=zt(s.max,o);return n.push({value:c,major:Lg(o)}),n}class pa extends oi{constructor(t){super(t),this.start=void 0,this.end=void 0,this._startValue=void 0,this._valueRange=0}parse(t,e){const i=da.prototype.parse.apply(this,[t,e]);if(i===0){this._zero=!0;return}return rt(i)&&i>0?i:null}determineDataLimits(){const{min:t,max:e}=this.getMinMax(!0);this.min=rt(t)?Math.max(0,t):null,this.max=rt(e)?Math.max(0,e):null,this.options.beginAtZero&&(this._zero=!0),this.handleTickRangeOptions()}handleTickRangeOptions(){const{minDefined:t,maxDefined:e}=this.getUserBounds();let i=this.min,n=this.max;const o=l=>i=t?i:l,r=l=>n=e?n:l,a=(l,c)=>Math.pow(10,Math.floor(Yt(l))+c);i===n&&(i<=0?(o(1),r(10)):(o(a(i,-1)),r(a(n,1)))),i<=0&&o(a(n,-1)),n<=0&&r(a(i,1)),this._zero&&this.min!==this._suggestedMin&&i===a(this.min,0)&&o(a(i,-1)),this.min=i,this.max=n}buildTicks(){const t=this.options,e={min:this._userMin,max:this._userMax},i=MM(e,this);return t.bounds==="ticks"&&Ef(i,this,"value"),t.reverse?(i.reverse(),this.start=this.max,this.end=this.min):(this.start=this.min,this.end=this.max),i}getLabelForValue(t){return t===void 0?"0":Bn(t,this.chart.options.locale,this.options.ticks.format)}configure(){const t=this.min;super.configure(),this._startValue=Yt(t),this._valueRange=Yt(this.max)-Yt(t)}getPixelForValue(t){return(t===void 0||t===0)&&(t=this.min),t===null||isNaN(t)?NaN:this.getPixelForDecimal(t===this.min?0:(Yt(t)-this._startValue)/this._valueRange)}getValueForPixel(t){const e=this.getDecimalForPixel(t);return Math.pow(10,this._startValue+e*this._valueRange)}}pa.id="logarithmic",pa.defaults={ticks:{callback:Yn.formatters.logarithmic,major:{enabled:!0}}};function sh(s){const t=s.ticks;if(t.display&&s.display){const e=pt(t.backdropPadding);return B(t.font&&t.font.size,F.font.size)+e.height}return 0}function LM(s,t,e){return e=Q(e)?e:[e],{w:hI(s,t.string,e),h:e.length*t.lineHeight}}function $g(s,t,e,i,n){return s===i||s===n?{start:t-e/2,end:t+e/2}:s<i||s>n?{start:t-e,end:t}:{start:t,end:t+e}}function $M(s){const t={l:s.left+s._padding.left,r:s.right-s._padding.right,t:s.top+s._padding.top,b:s.bottom-s._padding.bottom},e=Object.assign({},t),i=[],n=[],o=s._pointLabels.length,r=s.options.pointLabels,a=r.centerPointLabels?it/o:0;for(let l=0;l<o;l++){const c=r.setContext(s.getPointLabelContext(l));n[l]=c.padding;const h=s.getPointPosition(l,s.drawingArea+n[l],a),d=lt(c.font),u=LM(s.ctx,d,s._pointLabels[l]);i[l]=u;const p=Vt(s.getIndexAngle(l)+a),f=Math.round(mc(p)),b=$g(f,h.x,u.w,0,180),v=$g(f,h.y,u.h,90,270);RM(e,t,p,b,v)}s.setCenterPoint(t.l-e.l,e.r-t.r,t.t-e.t,e.b-t.b),s._pointLabelItems=PM(s,i,n)}function RM(s,t,e,i,n){const o=Math.abs(Math.sin(e)),r=Math.abs(Math.cos(e));let a=0,l=0;i.start<t.l?(a=(t.l-i.start)/o,s.l=Math.min(s.l,t.l-a)):i.end>t.r&&(a=(i.end-t.r)/o,s.r=Math.max(s.r,t.r+a)),n.start<t.t?(l=(t.t-n.start)/r,s.t=Math.min(s.t,t.t-l)):n.end>t.b&&(l=(n.end-t.b)/r,s.b=Math.max(s.b,t.b+l))}function PM(s,t,e){const i=[],n=s._pointLabels.length,o=s.options,r=sh(o)/2,a=s.drawingArea,l=o.pointLabels.centerPointLabels?it/n:0;for(let c=0;c<n;c++){const h=s.getPointPosition(c,a+r+e[c],l),d=Math.round(mc(Vt(h.angle+nt))),u=t[c],p=HM(h.y,u.h,d),f=NM(d),b=BM(h.x,u.w,f);i.push({x:h.x,y:p,textAlign:f,left:b,top:p,right:b+u.w,bottom:p+u.h})}return i}function NM(s){return s===0||s===180?"center":s<180?"left":"right"}function BM(s,t,e){return e==="right"?s-=t:e==="center"&&(s-=t/2),s}function HM(s,t,e){return e===90||e===270?s-=t/2:(e>270||e<90)&&(s-=t),s}function VM(s,t){const{ctx:e,options:{pointLabels:i}}=s;for(let n=t-1;n>=0;n--){const o=i.setContext(s.getPointLabelContext(n)),r=lt(o.font),{x:a,y:l,textAlign:c,left:h,top:d,right:u,bottom:p}=s._pointLabelItems[n],{backdropColor:f}=o;if(!H(f)){const b=$i(o.borderRadius),v=pt(o.backdropPadding);e.fillStyle=f;const y=h-v.left,T=d-v.top,x=u-h+v.width,E=p-d+v.height;Object.values(b).some(C=>C!==0)?(e.beginPath(),Nn(e,{x:y,y:T,w:x,h:E,radius:b}),e.fill()):e.fillRect(y,T,x,E)}Li(e,s._pointLabels[n],a,l+r.lineHeight/2,r,{color:o.color,textAlign:c,textBaseline:"middle"})}}function Rg(s,t,e,i){const{ctx:n}=s;if(e)n.arc(s.xCenter,s.yCenter,t,0,q);else{let o=s.getPointPosition(0,t);n.moveTo(o.x,o.y);for(let r=1;r<i;r++)o=s.getPointPosition(r,t),n.lineTo(o.x,o.y)}}function FM(s,t,e,i){const n=s.ctx,o=t.circular,{color:r,lineWidth:a}=t;!o&&!i||!r||!a||e<0||(n.save(),n.strokeStyle=r,n.lineWidth=a,n.setLineDash(t.borderDash),n.lineDashOffset=t.borderDashOffset,n.beginPath(),Rg(s,e,o,i),n.closePath(),n.stroke(),n.restore())}function WM(s,t,e){return ni(s,{label:e,index:t,type:"pointLabel"})}class $s extends da{constructor(t){super(t),this.xCenter=void 0,this.yCenter=void 0,this.drawingArea=void 0,this._pointLabels=[],this._pointLabelItems=[]}setDimensions(){const t=this._padding=pt(sh(this.options)/2),e=this.width=this.maxWidth-t.width,i=this.height=this.maxHeight-t.height;this.xCenter=Math.floor(this.left+e/2+t.left),this.yCenter=Math.floor(this.top+i/2+t.top),this.drawingArea=Math.floor(Math.min(e,i)/2)}determineDataLimits(){const{min:t,max:e}=this.getMinMax(!1);this.min=rt(t)&&!isNaN(t)?t:0,this.max=rt(e)&&!isNaN(e)?e:0,this.handleTickRangeOptions()}computeTickLimit(){return Math.ceil(this.drawingArea/sh(this.options))}generateTickLabels(t){da.prototype.generateTickLabels.call(this,t),this._pointLabels=this.getLabels().map((e,i)=>{const n=G(this.options.pointLabels.callback,[e,i],this);return n||n===0?n:""}).filter((e,i)=>this.chart.getDataVisibility(i))}fit(){const t=this.options;t.display&&t.pointLabels.display?$M(this):this.setCenterPoint(0,0,0,0)}setCenterPoint(t,e,i,n){this.xCenter+=Math.floor((t-e)/2),this.yCenter+=Math.floor((i-n)/2),this.drawingArea-=Math.min(this.drawingArea/2,Math.max(t,e,i,n))}getIndexAngle(t){const e=q/(this._pointLabels.length||1),i=this.options.startAngle||0;return Vt(t*e+se(i))}getDistanceFromCenterForValue(t){if(H(t))return NaN;const e=this.drawingArea/(this.max-this.min);return this.options.reverse?(this.max-t)*e:(t-this.min)*e}getValueForDistanceFromCenter(t){if(H(t))return NaN;const e=t/(this.drawingArea/(this.max-this.min));return this.options.reverse?this.max-e:this.min+e}getPointLabelContext(t){const e=this._pointLabels||[];if(t>=0&&t<e.length){const i=e[t];return WM(this.getContext(),t,i)}}getPointPosition(t,e,i=0){const n=this.getIndexAngle(t)-nt+i;return{x:Math.cos(n)*e+this.xCenter,y:Math.sin(n)*e+this.yCenter,angle:n}}getPointPositionForValue(t,e){return this.getPointPosition(t,this.getDistanceFromCenterForValue(e))}getBasePosition(t){return this.getPointPositionForValue(t||0,this.getBaseValue())}getPointLabelPosition(t){const{left:e,top:i,right:n,bottom:o}=this._pointLabelItems[t];return{left:e,top:i,right:n,bottom:o}}drawBackground(){const{backgroundColor:t,grid:{circular:e}}=this.options;if(t){const i=this.ctx;i.save(),i.beginPath(),Rg(this,this.getDistanceFromCenterForValue(this._endValue),e,this._pointLabels.length),i.closePath(),i.fillStyle=t,i.fill(),i.restore()}}drawGrid(){const t=this.ctx,e=this.options,{angleLines:i,grid:n}=e,o=this._pointLabels.length;let r,a,l;if(e.pointLabels.display&&VM(this,o),n.display&&this.ticks.forEach((c,h)=>{if(h!==0){a=this.getDistanceFromCenterForValue(c.value);const d=n.setContext(this.getContext(h-1));FM(this,d,a,o)}}),i.display){for(t.save(),r=o-1;r>=0;r--){const c=i.setContext(this.getPointLabelContext(r)),{color:h,lineWidth:d}=c;!d||!h||(t.lineWidth=d,t.strokeStyle=h,t.setLineDash(c.borderDash),t.lineDashOffset=c.borderDashOffset,a=this.getDistanceFromCenterForValue(e.ticks.reverse?this.min:this.max),l=this.getPointPosition(r,a),t.beginPath(),t.moveTo(this.xCenter,this.yCenter),t.lineTo(l.x,l.y),t.stroke())}t.restore()}}drawBorder(){}drawLabels(){const t=this.ctx,e=this.options,i=e.ticks;if(!i.display)return;const n=this.getIndexAngle(0);let o,r;t.save(),t.translate(this.xCenter,this.yCenter),t.rotate(n),t.textAlign="center",t.textBaseline="middle",this.ticks.forEach((a,l)=>{if(l===0&&!e.reverse)return;const c=i.setContext(this.getContext(l)),h=lt(c.font);if(o=this.getDistanceFromCenterForValue(this.ticks[l].value),c.showLabelBackdrop){t.font=h.string,r=t.measureText(a.label).width,t.fillStyle=c.backdropColor;const d=pt(c.backdropPadding);t.fillRect(-r/2-d.left,-o-h.size/2-d.top,r+d.width,h.size+d.height)}Li(t,a.label,0,-o,h,{color:c.color})}),t.restore()}drawTitle(){}}$s.id="radialLinear",$s.defaults={display:!0,animate:!0,position:"chartArea",angleLines:{display:!0,lineWidth:1,borderDash:[],borderDashOffset:0},grid:{circular:!1},startAngle:0,ticks:{showLabelBackdrop:!0,callback:Yn.formatters.numeric},pointLabels:{backdropColor:void 0,backdropPadding:2,display:!0,font:{size:10},callback(s){return s},padding:5,centerPointLabels:!1}},$s.defaultRoutes={"angleLines.color":"borderColor","pointLabels.color":"color","ticks.color":"color"},$s.descriptors={angleLines:{_fallback:"grid"}};const fa={millisecond:{common:!0,size:1,steps:1e3},second:{common:!0,size:1e3,steps:60},minute:{common:!0,size:6e4,steps:60},hour:{common:!0,size:36e5,steps:24},day:{common:!0,size:864e5,steps:30},week:{common:!1,size:6048e5,steps:4},month:{common:!0,size:2628e6,steps:12},quarter:{common:!1,size:7884e6,steps:4},year:{common:!0,size:3154e7}},It=Object.keys(fa);function zM(s,t){return s-t}function Pg(s,t){if(H(t))return null;const e=s._adapter,{parser:i,round:n,isoWeekday:o}=s._parseOpts;let r=t;return typeof i=="function"&&(r=i(r)),rt(r)||(r=typeof i=="string"?e.parse(r,i):e.parse(r)),r===null?null:(n&&(r=n==="week"&&(As(o)||o===!0)?e.startOf(r,"isoWeek",o):e.startOf(r,n)),+r)}function Ng(s,t,e,i){const n=It.length;for(let o=It.indexOf(s);o<n-1;++o){const r=fa[It[o]],a=r.steps?r.steps:Number.MAX_SAFE_INTEGER;if(r.common&&Math.ceil((e-t)/(a*r.size))<=i)return It[o]}return It[n-1]}function jM(s,t,e,i,n){for(let o=It.length-1;o>=It.indexOf(e);o--){const r=It[o];if(fa[r].common&&s._adapter.diff(n,i,r)>=t-1)return r}return It[e?It.indexOf(e):0]}function YM(s){for(let t=It.indexOf(s)+1,e=It.length;t<e;++t)if(fa[It[t]].common)return It[t]}function Bg(s,t,e){if(!e)s[t]=!0;else if(e.length){const{lo:i,hi:n}=vc(e,t),o=e[i]>=t?e[i]:e[n];s[o]=!0}}function KM(s,t,e,i){const n=s._adapter,o=+n.startOf(t[0].value,i),r=t[t.length-1].value;let a,l;for(a=o;a<=r;a=+n.add(a,1,i))l=e[a],l>=0&&(t[l].major=!0);return t}function Hg(s,t,e){const i=[],n={},o=t.length;let r,a;for(r=0;r<o;++r)a=t[r],n[a]=r,i.push({value:a,major:!1});return o===0||!e?i:KM(s,i,n,e)}class Rs extends oi{constructor(t){super(t),this._cache={data:[],labels:[],all:[]},this._unit="day",this._majorUnit=void 0,this._offsets={},this._normalized=!1,this._parseOpts=void 0}init(t,e){const i=t.time||(t.time={}),n=this._adapter=new D_._date(t.adapters.date);n.init(e),Sn(i.displayFormats,n.formats()),this._parseOpts={parser:i.parser,round:i.round,isoWeekday:i.isoWeekday},super.init(t),this._normalized=e.normalized}parse(t,e){return t===void 0?null:Pg(this,t)}beforeLayout(){super.beforeLayout(),this._cache={data:[],labels:[],all:[]}}determineDataLimits(){const t=this.options,e=this._adapter,i=t.time.unit||"day";let{min:n,max:o,minDefined:r,maxDefined:a}=this.getUserBounds();function l(c){!r&&!isNaN(c.min)&&(n=Math.min(n,c.min)),!a&&!isNaN(c.max)&&(o=Math.max(o,c.max))}(!r||!a)&&(l(this._getLabelBounds()),(t.bounds!=="ticks"||t.ticks.source!=="labels")&&l(this.getMinMax(!1))),n=rt(n)&&!isNaN(n)?n:+e.startOf(Date.now(),i),o=rt(o)&&!isNaN(o)?o:+e.endOf(Date.now(),i)+1,this.min=Math.min(n,o-1),this.max=Math.max(n+1,o)}_getLabelBounds(){const t=this.getLabelTimestamps();let e=Number.POSITIVE_INFINITY,i=Number.NEGATIVE_INFINITY;return t.length&&(e=t[0],i=t[t.length-1]),{min:e,max:i}}buildTicks(){const t=this.options,e=t.time,i=t.ticks,n=i.source==="labels"?this.getLabelTimestamps():this._generate();t.bounds==="ticks"&&n.length&&(this.min=this._userMin||n[0],this.max=this._userMax||n[n.length-1]);const o=this.min,r=this.max,a=PO(n,o,r);return this._unit=e.unit||(i.autoSkip?Ng(e.minUnit,this.min,this.max,this._getLabelCapacity(o)):jM(this,a.length,e.minUnit,this.min,this.max)),this._majorUnit=!i.major.enabled||this._unit==="year"?void 0:YM(this._unit),this.initOffsets(n),t.reverse&&a.reverse(),Hg(this,a,this._majorUnit)}afterAutoSkip(){this.options.offsetAfterAutoskip&&this.initOffsets(this.ticks.map(t=>+t.value))}initOffsets(t){let e=0,i=0,n,o;this.options.offset&&t.length&&(n=this.getDecimalForValue(t[0]),t.length===1?e=1-n:e=(this.getDecimalForValue(t[1])-n)/2,o=this.getDecimalForValue(t[t.length-1]),t.length===1?i=o:i=(o-this.getDecimalForValue(t[t.length-2]))/2);const r=t.length<3?.5:.25;e=dt(e,0,r),i=dt(i,0,r),this._offsets={start:e,end:i,factor:1/(e+1+i)}}_generate(){const t=this._adapter,e=this.min,i=this.max,n=this.options,o=n.time,r=o.unit||Ng(o.minUnit,e,i,this._getLabelCapacity(e)),a=B(o.stepSize,1),l=r==="week"?o.isoWeekday:!1,c=As(l)||l===!0,h={};let d=e,u,p;if(c&&(d=+t.startOf(d,"isoWeek",l)),d=+t.startOf(d,c?"day":r),t.diff(i,e,r)>1e5*a)throw new Error(e+" and "+i+" are too far apart with stepSize of "+a+" "+r);const f=n.ticks.source==="data"&&this.getDataTimestamps();for(u=d,p=0;u<i;u=+t.add(u,a,r),p++)Bg(h,u,f);return(u===i||n.bounds==="ticks"||p===1)&&Bg(h,u,f),Object.keys(h).sort((b,v)=>b-v).map(b=>+b)}getLabelForValue(t){const e=this._adapter,i=this.options.time;return i.tooltipFormat?e.format(t,i.tooltipFormat):e.format(t,i.displayFormats.datetime)}_tickFormatFunction(t,e,i,n){const o=this.options,r=o.time.displayFormats,a=this._unit,l=this._majorUnit,c=a&&r[a],h=l&&r[l],d=i[e],u=l&&h&&d&&d.major,p=this._adapter.format(t,n||(u?h:c)),f=o.ticks.callback;return f?G(f,[p,e,i],this):p}generateTickLabels(t){let e,i,n;for(e=0,i=t.length;e<i;++e)n=t[e],n.label=this._tickFormatFunction(n.value,e,t)}getDecimalForValue(t){return t===null?NaN:(t-this.min)/(this.max-this.min)}getPixelForValue(t){const e=this._offsets,i=this.getDecimalForValue(t);return this.getPixelForDecimal((e.start+i)*e.factor)}getValueForPixel(t){const e=this._offsets,i=this.getDecimalForPixel(t)/e.factor-e.end;return this.min+i*(this.max-this.min)}_getLabelSize(t){const e=this.options.ticks,i=this.ctx.measureText(t).width,n=se(this.isHorizontal()?e.maxRotation:e.minRotation),o=Math.cos(n),r=Math.sin(n),a=this._resolveTickFontOptions(0).size;return{w:i*o+a*r,h:i*r+a*o}}_getLabelCapacity(t){const e=this.options.time,i=e.displayFormats,n=i[e.unit]||i.millisecond,o=this._tickFormatFunction(t,0,Hg(this,[t],this._majorUnit),n),r=this._getLabelSize(o),a=Math.floor(this.isHorizontal()?this.width/r.w:this.height/r.h)-1;return a>0?a:1}getDataTimestamps(){let t=this._cache.data||[],e,i;if(t.length)return t;const n=this.getMatchingVisibleMetas();if(this._normalized&&n.length)return this._cache.data=n[0].controller.getAllParsedValues(this);for(e=0,i=n.length;e<i;++e)t=t.concat(n[e].controller.getAllParsedValues(this));return this._cache.data=this.normalize(t)}getLabelTimestamps(){const t=this._cache.labels||[];let e,i;if(t.length)return t;const n=this.getLabels();for(e=0,i=n.length;e<i;++e)t.push(Pg(this,n[e]));return this._cache.labels=this._normalized?t:this.normalize(t)}normalize(t){return kf(t.sort(zM))}}Rs.id="time",Rs.defaults={bounds:"data",adapters:{},time:{parser:!1,unit:!1,round:!1,isoWeekday:!1,minUnit:"millisecond",displayFormats:{}},ticks:{source:"auto",major:{enabled:!1}}};function _a(s,t,e){let i=0,n=s.length-1,o,r,a,l;e?(t>=s[i].pos&&t<=s[n].pos&&({lo:i,hi:n}=De(s,"pos",t)),{pos:o,time:a}=s[i],{pos:r,time:l}=s[n]):(t>=s[i].time&&t<=s[n].time&&({lo:i,hi:n}=De(s,"time",t)),{time:o,pos:a}=s[i],{time:r,pos:l}=s[n]);const c=r-o;return c?a+(l-a)*(t-o)/c:a}class ga extends Rs{constructor(t){super(t),this._table=[],this._minPos=void 0,this._tableRange=void 0}initOffsets(){const t=this._getTimestampsForTable(),e=this._table=this.buildLookupTable(t);this._minPos=_a(e,this.min),this._tableRange=_a(e,this.max)-this._minPos,super.initOffsets(t)}buildLookupTable(t){const{min:e,max:i}=this,n=[],o=[];let r,a,l,c,h;for(r=0,a=t.length;r<a;++r)c=t[r],c>=e&&c<=i&&n.push(c);if(n.length<2)return[{time:e,pos:0},{time:i,pos:1}];for(r=0,a=n.length;r<a;++r)h=n[r+1],l=n[r-1],c=n[r],Math.round((h+l)/2)!==c&&o.push({time:c,pos:r/(a-1)});return o}_getTimestampsForTable(){let t=this._cache.all||[];if(t.length)return t;const e=this.getDataTimestamps(),i=this.getLabelTimestamps();return e.length&&i.length?t=this.normalize(e.concat(i)):t=e.length?e:i,t=this._cache.all=t,t}getDecimalForValue(t){return(_a(this._table,t)-this._minPos)/this._tableRange}getValueForPixel(t){const e=this._offsets,i=this.getDecimalForPixel(t)/e.factor-e.end;return _a(this._table,i*this._tableRange+this._minPos,!0)}}ga.id="timeseries",ga.defaults=Rs.defaults;var Vg=Object.freeze({__proto__:null,CategoryScale:eo,LinearScale:ua,LogarithmicScale:pa,RadialLinearScale:$s,TimeScale:Rs,TimeSeriesScale:ga});const UM=Object.freeze(Object.defineProperty({__proto__:null,Animation:f_,Animations:Pc,ArcElement:Ds,BarController:Vn,BarElement:Ls,BasePlatform:zc,BasicPlatform:H_,BubbleController:Fn,CategoryScale:eo,Chart:Uc,DatasetController:Ut,Decimation:dg,DomPlatform:j_,DoughnutController:Bi,Element:Xt,Filler:vg,Interaction:L_,Legend:Eg,LineController:Wn,LineElement:Le,LinearScale:ua,LogarithmicScale:pa,PieController:ea,PointElement:Ms,PolarAreaController:zn,RadarController:jn,RadialLinearScale:$s,Scale:oi,ScatterController:Un,SubTitle:Cg,Ticks:Yn,TimeScale:Rs,TimeSeriesScale:ga,Title:xg,Tooltip:Ig,_adapters:D_,_detectPlatform:Y_,animator:xe,controllers:I_,defaults:F,elements:lg,layouts:ft,plugins:Dg,registerables:[I_,lg,Dg,Vg],registry:ne,scales:Vg},Symbol.toStringTag,{value:"Module"}));/*!
+ * chartjs-plugin-datalabels v2.2.0
+ * https://chartjs-plugin-datalabels.netlify.app
+ * (c) 2017-2022 chartjs-plugin-datalabels contributors
+ * Released under the MIT license
+ */var Fg=function(){if(typeof window<"u"){if(window.devicePixelRatio)return window.devicePixelRatio;var s=window.screen;if(s)return(s.deviceXDPI||1)/(s.logicalXDPI||1)}return 1}(),io={toTextLines:function(s){var t=[],e;for(s=[].concat(s);s.length;)e=s.pop(),typeof e=="string"?t.unshift.apply(t,e.split(`
+`)):Array.isArray(e)?s.push.apply(s,e):H(s)||t.unshift(""+e);return t},textSize:function(s,t,e){var i=[].concat(t),n=i.length,o=s.font,r=0,a;for(s.font=e.string,a=0;a<n;++a)r=Math.max(s.measureText(i[a]).width,r);return s.font=o,{height:n*e.lineHeight,width:r}},bound:function(s,t,e){return Math.max(s,Math.min(t,e))},arrayDiff:function(s,t){var e=s.slice(),i=[],n,o,r,a;for(n=0,r=t.length;n<r;++n)a=t[n],o=e.indexOf(a),o===-1?i.push([a,1]):e.splice(o,1);for(n=0,r=e.length;n<r;++n)i.push([e[n],-1]);return i},rasterize:function(s){return Math.round(s*Fg)/Fg}};function nh(s,t){var e=t.x,i=t.y;if(e===null)return{x:0,y:-1};if(i===null)return{x:1,y:0};var n=s.x-e,o=s.y-i,r=Math.sqrt(n*n+o*o);return{x:r?n/r:0,y:r?o/r:-1}}function XM(s,t,e,i,n){switch(n){case"center":e=i=0;break;case"bottom":e=0,i=1;break;case"right":e=1,i=0;break;case"left":e=-1,i=0;break;case"top":e=0,i=-1;break;case"start":e=-e,i=-i;break;case"end":break;default:n*=Math.PI/180,e=Math.cos(n),i=Math.sin(n);break}return{x:s,y:t,vx:e,vy:i}}var GM=0,Wg=1,zg=2,jg=4,Yg=8;function ma(s,t,e){var i=GM;return s<e.left?i|=Wg:s>e.right&&(i|=zg),t<e.top?i|=Yg:t>e.bottom&&(i|=jg),i}function qM(s,t){for(var e=s.x0,i=s.y0,n=s.x1,o=s.y1,r=ma(e,i,t),a=ma(n,o,t),l,c,h;!(!(r|a)||r&a);)l=r||a,l&Yg?(c=e+(n-e)*(t.top-i)/(o-i),h=t.top):l&jg?(c=e+(n-e)*(t.bottom-i)/(o-i),h=t.bottom):l&zg?(h=i+(o-i)*(t.right-e)/(n-e),c=t.right):l&Wg&&(h=i+(o-i)*(t.left-e)/(n-e),c=t.left),l===r?(e=c,i=h,r=ma(e,i,t)):(n=c,o=h,a=ma(n,o,t));return{x0:e,x1:n,y0:i,y1:o}}function ba(s,t){var e=t.anchor,i=s,n,o;return t.clamp&&(i=qM(i,t.area)),e==="start"?(n=i.x0,o=i.y0):e==="end"?(n=i.x1,o=i.y1):(n=(i.x0+i.x1)/2,o=(i.y0+i.y1)/2),XM(n,o,s.vx,s.vy,t.align)}var va={arc:function(s,t){var e=(s.startAngle+s.endAngle)/2,i=Math.cos(e),n=Math.sin(e),o=s.innerRadius,r=s.outerRadius;return ba({x0:s.x+i*o,y0:s.y+n*o,x1:s.x+i*r,y1:s.y+n*r,vx:i,vy:n},t)},point:function(s,t){var e=nh(s,t.origin),i=e.x*s.options.radius,n=e.y*s.options.radius;return ba({x0:s.x-i,y0:s.y-n,x1:s.x+i,y1:s.y+n,vx:e.x,vy:e.y},t)},bar:function(s,t){var e=nh(s,t.origin),i=s.x,n=s.y,o=0,r=0;return s.horizontal?(i=Math.min(s.x,s.base),o=Math.abs(s.base-s.x)):(n=Math.min(s.y,s.base),r=Math.abs(s.base-s.y)),ba({x0:i,y0:n+r,x1:i+o,y1:n,vx:e.x,vy:e.y},t)},fallback:function(s,t){var e=nh(s,t.origin);return ba({x0:s.x,y0:s.y,x1:s.x+(s.width||0),y1:s.y+(s.height||0),vx:e.x,vy:e.y},t)}},Re=io.rasterize;function ZM(s){var t=s.borderWidth||0,e=s.padding,i=s.size.height,n=s.size.width,o=-n/2,r=-i/2;return{frame:{x:o-e.left-t,y:r-e.top-t,w:n+e.width+t*2,h:i+e.height+t*2},text:{x:o,y:r,w:n,h:i}}}function QM(s,t){var e=t.chart.getDatasetMeta(t.datasetIndex).vScale;if(!e)return null;if(e.xCenter!==void 0&&e.yCenter!==void 0)return{x:e.xCenter,y:e.yCenter};var i=e.getBasePixel();return s.horizontal?{x:i,y:null}:{x:null,y:i}}function JM(s){return s instanceof Ds?va.arc:s instanceof Ms?va.point:s instanceof Ls?va.bar:va.fallback}function tL(s,t,e,i,n,o){var r=Math.PI/2;if(o){var a=Math.min(o,n/2,i/2),l=t+a,c=e+a,h=t+i-a,d=e+n-a;s.moveTo(t,c),l<h&&c<d?(s.arc(l,c,a,-Math.PI,-r),s.arc(h,c,a,-r,0),s.arc(h,d,a,0,r),s.arc(l,d,a,r,Math.PI)):l<h?(s.moveTo(l,e),s.arc(h,c,a,-r,r),s.arc(l,c,a,r,Math.PI+r)):c<d?(s.arc(l,c,a,-Math.PI,0),s.arc(l,d,a,0,Math.PI)):s.arc(l,c,a,-Math.PI,Math.PI),s.closePath(),s.moveTo(t,e)}else s.rect(t,e,i,n)}function eL(s,t,e){var i=e.backgroundColor,n=e.borderColor,o=e.borderWidth;!i&&(!n||!o)||(s.beginPath(),tL(s,Re(t.x)+o/2,Re(t.y)+o/2,Re(t.w)-o,Re(t.h)-o,e.borderRadius),s.closePath(),i&&(s.fillStyle=i,s.fill()),n&&o&&(s.strokeStyle=n,s.lineWidth=o,s.lineJoin="miter",s.stroke()))}function iL(s,t,e){var i=e.lineHeight,n=s.w,o=s.x,r=s.y+i/2;return t==="center"?o+=n/2:(t==="end"||t==="right")&&(o+=n),{h:i,w:n,x:o,y:r}}function sL(s,t,e){var i=s.shadowBlur,n=e.stroked,o=Re(e.x),r=Re(e.y),a=Re(e.w);n&&s.strokeText(t,o,r,a),e.filled&&(i&&n&&(s.shadowBlur=0),s.fillText(t,o,r,a),i&&n&&(s.shadowBlur=i))}function nL(s,t,e,i){var n=i.textAlign,o=i.color,r=!!o,a=i.font,l=t.length,c=i.textStrokeColor,h=i.textStrokeWidth,d=c&&h,u;if(!(!l||!r&&!d))for(e=iL(e,n,a),s.font=a.string,s.textAlign=n,s.textBaseline="middle",s.shadowBlur=i.textShadowBlur,s.shadowColor=i.textShadowColor,r&&(s.fillStyle=o),d&&(s.lineJoin="round",s.lineWidth=h,s.strokeStyle=c),u=0,l=t.length;u<l;++u)sL(s,t[u],{stroked:d,filled:r,w:e.w,x:e.x,y:e.y+e.h*u})}var Kg=function(s,t,e,i){var n=this;n._config=s,n._index=i,n._model=null,n._rects=null,n._ctx=t,n._el=e};Te(Kg.prototype,{_modelize:function(s,t,e,i){var n=this,o=n._index,r=lt(tt([e.font,{}],i,o)),a=tt([e.color,F.color],i,o);return{align:tt([e.align,"center"],i,o),anchor:tt([e.anchor,"center"],i,o),area:i.chart.chartArea,backgroundColor:tt([e.backgroundColor,null],i,o),borderColor:tt([e.borderColor,null],i,o),borderRadius:tt([e.borderRadius,0],i,o),borderWidth:tt([e.borderWidth,0],i,o),clamp:tt([e.clamp,!1],i,o),clip:tt([e.clip,!1],i,o),color:a,display:s,font:r,lines:t,offset:tt([e.offset,4],i,o),opacity:tt([e.opacity,1],i,o),origin:QM(n._el,i),padding:pt(tt([e.padding,4],i,o)),positioner:JM(n._el),rotation:tt([e.rotation,0],i,o)*(Math.PI/180),size:io.textSize(n._ctx,t,r),textAlign:tt([e.textAlign,"start"],i,o),textShadowBlur:tt([e.textShadowBlur,0],i,o),textShadowColor:tt([e.textShadowColor,a],i,o),textStrokeColor:tt([e.textStrokeColor,a],i,o),textStrokeWidth:tt([e.textStrokeWidth,0],i,o)}},update:function(s){var t=this,e=null,i=null,n=t._index,o=t._config,r,a,l,c=tt([o.display,!0],s,n);c&&(r=s.dataset.data[n],a=B(G(o.formatter,[r,s]),r),l=H(a)?[]:io.toTextLines(a),l.length&&(e=t._modelize(c,l,o,s),i=ZM(e))),t._model=e,t._rects=i},geometry:function(){return this._rects?this._rects.frame:{}},rotation:function(){return this._model?this._model.rotation:0},visible:function(){return this._model&&this._model.opacity},model:function(){return this._model},draw:function(s,t){var e=this,i=s.ctx,n=e._model,o=e._rects,r;this.visible()&&(i.save(),n.clip&&(r=n.area,i.beginPath(),i.rect(r.left,r.top,r.right-r.left,r.bottom-r.top),i.clip()),i.globalAlpha=io.bound(0,n.opacity,1),i.translate(Re(t.x),Re(t.y)),i.rotate(n.rotation),eL(i,o.frame,n),nL(i,n.lines,o.text,n),i.restore())}});var oL=Number.MIN_SAFE_INTEGER||-9007199254740991,rL=Number.MAX_SAFE_INTEGER||9007199254740991;function so(s,t,e){var i=Math.cos(e),n=Math.sin(e),o=t.x,r=t.y;return{x:o+i*(s.x-o)-n*(s.y-r),y:r+n*(s.x-o)+i*(s.y-r)}}function Ug(s,t){var e=rL,i=oL,n=t.origin,o,r,a,l,c;for(o=0;o<s.length;++o)r=s[o],a=r.x-n.x,l=r.y-n.y,c=t.vx*a+t.vy*l,e=Math.min(e,c),i=Math.max(i,c);return{min:e,max:i}}function ya(s,t){var e=t.x-s.x,i=t.y-s.y,n=Math.sqrt(e*e+i*i);return{vx:(t.x-s.x)/n,vy:(t.y-s.y)/n,origin:s,ln:n}}var Xg=function(){this._rotation=0,this._rect={x:0,y:0,w:0,h:0}};Te(Xg.prototype,{center:function(){var s=this._rect;return{x:s.x+s.w/2,y:s.y+s.h/2}},update:function(s,t,e){this._rotation=e,this._rect={x:t.x+s.x,y:t.y+s.y,w:t.w,h:t.h}},contains:function(s){var t=this,e=1,i=t._rect;return s=so(s,t.center(),-t._rotation),!(s.x<i.x-e||s.y<i.y-e||s.x>i.x+i.w+e*2||s.y>i.y+i.h+e*2)},intersects:function(s){var t=this._points(),e=s._points(),i=[ya(t[0],t[1]),ya(t[0],t[3])],n,o,r;for(this._rotation!==s._rotation&&i.push(ya(e[0],e[1]),ya(e[0],e[3])),n=0;n<i.length;++n)if(o=Ug(t,i[n]),r=Ug(e,i[n]),o.max<r.min||r.max<o.min)return!1;return!0},_points:function(){var s=this,t=s._rect,e=s._rotation,i=s.center();return[so({x:t.x,y:t.y},i,e),so({x:t.x+t.w,y:t.y},i,e),so({x:t.x+t.w,y:t.y+t.h},i,e),so({x:t.x,y:t.y+t.h},i,e)]}});function Gg(s,t,e){var i=t.positioner(s,t),n=i.vx,o=i.vy;if(!n&&!o)return{x:i.x,y:i.y};var r=e.w,a=e.h,l=t.rotation,c=Math.abs(r/2*Math.cos(l))+Math.abs(a/2*Math.sin(l)),h=Math.abs(r/2*Math.sin(l))+Math.abs(a/2*Math.cos(l)),d=1/Math.max(Math.abs(n),Math.abs(o));return c*=n*d,h*=o*d,c+=t.offset*n,h+=t.offset*o,{x:i.x+c,y:i.y+h}}function aL(s,t){var e,i,n,o;for(e=s.length-1;e>=0;--e)for(n=s[e].$layout,i=e-1;i>=0&&n._visible;--i)o=s[i].$layout,o._visible&&n._box.intersects(o._box)&&t(n,o);return s}function lL(s){var t,e,i,n,o,r,a;for(t=0,e=s.length;t<e;++t)i=s[t],n=i.$layout,n._visible&&(a=new Proxy(i._el,{get:(l,c)=>l.getProps([c],!0)[c]}),o=i.geometry(),r=Gg(a,i.model(),o),n._box.update(r,o,i.rotation()));return aL(s,function(l,c){var h=l._hidable,d=c._hidable;h&&d||d?c._visible=!1:h&&(l._visible=!1)})}var no={prepare:function(s){var t=[],e,i,n,o,r;for(e=0,n=s.length;e<n;++e)for(i=0,o=s[e].length;i<o;++i)r=s[e][i],t.push(r),r.$layout={_box:new Xg,_hidable:!1,_visible:!0,_set:e,_idx:r._index};return t.sort(function(a,l){var c=a.$layout,h=l.$layout;return c._idx===h._idx?h._set-c._set:h._idx-c._idx}),this.update(t),t},update:function(s){var t=!1,e,i,n,o,r;for(e=0,i=s.length;e<i;++e)n=s[e],o=n.model(),r=n.$layout,r._hidable=o&&o.display==="auto",r._visible=n.visible(),t|=r._hidable;t&&lL(s)},lookup:function(s,t){var e,i;for(e=s.length-1;e>=0;--e)if(i=s[e].$layout,i&&i._visible&&i._box.contains(t))return s[e];return null},draw:function(s,t){var e,i,n,o,r,a;for(e=0,i=t.length;e<i;++e)n=t[e],o=n.$layout,o._visible&&(r=n.geometry(),a=Gg(n._el,n.model(),r),o._box.update(a,r,n.rotation()),n.draw(s,a))}},cL=function(s){if(H(s))return null;var t=s,e,i,n;if(V(s))if(!H(s.label))t=s.label;else if(!H(s.r))t=s.r;else for(t="",e=Object.keys(s),n=0,i=e.length;n<i;++n)t+=(n!==0?", ":"")+e[n]+": "+s[e[n]];return""+t},hL={align:"center",anchor:"center",backgroundColor:null,borderColor:null,borderRadius:0,borderWidth:0,clamp:!1,clip:!1,color:void 0,display:!0,font:{family:void 0,lineHeight:1.2,size:void 0,style:void 0,weight:null},formatter:cL,labels:void 0,listeners:{},offset:4,opacity:1,padding:{top:4,right:4,bottom:4,left:4},rotation:0,textAlign:"start",textStrokeColor:void 0,textStrokeWidth:0,textShadowBlur:0,textShadowColor:void 0},Dt="$datalabels",qg="$default";function dL(s,t){var e=s.datalabels,i={},n=[],o,r;return e===!1?null:(e===!0&&(e={}),t=Te({},[t,e]),o=t.labels||{},r=Object.keys(o),delete t.labels,r.length?r.forEach(function(a){o[a]&&n.push(Te({},[t,o[a],{_key:a}]))}):n.push(t),i=n.reduce(function(a,l){return U(l.listeners||{},function(c,h){a[h]=a[h]||{},a[h][l._key||qg]=c}),delete l.listeners,a},{}),{labels:n,listeners:i})}function oh(s,t,e,i){if(t){var n=e.$context,o=e.$groups,r;t[o._set]&&(r=t[o._set][o._key],r&&G(r,[n,i])===!0&&(s[Dt]._dirty=!0,e.update(n)))}}function uL(s,t,e,i,n){var o,r;!e&&!i||(e?i?e!==i&&(r=o=!0):r=!0:o=!0,r&&oh(s,t.leave,e,n),o&&oh(s,t.enter,i,n))}function pL(s,t){var e=s[Dt],i=e._listeners,n,o;if(!(!i.enter&&!i.leave)){if(t.type==="mousemove")o=no.lookup(e._labels,t);else if(t.type!=="mouseout")return;n=e._hovered,e._hovered=o,uL(s,i,n,o,t)}}function fL(s,t){var e=s[Dt],i=e._listeners.click,n=i&&no.lookup(e._labels,t);n&&oh(s,i,n,t)}var _L={id:"datalabels",defaults:hL,beforeInit:function(s){s[Dt]={_actives:[]}},beforeUpdate:function(s){var t=s[Dt];t._listened=!1,t._listeners={},t._datasets=[],t._labels=[]},afterDatasetUpdate:function(s,t,e){var i=t.index,n=s[Dt],o=n._datasets[i]=[],r=s.isDatasetVisible(i),a=s.data.datasets[i],l=dL(a,e),c=t.meta.data||[],h=s.ctx,d,u,p,f,b,v,y,T;for(h.save(),d=0,p=c.length;d<p;++d)if(y=c[d],y[Dt]=[],r&&y&&s.getDataVisibility(d)&&!y.skip)for(u=0,f=l.labels.length;u<f;++u)b=l.labels[u],v=b._key,T=new Kg(b,h,y,d),T.$groups={_set:i,_key:v||qg},T.$context={active:!1,chart:s,dataIndex:d,dataset:a,datasetIndex:i},T.update(T.$context),y[Dt].push(T),o.push(T);h.restore(),Te(n._listeners,l.listeners,{merger:function(x,E,C){E[x]=E[x]||{},E[x][t.index]=C[x],n._listened=!0}})},afterUpdate:function(s){s[Dt]._labels=no.prepare(s[Dt]._datasets)},afterDatasetsDraw:function(s){no.draw(s,s[Dt]._labels)},beforeEvent:function(s,t){if(s[Dt]._listened){var e=t.event;switch(e.type){case"mousemove":case"mouseout":pL(s,e);break;case"click":fL(s,e);break}}},afterEvent:function(s){var t=s[Dt],e=t._actives,i=t._actives=s.getActiveElements(),n=io.arrayDiff(e,i),o,r,a,l,c,h,d;for(o=0,r=n.length;o<r;++o)if(c=n[o],c[1])for(d=c[0].element[Dt]||[],a=0,l=d.length;a<l;++a)h=d[a],h.$context.active=c[1]===1,h.update(h.$context);(t._dirty||n.length)&&(no.update(t._labels),s.render()),delete t._dirty}};const gL=Object.freeze(Object.defineProperty({__proto__:null,default:_L},Symbol.toStringTag,{value:"Module"}));N.Alert=Ws,N.Animate=Gs,N.Autocomplete=Pr,N.Button=ao,N.Carousel=he,N.Chart=yp,N.Chip=ki,N.ChipsInput=gp,N.Clipboard=Ar,N.Collapse=ce,N.Datatable=pr,N.Datepicker=xl,N.Datetimepicker=Dr,N.Dropdown=Ft,N.InfiniteScroll=kr,N.Input=Z,N.LazyLoad=yn,N.Lightbox=ys,N.LoadingManagement=Or,N.Modal=Ys,N.MultiRangeSlider=Hr,N.Offcanvas=ts,N.PerfectScrollbar=ms,N.Popconfirm=_r,N.Popover=Eo,N.Rating=Bp,N.Ripple=Ye,N.ScrollSpy=xo,N.Select=on,N.Sidenav=Ii,N.SmoothScroll=xr,N.Stepper=Wu,N.Sticky=Lr,N.Tab=wo,N.Timepicker=Ll,N.Toast=Xs,N.Tooltip=is,N.Touch=Er,N.Validation=Tr,N.initTE=ff,Object.defineProperty(N,Symbol.toStringTag,{value:"Module"})});
+
+
+    </script>
+  </body>
+</html>